last executing test programs: 2.43448385s ago: executing program 4 (id=10835): r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0xc2, 0x4, 0x20, 0x9, 0x0, 0xf, 0x401c, 0xd, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x3, 0x5}, 0x1000, 0x97, 0x401, 0x2, 0x2, 0x378, 0x2, 0x0, 0x2, 0x0, 0x1000}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000000010000000100000600000001"], 0x50) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r6, r5, 0x5, 0xc}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7426189feb77613257275e8b25cde63a9acb8d8574b7dc0b95b8135457caf88ab4272e28c565a689e16d62774355a27b2fbbb0f72643f4ccc181b7f7a7ef32b5dc0e6431ae6ce7edb86244a1a2b2c7e395be8f420aa80274a0f001175b40ff9ca97bed540f27b9d026fec847a467b39a11ea4073", @ANYRES32, @ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r7 = openat$cgroup_ro(r3, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8983, &(0x7f0000000080)) recvmsg$kcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/33, 0x21}, {&(0x7f0000000180)=""/78, 0x4e}, {&(0x7f00000002c0)=""/183, 0xb7}], 0x3, &(0x7f00000003c0)=""/91, 0x5b}, 0x100) 2.4303728s ago: executing program 2 (id=10836): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r0}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0xfffffffffffffffd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@fwd={0x8}, @var={0x2, 0x0, 0x0, 0xe, 0x3}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000300)=""/256, 0x4a, 0x100, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x5, &(0x7f00000000c0), 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x56, 0x56, 0x6, [@func_proto={0x0, 0x6, 0x0, 0x5, 0x0, [{0x9, 0x1}, {0x5, 0x4}, {0x9, 0x3}, {0xe}, {0x7, 0x3}, {0xf, 0x4}]}, @datasec={0xf, 0x0, 0x0, 0xf, 0x2, [], '\x00\x00'}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x76}, 0x28) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1f00, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x0, 0x4, 0xf, 0x6}], 0x10, 0x7}, 0x94) 2.281188876s ago: executing program 0 (id=10837): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4474, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0xff, 0x0, 0x40, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x85a, 0x4}, 0x0, 0x7b, 0x8, 0x8, 0x1, 0x0, 0x82, 0x0, 0x7, 0x0, 0xa}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@struct={0x4, 0x0, 0x0, 0x4, 0x0, 0x1}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x100}, {0x6}]}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x2e]}}, 0x0, 0x49}, 0x28) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1004, 0x6dd700000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000580)) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0xb6, 0xd, 0xf2, 0x0, 0x3, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x102000, 0x7fffffffffffffff, 0x1, 0x2, 0xf, 0x5, 0x7, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x4, r2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001940)="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", 0xd80}, {&(0x7f0000000140)="a2870f1def66f48cc8830c7023bf744803527759543d4991bd867d665212c494d3d7e718ec41820651799c3898ee5c6d84fd2f96afe77cbbc94889f4d4ca", 0x3e}], 0x2}, 0x44) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.244302966s ago: executing program 3 (id=10838): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, '\b'}], 0x18}, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$TUNSETSTEERINGEBPF(r5, 0xb701, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, '\b'}], 0x18}, 0x0) recvmsg$kcm(r6, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000180)=@in6={0xa, 0x0, 0xfffffffe, @remote, 0x1}, 0x80, 0x0}, 0x20000000) 2.180538719s ago: executing program 2 (id=10839): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r0}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0xfffffffffffffffd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@fwd={0x8}, @var={0x2, 0x0, 0x0, 0xe, 0x3}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000300)=""/256, 0x4a, 0x100, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x5, &(0x7f00000000c0), 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x56, 0x56, 0x6, [@func_proto={0x0, 0x6, 0x0, 0x5, 0x0, [{0x9, 0x1}, {0x5, 0x4}, {0x9, 0x3}, {0xe}, {0x7, 0x3}, {0xf, 0x4}]}, @datasec={0xf, 0x0, 0x0, 0xf, 0x2, [], '\x00\x00'}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x76}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1f00, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x0, 0x4, 0xf, 0x6}], 0x10, 0x7}, 0x94) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.094935922s ago: executing program 4 (id=10840): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0x2}, 0x80, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300), 0xfffffffffffffffe, 0x40, r3}, 0x38) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e4"], 0xfdef) 2.093800122s ago: executing program 1 (id=10841): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r0}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0xfffffffffffffffd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@fwd={0x8}, @var={0x2, 0x0, 0x0, 0xe, 0x3}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000300)=""/256, 0x4a, 0x100, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x5, &(0x7f00000000c0), 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x61, 0x61, 0x6, [@func_proto={0x0, 0x6, 0x0, 0x5, 0x0, [{0x9, 0x1}, {0x5, 0x4}, {0x9, 0x3}, {0xe}, {0x7, 0x3}, {0xf, 0x4}]}, @datasec={0xf, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x80000000, 0x1}], '\x00'}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x82}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1f00, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x0, 0x4, 0xf, 0x6}], 0x10, 0x7}, 0x94) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.021974724s ago: executing program 0 (id=10842): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r0}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0xfffffffffffffffd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@fwd={0x8}, @var={0x2, 0x0, 0x0, 0xe, 0x3}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}]}}, &(0x7f0000000300)=""/256, 0x42, 0x100, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0), 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1f00, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x0, 0x4, 0xf, 0x6}], 0x10, 0x7}, 0x94) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) 1.906895268s ago: executing program 2 (id=10843): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000002940)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000014c0)="294f28dfe56d898ba23606", 0xb}], 0x2}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x422}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10048, 0x2, 0x0, 0x0, 0x200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000140)="f177b6", 0x3}], 0x1}, 0x20000000) sendmsg$kcm(r2, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000004a80)="8b", 0x1}], 0x1}, 0x0) close(r2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000007c0)={r1}) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) 1.886215878s ago: executing program 3 (id=10844): r0 = socket$kcm(0x1e, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x18, r0}, 0x18) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000003100b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93450000000000000000", 0xd8}], 0x1}, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000400), 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x18}, 0x18) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x80, 0x0}, 0x20008044) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x4, 0x80, 0x40, 0x0, 0x8, 0x7f, 0x0, 0xa33, 0x1005a, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xa, 0x1ff}, 0x8428, 0x4, 0x4, 0x6, 0xfffffffffffffffd, 0x6, 0x589, 0x0, 0x73b, 0x0, 0x1}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0x35, 0x0, &(0x7f0000000380)="d2ff030060010000009e08f086dd8c67a78567439587cf66259c06aef4b56d683c877828136c6c50e89234f4b6a69e84e71e7e3d4d", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[], 0x48) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x4a, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_bp={0x0, 0xc}, 0x100032, 0x0, 0x0, 0x6, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x104000000000000}, 0x0, 0x0, r1, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 1.799902891s ago: executing program 0 (id=10845): socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x51) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000940), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000580)="27031c00160014000000002f1eafacf706e105000000894f00030001ee0b80558ddbba9b37242d29a50ed004484890af07c3650596", 0x35}], 0x1}, 0x4004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="0dc83546d2175b27852fc93616", 0xd}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r2], 0xfe33) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) 1.652313086s ago: executing program 1 (id=10846): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="1400000015000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x40000040) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000940)={'veth1_to_hsr\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$kcm(0x29, 0x4, 0x0) 1.648597676s ago: executing program 4 (id=10847): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x6, 0x7afb}, 0x0, 0x0, 0x2, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$sock(r1, &(0x7f0000000c80)={&(0x7f0000000480)=@phonet={0x23, 0x40, 0xff, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000c40)}, 0x40000c8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000042000000008000000800c3c948bc0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000feffffff00"/27], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\a\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xd, &(0x7f0000000740)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x4, 0x0, 0x6, 0x7, 0x1, 0xffffffffffffffc0, 0xfffffffffffffff0}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000140)=ANY=[], 0x0, 0x2, 0xa3, &(0x7f0000000440)=""/163, 0x41100, 0x4a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x6, 0xbb5c, 0x81}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 1.399662074s ago: executing program 3 (id=10848): r0 = socket$kcm(0x1e, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x18, r0}, 0x18) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000003100b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93450000000000000000", 0xd8}], 0x1}, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000400), 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x18}, 0x18) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x80, 0x0}, 0x20008044) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x4, 0x80, 0x40, 0x0, 0x8, 0x7f, 0x0, 0xa33, 0x1005a, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xa, 0x1ff}, 0x8428, 0x4, 0x4, 0x6, 0xfffffffffffffffd, 0x6, 0x589, 0x0, 0x73b, 0x0, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 1.283025588s ago: executing program 2 (id=10849): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r0}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0xfffffffffffffffd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@fwd={0x8}, @var={0x2, 0x0, 0x0, 0xe, 0x3}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000300)=""/256, 0x4a, 0x100, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x5, &(0x7f00000000c0), 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x61, 0x61, 0x6, [@func_proto={0x0, 0x6, 0x0, 0x5, 0x0, [{0x9, 0x1}, {0x5, 0x4}, {0x9, 0x3}, {0xe}, {0x7, 0x3}, {0xf, 0x4}]}, @datasec={0xf, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x80000000, 0x1}], '\x00'}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x82}, 0x28) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1f00, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x0, 0x4, 0xf, 0x6}], 0x10, 0x7}, 0x94) 1.20366788s ago: executing program 1 (id=10850): r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0xc2, 0x4, 0x20, 0x9, 0x0, 0xf, 0x401c, 0xd, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x3, 0x5}, 0x1000, 0x97, 0x401, 0x2, 0x2, 0x378, 0x2, 0x0, 0x2, 0x0, 0x1000}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000000010000000100000600000001"], 0x50) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r6, r5, 0x5, 0xc}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7426189feb77613257275e8b25cde63a9acb8d8574b7dc0b95b8135457caf88ab4272e28c565a689e16d62774355a27b2fbbb0f72643f4ccc181b7f7a7ef32b5dc0e6431ae6ce7edb86244a1a2b2c7e395be8f420aa80274a0f001175b40ff9ca97bed540f27b9d026fec847a467b39a11ea4073", @ANYRES32, @ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r7 = openat$cgroup_ro(r3, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8983, &(0x7f0000000080)) recvmsg$kcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/33, 0x21}, {&(0x7f0000000180)=""/78, 0x4e}, {&(0x7f00000002c0)=""/183, 0xb7}], 0x3, &(0x7f00000003c0)=""/91, 0x5b}, 0x100) 1.200039731s ago: executing program 0 (id=10851): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x21}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, 0x0, &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0x9}, 0xac4, 0x4, 0x0, 0x5, 0x8000000, 0x47db076f, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002180)={r0, 0xe0, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001ec0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f0000001f80)=[{}], 0x8, 0x10, &(0x7f0000001fc0), &(0x7f0000002000), 0x8, 0x56, 0x8, 0x8, &(0x7f0000002040)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000021c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002200)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x9, '\x00', r5, r6, 0x1, 0x3}, 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0xbd, 0x0, 0x0, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$kcm(r1, &(0x7f0000001e80)={&(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x2, 0x1, 0x2}}, 0x80, &(0x7f0000001b80)=[{0x0}, {&(0x7f0000000840)="6fd543a25e7389f01a7485dd79837c1a222da04b0cb17ebe0cbbe4447993ce588ff17568b1da07a93260191b9ae640466fabb58efeca1e4a51c0c697d8718492764660aab571d12ac2ad31950e93c4361dcf3c1fd4462816f9891299cb2c3188e6874e3e6db8f30dd3cd4fde96e0857ad318831e75760c7121b776aa8a6c60532490c343333aeaa4bd3b428659c9ca24f880183c0acf3dc4885657100b341f7e718a179e2d618ca57e0093c455", 0xad}, {&(0x7f0000000900)="cda5ce8e049e386de83d492f15b2d5bfa892724f662877a6f3b33928f7ed4f9c942cd352e96589bedae11d9aeb3178ba65c470287d50905d43409a0a3769b4579ed7f5774aab8555772b703927189174ec0f0d48a66550632db3753671eca3990d9a73b9eb47102bf5c221f41c793dfe6745af200a6c4c73893776c2564cb6ed26ce05933047dd2c971c2002cbae33204e463dea424c1f6eab41c2e1daacdecfa60e480caf4122d7fe61827f163996dbe7d0e5a0bf4780939b7e93a2267487badc7403062e5c79efdd6c77b2b8b9157f6aabb2da2bacbb07c72e8520fd7260", 0xdf}, {&(0x7f0000000a00)="b2b9f8619a016d14f8529c4add6d23573661c7e3948a262f26404e2865bd631753d1d2885636e457749bf4d3abd1ebd3c70c831091a4dde1159fcd8ae141bbf7b3", 0x41}, {&(0x7f0000001a80)="560364996101d05f231b4ef7dde99a4266ac591f29e6d3f0f78546759d3c3e984063ed689a2ccf0ffd7f74eb68823450cba63be286fda974a85f13649a905f7a254fe13a7e2531e1cf2a2d95f1c07501d3902da294c732e0bd5ee5744d4a4550e6242547b89b5ce197fba5aba7517075515a7f9619fc2ccddb21d7418d6299a35981103ae12458d08853e567f23cba3d077d739cefba263fb99b1f0ec0274671cd543d66f2993df0a997b2acc8e3b993554bf3fedf186d1b2b056781783734d10d05ce486be7666faea4bfda0cef609274969d47e0fc10e4ee3020b5bc75", 0xde}], 0x5, &(0x7f0000001c00)=[{0x28, 0x10e, 0x100, "4fbf3774b80b16e61f0e43ecc6a5ac7469c18a87926b4911"}, {0xd0, 0x103, 0x2, "ac5d84053c5f2c48f3fb27bbad85de5f4c162c8eef5231cbdeec0a2ec4e681066f60c38e01640a9483830ae4b62856452cc006a948db79022b47b4abe71cde698242dc251b7b3f2a82f425737b1b163d23da89faa046c3e8546dfdf1ddc114b082c0b7b67ef1c9c4d40da0e15d2c72055319208a2b1b41c35ed5f6c4a8e42ed4e63fc23e360f20bc7a9fb3e294e5e4d2f1998d7b623d75b194095b5d01266de2d95efd667b9bad447d25864dfaa606905d12bab31e31cd5ee9"}, {0x50, 0x111, 0x3, "396c9cc4fb325a0d7768207bd080ca97fef1f8d3151178f6050924c080a50dcbc6e852ed9e65a2649e0c8ffc70ea4fa57b6ef15539aa796c39"}, {0x100, 0x114, 0x35, "5ea018ecb998bcca6eb08f64b628153a2faf13fdb63efe447fb46fc960d9a4e44f1eb216b6548de76fb1b4141f8c1b3b620e87b35869809f48b5bd7324d4dfaf9602eb8177ca83123c4836c936086b8f68da2875366709ad7af1258d398690ac963141ae7d4aae8fc7b3fd65b52c5641f0ac0468548b51c294328a2fa65eef3470e9f7c569520c71a30d613db5ae3b14b4b625138666b8cb6d38c023eafedf4eab44254bb49b74badefd774159eccf96fb9e54259da9593e888f40080feb4cf386d3ce809589324f0ac2bf812bee6e154b7ee69418c03bf0d6b78c18e2d639be67d35e6126733f4abc707f04"}], 0x248}, 0xc0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7d, 0x7d, 0x9, [@datasec={0x2, 0x5, 0x0, 0xf, 0x1, [{0x5, 0x9ef, 0x1}, {0x2, 0x7, 0xe0fb}, {0x4, 0x4, 0x1}, {0x5, 0xffffff91, 0x7}, {0x2, 0x8, 0x80000000}], 'c'}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x5}, @typedef={0x9, 0x0, 0x0, 0x8, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}]}, {0x0, [0x2e, 0x30, 0x0, 0x30, 0x30, 0x0, 0x2e]}}, &(0x7f0000000500)=""/239, 0xa1, 0xef, 0x1}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x3, '\x00', r7, r8, 0x4, 0x1}, 0x50) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) 1.193801361s ago: executing program 4 (id=10852): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4474, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0xff, 0x0, 0x40, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x85a, 0x4}, 0x0, 0x7b, 0x8, 0x8, 0x1, 0x0, 0x82, 0x0, 0x7, 0x0, 0xa}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@struct={0x4, 0x0, 0x0, 0x4, 0x0, 0x1}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x100}, {0x6}]}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x30, 0x2e, 0x2e]}}, 0x0, 0x49}, 0x28) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1004, 0x6dd700000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000580)) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0xb6, 0xd, 0xf2, 0x0, 0x3, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x102000, 0x7fffffffffffffff, 0x1, 0x2, 0xf, 0x5, 0x7, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x4, r2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001940)="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", 0xd80}, {&(0x7f0000000140)="a2870f1def66f48cc8830c7023bf744803527759543d4991bd867d665212c494d3d7e718ec41820651799c3898ee5c6d84fd2f96afe77cbbc94889f4d4ca", 0x3e}], 0x2}, 0x44) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 1.098354234s ago: executing program 3 (id=10853): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r0}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0xfffffffffffffffd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@fwd={0x8}, @var={0x2, 0x0, 0x0, 0xe, 0x3}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000300)=""/256, 0x4a, 0x100, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x5, &(0x7f00000000c0), 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x56, 0x56, 0x6, [@func_proto={0x0, 0x6, 0x0, 0x5, 0x0, [{0x9, 0x1}, {0x5, 0x4}, {0x9, 0x3}, {0xe}, {0x7, 0x3}, {0xf, 0x4}]}, @datasec={0xf, 0x0, 0x0, 0xf, 