last executing test programs: 12m55.417947347s ago: executing program 3 (id=4): openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d02000000000000001800000000"], 0x38}, 0x41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xfc, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, 0x0, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000280)={r0}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000240)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f0000000a80)=ANY=[@ANYBLOB="18090000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095001d00000000004796b8f2b889d6c8ff1f359a88bca5147158cb9c39904fe6723bcbe2002b2083ed7d74cdcfb54890d3d9c93cc738d69d440b97274dd32c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_type(r4, &(0x7f0000000540), 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305828, &(0x7f0000000040)=0x20000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x46, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdf4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x0, 0x80000}, {0x0, 0x4, 0x10006}]}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 12m55.168614353s ago: executing program 1 (id=2): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) close(0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4421, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x3ffffe, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40002000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffde2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x8, 0x0, 0x0, 0x6, 0xb17, 0xa, 0xfffd, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0xa, 0x2, 0x0) close(r3) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) 12m55.115275154s ago: executing program 3 (id=6): r0 = socket$kcm(0x10, 0x7, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb1b0018000000000000000c0000000c0000000200000000000000000091ed000000000000"], 0x0, 0x26}, 0x28) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000005000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001c5e83c4e230109fc85ca80725521e3bcff67042d4c8d5eb1871e743a69b16171317fbd371c813e0af09544d"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0xf9, 0x66, 0x7, 0x3, 0x0, 0x2, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x7}, 0x910, 0x8, 0xae3343a, 0x9, 0x981, 0x40, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffffff8}, r6, 0x2, r2, 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r6, 0x12) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) r9 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f00000000c0)='THAWED\x00', 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="c88d437a77dc8ad766bab54784c9dd83492a8b78c6ad30d55dde20b212771693", @ANYRESOCT=r1], &(0x7f0000000280)='GPL\x00', 0x405, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4}, 0x10}, 0x94) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 12m54.283223084s ago: executing program 0 (id=1): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000200000000007f00000000070000000c0062062fc1038ccc0000b29ff711f2ce400000000000000d29e78875d087286ac1d573e5732a8507b9331247a574ac68366765a13eb20e8b48dee4cf29989fa1ec2059c4ccbdd4aead69f6a2ce8d06e986eee48baead8b63aa5e7fc0d3a6a340ecbdf1e0e2665fb5c194fc3ef92c8064a050a2"], &(0x7f0000000000)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000056605b9dd1c15925000034000000340000000500000003000000000000110300000000000000000000000000000400000000000028e196f9de8e87000001000084000000000000000002000000000000090000002e00"], 0x0, 0x51}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000}, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x11424, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, r3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) r10 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000080)=r7, 0x12) 12m54.238077835s ago: executing program 3 (id=7): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) close(0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4421, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x3ffffe, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40002000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffde2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x8, 0x0, 0x0, 0x6, 0xb17, 0xa, 0xfffd, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0xa, 0x2, 0x0) close(r3) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) 12m54.202301496s ago: executing program 4 (id=5): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1a, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8005}, 0xb041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x9, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8970, &(0x7f0000001a80)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 9.195556177s ago: executing program 2 (id=4853): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c00a, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x100) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) 8.22902983s ago: executing program 2 (id=4847): socket$kcm(0x28, 0x5, 0x0) socket$kcm(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0xc10a, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)='+', 0x1}], 0x1}, 0x4044004) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 8.038174575s ago: executing program 2 (id=4851): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x1d, 0x1, 0x7, &(0x7f0000000200), 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@ifindex=r1, 0xffffffffffffffff, 0x36, 0x2, 0xffffffffffffffff, @void, @value, @void, @void, r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) 5.055610617s ago: executing program 8 (id=4852): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x35a, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200)=r3, 0x4) setsockopt$sock_attach_bpf(r0, 0x6, 0x16, &(0x7f0000000200)=r3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) 4.978732869s ago: executing program 2 (id=4854): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x9, 0x8, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x407fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000002640), 0x82000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 4.771113454s ago: executing program 8 (id=4855): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x2}, 0x1302, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000071000000180100000120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0xb, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @multicast1=0xe000000d}, 0x10, 0x0}, 0x0) 4.53638792s ago: executing program 8 (id=4857): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, 0x0, 0x200040c4) r1 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r1, 0x12) socketpair(0x28, 0x5, 0x28, &(0x7f0000001400)) r2 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0xd) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.329278075s ago: executing program 8 (id=4858): bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b70300000000d900850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x55, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef7712", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc00000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 2.544398308s ago: executing program 7 (id=4862): socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x80ffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x10, 0x0, 0x9, 0xf60, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu<-0\t&&') syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.314059034s ago: executing program 7 (id=4863): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x4}, 0x100001, 0xca, 0x5, 0x5, 0x6, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010002"], 0x0, 0x42}, 0x28) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a) 2.174742767s ago: executing program 5 (id=4864): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.145928848s ago: executing program 8 (id=4865): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) 2.082666429s ago: executing program 6 (id=4866): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x4}, 0x10002a, 0xb, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7fffffe}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0xd, '\x00'}, {0x18, 0x110, 0x1, '\x00'}, {0x90, 0x3a, 0x80000001, "e351fdf5f161aa65a54770adb962016106e177aa034335ae809feb0b28bf58de896d3def026f70bff9762b042c2d96b24362bac99524b56120e66fe1c7a3a05a53b20bb28703416c3da0e6db1531665632c5731a36741123b6389362b55d6d5f461f24d7d847296e533a871fd9dee235bb504607875a88f9326d2a66"}, {0x70, 0x0, 0x5, "313c327f1f6e3028e3d716ec23bb1edb2c8142ac581b519dee7cfb620abdc2f71e9620cf0d84a817df6a1b094a459887187f933e96f909f408b7549572ed0f6310973db2614ee7a9c67237464c68535401c62b017df7c46829e39a440aac2c"}], 0x130}, 0x800) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x20}, 0x80, 0x0}, 0x20040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d40100004000000018000000000000000000000000000000950000000000000038722c013653e84c584fdd38a1990000dfe83640d72226cbc0c89b926a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x6}, 0x80) setsockopt$sock_attach_bpf(r2, 0x0, 0x21, 0x0, 0x4f) syz_clone(0x2003000, &(0x7f0000000000)="1d9a18e58585728294448ee19d3c9b46282cac1f887d33fbf80d2bb515e9bdcec74050534f982568026c9362ac2ca2109c75faa5505b439c32ec08097f7f324d1f3b5169ebce7877833251a78f3a6a0c89d790ed7eee629939a2458975", 0x5d, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)="159a5285c8ea33fc46923c3f8a892855ac2245f2dda37d273466713bf3eb09c8f9f84ec8eda949b8800877ad7bc3f97419f069760b2c0ae2c003f1c8ecaa8fcdff801fd204f8adf0c91048400f60190c94241fce88a23855a70fc018148d70ffb1e1b439de10a26fa16325d70059f301f6ad4d4209f545387f5a2b3c2a65a647db1544f9fcf26a13b554a1807445de29463fea271116ea68334eb37d4aa61dd9ef79") 2.082344659s ago: executing program 7 (id=4867): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r1, 0x0, 0x4000040) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x882, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x23, 0x5, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x94040000}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x7ffff, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0xc, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x84, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11, 0x16010000}}], 0x98}, 0x0) 2.05778177s ago: executing program 2 (id=4868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)=r1}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, 0x0, 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) 1.903096024s ago: executing program 5 (id=4869): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x80, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20016100) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="6f4913451e8b"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18024cf7b0b1fcc0feae000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00d3ff008c71ef28ff4b"], 0xffdd) 1.690705919s ago: executing program 7 (id=4870): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6f5}, 0x0, 0x7, 0x0, 0x0, 0x13ffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='(pu&00\t||') socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.288889539s ago: executing program 5 (id=4871): r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000480)) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.288663579s ago: executing program 6 (id=4872): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffba, 0x3}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x5, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100e68, 0x0, 0x4000, 0x0, 0x7}, 0x0, 0x0, r0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[@ANYRES8=r2, @ANYRES8=r7], 0x12) 1.268813569s ago: executing program 7 (id=4873): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006", 0x39}], 0x1}, 0x24004880) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 928.264517ms ago: executing program 5 (id=4874): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2dc, 0x40602, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x1, 0x6, &(0x7f0000000140)) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfdef) 658.707304ms ago: executing program 5 (id=4875): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) 158.900776ms ago: executing program 8 (id=4876): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x4}, 0x100001, 0xca, 0x5, 0x5, 0x6, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010002"], 0x0, 0x42}, 0x28) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a) 148.225706ms ago: executing program 7 (id=4877): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000680), &(0x7f0000000700)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 70.173198ms ago: executing program 5 (id=4878): socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 0s ago: executing program 6 (id=4879): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0xa8}, 0x14002) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) kernel console output (not intermixed with test programs): m6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.460343][T12677] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.469891][T12677] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.520607][T12677] team0 (unregistering): Port device geneve1 removed [ 487.635440][T12694] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2181'. [ 487.954007][T12705] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.2174'. [ 488.304189][T12713] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 488.346425][T12713] CPU: 1 PID: 12713 Comm: syz.2.2176 Not tainted syzkaller #0 [ 488.353980][T12713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 488.364066][T12713] Call Trace: [ 488.367373][T12713] [ 488.370334][T12713] dump_stack_lvl+0x188/0x24e [ 488.375062][T12713] ? show_regs_print_info+0x12/0x12 [ 488.380305][T12713] ? load_image+0x410/0x410 [ 488.384858][T12713] sysfs_warn_dup+0x8a/0xa0 [ 488.389414][T12713] sysfs_do_create_link_sd+0xc0/0x110 [ 488.394836][T12713] device_add+0x83b/0x1050 [ 488.399298][T12713] wiphy_register+0x1d8b/0x2aa0 [ 488.404213][T12713] ? cfg80211_event_work+0x40/0x40 [ 488.409361][T12713] ? minstrel_ht_alloc+0x894/0xa20 [ 488.414499][T12713] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 488.420604][T12713] ieee80211_register_hw+0x2d48/0x39f0 [ 488.426311][T12713] ? ieee80211_register_hw+0xee1/0x39f0 [ 488.431879][T12713] ? ieee80211_register_hw+0xee1/0x39f0 [ 488.437612][T12713] ? ieee80211_tasklet_handler+0x20/0x20 [ 488.443247][T12713] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 488.449145][T12713] ? __debug_object_init+0xed/0x440 [ 488.454352][T12713] ? memset+0x1e/0x40 [ 488.458341][T12713] ? __hrtimer_init+0x189/0x270 [ 488.463201][T12713] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 488.468941][T12713] ? memcpy+0x3c/0x60 [ 488.472931][T12713] hwsim_new_radio_nl+0xab7/0xc90 [ 488.477970][T12713] genl_family_rcv_msg_doit+0x22f/0x350 [ 488.483520][T12713] ? end_current_label_crit_section+0x170/0x170 [ 488.489786][T12713] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 488.495685][T12713] ? bpf_lsm_capable+0x5/0x10 [ 488.500361][T12713] ? security_capable+0x85/0xb0 [ 488.505222][T12713] genl_rcv_msg+0x601/0x790 [ 488.509730][T12713] ? genl_bind+0x360/0x360 [ 488.514144][T12713] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 488.520488][T12713] netlink_rcv_skb+0x1ef/0x440 [ 488.525259][T12713] ? genl_bind+0x360/0x360 [ 488.529680][T12713] ? netlink_ack+0x1160/0x1160 [ 488.534451][T12713] ? down_read+0x1a8/0x2d0 [ 488.538868][T12713] genl_rcv+0x24/0x40 [ 488.542847][T12713] netlink_unicast+0x7ad/0x920 [ 488.547709][T12713] netlink_sendmsg+0x8ad/0xbd0 [ 488.552487][T12713] ? netlink_getsockopt+0x550/0x550 [ 488.557692][T12713] ? apparmor_socket_sendmsg+0x8a/0x330 [ 488.563244][T12713] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 488.568530][T12713] ? security_socket_sendmsg+0x7c/0xa0 [ 488.573994][T12713] ? netlink_getsockopt+0x550/0x550 [ 488.579204][T12713] ____sys_sendmsg+0x5ed/0x9a0 [ 488.583982][T12713] ? __sys_sendmsg_sock+0x30/0x30 [ 488.589007][T12713] ? __import_iovec+0x306/0x510 [ 488.593867][T12713] ? import_iovec+0x6f/0xa0 [ 488.598373][T12713] ___sys_sendmsg+0x2a2/0x360 [ 488.603058][T12713] ? __sys_sendmsg+0x2a0/0x2a0 [ 488.607847][T12713] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 488.613666][T12713] __se_sys_sendmsg+0x1c3/0x2b0 [ 488.618534][T12713] ? __x64_sys_sendmsg+0x80/0x80 [ 488.623515][T12713] ? syscall_enter_from_user_mode+0x2a/0x80 [ 488.629528][T12713] do_syscall_64+0x4c/0xa0 [ 488.633962][T12713] ? clear_bhb_loop+0x60/0xb0 [ 488.638650][T12713] ? clear_bhb_loop+0x60/0xb0 [ 488.643344][T12713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.649236][T12713] RIP: 0033:0x7f629a99e0d9 [ 488.653657][T12713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.673274][T12713] RSP: 002b:00007f629b79e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.681692][T12713] RAX: ffffffffffffffda RBX: 00007f629ac26090 RCX: 00007f629a99e0d9 [ 488.689694][T12713] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 488.697663][T12713] RBP: 00007f629aa35024 R08: 0000000000000000 R09: 0000000000000000 [ 488.705633][T12713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.713602][T12713] R13: 00007f629ac26128 R14: 00007f629ac26090 R15: 00007ffd3e9a0848 [ 488.721586][T12713] [ 488.804118][T12715] validate_nla: 4 callbacks suppressed [ 488.804155][T12715] netlink: 'syz.6.2177': attribute type 10 has an invalid length. [ 488.832751][T12723] netlink: 'syz.8.2179': attribute type 3 has an invalid length. [ 489.481547][T12744] netlink: 'syz.8.2186': attribute type 3 has an invalid length. [ 489.903596][T12754] netlink: 'syz.8.2189': attribute type 3 has an invalid length. [ 489.920437][T12755] netlink: 'syz.5.2188': attribute type 1 has an invalid length. [ 490.042573][T12759] netlink: 'syz.2.2191': attribute type 11 has an invalid length. [ 490.176231][T12763] netlink: 'syz.2.2191': attribute type 11 has an invalid length. [ 490.259916][T12757] netlink: 'syz.6.2200': attribute type 3 has an invalid length. [ 490.355362][T12757] __nla_validate_parse: 14 callbacks suppressed [ 490.355452][T12757] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.2200'. [ 490.432005][T12758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.453942][T12761] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2190'. [ 490.546761][T12767] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.2192'. [ 490.568988][T12767] netlink: 'syz.8.2192': attribute type 3 has an invalid length. [ 490.578305][T12767] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.2192'. [ 490.811565][T12771] netlink: 'syz.6.2195': attribute type 1 has an invalid length. [ 490.920802][T12773] netlink: 'syz.8.2194': attribute type 10 has an invalid length. [ 491.010905][T12777] netlink: 'syz.5.2207': attribute type 3 has an invalid length. [ 491.047121][T12777] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2207'. [ 491.237367][T12785] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2198'. [ 491.376652][T12785] netlink: 62779 bytes leftover after parsing attributes in process `syz.8.2198'. [ 491.478769][T12792] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2203'. [ 491.532144][T12793] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2203'. [ 491.712096][T12801] netlink: 122896 bytes leftover after parsing attributes in process `syz.8.2206'. [ 491.782349][T12801] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 493.133057][T12835] bridge0: port 5(veth0_vlan) entered blocking state [ 493.164659][T12835] bridge0: port 5(veth0_vlan) entered disabled state [ 493.268400][T12835] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 493.426094][T12841] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 494.064385][T12861] validate_nla: 16 callbacks suppressed [ 494.064422][T12861] netlink: 'syz.2.2231': attribute type 3 has an invalid length. [ 494.570590][T12877] netlink: 'syz.8.2238': attribute type 10 has an invalid length. [ 494.740600][T12882] netlink: 'syz.7.2239': attribute type 10 has an invalid length. [ 494.782371][T12882] netlink: 'syz.7.2239': attribute type 25 has an invalid length. [ 494.835476][T12882] netlink: 'syz.7.2239': attribute type 25 has an invalid length. [ 495.218896][T12891] netlink: 'syz.5.2242': attribute type 10 has an invalid length. [ 495.338867][T12892] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 495.425560][T12894] __nla_validate_parse: 23 callbacks suppressed [ 495.425578][T12894] netlink: 62779 bytes leftover after parsing attributes in process `syz.5.2242'. [ 495.643248][T12900] netlink: 'syz.6.2244': attribute type 10 has an invalid length. [ 495.670780][T12903] netlink: 'syz.2.2246': attribute type 3 has an invalid length. [ 495.702905][T12903] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2246'. [ 495.716044][T12900] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2244'. [ 495.787403][T12900] bridge0: port 3(veth0_vlan) entered blocking state [ 495.839339][T12900] bridge0: port 3(veth0_vlan) entered disabled state [ 496.163983][T12900] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 496.312737][T12913] netlink: 'syz.8.2250': attribute type 1 has an invalid length. [ 496.335747][T12916] netlink: 'syz.5.2251': attribute type 10 has an invalid length. [ 496.370467][T12916] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2251'. [ 496.669997][T12921] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2252'. [ 496.881116][T12930] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.2256'. [ 497.007309][T12932] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2267'. [ 497.292897][T12942] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.2259'. [ 497.389477][T12942] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.2259'. [ 497.855384][T12953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.929263][T12953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.997541][T12953] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 498.045323][T12954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2262'. [ 498.418834][T12966] bridge0: port 5(veth0_vlan) entered blocking state [ 498.473663][T12966] bridge0: port 5(veth0_vlan) entered disabled state [ 499.027871][T12966] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 499.068803][T12958] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 499.103006][T12968] validate_nla: 5 callbacks suppressed [ 499.103042][T12968] netlink: 'syz.7.2266': attribute type 1 has an invalid length. [ 499.138524][T12971] netlink: 'syz.6.2268': attribute type 10 has an invalid length. [ 499.187070][T12971] device wlan1 left promiscuous mode [ 499.213166][T12976] netlink: 'syz.2.2270': attribute type 5 has an invalid length. [ 499.241137][T12976] netlink: 'syz.2.2270': attribute type 1 has an invalid length. [ 499.330599][T12976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.793160][T12985] netlink: 'syz.8.2272': attribute type 10 has an invalid length. [ 499.971088][T12986] netlink: 'syz.6.2274': attribute type 3 has an invalid length. [ 500.396068][T12995] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 500.759630][T13001] __nla_validate_parse: 7 callbacks suppressed [ 500.759668][T13001] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2280'. [ 501.032789][T13009] netlink: 'syz.5.2282': attribute type 1 has an invalid length. [ 501.182371][T13011] netlink: 122896 bytes leftover after parsing attributes in process `syz.7.2284'. [ 501.319766][T13011] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 501.338399][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.344766][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.360119][T13011] CPU: 0 PID: 13011 Comm: syz.7.2284 Not tainted syzkaller #0 [ 501.367639][T13011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 501.377714][T13011] Call Trace: [ 501.381017][T13011] [ 501.383964][T13011] dump_stack_lvl+0x188/0x24e [ 501.388687][T13011] ? show_regs_print_info+0x12/0x12 [ 501.393915][T13011] ? load_image+0x410/0x410 [ 501.398464][T13011] sysfs_warn_dup+0x8a/0xa0 [ 501.403002][T13011] sysfs_do_create_link_sd+0xc0/0x110 [ 501.408406][T13011] device_add+0x83b/0x1050 [ 501.412861][T13011] wiphy_register+0x1d8b/0x2aa0 [ 501.417769][T13011] ? cfg80211_event_work+0x40/0x40 [ 501.422955][T13011] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 501.429146][T13011] ? ieee80211_register_hw+0x2981/0x39f0 [ 501.434819][T13011] ieee80211_register_hw+0x2d48/0x39f0 [ 501.440324][T13011] ? ieee80211_register_hw+0xee1/0x39f0 [ 501.445895][T13011] ? ieee80211_register_hw+0xee1/0x39f0 [ 501.451466][T13011] ? ieee80211_tasklet_handler+0x20/0x20 [ 501.457106][T13011] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 501.463107][T13011] ? __debug_object_init+0xed/0x440 [ 501.468312][T13011] ? memset+0x1e/0x40 [ 501.472297][T13011] ? __hrtimer_init+0x189/0x270 [ 501.477153][T13011] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 501.482882][T13011] ? memcpy+0x3c/0x60 [ 501.486861][T13011] hwsim_new_radio_nl+0xab7/0xc90 [ 501.491891][T13011] genl_family_rcv_msg_doit+0x22f/0x350 [ 501.497433][T13011] ? end_current_label_crit_section+0x170/0x170 [ 501.503678][T13011] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 501.509572][T13011] ? bpf_lsm_capable+0x5/0x10 [ 501.514249][T13011] ? security_capable+0x85/0xb0 [ 501.519103][T13011] genl_rcv_msg+0x601/0x790 [ 501.523610][T13011] ? genl_bind+0x360/0x360 [ 501.528020][T13011] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 501.534357][T13011] netlink_rcv_skb+0x1ef/0x440 [ 501.539125][T13011] ? genl_bind+0x360/0x360 [ 501.543534][T13011] ? netlink_ack+0x1160/0x1160 [ 501.548306][T13011] ? down_read+0x1a8/0x2d0 [ 501.552716][T13011] genl_rcv+0x24/0x40 [ 501.556687][T13011] netlink_unicast+0x7ad/0x920 [ 501.561482][T13011] netlink_sendmsg+0x8ad/0xbd0 [ 501.566262][T13011] ? netlink_getsockopt+0x550/0x550 [ 501.571464][T13011] ? apparmor_socket_sendmsg+0x8a/0x330 [ 501.577020][T13011] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 501.582307][T13011] ? security_socket_sendmsg+0x7c/0xa0 [ 501.587763][T13011] ? netlink_getsockopt+0x550/0x550 [ 501.592965][T13011] ____sys_sendmsg+0x5ed/0x9a0 [ 501.597736][T13011] ? __sys_sendmsg_sock+0x30/0x30 [ 501.602758][T13011] ? __import_iovec+0x306/0x510 [ 501.607614][T13011] ? import_iovec+0x6f/0xa0 [ 501.612114][T13011] ___sys_sendmsg+0x2a2/0x360 [ 501.616788][T13011] ? migrate_enable+0x148/0x220 [ 501.621743][T13011] ? __sys_sendmsg+0x2a0/0x2a0 [ 501.626544][T13011] __se_sys_sendmsg+0x1c3/0x2b0 [ 501.631396][T13011] ? __x64_sys_sendmsg+0x80/0x80 [ 501.636341][T13011] ? syscall_enter_from_user_mode+0x2a/0x80 [ 501.642229][T13011] do_syscall_64+0x4c/0xa0 [ 501.646649][T13011] ? clear_bhb_loop+0x60/0xb0 [ 501.651320][T13011] ? clear_bhb_loop+0x60/0xb0 [ 501.655990][T13011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 501.661877][T13011] RIP: 0033:0x7fbe85f9e0d9 [ 501.666282][T13011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.685878][T13011] RSP: 002b:00007fbe86e01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.694282][T13011] RAX: ffffffffffffffda RBX: 00007fbe86225fa0 RCX: 00007fbe85f9e0d9 [ 501.702245][T13011] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 501.710205][T13011] RBP: 00007fbe86035024 R08: 0000000000000000 R09: 0000000000000000 [ 501.718254][T13011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.726213][T13011] R13: 00007fbe86226038 R14: 00007fbe86225fa0 R15: 00007ffe7066c648 [ 501.734188][T13011] [ 501.807324][T13020] netlink: 'syz.5.2289': attribute type 10 has an invalid length. [ 501.867477][T13020] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2289'. [ 501.978135][T13026] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2290'. [ 502.037751][T13026] netlink: 'syz.2.2290': attribute type 3 has an invalid length. [ 502.063560][T13026] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2290'. [ 502.420894][T13035] netlink: 'syz.6.2291': attribute type 10 has an invalid length. [ 502.467500][T13035] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2291'. [ 502.546016][T13037] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2293'. [ 502.795581][T13047] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2297'. [ 502.798597][T13046] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.2296'. [ 502.984562][T13047] bridge0: port 4(bond0) entered disabled state [ 503.601362][T13063] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2303'. [ 504.218612][T13079] validate_nla: 5 callbacks suppressed [ 504.218630][T13079] netlink: 'syz.6.2310': attribute type 5 has an invalid length. [ 504.342304][T13079] netlink: 'syz.6.2310': attribute type 1 has an invalid length. [ 504.350934][T13079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.377041][T13081] netlink: 'syz.5.2309': attribute type 10 has an invalid length. [ 504.421411][T13081] netlink: 'syz.5.2309': attribute type 25 has an invalid length. [ 504.455452][T13081] netlink: 'syz.5.2309': attribute type 25 has an invalid length. [ 504.837067][T13095] netlink: 'syz.6.2316': attribute type 1 has an invalid length. [ 504.887133][T13096] netlink: 'syz.5.2318': attribute type 3 has an invalid length. [ 505.101214][T13101] netlink: 'syz.2.2320': attribute type 10 has an invalid length. [ 505.596619][T13112] netlink: 'syz.2.2321': attribute type 10 has an invalid length. [ 505.629864][T13112] bridge0: port 3(veth0_vlan) entered blocking state [ 505.661344][T13112] bridge0: port 3(veth0_vlan) entered disabled state [ 505.863834][T13112] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 505.921869][T13117] netlink: 'syz.5.2326': attribute type 5 has an invalid length. [ 505.942044][T13117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.504479][T13120] __nla_validate_parse: 9 callbacks suppressed [ 506.504515][T13120] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2329'. [ 506.546061][T13121] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2338'. [ 506.769031][T13131] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2332'. [ 507.402605][T13149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.457774][T13145] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2349'. [ 507.846664][T13163] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2342'. [ 507.871677][T13163] bridge0: port 3(veth0_vlan) entered blocking state [ 507.891889][T13163] bridge0: port 3(veth0_vlan) entered disabled state [ 508.238010][T13163] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 508.323578][T13161] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2341'. [ 508.923215][T13174] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2345'. [ 509.482673][T13185] validate_nla: 13 callbacks suppressed [ 509.482709][T13185] netlink: 'syz.8.2350': attribute type 1 has an invalid length. [ 509.648207][T13185] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2350'. [ 509.754364][T13190] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.2352'. [ 510.838793][T13207] netlink: 'syz.7.2361': attribute type 19 has an invalid length. [ 510.885048][T13207] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2361'. [ 511.672970][T13223] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.2368'. [ 512.094813][T13234] netlink: 'syz.7.2374': attribute type 10 has an invalid length. [ 512.125298][T13234] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2374'. [ 512.387288][T13242] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.2377'. [ 512.457026][T13242] netlink: 'syz.5.2377': attribute type 3 has an invalid length. [ 512.500494][T13242] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2377'. [ 513.726538][T13263] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.2386'. [ 513.883724][T13270] netlink: 'syz.7.2388': attribute type 10 has an invalid length. [ 513.939401][T13270] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2388'. [ 514.088746][T13270] bridge0: port 3(veth0_vlan) entered blocking state [ 514.174325][T13270] bridge0: port 3(veth0_vlan) entered disabled state [ 514.607772][T13270] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 514.674071][T13280] netlink: 'syz.6.2393': attribute type 10 has an invalid length. [ 514.725388][T13280] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2393'. [ 514.751174][T13282] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2392'. [ 514.924678][T13289] netlink: 'syz.2.2392': attribute type 3 has an invalid length. [ 514.967326][T13289] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2392'. [ 515.096758][T13297] netlink: 'syz.7.2397': attribute type 25 has an invalid length. [ 515.144831][T13297] netlink: 'syz.7.2397': attribute type 6 has an invalid length. [ 515.471976][T13307] netlink: 'syz.5.2401': attribute type 10 has an invalid length. [ 515.501008][T13308] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.2403'. [ 515.952483][T13322] netlink: 'syz.8.2408': attribute type 10 has an invalid length. [ 515.984127][T13322] bridge0: port 5(veth0_vlan) entered blocking state [ 516.000184][T13322] bridge0: port 5(veth0_vlan) entered disabled state [ 516.062336][T13322] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 516.291218][T13331] netlink: 'syz.7.2413': attribute