last executing test programs: 3.343105837s ago: executing program 1 (id=2922): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000021c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311420000000000851000000200000085000000af00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="07000000040000000800"], 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a1180002", 0x1f}, {&(0x7f00000000c0)="01bcea046ed552d419fa223a46728e4235f16b6a2da49a0e21717ffdc49f85bc04", 0x21}, {&(0x7f00000002c0)="90566a316b9d801b", 0x8}, {&(0x7f00000001c0)="2f4ec52a9c171f5cd731747a1f366c3daba9e698bc7c581816d666c30fd67305e63ee16268e45cbc3117a53926a42121d6e2cd3b01ee491f482b631894ae8ac8793ad797a0dcb5ed73a1e1467e3b1f8fb9ef5fa4fce1", 0x56}], 0x4, 0x0, 0x0, 0x7400}, 0x800) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5760, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0900000003000000040001000500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001500"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r7}, 0x10) 2.530792243s ago: executing program 0 (id=2932): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000f000000180000000000000000000000000000009500000000000000846bdab3ee67f88bffb73826c5f82839a2756bd52b2f8f914b1ba42e6b0e7ed0388f8c5818adb3c980afb3f8a6efbb9ddbf3aab033ba3bd652d837bb47636b06"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000300)='cpu\t&0&&\t') bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a0000000400000008"], 0x48) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) close(r3) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 2.530530173s ago: executing program 1 (id=2933): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, 0x0, &(0x7f0000000340)=""/34}, 0x20) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0xffff7fff, 0x0, 0x2, 0x300}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff0012fe00632f77fbac141416ac14141602089f034d2f87e5070c0cab845013f232", 0x0, 0xfe, 0x60000000}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@call={0x85, 0x0, 0x0, 0x23}]}, 0x0}, 0x90) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.255873605s ago: executing program 0 (id=2935): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000fc000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ff0f00000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385002900"/88], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8982, &(0x7f0000000080)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='xen_mmu_set_p4d\x00', r5}, 0x18) 2.255506376s ago: executing program 3 (id=2936): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x5, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xe5aa1216fbb570d1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="260a0000000f000061111c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000a00)=""/223, 0xdf}, {0x0}, {&(0x7f0000000e00)=""/194, 0xc2}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000480)=""/176, 0xb0}, {0x0}], 0x9}, 0x40012100) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd7a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x21, 0x7fe931f2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000300)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 2.207608059s ago: executing program 2 (id=2937): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xe51d}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0xffffffffffffffff, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890c, &(0x7f0000000100)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x2}, 0x2041, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu<-0\t||') r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x3, 0x3, 0x6, 0x10000, 0xffffffffffffffff, 0x10, '\x00', 0x0, r2, 0x3, 0x3, 0x1, 0x0, @void, @value, @value=r3}, 0x50) 2.145581764s ago: executing program 4 (id=2938): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x22a00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x200}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kvm_mmio\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r1 = socket$kcm(0x25, 0x1, 0x0) sendmsg$sock(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {&(0x7f0000000380)="bd6de380808541c45a87df659381b651370f09566e00ac112c0d680bc5709fd3c7dbef82f828935d1a1f02e1486c0694f2fb82249943731cba5ec91b7320bc31ce9530418e534fbf1a38e46fecab4e9c9a286727", 0x54}, {&(0x7f0000001d80)="866f709a45b0aa7ee276fe253a84898c805fcd4872395addd1cef747", 0x1c}, {0x0}, {&(0x7f0000001f00)="395e1a75b780c7b25e90a8cfb2293b44c232195fb34caeb198a1362bde6e8a83", 0x20}, {0x0}, {0x0}], 0x8}, 0x20000810) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000440), 0x3d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080003900000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) 1.84044509s ago: executing program 4 (id=2939): r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0xfd, 0xac, 0x6, 0x5, 0x0, 0x800, 0x8, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xf6, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x14400, 0x2, 0x9, 0x2, 0xb1, 0x1, 0x395, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x7) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5c}, 0x0, 0x0, 0x4, 0x9, 0x3, 0x9, 0x6}, 0x0, 0x0, r0, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7, 0x5, 0xe5, 0x5, 0x0, 0x10, 0x19200, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x4, 0x2}, 0xa019, 0x400, 0x61, 0x6, 0x4, 0x0, 0x7, 0x0, 0x6, 0x0, 0x9634}, 0x0, 0x10, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x6, 0x8, 0x9, 0x9, 0x0, 0x83, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x0, 0x4, 0x7, 0x5, 0x3, 0x4, 0x0, 0x4, 0x0, 0x7}, r3, 0xc, r1, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private=0xa010102}}}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) 1.83962415s ago: executing program 2 (id=2949): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x22a00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x200}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kvm_mmio\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r1 = socket$kcm(0x25, 0x1, 0x0) sendmsg$sock(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {&(0x7f0000000380)="bd6de380808541c45a87df659381b651370f09566e00ac112c0d680bc5709fd3c7dbef82f828935d1a1f02e1486c0694f2fb82249943731cba5ec91b7320bc31ce9530418e534fbf1a38e46fecab4e9c9a286727", 0x54}, {&(0x7f0000001d80)="866f709a45b0aa7ee276fe253a84898c805fcd4872395addd1cef747", 0x1c}, {0x0}, {&(0x7f0000001f00)="395e1a75b780c7b25e90a8cfb2293b44c232195fb34caeb198a1362bde6e8a83", 0x20}, {0x0}, {0x0}], 0x8}, 0x20000810) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000440), 0x3d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080003900000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) 1.800461213s ago: executing program 1 (id=2940): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000021c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xc5bf) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) 1.531796785s ago: executing program 4 (id=2941): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000021c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311420000000000851000000200000085000000af00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="07000000040000000800"], 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a1180002", 0x1f}, {&(0x7f00000000c0)="01bcea046ed552d419fa223a46728e4235f16b6a2da49a0e21717ffdc49f85bc04", 0x21}, {&(0x7f00000002c0)="90566a316b9d801b", 0x8}, {&(0x7f00000001c0)="2f4ec52a9c171f5cd731747a1f366c3daba9e698bc7c581816d666c30fd67305e63ee16268e45cbc3117a53926a42121d6e2cd3b01ee491f482b631894ae8ac8793ad797a0dcb5ed73a1e1467e3b1f8fb9ef5fa4fce1", 0x56}], 0x4, 0x0, 0x0, 0x7400}, 0x800) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5760, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0900000003000000040001000500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001500"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r7}, 0x10) 1.530966105s ago: executing program 0 (id=2952): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, 0x0, &(0x7f0000000340)=""/34}, 0x20) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0xffff7fff, 0x0, 0x2, 0x300}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff0012fe00632f77fbac141416ac14141602089f034d2f87e5070c0cab845013f232", 0x0, 0xfe, 0x60000000}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@call={0x85, 0x0, 0x0, 0x23}]}, 0x0}, 0x90) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.450173681s ago: executing program 2 (id=2942): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/pid\x00') openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000006361"], 0x0, 0x52}, 0x28) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 1.449910691s ago: executing program 3 (id=2943): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb2321, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76, 0x0, 0xffff}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xfffffe2d, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8e19b84aec58bcf3}, 0x3f) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r5) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x748, 0x0, 0x9, 0x0, 0x40800, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) write$cgroup_int(r7, &(0x7f0000000040), 0x1) 1.084680441s ago: executing program 3 (id=2944): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11100, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={0xffffffffffffffff, 0x0, &(0x7f0000000580)=""/146, 0x4}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/cgroup\x00') write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) mkdir(&(0x7f0000000180)='./file0\x00', 0x8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) 1.077072892s ago: executing program 2 (id=2956): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xa0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe0002476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea097a75dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f01001bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bc0004c3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b4150900000000000000f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d18716975c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f9836faa292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee63ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c11465fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff300"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 1.076149372s ago: executing program 1 (id=2945): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x480, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x11, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@tail_call, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @alu={0x4, 0x0, 0x3, 0x8, 0xb, 0xfffffffffffffff0, 0x4}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00, 0x0, 0x0, 0x0, 0xa94}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 984.411969ms ago: executing program 0 (id=2946): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000004) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x401054d5, 0x0) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 984.154279ms ago: executing program 4 (id=2947): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x0) 608.35329ms ago: executing program 3 (id=2948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000200000000000000010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 540.813916ms ago: executing program 1 (id=2950): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xe51d}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0xffffffffffffffff, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890c, &(0x7f0000000100)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x2}, 0x2041, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu<-0\t||') r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x3, 0x3, 0x6, 0x10000, 0xffffffffffffffff, 0x10, '\x00', 0x0, r2, 0x3, 0x3, 0x1, 0x0, @void, @value, @value=r3}, 0x50) 536.019836ms ago: executing program 4 (id=2951): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000f000000180000000000000000000000000000009500000000000000846bdab3ee67f88bffb73826c5f82839a2756bd52b2f8f914b1ba42e6b0e7ed0388f8c5818adb3c980afb3f8a6efbb9ddbf3aab033ba3bd652d837bb47636b06"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000300)='cpu\t&0&&\t') bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a0000000400000008"], 0x48) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) close(r3) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 445.499214ms ago: executing program 2 (id=2953): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000fc000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ff0f00000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385002900"/88], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8982, &(0x7f0000000080)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='xen_mmu_set_p4d\x00', r5}, 0x18) 442.246894ms ago: executing program 0 (id=2964): socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x40047459, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40080d0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000040)='syz1\x00', 0x1ff) 324.189203ms ago: executing program 3 (id=2954): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x22a00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x200}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kvm_mmio\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r1 = socket$kcm(0x25, 0x1, 0x0) sendmsg$sock(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {&(0x7f0000000380)="bd6de380808541c45a87df659381b651370f09566e00ac112c0d680bc5709fd3c7dbef82f828935d1a1f02e1486c0694f2fb82249943731cba5ec91b7320bc31ce9530418e534fbf1a38e46fecab4e9c9a2867273cf041caa3df", 0x5a}, {&(0x7f0000001d80)="866f709a45b0aa7ee276fe253a84898c805fcd4872395addd1cef747", 0x1c}, {0x0}, {&(0x7f0000001f00)="395e1a75b780c7b25e90a8cfb2293b44c232195fb34caeb198a1362bde6e8a83", 0x20}, {0x0}, {0x0}], 0x8}, 0x20000810) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000440), 0x3d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080003900000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) 1.5419ms ago: executing program 0 (id=2955): r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0xfd, 0xac, 0x6, 0x5, 0x0, 0x800, 0x8, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xf6, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x14400, 0x2, 0x9, 0x2, 0xb1, 0x1, 0x395, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x7) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5c}, 0x0, 0x0, 0x4, 0x9, 0x3, 0x9, 0x6}, 0x0, 0x0, r0, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7, 0x5, 0xe5, 0x5, 0x0, 0x10, 0x19200, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x4, 0x2}, 0xa019, 0x400, 0x61, 0x6, 0x4, 0x0, 0x7, 0x0, 0x6, 0x0, 0x9634}, 0x0, 0x10, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1b, 0x0, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x6, 0x8, 0x9, 0x9, 0x0, 0x83, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x2000, 0x0, 0x4, 0x7, 0x5, 0x3, 0x4, 0x0, 0x4, 0x0, 0x7}, r3, 0xc, r1, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private=0xa010102}}}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) 1.19851ms ago: executing program 1 (id=2957): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/pid\x00') openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000006361"], 0x0, 0x52}, 0x28) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 714.409µs ago: executing program 2 (id=2958): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x5, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xe5aa1216fbb570d1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="260a0000000f000061111c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000a00)=""/223, 0xdf}, {0x0}, {&(0x7f0000000e00)=""/194, 0xc2}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000480)=""/176, 0xb0}, {0x0}], 0x9}, 0x40012100) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd7a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x21, 0x7fe931f2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000300)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 328.92µs ago: executing program 3 (id=2959): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600290001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb79107005ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16ca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee7de6ccd4d6e4ed6f3d93452a92954b43370e970189f97bb7fabe5163b0fa79c4fe", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3}, 0x80, &(0x7f00000000c0), 0x1c, 0x0, 0x0, 0x900}, 0x20000064) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x44}, 0x100808, 0x0, 0x400, 0x9, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 4 (id=2960): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2040) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) syz_clone(0x240000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x8) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) kernel console output (not intermixed with test programs): TDEV_CHANGE): veth1_vlan: link becomes ready [ 