0x2, [], '\x00\x00'}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x76}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1f00, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x0, 0x4, 0xf, 0x6}], 0x10, 0x7}, 0x94) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 936.42464ms ago: executing program 2 (id=10854): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x40049409, 0x3) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000006a00810400afef3a0b04a2377caf604bf96b1324dc851b5ef40502e0dfffff0e00f8000e00000002", 0x2c}], 0x1}, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, 0x0, 0x10000) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x43, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x700e, &(0x7f0000000180)=[{&(0x7f0000001b80)=""/4092, 0xfff}, {&(0x7f0000000240)=""/131, 0xb9}, {&(0x7f0000004640)=""/4098, 0x1002}, {0x0}, {&(0x7f0000000b80)=""/4090, 0xffffff73}], 0x5}, 0x40016002) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) write$cgroup_devices(r5, 0x0, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) 903.48912ms ago: executing program 1 (id=10855): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r0}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0xfffffffffffffffd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@fwd={0x8}, @var={0x2, 0x0, 0x0, 0xe, 0x3}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}]}}, &(0x7f0000000300)=""/256, 0x42, 0x100, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0), 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1f00, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x0, 0x4, 0xf, 0x6}], 0x10, 0x7}, 0x94) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) 827.339103ms ago: executing program 0 (id=10856): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r0}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0xfffffffffffffffd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@fwd={0x8}, @var={0x2, 0x0, 0x0, 0xe, 0x3}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000300)=""/256, 0x4a, 0x100, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x5, &(0x7f00000000c0), 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x61, 0x61, 0x6, [@func_proto={0x0, 0x6, 0x0, 0x5, 0x0, [{0x9, 0x1}, {0x5, 0x4}, {0x9, 0x3}, {0xe}, {0x7, 0x3}, {0xf, 0x4}]}, @datasec={0xf, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x80000000, 0x1}], '\x00'}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x82}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1f00, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x0, 0x4, 0xf, 0x6}], 0x10, 0x7}, 0x94) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 494.888364ms ago: executing program 1 (id=10857): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0x2}, 0x80, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300), 0xfffffffffffffffe, 0x40, r3}, 0x38) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e4"], 0xfdef) 493.669594ms ago: executing program 4 (id=10858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c022, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x1001, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4620, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x400, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB]) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) 401.684897ms ago: executing program 3 (id=10859): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000002940)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000014c0)="294f28dfe56d898ba23606", 0xb}], 0x2}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x422}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10048, 0x2, 0x0, 0x0, 0x200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000140)="f177b6", 0x3}], 0x1}, 0x20000000) sendmsg$kcm(r2, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000004a80)="8b", 0x1}], 0x1}, 0x0) close(r2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000007c0)={r1}) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) 69.666328ms ago: executing program 0 (id=10860): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(0x0, 0x0, 0x1, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x5, 0x0, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', 0x0, r0, 0x1, 0x4, 0x3}, 0x50) setsockopt$sock_attach_bpf(r5, 0x107, 0x8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x80, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a80), &(0x7f0000000ac0)=[{0x4, 0x2, 0xc, 0x2}], 0x10, 0x8}, 0x94) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, 0x0, 0x40890) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="2e00000011008b88040f80ee59ac990413080048250000005e2980421803001825800000000f0000ea7f2e0c0012", 0x2e}], 0x1}, 0x0) 12.086299ms ago: executing program 1 (id=10861): socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x51) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000940), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000580)="27031c00160014000000002f1eafacf706e105000000894f00030001ee0b80558ddbba9b37242d29a50ed004484890af07c3650596", 0x35}], 0x1}, 0x4004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="0dc83546d2175b27852fc93616", 0xd}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r2], 0xfe33) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) 11.212039ms ago: executing program 3 (id=10862): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4d33, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x3, 0x4}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100400208000000050000000900180000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40040d4) 10.251599ms ago: executing program 2 (id=10863): r0 = socket$kcm(0x1e, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x18, r0}, 0x18) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000003100b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93450000000000000000", 0xd8}], 0x1}, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000400), 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x18}, 0x18) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x80, 0x0}, 0x20008044) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x4, 0x80, 0x40, 0x0, 0x8, 0x7f, 0x0, 0xa33, 0x1005a, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xa, 0x1ff}, 0x8428, 0x4, 0x4, 0x6, 0xfffffffffffffffd, 0x6, 0x589, 0x0, 0x73b, 0x0, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 0s ago: executing program 4 (id=10864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000900)="d28a08d988a88d8bf2f08c8286dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4}, {0xfffffffe, 0x4}]}]}, {0x0, [0x30, 0xe]}}, 0x0, 0x38, 0x0, 0x1}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, 0xfffffffffffffffd, 0xf0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) close(r0) socket$kcm(0xa, 0x2, 0x11) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b0100004ec6"}) r7 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) kernel console output (not intermixed with test programs): nd+0x380/0x380 [ 1213.334615][T28830] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1213.340353][T28830] ? verify_lock_unused+0x140/0x140 [ 1213.345576][T28830] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1213.351321][T28830] ? perf_trace_lock+0x301/0x390 [ 1213.356279][T28830] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1213.362822][T28830] netlink_rcv_skb+0x1f5/0x440 [ 1213.367603][T28830] ? genl_bind+0x380/0x380 [ 1213.372035][T28830] ? netlink_ack+0xb50/0xb50 [ 1213.377147][T28830] ? __lock_acquire+0x7d10/0x7d10 [ 1213.382261][T28830] ? down_read+0x1aa/0x2e0 [ 1213.386720][T28830] genl_rcv+0x24/0x40 [ 1213.390918][T28830] netlink_unicast+0x774/0x920 [ 1213.395803][T28830] netlink_sendmsg+0x8ba/0xbe0 [ 1213.400598][T28830] ? netlink_getsockopt+0x570/0x570 [ 1213.405904][T28830] ? aa_sock_msg_perm+0x94/0x150 [ 1213.410864][T28830] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1213.416341][T28830] ? security_socket_sendmsg+0x7c/0xa0 [ 1213.421910][T28830] ? netlink_getsockopt+0x570/0x570 [ 1213.427121][T28830] ____sys_sendmsg+0x5b7/0x8f0 [ 1213.431935][T28830] ? __sys_sendmsg_sock+0x30/0x30 [ 1213.437080][T28830] ? import_iovec+0x6f/0xa0 [ 1213.441614][T28830] ___sys_sendmsg+0x236/0x2e0 [ 1213.446429][T28830] ? __sys_sendmsg+0x2a0/0x2a0 [ 1213.451377][T28830] __se_sys_sendmsg+0x1af/0x290 [ 1213.456285][T28830] ? __x64_sys_sendmsg+0x80/0x80 [ 1213.461403][T28830] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1213.467326][T28830] do_syscall_64+0x4c/0xa0 [ 1213.471757][T28830] ? clear_bhb_loop+0x30/0x80 [ 1213.476474][T28830] ? clear_bhb_loop+0x30/0x80 [ 1213.481169][T28830] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1213.487167][T28830] RIP: 0033:0x7f163efbbe59 [ 1213.491633][T28830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1213.511376][T28830] RSP: 002b:00007f163d215028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1213.519954][T28830] RAX: ffffffffffffffda RBX: 00007f163f234fa0 RCX: 00007f163efbbe59 [ 1213.528062][T28830] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1213.536246][T28830] RBP: 00007f163f051d6f R08: 0000000000000000 R09: 0000000000000000 [ 1213.544430][T28830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1213.552646][T28830] R13: 00007f163f235038 R14: 00007f163f234fa0 R15: 00007fff0064fe68 [ 1213.560693][T28830] [ 1213.845578][T28846] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8808'. [ 1213.886580][T28849] netlink: 'syz.2.8796': attribute type 10 has an invalid length. [ 1213.970081][T28846] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1213.979668][T28846] CPU: 0 PID: 28846 Comm: syz.3.8808 Not tainted syzkaller #0 [ 1213.987800][T28846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1213.998208][T28846] Call Trace: [ 1214.001513][T28846] [ 1214.004547][T28846] dump_stack_lvl+0x188/0x250 [ 1214.009233][T28846] ? show_regs_print_info+0x20/0x20 [ 1214.014443][T28846] ? load_image+0x400/0x400 [ 1214.019078][T28846] sysfs_warn_dup+0x8a/0xa0 [ 1214.023602][T28846] sysfs_do_create_link_sd+0xc0/0x110 [ 1214.029006][T28846] device_add+0x7f6/0x1000 [ 1214.033614][T28846] wiphy_register+0x1e81/0x2c30 [ 1214.038626][T28846] ? cfg80211_event_work+0x40/0x40 [ 1214.043849][T28846] ? _dev_printk+0x6/0x180 [ 1214.048413][T28846] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1214.054537][T28846] ieee80211_register_hw+0x2aa1/0x3af0 [ 1214.060022][T28846] ? ieee80211_tasklet_handler+0x20/0x20 [ 1214.066038][T28846] ? hrtimer_init+0xdb/0x220 [ 1214.070840][T28846] ? __sanitizer_cov_trace_const_cmp8+0x2c/0x80 [ 1214.077525][T28846] ? hrtimer_init+0x10c/0x220 [ 1214.082264][T28846] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1214.088004][T28846] hwsim_new_radio_nl+0xa6f/0xc40 [ 1214.093157][T28846] genl_rcv_msg+0xcea/0xf90 [ 1214.097990][T28846] ? genl_bind+0x380/0x380 [ 1214.102630][T28846] ? verify_lock_unused+0x140/0x140 [ 1214.107918][T28846] ? verify_lock_unused+0x140/0x140 [ 1214.113421][T28846] ? rcu_nmi_exit+0x6f/0xf0 [ 1214.117986][T28846] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1214.123840][T28846] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1214.130415][T28846] netlink_rcv_skb+0x1f5/0x440 [ 1214.135369][T28846] ? genl_bind+0x380/0x380 [ 1214.139936][T28846] ? netlink_ack+0xb50/0xb50 [ 1214.145007][T28846] ? __lock_acquire+0x7d10/0x7d10 [ 1214.150064][T28846] ? down_read+0x1aa/0x2e0 [ 1214.154652][T28846] genl_rcv+0x24/0x40 [ 1214.158764][T28846] netlink_unicast+0x774/0x920 [ 1214.163548][T28846] netlink_sendmsg+0x8ba/0xbe0 [ 1214.168400][T28846] ? netlink_getsockopt+0x570/0x570 [ 1214.173622][T28846] ? aa_sock_msg_perm+0x94/0x150 [ 1214.178563][T28846] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1214.183991][T28846] ? security_socket_sendmsg+0x7c/0xa0 [ 1214.189625][T28846] ? netlink_getsockopt+0x570/0x570 [ 1214.194844][T28846] ____sys_sendmsg+0x5b7/0x8f0 [ 1214.199707][T28846] ? __sys_sendmsg_sock+0x30/0x30 [ 1214.204841][T28846] ? import_iovec+0x6f/0xa0 [ 1214.209373][T28846] ___sys_sendmsg+0x236/0x2e0 [ 1214.214353][T28846] ? __sys_sendmsg+0x2a0/0x2a0 [ 1214.219477][T28846] ? __fget_files+0x394/0x480 [ 1214.224431][T28846] __se_sys_sendmsg+0x1af/0x290 [ 1214.229518][T28846] ? __x64_sys_sendmsg+0x80/0x80 [ 1214.234474][T28846] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1214.241027][T28846] ? lockdep_hardirqs_on+0x94/0x140 [ 1214.246334][T28846] do_syscall_64+0x4c/0xa0 [ 1214.250755][T28846] ? clear_bhb_loop+0x30/0x80 [ 1214.255428][T28846] ? clear_bhb_loop+0x30/0x80 [ 1214.260218][T28846] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1214.266130][T28846] RIP: 0033:0x7fa88735ae59 [ 1214.270637][T28846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.290559][T28846] RSP: 002b:00007fa8855b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1214.298991][T28846] RAX: ffffffffffffffda RBX: 00007fa8875d3fa0 RCX: 00007fa88735ae59 [ 1214.306996][T28846] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1214.314965][T28846] RBP: 00007fa8873f0d6f R08: 0000000000000000 R09: 0000000000000000 [ 1214.322933][T28846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1214.331574][T28846] R13: 00007fa8875d4038 R14: 00007fa8875d3fa0 R15: 00007ffdf9938328 [ 1214.342374][T28846] [ 1214.657602][T28857] netlink: 'syz.4.8802': attribute type 3 has an invalid length. [ 1214.674632][T28857] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.8802'. [ 1215.378087][T28872] netlink: 'syz.3.8807': attribute type 2 has an invalid length. [ 1215.402784][T28872] netlink: 'syz.3.8807': attribute type 8 has an invalid length. [ 1215.508214][T28872] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8807'. [ 1215.668712][T28884] netlink: 'syz.1.8812': attribute type 10 has an invalid length. [ 1215.710862][T28884] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.744122][T28884] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.800796][T28884] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.831062][T28888] netlink: 'syz.2.8814': attribute type 29 has an invalid length. [ 1215.856074][T28884] device geneve0 entered promiscuous mode [ 1215.893498][T28888] netlink: 'syz.2.8814': attribute type 29 has an invalid length. [ 1215.917678][T28894] netlink: 'syz.2.8814': attribute type 4 has an invalid length. [ 1215.940759][T28893] netlink: 'syz.2.8814': attribute type 29 has an invalid length. [ 1215.950261][T28894] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.8814'. [ 1216.185770][T28901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8817'. [ 1216.784818][T28916] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8824'. [ 1217.036195][T28916] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1217.182376][T28916] CPU: 1 PID: 28916 Comm: syz.1.8824 Not tainted syzkaller #0 [ 1217.189917][T28916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1217.200199][T28916] Call Trace: [ 1217.203607][T28916] [ 1217.206579][T28916] dump_stack_lvl+0x188/0x250 [ 1217.211321][T28916] ? show_regs_print_info+0x20/0x20 [ 1217.216738][T28916] ? load_image+0x400/0x400 [ 1217.221400][T28916] sysfs_warn_dup+0x8a/0xa0 [ 1217.226656][T28916] sysfs_do_create_link_sd+0xc0/0x110 [ 1217.232723][T28916] device_add+0x7f6/0x1000 [ 1217.237223][T28916] wiphy_register+0x1e81/0x2c30 [ 1217.242237][T28916] ? cfg80211_event_work+0x40/0x40 [ 1217.247566][T28916] ? minstrel_ht_alloc+0x808/0x980 [ 1217.252748][T28916] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1217.259012][T28916] ieee80211_register_hw+0x2aa1/0x3af0 [ 1217.264645][T28916] ? ieee80211_tasklet_handler+0x20/0x20 [ 1217.270426][T28916] ? rcu_is_watching+0x11/0xa0 [ 1217.275241][T28916] ? memset+0x1e/0x40 [ 1217.279354][T28916] ? hrtimer_init+0x10c/0x220 [ 1217.284224][T28916] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1217.290196][T28916] hwsim_new_radio_nl+0xa6f/0xc40 [ 1217.295315][T28916] genl_rcv_msg+0xcea/0xf90 [ 1217.299987][T28916] ? genl_bind+0x380/0x380 [ 1217.304475][T28916] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1217.309738][T28916] ? verify_lock_unused+0x140/0x140 [ 1217.315001][T28916] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1217.320781][T28916] ? perf_trace_lock+0x301/0x390 [ 1217.325862][T28916] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1217.332543][T28916] netlink_rcv_skb+0x1f5/0x440 [ 1217.337340][T28916] ? genl_bind+0x380/0x380 [ 1217.341795][T28916] ? netlink_ack+0xb50/0xb50 [ 1217.346437][T28916] ? __lock_acquire+0x7d10/0x7d10 [ 1217.351679][T28916] ? down_read+0x1aa/0x2e0 [ 1217.356215][T28916] genl_rcv+0x24/0x40 [ 1217.360215][T28916] netlink_unicast+0x774/0x920 [ 1217.365017][T28916] netlink_sendmsg+0x8ba/0xbe0 [ 1217.369808][T28916] ? netlink_getsockopt+0x570/0x570 [ 1217.375022][T28916] ? aa_sock_msg_perm+0x94/0x150 [ 1217.380071][T28916] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1217.385373][T28916] ? security_socket_sendmsg+0x7c/0xa0 [ 1217.390856][T28916] ? netlink_getsockopt+0x570/0x570 [ 1217.396153][T28916] ____sys_sendmsg+0x5b7/0x8f0 [ 1217.400945][T28916] ? __sys_sendmsg_sock+0x30/0x30 [ 1217.406000][T28916] ? import_iovec+0x6f/0xa0 [ 1217.410524][T28916] ___sys_sendmsg+0x236/0x2e0 [ 1217.415236][T28916] ? __sys_sendmsg+0x2a0/0x2a0 [ 1217.420033][T28916] ? trace_event_raw_event_lock+0x270/0x270 [ 1217.425986][T28916] __se_sys_sendmsg+0x1af/0x290 [ 1217.430942][T28916] ? __x64_sys_sendmsg+0x80/0x80 [ 1217.435893][T28916] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1217.441921][T28916] ? lockdep_hardirqs_on+0x94/0x140 [ 1217.447257][T28916] do_syscall_64+0x4c/0xa0 [ 1217.451684][T28916] ? clear_bhb_loop+0x30/0x80 [ 1217.456460][T28916] ? clear_bhb_loop+0x30/0x80 [ 1217.461172][T28916] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1217.467224][T28916] RIP: 0033:0x7fc1614ade59 [ 1217.471669][T28916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1217.491641][T28916] RSP: 002b:00007fc15f707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1217.500534][T28916] RAX: ffffffffffffffda RBX: 00007fc161726fa0 RCX: 00007fc1614ade59 [ 1217.508626][T28916] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1217.516711][T28916] RBP: 00007fc161543d6f R08: 0000000000000000 R09: 0000000000000000 [ 1217.524694][T28916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1217.532766][T28916] R13: 00007fc161727038 R14: 00007fc161726fa0 R15: 00007fff1686b708 [ 1217.540776][T28916] [ 1218.333590][T28947] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8830'. [ 1218.473727][T28947] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1218.488588][T28947] CPU: 0 PID: 28947 Comm: syz.3.8830 Not tainted syzkaller #0 [ 1218.496196][T28947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1218.506440][T28947] Call Trace: [ 1218.509746][T28947] [ 1218.512701][T28947] dump_stack_lvl+0x188/0x250 [ 1218.517415][T28947] ? show_regs_print_info+0x20/0x20 [ 1218.522635][T28947] ? load_image+0x400/0x400 [ 1218.527182][T28947] sysfs_warn_dup+0x8a/0xa0 [ 1218.531719][T28947] sysfs_do_create_link_sd+0xc0/0x110 [ 1218.537221][T28947] device_add+0x7f6/0x1000 [ 1218.541692][T28947] wiphy_register+0x1e81/0x2c30 [ 1218.546601][T28947] ? cfg80211_event_work+0x40/0x40 [ 1218.551742][T28947] ? minstrel_ht_alloc+0x808/0x980 [ 1218.556887][T28947] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1218.562996][T28947] ieee80211_register_hw+0x2aa1/0x3af0 [ 1218.568690][T28947] ? ieee80211_tasklet_handler+0x20/0x20 [ 1218.574357][T28947] ? rcu_is_watching+0x11/0xa0 [ 1218.579168][T28947] ? memset+0x1e/0x40 [ 1218.583269][T28947] ? hrtimer_init+0x10c/0x220 [ 1218.588165][T28947] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1218.593939][T28947] hwsim_new_radio_nl+0xa6f/0xc40 [ 1218.599013][T28947] genl_rcv_msg+0xcea/0xf90 [ 1218.603559][T28947] ? genl_bind+0x380/0x380 [ 1218.608008][T28947] ? perf_trace_lock_acquire+0xed/0x3e0 [ 1218.613597][T28947] ? verify_lock_unused+0x140/0x140 [ 1218.618822][T28947] ? perf_trace_lock_acquire+0xed/0x3e0 [ 1218.624404][T28947] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1218.631229][T28947] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1218.637852][T28947] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1218.644414][T28947] netlink_rcv_skb+0x1f5/0x440 [ 1218.649221][T28947] ? genl_bind+0x380/0x380 [ 1218.653680][T28947] ? netlink_ack+0xb50/0xb50 [ 1218.658307][T28947] ? __lock_acquire+0x7d10/0x7d10 [ 1218.663378][T28947] ? down_read+0x1aa/0x2e0 [ 1218.667842][T28947] genl_rcv+0x24/0x40 [ 1218.671855][T28947] netlink_unicast+0x774/0x920 [ 1218.676834][T28947] netlink_sendmsg+0x8ba/0xbe0 [ 1218.681736][T28947] ? netlink_getsockopt+0x570/0x570 [ 1218.687198][T28947] ? aa_sock_msg_perm+0x94/0x150 [ 1218.692175][T28947] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1218.697578][T28947] ? security_socket_sendmsg+0x7c/0xa0 [ 1218.703072][T28947] ? netlink_getsockopt+0x570/0x570 [ 1218.708296][T28947] ____sys_sendmsg+0x5b7/0x8f0 [ 1218.713109][T28947] ? __sys_sendmsg_sock+0x30/0x30 [ 1218.718273][T28947] ? import_iovec+0x6f/0xa0 [ 1218.722918][T28947] ___sys_sendmsg+0x236/0x2e0 [ 1218.727737][T28947] ? __sys_sendmsg+0x2a0/0x2a0 [ 1218.732905][T28947] ? percpu_counter_add_batch+0x13b/0x160 [ 1218.738674][T28947] __se_sys_sendmsg+0x1af/0x290 [ 1218.743537][T28947] ? __x64_sys_sendmsg+0x80/0x80 [ 1218.748477][T28947] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1218.754488][T28947] ? lockdep_hardirqs_on+0x94/0x140 [ 1218.759817][T28947] do_syscall_64+0x4c/0xa0 [ 1218.764256][T28947] ? clear_bhb_loop+0x30/0x80 [ 1218.768963][T28947] ? clear_bhb_loop+0x30/0x80 [ 1218.773648][T28947] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1218.779543][T28947] RIP: 0033:0x7fa88735ae59 [ 1218.784102][T28947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.803725][T28947] RSP: 002b:00007fa885593028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1218.812147][T28947] RAX: ffffffffffffffda RBX: 00007fa8875d4090 RCX: 00007fa88735ae59 [ 1218.820205][T28947] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1218.828307][T28947] RBP: 00007fa8873f0d6f R08: 0000000000000000 R09: 0000000000000000 [ 1218.836315][T28947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1218.844508][T28947] R13: 00007fa8875d4128 R14: 00007fa8875d4090 R15: 00007ffdf9938328 [ 1218.852637][T28947] [ 1218.890547][T28943] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8832'. [ 1219.044448][T28943] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1219.055856][T28943] CPU: 0 PID: 28943 Comm: syz.0.8832 Not tainted syzkaller #0 [ 1219.063358][T28943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1219.073440][T28943] Call Trace: [ 1219.076748][T28943] [ 1219.079684][T28943] dump_stack_lvl+0x188/0x250 [ 1219.084381][T28943] ? show_regs_print_info+0x20/0x20 [ 1219.089677][T28943] ? load_image+0x400/0x400 [ 1219.094280][T28943] sysfs_warn_dup+0x8a/0xa0 [ 1219.098793][T28943] sysfs_do_create_link_sd+0xc0/0x110 [ 1219.104173][T28943] device_add+0x7f6/0x1000 [ 1219.108870][T28943] wiphy_register+0x1e81/0x2c30 [ 1219.113742][T28943] ? cfg80211_event_work+0x40/0x40 [ 1219.118871][T28943] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1219.125128][T28943] ieee80211_register_hw+0x2aa1/0x3af0 [ 1219.130887][T28943] ? ieee80211_tasklet_handler+0x20/0x20 [ 1219.136619][T28943] ? rcu_is_watching+0x11/0xa0 [ 1219.141498][T28943] ? memset+0x1e/0x40 [ 1219.145517][T28943] ? hrtimer_init+0x10c/0x220 [ 1219.150214][T28943] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1219.155966][T28943] hwsim_new_radio_nl+0xa6f/0xc40 [ 1219.161260][T28943] genl_rcv_msg+0xcea/0xf90 [ 1219.165769][T28943] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1219.172027][T28943] ? genl_bind+0x380/0x380 [ 1219.176458][T28943] ? lock_chain_count+0x20/0x20 [ 1219.181407][T28943] ? rcu_is_watching+0x11/0xa0 [ 1219.186222][T28943] ? verify_lock_unused+0x140/0x140 [ 1219.191431][T28943] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1219.197591][T28943] ? lockdep_hardirqs_on+0x94/0x140 [ 1219.202800][T28943] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1219.208969][T28943] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1219.215502][T28943] netlink_rcv_skb+0x1f5/0x440 [ 1219.220401][T28943] ? genl_bind+0x380/0x380 [ 1219.225161][T28943] ? netlink_ack+0xb50/0xb50 [ 1219.229973][T28943] ? __lock_acquire+0x7d10/0x7d10 [ 1219.235013][T28943] ? down_read+0x1aa/0x2e0 [ 1219.239455][T28943] genl_rcv+0x24/0x40 [ 1219.243622][T28943] netlink_unicast+0x774/0x920 [ 1219.248502][T28943] netlink_sendmsg+0x8ba/0xbe0 [ 1219.253272][T28943] ? lockdep_hardirqs_on+0x94/0x140 [ 1219.258489][T28943] ? netlink_getsockopt+0x570/0x570 [ 1219.263785][T28943] ? bpf_lsm_socket_accept+0x10/0x10 [ 1219.269173][T28943] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1219.274461][T28943] ? security_socket_sendmsg+0x7c/0xa0 [ 1219.279932][T28943] ? netlink_getsockopt+0x570/0x570 [ 1219.285197][T28943] ____sys_sendmsg+0x5b7/0x8f0 [ 1219.289987][T28943] ? __sys_sendmsg_sock+0x30/0x30 [ 1219.295213][T28943] ? ___sys_sendmsg+0x21b/0x2e0 [ 1219.300164][T28943] ___sys_sendmsg+0x236/0x2e0 [ 1219.304944][T28943] ? __sys_sendmsg+0x2a0/0x2a0 [ 1219.309843][T28943] __se_sys_sendmsg+0x1af/0x290 [ 1219.314878][T28943] ? __x64_sys_sendmsg+0x80/0x80 [ 1219.319823][T28943] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1219.326089][T28943] ? lockdep_hardirqs_on+0x94/0x140 [ 1219.331307][T28943] do_syscall_64+0x4c/0xa0 [ 1219.335736][T28943] ? clear_bhb_loop+0x30/0x80 [ 1219.340419][T28943] ? clear_bhb_loop+0x30/0x80 [ 1219.345102][T28943] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1219.351011][T28943] RIP: 0033:0x7faba5754e59 [ 1219.355612][T28943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.375228][T28943] RSP: 002b:00007faba39ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1219.384056][T28943] RAX: ffffffffffffffda RBX: 00007faba59cdfa0 RCX: 00007faba5754e59 [ 1219.392083][T28943] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1219.400144][T28943] RBP: 00007faba57ead6f R08: 0000000000000000 R09: 0000000000000000 [ 1219.408775][T28943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1219.416751][T28943] R13: 00007faba59ce038 R14: 00007faba59cdfa0 R15: 00007fff1d4fb008 [ 1219.424924][T28943] [ 1219.556522][T28967] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8839'. [ 1219.589239][T28967] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1219.603190][T28967] CPU: 1 PID: 28967 Comm: syz.1.8839 Not tainted syzkaller #0 [ 1219.610886][T28967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1219.620983][T28967] Call Trace: [ 1219.624614][T28967] [ 1219.627968][T28967] dump_stack_lvl+0x188/0x250 [ 1219.632883][T28967] ? show_regs_print_info+0x20/0x20 [ 1219.638126][T28967] ? load_image+0x400/0x400 [ 1219.642698][T28967] sysfs_warn_dup+0x8a/0xa0 [ 1219.647239][T28967] sysfs_do_create_link_sd+0xc0/0x110 [ 1219.652731][T28967] device_add+0x7f6/0x1000 [ 1219.657210][T28967] wiphy_register+0x1e81/0x2c30 [ 1219.662137][T28967] ? cfg80211_event_work+0x40/0x40 [ 1219.667309][T28967] ? minstrel_ht_alloc+0x808/0x980 [ 1219.672562][T28967] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1219.678846][T28967] ieee80211_register_hw+0x2aa1/0x3af0 [ 1219.684697][T28967] ? ieee80211_tasklet_handler+0x20/0x20 [ 1219.690558][T28967] ? rcu_is_watching+0x11/0xa0 [ 1219.695547][T28967] ? memset+0x1e/0x40 [ 1219.699577][T28967] ? hrtimer_init+0x10c/0x220 [ 1219.704302][T28967] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1219.710099][T28967] hwsim_new_radio_nl+0xa6f/0xc40 [ 1219.715221][T28967] genl_rcv_msg+0xcea/0xf90 [ 1219.719873][T28967] ? genl_bind+0x380/0x380 [ 1219.724537][T28967] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1219.729770][T28967] ? verify_lock_unused+0x140/0x140 [ 1219.735013][T28967] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1219.740884][T28967] ? perf_trace_lock+0x301/0x390 [ 1219.745953][T28967] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1219.752742][T28967] netlink_rcv_skb+0x1f5/0x440 [ 1219.757641][T28967] ? genl_bind+0x380/0x380 [ 1219.762196][T28967] ? netlink_ack+0xb50/0xb50 [ 1219.767292][T28967] ? __lock_acquire+0x7d10/0x7d10 [ 1219.772540][T28967] ? down_read+0x1aa/0x2e0 [ 1219.777187][T28967] genl_rcv+0x24/0x40 [ 1219.781282][T28967] netlink_unicast+0x774/0x920 [ 1219.786124][T28967] netlink_sendmsg+0x8ba/0xbe0 [ 1219.790964][T28967] ? netlink_getsockopt+0x570/0x570 [ 1219.796208][T28967] ? aa_sock_msg_perm+0x94/0x150 [ 1219.801191][T28967] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1219.806507][T28967] ? security_socket_sendmsg+0x7c/0xa0 [ 1219.812012][T28967] ? netlink_getsockopt+0x570/0x570 [ 1219.817425][T28967] ____sys_sendmsg+0x5b7/0x8f0 [ 1219.822432][T28967] ? __sys_sendmsg_sock+0x30/0x30 [ 1219.827603][T28967] ? import_iovec+0x6f/0xa0 [ 1219.832380][T28967] ___sys_sendmsg+0x236/0x2e0 [ 1219.837352][T28967] ? __sys_sendmsg+0x2a0/0x2a0 [ 1219.842216][T28967] ? trace_event_raw_event_lock+0x270/0x270 [ 1219.848431][T28967] __se_sys_sendmsg+0x1af/0x290 [ 1219.853418][T28967] ? __x64_sys_sendmsg+0x80/0x80 [ 1219.858430][T28967] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1219.864388][T28967] do_syscall_64+0x4c/0xa0 [ 1219.868847][T28967] ? clear_bhb_loop+0x30/0x80 [ 1219.873582][T28967] ? clear_bhb_loop+0x30/0x80 [ 1219.878473][T28967] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1219.884398][T28967] RIP: 0033:0x7fc1614ade59 [ 1219.888906][T28967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.908629][T28967] RSP: 002b:00007fc15f707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1219.917090][T28967] RAX: ffffffffffffffda RBX: 00007fc161726fa0 RCX: 00007fc1614ade59 [ 1219.925381][T28967] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1219.933394][T28967] RBP: 00007fc161543d6f R08: 0000000000000000 R09: 0000000000000000 [ 1219.941417][T28967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1219.949407][T28967] R13: 00007fc161727038 R14: 00007fc161726fa0 R15: 00007fff1686b708 [ 1219.957691][T28967] [ 1220.300287][T28975] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8850'. [ 1220.379828][T28975] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1220.412517][T28975] CPU: 1 PID: 28975 Comm: syz.0.8850 Not tainted syzkaller #0 [ 1220.420048][T28975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1220.430141][T28975] Call Trace: [ 1220.433550][T28975] [ 1220.436506][T28975] dump_stack_lvl+0x188/0x250 [ 1220.441216][T28975] ? show_regs_print_info+0x20/0x20 [ 1220.446552][T28975] ? load_image+0x400/0x400 [ 1220.451222][T28975] sysfs_warn_dup+0x8a/0xa0 [ 1220.455754][T28975] sysfs_do_create_link_sd+0xc0/0x110 [ 1220.461212][T28975] device_add+0x7f6/0x1000 [ 1220.465671][T28975] wiphy_register+0x1e81/0x2c30 [ 1220.470660][T28975] ? cfg80211_event_work+0x40/0x40 [ 1220.475799][T28975] ? minstrel_ht_alloc+0x808/0x980 [ 1220.480950][T28975] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1220.487154][T28975] ieee80211_register_hw+0x2aa1/0x3af0 [ 1220.492680][T28975] ? ieee80211_tasklet_handler+0x20/0x20 [ 1220.498442][T28975] ? rcu_is_watching+0x11/0xa0 [ 1220.503241][T28975] ? memset+0x1e/0x40 [ 1220.507535][T28975] ? hrtimer_init+0x10c/0x220 [ 1220.512366][T28975] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1220.518151][T28975] hwsim_new_radio_nl+0xa6f/0xc40 [ 1220.523548][T28975] genl_rcv_msg+0xcea/0xf90 [ 1220.528130][T28975] ? genl_bind+0x380/0x380 [ 1220.532593][T28975] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1220.537826][T28975] ? verify_lock_unused+0x140/0x140 [ 1220.543171][T28975] ? perf_trace_lock+0xe4/0x390 [ 1220.548142][T28975] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1220.554789][T28975] netlink_rcv_skb+0x1f5/0x440 [ 1220.559673][T28975] ? genl_bind+0x380/0x380 [ 1220.564131][T28975] ? netlink_ack+0xb50/0xb50 [ 1220.568919][T28975] ? __lock_acquire+0x7d10/0x7d10 [ 1220.574436][T28975] ? down_read+0x1aa/0x2e0 [ 1220.578905][T28975] genl_rcv+0x24/0x40 [ 1220.582967][T28975] netlink_unicast+0x774/0x920 [ 1220.587789][T28975] netlink_sendmsg+0x8ba/0xbe0 [ 1220.592740][T28975] ? lockdep_hardirqs_on+0x94/0x140 [ 1220.597997][T28975] ? netlink_getsockopt+0x570/0x570 [ 1220.603244][T28975] ? bpf_lsm_socket_accept+0x10/0x10 [ 1220.608573][T28975] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1220.613889][T28975] ? security_socket_sendmsg+0x7c/0xa0 [ 1220.619525][T28975] ? netlink_getsockopt+0x570/0x570 [ 1220.624945][T28975] ____sys_sendmsg+0x5b7/0x8f0 [ 1220.629861][T28975] ? __sys_sendmsg_sock+0x30/0x30 [ 1220.635051][T28975] ? import_iovec+0x6f/0xa0 [ 1220.639598][T28975] ___sys_sendmsg+0x236/0x2e0 [ 1220.644900][T28975] ? __sys_sendmsg+0x2a0/0x2a0 [ 1220.650034][T28975] __se_sys_sendmsg+0x1af/0x290 [ 1220.655133][T28975] ? __x64_sys_sendmsg+0x80/0x80 [ 1220.660447][T28975] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1220.666495][T28975] ? lockdep_hardirqs_on+0x94/0x140 [ 1220.671829][T28975] do_syscall_64+0x4c/0xa0 [ 1220.676287][T28975] ? clear_bhb_loop+0x30/0x80 [ 1220.681262][T28975] ? clear_bhb_loop+0x30/0x80 [ 1220.685990][T28975] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1220.692003][T28975] RIP: 0033:0x7faba5754e59 [ 1220.696572][T28975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.716204][T28975] RSP: 002b:00007faba39ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1220.724763][T28975] RAX: ffffffffffffffda RBX: 00007faba59cdfa0 RCX: 00007faba5754e59 [ 1220.733044][T28975] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1220.741319][T28975] RBP: 00007faba57ead6f R08: 0000000000000000 R09: 0000000000000000 [ 1220.749331][T28975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1220.757559][T28975] R13: 00007faba59ce038 R14: 00007faba59cdfa0 R15: 00007fff1d4fb008 [ 1220.766122][T28975] [ 1221.604909][T29022] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8864'. [ 1221.624249][T29018] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8854'. [ 1221.727720][T29022] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1221.743168][T29022] CPU: 0 PID: 29022 Comm: syz.3.8864 Not tainted syzkaller #0 [ 1221.750784][T29022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1221.761224][T29022] Call Trace: [ 1221.764701][T29022] [ 1221.767764][T29022] dump_stack_lvl+0x188/0x250 [ 1221.772469][T29022] ? show_regs_print_info+0x20/0x20 [ 1221.777677][T29022] ? load_image+0x400/0x400 [ 1221.782323][T29022] sysfs_warn_dup+0x8a/0xa0 [ 1221.786840][T29022] sysfs_do_create_link_sd+0xc0/0x110 [ 1221.792226][T29022] device_add+0x7f6/0x1000 [ 1221.796664][T29022] wiphy_register+0x1e81/0x2c30 [ 1221.801560][T29022] ? cfg80211_event_work+0x40/0x40 [ 1221.806679][T29022] ? minstrel_ht_alloc+0x808/0x980 [ 1221.811806][T29022] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1221.817903][T29022] ieee80211_register_hw+0x2aa1/0x3af0 [ 1221.823435][T29022] ? ieee80211_tasklet_handler+0x20/0x20 [ 1221.829112][T29022] ? rcu_is_watching+0x11/0xa0 [ 1221.834092][T29022] ? memset+0x1e/0x40 [ 1221.838103][T29022] ? hrtimer_init+0x10c/0x220 [ 1221.842802][T29022] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1221.848554][T29022] hwsim_new_radio_nl+0xa6f/0xc40 [ 1221.853688][T29022] genl_rcv_msg+0xcea/0xf90 [ 1221.858235][T29022] ? genl_bind+0x380/0x380 [ 1221.862953][T29022] ? rcu_nmi_exit+0x6f/0xf0 [ 1221.867469][T29022] ? verify_lock_unused+0x140/0x140 [ 1221.872679][T29022] ? verify_lock_unused+0x140/0x140 [ 1221.877974][T29022] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1221.883976][T29022] ? lock_chain_count+0x20/0x20 [ 1221.888960][T29022] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1221.895502][T29022] netlink_rcv_skb+0x1f5/0x440 [ 1221.900380][T29022] ? genl_bind+0x380/0x380 [ 1221.904900][T29022] ? netlink_ack+0xb50/0xb50 [ 1221.909550][T29022] ? __lock_acquire+0x7d10/0x7d10 [ 1221.914857][T29022] ? down_read+0x1aa/0x2e0 [ 1221.919386][T29022] genl_rcv+0x24/0x40 [ 1221.923386][T29022] netlink_unicast+0x774/0x920 [ 1221.928166][T29022] netlink_sendmsg+0x8ba/0xbe0 [ 1221.932957][T29022] ? netlink_getsockopt+0x570/0x570 [ 1221.938289][T29022] ? aa_sock_msg_perm+0x94/0x150 [ 1221.943302][T29022] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1221.948805][T29022] ? security_socket_sendmsg+0x7c/0xa0 [ 1221.954272][T29022] ? netlink_getsockopt+0x570/0x570 [ 1221.959475][T29022] ____sys_sendmsg+0x5b7/0x8f0 [ 1221.964278][T29022] ? __sys_sendmsg_sock+0x30/0x30 [ 1221.969335][T29022] ? import_iovec+0x6f/0xa0 [ 1221.973861][T29022] ___sys_sendmsg+0x236/0x2e0 [ 1221.978656][T29022] ? __sys_sendmsg+0x2a0/0x2a0 [ 1221.983440][T29022] ? percpu_counter_add_batch+0x13b/0x160 [ 1221.989216][T29022] __se_sys_sendmsg+0x1af/0x290 [ 1221.994079][T29022] ? __x64_sys_sendmsg+0x80/0x80 [ 1221.999023][T29022] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1222.005138][T29022] ? lockdep_hardirqs_on+0x94/0x140 [ 1222.010353][T29022] do_syscall_64+0x4c/0xa0 [ 1222.014959][T29022] ? clear_bhb_loop+0x30/0x80 [ 1222.019659][T29022] ? clear_bhb_loop+0x30/0x80 [ 1222.024361][T29022] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1222.030457][T29022] RIP: 0033:0x7fa88735ae59 [ 1222.034901][T29022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.054788][T29022] RSP: 002b:00007fa885593028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1222.063232][T29022] RAX: ffffffffffffffda RBX: 00007fa8875d4090 RCX: 00007fa88735ae59 [ 1222.071401][T29022] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1222.079656][T29022] RBP: 00007fa8873f0d6f R08: 0000000000000000 R09: 0000000000000000 [ 1222.087756][T29022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1222.100354][T29022] R13: 00007fa8875d4128 R14: 00007fa8875d4090 R15: 00007ffdf9938328 [ 1222.108386][T29022] [ 1222.164712][T29025] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8856'. [ 1222.189273][T29025] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1222.231758][T29025] CPU: 1 PID: 29025 Comm: syz.2.8856 Not tainted syzkaller #0 [ 1222.239557][T29025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1222.250196][T29025] Call Trace: [ 1222.253593][T29025] [ 1222.256552][T29025] dump_stack_lvl+0x188/0x250 [ 1222.261264][T29025] ? show_regs_print_info+0x20/0x20 [ 1222.266502][T29025] ? load_image+0x400/0x400 [ 1222.271075][T29025] sysfs_warn_dup+0x8a/0xa0 [ 1222.275624][T29025] sysfs_do_create_link_sd+0xc0/0x110 [ 1222.281122][T29025] device_add+0x7f6/0x1000 [ 1222.285691][T29025] wiphy_register+0x1e81/0x2c30 [ 1222.290690][T29025] ? cfg80211_event_work+0x40/0x40 [ 1222.295832][T29025] ? minstrel_ht_alloc+0x808/0x980 [ 