type 3 has an invalid length. [ 516.820435][T13343] __nla_validate_parse: 3 callbacks suppressed [ 516.820478][T13343] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.2419'. [ 516.947529][T13349] netlink: 'syz.8.2422': attribute type 10 has an invalid length. [ 517.027009][T13349] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.044584][T13349] device bridge_slave_1 left promiscuous mode [ 517.050963][T13349] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.081953][T13349] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 517.302033][T13360] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.2426'. [ 517.396506][T13360] netlink: 'syz.7.2426': attribute type 3 has an invalid length. [ 517.434282][T13360] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.2426'. [ 518.401671][T13403] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.2446'. [ 518.465292][T13403] netlink: 'syz.7.2446': attribute type 3 has an invalid length. [ 518.486752][T13403] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.2446'. [ 519.276802][T13422] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.2462'. [ 519.330735][T13422] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2462'. [ 519.615426][T13443] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.2459'. [ 519.773176][T13449] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2463'. [ 519.814463][T13449] validate_nla: 1 callbacks suppressed [ 519.814498][T13449] netlink: 'syz.5.2463': attribute type 10 has an invalid length. [ 519.850973][T13448] netlink: 'syz.5.2463': attribute type 25 has an invalid length. [ 519.884627][T13448] netlink: 'syz.5.2463': attribute type 25 has an invalid length. [ 520.318704][T13467] netlink: 'syz.8.2473': attribute type 19 has an invalid length. [ 520.361390][T13467] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2473'. [ 520.603748][T13479] netlink: 'syz.8.2478': attribute type 10 has an invalid length. [ 520.929361][T13482] netlink: 'syz.6.2475': attribute type 10 has an invalid length. [ 520.984317][T13482] bridge0: port 3(veth0_vlan) entered blocking state [ 520.992861][T13482] bridge0: port 3(veth0_vlan) entered disabled state [ 521.129938][T13482] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 521.823376][T13518] netlink: 'syz.6.2494': attribute type 10 has an invalid length. [ 521.864876][T13518] __nla_validate_parse: 2 callbacks suppressed [ 521.864914][T13518] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2494'. [ 522.071620][T13530] netlink: 'syz.7.2500': attribute type 10 has an invalid length. [ 522.085649][T13530] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2500'. [ 522.887348][T13532] netlink: 'syz.8.2502': attribute type 3 has an invalid length. [ 522.917697][T13532] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2502'. [ 523.546424][T13556] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.2512'. [ 523.620905][T13563] netlink: 822 bytes leftover after parsing attributes in process `syz.2.2516'. [ 523.635377][T13563] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge0 [ 523.655976][T13565] netlink: 'syz.6.2517': attribute type 23 has an invalid length. [ 523.819849][T13571] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2518'. [ 523.892179][T13573] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2518'. [ 524.482309][T13576] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2520'. [ 525.139271][T13598] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.2530'. [ 525.160050][T13602] validate_nla: 3 callbacks suppressed [ 525.160084][T13602] netlink: 'syz.5.2528': attribute type 10 has an invalid length. [ 525.164054][T13600] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.2531'. [ 525.184379][T13602] bridge0: port 5(veth0_vlan) entered blocking state [ 525.202921][T13602] bridge0: port 5(veth0_vlan) entered disabled state [ 525.250193][T13606] netlink: 'syz.8.2531': attribute type 3 has an invalid length. [ 525.301681][T13602] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 525.726877][T13620] netlink: 'syz.6.2539': attribute type 10 has an invalid length. [ 526.262209][T13638] netlink: 'syz.7.2547': attribute type 3 has an invalid length. [ 526.694324][T13657] netlink: 'syz.7.2557': attribute type 10 has an invalid length. [ 527.126965][T13671] __nla_validate_parse: 8 callbacks suppressed [ 527.127001][T13671] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.2564'. [ 527.195129][T13671] netlink: 'syz.8.2564': attribute type 3 has an invalid length. [ 527.203229][T13671] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.2564'. [ 527.440874][T13685] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.2570'. [ 527.600199][T13692] netlink: 'syz.6.2573': attribute type 10 has an invalid length. [ 527.673066][T13692] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2573'. [ 527.992911][T13711] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.2581'. [ 528.024479][T13711] netlink: 'syz.6.2581': attribute type 3 has an invalid length. [ 528.034463][T13711] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.2581'. [ 528.163715][T13717] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 528.273358][T13721] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.2586'. [ 528.624440][T13735] netlink: 'syz.8.2592': attribute type 10 has an invalid length. [ 528.632807][T13735] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2592'. [ 528.801847][T13742] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2596'. [ 528.831735][T13742] netlink: 'syz.2.2596': attribute type 3 has an invalid length. [ 528.870432][T13742] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2596'. [ 529.621614][T13783] device bond0 entered promiscuous mode [ 529.641753][T13783] device bond_slave_0 entered promiscuous mode [ 529.662081][T13783] device bond_slave_1 entered promiscuous mode [ 529.674390][T13783] device batadv_slave_0 entered promiscuous mode [ 529.696135][T13783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.809948][T13787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.847309][T13787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.892753][T13787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.923045][T13787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.933912][T13787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.945604][T13787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.956230][T13787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.968173][T13787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.981398][T13787] device batadv_slave_1 entered promiscuous mode [ 530.234628][T13801] validate_nla: 2 callbacks suppressed [ 530.234644][T13801] netlink: 'syz.6.2624': attribute type 2 has an invalid length. [ 530.387171][T13805] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 530.784616][T13820] netlink: 'syz.2.2632': attribute type 13 has an invalid length. [ 530.858682][T13820] syz_tun: refused to change device tx_queue_len [ 530.894530][T13820] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 531.183318][T13830] netlink: 'syz.7.2638': attribute type 10 has an invalid length. [ 531.435883][T13838] netlink: 'syz.2.2642': attribute type 10 has an invalid length. [ 532.377958][T13871] netlink: 'syz.2.2654': attribute type 10 has an invalid length. [ 532.426951][T13871] __nla_validate_parse: 16 callbacks suppressed [ 532.426966][T13871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2654'. [ 532.590657][T13874] netlink: 'syz.7.2658': attribute type 10 has an invalid length. [ 532.635933][T13874] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2658'. [ 532.824242][T13886] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.2663'. [ 532.847097][T13887] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.2664'. [ 533.336086][T13904] bridge0: port 5(bond0) entered blocking state [ 533.342461][T13904] bridge0: port 5(bond0) entered forwarding state [ 533.386665][T13904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.479169][T13907] netlink: 'syz.5.2673': attribute type 10 has an invalid length. [ 533.539293][T13907] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2673'. [ 533.676588][T13915] netlink: 'syz.8.2677': attribute type 10 has an invalid length. [ 533.682287][T13918] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.2678'. [ 533.720839][T13915] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2677'. [ 534.211265][T13933] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.2683'. [ 534.800028][T13947] bridge0: port 4(bond0) entered blocking state [ 534.806445][T13947] bridge0: port 4(bond0) entered forwarding state [ 534.839466][T13947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.891030][T13947] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 534.892166][T13951] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.2691'. [ 535.108050][T13962] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2694'. [ 536.401129][T14006] netlink: 'syz.7.2717': attribute type 10 has an invalid length. [ 537.322353][T14032] netlink: 'syz.2.2729': attribute type 6 has an invalid length. [ 537.651948][T14044] __nla_validate_parse: 11 callbacks suppressed [ 537.651994][T14044] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.2737'. [ 537.814801][T14051] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.2740'. [ 538.489377][T14081] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.2755'. [ 539.161876][T14109] netlink: 'syz.8.2769': attribute type 11 has an invalid length. [ 539.197958][T14109] netlink: 184220 bytes leftover after parsing attributes in process `syz.8.2769'. [ 539.251490][T14111] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2770'. [ 539.323238][T14117] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 539.522973][T14122] netlink: 'syz.5.2774': attribute type 10 has an invalid length. [ 539.542935][T14108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.545134][T14122] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2774'. [ 539.753867][T14132] netlink: 'syz.8.2775': attribute type 6 has an invalid length. [ 539.813469][T14132] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2775'. [ 540.123235][T14146] bridge0: port 4(dummy0) entered disabled state [ 540.129842][T14146] bridge0: port 3(hsr0) entered disabled state [ 540.136193][T14146] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.187270][T14146] bridge0: port 4(dummy0) entered blocking state [ 540.193757][T14146] bridge0: port 4(dummy0) entered forwarding state [ 540.201722][T14146] bridge0: port 3(hsr0) entered blocking state [ 540.208030][T14146] bridge0: port 3(hsr0) entered forwarding state [ 540.214541][T14146] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.221727][T14146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.264479][T14146] device bridge0 entered promiscuous mode [ 540.463861][T14155] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.2787'. [ 540.536325][T14160] netlink: 'syz.2.2790': attribute type 10 has an invalid length. [ 540.560882][T14160] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2790'. [ 540.668510][T14164] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 540.731697][T14167] syz.5.2792[14167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 540.731854][T14167] syz.5.2792[14167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.318318][T14194] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.2803'. [ 541.434053][T14197] netlink: 'syz.8.2804': attribute type 3 has an invalid length. [ 541.494761][T14202] netlink: 'syz.2.2806': attribute type 10 has an invalid length. [ 541.781422][T14214] netlink: 'syz.5.2812': attribute type 12 has an invalid length. [ 541.803284][T14214] netlink: 'syz.5.2812': attribute type 15 has an invalid length. [ 542.384916][T14231] netlink: 'syz.2.2820': attribute type 3 has an invalid length. [ 542.696686][T14240] __nla_validate_parse: 6 callbacks suppressed [ 542.696705][T14240] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2825'. [ 542.785745][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2825'. [ 542.837602][T14244] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2827'. [ 543.090839][T14252] bridge0: port 5(bond0) entered disabled state [ 543.097404][T14252] bridge0: port 4(dummy0) entered disabled state [ 543.103932][T14252] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.111221][T14252] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.239382][T14255] bridge0: port 5(bond0) entered blocking state [ 543.245791][T14255] bridge0: port 5(bond0) entered forwarding state [ 543.252485][T14255] bridge0: port 4(dummy0) entered blocking state [ 543.258974][T14255] bridge0: port 4(dummy0) entered forwarding state [ 543.265699][T14255] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.272872][T14255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.280282][T14255] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.287508][T14255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.301914][T14255] device bridge0 entered promiscuous mode [ 543.602809][T14267] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.2835'. [ 543.677178][T14267] netlink: 'syz.5.2835': attribute type 3 has an invalid length. [ 543.714837][T14267] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2835'. [ 544.026733][T14288] bridge0: port 4(bond0) entered disabled state [ 544.033555][T14288] bridge0: port 3(hsr0) entered disabled state [ 544.039930][T14288] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.047210][T14288] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.123215][T14292] bridge0: port 4(bond0) entered blocking state [ 544.129621][T14292] bridge0: port 4(bond0) entered forwarding state [ 544.136350][T14292] bridge0: port 3(hsr0) entered blocking state [ 544.142611][T14292] bridge0: port 3(hsr0) entered forwarding state [ 544.149250][T14292] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.156439][T14292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.163855][T14292] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.171066][T14292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.221373][T14292] device bridge0 entered promiscuous mode [ 544.240546][T14292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 544.277001][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 544.295929][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 544.384241][T14301] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2849'. [ 544.419538][T14301] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2849'. [ 544.452612][T14302] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2849'. [ 544.463945][T14301] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2849'. [ 544.621539][T14306] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.2851'. [ 544.802350][T14312] netlink: 'syz.5.2855': attribute type 3 has an invalid length. [ 545.282780][T14332] netlink: 'syz.6.2863': attribute type 10 has an invalid length. [ 545.356244][T14334] bridge0: port 4(dummy0) entered disabled state [ 545.362790][T14334] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.370074][T14334] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.410059][T14335] bridge0: port 4(dummy0) entered blocking state [ 545.416567][T14335] bridge0: port 4(dummy0) entered forwarding state [ 545.423304][T14335] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.430576][T14335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.438028][T14335] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.445218][T14335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.498103][T14335] device bridge0 entered promiscuous mode [ 545.518450][T14341] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 545.939824][T14354] netlink: 'syz.6.2883': attribute type 10 has an invalid length. [ 547.950054][T14410] __nla_validate_parse: 23 callbacks suppressed [ 547.950073][T14410] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2898'. [ 547.993129][T14410] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2898'. [ 548.044275][T14410] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2898'. [ 548.063389][T14412] netlink: 'syz.7.2900': attribute type 3 has an invalid length. [ 548.086450][T14414] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2898'. [ 548.087403][T14412] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.2900'. [ 548.134257][T14418] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2902'. [ 548.282469][T14421] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2903'. [ 548.324226][T14421] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2903'. [ 