last executing test programs: 1m34.371841128s ago: executing program 1 (id=2): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) 1m33.206030187s ago: executing program 0 (id=9): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x2, 0x47, 0x0, 0x0, 0x8, 0x8000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x20, 0x0, @perf_bp={0x0, 0xe}, 0x4, 0x2, 0x76, 0x2, 0x7b9116d, 0x7fff, 0x9, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xa, 0x12, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfff}, {}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xa0, &(0x7f00000003c0)=""/160, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001540)={0x4, 0xe, 0xfffffffe, 0x89}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001580)=[{0x2, 0x3, 0xb, 0x4}, {0x3, 0x3, 0x2, 0xc}], 0x10, 0xfff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff7b, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r5, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e372d0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) 1m32.957989003s ago: executing program 0 (id=12): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xa, 0x12, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfff}, {}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xa0, &(0x7f00000003c0)=""/160, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001540)={0x4, 0xe, 0xfffffffe, 0x89}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001580)=[{0x2, 0x3, 0xb, 0x4}, {0x3, 0x3, 0x2, 0xc}], 0x10, 0xfff}, 0x94) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000100)=r2, 0x5c) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff7b, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r7, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e372d0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) 1m32.497661235s ago: executing program 0 (id=15): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x7, 0x0, &(0x7f0000000700)="389ceff69d08b0", 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs={0x1}, 0x3, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x8, 0x5, 0x7, 0x8, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x9b, &(0x7f0000000200)=""/155, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x7, 0xffffffff}, 0x10, 0x1b548, r0, 0x8, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0xc, 0x7}, {0x3, 0x1, 0xa}, {0x1, 0x4, 0x8}, {0x4, 0x5, 0xd, 0xc}, {0x2, 0x1, 0xc, 0x3}, {0x0, 0x5, 0x7, 0x2}, {0x5, 0x4, 0xb, 0x1}, {0x1, 0x5, 0xa, 0x1}], 0x10, 0x4e2d6377}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, 0x0, &(0x7f0000000100)}, 0x20) r6 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 1m31.519663688s ago: executing program 0 (id=19): r0 = socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB="3e971d"], 0x9a) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, r0, 0x2, 0x6, 0x4}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, 0x0, &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r5, &(0x7f0000000600), &(0x7f0000000080)=""/61}, 0x20) recvmsg(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) sendmsg$tipc(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c800}, 0x4000000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x2}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x23, 0x16, &(0x7f0000001ec0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(r4) perf_event_open(&(0x7f0000000500)={0x2, 0xcc, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}], 0x1}, 0x80) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x2045) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x33, 0x1, 0xd1a, 0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000640)=0x1) 1m31.286295854s ago: executing program 1 (id=21): r0 = socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB="3e971d"], 0x9a) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, r0, 0x2, 0x6, 0x4}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, 0x0, &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r5, &(0x7f0000000600), &(0x7f0000000080)=""/61}, 0x20) recvmsg(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) sendmsg$tipc(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c800}, 0x4000000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x2}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x23, 0x16, &(0x7f0000001ec0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(r4) perf_event_open(&(0x7f0000000500)={0x2, 0xcc, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}], 0x1}, 0x80) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x2045) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000640)=0x1) 1m31.198445876s ago: executing program 0 (id=22): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x50) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000640)={r0, 0x0, 0x13, 0x0, &(0x7f0000000140)="2258e42356e2f8ffa2d7231f4094b716dcf4da", 0x0, 0x9, 0x0, 0xbb, 0x0, &(0x7f0000000540)="ff300e0dd42bc321a6197a756838da95316bf0a5d992acee8649556a8f770965c53e2efe164bb39a68115ee56082d58da48c94d5aacd4ce6171d038eb2881e8c1ccd78275b6e9923662f490cf9f835c419e839d5d6407b7cd6ad65fd1b945752702d98f0193909288b53bb64dba117844a673ecd27dc7dfc0e1fc667877ff177cbb6465f908672737707aadda9a207f2511c7ba65766ca5b721fa2c58e72dded8cab896080369b3a97e1b066db43c47186404faaba0f48722cd676", 0x0, 0x2, 0x0, 0x1}, 0x50) socket$kcm(0x11, 0xa, 0x300) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r3) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000a00)={&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000740)="5922ce695ad5946e58f984b093d9586179e1", 0x12}, {&(0x7f00000007c0)="0a553cb7d08e1e46a67b376848cc631ec9f63c29ac4531c76a2010209d9bfd19e4a7adaafefac4a2d3dbabf3537814e9c699a40dd6d50d8833b9e2b9afdff556511e5bb509687132290250", 0x4b}, {0x0}, {&(0x7f0000000900)="1ad1014baf2475e3a98b7cd7cc34ecd664bf83cb6abc75c6a0ccf23ac498bce260687115a023045b7ad192e1f25843cdb75f6d89c1c884e0e153c6734602", 0x3e}], 0x4, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}], 0x40, 0x4000000}, 0x2404c054) r6 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x3, 0xa, 0x1, 0x98, 0x0, 0xfffffffffffff42c, 0x8000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xb41c, 0x1, @perf_bp={&(0x7f0000000500), 0x3}, 0x0, 0x6, 0x9, 0x5, 0xffffffffffffffc0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x678}, 0x50) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 1m30.926840843s ago: executing program 1 (id=24): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0xd69e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r0, 0x0, 0x10122) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x54, &(0x7f0000000680)=ANY=[], 0x128}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x3b}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0x1}, 0x9049, 0x0, 0x0, 0x6, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x651b3077}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m30.346282108s ago: executing program 0 (id=25): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0xd69e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r0, 0x0, 0x10122) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x54, &(0x7f0000000680)=ANY=[], 0x128}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x3b}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0x1}, 0x9049, 0x0, 0x0, 0x6, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x651b3077}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m15.731214817s ago: executing program 32 (id=24): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0xd69e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r0, 0x0, 0x10122) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x54, &(0x7f0000000680)=ANY=[], 0x128}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x3b}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0x1}, 0x9049, 0x0, 0x0, 0x6, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x651b3077}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m15.233635839s ago: executing program 33 (id=25): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0xd69e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r0, 0x0, 0x10122) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x54, &(0x7f0000000680)=ANY=[], 0x128}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x3b}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0x1}, 0x9049, 0x0, 0x0, 0x6, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x651b3077}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.447179549s ago: executing program 5 (id=269): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs={0x1}, 0x3, 0x0}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x8, 0x5, 0x7, 0x8, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x9b, &(0x7f0000000200)=""/155, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x7, 0xffffffff}, 0x10, 0x1b548, r0, 0x8, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0xc, 0x7}, {0x3, 0x1, 0xa}, {0x1, 0x4, 0x8}, {0x4, 0x5, 0xd, 0xc}, {0x2, 0x1, 0xc, 0x3}, {0x0, 0x5, 0x7, 0x2}, {0x5, 0x4, 0xb, 0x1}, {0x1, 0x5, 0xa, 0x1}], 0x10, 0x4e2d6377}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, 0x0, &(0x7f0000000100)}, 0x20) r8 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r8, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 10.329068176s ago: executing program 5 (id=272): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x50) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000640)={r0, 0x0, 0x13, 0x0, &(0x7f0000000140)="2258e42356e2f8ffa2d7231f4094b716dcf4da", 0x0, 0x9, 0x0, 0xbb, 0x0, &(0x7f0000000540)="ff300e0dd42bc321a6197a756838da95316bf0a5d992acee8649556a8f770965c53e2efe164bb39a68115ee56082d58da48c94d5aacd4ce6171d038eb2881e8c1ccd78275b6e9923662f490cf9f835c419e839d5d6407b7cd6ad65fd1b945752702d98f0193909288b53bb64dba117844a673ecd27dc7dfc0e1fc667877ff177cbb6465f908672737707aadda9a207f2511c7ba65766ca5b721fa2c58e72dded8cab896080369b3a97e1b066db43c47186404faaba0f48722cd676", 0x0, 0x2, 0x0, 0x1}, 0x50) socket$kcm(0x11, 0xa, 0x300) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r3) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000a00)={&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980)=[{0x0}, {&(0x7f00000007c0)="0a553cb7d08e1e46a67b376848cc631ec9f63c29ac4531c76a2010209d9bfd19e4a7adaafefac4a2d3dbabf3537814e9c699a40dd6d50d8833b9e2b9afdff556511e5bb509687132290250bcd0a2503f88f10749f1de7a18e2e1376b0f0d7a62186ed30c5862b843a9b3eed62ba90b655faf283db50e070f68ccd2e2160a407a1bb787485e50cc89fb7e04569d0eb2fbb08ab69497c3", 0x96}, {0x0}, {&(0x7f0000000900)="1ad1014baf2475e3a98b7cd7cc34ecd664bf83cb6abc75c6a0ccf23ac498bce260687115a023045b7ad192e1f25843cdb75f6d89c1c884e0e153c6734602", 0x3e}], 0x4, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}], 0x40, 0x4000000}, 0x2404c054) r6 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x3, 0xa, 0x1, 0x98, 0x0, 0xfffffffffffff42c, 0x8000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xb41c, 0x1, @perf_bp={&(0x7f0000000500), 0x3}, 0x0, 0x6, 0x9, 0x5, 0xffffffffffffffc0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x678}, 0x50) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 9.303208491s ago: executing program 5 (id=280): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x100b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b100003", 0x2d}], 0x1}, 0x0) 8.782424204s ago: executing program 5 (id=285): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x7, 0x0, &(0x7f0000000700)="389ceff69d08b0", 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs={0x1}, 0x3, 0x0}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x8, 0x5, 0x7, 0x8, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x9b, &(0x7f0000000200)=""/155, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x7, 0xffffffff}, 0x10, 0x1b548, r0, 0x8, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0xc, 0x7}, {0x3, 0x1, 0xa}, {0x1, 0x4, 0x8}, {0x4, 0x5, 0xd, 0xc}, {0x2, 0x1, 0xc, 0x3}, {0x0, 0x5, 0x7, 0x2}, {0x5, 0x4, 0xb, 0x1}, {0x1, 0x5, 0xa, 0x1}], 0x10, 0x4e2d6377}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, 0x0, &(0x7f0000000100)}, 0x20) r8 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r8, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 6.624057027s ago: executing program 6 (id=292): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x7, 0x0, &(0x7f0000000700)="389ceff69d08b0", 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs={0x1}, 0x3, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x8, 0x5, 0x7, 0x8, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x9b, &(0x7f0000000200)=""/155, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x7, 0xffffffff}, 0x10, 0x1b548, r0, 0x8, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0xc, 0x7}, {0x3, 0x1, 0xa}, {0x1, 0x4, 0x8}, {0x4, 0x5, 0xd, 0xc}, {0x2, 0x1, 0xc, 0x3}, {0x0, 0x5, 0x7, 0x2}, {0x5, 0x4, 0xb, 0x1}, {0x1, 0x5, 0xa, 0x1}], 0x10, 0x4e2d6377}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, 0x0, &(0x7f0000000100)}, 0x20) r8 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r8, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 5.391141537s ago: executing program 6 (id=299): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) 4.86438521s ago: executing program 4 (id=301): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x2, 0x1, 0x1, &(0x7f0000000180)) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYRES8=r7, @ANYRES16=r7, @ANYRES32], 0xffdd) r8 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0xfa, 0x8, 0xc, 0xd, 0x0, 0x5, 0x0, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x8020, 0x2, 0x9cbd, 0x6, 0xffffffffffff8000, 0x1, 0x6ec, 0x0, 0xd5, 0x0, 0xe6b}, r2, 0x8, r0, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x6) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000040)=r2, 0x4) 4.635990006s ago: executing program 2 (id=302): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x2, 0x1, 0x1, &(0x7f0000000180)) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYRES8=r7, @ANYRES16=r7, @ANYRES32], 0xffdd) r8 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0xfa, 0x8, 0xc, 0xd, 0x0, 0x5, 0x0, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x8020, 0x2, 0x9cbd, 0x6, 0xffffffffffff8000, 0x1, 0x6ec, 0x0, 0xd5, 0x0, 0xe6b}, r2, 0x8, r0, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x6) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000040)=r2, 0x4) 4.04057586s ago: executing program 4 (id=305): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xb5, 0xfd, 0x8001}]}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000840)=@phonet={0x23, 0x0, 0x0, 0xa}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8941, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0x58, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)={0x1b, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0xe, '\x00', r3, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000000c8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfdef) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03316844268cb89e14f00800", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 3.897374144s ago: executing program 3 (id=306): socketpair(0x26, 0x6, 0xff, &(0x7f0000000380)={0xffffffffffffffff}) close(r0) perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x80000000}, 0x0, 0xa, 0x15, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000001c0), 0x5}, 0x2101, 0x1, 0xfffffffe, 0x1, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x80, 0x0, 0x0, 0x8, 0x0, 0x35}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x6b, 0x11, 0xe}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr}, 0x70) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, &(0x7f0000000140)}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 3.770199037s ago: executing program 2 (id=307): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x50) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000640)={r0, 0x0, 0x13, 0x0, &(0x7f0000000140)="2258e42356e2f8ffa2d7231f4094b716dcf4da", 0x0, 0x9, 0x0, 0xbb, 0x0, &(0x7f0000000540)="ff300e0dd42bc321a6197a756838da95316bf0a5d992acee8649556a8f770965c53e2efe164bb39a68115ee56082d58da48c94d5aacd4ce6171d038eb2881e8c1ccd78275b6e9923662f490cf9f835c419e839d5d6407b7cd6ad65fd1b945752702d98f0193909288b53bb64dba117844a673ecd27dc7dfc0e1fc667877ff177cbb6465f908672737707aadda9a207f2511c7ba65766ca5b721fa2c58e72dded8cab896080369b3a97e1b066db43c47186404faaba0f48722cd676", 0x0, 0x2, 0x0, 0x1}, 0x50) socket$kcm(0x11, 0xa, 0x300) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r3) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000a00)={&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980)=[{0x0}, {&(0x7f00000007c0)="0a553cb7d08e1e46a67b376848cc631ec9f63c29ac4531c76a2010209d9bfd19e4a7adaafefac4a2d3dbabf3537814e9c699a40dd6d50d8833b9e2b9afdff556511e5bb509687132290250bcd0a2503f88f10749f1de7a18e2e1376b0f0d7a62186ed30c5862b843a9b3eed62ba90b655faf283db50e070f68ccd2e2160a407a1bb787485e50cc89fb7e04569d0eb2fbb08ab69497c3", 0x96}, {0x0}, {&(0x7f0000000900)="1ad1014baf2475e3a98b7cd7cc34ecd664bf83cb6abc75c6a0ccf23ac498bce260687115a023045b7ad192e1f25843cdb75f6d89c1c884e0e153c6734602", 0x3e}], 0x4, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}], 0x40, 0x4000000}, 0x2404c054) r6 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x3, 0xa, 0x1, 0x98, 0x0, 0xfffffffffffff42c, 0x8000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xb41c, 0x1, @perf_bp={&(0x7f0000000500), 0x3}, 0x0, 0x6, 0x9, 0x5, 0xffffffffffffffc0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x678}, 0x50) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 3.577888482s ago: executing program 3 (id=308): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x100b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b100003", 0x2d}], 0x1}, 0x0) 3.505459273s ago: executing program 4 (id=309): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x7, 0x0, &(0x7f0000000700)="389ceff69d08b0", 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs={0x1}, 0x3, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x8, 0x5, 0x7, 0x8, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x9b, &(0x7f0000000200)=""/155, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x7, 0xffffffff}, 0x10, 0x1b548, r0, 0x8, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0xc, 0x7}, {0x3, 0x1, 0xa}, {0x1, 0x4, 0x8}, {0x4, 0x5, 0xd, 0xc}, {0x2, 0x1, 0xc, 0x3}, {0x0, 0x5, 0x7, 0x2}, {0x5, 0x4, 0xb, 0x1}, {0x1, 0x5, 0xa, 0x1}], 0x10, 