1222.300994][T29025] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1222.307088][T29025] ieee80211_register_hw+0x2aa1/0x3af0 [ 1222.312598][T29025] ? ieee80211_tasklet_handler+0x20/0x20 [ 1222.318339][T29025] ? rcu_is_watching+0x11/0xa0 [ 1222.323104][T29025] ? memset+0x1e/0x40 [ 1222.327092][T29025] ? hrtimer_init+0x10c/0x220 [ 1222.331775][T29025] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1222.337623][T29025] hwsim_new_radio_nl+0xa6f/0xc40 [ 1222.342676][T29025] genl_rcv_msg+0xcea/0xf90 [ 1222.347294][T29025] ? genl_bind+0x380/0x380 [ 1222.351768][T29025] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 1222.357223][T29025] ? verify_lock_unused+0x140/0x140 [ 1222.362480][T29025] ? perf_trace_lock+0xe4/0x390 [ 1222.367381][T29025] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1222.374145][T29025] netlink_rcv_skb+0x1f5/0x440 [ 1222.379038][T29025] ? genl_bind+0x380/0x380 [ 1222.383649][T29025] ? netlink_ack+0xb50/0xb50 [ 1222.388362][T29025] ? __lock_acquire+0x7d10/0x7d10 [ 1222.393425][T29025] ? down_read+0x1aa/0x2e0 [ 1222.397975][T29025] genl_rcv+0x24/0x40 [ 1222.402006][T29025] netlink_unicast+0x774/0x920 [ 1222.406989][T29025] netlink_sendmsg+0x8ba/0xbe0 [ 1222.411804][T29025] ? netlink_getsockopt+0x570/0x570 [ 1222.417142][T29025] ? aa_sock_msg_perm+0x94/0x150 [ 1222.422316][T29025] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1222.427632][T29025] ? security_socket_sendmsg+0x7c/0xa0 [ 1222.433243][T29025] ? netlink_getsockopt+0x570/0x570 [ 1222.438469][T29025] ____sys_sendmsg+0x5b7/0x8f0 [ 1222.443279][T29025] ? __sys_sendmsg_sock+0x30/0x30 [ 1222.448345][T29025] ? import_iovec+0x6f/0xa0 [ 1222.452882][T29025] ___sys_sendmsg+0x236/0x2e0 [ 1222.457607][T29025] ? __sys_sendmsg+0x2a0/0x2a0 [ 1222.462425][T29025] ? trace_event_raw_event_lock+0x270/0x270 [ 1222.468372][T29025] __se_sys_sendmsg+0x1af/0x290 [ 1222.473353][T29025] ? __x64_sys_sendmsg+0x80/0x80 [ 1222.478395][T29025] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1222.484493][T29025] ? lockdep_hardirqs_on+0x94/0x140 [ 1222.489800][T29025] do_syscall_64+0x4c/0xa0 [ 1222.494225][T29025] ? clear_bhb_loop+0x30/0x80 [ 1222.498913][T29025] ? clear_bhb_loop+0x30/0x80 [ 1222.503601][T29025] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1222.509596][T29025] RIP: 0033:0x7fb57b5a5e59 [ 1222.514215][T29025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.534124][T29025] RSP: 002b:00007fb5797de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1222.542837][T29025] RAX: ffffffffffffffda RBX: 00007fb57b81f090 RCX: 00007fb57b5a5e59 [ 1222.550816][T29025] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1222.558793][T29025] RBP: 00007fb57b63bd6f R08: 0000000000000000 R09: 0000000000000000 [ 1222.566767][T29025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1222.574833][T29025] R13: 00007fb57b81f128 R14: 00007fb57b81f090 R15: 00007ffd8e9c3bc8 [ 1222.582912][T29025] [ 1222.907693][T29046] netlink: 'syz.1.8863': attribute type 3 has an invalid length. [ 1223.145701][T29046] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8863'. [ 1223.524870][T29066] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8869'. [ 1223.680619][T29075] netlink: 'syz.4.8882': attribute type 3 has an invalid length. [ 1223.713791][T29073] netlink: 'syz.0.8871': attribute type 4 has an invalid length. [ 1223.785419][T29075] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8882'. [ 1223.819782][T29073] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.8871'. [ 1224.070128][T29080] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8872'. [ 1224.433909][ T549] tipc: Subscription rejected, illegal request [ 1224.506889][T29089] netlink: 'syz.4.8877': attribute type 2 has an invalid length. [ 1224.502379][T29086] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8876'. [ 1224.534032][T29089] netlink: 'syz.4.8877': attribute type 8 has an invalid length. [ 1224.548061][T29089] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8877'. [ 1224.632185][T29086] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1224.640668][T29086] CPU: 0 PID: 29086 Comm: syz.3.8876 Not tainted syzkaller #0 [ 1224.648698][T29086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1224.659153][T29086] Call Trace: [ 1224.662461][T29086] [ 1224.665506][T29086] dump_stack_lvl+0x188/0x250 [ 1224.670217][T29086] ? show_regs_print_info+0x20/0x20 [ 1224.675443][T29086] ? load_image+0x400/0x400 [ 1224.680209][T29086] sysfs_warn_dup+0x8a/0xa0 [ 1224.684863][T29086] sysfs_do_create_link_sd+0xc0/0x110 [ 1224.690266][T29086] device_add+0x7f6/0x1000 [ 1224.694723][T29086] wiphy_register+0x1e81/0x2c30 [ 1224.699625][T29086] ? cfg80211_event_work+0x40/0x40 [ 1224.704864][T29086] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1224.711071][T29086] ieee80211_register_hw+0x2aa1/0x3af0 [ 1224.716614][T29086] ? ieee80211_tasklet_handler+0x20/0x20 [ 1224.722552][T29086] ? rcu_is_watching+0x11/0xa0 [ 1224.727583][T29086] ? memset+0x1e/0x40 [ 1224.731668][T29086] ? hrtimer_init+0x10c/0x220 [ 1224.736527][T29086] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1224.742277][T29086] hwsim_new_radio_nl+0xa6f/0xc40 [ 1224.747374][T29086] genl_rcv_msg+0xcea/0xf90 [ 1224.751915][T29086] ? genl_bind+0x380/0x380 [ 1224.756477][T29086] ? verify_lock_unused+0x140/0x140 [ 1224.761755][T29086] ? verify_lock_unused+0x140/0x140 [ 1224.767070][T29086] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1224.772897][T29086] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 1224.779142][T29086] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1224.785854][T29086] netlink_rcv_skb+0x1f5/0x440 [ 1224.790743][T29086] ? genl_bind+0x380/0x380 [ 1224.795298][T29086] ? netlink_ack+0xb50/0xb50 [ 1224.799980][T29086] ? __lock_acquire+0x7d10/0x7d10 [ 1224.805550][T29086] ? down_read+0x1aa/0x2e0 [ 1224.810011][T29086] genl_rcv+0x24/0x40 [ 1224.814024][T29086] netlink_unicast+0x774/0x920 [ 1224.818812][T29086] netlink_sendmsg+0x8ba/0xbe0 [ 1224.823606][T29086] ? netlink_getsockopt+0x570/0x570 [ 1224.828841][T29086] ? aa_sock_msg_perm+0x94/0x150 [ 1224.833896][T29086] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1224.839215][T29086] ? security_socket_sendmsg+0x7c/0xa0 [ 1224.844690][T29086] ? netlink_getsockopt+0x570/0x570 [ 1224.849904][T29086] ____sys_sendmsg+0x5b7/0x8f0 [ 1224.854682][T29086] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1224.860857][T29086] ? __sys_sendmsg_sock+0x30/0x30 [ 1224.865998][T29086] ? import_iovec+0x6f/0xa0 [ 1224.870629][T29086] ? import_iovec+0x6f/0xa0 [ 1224.875173][T29086] ___sys_sendmsg+0x236/0x2e0 [ 1224.879960][T29086] ? __sys_sendmsg+0x2a0/0x2a0 [ 1224.885374][T29086] ? __fget_files+0x3a6/0x480 [ 1224.890098][T29086] __se_sys_sendmsg+0x1af/0x290 [ 1224.894964][T29086] ? __x64_sys_sendmsg+0x80/0x80 [ 1224.899925][T29086] ? lockdep_hardirqs_on+0x94/0x140 [ 1224.905147][T29086] do_syscall_64+0x4c/0xa0 [ 1224.909569][T29086] ? clear_bhb_loop+0x30/0x80 [ 1224.914338][T29086] ? clear_bhb_loop+0x30/0x80 [ 1224.919033][T29086] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1224.925110][T29086] RIP: 0033:0x7fa88735ae59 [ 1224.929537][T29086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.949341][T29086] RSP: 002b:00007fa8855b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1224.958004][T29086] RAX: ffffffffffffffda RBX: 00007fa8875d3fa0 RCX: 00007fa88735ae59 [ 1224.965999][T29086] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1224.973994][T29086] RBP: 00007fa8873f0d6f R08: 0000000000000000 R09: 0000000000000000 [ 1224.981970][T29086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1224.990046][T29086] R13: 00007fa8875d4038 R14: 00007fa8875d3fa0 R15: 00007ffdf9938328 [ 1224.998141][T29086] [ 1225.408374][T29112] netlink: 'syz.1.8888': attribute type 29 has an invalid length. [ 1225.433132][T29112] netlink: 'syz.1.8888': attribute type 29 has an invalid length. [ 1225.444482][T29114] netlink: 'syz.2.8889': attribute type 3 has an invalid length. [ 1225.448292][T29112] netlink: 'syz.1.8888': attribute type 29 has an invalid length. [ 1225.454126][T29114] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8889'. [ 1225.500750][T29112] netlink: 'syz.1.8888': attribute type 4 has an invalid length. [ 1225.509149][T29112] netlink: 206236 bytes leftover after parsing attributes in process `syz.1.8888'. [ 1225.699442][T29118] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8890'. [ 1225.786636][ T549] tipc: Subscription rejected, illegal request [ 1225.807862][T29122] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8891'. [ 1226.080347][T29122] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1226.090369][T29122] CPU: 0 PID: 29122 Comm: syz.3.8891 Not tainted syzkaller #0 [ 1226.097972][T29122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1226.108186][T29122] Call Trace: [ 1226.111492][T29122] [ 1226.114444][T29122] dump_stack_lvl+0x188/0x250 [ 1226.119151][T29122] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1226.125370][T29122] ? show_regs_print_info+0x20/0x20 [ 1226.130607][T29122] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1226.136999][T29122] sysfs_warn_dup+0x8a/0xa0 [ 1226.141941][T29122] sysfs_do_create_link_sd+0xc0/0x110 [ 1226.147559][T29122] device_add+0x7f6/0x1000 [ 1226.152015][T29122] wiphy_register+0x1e81/0x2c30 [ 1226.157122][T29122] ? cfg80211_event_work+0x40/0x40 [ 1226.162496][T29122] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1226.168790][T29122] ? rtnl_unlock+0x5/0x10 [ 1226.173184][T29122] ieee80211_register_hw+0x2aa1/0x3af0 [ 1226.179204][T29122] ? ieee80211_tasklet_handler+0x20/0x20 [ 1226.184842][T29122] ? lockdep_hardirqs_on+0x94/0x140 [ 1226.190054][T29122] ? rcu_is_watching+0x11/0xa0 [ 1226.194926][T29122] ? memset+0x1e/0x40 [ 1226.198998][T29122] ? hrtimer_init+0x10c/0x220 [ 1226.203789][T29122] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1226.209545][T29122] hwsim_new_radio_nl+0xa6f/0xc40 [ 1226.214689][T29122] genl_rcv_msg+0xcea/0xf90 [ 1226.219212][T29122] ? genl_bind+0x380/0x380 [ 1226.223741][T29122] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1226.229732][T29122] ? lock_chain_count+0x20/0x20 [ 1226.234602][T29122] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1226.240770][T29122] ? lockdep_hardirqs_on+0x94/0x140 [ 1226.246152][T29122] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1226.252326][T29122] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1226.258979][T29122] ? lock_acquire+0x208/0x400 [ 1226.263708][T29122] netlink_rcv_skb+0x1f5/0x440 [ 1226.268491][T29122] ? genl_bind+0x380/0x380 [ 1226.273107][T29122] ? netlink_ack+0xb50/0xb50 [ 1226.277791][T29122] ? __lock_acquire+0x7d10/0x7d10 [ 1226.282831][T29122] ? down_read+0x1aa/0x2e0 [ 1226.287255][T29122] genl_rcv+0x24/0x40 [ 1226.291244][T29122] netlink_unicast+0x774/0x920 [ 1226.296126][T29122] netlink_sendmsg+0x8ba/0xbe0 [ 1226.300919][T29122] ? lockdep_hardirqs_on+0x94/0x140 [ 1226.306223][T29122] ? netlink_getsockopt+0x570/0x570 [ 1226.311432][T29122] ? security_socket_sendmsg+0x56/0xa0 [ 1226.316899][T29122] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1226.322187][T29122] ? security_socket_sendmsg+0x7c/0xa0 [ 1226.327652][T29122] ? netlink_getsockopt+0x570/0x570 [ 1226.332856][T29122] ____sys_sendmsg+0x5b7/0x8f0 [ 1226.337641][T29122] ? __sys_sendmsg_sock+0x30/0x30 [ 1226.342681][T29122] ? import_iovec+0x6f/0xa0 [ 1226.347212][T29122] ___sys_sendmsg+0x236/0x2e0 [ 1226.351902][T29122] ? __sys_sendmsg+0x2a0/0x2a0 [ 1226.356685][T29122] ? ktime_get_real_ts64+0x440/0x440 [ 1226.362056][T29122] __se_sys_sendmsg+0x1af/0x290 [ 1226.366917][T29122] ? __x64_sys_sendmsg+0x80/0x80 [ 1226.371876][T29122] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1226.377800][T29122] do_syscall_64+0x4c/0xa0 [ 1226.382872][T29122] ? clear_bhb_loop+0x30/0x80 [ 1226.388296][T29122] ? clear_bhb_loop+0x30/0x80 [ 1226.393096][T29122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1226.399018][T29122] RIP: 0033:0x7fa88735ae59 [ 1226.403443][T29122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.423978][T29122] RSP: 002b:00007fa8855b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1226.432695][T29122] RAX: ffffffffffffffda RBX: 00007fa8875d3fa0 RCX: 00007fa88735ae59 [ 1226.440882][T29122] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1226.448946][T29122] RBP: 00007fa8873f0d6f R08: 0000000000000000 R09: 0000000000000000 [ 1226.457013][T29122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.464995][T29122] R13: 00007fa8875d4038 R14: 00007fa8875d3fa0 R15: 00007ffdf9938328 [ 1226.472994][T29122] [ 1226.607330][T29133] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1226.619488][T29133] CPU: 1 PID: 29133 Comm: syz.1.8897 Not tainted syzkaller #0 [ 1226.627004][T29133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1226.637107][T29133] Call Trace: [ 1226.640509][T29133] [ 1226.643566][T29133] dump_stack_lvl+0x188/0x250 [ 1226.648287][T29133] ? show_regs_print_info+0x20/0x20 [ 1226.653610][T29133] ? load_image+0x400/0x400 [ 1226.658154][T29133] sysfs_warn_dup+0x8a/0xa0 [ 1226.662685][T29133] sysfs_do_create_link_sd+0xc0/0x110 [ 1226.668203][T29133] device_add+0x7f6/0x1000 [ 1226.672649][T29133] wiphy_register+0x1e81/0x2c30 [ 1226.677631][T29133] ? cfg80211_event_work+0x40/0x40 [ 1226.682756][T29133] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1226.689051][T29133] ieee80211_register_hw+0x2aa1/0x3af0 [ 1226.694731][T29133] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1226.700928][T29133] ? ieee80211_tasklet_handler+0x20/0x20 [ 1226.706842][T29133] ? rcu_is_watching+0x11/0xa0 [ 1226.711615][T29133] ? memset+0x1e/0x40 [ 1226.715607][T29133] ? hrtimer_init+0x10c/0x220 [ 1226.720296][T29133] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1226.726044][T29133] hwsim_new_radio_nl+0xa6f/0xc40 [ 1226.731105][T29133] genl_rcv_msg+0xcea/0xf90 [ 1226.735616][T29133] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1226.741791][T29133] ? genl_bind+0x380/0x380 [ 1226.746326][T29133] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1226.752316][T29133] ? lock_chain_count+0x20/0x20 [ 1226.757181][T29133] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1226.763344][T29133] ? lockdep_hardirqs_on+0x94/0x140 [ 1226.768553][T29133] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1226.774715][T29133] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1226.781277][T29133] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1226.787480][T29133] netlink_rcv_skb+0x1f5/0x440 [ 1226.792274][T29133] ? genl_bind+0x380/0x380 [ 1226.796909][T29133] ? netlink_ack+0xb50/0xb50 [ 1226.801863][T29133] ? genl_bind+0x380/0x380 [ 1226.806289][T29133] genl_rcv+0x24/0x40 [ 1226.810366][T29133] netlink_unicast+0x774/0x920 [ 1226.815142][T29133] netlink_sendmsg+0x8ba/0xbe0 [ 1226.819923][T29133] ? netlink_getsockopt+0x570/0x570 [ 1226.825127][T29133] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1226.831390][T29133] ? aa_sock_msg_perm+0x94/0x150 [ 1226.836338][T29133] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1226.841630][T29133] ? security_socket_sendmsg+0x7c/0xa0 [ 1226.847298][T29133] ? netlink_getsockopt+0x570/0x570 [ 1226.852725][T29133] ____sys_sendmsg+0x5b7/0x8f0 [ 1226.857545][T29133] ? __sys_sendmsg_sock+0x30/0x30 [ 1226.862609][T29133] ? import_iovec+0x6f/0xa0 [ 1226.867142][T29133] ___sys_sendmsg+0x236/0x2e0 [ 1226.871932][T29133] ? __sys_sendmsg+0x2a0/0x2a0 [ 1226.876736][T29133] ? ktime_get_real_ts64+0x440/0x440 [ 1226.882053][T29133] __se_sys_sendmsg+0x1af/0x290 [ 1226.886926][T29133] ? __x64_sys_sendmsg+0x80/0x80 [ 1226.891886][T29133] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1226.898420][T29133] ? lockdep_hardirqs_on+0x94/0x140 [ 1226.903634][T29133] do_syscall_64+0x4c/0xa0 [ 1226.908066][T29133] ? clear_bhb_loop+0x30/0x80 [ 1226.912931][T29133] ? clear_bhb_loop+0x30/0x80 [ 1226.917892][T29133] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1226.923823][T29133] RIP: 0033:0x7fc1614ade59 [ 1226.928261][T29133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.948452][T29133] RSP: 002b:00007fc15f707028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1226.957039][T29133] RAX: ffffffffffffffda RBX: 00007fc161726fa0 RCX: 00007fc1614ade59 [ 1226.965146][T29133] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1226.973283][T29133] RBP: 00007fc161543d6f R08: 0000000000000000 R09: 0000000000000000 [ 1226.981466][T29133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.989472][T29133] R13: 00007fc161727038 R14: 00007fc161726fa0 R15: 00007fff1686b708 [ 1226.997797][T29133] [ 1227.956449][T29157] validate_nla: 6 callbacks suppressed [ 1227.956487][T29157] netlink: 'syz.3.8901': attribute type 4 has an invalid length. [ 1228.663592][T29175] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1228.673005][T29175] CPU: 0 PID: 29175 Comm: syz.0.8910 Not tainted syzkaller #0 [ 1228.680937][T29175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1228.691033][T29175] Call Trace: [ 1228.694354][T29175] [ 1228.697502][T29175] dump_stack_lvl+0x188/0x250 [ 1228.702226][T29175] ? show_regs_print_info+0x20/0x20 [ 1228.707548][T29175] ? load_image+0x400/0x400 [ 1228.712195][T29175] sysfs_warn_dup+0x8a/0xa0 [ 1228.716720][T29175] sysfs_do_create_link_sd+0xc0/0x110 [ 1228.722117][T29175] device_add+0x7f6/0x1000 [ 1228.726567][T29175] wiphy_register+0x1e81/0x2c30 [ 1228.731566][T29175] ? cfg80211_event_work+0x40/0x40 [ 1228.736785][T29175] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1228.743092][T29175] ieee80211_register_hw+0x2aa1/0x3af0 [ 1228.748621][T29175] ? ieee80211_tasklet_handler+0x20/0x20 [ 1228.754772][T29175] ? hrtimer_init+0x1c1/0x220 [ 1228.759585][T29175] ? kasan_check_range+0x80/0x290 [ 1228.764737][T29175] ? memset+0x1e/0x40 [ 1228.768870][T29175] ? hrtimer_init+0x10c/0x220 [ 1228.773700][T29175] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1228.779470][T29175] hwsim_new_radio_nl+0xa6f/0xc40 [ 1228.784625][T29175] genl_rcv_msg+0xcea/0xf90 [ 1228.789218][T29175] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1228.795435][T29175] ? genl_bind+0x380/0x380 [ 1228.799990][T29175] ? swake_up_one+0x6d/0x130 [ 1228.804633][T29175] ? verify_lock_unused+0x140/0x140 [ 1228.809881][T29175] ? rcu_preempt_deferred_qs_irqrestore+0x9dd/0xc30 [ 1228.816652][T29175] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1228.823389][T29175] netlink_rcv_skb+0x1f5/0x440 [ 1228.828225][T29175] ? genl_bind+0x380/0x380 [ 1228.832698][T29175] ? netlink_ack+0xb50/0xb50 [ 1228.837317][T29175] ? __lock_acquire+0x7d10/0x7d10 [ 1228.842407][T29175] ? down_read+0x1aa/0x2e0 [ 1228.846952][T29175] genl_rcv+0x24/0x40 [ 1228.851152][T29175] netlink_unicast+0x774/0x920 [ 1228.856074][T29175] netlink_sendmsg+0x8ba/0xbe0 [ 1228.861045][T29175] ? netlink_getsockopt+0x570/0x570 [ 1228.866414][T29175] ? aa_sock_msg_perm+0x94/0x150 [ 1228.871495][T29175] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1228.876823][T29175] ? security_socket_sendmsg+0x7c/0xa0 [ 1228.882436][T29175] ? netlink_getsockopt+0x570/0x570 [ 1228.887668][T29175] ____sys_sendmsg+0x5b7/0x8f0 [ 1228.892569][T29175] ? __sys_sendmsg_sock+0x30/0x30 [ 1228.897649][T29175] ? import_iovec+0x6f/0xa0 [ 1228.902201][T29175] ___sys_sendmsg+0x236/0x2e0 [ 