548.403397][T14426] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2903'. [ 548.442489][T14430] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2903'. [ 548.772989][T14439] netlink: 'syz.6.2911': attribute type 10 has an invalid length. [ 549.413616][T14460] bridge_slave_1: default FDB implementation only supports local addresses [ 549.729446][T14473] netlink: 'syz.2.2927': attribute type 10 has an invalid length. [ 549.896858][T14480] netlink: 'syz.8.2930': attribute type 10 has an invalid length. [ 550.043876][T14483] netlink: 'syz.5.2942': attribute type 3 has an invalid length. [ 550.194336][T14489] netlink: 'syz.8.2935': attribute type 10 has an invalid length. [ 550.532953][T14504] bridge_slave_1: default FDB implementation only supports local addresses [ 550.710881][T14509] netlink: 'syz.2.2943': attribute type 10 has an invalid length. [ 550.852928][T14514] bridge_slave_1: default FDB implementation only supports local addresses [ 551.056572][T14521] netlink: 'syz.2.2961': attribute type 10 has an invalid length. [ 551.220651][T14528] netlink: 'syz.7.2952': attribute type 10 has an invalid length. [ 551.312006][T14532] netlink: 'syz.5.2966': attribute type 29 has an invalid length. [ 553.156827][T14603] __nla_validate_parse: 42 callbacks suppressed [ 553.156862][T14603] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.2988'. [ 553.199876][T14609] netlink: 122896 bytes leftover after parsing attributes in process `syz.7.2991'. [ 553.220241][T14608] validate_nla: 10 callbacks suppressed [ 553.220258][T14608] netlink: 'syz.6.2990': attribute type 29 has an invalid length. [ 553.249670][T14609] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 553.277492][T14609] CPU: 1 PID: 14609 Comm: syz.7.2991 Not tainted syzkaller #0 [ 553.285011][T14609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 553.295180][T14609] Call Trace: [ 553.298487][T14609] [ 553.301526][T14609] dump_stack_lvl+0x188/0x24e [ 553.306257][T14609] ? show_regs_print_info+0x12/0x12 [ 553.311493][T14609] ? load_image+0x410/0x410 [ 553.316044][T14609] sysfs_warn_dup+0x8a/0xa0 [ 553.320581][T14609] sysfs_do_create_link_sd+0xc0/0x110 [ 553.325998][T14609] device_add+0x83b/0x1050 [ 553.330450][T14609] wiphy_register+0x1d8b/0x2aa0 [ 553.335335][T14609] ? cfg80211_event_work+0x40/0x40 [ 553.340450][T14609] ? minstrel_ht_alloc+0x894/0xa20 [ 553.345575][T14609] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 553.351662][T14609] ieee80211_register_hw+0x2d48/0x39f0 [ 553.357159][T14609] ? ieee80211_register_hw+0xee1/0x39f0 [ 553.362717][T14609] ? ieee80211_register_hw+0xee1/0x39f0 [ 553.368322][T14609] ? ieee80211_tasklet_handler+0x20/0x20 [ 553.373968][T14609] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 553.379897][T14609] ? __debug_object_init+0xed/0x440 [ 553.385121][T14609] ? memset+0x1e/0x40 [ 553.389113][T14609] ? __hrtimer_init+0x189/0x270 [ 553.393998][T14609] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 553.399743][T14609] ? memcpy+0x3c/0x60 [ 553.403750][T14609] hwsim_new_radio_nl+0xab7/0xc90 [ 553.408817][T14609] genl_family_rcv_msg_doit+0x22f/0x350 [ 553.414367][T14609] ? end_current_label_crit_section+0x170/0x170 [ 553.420620][T14609] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 553.426701][T14609] ? bpf_lsm_capable+0x5/0x10 [ 553.431383][T14609] ? security_capable+0x85/0xb0 [ 553.436249][T14609] genl_rcv_msg+0x601/0x790 [ 553.440773][T14609] ? genl_bind+0x360/0x360 [ 553.445187][T14609] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 553.451544][T14609] netlink_rcv_skb+0x1ef/0x440 [ 553.456318][T14609] ? genl_bind+0x360/0x360 [ 553.460737][T14609] ? netlink_ack+0x1160/0x1160 [ 553.465526][T14609] ? down_read+0x1a8/0x2d0 [ 553.469947][T14609] genl_rcv+0x24/0x40 [ 553.473931][T14609] netlink_unicast+0x7ad/0x920 [ 553.478724][T14609] netlink_sendmsg+0x8ad/0xbd0 [ 553.483511][T14609] ? netlink_getsockopt+0x550/0x550 [ 553.488717][T14609] ? apparmor_socket_sendmsg+0x8a/0x330 [ 553.494276][T14609] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 553.499563][T14609] ? security_socket_sendmsg+0x7c/0xa0 [ 553.505024][T14609] ? netlink_getsockopt+0x550/0x550 [ 553.510230][T14609] ____sys_sendmsg+0x5ed/0x9a0 [ 553.515020][T14609] ? __sys_sendmsg_sock+0x30/0x30 [ 553.520046][T14609] ? __import_iovec+0x306/0x510 [ 553.524909][T14609] ? import_iovec+0x6f/0xa0 [ 553.529426][T14609] ___sys_sendmsg+0x2a2/0x360 [ 553.534125][T14609] ? __sys_sendmsg+0x2a0/0x2a0 [ 553.538966][T14609] __se_sys_sendmsg+0x1c3/0x2b0 [ 553.543832][T14609] ? __x64_sys_sendmsg+0x80/0x80 [ 553.548802][T14609] ? lockdep_hardirqs_on+0x94/0x140 [ 553.554178][T14609] do_syscall_64+0x4c/0xa0 [ 553.558602][T14609] ? clear_bhb_loop+0x60/0xb0 [ 553.563285][T14609] ? clear_bhb_loop+0x60/0xb0 [ 553.567964][T14609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.573857][T14609] RIP: 0033:0x7fbe85f9e0d9 [ 553.578278][T14609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.597884][T14609] RSP: 002b:00007fbe86e01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.606303][T14609] RAX: ffffffffffffffda RBX: 00007fbe86225fa0 RCX: 00007fbe85f9e0d9 [ 553.614269][T14609] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 553.622241][T14609] RBP: 00007fbe86035024 R08: 0000000000000000 R09: 0000000000000000 [ 553.630215][T14609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.638185][T14609] R13: 00007fbe86226038 R14: 00007fbe86225fa0 R15: 00007ffe7066c648 [ 553.646180][T14609] [ 553.676866][T14608] netlink: 'syz.6.2990': attribute type 29 has an invalid length. [ 553.705459][T14613] netlink: 'syz.6.2990': attribute type 29 has an invalid length. [ 553.739884][T14616] netlink: 'syz.6.2990': attribute type 29 has an invalid length. [ 557.263281][T14640] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3003'. [ 557.716132][T14655] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3008'. [ 559.476222][T14700] netlink: 'syz.5.3030': attribute type 3 has an invalid length. [ 559.504679][T14700] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3030'. [ 559.521595][T14706] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.3033'. [ 559.874465][T14719] netlink: 'syz.8.3039': attribute type 29 has an invalid length. [ 559.887212][T14719] netlink: 'syz.8.3039': attribute type 29 has an invalid length. [ 559.912492][T14719] netlink: 'syz.8.3039': attribute type 29 has an invalid length. [ 559.921437][T14719] netlink: 'syz.8.3039': attribute type 29 has an invalid length. [ 559.954528][T14721] netlink: 'syz.6.3040': attribute type 2 has an invalid length. [ 559.959941][T14719] netlink: 'syz.8.3039': attribute type 29 has an invalid length. [ 559.995213][T14721] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3040'. [ 561.737936][T14784] netlink: 'syz.5.3069': attribute type 10 has an invalid length. [ 561.758603][T14779] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3070'. [ 561.802677][T14784] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3069'. [ 561.812917][T14781] netlink: 'syz.7.3068': attribute type 15 has an invalid length. [ 561.829826][T14781] netlink: 'syz.7.3068': attribute type 7 has an invalid length. [ 561.854119][T14781] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3068'. [ 562.258256][T14801] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3078'. [ 562.711392][T14818] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.3085'. [ 562.768737][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.775181][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.479604][T14836] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.3094'. [ 564.030776][T14852] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.3101'. [ 564.322275][T14865] openvswitch: netlink: Flow key attr not present in new flow. [ 564.578307][T14870] __nla_validate_parse: 1 callbacks suppressed [ 564.578347][T14870] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3108'. [ 564.824682][T14876] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3112'. [ 564.844101][T14879] netlink: 'syz.2.3112': attribute type 3 has an invalid length. [ 564.864570][T14879] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3112'. [ 565.806422][T14919] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3129'. [ 565.811483][T14924] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3132'. [ 565.887484][T14926] netlink: 'syz.2.3132': attribute type 3 has an invalid length. [ 565.921806][T14926] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3132'. [ 566.007004][T14928] device pim6reg1 entered promiscuous mode [ 566.544515][T14949] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3142'. [ 566.564133][T14949] openvswitch: netlink: Flow key attr not present in new flow. [ 567.564521][T14963] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3148'. [ 568.067693][T14979] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3155'. [ 568.126917][T14981] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.3165'. [ 568.201380][T14983] openvswitch: netlink: Flow key attr not present in new flow. [ 568.729925][T14999] netlink: 'syz.7.3162': attribute type 3 has an invalid length. [ 568.803814][T15001] netlink: 'syz.2.3163': attribute type 10 has an invalid length. [ 569.918501][T15029] __nla_validate_parse: 5 callbacks suppressed [ 569.918534][T15029] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3178'. [ 569.992673][T15029] netlink: 'syz.7.3178': attribute type 3 has an invalid length. [ 570.023342][T15029] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.3178'. [ 570.379675][T15043] netlink: 'syz.7.3183': attribute type 10 has an invalid length. [ 570.442970][T15043] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3183'. [ 570.551137][T15048] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.3186'. [ 570.556275][T15051] device pim6reg1 entered promiscuous mode [ 570.976477][T15065] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3193'. [ 571.047212][T15065] netlink: 'syz.8.3193': attribute type 3 has an invalid length. [ 571.075615][T15065] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.3193'. [ 571.381261][T15079] netlink: 'syz.8.3199': attribute type 10 has an invalid length. [ 571.400014][T15079] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3199'. [ 571.476452][T15081] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.3200'. [ 571.582193][T10344] tipc: Subscription rejected, illegal request [ 571.793539][T15096] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.3205'. [ 571.857025][T15096] netlink: 'syz.5.3205': attribute type 3 has an invalid length. [ 571.865182][T15096] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3205'. [ 572.117615][T15102] netlink: 'syz.7.3210': attribute type 3 has an invalid length. [ 572.324319][T15112] netlink: 'syz.5.3222': attribute type 3 has an invalid length. [ 573.279479][T15150] netlink: 'syz.7.3231': attribute type 3 has an invalid length. [ 573.774796][T15173] netlink: 'syz.7.3242': attribute type 10 has an invalid length. [ 574.249103][T15187] netlink: 'syz.5.3249': attribute type 3 has an invalid length. [ 575.270289][T15214] netlink: 'syz.8.3261': attribute type 10 has an invalid length. [ 575.312514][T15215] __nla_validate_parse: 12 callbacks suppressed [ 575.312533][T15215] netlink: 180900 bytes leftover after parsing attributes in process `syz.6.3260'. [ 575.340505][T15214] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3261'. [ 575.451612][T15215] openvswitch: netlink: Flow actions attr not present in new flow. [ 577.279839][T15222] netlink: 'syz.7.3263': attribute type 22 has an invalid length. [ 577.473212][T15229] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3265'. [ 577.514370][T15232] netlink: 'syz.7.3267': attribute type 6 has an invalid length. [ 577.532044][T15232] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3267'. [ 577.896262][T15245] netlink: 14556 bytes leftover after parsing attributes in process `syz.7.3273'. [ 578.213613][T15259] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3280'. [ 578.299962][T15264] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.3281'. [ 581.376435][T15276] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.3286'. [ 581.420670][T15276] netlink: zone id is out of range [ 581.431007][T15276] netlink: zone id is out of range [ 581.482228][T15276] netlink: del zone limit has 4 unknown bytes [ 581.778013][T15287] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.3290'. [ 581.934533][T15291] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.3292'. [ 582.023740][T15291] netlink: 'syz.5.3292': attribute type 3 has an invalid length. [ 582.044901][T15291] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3292'. [ 582.062220][T15299] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.3296'. [ 583.376478][T15318] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3310'. [ 583.519101][T15318] netlink: 'syz.8.3310': attribute type 3 has an invalid length. [ 583.535563][T15326] netlink: 14556 bytes leftover after parsing attributes in process `syz.6.3305'. [ 583.561412][T15318] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.3310'. [ 583.656781][T15331] netlink: 'syz.5.3306': attribute type 10 has an invalid length. [ 583.685071][T15331] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3306'. [ 585.493982][T15342] netlink: 'syz.8.3311': attribute type 6 has an invalid length. [ 585.531712][T15342] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3311'. [ 586.110902][T15370] netlink: 'syz.6.3324': attribute type 10 has an invalid length. [ 586.191044][T15373] netlink: 'syz.8.3322': attribute type 3 has an invalid length. [ 588.097650][T15383] __nla_validate_parse: 4 callbacks suppressed [ 588.097684][T15383] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.3329'. [ 588.487969][T15400] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 588.724381][T15404] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3338'. [ 588.821117][T15407] netlink: 'syz.2.3338': attribute type 3 has an invalid length. [ 588.845161][T15407] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3338'. [ 588.891076][T15410] netlink: 'syz.6.3340': attribute type 10 has an invalid length. [ 588.901344][T15410] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3340'. [ 589.179702][T15416] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3353'. [ 589.232459][T15421] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.3344'. [ 589.264250][T15416] netlink: 'syz.2.3353': attribute type 3 has an invalid length. [ 589.281389][T15416] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3353'. [ 590.058108][T15456] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3360'. [ 590.270834][T15459] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3361'. [ 590.377013][T15459] netlink: 'syz.7.3361': attribute type 3 has an invalid length. [ 590.402588][T15459] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.3361'. [ 591.637970][T15499] netlink: 'syz.8.3379': attribute type 3 has an invalid length. [ 591.719804][T15503] netlink: 'syz.2.3381': attribute type 3 has an invalid length. [ 592.800040][T15531] netlink: 'syz.5.3393': attribute type 3 has an invalid length. [ 592.959644][T15535] netlink: 'syz.6.3395': attribute type 3 has an invalid length. [ 593.141325][T15539] __nla_validate_parse: 11 callbacks suppressed [ 593.141346][T15539] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3407'. [ 593.936066][T15567] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3409'. [ 593.976581][T15567] netlink: 'syz.2.3409': attribute type 3 has an invalid length. [ 593.984778][T15567] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3409'. [ 593.995848][T15571] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3410'. [ 594.014213][T15571] netlink: 'syz.8.3410': attribute type 3 has an invalid length. [ 594.038762][T15571] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.3410'. [ 594.397189][T15578] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3414'. [ 594.922390][T15604] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3424'. [ 595.002522][T15603] netlink: 'syz.2.3424': attribute type 3 has an invalid length. [ 595.022069][T15603] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3424'. [ 595.145906][T15611] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3427'. [ 595.215972][T15612] netlink: 'syz.8.3427': attribute type 3 has an invalid length. [ 595.226887][T15612] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.3427'. [ 596.447903][T15640] netlink: 'syz.2.3440': attribute type 3 has an invalid length. [ 596.728405][T15645] netlink: 'syz.7.3442': attribute type 3 has an invalid length. [ 