last executing test programs: 27m22.024177574s ago: executing program 4 (id=29777): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 27m21.902458308s ago: executing program 4 (id=29792): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x100b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b12d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) 27m21.775935504s ago: executing program 4 (id=29786): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0xa, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000880)=r0, 0x4) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 27m21.501310335s ago: executing program 4 (id=29790): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27m21.3773567s ago: executing program 4 (id=29796): r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x17, &(0x7f00000008c0)=r3, 0x4) 27m20.547297894s ago: executing program 4 (id=29801): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40080, 0x0) 27m5.494499501s ago: executing program 32 (id=29801): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40080, 0x0) 21m14.475595921s ago: executing program 1 (id=34827): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x7, &(0x7f00000011c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200000005000000000000009500007b0000000085000000ad0000009500000000000000a905e16edb7af50b4d83e695dcb6133fdd391e0e5f23638df23bbcbb67d7c46939ae"], &(0x7f0000000000)='GPL\x00', 0x3, 0x92, &(0x7f0000000240)=""/146}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x9) 21m14.192033732s ago: executing program 1 (id=34836): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x32d68bef}, 0x1000, 0x5, 0xffffff7e, 0x8, 0x2, 0xfffffffe, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='!pids '], 0x6) 21m14.050924778s ago: executing program 1 (id=34840): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) 21m13.75135336s ago: executing program 1 (id=34848): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0xd32}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 21m13.679874683s ago: executing program 1 (id=34849): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f00000000c0)={'veth0_to_batadv\x00', @random="0200c100d8f1"}) 21m12.78546785s ago: executing program 1 (id=34857): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0xf6101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 20m57.553147054s ago: executing program 33 (id=34857): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0xf6101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 4.154685778s ago: executing program 5 (id=48746): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x140, 0x1, 0x10000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, 0xffffffffffffffff, 0x0, 0xd88d02a0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x12, 0x0, 0x0, 0x6}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a9040200000000000000", 0x18}], 0x1}, 0x4090) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) 3.820283206s ago: executing program 5 (id=48749): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x6, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc", 0x13}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000030"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="19000000040000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000004000000000000000000000000000000e6414207fdfadf37394970ece7d84dde72f7b1cd70c7afca7e6835b807c538ff909ac9bc8952c36ba20bfb929978ec0f91d6f4a67a5623efe9278ebe0031c41897efc75d322f8ac3b652f6b0db34c249f7c7fa54bcbf27d6db5fa4ccfa94376cfdc289132db93491ed0ebbea02fb5436588d849a3ec1aa06273cfcec24d95e76bc5a92c89a696ac03fada955589f6e66eec3672ef9687bc669fa4873"], 0x50) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000180)=0x7d8, &(0x7f0000000340)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 3.68176174s ago: executing program 5 (id=48751): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0xfe10, 0x21182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5, @perf_bp={0x0, 0xd}, 0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8, 0xa, 0x4, 0x0, 0x0, 0x62a, 0xa08a0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x0, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x680, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3119}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x12804, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x36, 0x43a1bd76, 0x7, 0xff, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, 0x0, 0x24000008) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000002280)=""/196, &(0x7f00000021c0), &(0x7f0000000440), 0x3, r0}, 0x38) r2 = socket$kcm(0x10, 0x100000000000, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000b0000000400"], 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="010000"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r6}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x40800) 3.610588771s ago: executing program 5 (id=48753): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff, 0x40020000}, 0x102229, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5de6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x60000000}, 0x94) socketpair(0x9, 0x3, 0x1000004, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000001440)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x3}, 0x2800, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.476906205s ago: executing program 5 (id=48756): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x4004743b, 0xf0ff1f00000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x9}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001d80)={0xffffffffffffffff, 0x20, &(0x7f0000001d40)={&(0x7f0000000880)=""/214, 