64.825995][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.834456][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.843097][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.852219][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.861715][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.871071][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.879738][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.888405][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.896768][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.905260][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.913454][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.924882][ T4273] device veth0_vlan entered promiscuous mode [ 64.941174][ T4275] device veth0_vlan entered promiscuous mode [ 64.950481][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.965895][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.974916][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.983760][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.994777][ T4270] device veth1_vlan entered promiscuous mode [ 65.024468][ T4273] device veth1_vlan entered promiscuous mode [ 65.037452][ T4275] device veth1_vlan entered promiscuous mode [ 65.078052][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.088981][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 65.096367][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.108587][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.120435][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.128397][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.136484][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.144817][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.168951][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 65.181521][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.191325][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.222617][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.234200][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.242348][ T4273] device veth0_macvtap entered promiscuous mode [ 65.269197][ T4275] device veth0_macvtap entered promiscuous mode [ 65.280377][ T4275] device veth1_macvtap entered promiscuous mode [ 65.291495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.302678][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.310836][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.318551][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.327333][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.335385][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 65.347163][ T4270] device veth0_macvtap entered promiscuous mode [ 65.357576][ T4273] device veth1_macvtap entered promiscuous mode [ 65.386133][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.404650][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.412999][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 65.419571][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 65.433322][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.444540][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.453271][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.473228][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.484492][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.495888][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.506383][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.518182][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.532506][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.544995][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.554980][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.566944][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.578408][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.589010][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.600443][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.609483][ T4270] device veth1_macvtap entered promiscuous mode [ 65.617867][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.631656][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.646651][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.665904][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.676156][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.697950][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.699248][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.722994][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.726415][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.746932][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.757964][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.769797][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.785587][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.799787][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.810573][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.821349][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.831596][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.842367][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.855273][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.867920][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.876310][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.885881][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.895884][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.904736][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.928655][ C0] hrtimer: interrupt took 46216 ns [ 65.967853][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.979633][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.988460][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.000985][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.029066][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.029838][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.046118][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.052517][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.064358][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.073291][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.089161][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.104103][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.114392][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.125001][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.135305][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.148594][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.161083][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.171929][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.184071][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.192777][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.201763][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.213058][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.268939][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.308213][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.318221][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.334178][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.348476][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.364932][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.376350][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.387048][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.399943][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.463026][ T4380] netlink: 'syz.1.6': attribute type 25 has an invalid length. [ 66.593884][ T4270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.606219][ T4270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.617185][ T4270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.626454][ T4270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.638144][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.657663][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.684477][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.715829][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.757022][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.803450][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.822127][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.910970][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.934139][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.944587][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.992422][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.006802][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.017449][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.080220][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.130468][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.150447][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.158505][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.162438][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.173322][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 67.204417][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.257667][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 67.264029][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.414038][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 67.496113][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 67.502283][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 68.010011][ T4409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 68.017622][ T4409] IPv6: NLM_F_CREATE should be set when creating new route [ 68.025101][ T4409] IPv6: NLM_F_CREATE should be set when creating new route [ 68.032496][ T4409] IPv6: NLM_F_CREATE should be set when creating new route [ 68.048307][ T4404] netlink: 'syz.1.13': attribute type 8 has an invalid length. [ 68.092217][ T4404] netlink: 399 bytes leftover after parsing attributes in process `syz.1.13'. [ 68.615272][ T4418] netlink: 'syz.2.17': attribute type 10 has an invalid length. [ 69.423703][ T4418] team0: Port device wlan1 added [ 69.606931][ T4418] syz.2.17 (4418) used greatest stack depth: 20032 bytes left [ 69.623928][ T4425] device syzkaller0 entered promiscuous mode [ 69.786036][ T4429] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 69.867196][ T4429] device syzkaller0 entered promiscuous mode [ 71.332924][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.339646][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.311711][ T4449] netlink: 'syz.4.28': attribute type 8 has an invalid length. [ 73.345150][ T4449] netlink: 399 bytes leftover after parsing attributes in process `syz.4.28'. [ 74.470524][ T4462] netlink: 'syz.3.34': attribute type 25 has an invalid length. [ 75.785123][ T4476] netlink: 'syz.3.40': attribute type 21 has an invalid length. [ 75.832634][ T4476] netlink: 156 bytes leftover after parsing attributes in process `syz.3.40'. [ 76.456120][ T7] cfg80211: failed to load regulatory.db [ 77.661485][ T4505] netlink: 'syz.0.51': attribute type 25 has an invalid length. [ 78.979545][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 79.088579][ T4513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.316796][ T4524] netlink: 'syz.0.58': attribute type 21 has an invalid length. [ 79.359421][ T4524] netlink: 156 bytes leftover after parsing attributes in process `syz.0.58'. [ 82.824707][ T4564] netlink: 'syz.1.70': attribute type 21 has an invalid length. [ 82.851892][ T4564] netlink: 156 bytes leftover after parsing attributes in process `syz.1.70'. [ 83.669818][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 83.747279][ T4575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.266060][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 89.319343][ T4633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.090669][ T4639] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 90.189573][ T4639] device syzkaller0 entered promiscuous mode [ 92.802490][ T4276] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 92.923895][ T4684] device syzkaller0 entered promiscuous mode [ 94.849002][ T4276] Bluetooth: hci3: command 0x2016 tx timeout [ 95.805015][ T4778] device syzkaller0 entered promiscuous mode [ 95.842351][ T4763] netlink: 67 bytes leftover after parsing attributes in process `syz.4.127'. [ 95.857544][ T4276] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 96.946495][ T4799] Zero length message leads to an empty skb [ 97.896858][ T4276] Bluetooth: hci0: command 0x2016 tx timeout [ 98.140418][ T4811] netlink: 67 bytes leftover after parsing attributes in process `syz.1.145'. [ 98.377375][ T4276] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 98.406543][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 98.430977][ T4821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.449222][ T4276] Bluetooth: hci1: command 0x2016 tx timeout [ 101.360818][ T4276] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 102.114290][ T4872] netlink: 60 bytes leftover after parsing attributes in process `syz.4.163'. [ 102.146297][ T4872] device caif0 entered promiscuous mode [ 102.274324][ T4878] netlink: 67 bytes leftover after parsing attributes in process `syz.3.162'. [ 103.408804][ T4276] Bluetooth: hci4: command 0x2016 tx timeout [ 104.269487][ T4892] device syzkaller0 entered promiscuous mode [ 105.585549][ T4276] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 105.593946][ T4276] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 106.004236][ T4913] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 106.266595][ T4913] device syzkaller0 entered promiscuous mode [ 108.115444][ T4921] netlink: 67 bytes leftover after parsing attributes in process `syz.0.187'. [ 108.124925][ T4927] netlink: 60 bytes leftover after parsing attributes in process `syz.3.189'. [ 108.153246][ T4927] device caif0 entered promiscuous mode [ 108.646936][ T4276] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 109.622937][ T4962] netlink: 'syz.4.203': attribute type 10 has an invalid length. [ 109.868383][ T4967] netlink: 67 bytes leftover after parsing attributes in process `syz.0.204'. [ 110.237192][ T4975] netlink: 60 bytes leftover after parsing attributes in process `syz.1.207'. [ 110.278340][ T4975] device caif0 entered promiscuous mode [ 110.316015][ T4976] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 110.450266][ T4976] device syzkaller0 entered promiscuous mode [ 110.691014][ T4276] Bluetooth: hci2: command 0x2016 tx timeout [ 113.265421][ T5000] netlink: 'syz.3.218': attribute type 10 has an invalid length. [ 113.274287][ T5000] netlink: 55 bytes leftover after parsing attributes in process `syz.3.218'. [ 114.855259][ T5037] netlink: 'syz.2.227': attribute type 10 has an invalid length. [ 116.694449][ T5048] netlink: 'syz.3.243': attribute type 10 has an invalid length. [ 116.940555][ T5058] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 116.956367][ T5058] device syzkaller0 entered promiscuous mode [ 118.407876][ T5069] netlink: 60 bytes leftover after parsing attributes in process `syz.0.232'. [ 118.424665][ T5069] device caif0 entered promiscuous mode [ 118.457492][ T5068] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 118.481278][ T5068] device syzkaller0 entered promiscuous mode [ 120.765002][ T5100] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 120.858313][ T5100] device syzkaller0 entered promiscuous mode [ 120.872340][ T5108] netlink: 'syz.3.245': attribute type 10 has an invalid length. [ 122.216050][ T5114] netlink: 'syz.2.247': attribute type 10 has an invalid length. [ 122.462912][ T5118] netlink: 'syz.4.253': attribute type 10 has an invalid length. [ 122.472794][ T5118] netlink: 55 bytes leftover after parsing attributes in process `syz.4.253'. [ 123.282486][ T5137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.290120][ T5137] IPv6: NLM_F_CREATE should be set when creating new route [ 123.297694][ T5137] IPv6: NLM_F_CREATE should be set when creating new route [ 123.310477][ T5140] netlink: 766 bytes leftover after parsing attributes in process `syz.3.259'. [ 123.343897][ T5140] device bond_slave_0 entered promiscuous mode [ 123.352987][ T5140] device bond_slave_1 entered promiscuous mode [ 123.529306][ T5144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.536801][ T5144] IPv6: NLM_F_CREATE should be set when creating new route [ 123.544434][ T5144] IPv6: NLM_F_CREATE should be set when creating new route [ 123.848960][ T5158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.281'. [ 123.907527][ T5160] netlink: 'syz.1.270': attribute type 10 has an invalid length. [ 124.348581][ T5166] netlink: 'syz.4.271': attribute type 39 has an invalid length. [ 124.791821][ T5182] netlink: 'syz.2.280': attribute type 10 has an invalid length. [ 124.816448][ T5182] netlink: 55 bytes leftover after parsing attributes in process `syz.2.280'. [ 125.542105][ T5191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.549433][ T5191] IPv6: NLM_F_CREATE should be set when creating new route [ 125.556703][ T5191] IPv6: NLM_F_CREATE should be set when creating new route [ 125.595231][ T5196] netlink: 67 bytes leftover after parsing attributes in process `syz.3.285'. [ 125.779326][ T5207] device syzkaller0 entered promiscuous mode [ 126.070937][ T5218] netlink: 'syz.4.293': attribute type 10 has an invalid length. [ 126.793670][ T5226] syz.1.306 uses obsolete (PF_INET,SOCK_PACKET) [ 126.827256][ T5226] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.857379][ T5226] netlink: 1 bytes leftover after parsing attributes in process `syz.1.306'. [ 127.295586][ T5244] netlink: 'syz.0.299': attribute type 10 has an invalid length. [ 127.359559][ T5244] netlink: 55 bytes leftover after parsing attributes in process `syz.0.299'. [ 127.970330][ T5250] netlink: 67 bytes leftover after parsing attributes in process `syz.2.301'. [ 127.988189][ T5245] netlink: 766 bytes leftover after parsing attributes in process `syz.4.311'. [ 128.009078][ T5245] device bond_slave_0 entered promiscuous mode [ 128.015346][ T5245] device bond_slave_1 entered promiscuous mode [ 128.377053][ T5264] netlink: 'syz.4.308': attribute type 10 has an invalid length. [ 128.438502][ T5274] netlink: 60 bytes leftover after parsing attributes in process `syz.3.309'. [ 128.783393][ T5277] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.808796][ T5277] netlink: 1 bytes leftover after parsing attributes in process `syz.2.312'. [ 129.041048][ T5280] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 129.184900][ T5280] device syzkaller0 entered promiscuous mode [ 132.007025][ T5301] netlink: 67 bytes leftover after parsing attributes in process `syz.0.319'. [ 132.452619][ T5314] netlink: 766 bytes leftover after parsing attributes in process `syz.0.320'. [ 132.468050][ T5314] device bond_slave_0 entered promiscuous mode [ 132.483680][ T5314] device bond_slave_1 entered promiscuous mode [ 132.610822][ T5322] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.637330][ T5322] netlink: 1 bytes leftover after parsing attributes in process `syz.4.328'. [ 132.771113][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.777459][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.797928][ T5324] netlink: 60 bytes leftover after parsing attributes in process `syz.1.329'. [ 133.006493][ T5333] netlink: 'syz.0.332': attribute type 10 has an invalid length. [ 133.106212][ T5333] netlink: 55 bytes leftover after parsing attributes in process `syz.0.332'. [ 133.174801][ T5335] netlink: 766 bytes leftover after parsing attributes in process `syz.4.331'. [ 133.722173][ T5348] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 133.833984][ T5348] device syzkaller0 entered promiscuous mode [ 135.875887][ T5363] netlink: 'syz.1.351': attribute type 2 has an invalid length. [ 135.884819][ T5363] netlink: 'syz.1.351': attribute type 8 has an invalid length. [ 135.893239][ T5363] netlink: 132 bytes leftover after parsing attributes in process `syz.1.351'. [ 136.316904][ T5368] netlink: 67 bytes leftover after parsing attributes in process `syz.4.355'. [ 136.417489][ T5378] device syzkaller0 entered promiscuous mode [ 136.465319][ T5376] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 136.584970][ T5376] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 136.594758][ T5376] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 136.604457][ T5376] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 136.613999][ T5376] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 136.623632][ T5376] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 136.633138][ T5376] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 136.642441][ T5376] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 136.652072][ T5376] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 136.661308][ T5376] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 137.413809][ T5386] netlink: 766 bytes leftover after parsing attributes in process `syz.1.343'. [ 137.424887][ T5386] device bond_slave_0 entered promiscuous mode [ 137.431152][ T5386] device bond_slave_1 entered promiscuous mode [ 137.669962][ T5395] netlink: 766 bytes leftover after parsing attributes in process `syz.2.348'. [ 137.698350][ T5395] device bond_slave_0 entered promiscuous mode [ 137.720121][ T5395] device bond_slave_1 entered promiscuous mode [ 138.609323][ T5407] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 138.617447][ T5407] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 138.650460][ T5407] device veth0_to_bridge entered promiscuous mode [ 139.192771][ T5426] device syzkaller0 entered promiscuous mode [ 139.324715][ T5434] IPv6: NLM_F_CREATE should be specified when creating new route [ 139.356279][ T5434] netlink: 1 bytes leftover after parsing attributes in process `syz.3.363'. [ 139.738534][ T5447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.368'. [ 140.047777][ T5448] netlink: 766 bytes leftover after parsing attributes in process `syz.1.369'. [ 141.163346][ T5461] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 141.227882][ T5461] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 141.238331][ T5461] device veth0_to_bridge entered promiscuous mode [ 142.105370][ T5497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.387'. [ 142.370298][ T5500] netlink: 766 bytes leftover after parsing attributes in process `syz.3.386'. [ 143.507517][ T5522] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.400'. [ 143.663318][ T5517] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 143.712498][ T5517] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 143.751294][ T5517] device veth0_to_bridge entered promiscuous mode [ 143.885326][ T5528] netlink: 'syz.2.403': attribute type 15 has an invalid length. [ 143.910499][ T5528] netlink: 'syz.2.403': attribute type 7 has an invalid length. [ 144.404157][ T5538] netlink: 60 bytes leftover after parsing attributes in process `syz.0.405'. [ 144.582778][ T5540] device syzkaller0 entered promiscuous mode [ 145.670354][ T5556] netlink: 766 bytes leftover after parsing attributes in process `syz.2.412'. [ 145.935950][ T5569] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 146.039231][ T5569] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 146.083526][ T5569] device veth0_to_bridge entered promiscuous mode [ 146.310256][ T5572] netlink: 766 bytes leftover after parsing attributes in process `syz.0.428'. [ 146.435731][ T5576] netlink: 'syz.4.417': attribute type 15 has an invalid length. [ 146.587043][ T5576] netlink: 'syz.4.417': attribute type 7 has an invalid length. [ 146.911167][ T5586] netlink: 60 bytes leftover after parsing attributes in process `syz.2.420'. [ 147.613405][ T5591] device syzkaller0 entered promiscuous mode [ 147.908539][ T5593] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.421'. [ 147.971027][ T5593] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 149.111004][ T5614] net_ratelimit: 1399 callbacks suppressed [ 149.111092][ T5614] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 149.140420][ T5623] netlink: 60 bytes leftover after parsing attributes in process `syz.1.436'. [ 149.251526][ T5614] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 149.260946][ T5614] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 149.270322][ T5614] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 149.279665][ T5614] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 149.289223][ T5614] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 149.298542][ T5614] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 149.307913][ T5614] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 149.317441][ T5614] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 149.326721][ T5614] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 150.052976][ T5628] netlink: 'syz.3.438': attribute type 15 has an invalid length. [ 150.104416][ T5628] netlink: 'syz.3.438': attribute type 7 has an invalid length. [ 151.470856][ T5647] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.443'. [ 151.596034][ T5647] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 151.862710][ T5665] Driver unsupported XDP return value 0 on prog (id 212) dev N/A, expect packet loss! [ 153.989998][ T5695] netlink: 766 bytes leftover after parsing attributes in process `syz.2.463'. [ 154.865408][ T5722] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.470'. [ 154.887534][ T5722] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 167.672518][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.688464][ T5957] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.553'. [ 167.700137][ T5952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.735122][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.761507][ T5952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.532970][ T5992] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 169.856306][ T6008] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.569'. [ 170.305779][ T6026] netlink: 'syz.2.576': attribute type 3 has an invalid length. [ 170.339337][ T6026] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.576'. [ 171.840363][ T4745] wlan1: Trigger new scan to find an IBSS to join [ 174.136001][ T6103] netlink: 'syz.0.597': attribute type 3 has an invalid length. [ 174.167208][ T6103] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.597'. [ 174.222367][ T6109] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 174.850719][ T9] wlan1: Trigger new scan to find an IBSS to join [ 176.242007][ T6167] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 176.560764][ T6179] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 176.859753][ T9] wlan1: Trigger new scan to find an IBSS to join [ 177.575538][ T6187] netlink: 'syz.3.629': attribute type 3 has an invalid length. [ 177.605337][ T6187] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.629'. [ 178.779006][ T4743] wlan1: Trigger new scan to find an IBSS to join [ 178.879453][ T4728] wlan1: Trigger new scan to find an IBSS to join [ 179.779326][ T35] wlan1: Creating new IBSS network, BSSID 4a:14:df:37:23:3c [ 181.811924][ T4735] wlan1: Trigger new scan to find an IBSS to join [ 181.830163][ T4728] wlan1: Trigger new scan to find an IBSS to join [ 182.326875][ T6274] netlink: 'syz.3.655': attribute type 3 has an invalid length. [ 182.358835][ T6274] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.655'. [ 182.664116][ T6282] device sit0 entered promiscuous mode [ 182.726303][ T1185] wlan1: Creating new IBSS network, BSSID 2a:71:ca:a5:ca:66 [ 183.891971][ T6299] netlink: 'syz.1.661': attribute type 39 has an invalid length. [ 184.851754][ T4735] wlan1: Trigger new scan to find an IBSS to join [ 185.744677][ T4741] wlan1: Creating new IBSS network, BSSID 52:8a:48:c4:bb:ca [ 185.765935][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.050733][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 186.050758][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 186.056794][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 186.063313][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 186.071166][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 186.833363][ T6344] device sit0 entered promiscuous mode [ 186.987872][ T6347] netlink: 'syz.1.677': attribute type 3 has an invalid length. [ 187.000367][ T6347] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.677'. [ 188.266905][ T6367] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 191.829143][ T6451] netlink: 'syz.2.713': attribute type 39 has an invalid length. [ 192.568696][ T6461] netlink: 'syz.4.720': attribute type 28 has an invalid length. [ 193.905274][ T6494] netlink: 'syz.0.732': attribute type 39 has an invalid length. [ 194.231889][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.238417][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.411332][ T6524] netlink: 'syz.1.743': attribute type 28 has an invalid length. [ 197.371277][ T6562] netlink: 'syz.4.754': attribute type 39 has an invalid length. [ 198.290302][ T4276] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6 [ 198.954367][ T6607] netlink: 'syz.0.777': attribute type 28 has an invalid length. [ 199.126669][ T6619] netlink: 'syz.1.782': attribute type 1 has an invalid length. [ 199.165268][ T6619] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.782'. [ 201.670624][ T6688] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 201.678832][ T6688] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.805'. [ 204.059816][ T6765] device syzkaller0 entered promiscuous mode [ 205.068594][ T6804] device syzkaller0 entered promiscuous mode [ 205.922243][ T6839] netlink: 'syz.0.866': attribute type 39 has an invalid length. [ 206.561094][ T6845] netlink: 'syz.3.868': attribute type 6 has an invalid length. [ 206.661864][ T6851] device syzkaller0 entered promiscuous mode [ 207.907967][ T6883] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 207.916878][ T6883] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.880'. [ 208.593434][ T6895] device syzkaller0 entered promiscuous mode [ 208.804598][ T6904] netlink: 'syz.0.890': attribute type 6 has an invalid length. [ 209.816926][ T4741] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 209.873942][ T6928] netlink: 'syz.0.898': attribute type 1 has an invalid length. [ 209.915738][ T6928] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.898'. [ 211.735396][ T6977] netlink: 'syz.3.919': attribute type 1 has an invalid length. [ 211.754048][ T6977] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.919'. [ 212.901557][ T4741] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 213.699320][ T7027] netlink: 'syz.0.935': attribute type 1 has an invalid length. [ 213.738244][ T7027] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.935'. [ 214.220574][ T4728] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 214.438922][ T7047] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 [ 215.755637][ T4735] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 216.601199][ T7129] netlink: 'syz.4.975': attribute type 1 has an invalid length. [ 216.647593][ T7129] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.975'. [ 216.767660][ T7137] device syzkaller0 entered promiscuous mode [ 218.145577][ T7179] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 [ 218.458630][ T7185] netlink: 'syz.0.994': attribute type 10 has an invalid length. [ 218.526008][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.540866][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.691745][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.699427][ T7185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.708774][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.717001][ T7185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.884597][ T7185] device bridge0 entered promiscuous mode [ 218.948260][ T7185] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 220.484939][ T7255] netlink: 'syz.2.1021': attribute type 10 has an invalid length. [ 220.545739][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.555900][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.730625][ T7255] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.738768][ T7255] bridge0: port 2(bridge_slave_1) entered listening state [ 220.747451][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.755480][ T7255] bridge0: port 1(bridge_slave_0) entered listening state [ 220.941159][ T7255] device bridge0 entered promiscuous mode [ 220.990643][ T7255] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 221.249400][ T7255] syz.2.1021 (7255) used greatest stack depth: 19304 bytes left [ 221.504817][ T7290] netlink: 'syz.4.1036': attribute type 1 has an invalid length. [ 221.513448][ T7290] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1036'. [ 222.977974][ T7329] netlink: 'syz.3.1049': attribute type 10 has an invalid length. [ 223.046900][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.056846][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.187005][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.193574][ T7336] netlink: 'syz.2.1052': attribute type 1 has an invalid length. [ 223.194837][ T7329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.203155][ T7336] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1052'. [ 223.211177][ T7329] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.228102][ T7329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.287974][ T7329] device bridge0 entered promiscuous mode [ 223.325928][ T7329] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 224.506405][ T7380] netlink: 'syz.0.1068': attribute type 1 has an invalid length. [ 224.538912][ T7380] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1068'. [ 224.818969][ T7389] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1071'. [ 224.878049][ T7389] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1071'. [ 225.108419][ T7390] netlink: 'syz.1.1070': attribute type 10 has an invalid length. [ 225.159067][ T7390] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.168167][ T7390] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.290429][ T7390] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.298262][ T7390] bridge0: port 2(bridge_slave_1) entered listening state [ 225.307009][ T7390] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.315404][ T7390] bridge0: port 1(bridge_slave_0) entered listening state [ 225.455837][ T7390] device bridge0 entered promiscuous mode [ 225.477797][ T7390] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 226.321623][ T7427] netlink: 'syz.3.1086': attribute type 1 has an invalid length. [ 226.392609][ T7427] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1086'. [ 227.254817][ T7455] netlink: 'syz.3.1094': attribute type 10 has an