597.767627][T15673] netlink: 'syz.7.3453': attribute type 3 has an invalid length. [ 598.132590][T15679] netlink: zone id is out of range [ 598.181210][T15679] netlink: zone id is out of range [ 598.186945][T15679] netlink: zone id is out of range [ 598.192154][T15679] netlink: zone id is out of range [ 598.197501][T15679] netlink: zone id is out of range [ 598.202707][T15679] netlink: zone id is out of range [ 598.215382][T15679] netlink: zone id is out of range [ 598.220894][T15679] netlink: zone id is out of range [ 598.248210][T15679] netlink: zone id is out of range [ 598.253870][T15679] netlink: zone id is out of range [ 599.000278][T15702] __nla_validate_parse: 7 callbacks suppressed [ 599.000313][T15702] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3467'. [ 599.206579][T15706] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3469'. [ 599.270558][T15709] netlink: 'syz.2.3469': attribute type 3 has an invalid length. [ 599.305604][T15709] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3469'. [ 599.794780][T15726] netlink: 'syz.5.3477': attribute type 33 has an invalid length. [ 599.845888][T15726] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3477'. [ 599.921454][T15728] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3479'. [ 599.988282][T15728] netlink: 'syz.8.3479': attribute type 3 has an invalid length. [ 600.013100][T15728] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.3479'. [ 600.143010][T15740] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3482'. [ 600.311226][T15745] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3485'. [ 600.939456][T15754] netlink: 'syz.8.3489': attribute type 10 has an invalid length. [ 601.764268][T15773] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3497'. [ 601.798495][T15773] netlink: 'syz.8.3497': attribute type 3 has an invalid length. [ 601.840635][T15773] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.3497'. [ 603.685203][T15810] netlink: 'syz.7.3514': attribute type 3 has an invalid length. [ 603.958213][T15819] netlink: 'syz.5.3517': attribute type 10 has an invalid length. [ 604.015152][T15817] netlink: 'syz.8.3518': attribute type 3 has an invalid length. [ 604.050704][T15819] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.075767][T15817] __nla_validate_parse: 6 callbacks suppressed [ 604.075798][T15817] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.3518'. [ 604.129616][T15819] device bridge_slave_1 left promiscuous mode [ 604.145637][T15819] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.246093][T15819] device bridge_slave_1 entered promiscuous mode [ 604.262339][T15819] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 604.711999][T15838] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.3527'. [ 605.316150][T15842] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3529'. [ 605.404567][T15842] netlink: 'syz.8.3529': attribute type 3 has an invalid length. [ 605.441295][T15842] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.3529'. [ 605.797916][T15856] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.3535'. [ 605.905268][T15856] netlink: 'syz.6.3535': attribute type 3 has an invalid length. [ 605.925200][T15856] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.3535'. [ 606.293238][T15862] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.3537'. [ 606.502337][T15867] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3539'. [ 606.978488][T15875] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3553'. [ 607.122295][T15881] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.3544'. [ 607.232261][T15881] netlink: 'syz.6.3544': attribute type 3 has an invalid length. [ 608.531566][T15912] netlink: 'syz.7.3558': attribute type 6 has an invalid length. [ 609.225675][T15932] __nla_validate_parse: 2 callbacks suppressed [ 609.225692][T15932] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.3568'. [ 609.763921][T15945] netlink: 105 bytes leftover after parsing attributes in process `syz.2.3573'. [ 610.210402][T15958] netlink: 65047 bytes leftover after parsing attributes in process `syz.8.3582'. [ 610.461896][T15969] netlink: 'syz.7.3586': attribute type 1 has an invalid length. [ 610.483484][T15969] netlink: 'syz.7.3586': attribute type 4 has an invalid length. [ 610.505083][T15969] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.3586'. [ 610.619105][T15973] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3587'. [ 611.004850][T15987] net_ratelimit: 139 callbacks suppressed [ 611.004868][T15987] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 611.027224][ T4274] Bluetooth: hci7: unexpected event 0x04 length: 151 > 10 [ 611.228963][T15994] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3598'. [ 611.280822][T15994] netlink: 'syz.7.3598': attribute type 3 has an invalid length. [ 611.353535][T15994] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.3598'. [ 612.093056][T16019] device syzkaller0 entered promiscuous mode [ 612.475926][T16034] netlink: 105 bytes leftover after parsing attributes in process `syz.7.3615'. [ 612.513087][T16033] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.3616'. [ 612.593903][T16033] netlink: 'syz.5.3616': attribute type 3 has an invalid length. [ 612.603952][T16033] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3616'. [ 613.087019][ T4274] Bluetooth: hci7: command 0x0409 tx timeout [ 614.874589][T16063] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 615.213055][T16071] netlink: 105 bytes leftover after parsing attributes in process `syz.5.3630'. [ 615.254390][T16073] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3632'. [ 615.359858][T16073] netlink: 'syz.7.3632': attribute type 3 has an invalid length. [ 615.387432][T16073] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.3632'. [ 615.664541][T16084] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3636'. [ 615.743791][T16084] netlink: 'syz.8.3636': attribute type 3 has an invalid length. [ 615.755717][T16084] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.3636'. [ 615.988802][T16097] syz.6.3643[16097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 615.988946][T16097] syz.6.3643[16097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 616.540998][T16112] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3649'. [ 616.642126][T16110] netlink: 'syz.8.3649': attribute type 3 has an invalid length. [ 616.658167][T16110] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.3649'. [ 616.665798][T16116] device syzkaller0 entered promiscuous mode [ 616.677612][T16116] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 617.307291][T16124] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3654'. [ 617.348183][T16124] netlink: 'syz.8.3654': attribute type 3 has an invalid length. [ 617.371703][T16124] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.3654'. [ 617.528000][T16139] syz.2.3660[16139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 617.528150][T16139] syz.2.3660[16139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 617.838756][T16148] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.3664'. [ 617.882727][T16148] netlink: 'syz.5.3664': attribute type 3 has an invalid length. [ 618.562482][T16175] netlink: 'syz.8.3673': attribute type 3 has an invalid length. [ 618.834552][T16183] syz.8.3677[16183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 618.834693][T16183] syz.8.3677[16183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 618.994810][T16188] netlink: 'syz.5.3680': attribute type 3 has an invalid length. [ 619.102898][ C0] hsr0: VLAN not yet supported [ 619.247637][T16197] device syzkaller0 entered promiscuous mode [ 619.685156][T16211] netlink: 'syz.2.3690': attribute type 3 has an invalid length. [ 622.339489][T16246] __nla_validate_parse: 8 callbacks suppressed [ 622.339525][T16246] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3706'. [ 622.361414][T16248] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3708'. [ 622.439746][T16246] netlink: 'syz.7.3706': attribute type 3 has an invalid length. [ 622.455997][T16246] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.3706'. [ 624.208640][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.215055][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.553852][T16283] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3725'. [ 624.610250][T16285] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.3724'. [ 624.637928][T16283] netlink: 'syz.2.3725': attribute type 3 has an invalid length. [ 624.686324][T16283] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3725'. [ 625.152362][T16308] device syzkaller0 entered promiscuous mode [ 626.549442][T16326] device syzkaller0 entered promiscuous mode [ 626.620044][T16329] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3742'. [ 626.929464][T16333] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.3744'. [ 627.009050][T16335] netlink: 'syz.6.3744': attribute type 3 has an invalid length. [ 627.017305][T16335] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.3744'. [ 628.539229][T16348] netlink: 763 bytes leftover after parsing attributes in process `syz.6.3750'. [ 628.894477][T16358] netlink: 'syz.6.3756': attribute type 10 has an invalid length. [ 628.944086][T16358] netlink: 'syz.6.3756': attribute type 11 has an invalid length. [ 628.986322][T16358] netlink: 5145 bytes leftover after parsing attributes in process `syz.6.3756'. [ 629.061655][T16363] device syzkaller0 entered promiscuous mode [ 629.159955][T16368] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.3759'. [ 629.205852][T16368] netlink: 'syz.5.3759': attribute type 3 has an invalid length. [ 629.214038][T16368] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3759'. [ 629.363003][T16376] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3762'. [ 630.334617][T16385] netlink: 'syz.2.3766': attribute type 10 has an invalid length. [ 630.349860][T16385] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3766'. [ 630.360784][T16385] bridge0: port 3(veth0_vlan) entered blocking state [ 630.369073][T16385] bridge0: port 3(veth0_vlan) entered disabled state [ 630.382711][T16385] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 630.718409][T16401] netlink: 'syz.2.3771': attribute type 10 has an invalid length. [ 630.735487][T16401] netlink: 'syz.2.3771': attribute type 11 has an invalid length. [ 630.749076][T16401] netlink: 5145 bytes leftover after parsing attributes in process `syz.2.3771'. [ 630.958614][T16407] netlink: 'syz.7.3774': attribute type 10 has an invalid length. [ 630.978686][T16407] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3774'. [ 631.021295][T16411] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3776'. [ 632.260236][T16431] device syzkaller0 entered promiscuous mode [ 632.970550][T16447] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3791'. [ 634.808746][T16438] netlink: 'syz.5.3787': attribute type 10 has an invalid length. [ 634.816689][T16438] netlink: 'syz.5.3787': attribute type 11 has an invalid length. [ 634.824665][T16438] netlink: 5145 bytes leftover after parsing attributes in process `syz.5.3787'. [ 634.834789][T16453] netlink: 'syz.7.3794': attribute type 10 has an invalid length. [ 634.853881][T16453] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3794'. [ 636.044166][T16488] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.3806'. [ 637.114826][T16502] cgroup: fork rejected by pids controller in /syz8 [ 637.209603][T16511] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3817'. [ 637.232879][T16504] netlink: 'syz.2.3816': attribute type 10 has an invalid length. [ 637.251665][T16504] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3816'. [ 637.292929][T16511] netlink: 'syz.7.3817': attribute type 3 has an invalid length. [ 637.302063][T16511] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.3817'. [ 640.057513][T16546] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.3832'. [ 640.122454][T16546] netlink: 'syz.5.3832': attribute type 3 has an invalid length. [ 640.166458][T16546] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3832'. [ 640.543030][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 640.553030][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 640.562399][T16552] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 640.597952][T16552] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 640.606273][T16552] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 640.613676][T16552] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 642.685231][T16552] Bluetooth: hci0: command 0x0409 tx timeout [ 643.348530][T16560] netlink: 'syz.5.3836': attribute type 10 has an invalid length. [ 643.358266][T16560] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3836'. [ 643.766560][T10353] tipc: Left network mode [ 643.950497][T16595] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3847'. [ 643.978448][T16552] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 644.085567][T16595] netlink: 'syz.2.3847': attribute type 3 has an invalid length. [ 644.125438][T16595] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3847'. [ 644.221329][T10353] device ip6gretap0 left promiscuous mode [ 644.255908][T10353] : port 1(ip6gretap0) entered disabled state [ 644.303652][T16550] chnl_net:caif_netlink_parms(): no params data found [ 644.681680][T16618] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3855'. [ 644.765640][T16552] Bluetooth: hci0: command 0x041b tx timeout [ 645.179594][T16622] netlink: 'syz.5.3856': attribute type 10 has an invalid length. [ 645.205384][T16622] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3856'. [ 645.247481][T16618] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 645.265096][T16618] CPU: 0 PID: 16618 Comm: syz.2.3855 Not tainted syzkaller #0 [ 645.272638][T16618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 645.282827][T16618] Call Trace: [ 645.286146][T16618] [ 645.289111][T16618] dump_stack_lvl+0x188/0x24e [ 645.293841][T16618] ? show_regs_print_info+0x12/0x12 [ 645.299090][T16618] ? load_image+0x410/0x410 [ 645.303676][T16618] sysfs_warn_dup+0x8a/0xa0 [ 645.308219][T16618] sysfs_do_create_link_sd+0xc0/0x110 [ 645.313649][T16618] device_add+0x83b/0x1050 [ 645.318129][T16618] wiphy_register+0x1d8b/0x2aa0 [ 645.323088][T16618] ? cfg80211_event_work+0x40/0x40 [ 645.328257][T16618] ? minstrel_ht_alloc+0x894/0xa20 [ 645.333457][T16618] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 645.339591][T16618] ieee80211_register_hw+0x2d48/0x39f0 [ 645.345150][T16618] ? ieee80211_register_hw+0xee1/0x39f0 [ 645.350747][T16618] ? ieee80211_register_hw+0xee1/0x39f0 [ 645.356385][T16618] ? ieee80211_tasklet_handler+0x20/0x20 [ 645.362075][T16618] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 645.368012][T16618] ? __debug_object_init+0xed/0x440 [ 645.373250][T16618] ? memset+0x1e/0x40 [ 645.377266][T16618] ? __hrtimer_init+0x189/0x270 [ 645.382150][T16618] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 645.387909][T16618] ? memcpy+0x3c/0x60 [ 645.391921][T16618] hwsim_new_radio_nl+0xab7/0xc90 [ 645.397026][T16618] genl_family_rcv_msg_doit+0x22f/0x350 [ 645.402607][T16618] ? end_current_label_crit_section+0x170/0x170 [ 645.408903][T16618] ? trace_call_bpf+0xbf/0x6b0 [ 645.413697][T16618] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 645.419636][T16618] ? bpf_lsm_capable+0x5/0x10 [ 645.424352][T16618] ? security_capable+0x85/0xb0 [ 645.429239][T16618] genl_rcv_msg+0x601/0x790 [ 645.433775][T16618] ? genl_bind+0x360/0x360 [ 645.438223][T16618] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 645.444602][T16618] netlink_rcv_skb+0x1ef/0x440 [ 645.449386][T16618] ? genl_bind+0x360/0x360 [ 645.453831][T16618] ? netlink_ack+0x1160/0x1160 [ 645.458646][T16618] ? down_read+0x1a8/0x2d0 [ 645.463080][T16618] genl_rcv+0x24/0x40 [ 645.467071][T16618] netlink_unicast+0x7ad/0x920 [ 645.471876][T16618] netlink_sendmsg+0x8ad/0xbd0 [ 645.476674][T16618] ? netlink_getsockopt+0x550/0x550 [ 645.481895][T16618] ? apparmor_socket_sendmsg+0x8a/0x330 [ 645.487457][T16618] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 645.492756][T16618] ? security_socket_sendmsg+0x7c/0xa0 [ 645.498231][T16618] ? netlink_getsockopt+0x550/0x550 [ 645.503451][T16618] ____sys_sendmsg+0x5ed/0x9a0 [ 645.508253][T16618] ? __sys_sendmsg_sock+0x30/0x30 [ 645.513287][T16618] ? __import_iovec+0x306/0x510 [ 645.518180][T16618] ? import_iovec+0x6f/0xa0 [ 645.522720][T16618] ___sys_sendmsg+0x2a2/0x360 [ 645.527428][T16618] ? __sys_sendmsg+0x2a0/0x2a0 [ 645.532318][T16618] __se_sys_sendmsg+0x1c3/0x2b0 [ 