0xd6, 0x0, &(0x7f0000001c40)=""/195, 0xc3}}, 0x10) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001e00)=@o_path={0x0, 0x0, 0x4000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x16, 0x3, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x1, 0x2, 0xa, 0x6, 0x40, 0xfffffffffffffffc}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000}], 0x0, 0xbc6e, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x3, 0x3, 0x6}, 0x10, r5, r6, 0x2, &(0x7f0000001e40)=[0xffffffffffffffff], &(0x7f0000001e80)=[{0x2, 0x2, 0xa, 0xa}, {0x3, 0x1, 0x2, 0x9}], 0x10, 0x9fa}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x7, &(0x7f0000001740)=@raw=[@jmp={0x5, 0x1, 0x7, 0x6, 0x0, 0xffffffffffffffc0}, @alu={0x4, 0x1, 0x7, 0xa, 0x4, 0x98}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x0, 0x2, 0x9, 0x9, 0x80, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9b}], &(0x7f0000001780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001840)={0x2, 0x8, 0xec5, 0xe821}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001880)=[r4, r4, r4, r7, r4], &(0x7f00000018c0)=[{0x2, 0x5, 0xd, 0x6}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f3, &(0x7f0000000080)) 2.479543979s ago: executing program 2 (id=48768): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xb, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x2, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x23}]}, {0x0, [0x0, 0x2e, 0x61, 0x61, 0x61, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x4b}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ef000000000000000000100094128000080e0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x4, 0x19, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000090000000400"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r4, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r4, &(0x7f0000000100), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) 2.367473832s ago: executing program 0 (id=48770): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000020000000400000000e3ff01050000000300000005000093010004000a000000ffff00000600000002000000ff0f00000500000004000000400000000300000031e28cab08f3182c81000000100002007304000001000000060000000000000e0400000000630000000000000000000d"], 0x0, 0x8a, 0x0, 0x40000001, 0x6}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfffffffffffffe95}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea"], 0xfdef) r3 = syz_clone(0x8000, &(0x7f0000000180)="40cda025d09e32eb9d4897064cd1c30efa4def2526fb31d004b6172f6341a6e2bd716742a550aa4157d6e8b2f475a2ebe3268f95193ab30349e3d956746283d4a57e91c77d401adde13d3642919e8bf748ef984143f5dd", 0x57, 0x0, &(0x7f0000000440), &(0x7f0000000480)="546343dbe3b9513afb2c878a42c065b8f5cc32a77dbffec5ef5fb28f9da1e92be29a2b858603a371f232ed4a9a991d810424e06962fb031fb51c8017512fedc38d4e3b18536fb770efbaca899db2115ee9f7036988fb568a49154b942d41cf7085468b40f6730953b36ed5748713c4c798cce0546475e65957c6be32") syz_open_procfs$namespace(r3, &(0x7f0000000580)='ns/time_for_children\x00') syz_open_procfs$namespace(r3, &(0x7f0000000540)='ns/uts\x00') r4 = socket$kcm(0x11, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ad1277098f982cbb9738196918000000000000000000000006000000190000002e00000085020000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x50) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000f00)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_devices(r8, &(0x7f0000000f40)={'a', ' *:* ', 'wm\x00'}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000140)=r5, 0x4) sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f0000000000)=@llc={0x1a, 0x338, 0xf, 0x6, 0x1, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000080)="fb", 0x1}], 0x1}, 0x800) 2.365646252s ago: executing program 5 (id=48771): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff, 0x40020000}, 0x102229, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5de6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x60000000}, 0x94) socketpair(0x9, 0x3, 0x1000004, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000001440)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x3}, 0x2800, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) r5 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.082500709s ago: executing program 2 (id=48773): r0 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000500)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="c9", 0x1}, {0x0}], 0x2}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)}, 0x21) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x368}, 0x20044000) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x485, 0x0, 0x0) socketpair(0x28, 0x4, 0x28, 0x0) socketpair(0x26, 0x6, 0xdc1, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6b772b5b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100924, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b15, 0x0) 1.848819875s ago: executing program 0 (id=48776): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0xfe10, 0x21182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5, @perf_bp={0x0, 0xd}, 0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8, 0xa, 0x4, 0x0, 0x0, 0x62a, 0xa08a0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x0, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x680, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3119}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x12804, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x36, 0x43a1bd76, 0x7, 0xff, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, 0x0, 0x24000008) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000002280)=""/196, &(0x7f00000021c0), &(0x7f0000000440), 0x3, r0}, 0x38) r2 = socket$kcm(0x10, 0x100000000000, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000b0000000400"], 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="01000000"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r6}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x40800) 1.729656728s ago: executing program 2 (id=48777): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff, 0x40020000}, 0x102229, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5de6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x60000000}, 0x94) socketpair(0x9, 0x3, 0x1000004, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000001440)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x3}, 0x2800, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.685131789s ago: executing program 0 (id=48778): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff, 0x40020000}, 0x102229, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5de6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x60000000}, 0x94) socketpair(0x9, 0x3, 0x1000004, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000001440)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x3}, 0x2800, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.667764469s ago: executing program 3 (id=48779): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x140, 0x1, 0x10000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, 0xffffffffffffffff, 0x0, 0xd88d02a0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x12, 0x0, 0x0, 0x6}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a9040200000000000000", 0x18}], 0x1}, 0x4090) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) 1.657157799s ago: executing program 6 (id=48780): r0 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000500)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="c9", 0x1}, {0x0}], 0x2}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0xa, 0x300) recvmsg(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)}, 0x21) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x368}, 0x20044000) recvmsg$kcm(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x4) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x485, 0x0, 0x0) socketpair(0x28, 0x4, 0x28, 0x0) socketpair(0x26, 0x6, 0xdc1, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6b772b5b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100924, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b15, 0x0) 1.404150185s ago: executing program 2 (id=48781): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x2, 0x8, 0x4, 0x1, 0x6, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000038000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181003100000002010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x8000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00QE\xf44.\xab%j'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x4, 0xfffc, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c805"], 0x5c8}, 0xf7e5) close(r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'veth1_vlan\x00', @random="99337aebb851"}) 1.397776426s ago: executing program 6 (id=48782): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff, 0x40020000}, 0x102229, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5de6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x60000000}, 0x94) socketpair(0x9, 0x3, 0x1000004, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000001440)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x3}, 0x2800, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.374734006s ago: executing program 3 (id=48783): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xb, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x2, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x23}]}, {0x0, [0x0, 0x2e, 0x61, 0x61, 0x61, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x4b}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ef000000000000000000100094128000080e0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x4, 0x19, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000090000000400"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r4, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r4, &(0x7f0000000100), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) 1.324552967s ago: executing program 0 (id=48784): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff, 0x40020000}, 0x102229, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5de6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x60000000}, 0x94) socketpair(0x9, 0x3, 0x1000004, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000001440)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x3}, 0x2800, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.197579631s ago: executing program 3 (id=48785): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xb, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x2, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x23}]}, {0x0, [0x0, 0x2e, 0x61, 0x61, 0x61, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x4b}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ef000000000000000000100094128000080e00009500000000000000"], 0x0, 0x0, 0xfffffec7, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x4, 0x19, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000090000000400"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r4, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r4, &(0x7f0000000100), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) 1.172967031s ago: executing program 6 (id=48786): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000020000000400000000e3ff01050000000300000005000093010004000a000000ffff00000600000002000000ff0f00000500000004000000400000000300000031e28cab08f3182c81000000100002007304000001000000060000000000000e0400000000630000000000000000000d"], 0x0, 0x8a, 0x0, 0x40000001, 0x6}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfffffffffffffe95}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea"], 0xfdef) r3 = syz_clone(0x8000, &(0x7f0000000180)="40cda025d09e32eb9d4897064cd1c30efa4def2526fb31d004b6172f6341a6e2bd716742a550aa4157d6e8b2f475a2ebe3268f95193ab30349e3d956746283d4a57e91c77d401adde13d3642919e8bf748ef984143f5dd", 0x57, 0x0, &(0x7f0000000440), &(0x7f0000000480)="546343dbe3b9513afb2c878a42c065b8f5cc32a77dbffec5ef5fb28f9da1e92be29a2b858603a371f232ed4a9a991d810424e06962fb031fb51c8017512fedc38d4e3b18536fb770efbaca899db2115ee9f7036988fb568a49154b942d41cf7085468b40f6730953b36ed5748713c4c798cce0546475e65957c6be32") syz_open_procfs$namespace(r3, &(0x7f0000000580)='ns/time_for_children\x00') syz_open_procfs$namespace(r3, &(0x7f0000000540)='ns/uts\x00') r4 = socket$kcm(0x11, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ad1277098f982cbb9738196918000000000000000000000006000000190000002e00000085020000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000f00)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_devices(r8, &(0x7f0000000f40)={'a', ' *:* ', 'wm\x00'}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000140)=r5, 0x4) sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f0000000000)=@llc={0x1a, 0x338, 0xf, 0x6, 0x1, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000080)="fb", 0x1}], 0x1}, 0x800) 928.612967ms ago: executing program 3 (id=48787): r0 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000500)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="c9", 0x1}, {0x0}], 0x2}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)}, 0x21) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x368}, 0x20044000) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x485, 0x0, 0x0) socketpair(0x28, 0x4, 0x28, 0x0) socketpair(0x26, 0x6, 0xdc1, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6b772b5b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100924, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b15, 0x0) 811.91349ms ago: executing program 0 (id=48788): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0e000091d028ef8020"], 0xfe33) socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000800) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0xfe10, 0x21182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5, @perf_bp={0x0, 0xd}, 0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x680, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3119}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x12804, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x36, 0x43a1bd76, 0x7, 0xff, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="6025e887", 0x4}], 0x1}, 0x24000008) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000002280)=""/196, &(0x7f00000021c0), &(0x7f0000000440), 0x3, r0}, 0x38) r2 = socket$kcm(0x10, 0x100000000000, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="01000000"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r5}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x40800) 746.833822ms ago: executing program 2 (id=48789): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x140, 0x1, 0x10000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, 0xffffffffffffffff, 0x0, 0xd88d02a0}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x12, 0x0, 0x0, 0x6}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a9040200000000000000", 0x18}], 0x1}, 0x4090) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) 720.063492ms ago: executing program 6 (id=48790): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x6, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000030"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="19000000040000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000004000000000000000000000000000000e6414207fdfadf37394970ece7d84dde72f7b1cd70c7afca7e6835b807c538ff909ac9bc8952c36ba20bfb929978ec0f91d6f4a67a5623efe9278ebe0031c41897efc75d322f8ac3b652f6b0db34c249f7c7fa54bcbf27d6db5fa4ccfa94376cfdc289132db93491ed0ebbea02fb5436588d849a3ec1aa06273cfcec24d95e76bc5a92c89a696ac03fada955589f6e66eec3672ef9687bc669fa4873"], 0x50) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000180)=0x7d8, &(0x7f0000000340)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 664.872774ms ago: executing program 0 (id=48791): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff, 0x40020000}, 0x102229, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5de6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x60000000}, 0x94) socketpair(0x9, 0x3, 0x1000004, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000001440)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x3}, 0x2800, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 664.427364ms ago: executing program 3 (id=48792): r0 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000500)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="c9", 0x1}, {0x0}], 0x2}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0xa, 0x300) recvmsg(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)}, 0x21) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x368}, 0x20044000) recvmsg$kcm(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x4) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x485, 0x0, 0x0) socketpair(0x28, 0x4, 0x28, 0x0) socketpair(0x26, 0x6, 0xdc1, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6b772b5b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100924, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b15, 