invalid length. [ 227.333036][ T7455] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.340460][ T7455] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.918569][ T7518] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1120'. [ 229.933849][ T7518] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1120'. [ 230.470824][ T4276] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 231.522858][ T7567] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1139'. [ 231.567221][ T7567] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1139'. [ 232.268567][ T4276] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 232.570425][ T7599] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1152'. [ 233.000402][ T7614] device syzkaller0 entered promiscuous mode [ 235.405154][ T7635] netlink: 'syz.4.1166': attribute type 10 has an invalid length. [ 235.423918][ T7635] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1166'. [ 235.809662][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 235.817703][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 236.193692][ T7670] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1178'. [ 236.673067][ T7687] device ipvlan1 entered promiscuous mode [ 237.568495][ T7722] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1202'. [ 237.911057][ T7741] bond0: (slave bridge0): Error: Slave device does not support XDP [ 238.815054][ T7773] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1219'. [ 239.147036][ T7785] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1226'. [ 239.217782][ T7787] net_ratelimit: 2167 callbacks suppressed [ 239.217801][ T7787] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 239.230569][ T7787] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 239.768854][ T7809] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1238'. [ 240.896317][ T7844] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1248'. [ 240.928708][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 240.936211][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 240.970096][ T7848] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 240.976620][ T7848] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 241.215184][ T7852] device syzkaller0 entered promiscuous mode [ 241.275388][ T7853] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1252'. [ 243.093850][ T7895] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1267'. [ 244.328151][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.352265][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.420714][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.459431][ T7909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.413996][ T4743] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 245.452449][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 245.705001][ T7924] netlink: 'syz.0.1278': attribute type 10 has an invalid length. [ 245.747493][ T7924] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1278'. [ 246.468363][ T7937] device syzkaller0 entered promiscuous mode [ 246.782949][ T4728] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 250.231997][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.239718][ T7968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.247863][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.255447][ T7968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.855933][ T8004] netlink: 'syz.0.1305': attribute type 39 has an invalid length. [ 250.866695][ T8004] device veth0_macvtap left promiscuous mode [ 251.168727][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.176031][ C1] bridge0: topology change detected, propagating [ 251.183613][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.190900][ C1] bridge0: topology change detected, propagating [ 251.510027][ T8010] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1310'. [ 251.637456][ T8012] device syzkaller0 entered promiscuous mode [ 251.791865][ T8010] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 251.818268][ T8010] CPU: 0 PID: 8010 Comm: syz.3.1310 Not tainted 6.1.147-syzkaller #0 [ 251.826489][ T8010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.836589][ T8010] Call Trace: [ 251.839882][ T8010] [ 251.842820][ T8010] dump_stack_lvl+0x168/0x22e [ 251.847511][ T8010] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 251.853691][ T8010] ? show_regs_print_info+0x12/0x12 [ 251.858906][ T8010] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 251.865087][ T8010] sysfs_warn_dup+0x8a/0xa0 [ 251.869637][ T8010] sysfs_do_create_link_sd+0xc0/0x110 [ 251.875024][ T8010] device_add+0x7ed/0xfb0 [ 251.879395][ T8010] wiphy_register+0x1e68/0x2bd0 [ 251.884318][ T8010] ? cfg80211_event_work+0x40/0x40 [ 251.889460][ T8010] ? minstrel_ht_alloc+0x894/0xa20 [ 251.894595][ T8010] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 251.900679][ T8010] ieee80211_register_hw+0x2c29/0x38c0 [ 251.906160][ T8010] ? ieee80211_register_hw+0xeb1/0x38c0 [ 251.911723][ T8010] ? ieee80211_register_hw+0xeb1/0x38c0 [ 251.917288][ T8010] ? ieee80211_tasklet_handler+0x20/0x20 [ 251.922949][ T8010] ? __hrtimer_init+0xa7/0x270 [ 251.927724][ T8010] ? __sanitizer_cov_trace_pc+0x32/0x60 [ 251.933286][ T8010] ? __hrtimer_init+0x186/0x270 [ 251.938174][ T8010] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 251.943964][ T8010] hwsim_new_radio_nl+0xafa/0xce0 [ 251.949072][ T8010] genl_family_rcv_msg_doit+0x22e/0x320 [ 251.954654][ T8010] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 251.960855][ T8010] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 251.966788][ T8010] ? bpf_lsm_capable+0x5/0x10 [ 251.971492][ T8010] ? security_capable+0x85/0xb0 [ 251.976365][ T8010] genl_rcv_msg+0x5f2/0x780 [ 251.980897][ T8010] ? genl_bind+0x350/0x350 [ 251.985326][ T8010] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 251.991702][ T8010] netlink_rcv_skb+0x1de/0x420 [ 251.996491][ T8010] ? genl_bind+0x350/0x350 [ 252.000935][ T8010] ? netlink_ack+0x1100/0x1100 [ 252.005729][ T8010] ? down_read+0x1a8/0x2d0 [ 252.010162][ T8010] genl_rcv+0x24/0x40 [ 252.014159][ T8010] netlink_unicast+0x74d/0x8d0 [ 252.018946][ T8010] netlink_sendmsg+0x89e/0xbc0 [ 252.023732][ T8010] ? netlink_getsockopt+0x540/0x540 [ 252.028948][ T8010] ? aa_sock_msg_perm+0x94/0x150 [ 252.033897][ T8010] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 252.039186][ T8010] ? security_socket_sendmsg+0x7c/0xa0 [ 252.044664][ T8010] ? netlink_getsockopt+0x540/0x540 [ 252.049876][ T8010] ____sys_sendmsg+0x59b/0x970 [ 252.054674][ T8010] ? __sys_sendmsg_sock+0x30/0x30 [ 252.059709][ T8010] ? __import_iovec+0x315/0x500 [ 252.064621][ T8010] ? import_iovec+0x6f/0xa0 [ 252.069151][ T8010] ___sys_sendmsg+0x21c/0x290 [ 252.073848][ T8010] ? __sys_sendmsg+0x270/0x270 [ 252.078645][ T8010] ? lockdep_hardirqs_on+0x94/0x140 [ 252.083890][ T8010] ? __fdget+0x17c/0x200 [ 252.088147][ T8010] __se_sys_sendmsg+0x19e/0x270 [ 252.093009][ T8010] ? perf_trace_preemptirq_template+0x287/0x330 [ 252.099351][ T8010] ? __x64_sys_sendmsg+0x80/0x80 [ 252.104318][ T8010] ? trace_sys_enter+0x22/0x80 [ 252.109096][ T8010] do_syscall_64+0x4c/0xa0 [ 252.113532][ T8010] ? clear_bhb_loop+0x60/0xb0 [ 252.118216][ T8010] ? clear_bhb_loop+0x60/0xb0 [ 252.122924][ T8010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.128835][ T8010] RIP: 0033:0x7f3b0f98eb69 [ 252.133268][ T8010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.152889][ T8010] RSP: 002b:00007f3b1081a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.161320][ T8010] RAX: ffffffffffffffda RBX: 00007f3b0fbb5fa0 RCX: 00007f3b0f98eb69 [ 252.169302][ T8010] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 252.177277][ T8010] RBP: 00007f3b0fa11df1 R08: 0000000000000000 R09: 0000000000000000 [ 252.185251][ T8010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.193242][ T8010] R13: 0000000000000000 R14: 00007f3b0fbb5fa0 R15: 00007fff5be114e8 [ 252.201402][ T8010] [ 252.769056][ T4739] wlan1: Trigger new scan to find an IBSS to join [ 253.939495][ T8027] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1313'. [ 254.902804][ T8060] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1328'. [ 254.957267][ T8060] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 254.976080][ T8060] CPU: 0 PID: 8060 Comm: syz.0.1328 Not tainted 6.1.147-syzkaller #0 [ 254.984259][ T8060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.994335][ T8060] Call Trace: [ 254.997627][ T8060] [ 255.000576][ T8060] dump_stack_lvl+0x168/0x22e [ 255.005276][ T8060] ? show_regs_print_info+0x12/0x12 [ 255.010488][ T8060] ? load_image+0x3b0/0x3b0 [ 255.015016][ T8060] sysfs_warn_dup+0x8a/0xa0 [ 255.019525][ T8060] sysfs_do_create_link_sd+0xc0/0x110 [ 255.024896][ T8060] device_add+0x7ed/0xfb0 [ 255.029231][ T8060] wiphy_register+0x1e68/0x2bd0 [ 255.034091][ T8060] ? cfg80211_event_work+0x40/0x40 [ 255.039198][ T8060] ? minstrel_ht_alloc+0x894/0xa20 [ 255.044330][ T8060] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 255.050420][ T8060] ieee80211_register_hw+0x2c29/0x38c0 [ 255.055979][ T8060] ? ieee80211_register_hw+0xeb1/0x38c0 [ 255.061532][ T8060] ? ieee80211_register_hw+0xeb1/0x38c0 [ 255.067098][ T8060] ? ieee80211_tasklet_handler+0x20/0x20 [ 255.072841][ T8060] ? memset+0x1e/0x40 [ 255.076832][ T8060] ? __hrtimer_init+0x186/0x270 [ 255.081831][ T8060] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 255.087578][ T8060] hwsim_new_radio_nl+0xafa/0xce0 [ 255.092611][ T8060] genl_family_rcv_msg_doit+0x22e/0x320 [ 255.098246][ T8060] ? end_current_label_crit_section+0x170/0x170 [ 255.104576][ T8060] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 255.110555][ T8060] ? bpf_lsm_capable+0x5/0x10 [ 255.115226][ T8060] ? security_capable+0x85/0xb0 [ 255.120074][ T8060] genl_rcv_msg+0x5f2/0x780 [ 255.124581][ T8060] ? genl_bind+0x350/0x350 [ 255.128986][ T8060] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 255.135318][ T8060] netlink_rcv_skb+0x1de/0x420 [ 255.140073][ T8060] ? genl_bind+0x350/0x350 [ 255.144572][ T8060] ? netlink_ack+0x1100/0x1100 [ 255.149337][ T8060] ? down_read+0x1a8/0x2d0 [ 255.153749][ T8060] genl_rcv+0x24/0x40 [ 255.157723][ T8060] netlink_unicast+0x74d/0x8d0 [ 255.162486][ T8060] netlink_sendmsg+0x89e/0xbc0 [ 255.167246][ T8060] ? netlink_getsockopt+0x540/0x540 [ 255.172441][ T8060] ? aa_sock_msg_perm+0x94/0x150 [ 255.177373][ T8060] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 255.182765][ T8060] ? security_socket_sendmsg+0x7c/0xa0 [ 255.188218][ T8060] ? netlink_getsockopt+0x540/0x540 [ 255.193408][ T8060] ____sys_sendmsg+0x59b/0x970 [ 255.198170][ T8060] ? __sys_sendmsg_sock+0x30/0x30 [ 255.203361][ T8060] ? __import_iovec+0x315/0x500 [ 255.208214][ T8060] ? import_iovec+0x6f/0xa0 [ 255.212717][ T8060] ___sys_sendmsg+0x21c/0x290 [ 255.217398][ T8060] ? __sys_sendmsg+0x270/0x270 [ 255.222182][ T8060] ? ktime_get_real_ts64+0x420/0x420 [ 255.227561][ T8060] ? __fdget+0x17c/0x200 [ 255.231800][ T8060] __se_sys_sendmsg+0x19e/0x270 [ 255.236648][ T8060] ? perf_trace_preemptirq_template+0x287/0x330 [ 255.242885][ T8060] ? __x64_sys_sendmsg+0x80/0x80 [ 255.247852][ T8060] ? lockdep_hardirqs_on+0x94/0x140 [ 255.253049][ T8060] do_syscall_64+0x4c/0xa0 [ 255.257456][ T8060] ? clear_bhb_loop+0x60/0xb0 [ 255.262120][ T8060] ? clear_bhb_loop+0x60/0xb0 [ 255.266786][ T8060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.272674][ T8060] RIP: 0033:0x7fe57918eb69 [ 255.277079][ T8060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.296760][ T8060] RSP: 002b:00007fe579f77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.305163][ T8060] RAX: ffffffffffffffda RBX: 00007fe5793b5fa0 RCX: 00007fe57918eb69 [ 255.313122][ T8060] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 255.321083][ T8060] RBP: 00007fe579211df1 R08: 0000000000000000 R09: 0000000000000000 [ 255.329046][ T8060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.337004][ T8060] R13: 0000000000000000 R14: 00007fe5793b5fa0 R15: 00007ffca89ba568 [ 255.344976][ T8060] [ 255.406613][ T8068] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1329'. [ 255.651086][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.657541][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.684904][ T8075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.703561][ T8075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.745516][ T8075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.759738][ T8075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.810188][ T1185] wlan1: Trigger new scan to find an IBSS to join [ 256.305837][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.313343][ C1] bridge0: topology change detected, propagating [ 256.320967][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.328361][ C1] bridge0: topology change detected, propagating [ 258.851966][ T4735] wlan1: Trigger new scan to find an IBSS to join [ 258.973463][ T8168] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1375'. [ 259.047879][ T8168] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 259.066813][ T8168] CPU: 1 PID: 8168 Comm: syz.1.1375 Not tainted 6.1.147-syzkaller #0 [ 259.074986][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.085057][ T8168] Call Trace: [ 259.088347][ T8168] [ 259.091279][ T8168] dump_stack_lvl+0x168/0x22e [ 259.095989][ T8168] ? show_regs_print_info+0x12/0x12 [ 259.101184][ T8168] ? load_image+0x3b0/0x3b0 [ 259.105694][ T8168] sysfs_warn_dup+0x8a/0xa0 [ 259.110197][ T8168] sysfs_do_create_link_sd+0xc0/0x110 [ 259.115565][ T8168] device_add+0x7ed/0xfb0 [ 259.119896][ T8168] wiphy_register+0x1e68/0x2bd0 [ 259.124761][ T8168] ? cfg80211_event_work+0x40/0x40 [ 259.129864][ T8168] ? minstrel_ht_alloc+0x894/0xa20 [ 259.134970][ T8168] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 259.141038][ T8168] ieee80211_register_hw+0x2c29/0x38c0 [ 259.146502][ T8168] ? ieee80211_register_hw+0xeb1/0x38c0 [ 259.152034][ T8168] ? ieee80211_register_hw+0xeb1/0x38c0 [ 259.157574][ T8168] ? ieee80211_tasklet_handler+0x20/0x20 [ 259.163217][ T8168] ? memset+0x1e/0x40 [ 259.167198][ T8168] ? __hrtimer_init+0x186/0x270 [ 259.172042][ T8168] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 259.177776][ T8168] hwsim_new_radio_nl+0xafa/0xce0 [ 259.182808][ T8168] genl_family_rcv_msg_doit+0x22e/0x320 [ 259.188352][ T8168] ? end_current_label_crit_section+0x170/0x170 [ 259.194596][ T8168] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 259.200490][ T8168] ? bpf_lsm_capable+0x5/0x10 [ 259.205160][ T8168] ? security_capable+0x85/0xb0 [ 259.210009][ T8168] genl_rcv_msg+0x5f2/0x780 [ 259.214516][ T8168] ? genl_bind+0x350/0x350 [ 259.218933][ T8168] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 259.225273][ T8168] netlink_rcv_skb+0x1de/0x420 [ 259.230035][ T8168] ? genl_bind+0x350/0x350 [ 259.234447][ T8168] ? netlink_ack+0x1100/0x1100 [ 259.239212][ T8168] ? down_read+0x1a8/0x2d0 [ 259.243625][ T8168] genl_rcv+0x24/0x40 [ 259.247600][ T8168] netlink_unicast+0x74d/0x8d0 [ 259.252368][ T8168] netlink_sendmsg+0x89e/0xbc0 [ 259.257302][ T8168] ? lockdep_hardirqs_on+0x94/0x140 [ 259.262586][ T8168] ? netlink_getsockopt+0x540/0x540 [ 259.267779][ T8168] ? bpf_lsm_socket_accept+0x10/0x10 [ 259.273054][ T8168] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 259.278323][ T8168] ? security_socket_sendmsg+0x7c/0xa0 [ 259.283779][ T8168] ? netlink_getsockopt+0x540/0x540 [ 259.289003][ T8168] ____sys_sendmsg+0x59b/0x970 [ 259.293770][ T8168] ? __sys_sendmsg_sock+0x30/0x30 [ 259.298782][ T8168] ? __import_iovec+0x315/0x500 [ 259.303636][ T8168] ? import_iovec+0x6f/0xa0 [ 259.308138][ T8168] ___sys_sendmsg+0x21c/0x290 [ 259.312809][ T8168] ? __sys_sendmsg+0x270/0x270 [ 259.317598][ T8168] ? __fdget+0x17c/0x200 [ 259.321840][ T8168] __se_sys_sendmsg+0x19e/0x270 [ 259.326693][ T8168] ? perf_trace_preemptirq_template+0x287/0x330 [ 259.332928][ T8168] ? __x64_sys_sendmsg+0x80/0x80 [ 259.337867][ T8168] ? lockdep_hardirqs_on+0x94/0x140 [ 259.343089][ T8168] do_syscall_64+0x4c/0xa0 [ 259.347842][ T8168] ? clear_bhb_loop+0x60/0xb0 [ 259.352529][ T8168] ? clear_bhb_loop+0x60/0xb0 [ 259.357200][ T8168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.363107][ T8168] RIP: 0033:0x7fd23a58eb69 [ 259.367511][ T8168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.387386][ T8168] RSP: 002b:00007fd23b49f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.395798][ T8168] RAX: ffffffffffffffda RBX: 00007fd23a7b5fa0 RCX: 00007fd23a58eb69 [ 259.403772][ T8168] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 259.411733][ T8168] RBP: 00007fd23a611df1 R08: 0000000000000000 R09: 0000000000000000 [ 259.419696][ T8168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.427654][ T8168] R13: 0000000000000000 R14: 00007fd23a7b5fa0 R15: 00007ffcac440168 [ 259.435631][ T8168] [ 260.141028][ T1185] wlan1: Creating new IBSS network, BSSID 22:32:9e:51:74:cd [ 261.767166][ T8231] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1397'. [ 261.836860][ T8231] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 261.847566][ T8231] CPU: 1 PID: 8231 Comm: syz.4.1397 Not tainted 6.1.147-syzkaller #0 [ 261.855695][ T8231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 261.865786][ T8231] Call Trace: [ 261.869092][ T8231] [ 261.872042][ T8231] dump_stack_lvl+0x168/0x22e [ 261.876760][ T8231] ? show_regs_print_info+0x12/0x12 [ 261.881963][ T8231] ? load_image+0x3b0/0x3b0 [ 261.882002][ T8231] sysfs_warn_dup+0x8a/0xa0 [ 261.882024][ T8231] sysfs_do_create_link_sd+0xc0/0x110 [ 261.882049][ T8231] device_add+0x7ed/0xfb0 [ 261.901034][ T8231] wiphy_register+0x1e68/0x2bd0 [ 261.905933][ T8231] ? cfg80211_event_work+0x40/0x40 [ 261.911064][ T8231] ? minstrel_ht_alloc+0x894/0xa20 [ 261.916210][ T8231] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 261.922571][ T8231] ieee80211_register_hw+0x2c29/0x38c0 [ 261.928064][ T8231] ? ieee80211_register_hw+0xeb1/0x38c0 [ 261.933633][ T8231] ? ieee80211_register_hw+0xeb1/0x38c0 [ 261.939212][ T8231] ? ieee80211_tasklet_handler+0x20/0x20 [ 261.944884][ T8231] ? memset+0x1e/0x40 [ 261.948895][ T8231] ? __hrtimer_init+0x186/0x270 [ 261.953774][ T8231] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 261.959541][ T8231] hwsim_new_radio_nl+0xafa/0xce0 [ 261.964609][ T8231] genl_family_rcv_msg_doit+0x22e/0x320 [ 261.970266][ T8231] ? end_current_label_crit_section+0x170/0x170 [ 261.976547][ T8231] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 261.982480][ T8231] ? bpf_lsm_capable+0x5/0x10 [ 261.987185][ T8231] ? security_capable+0x85/0xb0 [ 261.992071][ T8231] genl_rcv_msg+0x5f2/0x780 [ 261.996620][ T8231] ? genl_bind+0x350/0x350 [ 262.001204][ T8231] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 262.007592][ T8231] netlink_rcv_skb+0x1de/0x420 [ 262.012393][ T8231] ? genl_bind+0x350/0x350 [ 262.016845][ T8231] ? netlink_ack+0x1100/0x1100 [ 262.021655][ T8231] ? down_read+0x1a8/0x2d0 [ 262.026280][ T8231] genl_rcv+0x24/0x40 [ 262.030296][ T8231] netlink_unicast+0x74d/0x8d0 [ 262.035097][ T8231] netlink_sendmsg+0x89e/0xbc0 [ 262.039899][ T8231] ? netlink_getsockopt+0x540/0x540 [ 262.045126][ T8231] ? aa_sock_msg_perm+0x94/0x150 [ 262.050098][ T8231] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 262.055406][ T8231] ? security_socket_sendmsg+0x7c/0xa0 [ 262.060894][ T8231] ? netlink_getsockopt+0x540/0x540 [ 262.066119][ T8231] ____sys_sendmsg+0x59b/0x970 [ 262.071006][ T8231] ? __sys_sendmsg_sock+0x30/0x30 [ 262.076055][ T8231] ? __import_iovec+0x315/0x500 [ 262.080955][ T8231] ? import_iovec+0x6f/0xa0 [ 262.085486][ T8231] ___sys_sendmsg+0x21c/0x290 [ 262.090195][ T8231] ? __sys_sendmsg+0x270/0x270 [ 262.095013][ T8231] ? ktime_get_real_ts64+0x420/0x420 [ 262.100335][ T8231] ? __fdget+0x17c/0x200 [ 262.104583][ T8231] __se_sys_sendmsg+0x19e/0x270 [ 262.109430][ T8231] ? perf_trace_preemptirq_template+0x287/0x330 [ 262.115782][ T8231] ? __x64_sys_sendmsg+0x80/0x80 [ 262.120736][ T8231] ? lockdep_hardirqs_on+0x94/0x140 [ 262.125933][ T8231] do_syscall_64+0x4c/0xa0 [ 262.130350][ T8231] ? clear_bhb_loop+0x60/0xb0 [ 262.135016][ T8231] ? clear_bhb_loop+0x60/0xb0 [ 262.139684][ T8231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.145585][ T8231] RIP: 0033:0x7f0aa178eb69 [ 262.149990][ T8231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.169680][ T8231] RSP: 002b:00007f0aa25bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.178093][ T8231] RAX: ffffffffffffffda RBX: 00007f0aa19b5fa0 RCX: 00007f0aa178eb69 [ 262.186053][ T8231] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 262.194015][ T8231] RBP: 00007f0aa1811df1 R08: 0000000000000000 R09: 0000000000000000 [ 262.201976][ T8231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.209937][ T8231] R13: 0000000000000000 R14: 00007f0aa19b5fa0 R15: 00007ffe12b42d88 [ 262.217915][ T8231] [ 262.253431][ T8236] netlink: 'syz.1.1408': attribute type 10 has an invalid length. [ 262.277095][ T8236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1408'. [ 262.291025][ T8236] bridge0: port 3(ipvlan1) entered blocking state [ 262.297837][ T8236] bridge0: port 3(ipvlan1) entered disabled state [ 262.321330][ T8236] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 263.468845][ T8277] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1418'. [ 263.689590][ T8273] device syzkaller0 entered promiscuous mode [ 263.725743][ T8277] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 263.758996][ T8277] CPU: 0 PID: 8277 Comm: syz.4.1418 Not tainted 6.1.147-syzkaller #0 [ 263.767126][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.777204][ T8277] Call Trace: [ 263.780509][ T8277] [ 263.783472][ T8277] dump_stack_lvl+0x168/0x22e [ 263.788279][ T8277] ? show_regs_print_info+0x12/0x12 [ 263.793511][ T8277] ? load_image+0x3b0/0x3b0 [ 263.798115][ T8277] sysfs_warn_dup+0x8a/0xa0 [ 263.802664][ T8277] sysfs_do_create_link_sd+0xc0/0x110 [ 263.808074][ T8277] device_add+0x7ed/0xfb0 [ 263.812453][ T8277] wiphy_register+0x1e68/0x2bd0 [ 263.817353][ T8277] ? cfg80211_event_work+0x40/0x40 [ 263.822492][ T8277] ? minstrel_ht_alloc+0x894/0xa20 [ 263.827637][ T8277] ? strcmp+0x24/0xb0 [ 263.831659][ T8277] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 263.837826][ T8277] ieee80211_register_hw+0x2c29/0x38c0 [ 263.843324][ T8277] ? ieee80211_register_hw+0xeb1/0x38c0 [ 263.848907][ T8277] ? ieee80211_register_hw+0xeb1/0x38c0 [ 263.854497][ T8277] ? ieee80211_tasklet_handler+0x20/0x20 [ 263.860176][ T8277] ? memset+0x1e/0x40 [ 263.864196][ T8277] ? __hrtimer_init+0x186/0x270 [ 263.869179][ T8277] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 263.874946][ T8277] hwsim_new_radio_nl+0xafa/0xce0 [ 263.879989][ T8277] genl_family_rcv_msg_doit+0x22e/0x320 [ 263.885567][ T8277] ? end_current_label_crit_section+0x170/0x170 [ 263.891917][ T8277] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 263.897820][ T8277] ? bpf_lsm_capable+0x5/0x10 [ 263.902500][ T8277] ? security_capable+0x85/0xb0 [ 263.907363][ T8277] genl_rcv_msg+0x5f2/0x780 [ 263.911872][ T8277] ? genl_bind+0x350/0x350 [ 263.916291][ T8277] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 263.922637][ T8277] netlink_rcv_skb+0x1de/0x420 [ 263.927395][ T8277] ? genl_bind+0x350/0x350 [ 263.931988][ T8277] ? netlink_ack+0x1100/0x1100 [ 263.936771][ T8277] ? down_read+0x1a8/0x2d0 [ 263.941193][ T8277] genl_rcv+0x24/0x40 [ 263.945172][ T8277] netlink_unicast+0x74d/0x8d0 [ 263.949956][ T8277] netlink_sendmsg+0x89e/0xbc0 [ 263.954750][ T8277] ? netlink_getsockopt+0x540/0x540 [ 263.959965][ T8277] ? aa_sock_msg_perm+0x94/0x150 [ 263.964924][ T8277] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 263.970232][ T8277] ? security_socket_sendmsg+0x7c/0xa0 [ 263.975706][ T8277] ? netlink_getsockopt+0x540/0x540 [ 263.980931][ T8277] ____sys_sendmsg+0x59b/0x970 [ 263.985724][ T8277] ? __sys_sendmsg_sock+0x30/0x30 [ 263.990757][ T8277] ? __import_iovec+0x315/0x500 [ 263.995730][ T8277] ? import_iovec+0x6f/0xa0 [ 264.000247][ T8277] ___sys_sendmsg+0x21c/0x290 [ 264.004931][ T8277] ? __sys_sendmsg+0x270/0x270 [ 264.009747][ T8277] ? __fdget+0x17c/0x200 [ 264.014030][ T8277] __se_sys_sendmsg+0x19e/0x270 [ 264.018904][ T8277] ? __x64_sys_sendmsg+0x80/0x80 [ 264.023862][ T8277] ? syscall_enter_from_user_mode+0x2a/0x80 [ 264.029757][ T8277] do_syscall_64+0x4c/0xa0 [ 264.034188][ T8277] ? clear_bhb_loop+0x60/0xb0 [ 264.038986][ T8277] ? clear_bhb_loop+0x60/0xb0 [ 264.043662][ T8277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.049579][ T8277] RIP: 0033:0x7f0aa178eb69 [ 264.054017][ T8277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.073636][ T8277] RSP: 002b:00007f0aa25bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.082047][ T8277] RAX: ffffffffffffffda RBX: 00007f0aa19b5fa0 RCX: 00007f0aa178eb69 [ 264.090132][ T8277] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 264.098105][ T8277] RBP: 00007f0aa1811df1 R08: 0000000000000000 R09: 0000000000000000 [ 264.106873][ T8277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.114862][ T8277] R13: 0000000000000000 R14: 00007f0aa19b5fa0 R15: 00007ffe12b42d88 [ 264.122846][ T8277] [ 265.882513][ T8289] netlink: 'syz.3.1421': attribute type 10 has an invalid length. [ 265.890570][ T8289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1421'. [ 265.903083][ T8298] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 267.090557][ T8336] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 267.133698][ T8333] netlink: 'syz.2.1438': attribute type 10 has an invalid length. [ 267.187866][ T8333] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1438'. [ 268.029987][ T8348] device syzkaller0 entered promiscuous mode [ 270.980793][ T8421] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 271.746773][ T8433] device syzkaller0 entered promiscuous mode [ 272.346712][ T8468] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1494'. [ 273.774792][ T8464] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 273.792230][ T8468] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 273.802835][ T8468] CPU: 0 PID: 8468 Comm: syz.4.1494 Not tainted 6.1.147-syzkaller #0 [ 273.810946][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.821019][ T8468] Call Trace: [ 273.824310][ T8468] [ 273.827246][ T8468] dump_stack_lvl+0x168/0x22e [ 273.831957][ T8468] ? show_regs_print_info+0x12/0x12 [ 273.837199][ T8468] ? load_image+0x3b0/0x3b0 [ 273.841744][ T8468] sysfs_warn_dup+0x8a/0xa0 [ 273.846273][ T8468] sysfs_do_create_link_sd+0xc0/0x110 [ 273.851676][ T8468] device_add+0x7ed/0xfb0 [ 273.856043][ T8468] wiphy_register+0x1e68/0x2bd0 [ 273.860933][ T8468] ? cfg80211_event_work+0x40/0x40 [ 273.866045][ T8468] ? minstrel_ht_alloc+0x894/0xa20 [ 273.871244][ T8468] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 273.877307][ T8468] ieee80211_register_hw+0x2c29/0x38c0 [ 273.882767][ T8468] ? ieee80211_register_hw+0xeb1/0x38c0 [ 273.888313][ T8468] ? ieee80211_register_hw+0xeb1/0x38c0 [ 273.893858][ T8468] ? ieee80211_tasklet_handler+0x20/0x20 [ 273.899524][ T8468] ? memset+0x1e/0x40 [ 273.903513][ T8468] ? __hrtimer_init+0x186/0x270 [ 273.908368][ T8468] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 273.914109][ T8468] hwsim_new_radio_nl+0xafa/0xce0 [ 273.919239][ T8468] genl_family_rcv_msg_doit+0x22e/0x320 [ 273.924969][ T8468] ? end_current_label_crit_section+0x170/0x170 [ 273.931234][ T8468] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 273.937141][ T8468] ? bpf_lsm_capable+0x5/0x10 [ 273.941861][ T8468] ? security_capable+0x85/0xb0 [ 273.946711][ T8468] genl_rcv_msg+0x5f2/0x780 [ 273.951220][ T8468] ? genl_bind+0x350/0x350 [ 273.955660][ T8468] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 273.962011][ T8468] netlink_rcv_skb+0x1de/0x420 [ 273.966784][ T8468] ? genl_bind+0x350/0x350 [ 273.971221][ T8468] ? netlink_ack+0x1100/0x1100 [ 273.976002][ T8468] ? down_read+0x1a8/0x2d0 [ 273.980418][ T8468] genl_rcv+0x24/0x40 [ 273.984407][ T8468] netlink_unicast+0x74d/0x8d0 [ 273.989185][ T8468] netlink_sendmsg+0x89e/0xbc0 [ 273.993949][ T8468] ? netlink_getsockopt+0x540/0x540 [ 273.999145][ T8468] ? aa_sock_msg_perm+0x94/0x150 [ 274.004085][ T8468] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 274.009359][ T8468] ? security_socket_sendmsg+0x7c/0xa0 [ 274.014808][ T8468] ? netlink_getsockopt+0x540/0x540 [ 274.019997][ T8468] ____sys_sendmsg+0x59b/0x970 [ 274.024761][ T8468] ? __sys_sendmsg_sock+0x30/0x30 [ 274.029774][ T8468] ? __import_iovec+0x315/0x500 [ 274.034626][ T8468] ? import_iovec+0x6f/0xa0 [ 274.039127][ T8468] ___sys_sendmsg+0x21c/0x290 [ 274.043805][ T8468] ? __sys_sendmsg+0x270/0x270 [ 274.048577][ T8468] ? ktime_get_real_ts64+0x420/0x420 [ 274.053958][ T8468] ? __fdget+0x17c/0x200 [ 274.058193][ T8468] __se_sys_sendmsg+0x19e/0x270 [ 274.063041][ T8468] ? ct_nmi_exit+0x145/0x1c0 [ 274.067638][ T8468] ? __x64_sys_sendmsg+0x80/0x80 [ 274.072631][ T8468] ? lockdep_hardirqs_on+0x94/0x140 [ 274.077825][ T8468] do_syscall_64+0x4c/0xa0 [ 274.082231][ T8468] ? clear_bhb_loop+0x60/0xb0 [ 274.086901][ T8468] ? clear_bhb_loop+0x60/0xb0 [ 274.091570][ T8468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.097456][ T8468] RIP: 0033:0x7f0aa178eb69 [ 274.101908][ T8468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.121514][ T8468] RSP: 002b:00007f0aa25bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.129927][ T8468] RAX: ffffffffffffffda RBX: 00007f0aa19b5fa0 RCX: 00007f0aa178eb69 [ 274.137894][ T8468] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 274.145860][ T8468] RBP: 00007f0aa1811df1 R08: 0000000000000000 R09: 0000000000000000 [ 274.153825][ T8468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.161782][ T8468] R13: 0000000000000000 R14: 00007f0aa19b5fa0 R15: 00007ffe12b42d88 [ 274.169763][ T8468] [ 274.468537][ T8488] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1513'. [ 275.188457][ T8488] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 275.197648][ T8488] CPU: 1 PID: 8488 Comm: syz.1.1513 Not tainted 6.1.147-syzkaller #0 [ 275.205743][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.215795][ T8488] Call Trace: [ 275.219066][ T8488] [ 275.221984][ T8488] dump_stack_lvl+0x168/0x22e [ 275.226651][ T8488] ? show_regs_print_info+0x12/0x12 [ 275.231846][ T8488] ? load_image+0x3b0/0x3b0 [ 275.236344][ T8488] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.242410][ T8488] sysfs_warn_dup+0x8a/0xa0 [ 275.246951][ T8488] sysfs_do_create_link_sd+0xc0/0x110 [ 275.252332][ T8488] device_add+0x7ed/0xfb0 [ 275.256702][ T8488] wiphy_register+0x1e68/0x2bd0 [ 275.261594][ T8488] ? cfg80211_event_work+0x40/0x40 [ 275.266732][ T8488] ? minstrel_ht_alloc+0x894/0xa20 [ 275.271837][ T8488] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 275.277911][ T8488] ieee80211_register_hw+0x2c29/0x38c0 [ 275.283379][ T8488] ? ieee80211_register_hw+0xeb1/0x38c0 [ 275.288933][ T8488] ? ieee80211_register_hw+0xeb1/0x38c0 [ 275.294472][ T8488] ? ieee80211_tasklet_handler+0x20/0x20 [ 275.300117][ T8488] ? memset+0x1e/0x40 [ 275.304095][ T8488] ? __hrtimer_init+0x186/0x270 [ 275.308961][ T8488] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 275.314710][ T8488] hwsim_new_radio_nl+0xafa/0xce0 [ 275.319747][ T8488] genl_family_rcv_msg_doit+0x22e/0x320 [ 275.325291][ T8488] ? end_current_label_crit_section+0x170/0x170 [ 275.331536][ T8488] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 275.337447][ T8488] ? bpf_lsm_capable+0x5/0x10 [ 275.342119][ T8488] ? security_capable+0x85/0xb0 [ 275.346995][ T8488] genl_rcv_msg+0x5f2/0x780 [ 275.351505][ T8488] ? genl_bind+0x350/0x350 [ 275.355916][ T8488] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 275.362248][ T8488] netlink_rcv_skb+0x1de/0x420 [ 275.367009][ T8488] ? genl_bind+0x350/0x350 [ 275.371419][ T8488] ? netlink_ack+0x1100/0x1100 [ 275.376527][ T8488] ? down_read+0x1a8/0x2d0 [ 275.380957][ T8488] genl_rcv+0x24/0x40 [ 275.384950][ T8488] netlink_unicast+0x74d/0x8d0 [ 275.389708][ T8488] netlink_sendmsg+0x89e/0xbc0 [ 275.394464][ T8488] ? netlink_getsockopt+0x540/0x540 [ 275.399654][ T8488] ? aa_sock_msg_perm+0x94/0x150 [ 275.404586][ T8488] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 275.409877][ T8488] ? security_socket_sendmsg+0x7c/0xa0 [ 275.415346][ T8488] ? netlink_getsockopt+0x540/0x540 [ 275.420535][ T8488] ____sys_sendmsg+0x59b/0x970 [ 275.425294][ T8488] ? __sys_sendmsg_sock+0x30/0x30 [ 275.430332][ T8488] ? __import_iovec+0x315/0x500 [ 275.435182][ T8488] ? import_iovec+0x6f/0xa0 [ 275.439677][ T8488] ___sys_sendmsg+0x21c/0x290 [ 275.444350][ T8488] ? __sys_sendmsg+0x270/0x270 [ 275.449121][ T8488] ? ktime_get_real_ts64+0x420/0x420 [ 275.454420][ T8488] ? __fdget+0x17c/0x200 [ 275.458671][ T8488] __se_sys_sendmsg+0x19e/0x270 [ 275.463513][ T8488] ? perf_trace_preemptirq_template+0x287/0x330 [ 275.469747][ T8488] ? __x64_sys_sendmsg+0x80/0x80 [ 275.474686][ T8488] ? lockdep_hardirqs_on+0x94/0x140 [ 275.479875][ T8488] do_syscall_64+0x4c/0xa0 [ 275.484277][ T8488] ? clear_bhb_loop+0x60/0xb0 [ 275.488939][ T8488] ? clear_bhb_loop+0x60/0xb0 [ 275.493603][ T8488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.499524][ T8488] RIP: 0033:0x7fd23a58eb69 [ 275.503958][ T8488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.523645][ T8488] RSP: 002b:00007fd23b49f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.532072][ T8488] RAX: ffffffffffffffda RBX: 00007fd23a7b5fa0 RCX: 00007fd23a58eb69 [ 275.540301][ T8488] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 275.548266][ T8488] RBP: 00007fd23a611df1 R08: 0000000000000000 R09: 0000000000000000 [ 275.556250][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.564221][ T8488] R13: 0000000000000000 R14: 00007fd23a7b5fa0 R15: 00007ffcac440168 [ 275.572197][ T8488] [ 275.588328][ T8496] netlink: 'syz.3.1505': attribute type 39 has an invalid length. [ 276.049373][ T8522] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1515'. [ 276.097674][ T8524] bond0: (slave bridge0): Error: Slave device does not support XDP [ 276.131287][ T8524] netlink: 'syz.0.1518': attribute type 10 has an invalid length. [ 276.397828][ T8524] bond0: (slave bond_slave_0): Releasing backup interface [ 276.446730][ T8524] device bond_slave_0 left promiscuous mode [ 276.485877][ T4743] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 276.946405][ T8539] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1527'. [ 277.043535][ T8539] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 277.810095][ T4735] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 277.981835][ T8566] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 278.013409][ T8566] netlink: 'syz.2.1536': attribute type 10 has an invalid length. [ 278.026588][ T8566] bond0: (slave bond_slave_0): Releasing