0x4e2d6377}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, 0x0, &(0x7f0000000100)}, 0x20) r8 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r8, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 2.938186948s ago: executing program 3 (id=310): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x4, 0x0, &(0x7f0000000700)="389ceff6", 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs={0x1}, 0x3, 0x0}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x8, 0x5, 0x7, 0x8, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x9b, &(0x7f0000000200)=""/155, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x7, 0xffffffff}, 0x10, 0x1b548, r0, 0x8, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0xc, 0x7}, {0x3, 0x1, 0xa}, {0x1, 0x4, 0x8}, {0x4, 0x5, 0xd, 0xc}, {0x2, 0x1, 0xc, 0x3}, {0x0, 0x5, 0x7, 0x2}, {0x5, 0x4, 0xb, 0x1}, {0x1, 0x5, 0xa, 0x1}], 0x10, 0x4e2d6377}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, 0x0, &(0x7f0000000100)}, 0x20) r8 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r8, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 2.501193678s ago: executing program 2 (id=311): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, 0x0) 2.290962574s ago: executing program 2 (id=312): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0xd69e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r0, 0x0, 0x10122) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x54, &(0x7f0000000680)=ANY=[], 0x128}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x3b}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10001, 0x1}, 0x9049, 0x0, 0x0, 0x6, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x651b3077}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.0403835s ago: executing program 6 (id=313): socket$kcm(0x2, 0x1, 0x84) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x2, 0x47, 0x0, 0x0, 0x8, 0x8000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x20, 0x0, @perf_bp={0x0, 0xe}, 0x4, 0x2, 0x76, 0x2, 0x7b9116d, 0x7fff, 0x9, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xa, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfff}, {}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0xa0, &(0x7f00000003c0)=""/160, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001580)=[{0x2, 0x3, 0xb, 0x4}, {0x3, 0x3, 0x2, 0xc}], 0x10, 0xfff}, 0x94) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000100)=r2, 0x5c) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff7b, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r6, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e372d0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) 1.992881761s ago: executing program 4 (id=314): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x2, 0x47, 0x0, 0x0, 0x8, 0x8000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x20, 0x0, @perf_bp={0x0, 0xe}, 0x4, 0x2, 0x76, 0x2, 0x7b9116d, 0x7fff, 0x9, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xa, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xa0, &(0x7f00000003c0)=""/160, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001540)={0x4, 0xe, 0xfffffffe, 0x89}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001580)=[{0x2, 0x3, 0xb, 0x4}, {0x3, 0x3, 0x2, 0xc}], 0x10, 0xfff}, 0x94) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000100)=r2, 0x5c) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff7b, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r7, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e372d0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) 1.890324963s ago: executing program 3 (id=315): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x2, 0x1, 0x1, &(0x7f0000000180)) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYRES8=r7, @ANYRES16=r7, @ANYRES32], 0xffdd) r8 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0xfa, 0x8, 0xc, 0xd, 0x0, 0x5, 0x0, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x8020, 0x2, 0x9cbd, 0x6, 0xffffffffffff8000, 0x1, 0x6ec, 0x0, 0xd5, 0x0, 0xe6b}, r2, 0x8, r0, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x6) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000040)=r2, 0x4) 1.712988398s ago: executing program 6 (id=316): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000066aef4a000000000000000004000000bf7f1a006601feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 1.593994201s ago: executing program 4 (id=317): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x2, 0x1, 0x1, &(0x7f0000000180)) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r7, &(0x7f00000000c0)=ANY=[@ANYRES8=r7, @ANYRES16=r7, @ANYRES32], 0xffdd) r8 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0xfa, 0x8, 0xc, 0xd, 0x0, 0x5, 0x0, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x8020, 0x2, 0x9cbd, 0x6, 0xffffffffffff8000, 0x1, 0x6ec, 0x0, 0xd5, 0x0, 0xe6b}, r2, 0x8, r0, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x6) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000040)=r2, 0x4) 1.293090708s ago: executing program 2 (id=318): socketpair(0x26, 0x6, 0xff, &(0x7f0000000380)={0xffffffffffffffff}) close(r0) perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x80000000}, 0x0, 0xa, 0x15, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000001c0), 0x5}, 0x2101, 0x1, 0xfffffffe, 0x1, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x80, 0x0, 0x0, 0x8, 0x0, 0x35}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x6b, 0x11, 0xe}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr}, 0x70) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, &(0x7f0000000140)}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 1.099061303s ago: executing program 5 (id=319): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x2, 0x47, 0x0, 0x0, 0x8, 0x8000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x20, 0x0, @perf_bp={0x0, 0xe}, 0x4, 0x2, 0x76, 0x2, 0x7b9116d, 0x7fff, 0x9, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xa, 0x12, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfff}, {}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x2, 0xa0, &(0x7f00000003c0)=""/160, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001540)={0x4, 0xe, 0xfffffffe, 0x89}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001580)=[{0x2, 0x3, 0xb, 0x4}, {0x3, 0x3, 0x2, 0xc}], 0x10, 0xfff}, 0x94) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000100)=r2, 0x5c) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff7b, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r6, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e372d0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) 1.098801883s ago: executing program 3 (id=320): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xb5, 0xfd, 0x8001}]}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000840)=@phonet={0x23, 0x0, 0x0, 0xa}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8941, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0x58, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)={0x1b, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0xe, '\x00', r3, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000000c8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfdef) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03316844268cb89e14f00800", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 720.993812ms ago: executing program 6 (id=321): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7ffffffffffffffd, 0x200000000000000}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, 0x80, &(0x7f0000002640)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1}, 0x844) 720.725912ms ago: executing program 2 (id=322): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x50) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000640)={r0, 0x0, 0x13, 0x0, &(0x7f0000000140)="2258e42356e2f8ffa2d7231f4094b716dcf4da", 0x0, 0x9, 0x0, 0xbb, 0x0, &(0x7f0000000540)="ff300e0dd42bc321a6197a756838da95316bf0a5d992acee8649556a8f770965c53e2efe164bb39a68115ee56082d58da48c94d5aacd4ce6171d038eb2881e8c1ccd78275b6e9923662f490cf9f835c419e839d5d6407b7cd6ad65fd1b945752702d98f0193909288b53bb64dba117844a673ecd27dc7dfc0e1fc667877ff177cbb6465f908672737707aadda9a207f2511c7ba65766ca5b721fa2c58e72dded8cab896080369b3a97e1b066db43c47186404faaba0f48722cd676", 0x0, 0x2, 0x0, 0x1}, 0x50) socket$kcm(0x11, 0xa, 0x300) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r3) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000a00)={&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980)=[{0x0}, {&(0x7f00000007c0)="0a553cb7d08e1e46a67b376848cc631ec9f63c29ac4531c76a2010209d9bfd19e4a7adaafefac4a2d3dbabf3537814e9c699a40dd6d50d8833b9e2b9afdff556511e5bb509687132290250bcd0a2503f88f10749f1de7a18e2e1376b0f0d7a62186ed30c5862b843a9b3eed62ba90b655faf283db50e070f68ccd2e2160a407a1bb787485e50cc89fb7e04569d0eb2fbb08ab69497c3", 0x96}, {0x0}, {&(0x7f0000000900)="1ad1014baf2475e3a98b7cd7cc34ecd664bf83cb6abc75c6a0ccf23ac498bce260687115a023045b7ad192e1f25843cdb75f6d89c1c884e0e153c6734602", 0x3e}], 0x4, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}], 0x40, 0x4000000}, 0x2404c054) r6 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x3, 0xa, 0x1, 0x98, 0x0, 0xfffffffffffff42c, 0x8000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xb41c, 0x1, @perf_bp={&(0x7f0000000500), 0x3}, 0x0, 0x6, 0x9, 0x5, 0xffffffffffffffc0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x678}, 0x50) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 684.378593ms ago: executing program 4 (id=323): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) 356.644731ms ago: executing program 3 (id=324): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x7, 0x0, &(0x7f0000000700)="389ceff69d08b0", 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs={0x1}, 0x3, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x8, 0x5, 0x7, 0x8, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x9b, &(0x7f0000000200)=""/155, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x7, 0xffffffff}, 0x10, 0x1b548, r0, 0x8, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0xc, 0x7}, {0x3, 0x1, 0xa}, {0x1, 0x4, 0x8}, {0x4, 0x5, 0xd, 0xc}, {0x2, 0x1, 0xc, 0x3}, {0x0, 0x5, 0x7, 0x2}, {0x5, 0x4, 0xb, 0x1}, {0x1, 0x5, 0xa, 0x1}], 0x10, 0x4e2d6377}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, 0x0, &(0x7f0000000100)}, 0x20) r8 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r8, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 283.033083ms ago: executing program 6 (id=325): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x4, 0x0, &(0x7f0000000700)="389ceff6", 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000002c0)={&(0x7f00000000c0)=@abs={0x1}, 0x3, 0x0}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x8, 0x5, 0x7, 0x8, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x9b, &(0x7f0000000200)=""/155, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6, 0x7, 0xffffffff}, 0x10, 0x1b548, r0, 0x8, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0xc, 0x7}, {0x3, 0x1, 0xa}, {0x1, 0x4, 0x8}, {0x4, 0x5, 0xd, 0xc}, {0x2, 0x1, 0xc, 0x3}, {0x0, 0x5, 0x7, 0x2}, {0x5, 0x4, 0xb, 0x1}, {0x1, 0x5, 0xa, 0x1}], 0x10, 0x4e2d6377}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, 0x0, &(0x7f0000000100)}, 0x20) r8 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r8, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=326): socket$kcm(0x2, 0x1, 0x84) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x2, 0x47, 0x0, 0x0, 0x8, 0x8000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x20, 0x0, @perf_bp={0x0, 0xe}, 0x4, 0x2, 0x76, 0x2, 0x7b9116d, 0x7fff, 0x9, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xa, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfff}, {}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0xa0, &(0x7f00000003c0)=""/160, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001580)=[{0x2, 0x3, 0xb, 0x4}, {0x3, 0x3, 0x2, 0xc}], 0x10, 0xfff}, 0x94) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000100)=r2, 0x5c) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff7b, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r6, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e372d0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): mes ready [ 55.481276][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.488321][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.495973][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.503861][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.514724][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.538033][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.549310][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.557659][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.566417][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.597598][ T4199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.608185][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.620578][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.628190][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.637571][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.645630][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.653219][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.661590][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.670411][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.679154][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.687353][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.695947][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.704522][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.713135][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.722459][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.731384][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.739703][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.747809][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.756306][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.764601][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.777150][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.785057][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.796804][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.805206][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.817022][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.835204][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.844687][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.853457][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.876067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.890282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.904746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.915469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.934315][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.968365][ T4189] device veth0_vlan entered promiscuous mode [ 55.986372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.014238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.022910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.039145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.056262][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.063339][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.072811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.081736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.092811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.101245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.109106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.123321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.131601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.165780][ T4197] device veth0_vlan entered promiscuous mode [ 56.173089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.183391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.191401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.200541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.209038][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.216073][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.223659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.233526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.242040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.250317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.257669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.265284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.272720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.282512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.290864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.300269][ T4189] device veth1_vlan entered promiscuous mode [ 56.311223][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.318408][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 56.323614][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.331348][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 56.331576][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 56.337456][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 56.348277][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 56.357303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.370409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.384226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.397125][ T4197] device veth1_vlan entered promiscuous mode [ 56.436972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.446129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.455628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.466612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.475554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.484197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.492979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.503147][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.522885][ T4189] device veth0_macvtap entered promiscuous mode [ 56.533707][ T4189] device veth1_macvtap entered promiscuous mode [ 56.543040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.560943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.574000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.584127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.606129][ T4197] device veth0_macvtap entered promiscuous mode [ 56.647163][ T4187] device veth0_vlan entered promiscuous mode [ 