0x0) 328.644152ms ago: executing program 6 (id=48793): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x6, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc6004", 0x15}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="19000000040000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000004000000000000000000000000000000e6414207fdfadf37394970ece7d84dde72f7b1cd70c7afca7e6835b807c538ff909ac9bc8952c36ba20bfb929978ec0f91d6f4a67a5623efe9278ebe0031c41897efc75d322f8ac3b652f6b0db34c249f7c7fa54bcbf27d6db5fa4ccfa94376cfdc289132db93491ed0ebbea02fb5436588d849a3ec1aa06273cfcec24d95e76bc5a92c89a696ac03fada955589f6e66eec3672ef9687bc669fa4873"], 0x50) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000180)=0x7d8, &(0x7f0000000340)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 304.847182ms ago: executing program 3 (id=48794): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff, 0x40020000}, 0x102229, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5de6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x60000000}, 0x94) socketpair(0x9, 0x3, 0x1000004, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000001440)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x3}, 0x2800, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 77.554758ms ago: executing program 6 (id=48795): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xb, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x2, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x23}]}, {0x0, [0x0, 0x2e, 0x61, 0x61, 0x61, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x4b}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ef000000000000000000100094128000080e0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x4, 0x19, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000090000000400"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r4, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r4, &(0x7f0000000100), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) 0s ago: executing program 2 (id=48796): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0xfe10, 0x21182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5, @perf_bp={0x0, 0xd}, 0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8, 0xa, 0x4, 0x0, 0x0, 0x62a, 0xa08a0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x0, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x680, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3119}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x12804, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x36, 0x43a1bd76, 0x7, 0xff, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, 0x0, 0x24000008) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000002280)=""/196, &(0x7f00000021c0), &(0x7f0000000440), 0x3, r0}, 0x38) r2 = socket$kcm(0x10, 0x100000000000, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000b0000000400"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r5}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x40800) kernel console output (not intermixed with test programs): d already. Interface lo may have been left with an inconsistent configuration, please check. [ 2430.071102][ T5087] delete_channel: no stack [ 2430.235062][ T5097] device sit0 left promiscuous mode [ 2430.409133][ T5099] device sit0 entered promiscuous mode [ 2430.631563][ T5105] netlink: 'syz.2.44384': attribute type 21 has an invalid length. [ 2430.652322][ T5105] netlink: 128 bytes leftover after parsing attributes in process `syz.2.44384'. [ 2430.669638][ T5105] netlink: 3 bytes leftover after parsing attributes in process `syz.2.44384'. [ 2431.123966][ T5126] netlink: 64 bytes leftover after parsing attributes in process `syz.0.44393'. [ 2431.164205][ T5120] netlink: 128 bytes leftover after parsing attributes in process `syz.5.44390'. [ 2431.189388][ T5120] IPv6: ADDRCONF(NETDEV_CHANGE): Q±6ã×\b‹¡Y­4: link becomes ready [ 2431.234987][ T5120] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 2431.295966][ T5127] delete_channel: no stack [ 2431.479914][ T5138] device sit0 left promiscuous mode [ 2431.608011][ T5145] device sit0 entered promiscuous mode [ 2431.679711][ T5147] netlink: 'syz.5.44400': attribute type 21 has an invalid length. [ 2431.703664][ T5147] netlink: 128 bytes leftover after parsing attributes in process `syz.5.44400'. [ 2431.735943][ T5147] netlink: 3 bytes leftover after parsing attributes in process `syz.5.44400'. [ 2432.645678][ T5175] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2432.675377][ T5175] device syzkaller0 entered promiscuous mode [ 2432.697988][ T5177] netlink: 128 bytes leftover after parsing attributes in process `syz.5.44410'. [ 2432.709485][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): Q±6ã×\b‹¡Y­4: link becomes ready [ 2432.718445][ T5178] delete_channel: no stack [ 2432.767119][ T5177] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 2432.841079][ T5187] device sit0 left promiscuous mode [ 2432.995233][ T5190] device sit0 entered promiscuous mode [ 2433.039170][ T5194] netlink: 'syz.6.44415': attribute type 21 has an invalid length. [ 2433.063372][ T5194] netlink: 128 bytes leftover after parsing attributes in process `syz.6.44415'. [ 2433.086761][ T5194] netlink: 3 bytes leftover after parsing attributes in process `syz.6.44415'. [ 2434.997174][ T5219] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.44423'. [ 2435.385437][ T5222] netlink: 128 bytes leftover after parsing attributes in process `syz.5.44426'. [ 2435.410387][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): Q±6ã×\b‹¡Y­4: link becomes ready [ 2435.446528][ T5222] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 