645.537192][T16618] ? __x64_sys_sendmsg+0x80/0x80 [ 645.542181][T16618] ? lockdep_hardirqs_on+0x94/0x140 [ 645.547396][T16618] do_syscall_64+0x4c/0xa0 [ 645.551827][T16618] ? clear_bhb_loop+0x60/0xb0 [ 645.556514][T16618] ? clear_bhb_loop+0x60/0xb0 [ 645.561219][T16618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.567118][T16618] RIP: 0033:0x7f629a99e0d9 [ 645.571554][T16618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.591168][T16618] RSP: 002b:00007f629b7bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.599592][T16618] RAX: ffffffffffffffda RBX: 00007f629ac25fa0 RCX: 00007f629a99e0d9 [ 645.607590][T16618] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 645.615589][T16618] RBP: 00007f629aa35024 R08: 0000000000000000 R09: 0000000000000000 [ 645.623563][T16618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.631537][T16618] R13: 00007f629ac26038 R14: 00007f629ac25fa0 R15: 00007ffd3e9a0848 [ 645.639556][T16618] [ 646.855158][T16552] Bluetooth: hci0: command 0x040f tx timeout [ 647.637438][T16550] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.681083][T16550] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.717587][T16550] device bridge_slave_0 entered promiscuous mode [ 647.800538][T16550] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.823812][T16550] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.874736][T16550] device bridge_slave_1 entered promiscuous mode [ 648.006486][T16550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.062833][T16657] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3862'. [ 648.400540][T16657] device hsr_slave_0 left promiscuous mode [ 648.454956][T16550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.701119][T16550] team0: Port device team_slave_0 added [ 648.722926][T16550] team0: Port device team_slave_1 added [ 648.831752][T16550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.846620][T16550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.925245][T16552] Bluetooth: hci0: command 0x0419 tx timeout [ 648.968393][T16550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.012143][T16550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.028725][T16550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.092873][T16550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.171056][T16550] device hsr_slave_0 entered promiscuous mode [ 649.178823][T16550] device hsr_slave_1 entered promiscuous mode [ 649.397725][T16689] netlink: 'syz.5.3873': attribute type 10 has an invalid length. [ 649.412427][T16689] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3873'. [ 655.821043][T16739] netlink: 'syz.7.3885': attribute type 10 has an invalid length. [ 655.850155][T16739] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3885'. [ 655.905681][T10353] device hsr_slave_0 left promiscuous mode [ 655.953661][T10353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.966930][T10353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.986282][T10353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.006472][T10353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.017833][T10353] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 656.035334][T10353] batman_adv: batadv0: Removing interface: virt_wifi0 [ 656.061394][T10353] batman_adv: batadv0: Interface deactivated: vlan1 [ 656.070743][T10353] batman_adv: batadv0: Removing interface: vlan1 [ 656.086935][T10353] bridge0: port 4(dummy0) entered disabled state [ 656.108055][T10353] bridge0: port 3(hsr0) entered disabled state [ 656.129166][T10353] device bridge_slave_0 left promiscuous mode [ 656.145541][T10353] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.201550][T10353] device veth1_vlan left promiscuous mode [ 656.899336][T10353] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 657.272405][T10353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.316596][T10353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.361760][T10353] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 657.546086][T10353] bond0 (unregistering): Released all slaves [ 657.680548][T16758] netlink: 'syz.5.3894': attribute type 25 has an invalid length. [ 657.692052][T16758] netlink: 'syz.5.3894': attribute type 28 has an invalid length. [ 658.249858][T16776] netlink: 'syz.5.3902': attribute type 2 has an invalid length. [ 658.260325][T16776] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3902'. [ 658.334380][T16774] device syzkaller0 entered promiscuous mode [ 661.608899][T16795] netlink: 'syz.7.3909': attribute type 25 has an invalid length. [ 661.634978][T16795] netlink: 'syz.7.3909': attribute type 28 has an invalid length. [ 661.653190][T16791] netlink: 'syz.5.3908': attribute type 10 has an invalid length. [ 661.683257][T16791] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3908'. [ 661.752880][T16550] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 661.786346][T16550] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 661.823250][T16550] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 661.840075][T16550] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 661.977753][T16550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.003648][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 662.014750][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 662.026532][T16550] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.041196][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 662.050922][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 662.060773][T10353] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.067956][T10353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.078430][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 662.094381][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 662.114271][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 662.125669][T10353] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.132856][T10353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.161004][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 662.173489][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 662.197700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 662.207901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 662.217390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 662.228320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 662.239889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 662.254226][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 662.269441][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 662.287811][T16550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 662.304181][T16550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 662.321107][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 662.333424][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 662.641974][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 662.666286][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 662.694232][T16550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.767177][T16825] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.3914'. [ 665.210272][T16884] netlink: 122896 bytes leftover after parsing attributes in process `syz.7.3930'. [ 667.115689][T16865] netlink: 'syz.6.3924': attribute type 25 has an invalid length. [ 667.129664][T16865] netlink: 'syz.6.3924': attribute type 28 has an invalid length. [ 667.143309][T16884] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 667.165377][T16884] CPU: 0 PID: 16884 Comm: syz.7.3930 Not tainted syzkaller #0 [ 667.172905][T16884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 667.182986][T16884] Call Trace: [ 667.186286][T16884] [ 667.189231][T16884] dump_stack_lvl+0x188/0x24e [ 667.193943][T16884] ? show_regs_print_info+0x12/0x12 [ 667.199167][T16884] ? load_image+0x410/0x410 [ 667.203716][T16884] sysfs_warn_dup+0x8a/0xa0 [ 667.208251][T16884] sysfs_do_create_link_sd+0xc0/0x110 [ 667.213662][T16884] device_add+0x83b/0x1050 [ 667.218129][T16884] wiphy_register+0x1d8b/0x2aa0 [ 667.223034][T16884] ? cfg80211_event_work+0x40/0x40 [ 667.228174][T16884] ? minstrel_ht_alloc+0x894/0xa20 [ 667.233332][T16884] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 667.239445][T16884] ieee80211_register_hw+0x2d48/0x39f0 [ 667.244949][T16884] ? ieee80211_register_hw+0xee1/0x39f0 [ 667.250520][T16884] ? ieee80211_register_hw+0xee1/0x39f0 [ 667.256079][T16884] ? ieee80211_tasklet_handler+0x20/0x20 [ 667.261717][T16884] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 667.267613][T16884] ? __debug_object_init+0xed/0x440 [ 667.272817][T16884] ? memset+0x1e/0x40 [ 667.276800][T16884] ? __hrtimer_init+0x189/0x270 [ 667.281662][T16884] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 667.287391][T16884] ? memcpy+0x3c/0x60 [ 667.291377][T16884] hwsim_new_radio_nl+0xab7/0xc90 [ 667.296412][T16884] genl_family_rcv_msg_doit+0x22f/0x350 [ 667.301972][T16884] ? end_current_label_crit_section+0x170/0x170 [ 667.308215][T16884] ? trace_call_bpf+0xbf/0x6b0 [ 667.312980][T16884] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 667.318874][T16884] ? bpf_lsm_capable+0x5/0x10 [ 667.323546][T16884] ? security_capable+0x85/0xb0 [ 667.328404][T16884] genl_rcv_msg+0x601/0x790 [ 667.332918][T16884] ? genl_bind+0x360/0x360 [ 667.337329][T16884] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 667.343680][T16884] netlink_rcv_skb+0x1ef/0x440 [ 667.348472][T16884] ? genl_bind+0x360/0x360 [ 667.352897][T16884] ? netlink_ack+0x1160/0x1160 [ 667.357678][T16884] ? down_read+0x1a8/0x2d0 [ 667.362095][T16884] genl_rcv+0x24/0x40 [ 667.366077][T16884] netlink_unicast+0x7ad/0x920 [ 667.370849][T16884] netlink_sendmsg+0x8ad/0xbd0 [ 667.375618][T16884] ? netlink_getsockopt+0x550/0x550 [ 667.380815][T16884] ? apparmor_socket_sendmsg+0x8a/0x330 [ 667.386371][T16884] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 667.391650][T16884] ? security_socket_sendmsg+0x7c/0xa0 [ 667.397103][T16884] ? netlink_getsockopt+0x550/0x550 [ 667.402304][T16884] ____sys_sendmsg+0x5ed/0x9a0 [ 667.407083][T16884] ? __sys_sendmsg_sock+0x30/0x30 [ 667.412134][T16884] ? __import_iovec+0x306/0x510 [ 667.417010][T16884] ? import_iovec+0x6f/0xa0 [ 667.421525][T16884] ___sys_sendmsg+0x2a2/0x360 [ 667.426211][T16884] ? __sys_sendmsg+0x2a0/0x2a0 [ 667.431014][T16884] __se_sys_sendmsg+0x1c3/0x2b0 [ 667.435879][T16884] ? __x64_sys_sendmsg+0x80/0x80 [ 667.440846][T16884] ? lockdep_hardirqs_on+0x94/0x140 [ 667.446044][T16884] do_syscall_64+0x4c/0xa0 [ 667.450461][T16884] ? clear_bhb_loop+0x60/0xb0 [ 667.455134][T16884] ? clear_bhb_loop+0x60/0xb0 [ 667.459806][T16884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 667.465709][T16884] RIP: 0033:0x7fbe85f9e0d9 [ 667.470117][T16884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.489747][T16884] RSP: 002b:00007fbe86e01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.498159][T16884] RAX: ffffffffffffffda RBX: 00007fbe86225fa0 RCX: 00007fbe85f9e0d9 [ 667.506124][T16884] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 667.514088][T16884] RBP: 00007fbe86035024 R08: 0000000000000000 R09: 0000000000000000 [ 667.522049][T16884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.530013][T16884] R13: 00007fbe86226038 R14: 00007fbe86225fa0 R15: 00007ffe7066c648 [ 667.537990][T16884] [ 667.698608][T10327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 667.715911][T10327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 667.748835][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 667.767044][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 667.782103][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 667.793849][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 667.806671][T16550] device veth0_vlan entered promiscuous mode [ 667.822873][T16550] device veth1_vlan entered promiscuous mode [ 667.853971][T16550] device veth0_macvtap entered promiscuous mode [ 667.864524][T16550] device veth1_macvtap entered promiscuous mode [ 667.880118][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 667.895970][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 667.906238][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 667.923510][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 667.932951][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 667.954464][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.969670][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.988168][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.003207][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.019052][T16550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.032799][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 668.043839][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 668.061095][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 668.072520][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.083367][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.093539][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.107184][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.117400][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.128523][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.139105][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.149685][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.162459][T16550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.171145][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 668.181279][T10353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 668.193731][T16550] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.203067][T16550] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.212017][T16550] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.222125][T16550] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.345419][T10342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.353320][T10342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.376728][T10327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 668.391824][T10327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.400438][T10327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.416204][T10347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 668.571827][T16907] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3830'. [ 668.776573][T16914] netlink: 'syz.7.3935': attribute type 1 has an invalid length. [ 668.784387][T16914] netlink: 'syz.7.3935': attribute type 4 has an invalid length. [ 668.853498][T16914] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.3935'. [ 668.866555][T16923] sock: sock_set_timeout: `syz.6.3932' (pid 16923) tries to set negative timeout [ 669.576058][T16943] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3943'. [ 669.787961][T16947] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3955'. [ 669.892299][T16949] netlink: 122896 bytes leftover after parsing attributes in process `syz.8.3945'. [ 669.958335][T16949] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 670.490525][T16965] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.3960'. [ 672.494726][T16994] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.3964'. [ 672.535166][T16994] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 672.577209][T16994] CPU: 0 PID: 16994 Comm: syz.6.3964 Not tainted syzkaller #0 [ 672.584732][T16994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.594804][T16994] Call Trace: [ 672.598092][T16994] [ 672.601036][T16994] dump_stack_lvl+0x188/0x24e [ 672.605739][T16994] ? show_regs_print_info+0x12/0x12 [ 672.610959][T16994] ? load_image+0x410/0x410 [ 672.615503][T16994] sysfs_warn_dup+0x8a/0xa0 [ 672.620019][T16994] sysfs_do_create_link_sd+0xc0/0x110 [ 672.625410][T16994] device_add+0x83b/0x1050 [ 672.629854][T16994] wiphy_register+0x1d8b/0x2aa0 [ 672.634761][T16994] ? cfg80211_event_work+0x40/0x40 [ 672.639892][T16994] ? minstrel_ht_alloc+0x894/0xa20 [ 672.645035][T16994] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 672.651120][T16994] ieee80211_register_hw+0x2d48/0x39f0 [ 672.656624][T16994] ? ieee80211_register_hw+0xee1/0x39f0 [ 672.662184][T16994] ? ieee80211_register_hw+0xee1/0x39f0 [ 672.667765][T16994] ? ieee80211_tasklet_handler+0x20/0x20 [ 672.673402][T16994] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 672.679310][T16994] ? __debug_object_init+0xed/0x440 [ 672.684532][T16994] ? memset+0x1e/0x40 [ 672.688524][T16994] ? __hrtimer_init+0x189/0x270 [ 672.693394][T16994] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 672.699495][T16994] ? memcpy+0x3c/0x60 [ 672.703499][T16994] hwsim_new_radio_nl+0xab7/0xc90 [ 672.708567][T16994] genl_family_rcv_msg_doit+0x22f/0x350 [ 672.714122][T16994] ? end_current_label_crit_section+0x170/0x170 [ 672.720452][T16994] ? trace_call_bpf+0xbf/0x6b0 [ 672.725234][T16994] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 672.731154][T16994] ? bpf_lsm_capable+0x5/0x10 [ 672.735839][T16994] ? security_capable+0x85/0xb0 [ 672.740720][T16994] genl_rcv_msg+0x601/0x790 [ 672.745255][T16994] ? genl_bind+0x360/0x360 [ 672.749677][T16994] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 672.756056][T16994] netlink_rcv_skb+0x1ef/0x440 [ 672.760838][T16994] ? genl_bind+0x360/0x360 [ 672.765269][T16994] ? netlink_ack+0x1160/0x1160 [ 672.770068][T16994] ? down_read+0x1a8/0x2d0 [ 672.774498][T16994] genl_rcv+0x24/0x40 [ 672.778485][T16994] netlink_unicast+0x7ad/0x920 [ 672.783291][T16994] netlink_sendmsg+0x8ad/0xbd0 [ 672.788089][T16994] ? netlink_getsockopt+0x550/0x550 [ 672.793309][T16994] ? apparmor_socket_sendmsg+0x8a/0x330 [ 672.798870][T16994] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 672.804161][T16994] ? security_socket_sendmsg+0x7c/0xa0 [ 672.809628][T16994] ? netlink_getsockopt+0x550/0x550 [ 672.814854][T16994] ____sys_sendmsg+0x5ed/0x9a0 [ 672.819669][T16994] ? __sys_sendmsg_sock+0x30/0x30 [ 672.824706][T16994] ? __import_iovec+0x306/0x510 [ 672.829589][T16994] ? import_iovec+0x6f/0xa0 [ 672.834116][T16994] ___sys_sendmsg+0x2a2/0x360 [ 672.838822][T16994] ? __sys_sendmsg+0x2a0/0x2a0 [ 672.843717][T16994] __se_sys_sendmsg+0x1c3/0x2b0 [ 672.848584][T16994] ? __x64_sys_sendmsg+0x80/0x80 [ 672.853571][T16994] ? lockdep_hardirqs_on+0x94/0x140 [ 672.858789][T16994] do_syscall_64+0x4c/0xa0 [ 672.863214][T16994] ? clear_bhb_loop+0x60/0xb0 [ 672.867902][T16994] ? clear_bhb_loop+0x60/0xb0 [ 672.872594][T16994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 672.878499][T16994] RIP: 0033:0x7fc98279e0d9 [ 672.883007][T16994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.902614][T16994] RSP: 002b:00007fc9836fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.911044][T16994] RAX: ffffffffffffffda RBX: 00007fc982a25fa0 RCX: 00007fc98279e0d9 [ 672.919020][T16994] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 672.926994][T16994] RBP: 00007fc982835024 R08: 0000000000000000 R09: 0000000000000000 [ 672.934968][T16994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.942940][T16994] R13: 00007fc982a26038 R14: 00007fc982a25fa0 R15: 00007ffdd5438348 [ 672.950954][T16994] [ 673.451605][T16997] netlink: 'syz.5.3975': attribute type 10 has an invalid length. [ 673.459927][T16997] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3975'. [ 673.821287][T17017] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3971'. [ 673.847942][T17018] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.3970'. [ 673.903460][T17019] netlink: 'syz.7.3971': attribute type 3 has an invalid length. [ 673.919341][T17019] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.3971'. [ 675.992330][T17053] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.3985'. [ 676.560324][T17060] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.3988'. [ 676.657056][T17064] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3989'. [ 676.714778][T17063] device syzkaller0 entered promiscuous mode [ 676.720455][T17064] netlink: 'syz.7.3989': attribute type 3 has an invalid length. [ 676.736371][T17058] netlink: 'syz.5.3987': attribute type 10 has an invalid length. [ 676.744411][T17058] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3987'. [ 676.760268][T17064] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.3989'. [ 678.513980][T17076] netlink: 'syz.6.3993': attribute type 10 has an invalid length. [ 678.532681][T17076] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3993'. [ 678.737475][T17084] netlink: 'syz.8.4005': attribute type 25 has an invalid length. [ 678.805977][T17084] netlink: 'syz.8.4005': attribute type 28 has an invalid length. [ 679.201863][T17091] device syzkaller0 entered promiscuous mode [ 679.503815][T17100] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.4001'. [ 679.755757][T17106] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.4004'. [ 679.814554][T17106] netlink: 'syz.8.4004': attribute type 3 has an invalid length. [ 679.824797][T17106] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.4004'. [ 679.904063][T17111] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.4017'. [ 681.644810][T17108] netlink: 'syz.5.4006': attribute type 1 has an invalid length. [ 681.652811][T17108] netlink: 'syz.5.4006': attribute type 4 has an invalid length. [ 681.660649][T17108] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4006'. [ 681.676305][T17115] netlink: 15231 bytes leftover after parsing attributes in process `syz.7.4007'. [ 681.867683][T17117] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.4019'. [ 681.925498][T17121] netlink: 'syz.5.4009': attribute type 10 has an invalid length. [ 681.948859][T17121] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4009'. [ 682.091046][T17123] netlink: 'syz.6.4010': attribute type 10 has an invalid length. [ 682.124300][T17123] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4010'. [ 682.191465][T17135] netlink: 'syz.2.4012': attribute type 25 has an invalid length. [ 682.205425][T17135] netlink: 'syz.2.4012': attribute type 28 has an invalid length. [ 683.275298][T17155] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4022'. [ 683.874732][T17169] validate_nla: 3 callbacks suppressed [ 683.874768][T17169] netlink: 'syz.2.4030': attribute type 10 has an invalid length. [ 683.920923][T17170] netlink: 'syz.8.4029': attribute type 10 has an invalid length. [ 683.944558][T17170] batman_adv: batadv0: Adding interface: vlan1 [ 683.954708][T17170] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.019707][T17170] batman_adv: batadv0: Interface activated: vlan1 [ 685.659949][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.666653][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.167690][T17194] netlink: 'syz.8.4036': attribute type 1 has an invalid length. [ 686.231858][T17194] netlink: 'syz.8.4036': attribute type 4 has an invalid length. [ 686.268790][T17196] __nla_validate_parse: 5 callbacks suppressed [ 686.268816][T17196] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.4037'. [ 686.275070][T17194] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.4036'. [ 686.332147][T17196] netlink: 'syz.2.4037': attribute type 3 has an invalid length. [ 686.352670][T17196] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4037'. [ 686.643795][T17209] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.4042'. [ 686.846872][T17214] netlink: 'syz.7.4045': attribute type 10 has an invalid length. [ 686.861989][T17214] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4045'. [ 686.933702][T17216] netlink: 'syz.2.4047': attribute type 10 has an invalid length. [ 686.943463][T17216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4047'. [ 687.251441][T17225] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.4050'. [ 687.318668][T17225] netlink: 'syz.2.4050': attribute type 3 has an invalid length. [ 687.344120][T17225] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4050'. [ 687.626571][T17242] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.4057'. [ 687.966188][T17246] netlink: 'syz.8.4060': attribute type 10 has an invalid length. [ 688.024492][T17246] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4060'. [ 688.093012][T17249] netlink: 'syz.5.4061': attribute type 10 has an invalid length. [ 689.392882][T17260] netlink: 'syz.7.4065': attribute type 3 has an invalid length. [ 692.105066][T17279] __nla_validate_parse: 3 callbacks suppressed [ 692.105077][T17279] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.4071'. [ 692.356461][T17296] netlink: 'syz.5.4077': attribute type 10 has an invalid length. [ 692.369078][T17296] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4077'. [ 692.442823][T17300] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.4079'. [ 692.486963][T17300] netlink: 'syz.8.4079': attribute type 3 has an invalid length. [ 692.495126][T17300] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.4079'. [ 692.539790][T17303] netlink: 'syz.7.4080': attribute type 10 has an invalid length. [ 692.558688][T17303] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4080'. [ 692.893860][T17315] device syzkaller0 entered promiscuous mode [ 693.946735][T17334] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.4093'. [ 693.961396][T17334] netlink: 'syz.2.4093': attribute type 3 has an invalid length. [ 693.983379][T17334] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4093'. [ 695.173593][T17336] netlink: 'syz.8.4094': attribute type 10 has an invalid length. [ 695.189049][T17336] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4094'. [ 695.229332][T17339] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.4095'. [ 695.470088][T17350] netlink: 'syz.5.4097': attribute type 10 has an invalid length. [ 695.496399][T17350] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4097'. [ 696.731956][T17373] device syzkaller0 entered promiscuous mode [ 696.940511][T17376] netlink: 'syz.2.4108': attribute type 3 has an invalid length. [ 701.442151][T17381] netlink: 'syz.8.4110': attribute type 10 has an invalid length. [ 701.450501][T17381] __nla_validate_parse: 2 callbacks suppressed [ 701.450541][T17381] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4110'. [ 701.505167][T17395] netlink: 'syz.6.4115': attribute type 10 has an invalid length. [ 701.526005][T17395] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4115'. [ 701.854426][T17412] device syzkaller0 entered promiscuous mode [ 703.822934][T17436] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.4128'. [ 703.902565][T17437] netlink: 'syz.6.4128': attribute type 3 has an invalid length. [ 703.937376][T17437] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.4128'. [ 705.187652][T17450] netlink: 'syz.2.4131': attribute type 10 has an invalid length. [ 705.196303][T17450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4131'. [ 705.510076][T17456] netlink: 'syz.8.4134': attribute type 10 has an invalid length. [ 705.538243][T17456] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4134'. [ 707.731567][T17490] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.4144'. [ 709.472068][T17497] netlink: 'syz.5.4148': attribute type 10 has an invalid length. [ 709.480254][T17497] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4148'. [ 709.493311][T17499] netlink: 'syz.6.4149': attribute type 10 has an invalid length. [ 709.502819][T17499] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4149'. [ 710.282026][T17539] netlink: 8161 bytes leftover after parsing attributes in process `syz.5.4161'. [ 710.527284][T17541] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.4163'. [ 710.660901][T17545] netlink: 'syz.8.4167': attribute type 10 has an invalid length. [ 710.695139][T17545] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4167'. [ 710.894559][T17553] netlink: 'syz.7.4168': attribute type 10 has an invalid length. [ 710.903768][T17553] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4168'. [ 711.133864][T17564] netlink: 763 bytes leftover after parsing attributes in process `syz.2.4172'. [ 711.582683][T17574] netlink: 'syz.7.4177': attribute type 29 has an invalid length. [ 711.589812][T17572] device syzkaller0 entered promiscuous mode [ 711.686422][T17580] netlink: 'syz.7.4177': attribute type 2 has an invalid length. [ 711.725552][T17580] netlink: 'syz.7.4177': attribute type 7 has an invalid length. [ 711.743599][T17580] netlink: 198452 bytes leftover after parsing attributes in process `syz.7.4177'. [ 711.772982][T17579] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.4178'. [ 711.843365][T17574] netlink: 'syz.7.4177': attribute type 29 has an invalid length. [ 716.557273][T17576] netlink: 'syz.7.4177': attribute type 29 has an invalid length. [ 716.574240][T17591] netlink: 'syz.6.4182': attribute type 10 has an invalid length. [ 716.583961][T17591] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4182'. [ 716.606934][T17598] netlink: 'syz.8.4183': attribute type 10 has an invalid length. [ 716.641238][T17598] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4183'. [ 716.784046][T17625] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.4193'. [ 719.720694][T17652] netlink: 'syz.6.4205': attribute type 10 has an invalid length. [ 719.729770][T17652] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4205'. [ 719.740965][T17654] netlink: 'syz.7.4206': attribute type 10 has an invalid length. [ 719.750460][T17654] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4206'. [ 720.154341][T17672] device syzkaller0 entered promiscuous mode [ 723.043723][T17701] netlink: 'syz.5.4219': attribute type 10 has an invalid length. [ 723.062702][T17701] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4219'. [ 723.114305][T17712] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.4233'. [ 723.448888][T17724] netlink: 'syz.5.4238': attribute type 10 has an invalid length. [ 723.458183][T17724] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4238'. [ 723.956835][T17736] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.4231'. [ 724.333619][T17742] device syzkaller0 entered promiscuous mode [ 724.974063][T17744] netlink: 63503 bytes leftover after parsing attributes in process `syz.8.4237'. [ 725.230870][T17753] netlink: 'syz.8.4241': attribute type 10 has an invalid length. [ 725.245114][T17753] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4241'. [ 725.891833][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4251'. [ 725.909285][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4251'. [ 725.931087][T17778] netlink: 33 bytes leftover after parsing attributes in process `syz.2.4251'. [ 725.950427][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4251'. [ 726.051085][T17782] netlink: 'syz.6.4252': attribute type 21 has an invalid length. [ 726.063630][T17782] netlink: 'syz.6.4252': attribute type 12 has an invalid length. [ 726.075785][T17782] netlink: 'syz.6.4252': attribute type 13 has an invalid length. [ 726.083987][T17782] netlink: 'syz.6.4252': attribute type 14 has an invalid length. [ 726.093064][T17782] netlink: 'syz.6.4252': attribute type 15 has an invalid length. [ 726.102980][T17782] netlink: 'syz.6.4252': attribute type 16 has an invalid length. [ 726.935471][T17798] netlink: 'syz.5.4257': attribute type 10 has an invalid length. [ 729.930505][T17832] device syzkaller0 entered promiscuous mode [ 730.744684][T17839] device syzkaller0 entered promiscuous mode [ 734.037997][T17859] netlink: 'syz.2.4277': attribute type 10 has an invalid length. [ 734.047649][T17859] __nla_validate_parse: 5 callbacks suppressed [ 734.047691][T17859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4277'. [ 735.931692][T17902] device syzkaller0 entered promiscuous mode [ 735.947158][T17904] device syzkaller0 entered promiscuous mode [ 738.543195][T17914] netlink: 'syz.7.4292': attribute type 21 has an invalid length. [ 738.551396][T17914] netlink: 'syz.7.4292': attribute type 10 has an invalid length. [ 738.559673][T17914] netlink: 'syz.7.4292': attribute type 12 has an invalid length. [ 738.567971][T17914] netlink: 'syz.7.4292': attribute type 13 has an invalid length. [ 738.576192][T17914] netlink: 'syz.7.4292': attribute type 14 has an invalid length. [ 738.584054][T17914] netlink: 'syz.7.4292': attribute type 15 has an invalid length. [ 738.605060][T17914] netlink: 'syz.7.4292': attribute type 16 has an invalid length. [ 738.612928][T17914] netlink: 'syz.7.4292': attribute type 19 has an invalid length. [ 738.626298][T17914] netlink: 'syz.7.4292': attribute type 21 has an invalid length. [ 738.636170][T17914] netlink: 12226 bytes leftover after parsing attributes in process `syz.7.4292'. [ 738.645958][T17916] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4293'. [ 739.051187][T17938] device syzkaller0 entered promiscuous mode [ 739.061625][T17941] validate_nla: 2 callbacks suppressed [ 739.061659][T17941] netlink: 'syz.7.4304': attribute type 10 has an invalid length. [ 739.082846][T17941] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4304'. [ 741.249006][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4309'. [ 741.259394][T17960] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4309'. [ 741.268869][T17960] netlink: 33 bytes leftover after parsing attributes in process `syz.8.4309'. [ 741.280481][T17960] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4309'. [ 741.289985][T17960] netlink: 