56.655070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.667473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.676827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.686866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.695507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.703896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.713498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.723635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.732216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.740208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.747708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.761412][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.773876][ T4197] device veth1_macvtap entered promiscuous mode [ 56.786042][ T4187] device veth1_vlan entered promiscuous mode [ 56.796476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.806668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.827160][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.853531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.865691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.894677][ T4199] device veth0_vlan entered promiscuous mode [ 56.903735][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.912821][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.922095][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.930987][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.949506][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.960359][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.971106][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.980151][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.988707][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.996772][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.005127][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.013529][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.022398][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.035423][ T4199] device veth1_vlan entered promiscuous mode [ 57.045883][ T4187] device veth0_macvtap entered promiscuous mode [ 57.057699][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.068278][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.079795][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.087101][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.094924][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.102796][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.112342][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.120549][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.129969][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.145821][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.163437][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.174125][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.181939][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.200079][ T4197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.209518][ T4197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.218209][ T4197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.227016][ T4197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.245567][ T4199] device veth0_macvtap entered promiscuous mode [ 57.253784][ T4187] device veth1_macvtap entered promiscuous mode [ 57.282567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.291650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.300307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.309221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.323387][ T4199] device veth1_macvtap entered promiscuous mode [ 57.355322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.363769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.373017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.390561][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.401613][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.411678][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.422792][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.434635][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.458422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.469945][ T483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.475114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.477853][ T483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.488529][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.504601][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.515790][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.526439][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.537453][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.552539][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.563734][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.573844][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.584605][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.594934][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.605648][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.617916][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.632078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.641485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.650262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.658908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.666917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.676288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.684989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.693635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.701556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.711799][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.720711][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.729492][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.738169][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.760040][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.770637][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.781217][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.791790][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.801628][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.812044][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.823136][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.834814][ T4188] device veth0_vlan entered promiscuous mode [ 57.857708][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.866403][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.876721][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.885079][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.902823][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.911812][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.921197][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.930529][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.949831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.969732][ T4188] device veth1_vlan entered promiscuous mode [ 58.003930][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.014433][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.041558][ T483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.041616][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.057066][ T483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.073506][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.088897][ T4188] device veth0_macvtap entered promiscuous mode [ 58.099258][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.107937][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.144615][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.146713][ T4188] device veth1_macvtap entered promiscuous mode [ 58.161313][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.172676][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.183895][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.195710][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.260915][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.274431][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.289728][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.297227][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.317867][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.328565][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.338386][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.342183][ T4267] Zero length message leads to an empty skb [ 58.356757][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.369136][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.386421][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.388390][ T4268] netlink: 'syz.2.3': attribute type 3 has an invalid length. [ 58.399769][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 58.418383][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.426001][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 58.428767][ T4268] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3'. [ 58.449059][ T483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.457444][ T483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.466303][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 58.475908][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.483409][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 58.490599][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.494502][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 58.514722][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.521231][ C1] hrtimer: interrupt took 89703 ns [ 58.527375][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.542803][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.545291][ T4265] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3'. [ 58.554753][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.580379][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.595545][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.608358][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.626066][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.638448][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.655318][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.688558][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.698247][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.712916][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.765287][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.776129][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.793221][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.802357][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.818001][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.836202][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.874655][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.984425][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.004419][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.026722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.074923][ T483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.085938][ T483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.101895][ T4279] netlink: 'syz.0.7': attribute type 12 has an invalid length. [ 59.124711][ T4279] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7'. [ 59.139605][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.242927][ T4276] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.5'. [ 59.281347][ T4276] netlink: 21192 bytes leftover after parsing attributes in process `syz.4.5'. [ 59.310742][ T4276] tipc: Started in network mode [ 59.341744][ T4276] tipc: Node identity 1a, cluster identity 4711 [ 59.368406][ T4276] tipc: Node number set to 26 [ 59.522331][ T4294] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.9'. [ 59.564552][ T4294] netlink: 21192 bytes leftover after parsing attributes in process `syz.0.9'. [ 59.591139][ T4294] tipc: Started in network mode [ 59.596016][ T4294] tipc: Node identity 1a, cluster identity 4711 [ 59.604059][ T4294] tipc: Node number set to 26 [ 59.947186][ T4303] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.12'. [ 59.969997][ T4303] netlink: 21192 bytes leftover after parsing attributes in process `syz.0.12'. [ 60.150171][ T4305] netlink: 'syz.4.13': attribute type 10 has an invalid length. [ 60.157975][ T4305] netlink: 2 bytes leftover after parsing attributes in process `syz.4.13'. [ 60.219856][ T4305] device bond0 entered promiscuous mode [ 60.225511][ T4305] device bond_slave_0 entered promiscuous mode [ 60.260453][ T4305] device bond_slave_1 entered promiscuous mode [ 60.346533][ T4305] bridge0: port 3(bond0) entered blocking state [ 60.419333][ T4305] bridge0: port 3(bond0) entered disabled state [ 60.477460][ T4316] Bluetooth: hci1: command 0x0419 tx timeout [ 60.485394][ T4316] Bluetooth: hci4: command 0x0419 tx timeout [ 60.561101][ T4316] Bluetooth: hci2: command 0x0419 tx timeout [ 60.573052][ T4316] Bluetooth: hci3: command 0x0419 tx timeout [ 60.607504][ T4305] bridge0: port 3(bond0) entered blocking state [ 60.614472][ T4305] bridge0: port 3(bond0) entered forwarding state [ 60.661089][ T4316] Bluetooth: hci0: command 0x0419 tx timeout [ 60.924727][ T4305] syz.4.13 (4305) used greatest stack depth: 20384 bytes left [ 61.512247][ T4338] netlink: 'syz.0.22': attribute type 3 has an invalid length. [ 61.585610][ T4340] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 62.649354][ T4360] tipc: Started in network mode [ 62.662749][ T4360] tipc: Node identity 1a, cluster identity 4711 [ 62.703567][ T4360] tipc: Node number set to 26 [ 65.536119][ T4396] __nla_validate_parse: 4 callbacks suppressed [ 65.536161][ T4396] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.35'. [ 65.652890][ T4396] netlink: 21192 bytes leftover after parsing attributes in process `syz.3.35'. [ 67.375189][ T4413] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.39'. [ 67.404148][ T4413] netlink: 21192 bytes leftover after parsing attributes in process `syz.2.39'. [ 67.419146][ T4413] tipc: Started in network mode [ 67.458661][ T4413] tipc: Node identity 1a, cluster identity 4711 [ 67.478673][ T4413] tipc: Node number set to 26 [ 71.144750][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.151291][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.551957][ T4450] syz.4.49 (4450) used greatest stack depth: 19568 bytes left [ 78.331304][ T4475] chnl_net:caif_netlink_parms(): no params data found [ 78.433512][ T4484] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.58'. [ 78.551185][ T4485] netlink: 'syz.3.57': attribute type 29 has an invalid length. [ 78.579598][ T4485] netlink: 'syz.3.57': attribute type 29 has an invalid length. [ 78.644376][ T4484] netlink: 21192 bytes leftover after parsing attributes in process `syz.2.58'. [ 78.885362][ T4494] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.61'. [ 78.910803][ T4494] netlink: 21192 bytes leftover after parsing attributes in process `syz.2.61'. [ 78.969334][ T4475] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.976432][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.029554][ T4475] device bridge_slave_0 entered promiscuous mode [ 79.077901][ T4475] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.124470][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.132562][ T4475] device bridge_slave_1 entered promiscuous mode [ 79.159368][ T4475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.171011][ T4475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.271560][ T4477] chnl_net:caif_netlink_parms(): no params data found [ 79.334839][ T4503] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.62'. [ 80.040231][ T4503] netlink: 21192 bytes leftover after parsing attributes in process `syz.2.62'. [ 80.067110][ T4475] team0: Port device team_slave_0 added [ 80.077053][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 80.137979][ T4475] team0: Port device team_slave_1 added [ 80.158913][ T4191] Bluetooth: hci6: command 0x0409 tx timeout [ 80.214339][ T4475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.228711][ T4475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.256310][ T4475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.304648][ T4475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.314118][ T4475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.340282][ T4475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.363843][ T4477] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.371501][ T4477] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.380751][ T4477] device bridge_slave_0 entered promiscuous mode [ 80.413053][ T4477] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.421454][ T4477] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.446314][ T4477] device bridge_slave_1 entered promiscuous mode [ 80.460012][ T4475] device hsr_slave_0 entered promiscuous mode [ 80.470971][ T4475] device hsr_slave_1 entered promiscuous mode [ 80.486846][ T4475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.517867][ T4475] Cannot create hsr debugfs directory [ 80.582909][ T4477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.597929][ T4477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.690877][ T4536] netlink: 'syz.2.70': attribute type 3 has an invalid length. [ 80.699078][ T4536] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.70'. [ 80.743406][ T4539] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.70'. [ 80.797618][ T4477] team0: Port device team_slave_0 added [ 80.838181][ T4477] team0: Port device team_slave_1 added [ 80.852154][ T4539] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 80.866826][ T4539] CPU: 0 PID: 4539 Comm: syz.2.70 Not tainted syzkaller #0 [ 80.874036][ T4539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 80.884105][ T4539] Call Trace: [ 80.887388][ T4539] [ 80.890321][ T4539] dump_stack_lvl+0x188/0x250 [ 80.895013][ T4539] ? show_regs_print_info+0x20/0x20 [ 80.900211][ T4539] ? load_image+0x410/0x410 [ 80.904726][ T4539] sysfs_warn_dup+0x8a/0xa0 [ 80.909232][ T4539] sysfs_do_create_link_sd+0xc0/0x110 [ 80.914606][ T4539] device_add+0x83b/0x1050 [ 80.919024][ T4539] wiphy_register+0x1e74/0x2c40 [ 80.923890][ T4539] ? cfg80211_event_work+0x40/0x40 [ 80.929004][ T4539] ? minstrel_ht_alloc+0x807/0x980 [ 80.934114][ T4539] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 