backup interface [ 278.037293][ T8566] device bond_slave_0 left promiscuous mode [ 278.130707][ T8570] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1549'. [ 278.428996][ T8579] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1540'. [ 278.465177][ T8570] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 278.508828][ T8570] CPU: 1 PID: 8570 Comm: syz.3.1549 Not tainted 6.1.147-syzkaller #0 [ 278.516954][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.527106][ T8570] Call Trace: [ 278.530424][ T8570] [ 278.533463][ T8570] dump_stack_lvl+0x168/0x22e [ 278.538173][ T8570] ? show_regs_print_info+0x12/0x12 [ 278.543819][ T8570] ? load_image+0x3b0/0x3b0 [ 278.543861][ T8570] sysfs_warn_dup+0x8a/0xa0 [ 278.552900][ T8570] sysfs_do_create_link_sd+0xc0/0x110 [ 278.558309][ T8570] device_add+0x7ed/0xfb0 [ 278.562689][ T8570] wiphy_register+0x1e68/0x2bd0 [ 278.567590][ T8570] ? cfg80211_event_work+0x40/0x40 [ 278.572747][ T8570] ? minstrel_ht_alloc+0x894/0xa20 [ 278.577865][ T8570] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 278.583936][ T8570] ieee80211_register_hw+0x2c29/0x38c0 [ 278.589399][ T8570] ? ieee80211_register_hw+0xeb1/0x38c0 [ 278.594972][ T8570] ? ieee80211_register_hw+0xeb1/0x38c0 [ 278.600543][ T8570] ? ieee80211_tasklet_handler+0x20/0x20 [ 278.606211][ T8570] ? memset+0x1e/0x40 [ 278.610205][ T8570] ? __hrtimer_init+0x186/0x270 [ 278.615054][ T8570] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 278.620793][ T8570] hwsim_new_radio_nl+0xafa/0xce0 [ 278.625916][ T8570] genl_family_rcv_msg_doit+0x22e/0x320 [ 278.631466][ T8570] ? end_current_label_crit_section+0x170/0x170 [ 278.637718][ T8570] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 278.643623][ T8570] ? bpf_lsm_capable+0x5/0x10 [ 278.648292][ T8570] ? security_capable+0x85/0xb0 [ 278.653137][ T8570] genl_rcv_msg+0x5f2/0x780 [ 278.657643][ T8570] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 278.663451][ T8570] ? genl_bind+0x350/0x350 [ 278.667863][ T8570] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 278.674286][ T8570] netlink_rcv_skb+0x1de/0x420 [ 278.679046][ T8570] ? genl_bind+0x350/0x350 [ 278.683466][ T8570] ? netlink_ack+0x1100/0x1100 [ 278.688231][ T8570] ? down_read+0x1a8/0x2d0 [ 278.692735][ T8570] genl_rcv+0x24/0x40 [ 278.696743][ T8570] netlink_unicast+0x74d/0x8d0 [ 278.701537][ T8570] netlink_sendmsg+0x89e/0xbc0 [ 278.706312][ T8570] ? netlink_getsockopt+0x540/0x540 [ 278.711508][ T8570] ? aa_sock_msg_perm+0x94/0x150 [ 278.716565][ T8570] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 278.721859][ T8570] ? security_socket_sendmsg+0x7c/0xa0 [ 278.727354][ T8570] ? netlink_getsockopt+0x540/0x540 [ 278.732742][ T8570] ____sys_sendmsg+0x59b/0x970 [ 278.737505][ T8570] ? rcu_is_watching+0x11/0xa0 [ 278.742276][ T8570] ? __sys_sendmsg_sock+0x30/0x30 [ 278.747304][ T8570] ? ___sys_sendmsg+0x1f8/0x290 [ 278.752149][ T8570] ___sys_sendmsg+0x21c/0x290 [ 278.756841][ T8570] ? __sys_sendmsg+0x270/0x270 [ 278.761628][ T8570] ? __fdget+0x17c/0x200 [ 278.765865][ T8570] __se_sys_sendmsg+0x19e/0x270 [ 278.770712][ T8570] ? __x64_sys_sendmsg+0x80/0x80 [ 278.775658][ T8570] ? syscall_enter_from_user_mode+0x2a/0x80 [ 278.781559][ T8570] do_syscall_64+0x4c/0xa0 [ 278.785968][ T8570] ? clear_bhb_loop+0x60/0xb0 [ 278.790636][ T8570] ? clear_bhb_loop+0x60/0xb0 [ 278.795300][ T8570] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.801210][ T8570] RIP: 0033:0x7f3b0f98eb69 [ 278.805630][ T8570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.825251][ T8570] RSP: 002b:00007f3b1081a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.833667][ T8570] RAX: ffffffffffffffda RBX: 00007f3b0fbb5fa0 RCX: 00007f3b0f98eb69 [ 278.841632][ T8570] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 278.849593][ T8570] RBP: 00007f3b0fa11df1 R08: 0000000000000000 R09: 0000000000000000 [ 278.857551][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.865521][ T8570] R13: 0000000000000000 R14: 00007f3b0fbb5fa0 R15: 00007fff5be114e8 [ 278.873501][ T8570] [ 279.747383][ T8611] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 279.783398][ T8611] netlink: 'syz.4.1554': attribute type 10 has an invalid length. [ 279.813781][ T8611] bond0: (slave bond_slave_0): Releasing backup interface [ 279.836680][ T8611] device bond_slave_0 left promiscuous mode [ 279.862197][ T8617] netlink: 'syz.1.1558': attribute type 39 has an invalid length. [ 280.119629][ T8623] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1560'. [ 280.131035][ T8629] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1559'. [ 280.188181][ T8623] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 280.217988][ T8623] CPU: 1 PID: 8623 Comm: syz.2.1560 Not tainted 6.1.147-syzkaller #0 [ 280.226131][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.236191][ T8623] Call Trace: [ 280.239483][ T8623] [ 280.242407][ T8623] dump_stack_lvl+0x168/0x22e [ 280.247124][ T8623] ? show_regs_print_info+0x12/0x12 [ 280.252319][ T8623] ? load_image+0x3b0/0x3b0 [ 280.256890][ T8623] sysfs_warn_dup+0x8a/0xa0 [ 280.261395][ T8623] sysfs_do_create_link_sd+0xc0/0x110 [ 280.266768][ T8623] device_add+0x7ed/0xfb0 [ 280.271203][ T8623] wiphy_register+0x1e68/0x2bd0 [ 280.276192][ T8623] ? cfg80211_event_work+0x40/0x40 [ 280.281323][ T8623] ? minstrel_ht_alloc+0x894/0xa20 [ 280.286472][ T8623] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 280.292575][ T8623] ieee80211_register_hw+0x2c29/0x38c0 [ 280.298045][ T8623] ? ieee80211_register_hw+0xeb1/0x38c0 [ 280.303593][ T8623] ? ieee80211_register_hw+0xeb1/0x38c0 [ 280.309143][ T8623] ? ieee80211_tasklet_handler+0x20/0x20 [ 280.314788][ T8623] ? memset+0x1e/0x40 [ 280.318779][ T8623] ? __hrtimer_init+0x186/0x270 [ 280.323636][ T8623] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 280.329552][ T8623] hwsim_new_radio_nl+0xafa/0xce0 [ 280.334596][ T8623] genl_family_rcv_msg_doit+0x22e/0x320 [ 280.340146][ T8623] ? rcu_is_watching+0x11/0xa0 [ 280.344912][ T8623] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 280.350799][ T8623] ? lockdep_hardirqs_on+0x94/0x140 [ 280.356008][ T8623] ? genl_rcv_msg+0x5ca/0x780 [ 280.360691][ T8623] genl_rcv_msg+0x5f2/0x780 [ 280.365292][ T8623] ? genl_bind+0x350/0x350 [ 280.369703][ T8623] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 280.376039][ T8623] ? lock_acquire+0x20f/0x490 [ 280.380721][ T8623] netlink_rcv_skb+0x1de/0x420 [ 280.385481][ T8623] ? genl_bind+0x350/0x350 [ 280.389924][ T8623] ? netlink_ack+0x1100/0x1100 [ 280.394697][ T8623] ? down_read+0x1a8/0x2d0 [ 280.399114][ T8623] genl_rcv+0x24/0x40 [ 280.403093][ T8623] netlink_unicast+0x74d/0x8d0 [ 280.407869][ T8623] netlink_sendmsg+0x89e/0xbc0 [ 280.412647][ T8623] ? netlink_getsockopt+0x540/0x540 [ 280.417853][ T8623] ? aa_sock_msg_perm+0x94/0x150 [ 280.422798][ T8623] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 280.428077][ T8623] ? security_socket_sendmsg+0x7c/0xa0 [ 280.433628][ T8623] ? netlink_getsockopt+0x540/0x540 [ 280.438829][ T8623] ____sys_sendmsg+0x59b/0x970 [ 280.443603][ T8623] ? __sys_sendmsg_sock+0x30/0x30 [ 280.448632][ T8623] ? __import_iovec+0x315/0x500 [ 280.453503][ T8623] ? import_iovec+0x6f/0xa0 [ 280.458100][ T8623] ___sys_sendmsg+0x21c/0x290 [ 280.462785][ T8623] ? __sys_sendmsg+0x270/0x270 [ 280.467619][ T8623] ? __fdget+0x17c/0x200 [ 280.471874][ T8623] __se_sys_sendmsg+0x19e/0x270 [ 280.476731][ T8623] ? __x64_sys_sendmsg+0x80/0x80 [ 280.481770][ T8623] ? syscall_enter_from_user_mode+0x2a/0x80 [ 280.487666][ T8623] do_syscall_64+0x4c/0xa0 [ 280.492075][ T8623] ? clear_bhb_loop+0x60/0xb0 [ 280.496751][ T8623] ? clear_bhb_loop+0x60/0xb0 [ 280.501429][ T8623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.507319][ T8623] RIP: 0033:0x7f8b4378eb69 [ 280.511730][ T8623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.531333][ T8623] RSP: 002b:00007f8b4454c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.539752][ T8623] RAX: ffffffffffffffda RBX: 00007f8b439b5fa0 RCX: 00007f8b4378eb69 [ 280.547719][ T8623] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 280.555684][ T8623] RBP: 00007f8b43811df1 R08: 0000000000000000 R09: 0000000000000000 [ 280.563735][ T8623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.571702][ T8623] R13: 0000000000000000 R14: 00007f8b439b5fa0 R15: 00007ffe898ae828 [ 280.579696][ T8623] [ 282.373769][ T8683] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1582'. [ 282.588022][ T8690] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1585'. [ 282.644591][ T8690] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 282.696490][ T8690] CPU: 0 PID: 8690 Comm: syz.3.1585 Not tainted 6.1.147-syzkaller #0 [ 282.704620][ T8690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.714699][ T8690] Call Trace: [ 282.717999][ T8690] [ 282.720952][ T8690] dump_stack_lvl+0x168/0x22e [ 282.725675][ T8690] ? show_regs_print_info+0x12/0x12 [ 282.730881][ T8690] ? load_image+0x3b0/0x3b0 [ 282.730923][ T8690] sysfs_warn_dup+0x8a/0xa0 [ 282.739965][ T8690] sysfs_do_create_link_sd+0xc0/0x110 [ 282.745368][ T8690] device_add+0x7ed/0xfb0 [ 282.749731][ T8690] wiphy_register+0x1e68/0x2bd0 [ 282.754626][ T8690] ? cfg80211_event_work+0x40/0x40 [ 282.759759][ T8690] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 282.765945][ T8690] ? ieee80211_register_hw+0x2854/0x38c0 [ 282.771608][ T8690] ieee80211_register_hw+0x2c29/0x38c0 [ 282.777100][ T8690] ? ieee80211_register_hw+0xeb1/0x38c0 [ 282.782659][ T8690] ? ieee80211_register_hw+0xeb1/0x38c0 [ 282.788222][ T8690] ? ieee80211_tasklet_handler+0x20/0x20 [ 282.793965][ T8690] ? memset+0x1e/0x40 [ 282.797960][ T8690] ? __hrtimer_init+0x186/0x270 [ 282.802820][ T8690] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 282.808560][ T8690] hwsim_new_radio_nl+0xafa/0xce0 [ 282.813591][ T8690] genl_family_rcv_msg_doit+0x22e/0x320 [ 282.819135][ T8690] ? end_current_label_crit_section+0x170/0x170 [ 282.825374][ T8690] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 282.831279][ T8690] ? bpf_lsm_capable+0x5/0x10 [ 282.835948][ T8690] ? security_capable+0x85/0xb0 [ 282.840798][ T8690] genl_rcv_msg+0x5f2/0x780 [ 282.845306][ T8690] ? genl_bind+0x350/0x350 [ 282.849717][ T8690] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 282.856074][ T8690] ? lock_acquire+0x20f/0x490 [ 282.860768][ T8690] netlink_rcv_skb+0x1de/0x420 [ 282.865556][ T8690] ? genl_bind+0x350/0x350 [ 282.869977][ T8690] ? netlink_ack+0x1100/0x1100 [ 282.874826][ T8690] ? down_read+0x1a8/0x2d0 [ 282.879239][ T8690] genl_rcv+0x24/0x40 [ 282.883245][ T8690] netlink_unicast+0x74d/0x8d0 [ 282.888010][ T8690] netlink_sendmsg+0x89e/0xbc0 [ 282.892771][ T8690] ? netlink_getsockopt+0x540/0x540 [ 282.897965][ T8690] ? aa_sock_msg_perm+0x94/0x150 [ 282.902899][ T8690] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 282.908188][ T8690] ? security_socket_sendmsg+0x7c/0xa0 [ 282.913640][ T8690] ? netlink_getsockopt+0x540/0x540 [ 282.918830][ T8690] ____sys_sendmsg+0x59b/0x970 [ 282.923597][ T8690] ? __sys_sendmsg_sock+0x30/0x30 [ 282.928635][ T8690] ? __import_iovec+0x315/0x500 [ 282.933483][ T8690] ? import_iovec+0x6f/0xa0 [ 282.937986][ T8690] ___sys_sendmsg+0x21c/0x290 [ 282.942659][ T8690] ? __sys_sendmsg+0x270/0x270 [ 282.947436][ T8690] ? ktime_get_real_ts64+0x420/0x420 [ 282.952736][ T8690] ? __fdget+0x17c/0x200 [ 282.956974][ T8690] __se_sys_sendmsg+0x19e/0x270 [ 282.961817][ T8690] ? perf_trace_preemptirq_template+0x287/0x330 [ 282.968137][ T8690] ? __x64_sys_sendmsg+0x80/0x80 [ 282.973078][ T8690] ? lockdep_hardirqs_on+0x94/0x140 [ 282.978270][ T8690] do_syscall_64+0x4c/0xa0 [ 282.982691][ T8690] ? clear_bhb_loop+0x60/0xb0 [ 282.987357][ T8690] ? clear_bhb_loop+0x60/0xb0 [ 282.992019][ T8690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.997906][ T8690] RIP: 0033:0x7f3b0f98eb69 [ 283.002310][ T8690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.022096][ T8690] RSP: 002b:00007f3b1081a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.030530][ T8690] RAX: ffffffffffffffda RBX: 00007f3b0fbb5fa0 RCX: 00007f3b0f98eb69 [ 283.038494][ T8690] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 283.046461][ T8690] RBP: 00007f3b0fa11df1 R08: 0000000000000000 R09: 0000000000000000 [ 283.054443][ T8690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.062404][ T8690] R13: 0000000000000000 R14: 00007f3b0fbb5fa0 R15: 00007fff5be114e8 [ 283.070380][ T8690] [ 284.051228][ T8732] netlink: 'syz.0.1605': attribute type 39 has an invalid length. [ 284.993853][ T8743] netlink: 'syz.1.1609': attribute type 28 has an invalid length. [ 285.412517][ T8760] netlink: 'syz.2.1617': attribute type 1 has an invalid length. [ 285.434272][ T8760] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1617'. [ 286.564162][ T8788] netlink: 'syz.3.1626': attribute type 28 has an invalid length. [ 286.674110][ T8793] netlink: 'syz.0.1629': attribute type 1 has an invalid length. [ 286.938198][ T8803] netlink: 'syz.4.1637': attribute type 1 has an invalid length. [ 286.968900][ T8803] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1637'. [ 287.625479][ T8836] netlink: 'syz.4.1648': attribute type 1 has an invalid length. [ 288.464043][ T8848] netlink: 'syz.0.1654': attribute type 1 has an invalid length. [ 288.483872][ T8848] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1654'. [ 289.242580][ T8880] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1664'. [ 289.946534][ T8897] netlink: 'syz.3.1672': attribute type 1 has an invalid length. [ 289.979040][ T8897] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1672'. [ 290.263665][ T8906] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1676'. [ 290.326038][ T8906] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 290.357021][ T8906] CPU: 0 PID: 8906 Comm: syz.2.1676 Not tainted 6.1.147-syzkaller #0 [ 290.365152][ T8906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.375229][ T8906] Call Trace: [ 290.378518][ T8906] [ 290.381462][ T8906] dump_stack_lvl+0x168/0x22e [ 290.386157][ T8906] ? show_regs_print_info+0x12/0x12 [ 290.391372][ T8906] ? load_image+0x3b0/0x3b0 [ 290.395909][ T8906] sysfs_warn_dup+0x8a/0xa0 [ 290.400529][ T8906] sysfs_do_create_link_sd+0xc0/0x110 [ 290.405931][ T8906] device_add+0x7ed/0xfb0 [ 290.410312][ T8906] wiphy_register+0x1e68/0x2bd0 [ 290.415210][ T8906] ? cfg80211_event_work+0x40/0x40 [ 290.420525][ T8906] ? minstrel_ht_alloc+0x894/0xa20 [ 290.425668][ T8906] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 290.431844][ T8906] ieee80211_register_hw+0x2c29/0x38c0 [ 290.437323][ T8906] ? ieee80211_register_hw+0xeb1/0x38c0 [ 290.442866][ T8906] ? ieee80211_register_hw+0xeb1/0x38c0 [ 290.448496][ T8906] ? ieee80211_tasklet_handler+0x20/0x20 [ 290.454144][ T8906] ? check_preemption_disabled+0x4b/0x110 [ 290.459963][ T8906] ? memset+0x1e/0x40 [ 290.463993][ T8906] ? __hrtimer_init+0x186/0x270 [ 290.468838][ T8906] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 290.474569][ T8906] hwsim_new_radio_nl+0xafa/0xce0 [ 290.479608][ T8906] genl_family_rcv_msg_doit+0x22e/0x320 [ 290.485150][ T8906] ? end_current_label_crit_section+0x170/0x170 [ 290.491388][ T8906] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 290.497284][ T8906] ? bpf_lsm_capable+0x5/0x10 [ 290.501978][ T8906] ? security_capable+0x85/0xb0 [ 290.506845][ T8906] genl_rcv_msg+0x5f2/0x780 [ 290.511353][ T8906] ? genl_bind+0x350/0x350 [ 290.515765][ T8906] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 290.522111][ T8906] netlink_rcv_skb+0x1de/0x420 [ 290.526880][ T8906] ? genl_bind+0x350/0x350 [ 290.531306][ T8906] ? netlink_ack+0x1100/0x1100 [ 290.536071][ T8906] ? down_read+0x1a8/0x2d0 [ 290.540484][ T8906] genl_rcv+0x24/0x40 [ 290.544485][ T8906] netlink_unicast+0x74d/0x8d0 [ 290.549266][ T8906] netlink_sendmsg+0x89e/0xbc0 [ 290.554026][ T8906] ? netlink_getsockopt+0x540/0x540 [ 290.559222][ T8906] ? aa_sock_msg_perm+0x94/0x150 [ 290.564157][ T8906] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 290.569446][ T8906] ? security_socket_sendmsg+0x7c/0xa0 [ 290.574910][ T8906] ? netlink_getsockopt+0x540/0x540 [ 290.580100][ T8906] ____sys_sendmsg+0x59b/0x970 [ 290.584869][ T8906] ? __sys_sendmsg_sock+0x30/0x30 [ 290.589885][ T8906] ? __import_iovec+0x315/0x500 [ 290.594738][ T8906] ? import_iovec+0x6f/0xa0 [ 290.599242][ T8906] ___sys_sendmsg+0x21c/0x290 [ 290.603916][ T8906] ? __sys_sendmsg+0x270/0x270 [ 290.608725][ T8906] ? ktime_get_real_ts64+0x420/0x420 [ 290.614023][ T8906] ? __fdget+0x17c/0x200 [ 290.618705][ T8906] __se_sys_sendmsg+0x19e/0x270 [ 290.623557][ T8906] ? perf_trace_preemptirq_template+0x287/0x330 [ 290.629847][ T8906] ? __x64_sys_sendmsg+0x80/0x80 [ 290.634784][ T8906] ? lockdep_hardirqs_on+0x94/0x140 [ 290.640091][ T8906] do_syscall_64+0x4c/0xa0 [ 290.644512][ T8906] ? clear_bhb_loop+0x60/0xb0 [ 290.649181][ T8906] ? clear_bhb_loop+0x60/0xb0 [ 290.653857][ T8906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.659777][ T8906] RIP: 0033:0x7f8b4378eb69 [ 290.664220][ T8906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.683917][ T8906] RSP: 002b:00007f8b4454c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.692339][ T8906] RAX: ffffffffffffffda RBX: 00007f8b439b5fa0 RCX: 00007f8b4378eb69 [ 290.700314][ T8906] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 290.708285][ T8906] RBP: 00007f8b43811df1 R08: 0000000000000000 