1228.906941][T29175] ? __sys_sendmsg+0x2a0/0x2a0 [ 1228.912061][T29175] ? ktime_get_real_ts64+0x440/0x440 [ 1228.917430][T29175] __se_sys_sendmsg+0x1af/0x290 [ 1228.922598][T29175] ? __x64_sys_sendmsg+0x80/0x80 [ 1228.927577][T29175] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1228.933913][T29175] ? lockdep_hardirqs_on+0x94/0x140 [ 1228.939226][T29175] do_syscall_64+0x4c/0xa0 [ 1228.943778][T29175] ? clear_bhb_loop+0x30/0x80 [ 1228.948580][T29175] ? clear_bhb_loop+0x30/0x80 [ 1228.953300][T29175] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1228.959232][T29175] RIP: 0033:0x7faba5754e59 [ 1228.963673][T29175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.983301][T29175] RSP: 002b:00007faba39ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1228.991743][T29175] RAX: ffffffffffffffda RBX: 00007faba59cdfa0 RCX: 00007faba5754e59 [ 1228.999904][T29175] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1229.007980][T29175] RBP: 00007faba57ead6f R08: 0000000000000000 R09: 0000000000000000 [ 1229.016262][T29175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1229.024349][T29175] R13: 00007faba59ce038 R14: 00007faba59cdfa0 R15: 00007fff1d4fb008 [ 1229.032357][T29175] [ 1229.562073][T29195] __nla_validate_parse: 5 callbacks suppressed [ 1229.562113][T29195] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8927'. [ 1229.646724][T29201] netlink: 'syz.3.8919': attribute type 29 has an invalid length. [ 1229.733186][T29201] netlink: 'syz.3.8919': attribute type 29 has an invalid length. [ 1229.741165][T29210] netlink: 'syz.3.8919': attribute type 4 has an invalid length. [ 1229.766868][T29208] netlink: 'syz.2.8920': attribute type 3 has an invalid length. [ 1229.782772][T29208] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8920'. [ 1229.794098][T29203] netlink: 'syz.3.8919': attribute type 29 has an invalid length. [ 1229.818073][T29210] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.8919'. [ 1229.836016][T29195] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1229.851575][T29195] CPU: 1 PID: 29195 Comm: syz.0.8927 Not tainted syzkaller #0 [ 1229.859812][T29195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1229.869912][T29195] Call Trace: [ 1229.873260][T29195] [ 1229.876249][T29195] dump_stack_lvl+0x188/0x250 [ 1229.881111][T29195] ? show_regs_print_info+0x20/0x20 [ 1229.886540][T29195] ? load_image+0x400/0x400 [ 1229.891111][T29195] sysfs_warn_dup+0x8a/0xa0 [ 1229.895670][T29195] sysfs_do_create_link_sd+0xc0/0x110 [ 1229.901088][T29195] device_add+0x7f6/0x1000 [ 1229.905558][T29195] wiphy_register+0x1e81/0x2c30 [ 1229.910466][T29195] ? cfg80211_event_work+0x40/0x40 [ 1229.915847][T29195] ? minstrel_ht_alloc+0x808/0x980 [ 1229.921124][T29195] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1229.927240][T29195] ieee80211_register_hw+0x2aa1/0x3af0 [ 1229.932743][T29195] ? ieee80211_tasklet_handler+0x20/0x20 [ 1229.938406][T29195] ? hrtimer_init+0x90/0x220 [ 1229.943026][T29195] ? __sanitizer_cov_trace_const_cmp4+0x13/0x80 [ 1229.949290][T29195] ? hrtimer_init+0x10c/0x220 [ 1229.954085][T29195] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1229.960098][T29195] hwsim_new_radio_nl+0xa6f/0xc40 [ 1229.965171][T29195] genl_rcv_msg+0xcea/0xf90 [ 1229.969780][T29195] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1229.975961][T29195] ? genl_bind+0x380/0x380 [ 1229.980412][T29195] ? swake_up_one+0x6d/0x130 [ 1229.985022][T29195] ? verify_lock_unused+0x140/0x140 [ 1229.990456][T29195] ? rcu_preempt_deferred_qs_irqrestore+0x9dd/0xc30 [ 1229.997181][T29195] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1230.003748][T29195] netlink_rcv_skb+0x1f5/0x440 [ 1230.008539][T29195] ? genl_bind+0x380/0x380 [ 1230.013161][T29195] ? netlink_ack+0xb50/0xb50 [ 1230.017773][T29195] ? __lock_acquire+0x7d10/0x7d10 [ 1230.022829][T29195] ? down_read+0x1aa/0x2e0 [ 1230.027476][T29195] genl_rcv+0x24/0x40 [ 1230.031580][T29195] netlink_unicast+0x774/0x920 [ 1230.036371][T29195] netlink_sendmsg+0x8ba/0xbe0 [ 1230.041159][T29195] ? netlink_getsockopt+0x570/0x570 [ 1230.046459][T29195] ? aa_sock_msg_perm+0x94/0x150 [ 1230.051416][T29195] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1230.056841][T29195] ? security_socket_sendmsg+0x7c/0xa0 [ 1230.062325][T29195] ? netlink_getsockopt+0x570/0x570 [ 1230.067730][T29195] ____sys_sendmsg+0x5b7/0x8f0 [ 1230.072835][T29195] ? __sys_sendmsg_sock+0x30/0x30 [ 1230.077911][T29195] ? import_iovec+0x6f/0xa0 [ 1230.082456][T29195] ___sys_sendmsg+0x236/0x2e0 [ 1230.087166][T29195] ? __sys_sendmsg+0x2a0/0x2a0 [ 1230.091945][T29195] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1230.097960][T29195] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1230.104132][T29195] ? lockdep_hardirqs_on+0x94/0x140 [ 1230.109477][T29195] ? __se_sys_sendmsg+0xe8/0x290 [ 1230.114447][T29195] ? kasan_check_range+0x80/0x290 [ 1230.119509][T29195] __se_sys_sendmsg+0x1af/0x290 [ 1230.124396][T29195] ? __x64_sys_sendmsg+0x80/0x80 [ 1230.129453][T29195] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1230.135652][T29195] ? lockdep_hardirqs_on+0x94/0x140 [ 1230.140914][T29195] do_syscall_64+0x4c/0xa0 [ 1230.145634][T29195] ? clear_bhb_loop+0x30/0x80 [ 1230.150338][T29195] ? clear_bhb_loop+0x30/0x80 [ 1230.155750][T29195] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1230.161695][T29195] RIP: 0033:0x7faba5754e59 [ 1230.166148][T29195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1230.185794][T29195] RSP: 002b:00007faba39ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1230.194239][T29195] RAX: ffffffffffffffda RBX: 00007faba59cdfa0 RCX: 00007faba5754e59 [ 1230.202276][T29195] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1230.210274][T29195] RBP: 00007faba57ead6f R08: 0000000000000000 R09: 0000000000000000 [ 1230.218355][T29195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1230.226545][T29195] R13: 00007faba59ce038 R14: 00007faba59cdfa0 R15: 00007fff1d4fb008 [ 1230.234667][T29195] [ 1231.285754][T29256] netlink: 'syz.3.8937': attribute type 3 has an invalid length. [ 1231.294937][T29256] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8937'. [ 1232.722798][T29304] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8951'. [ 1232.738929][ T549] tipc: Subscription rejected, illegal request [ 1234.470894][T29349] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.8969'. [ 1235.046832][T29351] netlink: 'syz.0.8970': attribute type 2 has an invalid length. [ 1235.105722][T29351] netlink: 'syz.0.8970': attribute type 8 has an invalid length. [ 1235.169228][T29351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8970'. [ 1237.660687][T29421] netlink: 'syz.1.8988': attribute type 2 has an invalid length. [ 1237.672784][T29421] netlink: 'syz.1.8988': attribute type 8 has an invalid length. [ 1237.692744][T29421] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8988'. [ 1237.885797][T29428] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8990'. [ 1239.157392][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.163811][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.001245][ T549] tipc: Subscription rejected, illegal request [ 1241.431777][T29519] netlink: 'syz.3.9026': attribute type 2 has an invalid length. [ 1241.439666][T29519] netlink: 'syz.3.9026': attribute type 8 has an invalid length. [ 1241.606800][T29519] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9026'. [ 1241.839178][T29530] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9029'. [ 1243.661267][ T9] tipc: Subscription rejected, illegal request [ 1244.290962][T29596] netlink: 'syz.3.9051': attribute type 3 has an invalid length. [ 1244.337723][T29596] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9051'. [ 1246.581169][ T9] tipc: Subscription rejected, illegal request [ 1247.122611][T29685] netlink: 'syz.2.9080': attribute type 2 has an invalid length. [ 1247.141821][T29685] netlink: 'syz.2.9080': attribute type 8 has an invalid length. [ 1247.161669][T29685] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9080'. [ 1247.473996][T29704] netlink: 'syz.2.9086': attribute type 3 has an invalid length. [ 1247.529562][T29704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9086'. [ 1247.966994][ T549] tipc: Subscription rejected, illegal request [ 1248.667778][T29737] netlink: 'syz.1.9097': attribute type 2 has an invalid length. [ 1248.706030][T29737] netlink: 'syz.1.9097': attribute type 8 has an invalid length. [ 1248.751502][T29737] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9097'. [ 1249.867202][T29781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1250.013099][T29784] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9108'. [ 1250.197383][ T9] tipc: Subscription rejected, illegal request [ 1251.660398][ T549] tipc: Subscription rejected, illegal request [ 1251.931807][T29850] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9127'. [ 1251.951620][T29843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1251.958983][T29843] IPv6: NLM_F_CREATE should be set when creating new route [ 1252.559040][T29870] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9137'. [ 1253.330362][ T154] tipc: Subscription rejected, illegal request [ 1253.393124][T29887] netlink: 'syz.1.9143': attribute type 3 has an invalid length. [ 1253.441682][T29887] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9143'. [ 1253.990835][T29908] netlink: 'syz.0.9151': attribute type 2 has an invalid length. [ 1254.010825][T29908] netlink: 'syz.0.9151': attribute type 8 has an invalid length. [ 1254.026050][T29908] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9151'. [ 1254.407713][T29927] netlink: 'syz.0.9155': attribute type 2 has an invalid length. [ 1254.418260][T29927] netlink: 'syz.0.9155': attribute type 8 has an invalid length. [ 1254.474886][T29927] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9155'. [ 1254.630212][T29937] netlink: 'syz.0.9159': attribute type 2 has an invalid length. [ 1254.657814][T29937] netlink: 'syz.0.9159': attribute type 8 has an invalid length. [ 1254.666842][T29937] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9159'. [ 1254.745416][T29942] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9160'. [ 1256.268554][T29980] netlink: 'syz.1.9174': attribute type 2 has an invalid length. [ 1256.303433][T29980] netlink: 'syz.1.9174': attribute type 8 has an invalid length. [ 1256.364799][T29980] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9174'. [ 1256.662387][T30001] bridge0: port 3(dummy0) entered disabled state [ 1256.885062][T30001] device bridge_slave_1 left promiscuous mode [ 1256.930067][T30001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.074321][T30001] device bridge_slave_0 left promiscuous mode [ 1257.136097][T30001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.536874][T30006] netlink: 'syz.0.9180': attribute type 2 has an invalid length. [ 1257.547675][T30006] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9180'. [ 1257.558043][T30009] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9181'. [ 1257.769632][T30036] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9191'. [ 1257.818714][T30030] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9188'. [ 1258.549791][T30049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1258.557136][T30049] IPv6: NLM_F_CREATE should be set when creating new route [ 1258.564629][T30049] IPv6: NLM_F_CREATE should be set when creating new route [ 1258.571908][T30049] IPv6: NLM_F_CREATE should be set when creating new route [ 1258.968174][T30048] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9195'. [ 1259.100681][T30059] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9198'. [ 1259.373738][T30075] validate_nla: 4 callbacks suppressed [ 1259.373803][T30075] netlink: 'syz.2.9205': attribute type 3 has an invalid length. [ 1259.452228][T30075] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9205'. [ 1259.747971][T30087] netlink: 'syz.1.9210': attribute type 2 has an invalid length. [ 1259.758114][T30087] netlink: 'syz.1.9210': attribute type 8 has an invalid length. [ 1259.766296][T30087] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9210'. [ 1260.047363][T30097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1260.054809][T30097] IPv6: NLM_F_CREATE should be set when creating new route [ 1260.205691][T30099] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.9211'. [ 1260.503422][T30110] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9217'. [ 1261.112423][T30124] netlink: 'syz.0.9224': attribute type 2 has an invalid length. [ 1261.131748][T30124] netlink: 'syz.0.9224': attribute type 8 has an invalid length. [ 1261.157379][T30124] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9224'. [ 1261.438390][T30149] netlink: 'syz.4.9230': attribute type 2 has an invalid length. [ 1261.481853][T30149] netlink: 'syz.4.9230': attribute type 8 has an invalid length. [ 1261.511239][T30149] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9230'. [ 1261.761237][T30159] netlink: 'syz.0.9236': attribute type 10 has an invalid length. [ 1262.528599][T30183] netlink: 'syz.2.9243': attribute type 2 has an invalid length. [ 1262.550470][T30183] netlink: 'syz.2.9243': attribute type 8 has an invalid length. [ 1262.829135][T30191] __nla_validate_parse: 2 callbacks suppressed [ 1262.829174][T30191] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9247'. [ 1262.943265][T30193] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9248'. [ 1263.037474][T30202] device wlan0 entered promiscuous mode [ 1263.471234][T30212] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9255'. [ 1263.573741][T30215] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9257'. [ 1264.165164][T30226] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9260'. [ 1264.290776][T30240] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.9264'. [ 1264.717048][T30254] validate_nla: 8 callbacks suppressed [ 1264.717088][T30254] netlink: 'syz.0.9270': attribute type 3 has an invalid length. [ 1264.819688][T30254] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9270'. [ 1265.083630][T30256] device wlan0 left promiscuous mode [ 1265.102251][T30264] netlink: 'syz.2.9273': attribute type 2 has an invalid length. [ 1265.120474][T30264] netlink: 'syz.2.9273': attribute type 8 has an invalid length. [ 1265.129947][T30264] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9273'. [ 1265.440136][T30275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9276'. [ 1265.456747][T30275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9276'. [ 1265.529245][T30277] netlink: 'syz.0.9277': attribute type 2 has an invalid length. [ 1265.540028][T30277] netlink: 'syz.0.9277': attribute type 8 has an invalid length. [ 1266.417977][T30313] netlink: 'syz.2.9286': attribute type 2 has an invalid length. [ 1266.461809][T30313] netlink: 'syz.2.9286': attribute type 8 has an invalid length. [ 1266.840326][T30318] netlink: 'syz.0.9290': attribute type 39 has an invalid length. [ 1266.991204][T30322] netlink: 'syz.1.9292': attribute type 2 has an invalid length. [ 1267.009974][T30322] netlink: 'syz.1.9292': attribute type 8 has an invalid length. [ 1267.998049][T30365] __nla_validate_parse: 12 callbacks suppressed [ 1267.998281][T30365] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9306'. [ 1268.077107][T30363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9305'. [ 1268.111638][T30363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9305'. [ 1268.120917][T30363] netlink: 33 bytes leftover after parsing attributes in process `syz.3.9305'. [ 1268.131126][T30363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9305'. [ 1268.152194][T30363] netlink: 33 bytes leftover after parsing attributes in process `syz.3.9305'. [ 1268.171075][T30363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9305'. [ 1268.181027][T30363] netlink: 33 bytes leftover after parsing attributes in process `syz.3.9305'. [ 1268.287815][T30375] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9310'. [ 1268.345554][T30378] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9311'. [ 1268.376161][T30376] device wlan0 entered promiscuous mode [ 1269.888553][T30431] validate_nla: 18 callbacks suppressed [ 1269.888574][T30431] netlink: 'syz.3.9331': attribute type 39 has an invalid length. [ 1270.060237][T30437] netlink: 'syz.4.9334': attribute type 2 has an invalid length. [ 1270.073992][T30437] netlink: 'syz.4.9334': attribute type 8 has an invalid length. [ 1270.254345][T30445] netlink: 'syz.0.9335': attribute type 2 has an invalid length. [ 1270.304649][T30445] netlink: 'syz.0.9335': attribute type 8 has an invalid length. [ 1270.660958][T30455] netlink: 'syz.3.9340': attribute type 3 has an invalid length. [ 1270.723491][T30459] device bridge_slave_1 left promiscuous mode [ 1270.730145][T30459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.740556][T30459] device bridge_slave_0 left promiscuous mode [ 1270.752691][T30459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.042161][T30462] netlink: 'syz.1.9343': attribute type 2 has an invalid length. [ 1271.060100][T30462] netlink: 'syz.1.9343': attribute type 8 has an invalid length. [ 1271.300025][T30471] netlink: 'syz.2.9346': attribute type 39 has an invalid length. [ 1271.492071][T30475] netlink: 'syz.1.9347': attribute type 2 has an invalid length. [ 1274.271780][T30523] __nla_validate_parse: 17 callbacks suppressed [ 1274.271807][T30523] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9370'. [ 1274.477011][T30528] netlink: 830 bytes leftover after parsing attributes in process `syz.4.9372'. [ 1275.883778][T30546] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.9378'. [ 1276.021083][T30561] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9393'. [ 1276.384375][T30570] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.9384'. [ 1276.454914][T30567] validate_nla: 10 callbacks suppressed [ 1276.454993][T30567] netlink: 'syz.4.9383': attribute type 9 has an invalid length. [ 1276.485422][T30567] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.9383'. [ 1276.708997][T30584] netlink: 'syz.2.9389': attribute type 2 has an invalid length. [ 1276.741514][T30584] netlink: 'syz.2.9389': attribute type 8 has an invalid length. [ 1276.749936][T30584] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9389'. [ 1276.761276][T30578] netlink: 'syz.3.9388': attribute type 2 has an invalid length. [ 1276.769845][T30578] netlink: 'syz.3.9388': attribute type 8 has an invalid length. [ 1276.778462][T30578] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9388'. [ 1277.169365][T30586] netlink: 'syz.0.9391': attribute type 3 has an invalid length. [ 1277.213486][T30586] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9391'. [ 1277.521763][T30602] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.9398'. [ 1277.575181][T30604] netlink: 'syz.3.9399': attribute type 10 has an invalid length. [ 1278.306658][T30627] netlink: 'syz.0.9406': attribute type 2 has an invalid length. [ 1278.318541][T30627] netlink: 'syz.0.9406': attribute type 8 has an invalid length. [ 1279.834371][T30645] netlink: 'syz.2.9412': attribute type 2 has an invalid length. [ 1279.851698][T30645] __nla_validate_parse: 