33 bytes leftover after parsing attributes in process `syz.8.4309'. [ 741.300765][T17960] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4309'. [ 741.310765][T17960] netlink: 33 bytes leftover after parsing attributes in process `syz.8.4309'. [ 741.579347][T17962] device syzkaller0 entered promiscuous mode [ 744.069593][T17982] netlink: 'syz.8.4315': attribute type 10 has an invalid length. [ 744.079108][T17982] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4315'. [ 744.131494][T17983] device syzkaller0 entered promiscuous mode [ 745.936157][T17994] netlink: 'syz.2.4317': attribute type 10 has an invalid length. [ 745.944261][T17994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4317'. [ 747.087886][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.094250][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.801127][T18009] device syzkaller0 entered promiscuous mode [ 748.991009][T18031] netlink: 9286 bytes leftover after parsing attributes in process `syz.8.4332'. [ 751.249565][T18042] netlink: 'syz.2.4338': attribute type 10 has an invalid length. [ 751.264322][T18042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4338'. [ 751.319733][T18044] netlink: 'syz.5.4339': attribute type 10 has an invalid length. [ 751.335085][T18044] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4339'. [ 755.517094][T18069] device pim6reg1 entered promiscuous mode [ 755.543409][T18091] netlink: 'syz.6.4355': attribute type 10 has an invalid length. [ 755.552982][T18091] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4355'. [ 755.566328][T18093] netlink: 'syz.5.4356': attribute type 10 has an invalid length. [ 755.574365][T18093] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4356'. [ 756.355876][T18113] netlink: 'syz.5.4372': attribute type 10 has an invalid length. [ 756.372563][T18113] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4372'. [ 758.867702][T18159] netlink: 'syz.2.4379': attribute type 10 has an invalid length. [ 758.892893][T18159] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4379'. [ 760.740176][T18199] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4405'. [ 760.769175][T18199] netlink: 'syz.8.4405': attribute type 12 has an invalid length. [ 760.785103][T18199] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4405'. [ 761.124468][T18210] netlink: 'syz.8.4396': attribute type 10 has an invalid length. [ 761.184504][T18210] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4396'. [ 761.737271][T18224] device syzkaller0 entered promiscuous mode [ 762.459376][T18229] netlink: 'syz.8.4414': attribute type 10 has an invalid length. [ 762.475718][T18229] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4414'. [ 764.525814][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 764.550935][ T4286] Bluetooth: hci5: unexpected subevent 0x0a length: 11 < 30 [ 765.889216][T18263] netlink: 184 bytes leftover after parsing attributes in process `syz.5.4418'. [ 767.164905][T18291] netlink: 'syz.2.4430': attribute type 5 has an invalid length. [ 767.267851][T18295] netlink: 15179 bytes leftover after parsing attributes in process `syz.5.4431'. [ 767.526559][T18298] netlink: 'syz.2.4433': attribute type 10 has an invalid length. [ 767.534662][T18298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4433'. [ 768.697782][T18334] netlink: 'syz.5.4450': attribute type 10 has an invalid length. [ 768.716830][T18334] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4450'. [ 769.475829][ T4286] Bluetooth: hci6: unexpected subevent 0x0a length: 11 < 30 [ 770.850081][T18377] netlink: 'syz.2.4467': attribute type 10 has an invalid length. [ 770.924069][T18377] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4467'. [ 771.918287][ T4286] Bluetooth: hci9: unexpected subevent 0x0a length: 11 < 30 [ 773.313977][T18422] netlink: 'syz.2.4486': attribute type 10 has an invalid length. [ 773.352591][T18422] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4486'. [ 773.564888][T18427] netlink: 65185 bytes leftover after parsing attributes in process `syz.8.4488'. [ 775.572034][T18456] netlink: 'syz.8.4501': attribute type 10 has an invalid length. [ 775.612094][T18456] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4501'. [ 776.123266][T18475] netlink: 198580 bytes leftover after parsing attributes in process `syz.8.4508'. [ 777.112617][T18489] delete_channel: no stack [ 780.083104][T18498] netlink: 822 bytes leftover after parsing attributes in process `syz.8.4517'. [ 780.112291][T18498] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge0 [ 780.442590][T18508] netlink: 'syz.7.4520': attribute type 10 has an invalid length. [ 780.483010][T18508] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4520'. [ 782.115775][T18551] netlink: 'syz.7.4537': attribute type 10 has an invalid length. [ 782.126981][T18551] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4537'. [ 783.914742][T18587] netlink: 198580 bytes leftover after parsing attributes in process `syz.5.4551'. [ 784.019270][T18591] netlink: 'syz.6.4553': attribute type 10 has an invalid length. [ 784.041948][T18591] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4553'. [ 784.103427][T18591] batman_adv: batadv0: Adding interface: virt_wifi0 [ 784.139687][T18591] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.225585][T18591] batman_adv: batadv0: Interface activated: virt_wifi0 [ 784.516274][T18601] netlink: 'syz.2.4556': attribute type 2 has an invalid length. [ 784.528369][T18601] netlink: 'syz.2.4556': attribute type 8 has an invalid length. [ 784.546734][T18601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4556'. [ 785.581301][T18624] netlink: 198580 bytes leftover after parsing attributes in process `syz.7.4565'. [ 786.645768][T18655] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.4581'. [ 786.910644][ T4286] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 787.617446][T18684] netlink: 'syz.7.4595': attribute type 10 has an invalid length. [ 791.311469][T18755] netlink: 'syz.8.4626': attribute type 10 has an invalid length. [ 791.320720][T18755] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4626'. [ 791.353062][T18753] netlink: 'syz.6.4625': attribute type 16 has an invalid length. [ 791.373684][T18753] netlink: 'syz.6.4625': attribute type 3 has an invalid length. [ 791.383346][T18755] batman_adv: batadv0: Adding interface: virt_wifi0 [ 791.403360][T18753] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4625'. [ 791.405076][T18755] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.582903][T18755] batman_adv: batadv0: Interface activated: virt_wifi0 [ 791.814154][T18766] device syzkaller0 entered promiscuous mode [ 795.714698][T18784] netlink: 'syz.5.4636': attribute type 22 has an invalid length. [ 795.724348][T18784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4636'. [ 798.749480][T18855] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.4664'. [ 799.081625][T18866] syzkaller0: refused to change device tx_queue_len [ 799.325606][T18873] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.4670'. [ 801.355345][T18924] sock: sock_timestamping_bind_phc: sock not bind to device [ 801.907870][T18939] netlink: 'syz.7.4693': attribute type 16 has an invalid length. [ 801.934154][T18939] netlink: 'syz.7.4693': attribute type 3 has an invalid length. [ 801.979252][T18939] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4693'. [ 802.367152][T18948] netlink: 'syz.2.4698': attribute type 10 has an invalid length. [ 802.395067][T18948] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4698'. [ 802.424272][T18948] batman_adv: batadv0: Adding interface: virt_wifi0 [ 802.519265][T18948] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.617764][T18948] batman_adv: batadv0: Interface activated: virt_wifi0 [ 805.068799][T18989] syzkaller0: refused to change device tx_queue_len [ 805.130659][T18987] netlink: 'syz.5.4712': attribute type 16 has an invalid length. [ 805.180818][T18987] netlink: 'syz.5.4712': attribute type 3 has an invalid length. [ 805.220669][T18987] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4712'. [ 808.568708][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.575852][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.002327][T19083] delete_channel: no stack [ 810.025838][T19083] delete_channel: no stack [ 810.711794][ T4286] Bluetooth: hci7: unexpected event 0x08 length: 15 > 4 [ 812.765395][T16552] Bluetooth: hci7: command 0x0406 tx timeout [ 817.429092][T19149] netlink: 'syz.7.4784': attribute type 5 has an invalid length. [ 820.838301][T19173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 820.863177][T19177] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4793'. [ 820.881732][T19178] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4793'. [ 824.336523][T19208] device syzkaller0 entered promiscuous mode [ 824.420602][T19210] netlink: 'syz.8.4801': attribute type 16 has an invalid length. [ 824.461373][T19210] netlink: 'syz.8.4801': attribute type 3 has an invalid length. [ 824.512103][T19210] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4801'. [ 825.020188][T19221] netlink: 180 bytes leftover after parsing attributes in process `syz.8.4809'. [ 825.081053][T19225] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 825.113233][T19221] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4809'. [ 825.803030][ T3655] syzkaller0: tun_net_xmit 76 [ 825.809050][ T3655] syzkaller0: tun_net_xmit 48 [ 825.818476][T19243] syzkaller0: create flow: hash 1834781969 index 2 [ 825.825707][T16586] syzkaller0: tun_net_xmit 76 [ 826.528015][ T3655] syzkaller0: tun_net_xmit 76 [ 826.688917][ T3655] syzkaller0: tun_net_xmit 76 [ 828.673504][T19244] syzkaller0: delete flow: hash 1834781969 index 2 [ 828.695368][ T127] syzkaller0: tun_net_xmit 76 [ 828.919236][T19251] netlink: 'syz.2.4820': attribute type 16 has an invalid length. [ 828.935799][T19251] netlink: 'syz.2.4820': attribute type 3 has an invalid length. [ 828.945468][T19251] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4820'. [ 831.753241][T19272] device syzkaller0 entered promiscuous mode [ 831.890256][T19278] netlink: 180 bytes leftover after parsing attributes in process `syz.7.4828'. [ 831.935929][T19278] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4828'. [ 832.510804][T19297] netlink: 'syz.6.4834': attribute type 16 has an invalid length. [ 832.525940][T19297] netlink: 'syz.6.4834': attribute type 3 has an invalid length. [ 832.575218][T19297] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4834'. [ 836.978639][T19319] device syzkaller0 entered promiscuous mode [ 836.985053][T16552] Bluetooth: hci6: Malformed Event: 0x2f [ 837.961249][T19351] delete_channel: no stack [ 837.974689][T19351] delete_channel: no stack [ 843.252182][T16552] Bluetooth: hci6: unexpected subevent 0x0a length: 150 > 30 [ 843.476990][T16552] Bluetooth: hci6: unexpected event 0x2c length: 151 > 17 [ 843.804697][T16552] Bluetooth: hci6: Unknown advertising packet type: 0x100 [ 844.450637][T19402] device syzkaller0 entered promiscuous mode [ 845.122495][T16552] Bluetooth: hci7: unexpected event 0x32 length: 15 > 9 [ 846.127358][T19433] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 846.142153][T19433] #PF: supervisor instruction fetch in kernel mode [ 846.148643][T19433] #PF: error_code(0x0010) - not-present page [ 846.154709][T19433] PGD 34e54067 P4D 34e54067 PUD 0 [ 846.159832][T19433] Oops: 0010 [#1] PREEMPT SMP KASAN [ 846.165024][T19433] CPU: 0 PID: 19433 Comm: syz.7.4877 Not tainted syzkaller #0 [ 846.172466][T19433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 846.182509][T19433] RIP: 0010:0x0 [ 846.185969][T19433] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 846.193318][T19433] RSP: 0018:ffffc90003427298 EFLAGS: 00010246 [ 846.199372][T19433] RAX: 1ffffffff162ab93 RBX: 1ffff92000684e64 RCX: 0000000000000000 [ 846.207338][T19433] RDX: ffffc90003427340 RSI: 0000000000000001 RDI: ffff8880639f4000 [ 846.215324][T19433] RBP: ffffc900034273b0 R08: ffff8880639f403f R09: 1ffff1100c73e807 [ 846.223283][T19433] R10: dffffc0000000000 R11: ffffed100c73e808 R12: ffffe8ffffcc4a40 [ 846.231244][T19433] R13: ffffffff8b155c98 R14: 0000000000000000 R15: ffff8880639f4000 [ 846.239201][T19433] FS: 00007fbe86e016c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 846.248118][T19433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 846.254691][T19433] CR2: ffffffffffffffd6 CR3: 0000000020e78000 CR4: 00000000003506f0 [ 846.262652][T19433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 846.270612][T19433] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 846.278573][T19433] Call Trace: [ 846.281857][T19433] [ 846.284784][T19433] bond_xdp_xmit+0x31e/0x550 [ 846.289676][T19433] ? bond_xdp_xmit+0x94/0x550 [ 846.294767][T19433] ? bond_xdp+0x8c0/0x8c0 [ 846.299102][T19433] ? __lock_acquire+0x7c40/0x7c40 [ 846.304127][T19433] bq_xmit_all+0xca9/0x1120 [ 846.308700][T19433] ? get_page_from_freelist+0x206b/0x2180 [ 846.314462][T19433] ? __dev_flush+0x1b0/0x1b0 [ 846.319083][T19433] ? rcu_is_watching+0x11/0xa0 [ 846.324173][T19433] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 846.330332][T19433] ? rcu_read_lock_bh_held+0x76/0xf0 [ 846.335622][T19433] ? rcu_read_lock_held+0x40/0x40 [ 846.340649][T19433] bq_enqueue+0x338/0x3d0 [ 846.345106][T19433] dev_map_enqueue_multi+0xf89/0x10f0 [ 846.350489][T19433] ? dev_map_enqueue+0x330/0x330 [ 846.355425][T19433] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 846.361586][T19433] ? rcu_read_lock_held+0x40/0x40 [ 846.366645][T19433] xdp_do_redirect_frame+0x477/0x650 [ 846.371928][T19433] bpf_test_run_xdp_live+0xa8b/0x1a90 [ 846.377299][T19433] ? 0xffffffffa0005180 [ 846.381442][T19433] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 846.386998][T19433] ? xdp_convert_md_to_buff+0x330/0x330 [ 846.392565][T19433] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 846.398805][T19433] ? bpf_prog_test_run_xdp+0x6a0/0xf80 [ 846.404257][T19433] bpf_prog_test_run_xdp+0x757/0xf80 [ 846.409541][T19433] ? __lock_acquire+0x7c40/0x7c40 [ 846.414565][T19433] ? dev_put+0x80/0x80 [ 846.418635][T19433] ? dev_put+0x80/0x80 [ 846.422700][T19433] bpf_prog_test_run+0x31c/0x390 [ 846.427710][T19433] __sys_bpf+0x62b/0x780 [ 846.431945][T19433] ? bpf_link_show_fdinfo+0x380/0x380 [ 846.437312][T19433] ? lock_chain_count+0x20/0x20 [ 846.442161][T19433] __x64_sys_bpf+0x78/0x90 [ 846.446569][T19433] do_syscall_64+0x4c/0xa0 [ 846.450976][T19433] ? clear_bhb_loop+0x60/0xb0 [ 846.455646][T19433] ? clear_bhb_loop+0x60/0xb0 [ 846.460314][T19433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 846.466214][T19433] RIP: 0033:0x7fbe85f9e0d9 [ 846.470624][T19433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.490228][T19433] RSP: 002b:00007fbe86e01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 846.498634][T19433] RAX: ffffffffffffffda RBX: 00007fbe86225fa0 RCX: 00007fbe85f9e0d9 [ 846.506593][T19433] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 846.514552][T19433] RBP: 00007fbe86035024 R08: 0000000000000000 R09: 0000000000000000 [ 846.522510][T19433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.530471][T19433] R13: 00007fbe86226038 R14: 00007fbe86225fa0 R15: 00007ffe7066c648 [ 846.538435][T19433] [ 846.541447][T19433] Modules linked in: [ 846.545335][T19433] CR2: 0000000000000000 [ 846.549479][T19433] ---[ end trace 0000000000000000 ]--- [ 846.554917][T19433] RIP: 0010:0x0 [ 846.558373][T19433] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 846.565722][T19433] RSP: 0018:ffffc90003427298 EFLAGS: 00010246 [ 846.571777][T19433] RAX: 1ffffffff162ab93 RBX: 1ffff92000684e64 RCX: 0000000000000000 [ 846.579824][T19433] RDX: ffffc90003427340 RSI: 0000000000000001 RDI: ffff8880639f4000 [ 846.587782][T19433] RBP: ffffc900034273b0 R08: ffff8880639f403f R09: 1ffff1100c73e807 [ 846.595741][T19433] R10: dffffc0000000000 R11: ffffed100c73e808 R12: ffffe8ffffcc4a40 [ 846.603700][T19433] R13: ffffffff8b155c98 R14: 0000000000000000 R15: ffff8880639f4000 [ 846.611656][T19433] FS: 00007fbe86e016c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 846.620572][T19433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 846.627147][T19433] CR2: ffffffffffffffd6 CR3: 0000000020e78000 CR4: 00000000003506f0 [ 846.635112][T19433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 846.643071][T19433] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 846.651029][T19433] Kernel panic - not syncing: Fatal exception in interrupt [ 846.658440][T19433] Kernel Offset: disabled [ 846.662763][T19433] Rebooting in 86400 seconds..