R09: 0000000000000000 [ 290.716265][ T8906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.724254][ T8906] R13: 0000000000000000 R14: 00007f8b439b5fa0 R15: 00007ffe898ae828 [ 290.732239][ T8906] [ 291.574643][ T8946] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1688'. [ 291.813268][ T8954] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1694'. [ 291.869401][ T8954] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 291.910065][ T8954] CPU: 1 PID: 8954 Comm: syz.3.1694 Not tainted 6.1.147-syzkaller #0 [ 291.918197][ T8954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.928252][ T8954] Call Trace: [ 291.931527][ T8954] [ 291.934457][ T8954] dump_stack_lvl+0x168/0x22e [ 291.939131][ T8954] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 291.945370][ T8954] ? show_regs_print_info+0x12/0x12 [ 291.950567][ T8954] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 291.956784][ T8954] sysfs_warn_dup+0x8a/0xa0 [ 291.961286][ T8954] sysfs_do_create_link_sd+0xc0/0x110 [ 291.966651][ T8954] device_add+0x7ed/0xfb0 [ 291.970980][ T8954] wiphy_register+0x1e68/0x2bd0 [ 291.975845][ T8954] ? cfg80211_event_work+0x40/0x40 [ 291.980949][ T8954] ? minstrel_ht_alloc+0x894/0xa20 [ 291.986054][ T8954] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 291.992120][ T8954] ieee80211_register_hw+0x2c29/0x38c0 [ 291.997581][ T8954] ? ieee80211_register_hw+0xeb1/0x38c0 [ 292.003119][ T8954] ? ieee80211_register_hw+0xeb1/0x38c0 [ 292.008668][ T8954] ? ieee80211_tasklet_handler+0x20/0x20 [ 292.014304][ T8954] ? memset+0x1e/0x40 [ 292.018276][ T8954] ? __hrtimer_init+0x186/0x270 [ 292.023119][ T8954] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 292.028857][ T8954] hwsim_new_radio_nl+0xafa/0xce0 [ 292.033884][ T8954] genl_family_rcv_msg_doit+0x22e/0x320 [ 292.039425][ T8954] ? rcu_is_watching+0x11/0xa0 [ 292.044199][ T8954] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 292.050082][ T8954] ? lockdep_hardirqs_on+0x94/0x140 [ 292.055291][ T8954] ? genl_rcv_msg+0x5ca/0x780 [ 292.059969][ T8954] genl_rcv_msg+0x5f2/0x780 [ 292.064465][ T8954] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 292.070284][ T8954] ? genl_bind+0x350/0x350 [ 292.074696][ T8954] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 292.081049][ T8954] netlink_rcv_skb+0x1de/0x420 [ 292.085807][ T8954] ? genl_bind+0x350/0x350 [ 292.090218][ T8954] ? netlink_ack+0x1100/0x1100 [ 292.095070][ T8954] ? down_read+0x1a8/0x2d0 [ 292.099574][ T8954] genl_rcv+0x24/0x40 [ 292.103763][ T8954] netlink_unicast+0x74d/0x8d0 [ 292.108527][ T8954] netlink_sendmsg+0x89e/0xbc0 [ 292.113295][ T8954] ? netlink_getsockopt+0x540/0x540 [ 292.118488][ T8954] ? aa_sock_msg_perm+0x94/0x150 [ 292.123421][ T8954] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 292.128723][ T8954] ? security_socket_sendmsg+0x7c/0xa0 [ 292.134179][ T8954] ? netlink_getsockopt+0x540/0x540 [ 292.139371][ T8954] ____sys_sendmsg+0x59b/0x970 [ 292.144131][ T8954] ? __sys_sendmsg_sock+0x30/0x30 [ 292.149146][ T8954] ? __import_iovec+0x315/0x500 [ 292.154003][ T8954] ? import_iovec+0x6f/0xa0 [ 292.158506][ T8954] ___sys_sendmsg+0x21c/0x290 [ 292.163207][ T8954] ? __sys_sendmsg+0x270/0x270 [ 292.168085][ T8954] ? __fdget+0x17c/0x200 [ 292.172417][ T8954] __se_sys_sendmsg+0x19e/0x270 [ 292.177266][ T8954] ? __x64_sys_sendmsg+0x80/0x80 [ 292.182217][ T8954] ? syscall_enter_from_user_mode+0x2a/0x80 [ 292.188107][ T8954] do_syscall_64+0x4c/0xa0 [ 292.192538][ T8954] ? clear_bhb_loop+0x60/0xb0 [ 292.197235][ T8954] ? clear_bhb_loop+0x60/0xb0 [ 292.201918][ T8954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.207810][ T8954] RIP: 0033:0x7f3b0f98eb69 [ 292.212219][ T8954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.231822][ T8954] RSP: 002b:00007f3b1081a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.240263][ T8954] RAX: ffffffffffffffda RBX: 00007f3b0fbb5fa0 RCX: 00007f3b0f98eb69 [ 292.248234][ T8954] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 292.256198][ T8954] RBP: 00007f3b0fa11df1 R08: 0000000000000000 R09: 0000000000000000 [ 292.264162][ T8954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.272124][ T8954] R13: 0000000000000000 R14: 00007f3b0fbb5fa0 R15: 00007fff5be114e8 [ 292.280104][ T8954] [ 292.565638][ T8958] netlink: 'syz.2.1696': attribute type 10 has an invalid length. [ 292.591556][ T8958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1696'. [ 293.408928][ T4728] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 293.772578][ T9007] netlink: 'syz.4.1711': attribute type 10 has an invalid length. [ 293.785779][ T9007] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1711'. [ 294.908575][ T9036] delete_channel: no stack [ 294.923217][ T9053] netlink: 'syz.3.1735': attribute type 10 has an invalid length. [ 294.948978][ T9053] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1735'. [ 295.128585][ T9065] delete_channel: no stack [ 295.351575][ T9079] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 298.456494][ T9179] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1785'. [ 299.441125][ T9215] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 301.366145][ T9277] delete_channel: no stack [ 301.808505][ T9310] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1830'. [ 302.090354][ T9326] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 302.498218][ T9341] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1847'. [ 303.422130][ T9374] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1858'. [ 304.063498][ T9392] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1868'. [ 304.395568][ T9408] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1872'. [ 304.506034][ T9412] netlink: 'syz.2.1874': attribute type 21 has an invalid length. [ 305.823326][ T9442] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1886'. [ 307.509719][ T4728] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 307.633914][ T9509] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1913'. [ 309.246911][ T4728] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 311.292216][ T9633] device sit0 entered promiscuous mode [ 312.594139][ T9681] device sit0 left promiscuous mode [ 316.506874][ T9825] netlink: 'syz.2.2037': attribute type 29 has an invalid length. [ 316.531746][ T9825] netlink: 'syz.2.2037': attribute type 29 has an invalid length. [ 316.570764][ T9830] netlink: 'syz.2.2037': attribute type 29 has an invalid length. [ 316.596519][ T9825] netlink: 'syz.2.2037': attribute type 29 has an invalid length. [ 317.094045][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.100434][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.548078][ T9865] netlink: 'syz.0.2050': attribute type 10 has an invalid length. [ 317.587420][ T9865] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2050'. [ 318.171952][ T9876] syz.3.2055 (9876) used greatest stack depth: 16584 bytes left [ 319.209552][ T9922] netlink: 'syz.2.2072': attribute type 10 has an invalid length. [ 319.238223][ T9922] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2072'. [ 321.182506][ T9998] netlink: 'syz.4.2102': attribute type 21 has an invalid length. [ 321.217695][ T9998] netlink: 'syz.4.2102': attribute type 1 has an invalid length. [ 322.552415][T10041] netlink: 'syz.0.2117': attribute type 21 has an invalid length. [ 322.587796][T10041] netlink: 'syz.0.2117': attribute type 1 has an invalid length. [ 323.344278][T10073] netlink: 'syz.0.2127': attribute type 29 has an invalid length. [ 323.369799][T10073] netlink: 'syz.0.2127': attribute type 29 has an invalid length. [ 323.390094][T10073] netlink: 'syz.0.2127': attribute type 29 has an invalid length. [ 323.402913][T10073] netlink: 'syz.0.2127': attribute type 29 has an invalid length. [ 324.858423][T10091] netlink: 'syz.3.2135': attribute type 21 has an invalid length. [ 324.903308][T10091] netlink: 'syz.3.2135': attribute type 1 has an invalid length. [ 326.220725][T10136] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2152'. [ 327.732768][T10184] netlink: 'syz.4.2165': attribute type 29 has an invalid length. [ 327.867563][T10184] netlink: 'syz.4.2165': attribute type 29 has an invalid length. [ 327.879306][T10187] netlink: 'syz.4.2165': attribute type 29 has an invalid length. [ 327.899082][T10189] netlink: 'syz.4.2165': attribute type 29 has an invalid length. [ 328.276194][T10202] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2175'. [ 328.476131][T10207] netlink: 'syz.4.2178': attribute type 21 has an invalid length. [ 328.623935][T10207] netlink: 'syz.4.2178': attribute type 1 has an invalid length. [ 328.638957][T10207] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2178'. [ 329.662016][T10245] netlink: 'syz.1.2188': attribute type 29 has an invalid length. [ 329.713320][T10245] netlink: 'syz.1.2188': attribute type 29 has an invalid length. [ 329.875122][T10250] netlink: 'syz.1.2188': attribute type 29 has an invalid length. [ 329.992776][T10252] netlink: 'syz.1.2188': attribute type 29 has an invalid length. [ 330.930211][T10282] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2196'. [ 333.802025][T10315] validate_nla: 3 callbacks suppressed [ 333.802040][T10315] netlink: 'syz.0.2208': attribute type 29 has an invalid length. [ 335.032076][T10365] netlink: 'syz.3.2237': attribute type 21 has an invalid length. [ 335.042047][T10365] netlink: 'syz.3.2237': attribute type 1 has an invalid length. [ 335.050659][T10365] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2237'. [ 337.110027][T10385] netlink: 'syz.1.2229': attribute type 10 has an invalid length. [ 337.118166][T10385] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2229'. [ 337.137451][T10367] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 337.144444][T10367] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 337.152562][T10367] device veth0_to_bridge entered promiscuous mode [ 338.140747][T10429] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2249'. [ 338.533469][ T4743] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 339.723729][T10421] netlink: 'syz.4.2247': attribute type 13 has an invalid length. [ 339.731675][T10421] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2247'. [ 339.752901][T10421] erspan0: refused to change device tx_queue_len [ 339.781516][T10421] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 339.811031][T10436] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 339.858723][T10436] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 339.889294][T10436] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 340.221530][T10450] netlink: 'syz.3.2261': attribute type 10 has an invalid length. [ 340.279656][ T4728] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 340.472715][T10450] team0: Port device netdevsim0 added [ 340.977839][T10477] device wg2 entered promiscuous mode [ 341.286056][T10486] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2270'. [ 341.302990][T10485] IPv6: Can't replace route, no match found [ 341.330931][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2272'. [ 341.971283][T10509] device wg2 entered promiscuous mode [ 341.995788][T10510] netlink: 'syz.4.2281': attribute type 10 has an invalid length. [ 342.108027][T10510] team0: Port device netdevsim0 added [ 342.295271][T10521] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.322936][T10521] O3ãc¤±: renamed from bridge_slave_0 [ 342.384883][T10521] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2285'. [ 342.409029][T10521] netlink: zone id is out of range [ 342.414421][T10521] netlink: zone id is out of range [ 342.441126][T10521] netlink: zone id is out of range [ 342.447674][T10521] netlink: zone id is out of range [ 342.456718][T10521] netlink: zone id is out of range [ 342.463611][T10521] netlink: zone id is out of range [ 342.472330][T10521] netlink: zone id is out of range [ 342.478559][T10521] netlink: zone id is out of range [ 342.493857][T10521] netlink: zone id is out of range [ 343.436525][T10558] device wg2 entered promiscuous mode [ 343.633979][T10567] netlink: 'syz.1.2300': attribute type 10 has an invalid length. [ 343.768975][T10567] team0: Port device netdevsim0 added [ 345.259033][T10606] netlink: 'syz.4.2316': attribute type 10 has an invalid length. [ 345.298062][T10606] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2316'. [ 345.935951][T10620] netlink: 'syz.2.2317': attribute type 10 has an invalid length. [ 346.142108][T10620] team0: Port device netdevsim0 added [ 347.810940][ T4745] wlan1: Trigger new scan to find an IBSS to join [ 347.945902][T10674] netlink: 'syz.3.2336': attribute type 10 has an invalid length. [ 347.984626][T10674] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2336'. [ 349.207438][T10709] O3ãc¤±: renamed from bridge_slave_0 [ 349.273000][T10708] netlink: 'syz.0.2353': attribute type 10 has an invalid length. [ 349.300371][T10707] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2351'. [ 349.388456][T10707] net_ratelimit: 8 callbacks suppressed [ 349.388491][T10707] netlink: zone id is out of range [ 349.429048][T10707] netlink: zone id is out of range [ 349.440323][T10708] team0: Port device netdevsim0 added [ 349.452669][T10707] netlink: zone id is out of range [ 349.466378][T10707] netlink: zone id is out of range [ 349.511056][T10707] netlink: zone id is out of range [ 349.529664][T10707] netlink: zone id is out of range [ 349.549676][T10707] netlink: zone id is out of range [ 349.564348][T10707] netlink: zone id is out of range [ 349.577970][T10707] netlink: zone id is out of range [ 349.587760][T10707] netlink: zone id is out of range [ 349.896260][T10733] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.935572][T10733] O3ãc¤±: renamed from bridge_slave_0 [ 349.975499][T10733] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2373'. [ 350.194999][T10749] netlink: 'syz.0.2365': attribute type 40 has an invalid length. [ 350.249256][T10749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2365'. [ 350.335904][T10749] device bond0 entered promiscuous mode [ 350.575701][T10750] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2369'. [ 350.778809][T10756] netlink: 'syz.3.2372': attribute type 10 has an invalid length. [ 351.443684][T10768] IPv6: Can't replace route, no match found [ 351.483953][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2378'. [ 351.695786][T10781] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.793364][T10781] O3ãc¤±: renamed from bridge_slave_0 [ 351.822844][T10784] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2381'. [ 352.122913][T10801] netlink: 'syz.2.2388': attribute type 40 has an invalid length. [ 352.166260][T10801] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2388'. [ 352.177191][T10801] device bond0 entered promiscuous mode [ 352.197938][T10800] device wg2 left promiscuous mode [ 352.255135][T10802] netlink: 'syz.1.2391': attribute type 10 has an invalid length. [ 352.487337][T10810] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2395'. [ 353.125532][T10825] IPv6: Can't replace route, no match found [ 353.182666][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 353.707501][T10846] device wg2 left promiscuous mode [ 353.909647][T10847] netlink: 'syz.0.2407': attribute type 10 has an invalid length. [ 354.875010][T10868] netlink: 'syz.0.2423': attribute type 10 has an invalid length. [ 355.002304][T10873] netlink: 'syz.1.2413': attribute type 40 has an invalid length. [ 355.030113][T10873] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2413'. [ 355.055165][T10873] device bond0 entered promiscuous mode [ 355.186487][T10873] net_ratelimit: 43 callbacks suppressed [ 355.186581][T10873] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 355.587523][T10880] netlink: 'syz.0.2417': attribute type 8 has an invalid length. [ 355.601169][T10880] netlink: 75752 bytes leftover after parsing attributes in process `syz.0.2417'. [ 355.930261][T10891] IPv6: Can't replace route, no match found [ 356.008122][T10891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2418'. [ 357.105285][T10921] netlink: 'syz.4.2430': attribute type 40 has an invalid length. [ 357.115486][T10921] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2430'. [ 357.128299][T10921] device bond0 entered promiscuous mode [ 357.134937][T10921] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 357.596445][T10936] netlink: 'syz.3.2435': attribute type 21 has an invalid length. [ 357.608012][T10936] netlink: 'syz.3.2435': attribute type 1 has an invalid length. [ 357.866889][T10947] IPv6: Can't replace route, no match found [ 357.967193][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2441'. [ 358.287717][T10953] netlink: 'syz.1.2444': attribute type 10 has an invalid length. [ 360.978371][T11051] device wg2 left promiscuous mode [ 362.157527][T11089] IPv6: Can't replace route, no match found [ 362.189208][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2489'. [ 362.613531][T11103] netlink: 'syz.3.2496': attribute type 10 has an invalid length. [ 364.363056][T11146] netlink: 'syz.2.2506': attribute type 21 has an invalid length. [ 364.792859][T11152] netlink: 'syz.4.2508': attribute type 9 has an invalid length. [ 364.801417][T11152] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.2508'. [ 365.259533][T11165] netlink: 'syz.2.2518': attribute type 21 