3 callbacks suppressed [ 1279.851738][T30645] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9412'. [ 1280.391295][T30666] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9418'. [ 1280.613996][T30660] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.9415'. [ 1280.643593][T30668] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9420'. [ 1280.934167][T30688] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9422'. [ 1281.323501][T30694] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9429'. [ 1281.431292][T30696] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.9430'. [ 1282.039989][T30719] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9437'. [ 1282.114773][T30715] validate_nla: 9 callbacks suppressed [ 1282.114817][T30715] netlink: 'syz.3.9438': attribute type 2 has an invalid length. [ 1282.164836][T30721] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.9436'. [ 1282.185101][T30715] netlink: 'syz.3.9438': attribute type 8 has an invalid length. [ 1282.222504][T30715] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9438'. [ 1282.460472][T30727] netlink: 'syz.0.9440': attribute type 2 has an invalid length. [ 1282.493178][T30727] netlink: 'syz.0.9440': attribute type 8 has an invalid length. [ 1282.641847][T30736] device wlan0 entered promiscuous mode [ 1282.670152][T30741] netlink: 'syz.2.9443': attribute type 9 has an invalid length. [ 1283.217248][T30760] netlink: 'syz.3.9450': attribute type 9 has an invalid length. [ 1283.544573][T30767] netlink: 'syz.4.9453': attribute type 2 has an invalid length. [ 1283.601513][T30767] netlink: 'syz.4.9453': attribute type 8 has an invalid length. [ 1284.757003][T30803] netlink: 'syz.0.9463': attribute type 2 has an invalid length. [ 1284.783309][T30803] netlink: 'syz.0.9463': attribute type 8 has an invalid length. [ 1284.935703][T30816] __nla_validate_parse: 7 callbacks suppressed [ 1284.935725][T30816] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.9465'. [ 1284.967574][T30811] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9467'. [ 1285.359202][T30829] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9473'. [ 1286.834618][T30848] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9480'. [ 1287.142360][T30861] validate_nla: 6 callbacks suppressed [ 1287.142416][T30861] netlink: 'syz.1.9483': attribute type 10 has an invalid length. [ 1287.495682][T30869] device wlan0 entered promiscuous mode [ 1287.543892][T30865] netlink: 'syz.3.9484': attribute type 9 has an invalid length. [ 1287.552613][T30865] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.9484'. [ 1287.828967][T30877] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9488'. [ 1287.939919][T30884] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9489'. [ 1288.355060][T30889] netlink: 'syz.1.9492': attribute type 2 has an invalid length. [ 1288.410370][T30889] netlink: 'syz.1.9492': attribute type 8 has an invalid length. [ 1288.473579][T30889] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9492'. [ 1288.570039][T30893] netlink: 'syz.3.9494': attribute type 10 has an invalid length. [ 1288.589908][T30893] netlink: 207552 bytes leftover after parsing attributes in process `syz.3.9494'. [ 1288.698216][T30904] netlink: 'syz.2.9501': attribute type 10 has an invalid length. [ 1288.867358][T30908] netlink: 'syz.4.9500': attribute type 9 has an invalid length. [ 1288.923279][T30908] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.9500'. [ 1289.050407][T30918] device wlan0 entered promiscuous mode [ 1289.126879][T30917] netlink: 'syz.2.9503': attribute type 2 has an invalid length. [ 1289.153691][T30917] netlink: 'syz.2.9503': attribute type 8 has an invalid length. [ 1289.880103][T30915] netlink: 'syz.1.9502': attribute type 9 has an invalid length. [ 1289.999283][T30932] __nla_validate_parse: 2 callbacks suppressed [ 1289.999339][T30932] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9507'. [ 1290.556067][T30959] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9518'. [ 1290.671422][T30958] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9515'. [ 1290.680862][T30960] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9517'. [ 1290.795834][T30962] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9519'. [ 1290.827610][T30952] can: request_module (can-proto-0) failed. [ 1291.021006][T30970] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9531'. [ 1291.046583][T30971] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9530'. [ 1291.260742][T30977] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9524'. [ 1291.545014][T30989] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9527'. [ 1291.553325][T30979] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.9521'. [ 1292.878867][T31006] validate_nla: 17 callbacks suppressed [ 1292.878892][T31006] netlink: 'syz.4.9534': attribute type 2 has an invalid length. [ 1292.921572][T31006] netlink: 'syz.4.9534': attribute type 8 has an invalid length. [ 1293.303678][T30992] netlink: 'syz.1.9528': attribute type 9 has an invalid length. [ 1293.585335][T31028] netlink: 'syz.4.9544': attribute type 2 has an invalid length. [ 1293.661920][T31028] netlink: 'syz.4.9544': attribute type 8 has an invalid length. [ 1294.015034][T31045] netlink: 'syz.1.9548': attribute type 2 has an invalid length. [ 1294.024641][T31045] netlink: 'syz.1.9548': attribute type 8 has an invalid length. [ 1294.328734][T31054] netlink: 'syz.2.9551': attribute type 10 has an invalid length. [ 1294.814181][T31072] netlink: 'syz.1.9554': attribute type 9 has an invalid length. [ 1294.967399][T31064] device wlan0 left promiscuous mode [ 1295.008574][T31069] device wlan0 entered promiscuous mode [ 1295.027355][T31075] netlink: 'syz.3.9556': attribute type 9 has an invalid length. [ 1295.051480][T31075] __nla_validate_parse: 9 callbacks suppressed [ 1295.051501][T31075] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.9556'. [ 1295.117356][T31073] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.9558'. [ 1295.687959][T31092] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9563'. [ 1296.032422][T31097] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9565'. [ 1296.951401][T31117] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.9573'. [ 1297.395295][T31139] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.9580'. [ 1299.957316][T31136] delete_channel: no stack [ 1300.303798][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.310317][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.701623][T31179] validate_nla: 6 callbacks suppressed [ 1300.701645][T31179] netlink: 'syz.2.9591': attribute type 3 has an invalid length. [ 1300.898634][T31179] netlink: 'syz.2.9591': attribute type 1 has an invalid length. [ 1300.927608][T31179] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.9591'. [ 1301.229828][T31191] netlink: 'syz.2.9597': attribute type 3 has an invalid length. [ 1301.309364][T31191] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9597'. [ 1301.890480][T31209] netlink: 'syz.1.9602': attribute type 2 has an invalid length. [ 1301.899464][T31209] netlink: 'syz.1.9602': attribute type 8 has an invalid length. [ 1301.908954][T31209] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9602'. [ 1302.014915][T31207] netlink: 'syz.4.9599': attribute type 9 has an invalid length. [ 1302.032997][T31207] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.9599'. [ 1304.166527][T31241] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1304.719772][T31276] netlink: 'syz.1.9621': attribute type 3 has an invalid length. [ 1304.762313][T31276] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9621'. [ 1305.143692][T31281] netlink: 'syz.3.9624': attribute type 2 has an invalid length. [ 1305.163937][T31281] netlink: 'syz.3.9624': attribute type 8 has an invalid length. [ 1305.202322][T31281] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9624'. [ 1305.502179][T31293] netlink: 'syz.2.9626': attribute type 2 has an invalid length. [ 1305.524718][T31293] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9626'. [ 1306.506338][T31325] validate_nla: 1 callbacks suppressed [ 1306.506357][T31325] netlink: 'syz.4.9636': attribute type 2 has an invalid length. [ 1306.556978][T31321] cgroup: fork rejected by pids controller in /syz4 [ 1306.658101][T31325] netlink: 'syz.4.9636': attribute type 8 has an invalid length. [ 1306.678500][T31325] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9636'. [ 1306.733429][T31350] netlink: 'syz.3.9638': attribute type 3 has an invalid length. [ 1306.755640][T31350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9638'. [ 1307.066363][T31443] netlink: 'syz.3.9642': attribute type 2 has an invalid length. [ 1307.077283][T31443] netlink: 'syz.3.9642': attribute type 8 has an invalid length. [ 1307.086670][T31443] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9642'. [ 1307.178278][T31445] netlink: 'syz.1.9643': attribute type 2 has an invalid length. [ 1307.187831][T31445] netlink: 'syz.1.9643': attribute type 8 has an invalid length. [ 1307.197024][T31445] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9643'. [ 1307.681234][T31451] delete_channel: no stack [ 1307.857373][T31463] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1308.038021][T31472] netlink: 'syz.3.9652': attribute type 3 has an invalid length. [ 1308.129345][T31477] netlink: 'syz.2.9651': attribute type 2 has an invalid length. [ 1308.133936][T31472] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9652'. [ 1308.245928][T31477] netlink: 'syz.2.9651': attribute type 8 has an invalid length. [ 1308.361601][T31477] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9651'. [ 1308.786754][T31481] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9651'. [ 1309.113670][T31596] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9656'. [ 1309.916509][T31708] delete_channel: no stack [ 1310.357821][T31733] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9670'. [ 1312.567489][T32075] validate_nla: 4 callbacks suppressed [ 1312.567536][T32075] netlink: 'syz.4.9684': attribute type 2 has an invalid length. [ 1312.682690][T32075] netlink: 'syz.4.9684': attribute type 8 has an invalid length. [ 1312.734636][T32075] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9684'. [ 1312.919356][T32085] netlink: 'syz.2.9686': attribute type 2 has an invalid length. [ 1312.931070][T32085] netlink: 'syz.2.9686': attribute type 8 has an invalid length. [ 1312.952240][T32085] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9686'. [ 1313.152839][T32136] netlink: 'syz.1.9689': attribute type 5 has an invalid length. [ 1313.862564][T32220] netlink: 'syz.3.9700': attribute type 2 has an invalid length. [ 1313.872056][T32220] netlink: 'syz.3.9700': attribute type 8 has an invalid length. [ 1313.880706][T32220] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9700'. [ 1313.925961][T32227] netlink: 'syz.4.9701': attribute type 2 has an invalid length. [ 1313.975798][T32227] netlink: 'syz.4.9701': attribute type 8 has an invalid length. [ 1313.992782][T32227] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9701'. [ 1314.029320][T32229] netlink: 'syz.1.9703': attribute type 2 has an invalid length. [ 1314.043993][T32229] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9703'. [ 1314.505547][T32251] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9710'. [ 1314.867471][T32263] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9714'. [ 1315.131246][T32324] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9716'. [ 1315.193921][T32350] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9717'. [ 1315.685223][T32473] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9725'. [ 1316.646303][T32626] mac80211_hwsim hwsim4 O3c: renamed from wlan1 [ 1316.842112][T32650] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1316.884686][T32650] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1317.597116][ T406] validate_nla: 19 callbacks suppressed [ 1317.597153][ T406] netlink: 'syz.3.9753': attribute type 2 has an invalid length. [ 1317.674134][ T406] netlink: 'syz.3.9753': attribute type 8 has an invalid length. [ 1317.796421][ T410] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1318.314308][ T410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1318.336958][ T416] __nla_validate_parse: 6 callbacks suppressed [ 1318.336990][ T416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9757'. [ 1318.423319][ T523] netlink: 'syz.0.9769': attribute type 2 has an invalid length. [ 1318.461544][ T523] netlink: 'syz.0.9769': attribute type 8 has an invalid length. [ 1318.488380][ T523] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9769'. [ 1318.557525][ T529] netlink: 'syz.4.9760': attribute type 5 has an invalid length. [ 1318.743751][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1318.810049][ T527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1318.826071][ T542] netlink: 'syz.0.9773': attribute type 10 has an invalid length. [ 1318.939188][ T542] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9773'. [ 1319.827419][ T682] netlink: 'syz.0.9774': attribute type 2 has an invalid length. [ 1319.839373][ T682] netlink: 'syz.0.9774': attribute type 8 has an invalid length. [ 1319.848797][ T682] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9774'. [ 1320.092094][ T769] ref_ctr_offset mismatch. inode: 0x27dd offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1320.287027][ T779] A link change request failed with some changes committed already. Interface bY4`Ҙ may have been left with an inconsistent configuration, please check. [ 1320.488790][ T886] netlink: 'syz.0.9781': attribute type 2 has an invalid length. [ 1320.498591][ T886] netlink: 'syz.0.9781': attribute type 8 has an invalid length. [ 1320.519361][ T886] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9781'. [ 1320.815678][ T963] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9786'. [ 1320.913724][ T1004] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9789'. [ 1320.936470][ T1002] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9788'. [ 1321.230197][ T1009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1321.268952][ T1012] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9791'. [ 1321.783281][ T1148] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9798'. [ 1322.620716][ T1393] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1323.532688][ T1515] mac80211_hwsim hwsim9 O3c: renamed from wlan1 [ 1323.615763][ T1516] validate_nla: 12 callbacks suppressed [ 1323.615852][ T1516] netlink: 'syz.2.9813': attribute type 2 has an invalid length. [ 1323.652649][ T1516] netlink: 'syz.2.9813': attribute type 8 has an invalid length. [ 1323.691593][ T1516] __nla_validate_parse: 3 callbacks suppressed [ 1323.691635][ T1516] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9813'. [ 1323.774771][ T1525] cgroup: fork rejected by pids controller in /syz0 [ 1323.923235][ T1531] netlink: 'syz.4.9817': attribute type 2 has an invalid length. [ 1323.948773][ T1528] hsr0: VLAN not yet supported [ 1323.972737][ T1531] netlink: 'syz.4.9817': attribute type 8 has an invalid length. [ 1324.041591][ T1531] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9817'. [ 1324.058946][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1324.097663][ T1630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1324.120808][ T1637] netlink: 'syz.3.9819': attribute type 2 has an invalid length. [ 1324.129727][ T1637] netlink: 'syz.3.9819': attribute type 8 has an invalid length. [ 1324.176312][ T1637] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9819'. [ 1325.890639][ T1653] netlink: 'syz.2.9828': attribute type 2 has an invalid length. [ 1325.951654][ T1653] netlink: 'syz.2.9828': attribute type 8 has an invalid length. [ 1325.971555][ T1653] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9828'. [ 1325.981957][ T1656] netlink: 'syz.1.9830': attribute type 2 has an invalid length. [ 1326.001679][ T1656] netlink: 'syz.1.9830': attribute type 8 has an invalid length. [ 1326.009722][ T1656] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9830'. [ 1326.867966][ T1875] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9837'. [ 1326.881787][ T2076] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9839'. [ 1326.981901][ T2089] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9842'. [ 1327.041765][ T2092] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9843'. [ 1327.107948][ T2093] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1327.226655][ T2093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1327.262346][ T2097] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9845'. [ 1327.502247][ T2115] ref_ctr_offset mismatch. inode: 0x27f2 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1328.679437][ T2545] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1328.868939][ T2545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1328.925391][ T2558] validate_nla: 15 callbacks suppressed [ 1328.926004][ T2558] netlink: 'syz.3.9860': attribute type 10 has an invalid length. [ 1328.985742][ T2558] __nla_validate_parse: 3 callbacks suppressed [ 1328.985791][ T2558] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9860'. [ 1329.315329][ T2829] netlink: 'syz.3.9866': attribute type 2 has an invalid length. [ 1329.324639][ T2829] netlink: 'syz.3.9866': attribute type 8 has an invalid length. [ 1329.339032][ T2829] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9866'. [ 1329.364308][ T2886] ref_ctr_offset mismatch. inode: 0x27ca offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1329.377830][ T2828] netlink: 'syz.0.9867': attribute type 2 has an invalid length. [ 1329.391278][ T2828] netlink: 'syz.0.9867': attribute type 8 has an invalid length. [ 1329.411441][ T2828] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9867'. [ 1329.588326][ T2965] device syzkaller0 left promiscuous mode [ 1329.694377][ T2957] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9869'. [ 1329.783184][ T2957] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1329.827403][ T2968] netlink: 'syz.1.9872': attribute type 2 has an invalid length. [ 1329.862147][ T2968] netlink: 'syz.1.9872': attribute type 8 has an invalid length. [ 1329.891221][ T2968] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9872'. [ 1330.055826][ T3181] netlink: 'syz.1.9878': attribute type 2 has an invalid length. [ 1330.091739][ T3181] netlink: 'syz.1.9878': attribute type 8 has an invalid length. [ 1330.112034][ T3181] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9878'. [ 1330.356333][ T3200] netlink: 'syz.4.9879': attribute type 2 has an invalid length. [ 1330.382412][ T3200] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9879'. [ 1330.414316][ T3292] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9882'. [ 1330.601158][ T3305] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1330.736932][ T3305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1331.232010][ T3519] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9887'. [ 1331.288261][ T3519] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1331.489608][ T3580] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9891'. [ 1332.377216][ T3877] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1333.186196][ T4110] mac80211_hwsim hwsim11 O3c: renamed from wlan1 [ 1334.243659][ T4582] mac80211_hwsim hwsim5 O3c: renamed from wlan1 [ 1334.668949][ T4597] __nla_validate_parse: 10 callbacks suppressed [ 1334.668990][ T4597] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9932'. [ 1334.738174][ T4720] validate_nla: 24 callbacks suppressed [ 1334.738197][ T4720] netlink: 'syz.2.9936': attribute type 3 has an invalid length. [ 1334.818472][ T4693] netlink: 'syz.4.9935': attribute type 2 has an invalid length. [ 1334.828330][ T4693] netlink: 'syz.4.9935': attribute type 8 has an invalid length. [ 1334.846367][ T4693] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9935'. [ 1335.156253][ T4801] netlink: 'syz.3.9939': attribute type 2 has an invalid length. [ 1335.181898][ T4801] netlink: 'syz.3.9939': attribute type 8 has an invalid length. [ 1335.212123][ T4801] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9939'. [ 1335.364479][ T4798] delete_channel: no stack [ 1335.657592][ T4922] netlink: 'syz.1.9946': attribute type 2 has an invalid length. [ 1335.671038][ T4922] netlink: 'syz.1.9946': attribute type 8 has an invalid length. [ 1335.684108][ T4922] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9946'. [ 1335.927277][ T4941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1335.943494][ T4941] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9949'. [ 1335.969633][ T4931] netlink: 'syz.3.9950': attribute type 2 has an invalid length. [ 1336.024551][ T4931] netlink: 'syz.3.9950': attribute type 8 has an invalid length. [ 1336.039918][ T4931] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9950'. [ 1336.271955][ T5045] netlink: 'syz.2.9955': attribute type 2 has an invalid length. [ 1336.280825][ T5045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9955'. [ 1336.339542][ T5042] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9954'. [ 1336.884752][ T5120] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9962'. [ 1337.520730][ T5280] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9968'. [ 1339.612202][ T5626] mac80211_hwsim hwsim10 O3c: renamed from wlan1 [ 1339.711510][ T5630] __nla_validate_parse: 5 callbacks suppressed [ 1339.711534][ T5630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9996'. [ 1340.242047][ T5724] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9993'. [ 1340.309837][ T5731] cgroup: fork rejected by pids controller in /syz1 [ 1340.656632][ T5865] validate_nla: 18 callbacks suppressed [ 1340.656674][ T5865] netlink: 'syz.2.10002': attribute type 2 has an invalid length. [ 1340.679240][ T5865] netlink: 'syz.2.10002': attribute type 8 has an invalid length. [ 1340.703205][ T5865] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10002'. [ 1341.134027][ T5978] netlink: 'syz.3.10007': attribute type 10 has an invalid length. [ 1341.239393][ T5978] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10007'. [ 1341.281496][ T5981] netlink: 'syz.1.10008': attribute type 2 has an invalid length. [ 1341.290776][ T5981] netlink: 'syz.1.10008': attribute type 8 has an invalid length. [ 1341.312171][ T5981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10008'. [ 1341.494123][ T5987] netlink: 188 bytes leftover after parsing attributes in process `syz.3.10011'. [ 1345.692637][ T7318] netlink: 'syz.2.10051': attribute type 2 has an invalid length. [ 1345.700714][ T7318] netlink: 'syz.2.10051': attribute type 8 has an invalid length. [ 1345.822254][ T7318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10051'. [ 1347.978361][ T7969] netlink: 'syz.2.10065': attribute type 2 has an invalid length. [ 1348.003047][ T7969] netlink: 'syz.2.10065': attribute type 8 has an invalid length. [ 1348.022451][ T7969] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10065'. [ 1348.397264][ T8190] netlink: 'syz.2.10068': attribute type 2 has an invalid length. [ 1348.425751][ T8190] netlink: 'syz.2.10068': attribute type 8 has an invalid length. [ 1348.463097][ T8190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10068'. [ 1348.536545][ T8320] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.10070'. [ 1349.409279][ T8765] netlink: 'syz.3.10078': attribute type 2 has an invalid length. [ 1349.431184][ T8765] netlink: 'syz.3.10078': attribute type 8 has an invalid length. [ 1349.450611][ T8765] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10078'. [ 1349.568243][ T8868] netdevsim netdevsim4: Firmware load for '/../file0' refused, path contains '..' component [ 1349.876274][ T8972] netlink: 'syz.3.10083': attribute type 2 has an invalid length. [ 1349.890770][ T8972] netlink: 'syz.3.10083': attribute type 8 has an invalid length. [ 1349.907725][ T8972] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10083'. [ 1351.303163][ T9711] netlink: 'syz.2.10097': attribute type 2 has an invalid length. [ 1351.345932][ T9711] netlink: 'syz.2.10097': attribute type 8 has an invalid length. [ 1351.389052][ T9711] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10097'. [ 1351.489200][ T9716] netlink: 182 bytes leftover after parsing attributes in process `syz.3.10100'. [ 1351.861103][ T9996] netlink: 'syz.2.10106': attribute type 2 has an invalid length. [ 1351.900556][ T9996] netlink: 'syz.2.10106': attribute type 8 has an invalid length. [ 1351.912126][ T9996] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10106'. [ 1352.853447][T10451] netdevsim netdevsim0: Firmware load for '/../file0' refused, path contains '..' component [ 1356.667059][T11189] netlink: 'syz.2.10130': attribute type 2 has an invalid length. [ 1356.788833][T11189] netlink: 'syz.2.10130': attribute type 8 has an invalid length. [ 1356.823432][T11189] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10130'. [ 1357.662588][T11188] cgroup: fork rejected by pids controller in /syz3 [ 1358.672369][T11653] netlink: 'syz.2.10138': attribute type 2 has an invalid length. [ 1358.732810][T11653] netlink: 'syz.2.10138': attribute type 8 has an invalid length. [ 1358.741644][T11653] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10138'. [ 1359.895013][T11903] netlink: 'syz.3.10143': attribute type 2 has an invalid length. [ 1359.991837][T11903] netlink: 'syz.3.10143': attribute type 8 has an invalid length. [ 1360.024504][T11903] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10143'. [ 1360.877170][T12457] netlink: 'syz.2.10155': attribute type 2 has an invalid length. [ 1360.947650][T12457] netlink: 'syz.2.10155': attribute type 8 has an invalid length. [ 1361.009094][T12457] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10155'. [ 1361.238959][T12496] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.10156'. [ 1361.322239][T12538] device wlan0 left promiscuous mode [ 1361.367683][T12549] netlink: 'syz.2.10158': attribute type 2 has an invalid length. [ 1361.387262][T12549] netlink: 'syz.2.10158': attribute type 8 has an invalid length. [ 1361.410384][T12549] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10158'. [ 1361.747924][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.754392][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.786827][T12670] netlink: 'syz.0.10160': attribute type 2 has an invalid length. [ 1361.804896][T12670] netlink: 'syz.0.10160': attribute type 8 has an invalid length. [ 1361.833771][T12670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10160'. [ 1362.153089][T12781] netlink: 'syz.0.10163': attribute type 2 has an invalid length. [ 1362.163544][T12781] netlink: 'syz.0.10163': attribute type 8 has an invalid length. [ 1362.172496][T12781] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10163'. [ 1362.873539][T13100] netlink: 'syz.4.10171': attribute type 2 has an invalid length. [ 1362.883299][T13100] netlink: 'syz.4.10171': attribute type 8 has an invalid length. [ 1362.924373][T13100] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10171'. [ 1363.106725][T13175] netlink: 'syz.4.10173': attribute type 2 has an invalid length. [ 1363.119488][T13175] netlink: 'syz.4.10173': attribute type 8 has an invalid length. [ 1363.129641][T13175] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10173'. [ 1363.169086][T13208] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10174'. [ 1364.285565][T13411] netlink: 'syz.2.10183': attribute type 2 has an invalid length. [ 1364.300938][T13411] netlink: 'syz.2.10183': attribute type 8 has an invalid length. [ 1364.334030][T13411] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10183'. [ 1365.183657][T13653] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10185'. [ 1365.748933][T13973] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10191'. [ 1366.129447][T14105] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10194'. [ 1366.545281][T14274] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10200'. [ 1367.700768][T14594] device wlan0 left promiscuous mode [ 1367.846629][T14816] validate_nla: 6 callbacks suppressed [ 1367.846649][T14816] netlink: 'syz.2.10209': attribute type 2 has an invalid length. [ 1367.881721][T14816] netlink: 'syz.2.10209': attribute type 8 has an invalid length. [ 1367.891191][T14816] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10209'. [ 1368.248576][T14932] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.10216'. [ 1368.365176][T14932] netlink: 'syz.3.10216': attribute type 9 has an invalid length. [ 1368.387771][T14932] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.10216'. [ 1368.456375][T15004] netlink: 'syz.4.10217': attribute type 2 has an invalid length. [ 1368.487249][T15004] netlink: 'syz.4.10217': attribute type 8 has an invalid length. [ 1368.496579][T15004] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10217'. [ 1369.434720][T15147] device wlan0 left promiscuous mode [ 1369.480669][T15237] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10223'. [ 1369.690372][T15261] netlink: 'syz.4.10224': attribute type 2 has an invalid length. [ 1369.700285][T15261] netlink: 'syz.4.10224': attribute type 8 has an invalid length. [ 1369.710405][T15261] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10224'. [ 1370.392725][T15561] netlink: 'syz.3.10232': attribute type 9 has an invalid length. [ 1370.411539][T15561] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.10232'. [ 1370.545507][T15562] netlink: 'syz.3.10232': attribute type 9 has an invalid length. [ 1370.568411][T15562] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.10232'. [ 1371.049114][T15589] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.10235'. [ 1371.250929][T15575] netlink: 'syz.2.10235': attribute type 9 has an invalid length. [ 1371.271468][T15575] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.10235'. [ 1373.270433][T15993] netlink: 'syz.1.10244': attribute type 10 has an invalid length. [ 1373.493794][T15992] delete_channel: no stack [ 1373.507764][T16138] netlink: 'syz.3.10251': attribute type 10 has an invalid length. [ 1373.551250][T16138] netlink: 'syz.3.10251': attribute type 9 has an invalid length. [ 1373.566429][T16138] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.10251'. [ 1373.854947][T16309] netlink: 'syz.2.10254': attribute type 10 has an invalid length. [ 1373.914347][T16361] netlink: 6 bytes leftover after parsing attributes in process `syz.2.10254'. [ 1373.933339][T16361] openvswitch: netlink: Flow actions attr not present in new flow. [ 1374.279219][T16308] netlink: 'syz.4.10255': attribute type 2 has an invalid length. [ 1374.290806][T16308] netlink: 'syz.4.10255': attribute type 8 has an invalid length. [ 1374.318555][T16308] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10255'. [ 1375.193222][T16729] netlink: 'syz.2.10263': attribute type 2 has an invalid length. [ 1375.219870][T16729] netlink: 'syz.2.10263': attribute type 8 has an invalid length. [ 1375.252552][T16729] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10263'. [ 1375.300411][T16741] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.10264'. [ 1375.656774][T16954] netlink: 'syz.1.10272': attribute type 2 has an invalid length. [ 1375.671525][T16954] netlink: 'syz.1.10272': attribute type 8 has an invalid length. [ 1375.682403][T16954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10272'. [ 1375.817746][T16962] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10277'. [ 1375.888389][T16966] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10278'. [ 1376.145471][T16973] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10281'. [ 1376.156560][T16973] device hsr0 entered promiscuous mode [ 1376.469844][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10285'. [ 1377.499062][T17212] openvswitch: netlink: Flow actions attr not present in new flow. [ 1377.770526][T17220] device syzkaller0 entered promiscuous mode [ 1378.268808][T17333] netdevsim netdevsim2: Direct firmware load for .net/syz1 failed with error -2 [ 1378.278183][T17333] netdevsim netdevsim2: Falling back to sysfs fallback for: .net/syz1 [ 1379.646486][T17451] validate_nla: 15 callbacks suppressed [ 1379.646534][T17451] netlink: 'syz.2.10325': attribute type 10 has an invalid length. [ 1379.765100][T17449] delete_channel: no stack [ 1379.773995][T17456] __nla_validate_parse: 14 callbacks suppressed [ 1379.774033][T17456] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10315'. [ 1379.853832][T17458] netlink: 'syz.4.10316': attribute type 3 has an invalid length. [ 1379.868315][T17458] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10316'. [ 1379.874882][T17460] netlink: 'syz.2.10317': attribute type 2 has an invalid length. [ 1379.891637][T17460] netlink: 'syz.2.10317': attribute type 8 has an invalid length. [ 1379.909955][T17460] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10317'. [ 1379.963637][T17462] netlink: 'syz.3.10318': attribute type 2 has an invalid length. [ 1379.972989][T17462] netlink: 'syz.3.10318': attribute type 8 has an invalid length. [ 1379.981912][T17462] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10318'. [ 1381.084941][T17686] netdevsim netdevsim1: Direct firmware load for .net/syz1 failed with error -2 [ 1381.087401][T17691] netlink: 'syz.0.10329': attribute type 10 has an invalid length. [ 1381.126330][T17686] netdevsim netdevsim1: Falling back to sysfs fallback for: .net/syz1 [ 1381.212415][T17689] delete_channel: no stack [ 1381.264167][T17793] netlink: 'syz.2.10332': attribute type 3 has an invalid length. [ 1381.275412][T17793] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10332'. [ 1381.300746][T17795] netlink: 'syz.0.10333': attribute type 2 has an invalid length. [ 1381.310094][T17795] netlink: 'syz.0.10333': attribute type 8 has an invalid length. [ 1381.318659][T17795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10333'. [ 1383.245822][T17806] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10346'. [ 1384.552610][T18329] delete_channel: no stack [ 1384.952816][T18585] validate_nla: 2 callbacks suppressed [ 1384.953069][T18585] netlink: 'syz.3.10351': attribute type 3 has an invalid length. [ 1384.999305][T18585] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10351'. [ 1385.538705][T18959] netlink: 'syz.4.10354': attribute type 10 has an invalid length. [ 1385.714518][T18959] netlink: 6 bytes leftover after parsing attributes in process `syz.4.10354'. [ 1385.863703][T18959] openvswitch: netlink: Flow actions attr not present in new flow. [ 1386.241770][T19117] netlink: 'syz.2.10360': attribute type 10 has an invalid length. [ 1386.274562][T19117] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10360'. [ 1386.334910][T19168] netlink: 'syz.3.10362': attribute type 10 has an invalid length. [ 1386.569258][T19167] delete_channel: no stack [ 1386.617839][T19344] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10365'. [ 1386.713634][T19413] netlink: 'syz.4.10367': attribute type 3 has an invalid length. [ 1386.746641][T19413] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10367'. [ 1387.121874][T19517] netlink: 'syz.2.10369': attribute type 2 has an invalid length. [ 1387.134308][T19517] netlink: 'syz.2.10369': attribute type 8 has an invalid length. [ 1387.214840][T19517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10369'. [ 1387.498839][T19771] netlink: 'syz.0.10375': attribute type 2 has an invalid length. [ 1387.523583][T19771] netlink: 'syz.0.10375': attribute type 8 has an invalid length. [ 1387.551750][T19771] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10375'. [ 1387.687271][T19804] netlink: 'syz.4.10380': attribute type 3 has an invalid length. [ 1387.699531][T19804] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10380'. [ 1389.016821][T20333] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10390'. [ 1389.065868][T20338] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10391'. [ 1390.079586][T20754] __nla_validate_parse: 1 callbacks suppressed [ 1390.079626][T20754] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10393'. [ 1390.404695][T20976] validate_nla: 3 callbacks suppressed [ 1390.404720][T20976] netlink: 'syz.3.10403': attribute type 2 has an invalid length. [ 1390.432160][T20976] netlink: 'syz.3.10403': attribute type 8 has an invalid length. [ 1390.446711][T20976] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10403'. [ 1391.130686][T21586] netlink: 'syz.4.10412': attribute type 3 has an invalid length. [ 1391.233878][T21586] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10412'. [ 1391.786232][T21984] netlink: 'syz.4.10419': attribute type 2 has an invalid length. [ 1391.811231][T21984] netlink: 'syz.4.10419': attribute type 8 has an invalid length. [ 1391.820184][T21984] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10419'. [ 1391.878155][T22009] netlink: 'syz.1.10421': attribute type 2 has an invalid length. [ 1391.900479][T22009] netlink: 'syz.1.10421': attribute type 8 has an invalid length. [ 1391.930241][T22009] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10421'. [ 1392.543384][T22329] netlink: 'syz.1.10429': attribute type 3 has an invalid length. [ 1392.583910][T22331] netlink: 'syz.4.10430': attribute type 6 has an invalid length. [ 1392.605667][T22329] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10429'. [ 1393.147882][T22743] netlink: 'syz.3.10435': attribute type 1 has an invalid length. [ 1393.174646][T22743] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.10435'. [ 1393.295757][T22745] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10436'. [ 1394.070947][T23246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10445'. [ 1394.089682][T23089] netlink: 10 bytes leftover after parsing attributes in process `syz.2.10444'. [ 1395.340443][T23596] __nla_validate_parse: 1 callbacks suppressed [ 1395.340486][T23596] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.10453'. [ 1395.460647][T23663] mac80211_hwsim hwsim2 : renamed from wlan0 [ 1395.894456][T23800] validate_nla: 8 callbacks suppressed [ 1395.894500][T23800] netlink: 'syz.3.10458': attribute type 3 has an invalid length. [ 1395.919169][T23804] netlink: 'syz.2.10456': attribute type 6 has an invalid length. [ 1395.928154][T23800] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10458'. [ 