80.940178][ T4539] ieee80211_register_hw+0x2a03/0x3a60 [ 80.945636][ T4539] ? ieee80211_register_hw+0xb21/0x3a60 [ 80.951178][ T4539] ? ieee80211_tasklet_handler+0x20/0x20 [ 80.956808][ T4539] ? rcu_is_watching+0x11/0xa0 [ 80.961563][ T4539] ? hrtimer_init+0x10c/0x220 [ 80.966234][ T4539] mac80211_hwsim_new_radio+0x209d/0x4050 [ 80.971963][ T4539] hwsim_new_radio_nl+0xa7d/0xc50 [ 80.976989][ T4539] genl_rcv_msg+0xd0b/0xfa0 [ 80.981495][ T4539] ? genl_bind+0x370/0x370 [ 80.985912][ T4539] ? __dev_queue_xmit+0x1b64/0x2e50 [ 80.991104][ T4539] ? verify_lock_unused+0x140/0x140 [ 80.996311][ T4539] ? dev_queue_xmit+0x20/0x20 [ 81.000980][ T4539] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 81.007311][ T4539] netlink_rcv_skb+0x1e9/0x430 [ 81.012069][ T4539] ? genl_bind+0x370/0x370 [ 81.016478][ T4539] ? netlink_ack+0xb10/0xb10 [ 81.021068][ T4539] ? down_read+0x1aa/0x2e0 [ 81.025475][ T4539] genl_rcv+0x24/0x40 [ 81.029457][ T4539] netlink_unicast+0x78f/0x940 [ 81.034235][ T4539] netlink_sendmsg+0x8ba/0xbe0 [ 81.039003][ T4539] ? netlink_getsockopt+0x570/0x570 [ 81.044200][ T4539] ? aa_sock_msg_perm+0x94/0x150 [ 81.049132][ T4539] ? apparmor_socket_sendmsg+0x88/0x230 [ 81.054671][ T4539] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 81.059948][ T4539] ? security_socket_sendmsg+0x7c/0xa0 [ 81.065403][ T4539] ? netlink_getsockopt+0x570/0x570 [ 81.070604][ T4539] ____sys_sendmsg+0x5be/0x8f0 [ 81.075375][ T4539] ? __sys_sendmsg_sock+0x30/0x30 [ 81.080399][ T4539] ? import_iovec+0x6f/0xa0 [ 81.084900][ T4539] ___sys_sendmsg+0x236/0x2e0 [ 81.089578][ T4539] ? __sys_sendmsg+0x290/0x290 [ 81.094346][ T4539] ? __lock_acquire+0x7b50/0x7b50 [ 81.099361][ T4539] ? __might_fault+0xb3/0x110 [ 81.104053][ T4539] __se_sys_sendmsg+0x1b7/0x2a0 [ 81.108897][ T4539] ? __x64_sys_sendmsg+0x80/0x80 [ 81.113824][ T4539] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.119810][ T4539] ? lockdep_hardirqs_on+0x94/0x140 [ 81.125006][ T4539] do_syscall_64+0x4c/0xa0 [ 81.129416][ T4539] ? clear_bhb_loop+0x30/0x80 [ 81.134085][ T4539] ? clear_bhb_loop+0x30/0x80 [ 81.138757][ T4539] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.144652][ T4539] RIP: 0033:0x7fcb6be30e99 [ 81.149070][ T4539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.168673][ T4539] RSP: 002b:00007fcb6a068028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.177086][ T4539] RAX: ffffffffffffffda RBX: 00007fcb6c0b9090 RCX: 00007fcb6be30e99 [ 81.185050][ T4539] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 81.193014][ T4539] RBP: 00007fcb6bec6eaf R08: 0000000000000000 R09: 0000000000000000 [ 81.200980][ T4539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.208950][ T4539] R13: 00007fcb6c0b9128 R14: 00007fcb6c0b9090 R15: 00007ffd7a1a7bf8 [ 81.216929][ T4539] [ 81.308847][ T4477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.315815][ T4477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.446398][ T4477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.729551][ T1325] cfg80211: failed to load regulatory.db [ 81.805922][ T4477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.813863][ T4477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.849671][ T4477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.293369][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 82.301875][ T7] Bluetooth: hci6: command 0x041b tx timeout [ 82.392781][ T4477] device hsr_slave_0 entered promiscuous mode [ 82.400545][ T4477] device hsr_slave_1 entered promiscuous mode [ 82.407009][ T4477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.414983][ T4477] Cannot create hsr debugfs directory [ 82.467725][ T4475] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 82.477337][ T4475] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 82.506948][ T4475] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 82.538363][ T4475] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 82.852008][ T4475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.909096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.928991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.967712][ T4475] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.991709][ T4477] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.017966][ T4477] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.048421][ T4477] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.078269][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.094527][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.122683][ T483] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.129809][ T483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.168157][ T4477] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.192232][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.213149][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.247528][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.280469][ T483] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.287571][ T483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.340266][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.372093][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.414299][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.442094][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.471075][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.506577][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.530234][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.573679][ T4475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.616301][ T4475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.678675][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.704630][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.739332][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.789245][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.835690][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.918214][ T4477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.983271][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.001400][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.051973][ T4477] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.089181][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.109443][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.138343][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.145427][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.182193][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.213309][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.244141][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.251232][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.306742][ T4475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.313801][ T4191] Bluetooth: hci5: command 0x040f tx timeout [ 84.358102][ T4477] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.390178][ T4191] Bluetooth: hci6: command 0x040f tx timeout [ 84.403791][ T4477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.444867][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.455499][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.497100][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.515896][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.538686][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.572363][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.641709][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.669177][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.699068][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.730706][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.740274][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.749054][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.757362][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.765988][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.782084][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.123567][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.151371][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.187353][ T4477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.298853][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.327828][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.354377][ T4475] device veth0_vlan entered promiscuous mode [ 85.382490][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.411560][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.455796][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.483926][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.525419][ T4475] device veth1_vlan entered promiscuous mode [ 85.597707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.617989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.670166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.702983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.734744][ T4475] device veth0_macvtap entered promiscuous mode [ 85.774754][ T4475] device veth1_macvtap entered promiscuous mode [ 85.859071][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.918503][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.928355][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.998546][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.068620][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.139006][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.219068][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.312237][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.388499][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.400443][ T4318] Bluetooth: hci5: command 0x0419 tx timeout [ 86.470045][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.482914][ T4318] Bluetooth: hci6: command 0x0419 tx timeout [ 86.561806][ T4475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.940465][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.958829][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.966889][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.977233][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.988314][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.007910][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.031155][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.053618][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.064186][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.074849][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.085354][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.095988][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.106075][ T4475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.117577][ T4475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.128902][ T4475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.140354][ T4475] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.149952][ T4475] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.158807][ T4475] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.167535][ T4475] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.191317][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.205561][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.241500][ T4477] device veth0_vlan entered promiscuous mode [ 89.265810][ T4477] device veth1_vlan entered promiscuous mode [ 89.356309][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.375709][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.395864][ T4580] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.77'. [ 89.409308][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.425068][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.433758][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.442230][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.450533][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.475686][ T4580] netlink: 21192 bytes leftover after parsing attributes in process `syz.2.77'. [ 89.528373][ T4477] device veth0_macvtap entered promiscuous mode [ 89.591275][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.616066][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.653006][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.676495][ T4477] device veth1_macvtap entered promiscuous mode [ 89.715433][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.731002][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.776454][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.819248][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.846014][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.855743][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.870651][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.881648][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.891739][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.902732][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.913894][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.924689][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.934524][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.946934][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.956994][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.974667][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.986114][ T4477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.003006][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.016977][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.036233][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.047765][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.094833][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.113724][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.126888][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.136882][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.147492][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.157654][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.168148][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.180910][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.184508][ T4597] netlink: 'syz.4.82': attribute type 3 has an invalid length. [ 90.196449][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.204449][ T4598] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.81'. [ 90.217266][ T4477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.218066][ T4597] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.82'. [ 90.229117][ T4477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.253839][ T4477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.268231][ T4598] netlink: 21192 bytes leftover after parsing attributes in process `syz.3.81'. [ 90.284538][ T4599] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.82'. [ 90.303983][ T4599] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 90.398002][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.449598][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.490192][ T4477] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.507268][ T4477] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.519186][ T4477] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.528208][ T4477] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.584844][ T483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.598710][ T483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.675209][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.702028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.787990][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.928711][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.965484][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.381400][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.578008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.628922][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.638400][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.647912][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.673941][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.909358][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.331495][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.338453][ T4634] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.88'. [ 92.377851][ T4634] netlink: 21192 bytes leftover after parsing attributes in process `syz.6.88'. [ 92.397565][ T4634] tipc: Started in network mode [ 92.412979][ T4634] tipc: Node identity 1a, cluster identity 4711 [ 92.430837][ T4634] tipc: Node number set to 26 [ 92.448423][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.578186][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.822494][ T4663] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.93'. [ 92.924351][ T4663] netlink: 21192 bytes leftover after parsing attributes in process `syz.4.93'. [ 92.995485][ T144] tipc: Left network mode [ 93.094176][ T4666] netlink: 'syz.4.94': attribute type 3 has an invalid length. [ 93.170927][ T4669] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 93.202873][ T4669] CPU: 0 PID: 4669 Comm: syz.4.94 Not tainted syzkaller #0 [ 93.210090][ T4669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 93.220144][ T4669] Call Trace: [ 93.223418][ T4669] [ 93.226346][ T4669] dump_stack_lvl+0x188/0x250 [ 93.231031][ T4669] ? show_regs_print_info+0x20/0x20 [ 93.236237][ T4669] ? load_image+0x410/0x410 [ 93.240756][ T4669] sysfs_warn_dup+0x8a/0xa0 [ 93.245268][ T4669] sysfs_do_create_link_sd+0xc0/0x110 [ 93.250647][ T4669] device_add+0x83b/0x1050 [ 93.255072][ T4669] wiphy_register+0x1e74/0x2c40 [ 93.259947][ T4669] ? cfg80211_event_work+0x40/0x40 [ 93.265058][ T4669] ? minstrel_ht_alloc+0x807/0x980 [ 93.270176][ T4669] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 93.276255][ T4669] ieee80211_register_hw+0x2a03/0x3a60 [ 93.281724][ T4669] ? ieee80211_register_hw+0xb21/0x3a60 [ 93.287279][ T4669] ? ieee80211_tasklet_handler+0x20/0x20 [ 93.292921][ T4669] ? rcu_is_watching+0x11/0xa0 [ 93.297693][ T4669] ? hrtimer_init+0x10c/0x220 [ 93.302377][ T4669] mac80211_hwsim_new_radio+0x209d/0x4050 [ 93.308120][ T4669] hwsim_new_radio_nl+0xa7d/0xc50 [ 93.313161][ T4669] genl_rcv_msg+0xd0b/0xfa0 [ 93.317679][ T4669] ? genl_bind+0x370/0x370 [ 93.322107][ T4669] ? __dev_queue_xmit+0x1b64/0x2e50 [ 93.327313][ T4669] ? verify_lock_unused+0x140/0x140 [ 93.332535][ T4669] ? dev_queue_xmit+0x20/0x20 [ 93.337216][ T4669] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 