has an invalid length. [ 365.269988][T11165] netlink: 'syz.2.2518': attribute type 1 has an invalid length. [ 365.448388][T11174] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2516'. [ 366.244782][T11189] netlink: 'syz.1.2523': attribute type 21 has an invalid length. [ 366.614920][ T4276] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6 [ 367.466888][T11224] device sit0 entered promiscuous mode [ 368.323588][ T4276] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6 [ 368.533763][T11256] netlink: 'syz.0.2547': attribute type 21 has an invalid length. [ 368.622390][T11256] netlink: 'syz.0.2547': attribute type 1 has an invalid length. [ 370.166660][T11313] netlink: 'syz.4.2566': attribute type 21 has an invalid length. [ 370.176350][T11313] netlink: 'syz.4.2566': attribute type 1 has an invalid length. [ 370.523989][T11317] delete_channel: no stack [ 370.542088][T11323] netlink: 'syz.4.2582': attribute type 21 has an invalid length. [ 370.591506][T11323] netlink: 'syz.4.2582': attribute type 1 has an invalid length. [ 370.822183][T11335] device batadv0 entered promiscuous mode [ 370.851627][T11333] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2574'. [ 371.024329][T11341] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 [ 371.975693][T11362] delete_channel: no stack [ 372.915230][T11395] delete_channel: no stack [ 374.353591][T11434] mac80211_hwsim hwsim9 »»»»»»: renamed from wlan0 [ 375.137128][T11463] netlink: 'syz.3.2623': attribute type 3 has an invalid length. [ 375.164550][T11463] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2623'. [ 375.261629][T11463] netlink: 'syz.3.2623': attribute type 2 has an invalid length. [ 375.295028][T11463] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2623'. [ 375.352403][T11470] netlink: 'syz.3.2623': attribute type 2 has an invalid length. [ 375.407777][T11470] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2623'. [ 375.471690][T11475] tap0: tun_chr_ioctl cmd 1074025680 [ 375.493943][T11471] tap0: tun_chr_ioctl cmd 35108 [ 376.996544][T11530] netlink: 'syz.0.2645': attribute type 3 has an invalid length. [ 377.014987][T11530] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2645'. [ 377.520901][ T4276] Bluetooth: hci4: unexpected event 0x14 length: 15 > 6 [ 378.086431][T11573] netlink: 'syz.3.2669': attribute type 3 has an invalid length. [ 378.159101][T11573] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2669'. [ 378.435227][T11583] netlink: 'syz.0.2676': attribute type 3 has an invalid length. [ 378.455709][T11583] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2676'. [ 378.486424][T11583] netlink: 'syz.0.2676': attribute type 2 has an invalid length. [ 378.507241][T11583] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2676'. [ 378.535647][T11583] netlink: 'syz.0.2676': attribute type 2 has an invalid length. [ 378.544374][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.550827][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.559931][T11583] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2676'. [ 380.011391][T11638] netlink: 'syz.2.2696': attribute type 3 has an invalid length. [ 380.037955][T11638] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2696'. [ 380.077040][T11638] netlink: 'syz.2.2696': attribute type 2 has an invalid length. [ 380.085490][T11638] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2696'. [ 380.196721][T11638] netlink: 'syz.2.2696': attribute type 2 has an invalid length. [ 380.206699][T11638] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2696'. [ 380.944014][T11673] tap0: tun_chr_ioctl cmd 1074025680 [ 380.960113][T11666] tap0: tun_chr_ioctl cmd 35108 [ 381.015303][T11671] netlink: 'syz.3.2712': attribute type 3 has an invalid length. [ 381.060262][T11671] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2712'. [ 382.221367][ T4276] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 382.417848][ T4276] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 383.377393][ T4276] Bluetooth: hci4: unexpected event 0x16 length: 15 > 6 [ 383.739391][T11757] tap0: tun_chr_ioctl cmd 1074025680 [ 383.776965][T11759] netlink: 'syz.1.2748': attribute type 10 has an invalid length. [ 383.797215][T11757] tap0: tun_chr_ioctl cmd 35108 [ 383.805478][T11759] netlink: 'syz.1.2748': attribute type 10 has an invalid length. [ 383.861225][T11759] team0: Port device netdevsim0 removed [ 383.966120][T11759] device netdevsim0 entered promiscuous mode [ 383.993335][T11759] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 384.542745][T11779] tap0: tun_chr_ioctl cmd 1074025680 [ 384.595069][T11772] tap0: tun_chr_ioctl cmd 35108 [ 385.341634][T11788] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 385.486360][T11799] netlink: 'syz.3.2764': attribute type 10 has an invalid length. [ 385.542682][T11799] netlink: 'syz.3.2764': attribute type 10 has an invalid length. [ 385.608273][T11799] team0: Port device netdevsim0 removed [ 385.685510][T11799] device netdevsim0 entered promiscuous mode [ 385.730570][T11799] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 386.612047][T11834] tap0: tun_chr_ioctl cmd 1074025680 [ 386.696821][T11828] tap0: tun_chr_ioctl cmd 35108 [ 387.344938][T11860] netlink: 'syz.4.2785': attribute type 10 has an invalid length. [ 387.434694][T11863] netlink: 'syz.4.2785': attribute type 10 has an invalid length. [ 387.467946][T11863] team0: Port device netdevsim0 removed [ 387.477286][T11863] device netdevsim0 entered promiscuous mode [ 387.486075][T11863] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 388.983263][T11916] netlink: 'syz.0.2805': attribute type 10 has an invalid length. [ 389.006696][T11916] netlink: 'syz.0.2805': attribute type 10 has an invalid length. [ 389.042212][T11916] team0: Port device netdevsim0 removed [ 389.126158][T11916] device netdevsim0 entered promiscuous mode [ 389.157691][T11916] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 389.464991][T11932] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 390.276948][T11959] netlink: 'syz.2.2825': attribute type 10 has an invalid length. [ 390.351901][T11961] netlink: 'syz.2.2825': attribute type 10 has an invalid length. [ 390.375879][T11961] team0: Port device netdevsim0 removed [ 390.385904][T11961] device netdevsim0 entered promiscuous mode [ 390.392634][T11961] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 390.825260][T11971] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 391.715331][T12002] netlink: 'syz.4.2842': attribute type 10 has an invalid length. [ 391.857762][T12002] bond0: (slave netdevsim0): Releasing backup interface [ 391.910698][T12002] device netdevsim0 left promiscuous mode [ 391.927137][T12013] syz.0.2845[12013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 391.927246][T12013] syz.0.2845[12013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 391.968095][T12002] team0: Port device netdevsim0 added [ 392.018484][T12007] netlink: 'syz.4.2842': attribute type 10 has an invalid length. [ 392.068450][T12007] team0: Port device netdevsim0 removed [ 392.084099][T12007] device netdevsim0 entered promiscuous mode [ 392.099900][T12007] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 392.131677][T12013] netlink: 'syz.0.2845': attribute type 25 has an invalid length. [ 392.941201][T12043] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2860'. [ 392.983189][T12043] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 393.163707][T12053] syz.4.2866[12053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.163809][T12053] syz.4.2866[12053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.330559][T12053] netlink: 'syz.4.2866': attribute type 25 has an invalid length. [ 393.516476][T12063] netlink: 'syz.2.2868': attribute type 2 has an invalid length. [ 394.193222][T12087] device syzkaller0 entered promiscuous mode [ 394.310803][T12093] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2880'. [ 394.371775][T12093] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 396.732010][T12110] netlink: 'syz.4.2889': attribute type 2 has an invalid length. [ 397.245718][T12131] netlink: 'syz.2.2897': attribute type 10 has an invalid length. [ 397.328579][T12131] bond0: (slave netdevsim0): Releasing backup interface [ 397.385475][T12131] device netdevsim0 left promiscuous mode [ 397.426153][T12131] team0: Port device netdevsim0 added [ 397.435340][T12138] netlink: 'syz.2.2897': attribute type 10 has an invalid length. [ 397.477011][T12138] team0: Port device netdevsim0 removed [ 397.485564][T12138] device netdevsim0 entered promiscuous mode [ 397.493925][T12138] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 397.691545][T12146] netlink: 'syz.3.2902': attribute type 2 has an invalid length. [ 397.710276][T12146] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2902'. [ 397.997765][T12150] device syzkaller0 entered promiscuous mode [ 399.777603][T12167] netlink: 'syz.0.2907': attribute type 2 has an invalid length. [ 400.352914][T12183] netlink: 'syz.3.2915': attribute type 10 has an invalid length. [ 400.466527][T12183] bond0: (slave netdevsim0): Releasing backup interface [ 400.515028][T12183] device netdevsim0 left promiscuous mode [ 400.554447][T12183] team0: Port device netdevsim0 added [ 400.631801][T12188] netlink: 'syz.3.2915': attribute type 10 has an invalid length. [ 400.675376][T12188] team0: Port device netdevsim0 removed [ 400.685349][T12188] device netdevsim0 entered promiscuous mode [ 400.694179][T12188] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 401.204673][T12208] netlink: 'syz.1.2922': attribute type 2 has an invalid length. [ 401.212935][T12208] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2922'. [ 401.447733][ T4276] Bluetooth: hci2: unexpected event 0x3c length: 15 > 7 [ 401.854645][T12226] netlink: 'syz.1.2933': attribute type 10 has an invalid length. [ 401.906784][T12226] bond0: (slave netdevsim0): Releasing backup interface [ 401.964418][T12226] device netdevsim0 left promiscuous mode [ 402.036755][T12226] team0: Port device netdevsim0 added [ 402.071124][T12231] netlink: 'syz.1.2933': attribute type 10 has an invalid length. [ 402.160917][T12231] team0: Port device netdevsim0 removed [ 402.178951][T12235] netlink: 'syz.3.2936': attribute type 29 has an invalid length. [ 402.218230][T12231] device netdevsim0 entered promiscuous mode [ 402.225235][T12231] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 402.281575][T12235] netlink: 'syz.3.2936': attribute type 29 has an invalid length. [ 402.362486][T12242] netlink: 'syz.3.2936': attribute type 29 has an invalid length. [ 402.409190][T12235] netlink: 'syz.3.2936': attribute type 29 has an invalid length. [ 402.437622][T12235] netlink: 'syz.3.2936': attribute type 29 has an invalid length. [ 402.820484][T12254] netlink: 'syz.4.2941': attribute type 2 has an invalid length. [ 402.828579][T12254] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2941'. [ 402.917582][T12256] netlink: 'syz.0.2952': attribute type 10 has an invalid length. [ 402.987301][T12256] bond0: (slave netdevsim0): Releasing backup interface [ 402.999055][ T4276] Bluetooth: hci4: unexpected event 0x3c length: 15 > 7 [ 403.019504][T12256] device netdevsim0 left promiscuous mode [ 403.096184][T12256] team0: Port device netdevsim0 added [ 403.112690][T12262] netlink: 'syz.0.2952': attribute type 10 has an invalid length. [ 403.136748][T12262] team0: Port device netdevsim0 removed [ 403.144457][T12262] device netdevsim0 entered promiscuous mode [ 403.151309][T12262] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 404.424761][ T4276] Bluetooth: hci0: unexpected event 0x3c length: 15 > 7 [ 404.448778][T12298] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 404.463587][T12298] #PF: supervisor instruction fetch in kernel mode [ 404.470103][T12298] #PF: error_code(0x0010) - not-present page [ 404.476099][T12298] PGD 18ac0067 P4D 18ac0067 PUD 0 [ 404.481252][T12298] Oops: 0010 [#1] PREEMPT SMP KASAN [ 404.486457][T12298] CPU: 1 PID: 12298 Comm: syz.3.2959 Not tainted 6.1.147-syzkaller #0 [ 404.494620][T12298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 404.504694][T12298] RIP: 0010:0x0 [ 404.508184][T12298] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 404.515564][T12298] RSP: 0018:ffffc900037e7398 EFLAGS: 00010246 [ 404.521648][T12298] RAX: 1ffffffff16571b7 RBX: 000000000000000f RCX: 0000000000000000 [ 404.529638][T12298] RDX: ffffc900037e7440 RSI: 0000000000000001 RDI: ffff888057f80000 [ 404.537627][T12298] RBP: ffffc900037e74b0 R08: dffffc0000000000 R09: ffffed100aff0008 [ 404.545800][T12298] R10: ffffed100aff0008 R11: 1ffff1100aff0007 R12: ffffe8ffffd489e0 [ 404.553800][T12298] R13: ffffffff8b2b8db8 R14: 0000000000000000 R15: ffff888057f80000 [ 404.561792][T12298] FS: 00007f3b1081a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 404.570758][T12298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.577596][T12298] CR2: ffffffffffffffd6 CR3: 0000000078de9000 CR4: 00000000003506e0 [ 404.585677][T12298] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 404.593662][T12298] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 404.601655][T12298] Call Trace: [ 404.604970][T12298] [ 404.607898][T12298] bond_xdp_xmit+0x309/0x520 [ 404.612544][T12298] ? bond_xdp_xmit+0x93/0x520 [ 404.617269][T12298] ? bond_xdp+0x840/0x840 [ 404.621613][T12298] ? trace_call_bpf+0xbf/0x680 [ 404.626375][T12298] bq_xmit_all+0xc99/0x10d0 [ 404.630873][T12298] ? trace_call_bpf+0xbf/0x680 [ 404.635717][T12298] ? trace_call_bpf+0xbf/0x680 [ 404.640479][T12298] ? trace_call_bpf+0x5a7/0x680 [ 404.645322][T12298] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 404.651216][T12298] ? __alloc_pages+0x287/0x4e0 [ 404.655970][T12298] ? __dev_flush+0x1b0/0x1b0 [ 404.660557][T12298] ? zone_statistics+0x170/0x170 [ 404.665490][T12298] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 404.671292][T12298] ? perf_trace_preemptirq_template+0x287/0x330 [ 404.677520][T12298] ? irqentry_enter+0x33/0x50 [ 404.682188][T12298] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 404.688164][T12298] ? lock_chain_count+0x20/0x20 [ 404.693019][T12298] bq_enqueue+0x337/0x3d0 [ 404.697368][T12298] dev_map_enqueue+0x1b4/0x340 [ 404.702158][T12298] xdp_do_redirect_frame+0x30c/0x650 [ 404.707462][T12298] bpf_test_run_xdp_live+0x9dd/0x1970 [ 404.712841][T12298] ? bpf_test_run_xdp_live+0x45c/0x1970 [ 404.718379][T12298] ? xdp_convert_md_to_buff+0x330/0x330 [ 404.723925][T12298] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 404.730155][T12298] ? copy_user_enhanced_fast_string+0xa/0x40 [ 404.736122][T12298] ? bpf_test_init+0x134/0x150 [ 404.740892][T12298] ? xdp_convert_md_to_buff+0x5b/0x330 [ 404.746350][T12298] bpf_prog_test_run_xdp+0x6f1/0xe50 [ 404.751662][T12298] ? dev_put+0x80/0x80 [ 404.755722][T12298] ? dev_put+0x80/0x80 [ 404.759815][T12298] bpf_prog_test_run+0x31e/0x390 [ 404.764767][T12298] __sys_bpf+0x593/0x6d0 [ 404.768999][T12298] ? bpf_link_show_fdinfo+0x340/0x340 [ 404.774381][T12298] ? lock_chain_count+0x20/0x20 [ 404.779218][T12298] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 404.785203][T12298] __x64_sys_bpf+0x78/0x90 [ 404.789665][T12298] do_syscall_64+0x4c/0xa0 [ 404.794074][T12298] ? clear_bhb_loop+0x60/0xb0 [ 404.798756][T12298] ? clear_bhb_loop+0x60/0xb0 [ 404.803444][T12298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.809368][T12298] RIP: 0033:0x7f3b0f98eb69 [ 404.813821][T12298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.833423][T12298] RSP: 002b:00007f3b1081a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.841829][T12298] RAX: ffffffffffffffda RBX: 00007f3b0fbb5fa0 RCX: 00007f3b0f98eb69 [ 404.849878][T12298] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 404.857836][T12298] RBP: 00007f3b0fa11df1 R08: 0000000000000000 R09: 0000000000000000 [ 404.865799][T12298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.873759][T12298] R13: 0000000000000000 R14: 00007f3b0fbb5fa0 R15: 00007fff5be114e8 [ 404.881729][T12298] [ 404.884744][T12298] Modules linked in: [ 404.888642][T12298] CR2: 0000000000000000 [ 404.892810][T12298] ---[ end trace 0000000000000000 ]--- [ 404.898271][T12298] RIP: 0010:0x0 [ 404.901720][T12298] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 404.909069][T12298] RSP: 0018:ffffc900037e7398 EFLAGS: 00010246 [ 404.915131][T12298] RAX: 1ffffffff16571b7 RBX: 000000000000000f RCX: 0000000000000000 [ 404.923090][T12298] RDX: ffffc900037e7440 RSI: 0000000000000001 RDI: ffff888057f80000 [ 404.931056][T12298] RBP: ffffc900037e74b0 R08: dffffc0000000000 R09: ffffed100aff0008 [ 404.939194][T12298] R10: ffffed100aff0008 R11: 1ffff1100aff0007 R12: ffffe8ffffd489e0 [ 404.947162][T12298] R13: ffffffff8b2b8db8 R14: 0000000000000000 R15: ffff888057f80000 [ 404.955138][T12298] FS: 00007f3b1081a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 404.964058][T12298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.970664][T12298] CR2: ffffffffffffffd6 CR3: 0000000078de9000 CR4: 00000000003506e0 [ 404.978637][T12298] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 404.986693][T12298] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 404.994671][T12298] Kernel panic - not syncing: Fatal exception in interrupt [ 405.002147][T12298] Kernel Offset: disabled [ 405.006473][T12298] Rebooting in 86400 seconds..