1396.292513][T23935] netlink: 'syz.1.10461': attribute type 2 has an invalid length. [ 1396.305440][T23935] netlink: 'syz.1.10461': attribute type 8 has an invalid length. [ 1396.363661][T23935] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10461'. [ 1398.471348][T25265] mac80211_hwsim hwsim8 : renamed from wlan0 [ 1398.975201][T25420] device syzkaller0 entered promiscuous mode [ 1399.120805][T25573] netlink: 'syz.1.10491': attribute type 3 has an invalid length. [ 1399.181128][T25573] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10491'. [ 1399.306058][T25593] netlink: 'syz.0.10494': attribute type 16 has an invalid length. [ 1399.369846][T25593] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10494'. [ 1400.259358][T26299] netlink: 'syz.0.10502': attribute type 1 has an invalid length. [ 1400.301520][T26299] netlink: 'syz.0.10502': attribute type 4 has an invalid length. [ 1400.356466][T26299] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.10502'. [ 1400.399230][T26322] mac80211_hwsim hwsim7 : renamed from wlan0 [ 1400.935795][T26663] netlink: 'syz.3.10509': attribute type 2 has an invalid length. [ 1400.961584][T26663] netlink: 'syz.3.10509': attribute type 8 has an invalid length. [ 1401.027393][T26663] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10509'. [ 1401.178959][T26821] netlink: 'syz.2.10510': attribute type 2 has an invalid length. [ 1401.197928][T26821] netlink: 'syz.2.10510': attribute type 8 has an invalid length. [ 1401.209048][T26821] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10510'. [ 1401.953821][T27179] netlink: 'syz.1.10519': attribute type 1 has an invalid length. [ 1402.032188][T27179] netlink: 'syz.1.10519': attribute type 4 has an invalid length. [ 1402.040856][T27179] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.10519'. [ 1402.164661][T27351] netlink: 'syz.3.10523': attribute type 2 has an invalid length. [ 1402.189383][T27351] netlink: 'syz.3.10523': attribute type 8 has an invalid length. [ 1402.207481][T27351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10523'. [ 1402.269742][T27354] netlink: 'syz.2.10524': attribute type 2 has an invalid length. [ 1402.291711][T27354] netlink: 'syz.2.10524': attribute type 8 has an invalid length. [ 1402.341631][T27354] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10524'. [ 1402.609143][T27495] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10538'. [ 1402.640833][T27510] netlink: 168 bytes leftover after parsing attributes in process `syz.2.10527'. [ 1402.706684][T27723] netlink: 168 bytes leftover after parsing attributes in process `syz.2.10527'. [ 1403.770076][T28086] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10539'. [ 1405.821141][T28099] __nla_validate_parse: 2 callbacks suppressed [ 1405.821181][T28099] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10546'. [ 1405.832016][T28103] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10545'. [ 1406.458191][T28526] validate_nla: 14 callbacks suppressed [ 1406.458230][T28526] netlink: 'syz.2.10552': attribute type 2 has an invalid length. [ 1406.524084][T28526] netlink: 'syz.2.10552': attribute type 8 has an invalid length. [ 1406.553749][T28526] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10552'. [ 1409.190303][T30155] netlink: 179084 bytes leftover after parsing attributes in process `syz.4.10580'. [ 1409.356827][T30169] netlink: 'syz.2.10581': attribute type 2 has an invalid length. [ 1409.381637][T30169] netlink: 'syz.2.10581': attribute type 8 has an invalid length. [ 1409.400453][T30169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10581'. [ 1409.593041][T30516] netlink: 'syz.3.10582': attribute type 2 has an invalid length. [ 1409.636294][T30516] netlink: 'syz.3.10582': attribute type 8 has an invalid length. [ 1409.689813][T30516] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10582'. [ 1410.418637][T31061] netlink: 22 bytes leftover after parsing attributes in process `syz.3.10593'. [ 1410.677239][T31249] netlink: 'syz.2.10594': attribute type 2 has an invalid length. [ 1410.688217][T31249] netlink: 'syz.2.10594': attribute type 8 has an invalid length. [ 1410.696242][T31249] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10594'. [ 1411.028475][T31515] netlink: 'syz.1.10600': attribute type 10 has an invalid length. [ 1411.046295][T31515] netlink: 209796 bytes leftover after parsing attributes in process `syz.1.10600'. [ 1411.072466][T31515] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1412.183382][T31954] netlink: 'syz.1.10616': attribute type 1 has an invalid length. [ 1412.255899][T31954] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.10616'. [ 1412.270230][T31954] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10616'. [ 1412.733877][T32232] netlink: 'syz.2.10609': attribute type 2 has an invalid length. [ 1412.779467][T32232] netlink: 'syz.2.10609': attribute type 8 has an invalid length. [ 1412.814831][T32245] netlink: 'syz.4.10613': attribute type 3 has an invalid length. [ 1412.821531][T32232] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10609'. [ 1412.851751][T32245] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10613'. [ 1413.198094][T32533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1413.476272][T32474] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10615'. [ 1414.184545][ T597] netlink: 'syz.0.10625': attribute type 1 has an invalid length. [ 1414.196506][ T597] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.10625'. [ 1414.214702][ T486] netlink: 'syz.4.10623': attribute type 2 has an invalid length. [ 1414.252309][ T486] netlink: 'syz.4.10623': attribute type 8 has an invalid length. [ 1414.264811][ T597] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10625'. [ 1414.276619][ T486] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10623'. [ 1414.310505][ T578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10626'. [ 1414.760562][ T1099] netlink: 'syz.2.10642': attribute type 1 has an invalid length. [ 1414.774032][ T1119] netlink: 'syz.0.10631': attribute type 3 has an invalid length. [ 1415.638079][ T1503] netlink: 'syz.3.10640': attribute type 2 has an invalid length. [ 1416.174377][ T1708] __nla_validate_parse: 5 callbacks suppressed [ 1416.174434][ T1708] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10645'. [ 1417.469943][ T2437] validate_nla: 2 callbacks suppressed [ 1417.469982][ T2437] netlink: 'syz.3.10659': attribute type 3 has an invalid length. [ 1417.516487][ T2437] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10659'. [ 1418.543768][ T3373] netlink: 'syz.3.10670': attribute type 3 has an invalid length. [ 1418.563906][ T3373] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10670'. [ 1418.755920][ T3380] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.10669'. [ 1419.753730][ T3603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10672'. [ 1421.929953][T21129] tipc: Subscription rejected, illegal request [ 1422.025788][ T5004] netlink: 'syz.2.10692': attribute type 1 has an invalid length. [ 1422.034455][ T5004] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.10692'. [ 1422.561226][ T5575] netlink: 'syz.0.10699': attribute type 2 has an invalid length. [ 1422.580417][ T5575] netlink: 'syz.0.10699': attribute type 8 has an invalid length. [ 1422.603152][ T5575] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10699'. [ 1422.991794][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10705'. [ 1423.074121][ T5953] netlink: 'syz.3.10707': attribute type 3 has an invalid length. [ 1423.102417][ T5953] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10707'. [ 1423.251246][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.257979][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.788329][ T6994] netlink: 'syz.3.10723': attribute type 2 has an invalid length. [ 1425.804378][ T6994] netlink: 'syz.3.10723': attribute type 8 has an invalid length. [ 1425.815128][ T6994] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10723'. [ 1426.455887][ T7515] netlink: 'syz.1.10740': attribute type 3 has an invalid length. [ 1426.543983][ T7515] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10740'. [ 1427.948746][ T8650] netlink: 'syz.3.10748': attribute type 3 has an invalid length. [ 1427.983946][ T8650] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10748'. [ 1428.179021][ T8655] netlink: 'syz.4.10749': attribute type 2 has an invalid length. [ 1428.194735][ T8655] netlink: 'syz.4.10749': attribute type 8 has an invalid length. [ 1428.227798][ T8655] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10749'. [ 1428.400944][ T8963] netlink: 'syz.2.10752': attribute type 2 has an invalid length. [ 1428.481587][ T8963] netlink: 'syz.2.10752': attribute type 8 has an invalid length. [ 1428.490707][ T8963] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10752'. [ 1429.437084][ T9588] netlink: 'syz.4.10764': attribute type 3 has an invalid length. [ 1429.484015][ T9588] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10764'. [ 1431.273348][T10233] netlink: 'syz.1.10778': attribute type 3 has an invalid length. [ 1431.284938][T10233] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10778'. [ 1431.715530][T10410] netlink: 'syz.0.10779': attribute type 2 has an invalid length. [ 1431.753747][T10410] netlink: 'syz.0.10779': attribute type 8 has an invalid length. [ 1431.782233][T10410] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10779'. [ 1432.018498][T10533] netlink: 'syz.2.10782': attribute type 10 has an invalid length. [ 1432.876773][T11162] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10794'. [ 1433.449688][T11193] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.10797'. [ 1433.959282][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10805'. [ 1434.777715][T12149] validate_nla: 1 callbacks suppressed [ 1434.777779][T12149] netlink: 'syz.4.10814': attribute type 2 has an invalid length. [ 1434.796923][T12149] netlink: 'syz.4.10814': attribute type 8 has an invalid length. [ 1434.806238][T12149] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10814'. [ 1434.950983][T12291] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.10815'. [ 1435.120483][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10819'. [ 1435.577137][T12673] netlink: 'syz.1.10825': attribute type 3 has an invalid length. [ 1435.626694][T12673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10825'. [ 1435.779457][T12757] netlink: 26 bytes leftover after parsing attributes in process `syz.0.10827'. [ 1436.764656][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10834'. [ 1437.153581][T13165] netlink: 'syz.2.10839': attribute type 2 has an invalid length. [ 1437.176192][T13165] netlink: 'syz.2.10839': attribute type 8 has an invalid length. [ 1437.186129][T13165] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10839'. [ 1437.565953][T13383] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.10845'. [ 1438.593263][T13702] netlink: 'syz.3.10853': attribute type 2 has an invalid length. [ 1438.627944][T13702] netlink: 'syz.3.10853': attribute type 8 has an invalid length. [ 1438.637260][T13702] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10853'. [ 1438.733990][T14107] netlink: 'syz.4.10858': attribute type 3 has an invalid length. [ 1438.744842][T13969] netlink: 'syz.0.10856': attribute type 2 has an invalid length. [ 1438.760552][T13969] netlink: 'syz.0.10856': attribute type 8 has an invalid length. [ 1438.776003][T14107] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10858'. [ 1438.788942][T13969] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10856'. [ 1439.254084][T14407] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.10861'. [ 1439.281235][T14415] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10860'. [ 1439.329095][T14414] ------------[ cut here ]------------ [ 1439.334878][T14414] WARNING: CPU: 0 PID: 14414 at kernel/events/core.c:6688 perf_pending_task+0x358/0x470 [ 1439.345011][T14414] Modules linked in: [ 1439.348945][T14414] CPU: 0 PID: 14414 Comm: syz.3.10862 Not tainted syzkaller #0 [ 1439.356868][T14414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1439.367411][T14414] RIP: 0010:perf_pending_task+0x358/0x470 [ 1439.373219][T14414] Code: ff 84 db 75 14 e8 08 47 de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f4 46 de ff e8 37 7b 65 ff eb e5 e8 e8 46 de ff <0f> 0b e9 f3 fe ff ff e8 dc 46 de ff 48 c7 c7 60 4c 3a 8c 4c 89 f6 [ 1439.393359][T14414] RSP: 0018:ffffc90003b3f9d8 EFLAGS: 00010293 [ 1439.399472][T14414] RAX: ffffffff819b0208 RBX: ffff88804a1fba08 RCX: ffff88807a565940 [ 1439.407684][T14414] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1439.410753][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10863'. [ 1439.415823][T14414] RBP: 0000000000000001 R08: ffff88807a566353 R09: 1ffff1100f4acc6a [ 1439.415844][T14414] R10: dffffc0000000000 R11: ffffed100f4acc6b R12: ffff88807a565940 [ 1439.415858][T14414] R13: ffff88807dbb2558 R14: ffff88804a1fb7d8 R15: 1ffff1100943f6fb [ 1439.415874][T14414] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1439.415892][T14414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1439.415909][T14414] CR2: 0000200000001540 CR3: 000000000c08e000 CR4: 00000000003506f0 [ 1439.415929][T14414] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1439.415942][T14414] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1439.415958][T14414] Call Trace: [ 1439.415967][T14414] [ 1439.415980][T14414] task_work_run+0x125/0x1a0 [ 1439.416012][T14414] do_exit+0x626/0x20c0 [ 1439.504891][T14414] ? preempt_schedule+0xbc/0xd0 [ 1439.509790][T14414] ? put_task_struct+0x80/0x80 [ 1439.514682][T14414] ? preempt_schedule_common+0xa5/0xd0 [ 1439.520182][T14414] ? preempt_schedule+0xbc/0xd0 [ 1439.525145][T14414] ? schedule_preempt_disabled+0x20/0x20 [ 1439.530818][T14414] ? lock_chain_count+0x20/0x20 [ 1439.535800][T14414] do_group_exit+0x12e/0x300 [ 1439.540423][T14414] get_signal+0x6d6/0x12d0 [ 1439.544963][T14414] arch_do_signal_or_restart+0xe7/0x12c0 [ 1439.550640][T14414] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1439.556386][T14414] ? get_sigframe_size+0x10/0x10 [ 1439.561398][T14414] ? __fget_files+0x40f/0x480 [ 1439.566128][T14414] ? ksys_write+0x1fd/0x260 [ 1439.570670][T14414] ? exit_to_user_mode_loop+0x3b/0x130 [ 1439.576250][T14414] exit_to_user_mode_loop+0x9e/0x130 [ 1439.581608][T14414] exit_to_user_mode_prepare+0xee/0x180 [ 1439.587195][T14414] syscall_exit_to_user_mode+0x16/0x40 [ 1439.592779][T14414] do_syscall_64+0x58/0xa0 [ 1439.597239][T14414] ? clear_bhb_loop+0x30/0x80 [ 1439.602024][T14414] ? clear_bhb_loop+0x30/0x80 [ 1439.607095][T14414] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1439.613112][T14414] RIP: 0033:0x7fa88735ae59 [ 1439.617744][T14414] Code: Unable to access opcode bytes at RIP 0x7fa88735ae2f. [ 1439.625527][T14414] RSP: 002b:00007fa8855b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1439.634203][T14414] RAX: 0000000000000012 RBX: 00007fa8875d3fa0 RCX: 00007fa88735ae59 [ 1439.642355][T14414] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000009 [ 1439.651478][T14414] RBP: 00007fa8873f0d6f R08: 0000000000000000 R09: 0000000000000000 [ 1439.659581][T14414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1439.667997][T14414] R13: 00007fa8875d4038 R14: 00007fa8875d3fa0 R15: 00007ffdf9938328 [ 1439.676150][T14414] [ 1439.679447][T14414] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1439.686722][T14414] CPU: 0 PID: 14414 Comm: syz.3.10862 Not tainted syzkaller #0 [ 1439.694273][T14414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1439.704435][T14414] Call Trace: [ 1439.707826][T14414] [ 1439.710880][T14414] dump_stack_lvl+0x188/0x250 [ 1439.715776][T14414] ? show_regs_print_info+0x20/0x20 [ 1439.721015][T14414] ? load_image+0x400/0x400 [ 1439.725552][T14414] panic+0x2e5/0x810 [ 1439.729456][T14414] ? bpf_jit_dump+0xd0/0xd0 [ 1439.733964][T14414] ? perf_pending_task+0x358/0x470 [ 1439.739154][T14414] __warn+0x248/0x2b0 [ 1439.743244][T14414] ? perf_pending_task+0x358/0x470 [ 1439.748354][T14414] report_bug+0x1b7/0x2e0 [ 1439.752809][T14414] handle_bug+0x3a/0x70 [ 1439.756961][T14414] exc_invalid_op+0x16/0x40 [ 1439.761464][T14414] asm_exc_invalid_op+0x16/0x20 [ 1439.766419][T14414] RIP: 0010:perf_pending_task+0x358/0x470 [ 1439.772156][T14414] Code: ff 84 db 75 14 e8 08 47 de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f4 46 de ff e8 37 7b 65 ff eb e5 e8 e8 46 de ff <0f> 0b e9 f3 fe ff ff e8 dc 46 de ff 48 c7 c7 60 4c 3a 8c 4c 89 f6 [ 1439.792029][T14414] RSP: 0018:ffffc90003b3f9d8 EFLAGS: 00010293 [ 1439.798286][T14414] RAX: ffffffff819b0208 RBX: ffff88804a1fba08 RCX: ffff88807a565940 [ 1439.806529][T14414] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1439.814587][T14414] RBP: 0000000000000001 R08: ffff88807a566353 R09: 1ffff1100f4acc6a [ 1439.822770][T14414] R10: dffffc0000000000 R11: ffffed100f4acc6b R12: ffff88807a565940 [ 1439.830781][T14414] R13: ffff88807dbb2558 R14: ffff88804a1fb7d8 R15: 1ffff1100943f6fb [ 1439.839016][T14414] ? perf_pending_task+0x358/0x470 [ 1439.844448][T14414] ? perf_pending_task+0x358/0x470 [ 1439.849587][T14414] task_work_run+0x125/0x1a0 [ 1439.854195][T14414] do_exit+0x626/0x20c0 [ 1439.858456][T14414] ? preempt_schedule+0xbc/0xd0 [ 1439.863452][T14414] ? put_task_struct+0x80/0x80 [ 1439.868330][T14414] ? preempt_schedule_common+0xa5/0xd0 [ 1439.873823][T14414] ? preempt_schedule+0xbc/0xd0 [ 1439.878841][T14414] ? schedule_preempt_disabled+0x20/0x20 [ 1439.884632][T14414] ? lock_chain_count+0x20/0x20 [ 1439.889587][T14414] do_group_exit+0x12e/0x300 [ 1439.894285][T14414] get_signal+0x6d6/0x12d0 [ 1439.898719][T14414] arch_do_signal_or_restart+0xe7/0x12c0 [ 1439.904452][T14414] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1439.910100][T14414] ? get_sigframe_size+0x10/0x10 [ 1439.915039][T14414] ? __fget_files+0x40f/0x480 [ 1439.919722][T14414] ? ksys_write+0x1fd/0x260 [ 1439.924308][T14414] ? exit_to_user_mode_loop+0x3b/0x130 [ 1439.929887][T14414] exit_to_user_mode_loop+0x9e/0x130 [ 1439.935175][T14414] exit_to_user_mode_prepare+0xee/0x180 [ 1439.940747][T14414] syscall_exit_to_user_mode+0x16/0x40 [ 1439.946226][T14414] do_syscall_64+0x58/0xa0 [ 1439.950642][T14414] ? clear_bhb_loop+0x30/0x80 [ 1439.955320][T14414] ? clear_bhb_loop+0x30/0x80 [ 1439.960098][T14414] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1439.966264][T14414] RIP: 0033:0x7fa88735ae59 [ 1439.970800][T14414] Code: Unable to access opcode bytes at RIP 0x7fa88735ae2f. [ 1439.978282][T14414] RSP: 002b:00007fa8855b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1439.986909][T14414] RAX: 0000000000000012 RBX: 00007fa8875d3fa0 RCX: 00007fa88735ae59 [ 1439.994915][T14414] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000009 [ 1440.003023][T14414] RBP: 00007fa8873f0d6f R08: 0000000000000000 R09: 0000000000000000 [ 1440.011009][T14414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1440.019120][T14414] R13: 00007fa8875d4038 R14: 00007fa8875d3fa0 R15: 00007ffdf9938328 [ 1440.027407][T14414] [ 1440.030860][T14414] Kernel Offset: disabled [ 1440.035259][T14414] Rebooting in 86400 seconds..