93.343557][ T4669] netlink_rcv_skb+0x1e9/0x430 [ 93.348314][ T4669] ? genl_bind+0x370/0x370 [ 93.352714][ T4669] ? netlink_ack+0xb10/0xb10 [ 93.357297][ T4669] ? down_read+0x1aa/0x2e0 [ 93.361704][ T4669] genl_rcv+0x24/0x40 [ 93.365667][ T4669] netlink_unicast+0x78f/0x940 [ 93.370420][ T4669] netlink_sendmsg+0x8ba/0xbe0 [ 93.375174][ T4669] ? netlink_getsockopt+0x570/0x570 [ 93.380351][ T4669] ? aa_sock_msg_perm+0x94/0x150 [ 93.385271][ T4669] ? apparmor_socket_sendmsg+0x88/0x230 [ 93.390798][ T4669] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 93.396071][ T4669] ? security_socket_sendmsg+0x7c/0xa0 [ 93.401512][ T4669] ? netlink_getsockopt+0x570/0x570 [ 93.406692][ T4669] ____sys_sendmsg+0x5be/0x8f0 [ 93.411443][ T4669] ? __sys_sendmsg_sock+0x30/0x30 [ 93.416459][ T4669] ? import_iovec+0x6f/0xa0 [ 93.420949][ T4669] ___sys_sendmsg+0x236/0x2e0 [ 93.425615][ T4669] ? __sys_sendmsg+0x290/0x290 [ 93.430369][ T4669] ? __lock_acquire+0x7b50/0x7b50 [ 93.435376][ T4669] ? __might_fault+0xb3/0x110 [ 93.440052][ T4669] __se_sys_sendmsg+0x1b7/0x2a0 [ 93.444889][ T4669] ? __x64_sys_sendmsg+0x80/0x80 [ 93.449817][ T4669] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 93.455788][ T4669] ? lockdep_hardirqs_on+0x94/0x140 [ 93.460973][ T4669] do_syscall_64+0x4c/0xa0 [ 93.465371][ T4669] ? clear_bhb_loop+0x30/0x80 [ 93.470031][ T4669] ? clear_bhb_loop+0x30/0x80 [ 93.474689][ T4669] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.480563][ T4669] RIP: 0033:0x7f5287e18e99 [ 93.484962][ T4669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.504550][ T4669] RSP: 002b:00007f5286050028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.512948][ T4669] RAX: ffffffffffffffda RBX: 00007f52880a1090 RCX: 00007f5287e18e99 [ 93.520901][ T4669] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 93.528855][ T4669] RBP: 00007f5287eaeeaf R08: 0000000000000000 R09: 0000000000000000 [ 93.536816][ T4669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.544765][ T4669] R13: 00007f52880a1128 R14: 00007f52880a1090 R15: 00007ffe6378fea8 [ 93.552730][ T4669] [ 94.410662][ T4697] __nla_validate_parse: 3 callbacks suppressed [ 94.410676][ T4697] netlink: 21192 bytes leftover after parsing attributes in process `syz.6.102'. [ 94.781602][ T4716] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.105'. [ 94.865302][ T4716] netlink: 21192 bytes leftover after parsing attributes in process `syz.6.105'. [ 95.030613][ T4724] netlink: 'syz.2.108': attribute type 3 has an invalid length. [ 95.038388][ T4724] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.108'. [ 95.091976][ T4731] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.108'. [ 95.152527][ T4731] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 95.178772][ T4731] CPU: 0 PID: 4731 Comm: syz.2.108 Not tainted syzkaller #0 [ 95.186071][ T4731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 95.196115][ T4731] Call Trace: [ 95.199384][ T4731] [ 95.202299][ T4731] dump_stack_lvl+0x188/0x250 [ 95.206965][ T4731] ? show_regs_print_info+0x20/0x20 [ 95.212148][ T4731] ? load_image+0x410/0x410 [ 95.216643][ T4731] sysfs_warn_dup+0x8a/0xa0 [ 95.221128][ T4731] sysfs_do_create_link_sd+0xc0/0x110 [ 95.226485][ T4731] device_add+0x83b/0x1050 [ 95.230891][ T4731] wiphy_register+0x1e74/0x2c40 [ 95.235742][ T4731] ? cfg80211_event_work+0x40/0x40 [ 95.240840][ T4731] ? minstrel_ht_alloc+0x807/0x980 [ 95.245940][ T4731] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 95.251991][ T4731] ieee80211_register_hw+0x2a03/0x3a60 [ 95.257439][ T4731] ? ieee80211_register_hw+0xb21/0x3a60 [ 95.262970][ T4731] ? ieee80211_tasklet_handler+0x20/0x20 [ 95.268590][ T4731] ? rcu_is_watching+0x11/0xa0 [ 95.273337][ T4731] ? hrtimer_init+0x10c/0x220 [ 95.277996][ T4731] mac80211_hwsim_new_radio+0x209d/0x4050 [ 95.283713][ T4731] hwsim_new_radio_nl+0xa7d/0xc50 [ 95.288730][ T4731] genl_rcv_msg+0xd0b/0xfa0 [ 95.293227][ T4731] ? genl_bind+0x370/0x370 [ 95.297631][ T4731] ? __dev_queue_xmit+0x1b64/0x2e50 [ 95.302815][ T4731] ? verify_lock_unused+0x140/0x140 [ 95.308013][ T4731] ? dev_queue_xmit+0x20/0x20 [ 95.312674][ T4731] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 95.319001][ T4731] netlink_rcv_skb+0x1e9/0x430 [ 95.323751][ T4731] ? genl_bind+0x370/0x370 [ 95.328155][ T4731] ? netlink_ack+0xb10/0xb10 [ 95.332734][ T4731] ? down_read+0x1aa/0x2e0 [ 95.337139][ T4731] genl_rcv+0x24/0x40 [ 95.341101][ T4731] netlink_unicast+0x78f/0x940 [ 95.345854][ T4731] netlink_sendmsg+0x8ba/0xbe0 [ 95.350609][ T4731] ? netlink_getsockopt+0x570/0x570 [ 95.355786][ T4731] ? aa_sock_msg_perm+0x94/0x150 [ 95.360708][ T4731] ? apparmor_socket_sendmsg+0x88/0x230 [ 95.366248][ T4731] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 95.371532][ T4731] ? security_socket_sendmsg+0x7c/0xa0 [ 95.376982][ T4731] ? netlink_getsockopt+0x570/0x570 [ 95.382173][ T4731] ____sys_sendmsg+0x5be/0x8f0 [ 95.386936][ T4731] ? __sys_sendmsg_sock+0x30/0x30 [ 95.391971][ T4731] ? import_iovec+0x6f/0xa0 [ 95.396466][ T4731] ___sys_sendmsg+0x236/0x2e0 [ 95.401134][ T4731] ? __sys_sendmsg+0x290/0x290 [ 95.405889][ T4731] ? __lock_acquire+0x7b50/0x7b50 [ 95.410897][ T4731] ? __might_fault+0xb3/0x110 [ 95.415575][ T4731] __se_sys_sendmsg+0x1b7/0x2a0 [ 95.420409][ T4731] ? __x64_sys_sendmsg+0x80/0x80 [ 95.425328][ T4731] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 95.431304][ T4731] ? lockdep_hardirqs_on+0x94/0x140 [ 95.436491][ T4731] do_syscall_64+0x4c/0xa0 [ 95.440890][ T4731] ? clear_bhb_loop+0x30/0x80 [ 95.445552][ T4731] ? clear_bhb_loop+0x30/0x80 [ 95.450212][ T4731] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.456085][ T4731] RIP: 0033:0x7fcb6be30e99 [ 95.460495][ T4731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.480082][ T4731] RSP: 002b:00007fcb6a068028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.488483][ T4731] RAX: ffffffffffffffda RBX: 00007fcb6c0b9090 RCX: 00007fcb6be30e99 [ 95.496437][ T4731] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 95.504392][ T4731] RBP: 00007fcb6bec6eaf R08: 0000000000000000 R09: 0000000000000000 [ 95.512345][ T4731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.520299][ T4731] R13: 00007fcb6c0b9128 R14: 00007fcb6c0b9090 R15: 00007ffd7a1a7bf8 [ 95.528261][ T4731] [ 96.247330][ T144] device hsr_slave_0 left promiscuous mode [ 96.283260][ T144] device hsr_slave_1 left promiscuous mode [ 96.308403][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.338639][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.356075][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.387403][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.419928][ T144] device bridge_slave_1 left promiscuous mode [ 96.440219][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.474925][ T144] device bridge_slave_0 left promiscuous mode [ 96.485732][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.549154][ T144] device hsr_slave_0 left promiscuous mode [ 96.573068][ T144] device hsr_slave_1 left promiscuous mode [ 96.596141][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.613667][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.622021][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.638596][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.666382][ T144] device bridge_slave_1 left promiscuous mode [ 96.691999][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.722755][ T144] device bridge_slave_0 left promiscuous mode [ 96.743998][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.817034][ T144] device veth1_macvtap left promiscuous mode [ 96.830531][ T144] device veth0_macvtap left promiscuous mode [ 96.844902][ T144] device veth1_vlan left promiscuous mode [ 96.855550][ T144] device veth0_vlan left promiscuous mode [ 96.894686][ T144] device veth1_macvtap left promiscuous mode [ 96.907627][ T144] device veth0_macvtap left promiscuous mode [ 96.916184][ T144] device veth1_vlan left promiscuous mode [ 96.931866][ T144] device veth0_vlan left promiscuous mode [ 97.188799][ T4769] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.116'. [ 97.336593][ T144] team0 (unregistering): Port device team_slave_1 removed [ 97.352417][ T144] team0 (unregistering): Port device team_slave_0 removed [ 97.374382][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.387590][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.447185][ T144] bond0 (unregistering): Released all slaves [ 97.574744][ T144] team0 (unregistering): Port device team_slave_1 removed [ 97.592430][ T144] team0 (unregistering): Port device team_slave_0 removed [ 97.604313][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.621937][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.676024][ T144] bond0 (unregistering): Released all slaves [ 97.745223][ T4769] netlink: 21192 bytes leftover after parsing attributes in process `syz.6.116'. [ 98.044936][ T4782] netlink: 'syz.2.121': attribute type 3 has an invalid length. [ 98.071221][ T4782] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.121'. [ 98.146089][ T4786] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.121'. [ 98.231822][ T4786] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 98.255626][ T4786] CPU: 0 PID: 4786 Comm: syz.2.121 Not tainted syzkaller #0 [ 98.262930][ T4786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.272982][ T4786] Call Trace: [ 98.276261][ T4786] [ 98.279189][ T4786] dump_stack_lvl+0x188/0x250 [ 98.283873][ T4786] ? show_regs_print_info+0x20/0x20 [ 98.289071][ T4786] ? load_image+0x410/0x410 [ 98.293591][ T4786] sysfs_warn_dup+0x8a/0xa0 [ 98.298096][ T4786] sysfs_do_create_link_sd+0xc0/0x110 [ 98.303467][ T4786] device_add+0x83b/0x1050 [ 98.307890][ T4786] wiphy_register+0x1e74/0x2c40 [ 98.312759][ T4786] ? cfg80211_event_work+0x40/0x40 [ 98.317869][ T4786] ? minstrel_ht_alloc+0x807/0x980 [ 98.322985][ T4786] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 98.329057][ T4786] ieee80211_register_hw+0x2a03/0x3a60 [ 98.334525][ T4786] ? ieee80211_register_hw+0xb21/0x3a60 [ 98.340076][ T4786] ? ieee80211_tasklet_handler+0x20/0x20 [ 98.345710][ T4786] ? rcu_is_watching+0x11/0xa0 [ 98.350479][ T4786] ? hrtimer_init+0x10c/0x220 [ 98.355158][ T4786] mac80211_hwsim_new_radio+0x209d/0x4050 [ 98.360895][ T4786] hwsim_new_radio_nl+0xa7d/0xc50 [ 98.365930][ T4786] genl_rcv_msg+0xd0b/0xfa0 [ 98.370440][ T4786] ? genl_bind+0x370/0x370 [ 98.374863][ T4786] ? __dev_queue_xmit+0x1b64/0x2e50 [ 98.380058][ T4786] ? verify_lock_unused+0x140/0x140 [ 98.385253][ T4786] ? perf_trace_lock_acquire+0xed/0x3f0 [ 98.390801][ T4786] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 98.397391][ T4786] ? dev_queue_xmit+0x20/0x20 [ 98.402067][ T4786] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 98.408405][ T4786] netlink_rcv_skb+0x1e9/0x430 [ 98.413167][ T4786] ? genl_bind+0x370/0x370 [ 98.417581][ T4786] ? netlink_ack+0xb10/0xb10 [ 98.422177][ T4786] ? down_read+0x1aa/0x2e0 [ 98.426622][ T4786] genl_rcv+0x24/0x40 [ 98.430596][ T4786] netlink_unicast+0x78f/0x940 [ 98.435366][ T4786] netlink_sendmsg+0x8ba/0xbe0 [ 98.440140][ T4786] ? netlink_getsockopt+0x570/0x570 [ 98.445331][ T4786] ? aa_sock_msg_perm+0x94/0x150 [ 98.450264][ T4786] ? apparmor_socket_sendmsg+0x88/0x230 [ 98.455803][ T4786] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 98.461082][ T4786] ? security_socket_sendmsg+0x7c/0xa0 [ 98.466536][ T4786] ? netlink_getsockopt+0x570/0x570 [ 98.471734][ T4786] ____sys_sendmsg+0x5be/0x8f0 [ 98.476501][ T4786] ? __sys_sendmsg_sock+0x30/0x30 [ 98.481529][ T4786] ? import_iovec+0x6f/0xa0 [ 98.486033][ T4786] ___sys_sendmsg+0x236/0x2e0 [ 98.490716][ T4786] ? __sys_sendmsg+0x290/0x290 [ 98.495491][ T4786] ? __lock_acquire+0x7b50/0x7b50 [ 98.500512][ T4786] ? __might_fault+0xb3/0x110 [ 98.505210][ T4786] __se_sys_sendmsg+0x1b7/0x2a0 [ 98.510060][ T4786] ? __x64_sys_sendmsg+0x80/0x80 [ 98.514993][ T4786] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 98.520985][ T4786] ? lockdep_hardirqs_on+0x94/0x140 [ 98.526183][ T4786] do_syscall_64+0x4c/0xa0 [ 98.530594][ T4786] ? clear_bhb_loop+0x30/0x80 [ 98.535265][ T4786] ? clear_bhb_loop+0x30/0x80 [ 98.539936][ T4786] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.545824][ T4786] RIP: 0033:0x7fcb6be30e99 [ 98.550237][ T4786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.569834][ T4786] RSP: 002b:00007fcb6a068028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.578243][ T4786] RAX: ffffffffffffffda RBX: 00007fcb6c0b9090 RCX: 00007fcb6be30e99 [ 98.586207][ T4786] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 98.594172][ T4786] RBP: 00007fcb6bec6eaf R08: 0000000000000000 R09: 0000000000000000 [ 98.602137][ T4786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.610105][ T4786] R13: 00007fcb6c0b9128 R14: 00007fcb6c0b9090 R15: 00007ffd7a1a7bf8 [ 98.618086][ T4786] [ 98.662762][ T4788] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.122'. [ 99.732226][ T4819] __nla_validate_parse: 1 callbacks suppressed [ 99.732271][ T4819] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.128'. [ 99.829384][ T4819] netlink: 21192 bytes leftover after parsing attributes in process `syz.3.128'. [ 99.947622][ T4829] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.130'. [ 99.990715][ T4829] netlink: 21192 bytes leftover after parsing attributes in process `syz.4.130'. [ 100.132439][ T4839] netlink: 'syz.3.133': attribute type 3 has an invalid length. [ 100.166415][ T4839] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.133'. [ 100.213399][ T4845] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.133'. [ 100.281631][ T4845] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 100.383822][ T4849] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.134'. [ 100.413739][ T4849] netlink: 21192 bytes leftover after parsing attributes in process `syz.4.134'. [ 111.070398][ T4891] netlink: 'syz.4.142': attribute type 29 has an invalid length. [ 111.156363][ T4886] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.145'. [ 111.321905][ T4891] netlink: 'syz.4.142': attribute type 29 has an invalid length. [ 111.358389][ T4886] netlink: 21192 bytes leftover after parsing attributes in process `syz.2.145'. [ 111.943792][ T4903] netlink: 'syz.2.147': attribute type 3 has an invalid length. [ 112.049408][ T4903] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.147'. [ 112.148002][ T4909] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.147'. [ 112.375587][ T4909] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 112.404141][ T4909] CPU: 1 PID: 4909 Comm: syz.2.147 Not tainted syzkaller #0 [ 112.411445][ T4909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.421518][ T4909] Call Trace: [ 112.424796][ T4909] [ 112.427732][ T4909] dump_stack_lvl+0x188/0x250 [ 112.432425][ T4909] ? show_regs_print_info+0x20/0x20 [ 112.437631][ T4909] ? load_image+0x410/0x410 [ 112.442157][ T4909] sysfs_warn_dup+0x8a/0xa0 [ 112.446663][ T4909] sysfs_do_create_link_sd+0xc0/0x110 [ 112.452041][ T4909] device_add+0x83b/0x1050 [ 112.456464][ T4909] wiphy_register+0x1e74/0x2c40 [ 112.461342][ T4909] ? cfg80211_event_work+0x40/0x40 [ 112.466458][ T4909] ? minstrel_ht_alloc+0x807/0x980 [ 112.471588][ T4909] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 112.477666][ T4909] ieee80211_register_hw+0x2a03/0x3a60 [ 112.483136][ T4909] ? ieee80211_register_hw+0xb21/0x3a60 [ 112.488697][ T4909] ? ieee80211_tasklet_handler+0x20/0x20 [ 112.494344][ T4909] ? rcu_is_watching+0x11/0xa0 [ 112.499118][ T4909] ? hrtimer_init+0x10c/0x220 [ 112.503807][ T4909] mac80211_hwsim_new_radio+0x209d/0x4050 [ 112.509547][ T4909] hwsim_new_radio_nl+0xa7d/0xc50 [ 112.514592][ T4909] genl_rcv_msg+0xd0b/0xfa0 [ 112.519111][ T4909] ? genl_bind+0x370/0x370 [ 112.523539][ T4909] ? __dev_queue_xmit+0x1b64/0x2e50 [ 112.528742][ T4909] ? verify_lock_unused+0x140/0x140 [ 112.533950][ T4909] ? perf_trace_lock_acquire+0xed/0x3f0 [ 112.539512][ T4909] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 112.546109][ T4909] ? dev_queue_xmit+0x20/0x20 [ 112.550789][ T4909] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 112.557135][ T4909] netlink_rcv_skb+0x1e9/0x430 [ 112.561910][ T4909] ? genl_bind+0x370/0x370 [ 112.566330][ T4909] ? netlink_ack+0xb10/0xb10 [ 112.570936][ T4909] ? down_read+0x1aa/0x2e0 [ 112.575368][ T4909] genl_rcv+0x24/0x40 [ 112.579355][ T4909] netlink_unicast+0x78f/0x940 [ 112.584133][ T4909] netlink_sendmsg+0x8ba/0xbe0 [ 112.588908][ T4909] ? netlink_getsockopt+0x570/0x570 [ 112.594108][ T4909] ? aa_sock_msg_perm+0x94/0x150 [ 112.599050][ T4909] ? apparmor_socket_sendmsg+0x88/0x230 [ 112.604597][ T4909] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 112.609885][ T4909] ? security_socket_sendmsg+0x7c/0xa0 [ 112.615348][ T4909] ? netlink_getsockopt+0x570/0x570 [ 112.620549][ T4909] ____sys_sendmsg+0x5be/0x8f0 [ 112.625330][ T4909] ? __sys_sendmsg_sock+0x30/0x30 [ 112.630369][ T4909] ? import_iovec+0x6f/0xa0 [ 112.634880][ T4909] ___sys_sendmsg+0x236/0x2e0 [ 112.639568][ T4909] ? __sys_sendmsg+0x290/0x290 [ 112.644351][ T4909] ? __might_fault+0xb3/0x110 [ 112.649056][ T4909] __se_sys_sendmsg+0x1b7/0x2a0 [ 112.653912][ T4909] ? __x64_sys_sendmsg+0x80/0x80 [ 112.658848][ T4909] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 112.664852][ T4909] ? lockdep_hardirqs_on+0x94/0x140 [ 112.670057][ T4909] do_syscall_64+0x4c/0xa0 [ 112.674481][ T4909] ? clear_bhb_loop+0x30/0x80 [ 112.679155][ T4909] ? clear_bhb_loop+0x30/0x80 [ 112.683838][ T4909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.689733][ T4909] RIP: 0033:0x7fcb6be30e99 [ 112.694147][ T4909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.713752][ T4909] RSP: 002b:00007fcb6a068028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.722166][ T4909] RAX: ffffffffffffffda RBX: 00007fcb6c0b9090 RCX: 00007fcb6be30e99 [ 112.730136][ T4909] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 112.738105][ T4909] RBP: 00007fcb6bec6eaf R08: 0000000000000000 R09: 0000000000000000 [ 112.746076][ T4909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.754048][ T4909] R13: 00007fcb6c0b9128 R14: 00007fcb6c0b9090 R15: 00007ffd7a1a7bf8 [ 112.762033][ T4909] [ 112.944742][ T4921] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.149'. [ 113.002157][ T4921] netlink: 21192 bytes leftover after parsing attributes in process `syz.3.149'. [ 114.807650][ T4959] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.158'. [ 114.860383][ T4959] netlink: 21192 bytes leftover after parsing attributes in process `syz.3.158'. [ 114.914617][ T4960] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.157'. [ 114.941453][ T4960] netlink: 21192 bytes leftover after parsing attributes in process `syz.4.157'. [ 116.192851][ T4996] netlink: 'syz.3.162': attribute type 3 has an invalid length. [ 116.218663][ T4996] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.162'. [ 116.279917][ T4999] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.162'. [ 116.376982][ T4999] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 116.422151][ T4999] CPU: 1 PID: 4999 Comm: syz.3.162 Not tainted syzkaller #0 [ 116.429455][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 116.439509][ T4999] Call Trace: [ 116.442788][ T4999] [ 116.445718][ T4999] dump_stack_lvl+0x188/0x250 [ 116.450419][ T4999] ? show_regs_print_info+0x20/0x20 [ 116.455624][ T4999] ? load_image+0x410/0x410 [ 116.460145][ T4999] sysfs_warn_dup+0x8a/0xa0 [ 116.464651][ T4999] sysfs_do_create_link_sd+0xc0/0x110 [ 116.470028][ T4999] device_add+0x83b/0x1050 [ 116.474455][ T4999] wiphy_register+0x1e74/0x2c40 [ 116.479326][ T4999] ? cfg80211_event_work+0x40/0x40 [ 116.484437][ T4999] ? minstrel_ht_alloc+0x807/0x980 [ 116.489556][ T4999] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 116.495636][ T4999] ieee80211_register_hw+0x2a03/0x3a60 [ 116.501103][ T4999] ? ieee80211_register_hw+0xb21/0x3a60 [ 116.506663][ T4999] ? ieee80211_tasklet_handler+0x20/0x20 [ 116.512303][ T4999] ? rcu_is_watching+0x11/0xa0 [ 116.517069][ T4999] ? hrtimer_init+0x10c/0x220 [ 116.521753][ T4999] mac80211_hwsim_new_radio+0x209d/0x4050 [ 116.527496][ T4999] hwsim_new_radio_nl+0xa7d/0xc50 [ 116.532540][ T4999] genl_rcv_msg+0xd0b/0xfa0 [ 116.537056][ T4999] ? genl_bind+0x370/0x370 [ 116.541482][ T4999] ? __dev_queue_xmit+0x1b64/0x2e50 [ 116.546684][ T4999] ? verify_lock_unused+0x140/0x140 [ 116.551901][ T4999] ? dev_queue_xmit+0x20/0x20 [ 116.556580][ T4999] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 116.562926][ T4999] netlink_rcv_skb+0x1e9/0x430 [ 116.567696][ T4999] ? genl_bind+0x370/0x370 [ 116.572111][ T4999] ? netlink_ack+0xb10/0xb10 [ 116.576715][ T4999] ? down_read+0x1aa/0x2e0 [ 116.581142][ T4999] genl_rcv+0x24/0x40 [ 116.585120][ T4999] netlink_unicast+0x78f/0x940 [ 116.589893][ T4999] netlink_sendmsg+0x8ba/0xbe0 [ 116.594669][ T4999] ? netlink_getsockopt+0x570/0x570 [ 116.599869][ T4999] ? aa_sock_msg_perm+0x94/0x150 [ 116.604811][ T4999] ? apparmor_socket_sendmsg+0x88/0x230 [ 116.610356][ T4999] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 116.615645][ T4999] ? security_socket_sendmsg+0x7c/0xa0 [ 116.621111][ T4999] ? netlink_getsockopt+0x570/0x570 [ 116.626319][ T4999] ____sys_sendmsg+0x5be/0x8f0 [ 116.631097][ T4999] ? __sys_sendmsg_sock+0x30/0x30 [ 116.633136][ T4998] netlink: 'syz.2.161': attribute type 29 has an invalid length. [ 116.636130][ T4999] ? import_iovec+0x6f/0xa0 [ 116.636158][ T4999] ___sys_sendmsg+0x236/0x2e0 [ 116.636189][ T4999] ? __sys_sendmsg+0x290/0x290 [ 116.657780][ T4999] ? __lock_acquire+0x7b50/0x7b50 [ 116.662845][ T4999] __se_sys_sendmsg+0x1b7/0x2a0 [ 116.667709][ T4999] ? __x64_sys_sendmsg+0x80/0x80 [ 116.672646][ T4999] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 116.678642][ T4999] ? lockdep_hardirqs_on+0x94/0x140 [ 116.683844][ T4999] do_syscall_64+0x4c/0xa0 [ 116.688254][ T4999] ? clear_bhb_loop+0x30/0x80 [ 116.692923][ T4999] ? clear_bhb_loop+0x30/0x80 [ 116.697596][ T4999] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.703483][ T4999] RIP: 0033:0x7f2106d68e99 [ 116.707890][ T4999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.727495][ T4999] RSP: 002b:00007f2104fa0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.735918][ T4999] RAX: ffffffffffffffda RBX: 00007f2106ff1090 RCX: 00007f2106d68e99 [ 116.743891][ T4999] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 116.751858][ T4999] RBP: 00007f2106dfeeaf R08: 0000000000000000 R09: 0000000000000000 [ 116.759826][ T4999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.767790][ T4999] R13: 00007f2106ff1128 R14: 00007f2106ff1090 R15: 00007ffe66288c08 [ 116.775780][ T4999] [ 117.029231][ T4998] netlink: 'syz.2.161': attribute type 29 has an invalid length. [ 117.043852][ T5007] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.164'. [ 117.171680][ T5007] netlink: 21192 bytes leftover after parsing attributes in process `syz.4.164'. [ 119.034019][ T5038] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.170'. [ 119.261411][ T5038] netlink: 21192 bytes leftover after parsing attributes in process `syz.3.170'. [ 120.378687][ T5060] syz.5.175 (5060) used greatest stack depth: 19184 bytes left [ 120.620218][ T5069] netlink: 'syz.5.177': attribute type 3 has an invalid length. [ 120.702871][ T5071] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.177'. [ 120.802824][ T5069] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.177'. [ 121.026558][ T5071] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 122.579762][ T5120] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.184'. [ 122.720363][ T5120] netlink: 21192 bytes leftover after parsing attributes in process `syz.2.184'. [ 124.296845][ T5149] netlink: 'syz.3.190': attribute type 3 has an invalid length. [ 124.330993][ T5149] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.190'. [ 124.372073][ T5148] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.190'. [ 124.425085][ T5148] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 124.443058][ T5148] CPU: 1 PID: 5148 Comm: syz.3.190 Not tainted syzkaller #0 [ 124.450360][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 124.460416][ T5148] Call Trace: [ 124.463697][ T5148] [ 124.466628][ T5148] dump_stack_lvl+0x188/0x250 [ 124.471313][ T5148] ? show_regs_print_info+0x20/0x20 [ 124.476518][ T5148] ? load_image+0x410/0x410 [ 124.481032][ T5148] sysfs_warn_dup+0x8a/0xa0 [ 124.485535][ T5148] sysfs_do_create_link_sd+0xc0/0x110 [ 124.490909][ T5148] device_add+0x83b/0x1050 [ 124.495330][ T5148] wiphy_register+0x1e74/0x2c40 [ 124.500199][ T5148] ? cfg80211_event_work+0x40/0x40 [ 124.505318][ T5148] ? minstrel_ht_alloc+0x807/0x980 [ 124.510446][ T5148] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 124.516529][ T5148] ieee80211_register_hw+0x2a03/0x3a60 [ 124.522004][ T5148] ? ieee80211_register_hw+0xb21/0x3a60 [ 124.527569][ T5148] ? ieee80211_tasklet_handler+0x20/0x20 [ 124.533216][ T5148] ? rcu_is_watching+0x11/0xa0 [ 124.537991][ T5148] ? hrtimer_init+0x10c/0x220 [ 124.542677][ T5148] mac80211_hwsim_new_radio+0x209d/0x4050 [ 124.548422][ T5148] hwsim_new_radio_nl+0xa7d/0xc50 [ 124.553471][ T5148] genl_rcv_msg+0xd0b/0xfa0 [ 124.557994][ T5148] ? genl_bind+0x370/0x370 [ 124.562428][ T5148] ? __dev_queue_xmit+0x1b64/0x2e50 [ 124.567649][ T5148] ? verify_lock_unused+0x140/0x140 [ 124.572868][ T5148] ? perf_trace_lock+0xe4/0x390 [ 124.577728][ T5148] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 124.584078][ T5148] netlink_rcv_skb+0x1e9/0x430 [ 124.588853][ T5148] ? genl_bind+0x370/0x370 [ 124.593273][ T5148] ? netlink_ack+0xb10/0xb10 [ 124.597878][ T5148] ? down_read+0x1aa/0x2e0 [ 124.602301][ T5148] genl_rcv+0x24/0x40 [ 124.606284][ T5148] netlink_unicast+0x78f/0x940 [ 124.611064][ T5148] netlink_sendmsg+0x8ba/0xbe0 [ 124.615844][ T5148] ? netlink_getsockopt+0x570/0x570 [ 124.621046][ T5148] ? aa_sock_msg_perm+0x94/0x150 [ 124.625989][ T5148] ? apparmor_socket_sendmsg+0x88/0x230 [ 124.631544][ T5148] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 124.636833][ T5148] ? security_socket_sendmsg+0x7c/0xa0 [ 124.642297][ T5148] ? netlink_getsockopt+0x570/0x570 [ 124.647503][ T5148] ____sys_sendmsg+0x5be/0x8f0 [ 124.652283][ T5148] ? __sys_sendmsg_sock+0x30/0x30 [ 124.657321][ T5148] ? import_iovec+0x6f/0xa0 [ 124.661834][ T5148] ___sys_sendmsg+0x236/0x2e0 [ 124.666528][ T5148] ? __sys_sendmsg+0x290/0x290 [ 124.671311][ T5148] ? trace_event_raw_event_lock+0x250/0x250 [ 124.677237][ T5148] __se_sys_sendmsg+0x1b7/0x2a0 [ 124.682098][ T5148] ? __x64_sys_sendmsg+0x80/0x80 [ 124.687046][ T5148] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.693049][ T5148] ? lockdep_hardirqs_on+0x94/0x140 [ 124.698260][ T5148] do_syscall_64+0x4c/0xa0 [ 124.702677][ T5148] ? clear_bhb_loop+0x30/0x80 [ 124.707357][ T5148] ? clear_bhb_loop+0x30/0x80 [ 124.712043][ T5148] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.717939][ T5148] RIP: 0033:0x7f2106d68e99 [ 124.722357][ T5148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.741959][ T5148] RSP: 002b:00007f2104fc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.750374][ T5148] RAX: ffffffffffffffda RBX: 00007f2106ff0fa0 RCX: 00007f2106d68e99 [ 124.758344][ T5148] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 124.766316][ T5148] RBP: 00007f2106dfeeaf R08: 0000000000000000 R09: 0000000000000000 [ 124.774288][ T5148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.782258][ T5148] R13: 00007f2106ff1038 R14: 00007f2106ff0fa0 R15: 00007ffe66288c08 [ 124.790247][ T5148] [ 125.073365][ T5164] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.192'. [ 125.134819][ T5164] netlink: 21192 bytes leftover after parsing attributes in process `syz.4.192'. [ 125.790141][ T5186] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.199'. [ 125.914538][ T5186] netlink: 21192 bytes leftover after parsing attributes in process `syz.3.199'. [ 126.543064][ T5219] netlink: 'syz.5.206': attribute type 3 has an invalid length. [ 126.642783][ T5225] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.206'. [ 126.703201][ T5219] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.206'. [ 126.793790][ T5225] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 126.849872][ T5220] syz.3.204 (5220) used greatest stack depth: 19056 bytes left [ 126.852320][ T5225] CPU: 0 PID: 5225 Comm: syz.5.206 Not tainted syzkaller #0 [ 126.864696][ T5225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 126.874737][ T5225] Call Trace: [ 126.878007][ T5225] [ 126.880922][ T5225] dump_stack_lvl+0x188/0x250 [ 126.885591][ T5225] ? show_regs_print_info+0x20/0x20 [ 126.890774][ T5225] ? load_image+0x410/0x410 [ 126.895270][ T5225] sysfs_warn_dup+0x8a/0xa0 [ 126.899755][ T5225] sysfs_do_create_link_sd+0xc0/0x110 [ 126.905110][ T5225] device_add+0x83b/0x1050 [ 126.909514][ T5225] wiphy_register+0x1e74/0x2c40 [ 126.914379][ T5225] ? cfg80211_event_work+0x40/0x40 [ 126.919488][ T5225] ? minstrel_ht_alloc+0x807/0x980 [ 126.924589][ T5225] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 126.930644][ T5225] ieee80211_register_hw+0x2a03/0x3a60 [ 126.936091][ T5225] ? ieee80211_register_hw+0xb21/0x3a60 [ 126.941624][ T5225] ? ieee80211_tasklet_handler+0x20/0x20 [ 126.947244][ T5225] ? rcu_is_watching+0x11/0xa0 [ 126.951996][ T5225] ? hrtimer_init+0x10c/0x220 [ 126.956663][ T5225] mac80211_hwsim_new_radio+0x209d/0x4050 [ 126.962391][ T5225] hwsim_new_radio_nl+0xa7d/0xc50 [ 126.967424][ T5225] genl_rcv_msg+0xd0b/0xfa0 [ 126.971936][ T5225] ? genl_bind+0x370/0x370 [ 126.976346][ T5225] ? __dev_queue_xmit+0x1b64/0x2e50 [ 126.981533][ T5225] ? verify_lock_unused+0x140/0x140 [ 126.986729][ T5225] ? perf_trace_lock+0xe4/0x390 [ 126.991567][ T5225] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 126.997888][ T5225] netlink_rcv_skb+0x1e9/0x430 [ 127.002637][ T5225] ? genl_bind+0x370/0x370 [ 127.007035][ T5225] ? netlink_ack+0xb10/0xb10 [ 127.011613][ T5225] ? down_read+0x1aa/0x2e0 [ 127.016018][ T5225] genl_rcv+0x24/0x40 [ 127.019980][ T5225] netlink_unicast+0x78f/0x940 [ 127.024740][ T5225] netlink_sendmsg+0x8ba/0xbe0 [ 127.029497][ T5225] ? netlink_getsockopt+0x570/0x570 [ 127.034680][ T5225] ? aa_sock_msg_perm+0x94/0x150 [ 127.039599][ T5225] ? apparmor_socket_sendmsg+0x88/0x230 [ 127.045127][ T5225] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 127.050402][ T5225] ? security_socket_sendmsg+0x7c/0xa0 [ 127.055853][ T5225] ? netlink_getsockopt+0x570/0x570 [ 127.061038][ T5225] ____sys_sendmsg+0x5be/0x8f0 [ 127.065792][ T5225] ? __sys_sendmsg_sock+0x30/0x30 [ 127.070818][ T5225] ? import_iovec+0x6f/0xa0 [ 127.075317][ T5225] ___sys_sendmsg+0x236/0x2e0 [ 127.079988][ T5225] ? __sys_sendmsg+0x290/0x290 [ 127.084742][ T5225] ? trace_event_raw_event_lock+0x250/0x250 [ 127.090616][ T5225] ? __might_fault+0xb3/0x110 [ 127.095291][ T5225] __se_sys_sendmsg+0x1b7/0x2a0 [ 127.100127][ T5225] ? __x64_sys_sendmsg+0x80/0x80 [ 127.105042][ T5225] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 127.111015][ T5225] ? lockdep_hardirqs_on+0x94/0x140 [ 127.116199][ T5225] do_syscall_64+0x4c/0xa0 [ 127.120594][ T5225] ? clear_bhb_loop+0x30/0x80 [ 127.125250][ T5225] ? clear_bhb_loop+0x30/0x80 [ 127.129909][ T5225] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.135782][ T5225] RIP: 0033:0x7fa90cbb8e99 [ 127.140180][ T5225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.159764][ T5225] RSP: 002b:00007fa90adcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.168159][ T5225] RAX: ffffffffffffffda RBX: 00007fa90ce41180 RCX: 00007fa90cbb8e99 [ 127.176112][ T5225] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 127.184064][ T5225] RBP: 00007fa90cc4eeaf R08: 0000000000000000 R09: 0000000000000000 [ 127.192016][ T5225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.199972][ T5225] R13: 00007fa90ce41218 R14: 00007fa90ce41180 R15: 00007ffda7d9ab68 [ 127.207937][ T5225] [ 127.565167][ T5238] netlink: 'syz.6.218': attribute type 3 has an invalid length. [ 127.613621][ T5238] __nla_validate_parse: 2 callbacks suppressed [ 127.613668][ T5238] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.218'. [ 127.760671][ T5238] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.218'. [ 127.801071][ T5238] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 128.427099][ T5263] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.212'. [ 128.519595][ T5263] netlink: 21192 bytes leftover after parsing attributes in process `syz.2.212'. [ 130.039955][ T5285] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.220'. [ 130.183205][ T5285] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 130.200468][ T5285] CPU: 1 PID: 5285 Comm: syz.3.220 Not tainted syzkaller #0 [ 130.207774][ T5285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 130.217830][ T5285] Call Trace: [ 130.221110][ T5285] [ 130.224047][ T5285] dump_stack_lvl+0x188/0x250 [ 130.228736][ T5285] ? show_regs_print_info+0x20/0x20 [ 130.233947][ T5285] ? load_image+0x410/0x410 [ 130.238476][ T5285] sysfs_warn_dup+0x8a/0xa0 [ 130.242987][ T5285] sysfs_do_create_link_sd+0xc0/0x110 [ 130.248368][ T5285] device_add+0x83b/0x1050 [ 130.252795][ T5285] wiphy_register+0x1e74/0x2c40 [ 130.257667][ T5285] ? cfg80211_event_work+0x40/0x40 [ 130.262785][ T5285] ? minstrel_ht_alloc+0x807/0x980 [ 130.267907][ T5285] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 130.273985][ T5285] ieee80211_register_hw+0x2a03/0x3a60 [ 130.279460][ T5285] ? ieee80211_register_hw+0xb21/0x3a60 [ 130.285022][ T5285] ? ieee80211_tasklet_handler+0x20/0x20 [ 130.290672][ T5285] ? rcu_is_watching+0x11/0xa0 [ 130.295447][ T5285] ? hrtimer_init+0x10c/0x220 [ 130.300136][ T5285] mac80211_hwsim_new_radio+0x209d/0x4050 [ 130.305882][ T5285] hwsim_new_radio_nl+0xa7d/0xc50 [ 130.310931][ T5285] genl_rcv_msg+0xd0b/0xfa0 [ 130.315449][ T5285] ? genl_bind+0x370/0x370 [ 130.319881][ T5285] ? swake_up_one+0x6d/0x130 [ 130.324482][ T5285] ? verify_lock_unused+0x140/0x140 [ 130.329694][ T5285] ? perf_trace_lock_acquire+0xed/0x3f0 [ 130.335259][ T5285] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 130.341858][ T5285] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 130.348208][ T5285] netlink_rcv_skb+0x1e9/0x430 [ 130.352987][ T5285] ? genl_bind+0x370/0x370 [ 130.357410][ T5285] ? netlink_ack+0xb10/0xb10 [ 130.362003][ T5285] ? lockdep_hardirqs_on+0x94/0x140 [ 130.367219][ T5285] ? down_read+0x1aa/0x2e0 [ 130.371660][ T5285] genl_rcv+0x24/0x40 [ 130.375642][ T5285] netlink_unicast+0x78f/0x940 [ 130.380426][ T5285] netlink_sendmsg+0x8ba/0xbe0 [ 130.385203][ T5285] ? netlink_getsockopt+0x570/0x570 [ 130.390410][ T5285] ? aa_sock_msg_perm+0x94/0x150 [ 130.395350][ T5285] ? apparmor_socket_sendmsg+0x88/0x230 [ 130.400903][ T5285] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 130.406197][ T5285] ? security_socket_sendmsg+0x7c/0xa0 [ 130.411664][ T5285] ? netlink_getsockopt+0x570/0x570 [ 130.416862][ T5285] ____sys_sendmsg+0x5be/0x8f0 [ 130.421636][ T5285] ? __sys_sendmsg_sock+0x30/0x30 [ 130.426673][ T5285] ? import_iovec+0x6f/0xa0 [ 130.431184][ T5285] ___sys_sendmsg+0x236/0x2e0 [ 130.435868][ T5285] ? __sys_sendmsg+0x290/0x290 [ 130.440622][ T5285] ? trace_event_raw_event_lock+0x250/0x250 [ 130.446525][ T5285] __se_sys_sendmsg+0x1b7/0x2a0 [ 130.451360][ T5285] ? __x64_sys_sendmsg+0x80/0x80 [ 130.456275][ T5285] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 130.462260][ T5285] ? lockdep_hardirqs_on+0x94/0x140 [ 130.467456][ T5285] do_syscall_64+0x4c/0xa0 [ 130.471851][ T5285] ? clear_bhb_loop+0x30/0x80 [ 130.476502][ T5285] ? clear_bhb_loop+0x30/0x80 [ 130.481154][ T5285] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.487027][ T5285] RIP: 0033:0x7f2106d68e99 [ 130.491445][ T5285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.511049][ T5285] RSP: 002b:00007f2104fc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.519465][ T5285] RAX: ffffffffffffffda RBX: 00007f2106ff0fa0 RCX: 00007f2106d68e99 [ 130.527435][ T5285] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 130.535384][ T5285] RBP: 00007f2106dfeeaf R08: 0000000000000000 R09: 0000000000000000 [ 130.543330][ T5285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.551283][ T5285] R13: 00007f2106ff1038 R14: 00007f2106ff0fa0 R15: 00007ffe66288c08 [ 130.559257][ T5285] [ 130.739057][ T5319] netlink: 'syz.3.223': attribute type 3 has an invalid length. [ 130.841750][ T5319] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.223'. [ 130.936215][ T5329] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.223'. [ 131.054329][ T5329] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 131.092832][ T5329] CPU: 0 PID: 5329 Comm: syz.3.223 Not tainted syzkaller #0 [ 131.100147][ T5329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 131.110207][ T5329] Call Trace: [ 131.113492][ T5329] [ 131.116427][ T5329] dump_stack_lvl+0x188/0x250 [ 131.121124][ T5329] ? show_regs_print_info+0x20/0x20 [ 131.126336][ T5329] ? load_image+0x410/0x410 [ 131.131221][ T5329] sysfs_warn_dup+0x8a/0xa0 [ 131.135731][ T5329] sysfs_do_create_link_sd+0xc0/0x110 [ 131.141115][ T5329] device_add+0x83b/0x1050 [ 131.145544][ T5329] wiphy_register+0x1e74/0x2c40 [ 131.150427][ T5329] ? cfg80211_event_work+0x40/0x40 [ 131.155546][ T5329] ? minstrel_ht_alloc+0x807/0x980 [ 131.160670][ T5329] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 131.166756][ T5329] ieee80211_register_hw+0x2a03/0x3a60 [ 131.172235][ T5329] ? ieee80211_register_hw+0xb21/0x3a60 [ 131.177797][ T5329] ? ieee80211_tasklet_handler+0x20/0x20 [ 131.183442][ T5329] ? rcu_is_watching+0x11/0xa0 [ 131.188217][ T5329] ? hrtimer_init+0x10c/0x220 [ 131.192901][ T5329] mac80211_hwsim_new_radio+0x209d/0x4050 [ 131.198654][ T5329] hwsim_new_radio_nl+0xa7d/0xc50 [ 131.203715][ T5329] genl_rcv_msg+0xd0b/0xfa0 [ 131.208240][ T5329] ? genl_bind+0x370/0x370 [ 131.212674][ T5329] ? __dev_queue_xmit+0x1b64/0x2e50 [ 131.217889][ T5329] ? verify_lock_unused+0x140/0x140 [ 131.223098][ T5329] ? perf_trace_lock_acquire+0xed/0x3f0 [ 131.228660][ T5329] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 131.235268][ T5329] ? dev_queue_xmit+0x20/0x20 [ 131.239953][ T5329] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 131.246317][ T5329] netlink_rcv_skb+0x1e9/0x430 [ 131.251094][ T5329] ? genl_bind+0x370/0x370 [ 131.255516][ T5329] ? netlink_ack+0xb10/0xb10 [ 131.260127][ T5329] ? down_read+0x1aa/0x2e0 [ 131.264556][ T5329] genl_rcv+0x24/0x40 [ 131.268543][ T5329] netlink_unicast+0x78f/0x940 [ 131.273326][ T5329] netlink_sendmsg+0x8ba/0xbe0 [ 131.278108][ T5329] ? netlink_getsockopt+0x570/0x570 [ 131.283316][ T5329] ? aa_sock_msg_perm+0x94/0x150 [ 131.288268][ T5329] ? apparmor_socket_sendmsg+0x88/0x230 [ 131.293823][ T5329] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 131.299114][ T5329] ? security_socket_sendmsg+0x7c/0xa0 [ 131.304582][ T5329] ? netlink_getsockopt+0x570/0x570 [ 131.309796][ T5329] ____sys_sendmsg+0x5be/0x8f0 [ 131.314579][ T5329] ? __sys_sendmsg_sock+0x30/0x30 [ 131.319621][ T5329] ? import_iovec+0x6f/0xa0 [ 131.324140][ T5329] ___sys_sendmsg+0x236/0x2e0 [ 131.328838][ T5329] ? __sys_sendmsg+0x290/0x290 [ 131.333621][ T5329] ? __lock_acquire+0x7b50/0x7b50 [ 131.338655][ T5329] ? __might_fault+0xb3/0x110 [ 131.343374][ T5329] __se_sys_sendmsg+0x1b7/0x2a0 [ 131.348238][ T5329] ? __x64_sys_sendmsg+0x80/0x80 [ 131.353187][ T5329] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 131.359190][ T5329] ? lockdep_hardirqs_on+0x94/0x140 [ 131.364403][ T5329] do_syscall_64+0x4c/0xa0 [ 131.368821][ T5329] ? clear_bhb_loop+0x30/0x80 [ 131.373502][ T5329] ? clear_bhb_loop+0x30/0x80 [ 131.378179][ T5329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.384080][ T5329] RIP: 0033:0x7f2106d68e99 [ 131.388500][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.408113][ T5329] RSP: 002b:00007f2104fa0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.416536][ T5329] RAX: ffffffffffffffda RBX: 00007f2106ff1090 RCX: 00007f2106d68e99 [ 131.424512][ T5329] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 131.432490][ T5329] RBP: 00007f2106dfeeaf R08: 0000000000000000 R09: 0000000000000000 [ 131.440467][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.448438][ T5329] R13: 00007f2106ff1128 R14: 00007f2106ff1090 R15: 00007ffe66288c08 [ 131.456429][ T5329] [ 131.638120][ T5348] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.227'. [ 131.675481][ T5348] netlink: 21192 bytes leftover after parsing attributes in process `syz.3.227'. [ 132.561780][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.568120][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.242123][ T5394] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.234'. [ 133.378561][ T5394] netlink: 21192 bytes leftover after parsing attributes in process `syz.5.234'. [ 133.400792][ T5394] tipc: Started in network mode [ 133.406074][ T5394] tipc: Node identity 1a, cluster identity 4711 [ 133.426561][ T5394] tipc: Node number set to 26 [ 134.515000][ T5425] netlink: 'syz.4.238': attribute type 3 has an invalid length. [ 134.578740][ T5425] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.238'. [ 134.664700][ T5423] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.238'. [ 134.933113][ T5423] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 134.961490][ T5423] CPU: 0 PID: 5423 Comm: syz.4.238 Not tainted syzkaller #0 [ 134.968796][ T5423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 134.978853][ T5423] Call Trace: [ 134.982130][ T5423] [ 134.985053][ T5423] dump_stack_lvl+0x188/0x250 [ 134.989740][ T5423] ? show_regs_print_info+0x20/0x20 [ 134.994947][ T5423] ? load_image+0x410/0x410 [ 134.999468][ T5423] sysfs_warn_dup+0x8a/0xa0 [ 135.003976][ T5423] sysfs_do_create_link_sd+0xc0/0x110 [ 135.009352][ T5423] device_add+0x83b/0x1050 [ 135.013778][ T5423] wiphy_register+0x1e74/0x2c40 [ 135.018650][ T5423] ? cfg80211_event_work+0x40/0x40 [ 135.023764][ T5423] ? minstrel_ht_alloc+0x807/0x980 [ 135.028879][ T5423] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 135.034953][ T5423] ieee80211_register_hw+0x2a03/0x3a60 [ 135.040419][ T5423] ? ieee80211_register_hw+0xb21/0x3a60 [ 135.045972][ T5423] ? ieee80211_tasklet_handler+0x20/0x20 [ 135.051610][ T5423] ? rcu_is_watching+0x11/0xa0 [ 135.056389][ T5423] ? hrtimer_init+0x10c/0x220 [ 135.061080][ T5423] mac80211_hwsim_new_radio+0x209d/0x4050 [ 135.066822][ T5423] hwsim_new_radio_nl+0xa7d/0xc50 [ 135.071863][ T5423] genl_rcv_msg+0xd0b/0xfa0 [ 135.076381][ T5423] ? genl_bind+0x370/0x370 [ 135.080801][ T5423] ? __dev_queue_xmit+0x1b64/0x2e50 [ 135.086001][ T5423] ? verify_lock_unused+0x140/0x140 [ 135.091200][ T5423] ? perf_trace_lock+0xe4/0x390 [ 135.096048][ T5423] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 135.102378][ T5423] netlink_rcv_skb+0x1e9/0x430 [ 135.107132][ T5423] ? genl_bind+0x370/0x370 [ 135.111533][ T5423] ? netlink_ack+0xb10/0xb10 [ 135.116114][ T5423] ? down_read+0x1aa/0x2e0 [ 135.120514][ T5423] genl_rcv+0x24/0x40 [ 135.124477][ T5423] netlink_unicast+0x78f/0x940 [ 135.129231][ T5423] netlink_sendmsg+0x8ba/0xbe0 [ 135.133983][ T5423] ? netlink_getsockopt+0x570/0x570 [ 135.139162][ T5423] ? aa_sock_msg_perm+0x94/0x150 [ 135.144082][ T5423] ? apparmor_socket_sendmsg+0x88/0x230 [ 135.149608][ T5423] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 135.154877][ T5423] ? security_socket_sendmsg+0x7c/0xa0 [ 135.160320][ T5423] ? netlink_getsockopt+0x570/0x570 [ 135.165507][ T5423] ____sys_sendmsg+0x5be/0x8f0 [ 135.170262][ T5423] ? __sys_sendmsg_sock+0x30/0x30 [ 135.175274][ T5423] ? import_iovec+0x6f/0xa0 [ 135.179762][ T5423] ___sys_sendmsg+0x236/0x2e0 [ 135.184427][ T5423] ? __sys_sendmsg+0x290/0x290 [ 135.189180][ T5423] ? trace_event_raw_event_lock+0x250/0x250 [ 135.195072][ T5423] __se_sys_sendmsg+0x1b7/0x2a0 [ 135.199910][ T5423] ? __x64_sys_sendmsg+0x80/0x80 [ 135.204827][ T5423] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.210797][ T5423] ? lockdep_hardirqs_on+0x94/0x140 [ 135.215980][ T5423] do_syscall_64+0x4c/0xa0 [ 135.220378][ T5423] ? clear_bhb_loop+0x30/0x80 [ 135.225035][ T5423] ? clear_bhb_loop+0x30/0x80 [ 135.229692][ T5423] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.235567][ T5423] RIP: 0033:0x7f5287e18e99 [ 135.239970][ T5423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.259557][ T5423] RSP: 002b:00007f5286071028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.267954][ T5423] RAX: ffffffffffffffda RBX: 00007f52880a0fa0 RCX: 00007f5287e18e99 [ 135.275912][ T5423] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 135.283864][ T5423] RBP: 00007f5287eaeeaf R08: 0000000000000000 R09: 0000000000000000 [ 135.291820][ T5423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.299774][ T5423] R13: 00007f52880a1038 R14: 00007f52880a0fa0 R15: 00007ffe6378fea8 [ 135.307735][ T5423] [ 135.837783][ T5443] netlink: 'syz.3.254': attribute type 3 has an invalid length. [ 136.032621][ T5443] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.254'. [ 136.225055][ T5443] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.254'. [ 136.290274][ T5443] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 136.298271][ T5443] CPU: 1 PID: 5443 Comm: syz.3.254 Not tainted syzkaller #0 [ 136.305552][ T5443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.315596][ T5443] Call Trace: [ 136.318870][ T5443] [ 136.321801][ T5443] dump_stack_lvl+0x188/0x250 [ 136.326490][ T5443] ? show_regs_print_info+0x20/0x20 [ 136.331695][ T5443] ? load_image+0x410/0x410 [ 136.336223][ T5443] sysfs_warn_dup+0x8a/0xa0 [ 136.340732][ T5443] sysfs_do_create_link_sd+0xc0/0x110 [ 136.346114][ T5443] device_add+0x83b/0x1050 [ 136.350546][ T5443] wiphy_register+0x1e74/0x2c40 [ 136.355426][ T5443] ? cfg80211_event_work+0x40/0x40 [ 136.360541][ T5443] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 136.366711][ T5443] ? ieee80211_register_hw+0x2835/0x3a60 [ 136.372360][ T5443] ieee80211_register_hw+0x2a03/0x3a60 [ 136.377835][ T5443] ? ieee80211_register_hw+0xb21/0x3a60 [ 136.383391][ T5443] ? ieee80211_tasklet_handler+0x20/0x20 [ 136.389039][ T5443] ? rcu_is_watching+0x11/0xa0 [ 136.393810][ T5443] ? hrtimer_init+0x10c/0x220 [ 136.398497][ T5443] mac80211_hwsim_new_radio+0x209d/0x4050 [ 136.404242][ T5443] hwsim_new_radio_nl+0xa7d/0xc50 [ 136.409285][ T5443] genl_rcv_msg+0xd0b/0xfa0 [ 136.413801][ T5443] ? genl_bind+0x370/0x370 [ 136.418227][ T5443] ? __dev_queue_xmit+0x1b64/0x2e50 [ 136.423429][ T5443] ? verify_lock_unused+0x140/0x140 [ 136.428635][ T5443] ? perf_trace_lock_acquire+0xed/0x3f0 [ 136.434200][ T5443] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 136.440800][ T5443] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 136.447144][ T5443] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 136.453140][ T5443] netlink_rcv_skb+0x1e9/0x430 [ 136.457910][ T5443] ? genl_bind+0x370/0x370 [ 136.462329][ T5443] ? netlink_ack+0xb10/0xb10 [ 136.466932][ T5443] ? genl_bind+0x370/0x370 [ 136.471355][ T5443] genl_rcv+0x24/0x40 [ 136.475337][ T5443] netlink_unicast+0x78f/0x940 [ 136.480119][ T5443] netlink_sendmsg+0x8ba/0xbe0 [ 136.484896][ T5443] ? netlink_getsockopt+0x570/0x570 [ 136.490094][ T5443] ? aa_sock_msg_perm+0x94/0x150 [ 136.495039][ T5443] ? apparmor_socket_sendmsg+0x88/0x230 [ 136.500587][ T5443] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 136.505875][ T5443] ? security_socket_sendmsg+0x7c/0xa0 [ 136.511346][ T5443] ? netlink_getsockopt+0x570/0x570 [ 136.516558][ T5443] ____sys_sendmsg+0x5be/0x8f0 [ 136.521339][ T5443] ? __sys_sendmsg_sock+0x30/0x30 [ 136.526388][ T5443] ? import_iovec+0x6f/0xa0 [ 136.530898][ T5443] ___sys_sendmsg+0x236/0x2e0 [ 136.535590][ T5443] ? __sys_sendmsg+0x290/0x290 [ 136.540352][ T5443] ? rcu_nmi_exit+0x6f/0xf0 [ 136.544903][ T5443] __se_sys_sendmsg+0x1b7/0x2a0 [ 136.549760][ T5443] ? __x64_sys_sendmsg+0x80/0x80 [ 136.554698][ T5443] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 136.560695][ T5443] ? lockdep_hardirqs_on+0x94/0x140 [ 136.565901][ T5443] do_syscall_64+0x4c/0xa0 [ 136.570327][ T5443] ? clear_bhb_loop+0x30/0x80 [ 136.575006][ T5443] ? clear_bhb_loop+0x30/0x80 [ 136.579687][ T5443] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.585579][ T5443] RIP: 0033:0x7f2106d68e99 [ 136.589992][ T5443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.609598][ T5443] RSP: 002b:00007f2104fc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.618018][ T5443] RAX: ffffffffffffffda RBX: 00007f2106ff0fa0 RCX: 00007f2106d68e99 [ 136.625991][ T5443] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 136.633958][ T5443] RBP: 00007f2106dfeeaf R08: 0000000000000000 R09: 0000000000000000 [ 136.641935][ T5443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.649905][ T5443] R13: 00007f2106ff1038 R14: 00007f2106ff0fa0 R15: 00007ffe66288c08 [ 136.657891][ T5443] [ 137.471881][ T5472] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.247'. [ 137.689061][ T5472] netlink: 21192 bytes leftover after parsing attributes in process `syz.4.247'. [ 138.405243][ T5499] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.255'. [ 138.570139][ T5499] netlink: 21192 bytes leftover after parsing attributes in process `syz.6.255'. [ 139.026122][ T5509] netlink: 'syz.4.258': attribute type 3 has an invalid length. [ 139.076774][ T5509] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.258'. [ 139.121793][ T5511] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.258'. [ 139.217469][ T5511] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 139.318897][ T5511] CPU: 1 PID: 5511 Comm: syz.4.258 Not tainted syzkaller #0 [ 139.326198][ T5511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.336250][ T5511] Call Trace: [ 139.339525][ T5511] [ 139.342453][ T5511] dump_stack_lvl+0x188/0x250 [ 139.347142][ T5511] ? show_regs_print_info+0x20/0x20 [ 139.352344][ T5511] ? load_image+0x410/0x410 [ 139.356863][ T5511] sysfs_warn_dup+0x8a/0xa0 [ 139.361369][ T5511] sysfs_do_create_link_sd+0xc0/0x110 [ 139.366742][ T5511] device_add+0x83b/0x1050 [ 139.371162][ T5511] wiphy_register+0x1e74/0x2c40 [ 139.376037][ T5511] ? cfg80211_event_work+0x40/0x40 [ 139.381147][ T5511] ? minstrel_ht_alloc+0x807/0x980 [ 139.386264][ T5511] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 139.392338][ T5511] ieee80211_register_hw+0x2a03/0x3a60 [ 139.397804][ T5511] ? ieee80211_register_hw+0xb21/0x3a60 [ 139.403361][ T5511] ? ieee80211_tasklet_handler+0x20/0x20 [ 139.409000][ T5511] ? rcu_is_watching+0x11/0xa0 [ 139.413774][ T5511] ? hrtimer_init+0x10c/0x220 [ 139.418454][ T5511] mac80211_hwsim_new_radio+0x209d/0x4050 [ 139.424197][ T5511] hwsim_new_radio_nl+0xa7d/0xc50 [ 139.429244][ T5511] genl_rcv_msg+0xd0b/0xfa0 [ 139.433766][ T5511] ? genl_bind+0x370/0x370 [ 139.438193][ T5511] ? __dev_queue_xmit+0x1b64/0x2e50 [ 139.443390][ T5511] ? verify_lock_unused+0x140/0x140 [ 139.448592][ T5511] ? perf_trace_lock_acquire+0xed/0x3f0 [ 139.454153][ T5511] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 139.460739][ T5511] ? perf_trace_lock+0xe4/0x390 [ 139.465599][ T5511] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 139.471954][ T5511] netlink_rcv_skb+0x1e9/0x430 [ 139.476722][ T5511] ? genl_bind+0x370/0x370 [ 139.481145][ T5511] ? netlink_ack+0xb10/0xb10 [ 139.485747][ T5511] ? down_read+0x1aa/0x2e0 [ 139.490169][ T5511] genl_rcv+0x24/0x40 [ 139.494151][ T5511] netlink_unicast+0x78f/0x940 [ 139.498933][ T5511] netlink_sendmsg+0x8ba/0xbe0 [ 139.503711][ T5511] ? netlink_getsockopt+0x570/0x570 [ 139.508909][ T5511] ? aa_sock_msg_perm+0x94/0x150 [ 139.513849][ T5511] ? apparmor_socket_sendmsg+0x88/0x230 [ 139.519394][ T5511] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 139.524677][ T5511] ? security_socket_sendmsg+0x7c/0xa0 [ 139.530133][ T5511] ? netlink_getsockopt+0x570/0x570 [ 139.535340][ T5511] ____sys_sendmsg+0x5be/0x8f0 [ 139.540114][ T5511] ? __sys_sendmsg_sock+0x30/0x30 [ 139.545149][ T5511] ? import_iovec+0x6f/0xa0 [ 139.549658][ T5511] ___sys_sendmsg+0x236/0x2e0 [ 139.554347][ T5511] ? __sys_sendmsg+0x290/0x290 [ 139.559125][ T5511] ? trace_event_raw_event_lock+0x250/0x250 [ 139.565054][ T5511] __se_sys_sendmsg+0x1b7/0x2a0 [ 139.569906][ T5511] ? __x64_sys_sendmsg+0x80/0x80 [ 139.574839][ T5511] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 139.580837][ T5511] ? lockdep_hardirqs_on+0x94/0x140 [ 139.586036][ T5511] do_syscall_64+0x4c/0xa0 [ 139.590445][ T5511] ? clear_bhb_loop+0x30/0x80 [ 139.595116][ T5511] ? clear_bhb_loop+0x30/0x80 [ 139.599792][ T5511] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.605684][ T5511] RIP: 0033:0x7f5287e18e99 [ 139.610103][ T5511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.629708][ T5511] RSP: 002b:00007f5286050028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.638127][ T5511] RAX: ffffffffffffffda RBX: 00007f52880a1090 RCX: 00007f5287e18e99 [ 139.646097][ T5511] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 139.654066][ T5511] RBP: 00007f5287eaeeaf R08: 0000000000000000 R09: 0000000000000000 [ 139.662032][ T5511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.669999][ T5511] R13: 00007f52880a1128 R14: 00007f52880a1090 R15: 00007ffe6378fea8 [ 139.677994][ T5511] [ 141.450743][ T5569] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.270'. [ 141.892519][ T5569] netlink: 21192 bytes leftover after parsing attributes in process `syz.3.270'. [ 142.241642][ T5581] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.282'. [ 142.288724][ T5581] netlink: 21192 bytes leftover after parsing attributes in process `syz.2.282'. [ 142.403558][ T5597] netlink: 'syz.5.272': attribute type 3 has an invalid length. [ 142.486011][ T5597] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.272'. [ 142.489870][ T5602] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.272'. [ 142.636765][ T5602] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 142.667403][ T5602] CPU: 1 PID: 5602 Comm: syz.5.272 Not tainted syzkaller #0 [ 142.674705][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 142.684759][ T5602] Call Trace: [ 142.688034][ T5602] [ 142.690963][ T5602] dump_stack_lvl+0x188/0x250 [ 142.695662][ T5602] ? show_regs_print_info+0x20/0x20 [ 142.700866][ T5602] ? load_image+0x410/0x410 [ 142.705401][ T5602] sysfs_warn_dup+0x8a/0xa0 [ 142.709903][ T5602] sysfs_do_create_link_sd+0xc0/0x110 [ 142.715279][ T5602] device_add+0x83b/0x1050 [ 142.719701][ T5602] wiphy_register+0x1e74/0x2c40 [ 142.724565][ T5602] ? cfg80211_event_work+0x40/0x40 [ 142.729669][ T5602] ? minstrel_ht_alloc+0x807/0x980 [ 142.734785][ T5602] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 142.740853][ T5602] ieee80211_register_hw+0x2a03/0x3a60 [ 142.746316][ T5602] ? ieee80211_register_hw+0xb21/0x3a60 [ 142.751878][ T5602] ? ieee80211_tasklet_handler+0x20/0x20 [ 142.757514][ T5602] ? rcu_is_watching+0x11/0xa0 [ 142.762279][ T5602] ? hrtimer_init+0x10c/0x220 [ 142.766963][ T5602] mac80211_hwsim_new_radio+0x209d/0x4050 [ 142.772703][ T5602] hwsim_new_radio_nl+0xa7d/0xc50 [ 142.777741][ T5602] genl_rcv_msg+0xd0b/0xfa0 [ 142.782253][ T5602] ? genl_bind+0x370/0x370 [ 142.786676][ T5602] ? __dev_queue_xmit+0x1b64/0x2e50 [ 142.791874][ T5602] ? verify_lock_unused+0x140/0x140 [ 142.797087][ T5602] ? dev_queue_xmit+0x20/0x20 [ 142.801761][ T5602] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 142.808106][ T5602] netlink_rcv_skb+0x1e9/0x430 [ 142.812873][ T5602] ? genl_bind+0x370/0x370 [ 142.817285][ T5602] ? netlink_ack+0xb10/0xb10 [ 142.821882][ T5602] ? down_read+0x1aa/0x2e0 [ 142.826295][ T5602] genl_rcv+0x24/0x40 [ 142.830274][ T5602] netlink_unicast+0x78f/0x940 [ 142.835044][ T5602] netlink_sendmsg+0x8ba/0xbe0 [ 142.839819][ T5602] ? netlink_getsockopt+0x570/0x570 [ 142.845014][ T5602] ? aa_sock_msg_perm+0x94/0x150 [ 142.849958][ T5602] ? apparmor_socket_sendmsg+0x88/0x230 [ 142.855512][ T5602] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 142.860801][ T5602] ? security_socket_sendmsg+0x7c/0xa0 [ 142.866263][ T5602] ? netlink_getsockopt+0x570/0x570 [ 142.871465][ T5602] ____sys_sendmsg+0x5be/0x8f0 [ 142.876238][ T5602] ? __sys_sendmsg_sock+0x30/0x30 [ 142.881268][ T5602] ? import_iovec+0x6f/0xa0 [ 142.885776][ T5602] ___sys_sendmsg+0x236/0x2e0 [ 142.890461][ T5602] ? __sys_sendmsg+0x290/0x290 [ 142.895232][ T5602] ? __lock_acquire+0x7b50/0x7b50 [ 142.900255][ T5602] ? __might_fault+0xb3/0x110 [ 142.904956][ T5602] __se_sys_sendmsg+0x1b7/0x2a0 [ 142.909806][ T5602] ? __x64_sys_sendmsg+0x80/0x80 [ 142.914740][ T5602] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 142.920730][ T5602] ? lockdep_hardirqs_on+0x94/0x140 [ 142.925927][ T5602] do_syscall_64+0x4c/0xa0 [ 142.930339][ T5602] ? clear_bhb_loop+0x30/0x80 [ 142.935016][ T5602] ? clear_bhb_loop+0x30/0x80 [ 142.939702][ T5602] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.945591][ T5602] RIP: 0033:0x7fa90cbb8e99 [ 142.950001][ T5602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.969603][ T5602] RSP: 002b:00007fa90adf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.978014][ T5602] RAX: ffffffffffffffda RBX: 00007fa90ce41090 RCX: 00007fa90cbb8e99 [ 142.985980][ T5602] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 142.993946][ T5602] RBP: 00007fa90cc4eeaf R08: 0000000000000000 R09: 0000000000000000 [ 143.001911][ T5602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.009873][ T5602] R13: 00007fa90ce41128 R14: 00007fa90ce41090 R15: 00007ffda7d9ab68 [ 143.017854][ T5602] [ 145.292994][ T5644] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.287'. [ 145.415620][ T5644] netlink: 21192 bytes leftover after parsing attributes in process `syz.3.287'. [ 145.918228][ T5665] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.290'. [ 145.931028][ T5670] netlink: 'syz.2.291': attribute type 3 has an invalid length. [ 145.948838][ T5670] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.291'. [ 145.958252][ T5665] netlink: 21192 bytes leftover after parsing attributes in process `syz.3.290'. [ 146.050463][ T5663] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.291'. [ 146.160139][ T5663] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 146.168052][ T5663] CPU: 1 PID: 5663 Comm: syz.2.291 Not tainted syzkaller #0 [ 146.175343][ T5663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 146.185400][ T5663] Call Trace: [ 146.188681][ T5663] [ 146.191614][ T5663] dump_stack_lvl+0x188/0x250 [ 146.196317][ T5663] ? show_regs_print_info+0x20/0x20 [ 146.201529][ T5663] ? load_image+0x410/0x410 [ 146.206057][ T5663] sysfs_warn_dup+0x8a/0xa0 [ 146.210568][ T5663] sysfs_do_create_link_sd+0xc0/0x110 [ 146.215951][ T5663] device_add+0x83b/0x1050 [ 146.220376][ T5663] wiphy_register+0x1e74/0x2c40 [ 146.225255][ T5663] ? cfg80211_event_work+0x40/0x40 [ 146.230380][ T5663] ? minstrel_ht_alloc+0x807/0x980 [ 146.235513][ T5663] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 146.241597][ T5663] ieee80211_register_hw+0x2a03/0x3a60 [ 146.247081][ T5663] ? ieee80211_register_hw+0xb21/0x3a60 [ 146.252650][ T5663] ? ieee80211_tasklet_handler+0x20/0x20 [ 146.258298][ T5663] ? rcu_is_watching+0x11/0xa0 [ 146.263077][ T5663] ? hrtimer_init+0x10c/0x220 [ 146.267765][ T5663] mac80211_hwsim_new_radio+0x209d/0x4050 [ 146.273516][ T5663] hwsim_new_radio_nl+0xa7d/0xc50 [ 146.278572][ T5663] genl_rcv_msg+0xd0b/0xfa0 [ 146.283100][ T5663] ? genl_bind+0x370/0x370 [ 146.287531][ T5663] ? __dev_queue_xmit+0x1b64/0x2e50 [ 146.292741][ T5663] ? verify_lock_unused+0x140/0x140 [ 146.297968][ T5663] ? dev_queue_xmit+0x20/0x20 [ 146.302654][ T5663] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 146.309007][ T5663] netlink_rcv_skb+0x1e9/0x430 [ 146.313784][ T5663] ? genl_bind+0x370/0x370 [ 146.318217][ T5663] ? netlink_ack+0xb10/0xb10 [ 146.322855][ T5663] ? down_read+0x1aa/0x2e0 [ 146.327288][ T5663] genl_rcv+0x24/0x40 [ 146.331276][ T5663] netlink_unicast+0x78f/0x940 [ 146.336064][ T5663] netlink_sendmsg+0x8ba/0xbe0 [ 146.340845][ T5663] ? netlink_getsockopt+0x570/0x570 [ 146.346041][ T5663] ? aa_sock_msg_perm+0x94/0x150 [ 146.350991][ T5663] ? apparmor_socket_sendmsg+0x88/0x230 [ 146.356545][ T5663] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 146.361836][ T5663] ? security_socket_sendmsg+0x7c/0xa0 [ 146.367302][ T5663] ? netlink_getsockopt+0x570/0x570 [ 146.372510][ T5663] ____sys_sendmsg+0x5be/0x8f0 [ 146.377295][ T5663] ? __sys_sendmsg_sock+0x30/0x30 [ 146.382344][ T5663] ? import_iovec+0x6f/0xa0 [ 146.386863][ T5663] ___sys_sendmsg+0x236/0x2e0 [ 146.391561][ T5663] ? __sys_sendmsg+0x290/0x290 [ 146.396350][ T5663] ? __might_fault+0xb3/0x110 [ 146.401060][ T5663] __se_sys_sendmsg+0x1b7/0x2a0 [ 146.405916][ T5663] ? __x64_sys_sendmsg+0x80/0x80 [ 146.410855][ T5663] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 146.416858][ T5663] ? lockdep_hardirqs_on+0x94/0x140 [ 146.422071][ T5663] do_syscall_64+0x4c/0xa0 [ 146.426493][ T5663] ? clear_bhb_loop+0x30/0x80 [ 146.431175][ T5663] ? clear_bhb_loop+0x30/0x80 [ 146.435859][ T5663] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.441755][ T5663] RIP: 0033:0x7fcb6be30e99 [ 146.446173][ T5663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.465774][ T5663] RSP: 002b:00007fcb6a089028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.474191][ T5663] RAX: ffffffffffffffda RBX: 00007fcb6c0b8fa0 RCX: 00007fcb6be30e99 [ 146.482167][ T5663] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 146.490141][ T5663] RBP: 00007fcb6bec6eaf R08: 0000000000000000 R09: 0000000000000000 [ 146.498113][ T5663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.506083][ T5663] R13: 00007fcb6c0b9038 R14: 00007fcb6c0b8fa0 R15: 00007ffd7a1a7bf8 [ 146.514081][ T5663] [ 147.877202][ T5731] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.300'. [ 147.903252][ T5731] netlink: 21192 bytes leftover after parsing attributes in process `syz.2.300'. [ 148.150242][ T5748] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.303'. [ 148.212019][ T5748] netlink: 21192 bytes leftover after parsing attributes in process `syz.3.303'. [ 148.974221][ T5776] netlink: 'syz.2.307': attribute type 3 has an invalid length. [ 149.052777][ T5776] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 149.112462][ T5776] CPU: 1 PID: 5776 Comm: syz.2.307 Not tainted syzkaller #0 [ 149.119778][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 149.129833][ T5776] Call Trace: [ 149.133104][ T5776] [ 149.136027][ T5776] dump_stack_lvl+0x188/0x250 [ 149.140702][ T5776] ? show_regs_print_info+0x20/0x20 [ 149.145890][ T5776] ? load_image+0x410/0x410 [ 149.150399][ T5776] sysfs_warn_dup+0x8a/0xa0 [ 149.154887][ T5776] sysfs_do_create_link_sd+0xc0/0x110 [ 149.160243][ T5776] device_add+0x83b/0x1050 [ 149.164650][ T5776] wiphy_register+0x1e74/0x2c40 [ 149.169496][ T5776] ? cfg80211_event_work+0x40/0x40 [ 149.174590][ T5776] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 149.180738][ T5776] ieee80211_register_hw+0x2a03/0x3a60 [ 149.186187][ T5776] ? ieee80211_register_hw+0xb21/0x3a60 [ 149.191729][ T5776] ? ieee80211_tasklet_handler+0x20/0x20 [ 149.197352][ T5776] ? rcu_is_watching+0x11/0xa0 [ 149.202103][ T5776] ? hrtimer_init+0x10c/0x220 [ 149.206771][ T5776] mac80211_hwsim_new_radio+0x209d/0x4050 [ 149.212489][ T5776] hwsim_new_radio_nl+0xa7d/0xc50 [ 149.217507][ T5776] genl_rcv_msg+0xd0b/0xfa0 [ 149.221999][ T5776] ? genl_bind+0x370/0x370 [ 149.226406][ T5776] ? verify_lock_unused+0x140/0x140 [ 149.231604][ T5776] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 149.238183][ T5776] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 149.244505][ T5776] netlink_rcv_skb+0x1e9/0x430 [ 149.249252][ T5776] ? genl_bind+0x370/0x370 [ 149.253652][ T5776] ? netlink_ack+0xb10/0xb10 [ 149.258233][ T5776] ? down_read+0x1aa/0x2e0 [ 149.262635][ T5776] genl_rcv+0x24/0x40 [ 149.266597][ T5776] netlink_unicast+0x78f/0x940 [ 149.271351][ T5776] netlink_sendmsg+0x8ba/0xbe0 [ 149.276107][ T5776] ? netlink_getsockopt+0x570/0x570 [ 149.281288][ T5776] ? aa_sock_msg_perm+0x94/0x150 [ 149.286211][ T5776] ? apparmor_socket_sendmsg+0x88/0x230 [ 149.291739][ T5776] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 149.297009][ T5776] ? security_socket_sendmsg+0x7c/0xa0 [ 149.302448][ T5776] ? netlink_getsockopt+0x570/0x570 [ 149.307630][ T5776] ____sys_sendmsg+0x5be/0x8f0 [ 149.312385][ T5776] ? __sys_sendmsg_sock+0x30/0x30 [ 149.317401][ T5776] ? import_iovec+0x6f/0xa0 [ 149.321891][ T5776] ___sys_sendmsg+0x236/0x2e0 [ 149.326560][ T5776] ? __sys_sendmsg+0x290/0x290 [ 149.331314][ T5776] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 149.337554][ T5776] __se_sys_sendmsg+0x1b7/0x2a0 [ 149.342389][ T5776] ? __x64_sys_sendmsg+0x80/0x80 [ 149.347307][ T5776] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 149.353283][ T5776] ? lockdep_hardirqs_on+0x94/0x140 [ 149.358471][ T5776] do_syscall_64+0x4c/0xa0 [ 149.362872][ T5776] ? clear_bhb_loop+0x30/0x80 [ 149.367531][ T5776] ? clear_bhb_loop+0x30/0x80 [ 149.372192][ T5776] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.378066][ T5776] RIP: 0033:0x7fcb6be30e99 [ 149.382468][ T5776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.402059][ T5776] RSP: 002b:00007fcb6a089028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.410456][ T5776] RAX: ffffffffffffffda RBX: 00007fcb6c0b8fa0 RCX: 00007fcb6be30e99 [ 149.418410][ T5776] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 149.426369][ T5776] RBP: 00007fcb6bec6eaf R08: 0000000000000000 R09: 0000000000000000 [ 149.434324][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.442278][ T5776] R13: 00007fcb6c0b9038 R14: 00007fcb6c0b8fa0 R15: 00007ffd7a1a7bf8 [ 149.450240][ T5776] [ 150.693687][ T5805] __nla_validate_parse: 2 callbacks suppressed [ 150.693703][ T5805] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.313'. [ 150.807130][ T5805] netlink: 21192 bytes leftover after parsing attributes in process `syz.6.313'. [ 150.839129][ T5817] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.314'. [ 150.875895][ T5817] netlink: 21192 bytes leftover after parsing attributes in process `syz.4.314'. [ 151.934851][ T5853] netlink: 'syz.2.322': attribute type 3 has an invalid length. [ 152.016334][ T5853] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.322'. [ 152.185762][ T5860] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.322'. [ 152.788337][ T5858] ------------[ cut here ]------------ [ 152.794094][ T5858] WARNING: CPU: 0 PID: 5858 at kernel/events/core.c:6688 perf_pending_task+0x353/0x480 [ 152.803820][ T5858] Modules linked in: [ 152.807721][ T5858] CPU: 0 PID: 5858 Comm: syz.4.323 Not tainted syzkaller #0 [ 152.815030][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.825107][ T5858] RIP: 0010:perf_pending_task+0x353/0x480 [ 152.830855][ T5858] Code: e8 92 4a de ff 84 db 75 10 e8 29 48 de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 19 48 de ff e8 bc c3 65 ff eb e9 e8 0d 48 de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 152.850495][ T5858] RSP: 0018:ffffc90002e3f9c0 EFLAGS: 00010293 [ 152.856564][ T5858] RAX: ffffffff819ab973 RBX: ffff88805c848a48 RCX: ffff88801dd05940 [ 152.864582][ T5858] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 152.872583][ T5858] RBP: ffff88805c848818 R08: ffff88801dd06353 R09: 1ffff11003ba0c6a [ 152.880585][ T5858] R10: dffffc0000000000 R11: ffffed1003ba0c6b R12: ffff88801dd05940 [ 152.888589][ T5858] R13: ffff888061a94158 R14: 0000000000000000 R15: 1ffff1100b909103 [ 152.896565][ T5858] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 152.905526][ T5858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.912136][ T5858] CR2: 0000000100000000 CR3: 000000000c08e000 CR4: 00000000003506f0 [ 152.920135][ T5858] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.928107][ T5858] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.936102][ T5858] Call Trace: [ 152.939403][ T5858] [ 152.942338][ T5858] task_work_run+0x125/0x1a0 [ 152.946944][ T5858] do_exit+0x635/0x2110 [ 152.951131][ T5858] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 152.957298][ T5858] ? lockdep_hardirqs_on+0x94/0x140 [ 152.962529][ T5858] ? put_task_struct+0x80/0x80 [ 152.967298][ T5858] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 152.973491][ T5858] ? do_exit+0x1/0x2110 [ 152.977649][ T5858] do_group_exit+0x12c/0x2f0 [ 152.982262][ T5858] ? lockdep_hardirqs_on+0x94/0x140 [ 152.987469][ T5858] get_signal+0x7eb/0x12e0 [ 152.991930][ T5858] arch_do_signal_or_restart+0xe6/0x12a0 [ 152.997569][ T5858] ? lock_chain_count+0x20/0x20 [ 153.002456][ T5858] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 153.008638][ T5858] ? lockdep_hardirqs_on+0x94/0x140 [ 153.013842][ T5858] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 153.020027][ T5858] ? get_sigframe_size+0x10/0x10 [ 153.024984][ T5858] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 153.030999][ T5858] ? exit_to_user_mode_loop+0x3b/0x130 [ 153.036466][ T5858] exit_to_user_mode_loop+0x9e/0x130 [ 153.041787][ T5858] exit_to_user_mode_prepare+0xee/0x180 [ 153.047338][ T5858] syscall_exit_to_user_mode+0x16/0x40 [ 153.052836][ T5858] do_syscall_64+0x58/0xa0 [ 153.057254][ T5858] ? clear_bhb_loop+0x30/0x80 [ 153.061955][ T5858] ? clear_bhb_loop+0x30/0x80 [ 153.066638][ T5858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.072559][ T5858] RIP: 0033:0x7f5287e18e99 [ 153.076975][ T5858] Code: Unable to access opcode bytes at RIP 0x7f5287e18e6f. [ 153.084364][ T5858] RSP: 002b:00007f52860710e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 153.092805][ T5858] RAX: fffffffffffffe00 RBX: 00007f52880a0fa8 RCX: 00007f5287e18e99 [ 153.100804][ T5858] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f52880a0fa8 [ 153.108804][ T5858] RBP: 00007f52880a0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 153.116780][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.124775][ T5858] R13: 00007f52880a1038 R14: 00007ffe6378fdc0 R15: 00007ffe6378fea8 [ 153.132788][ T5858] [ 153.135819][ T5858] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 153.143091][ T5858] CPU: 0 PID: 5858 Comm: syz.4.323 Not tainted syzkaller #0 [ 153.150375][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 153.160428][ T5858] Call Trace: [ 153.163706][ T5858] [ 153.166631][ T5858] dump_stack_lvl+0x188/0x250 [ 153.171313][ T5858] ? show_regs_print_info+0x20/0x20 [ 153.176511][ T5858] ? load_image+0x410/0x410 [ 153.181023][ T5858] panic+0x2f8/0x850 [ 153.184924][ T5858] ? bpf_jit_dump+0xd0/0xd0 [ 153.189444][ T5858] ? perf_pending_task+0x353/0x480 [ 153.194561][ T5858] __warn+0x248/0x2b0 [ 153.198546][ T5858] ? perf_pending_task+0x353/0x480 [ 153.203658][ T5858] report_bug+0x1b9/0x2e0 [ 153.207995][ T5858] handle_bug+0x3a/0x70 [ 153.212161][ T5858] exc_invalid_op+0x16/0x40 [ 153.216664][ T5858] asm_exc_invalid_op+0x16/0x20 [ 153.221519][ T5858] RIP: 0010:perf_pending_task+0x353/0x480 [ 153.227243][ T5858] Code: e8 92 4a de ff 84 db 75 10 e8 29 48 de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 19 48 de ff e8 bc c3 65 ff eb e9 e8 0d 48 de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 153.246850][ T5858] RSP: 0018:ffffc90002e3f9c0 EFLAGS: 00010293 [ 153.252917][ T5858] RAX: ffffffff819ab973 RBX: ffff88805c848a48 RCX: ffff88801dd05940 [ 153.260890][ T5858] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 153.268862][ T5858] RBP: ffff88805c848818 R08: ffff88801dd06353 R09: 1ffff11003ba0c6a [ 153.276832][ T5858] R10: dffffc0000000000 R11: ffffed1003ba0c6b R12: ffff88801dd05940 [ 153.284804][ T5858] R13: ffff888061a94158 R14: 0000000000000000 R15: 1ffff1100b909103 [ 153.292784][ T5858] ? perf_pending_task+0x353/0x480 [ 153.297905][ T5858] task_work_run+0x125/0x1a0 [ 153.302506][ T5858] do_exit+0x635/0x2110 [ 153.306666][ T5858] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 153.312825][ T5858] ? lockdep_hardirqs_on+0x94/0x140 [ 153.318027][ T5858] ? put_task_struct+0x80/0x80 [ 153.322790][ T5858] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 153.328953][ T5858] ? do_exit+0x1/0x2110 [ 153.333112][ T5858] do_group_exit+0x12c/0x2f0 [ 153.337706][ T5858] ? lockdep_hardirqs_on+0x94/0x140 [ 153.342908][ T5858] get_signal+0x7eb/0x12e0 [ 153.347341][ T5858] arch_do_signal_or_restart+0xe6/0x12a0 [ 153.352979][ T5858] ? lock_chain_count+0x20/0x20 [ 153.357844][ T5858] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 153.364000][ T5858] ? lockdep_hardirqs_on+0x94/0x140 [ 153.369200][ T5858] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 153.375355][ T5858] ? get_sigframe_size+0x10/0x10 [ 153.380309][ T5858] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 153.386297][ T5858] ? exit_to_user_mode_loop+0x3b/0x130 [ 153.391760][ T5858] exit_to_user_mode_loop+0x9e/0x130 [ 153.397051][ T5858] exit_to_user_mode_prepare+0xee/0x180 [ 153.402598][ T5858] syscall_exit_to_user_mode+0x16/0x40 [ 153.408060][ T5858] do_syscall_64+0x58/0xa0 [ 153.412478][ T5858] ? clear_bhb_loop+0x30/0x80 [ 153.417162][ T5858] ? clear_bhb_loop+0x30/0x80 [ 153.421839][ T5858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.427734][ T5858] RIP: 0033:0x7f5287e18e99 [ 153.432159][ T5858] Code: Unable to access opcode bytes at RIP 0x7f5287e18e6f. [ 153.439519][ T5858] RSP: 002b:00007f52860710e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 153.447933][ T5858] RAX: fffffffffffffe00 RBX: 00007f52880a0fa8 RCX: 00007f5287e18e99 [ 153.455904][ T5858] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f52880a0fa8 [ 153.463876][ T5858] RBP: 00007f52880a0fa0 R08: 0000000000000000 R09: 0000000000000000 [ 153.471847][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.479817][ T5858] R13: 00007f52880a1038 R14: 00007ffe6378fdc0 R15: 00007ffe6378fea8 [ 153.487805][ T5858] [ 153.491028][ T5858] Kernel Offset: disabled [ 153.495350][ T5858] Rebooting in 86400 seconds..