2437.402407][ T5230] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.44429'. [ 2437.465048][ T5233] delete_channel: no stack [ 2437.605452][ T5237] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2437.635982][ T5237] device syzkaller0 entered promiscuous mode [ 2439.249859][ T5242] device sit0 left promiscuous mode [ 2439.370766][ T5248] device sit0 entered promiscuous mode [ 2439.847172][ T5279] netlink: 'syz.0.44445': attribute type 10 has an invalid length. [ 2439.859591][ T5279] netlink: 55 bytes leftover after parsing attributes in process `syz.0.44445'. [ 2439.946947][ T5279] device vlan0 left promiscuous mode [ 2439.957491][ T5279] À: port 1(vlan0) entered disabled state [ 2440.151683][ T5277] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.44446'. [ 2440.613922][ T5297] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2440.673659][ T5297] device syzkaller0 entered promiscuous mode [ 2441.413723][ T5321] netlink: 128 bytes leftover after parsing attributes in process `syz.0.44461'. [ 2441.429032][ T5321] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 2441.741173][ T5337] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.44464'. [ 2443.511820][ T5376] netlink: set zone limit has 8 unknown bytes [ 2443.548453][ T5376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2443.755064][ T5382] device syzkaller0 entered promiscuous mode [ 2443.776412][ T5386] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.44480'. [ 2444.984085][ T5429] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.44498'. [ 2445.160655][ T5439] device syzkaller0 entered promiscuous mode [ 2445.525091][ T5452] netlink: 'syz.5.44503': attribute type 10 has an invalid length. [ 2445.539249][ T5452] netlink: 55 bytes leftover after parsing attributes in process `syz.5.44503'. [ 2445.587663][ T5452] device vlan0 left promiscuous mode [ 2445.593257][ T5452] À: port 1(vlan0) entered disabled state [ 2446.226840][ T5483] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.44513'. [ 2446.479357][ T5491] netlink: set zone limit has 8 unknown bytes [ 2446.553915][ T5487] device syzkaller0 entered promiscuous mode [ 2446.581298][ T5496] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2446.777307][ T5501] netlink: 'syz.3.44520': attribute type 10 has an invalid length. [ 2446.789349][ T5501] netlink: 55 bytes leftover after parsing attributes in process `syz.3.44520'. [ 2446.885611][ T5501] device vlan0 left promiscuous mode [ 2446.891244][ T5501] À: port 1(vlan0) entered disabled state [ 2446.960009][ T5501] team0: Port device macvlan0 removed [ 2447.484223][ T5520] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.44527'. [ 2448.312456][ T5547] device syzkaller0 entered promiscuous mode [ 2448.435227][ T5557] netlink: 'syz.2.44537': attribute type 10 has an invalid length. [ 2448.445924][ T5557] netlink: 55 bytes leftover after parsing attributes in process `syz.2.44537'. [ 2448.539049][ T5557] device vlan0 left promiscuous mode [ 2448.544575][ T5557] À: port 1(vlan0) entered disabled state [ 2450.012756][ T5611] device syzkaller0 entered promiscuous mode [ 2450.626024][ T5642] netlink: set zone limit has 8 unknown bytes [ 2450.649870][ T5642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2451.025338][ T5652] netlink: 'syz.6.44573': attribute type 10 has an invalid length. [ 2451.073850][ T5652] netlink: 55 bytes leftover after parsing attributes in process `syz.6.44573'. [ 2451.343164][ T5652] device vlan0 left promiscuous mode [ 2451.365782][ T5652] À: port 1(vlan0) entered disabled state [ 2451.798103][ T5664] device syzkaller0 entered promiscuous mode [ 2451.956573][ T5673] netlink: set zone limit has 8 unknown bytes [ 2451.996863][ T5673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2452.012944][ T5672] netlink: 128 bytes leftover after parsing attributes in process `syz.5.44583'. [ 2452.043530][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): Q±6ã×\b‹¡Y­4: link becomes ready [ 2452.084199][ T5672] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 2452.173490][ T5678] netlink: 65043 bytes leftover after parsing attributes in process `syz.6.44586'. [ 2452.580732][ T5696] netlink: 'syz.3.44592': attribute type 16 has an invalid length. [ 2452.590255][ T5696] netlink: 168 bytes leftover after parsing attributes in process `syz.3.44592'. [ 2452.619142][ T5696] netlink: 'syz.3.44592': attribute type 10 has an invalid length. [ 2452.637795][ T5696] netlink: 168 bytes leftover after parsing attributes in process `syz.3.44592'. [ 2452.674654][ T5696] netlink: 'syz.3.44592': attribute type 10 has an invalid length. [ 2453.158077][ T5701] netlink: 'syz.3.44594': attribute type 10 has an invalid length. [ 2453.181041][ T5701] netlink: 55 bytes leftover after parsing attributes in process `syz.3.44594'. [ 2453.651775][ T5708] device syzkaller0 entered promiscuous mode [ 2453.682957][ T5711] netlink: set zone limit has 8 unknown bytes [ 2453.752772][ T5711] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2454.765002][ T5741] netlink: 'syz.2.44608': attribute type 9 has an invalid length. [ 2454.785852][ T5741] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.44608'. [ 2454.928968][ T5750] netlink: 14 bytes leftover after parsing attributes in process `syz.3.44612'. [ 2455.470628][ T5750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2455.531250][ T5750] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2455.556856][ T5750] bond0 (unregistering): Released all slaves [ 2455.585666][ T5751] netlink: 14 bytes leftover after parsing attributes in process `syz.3.44612'. [ 2455.636857][ T5751] device team_slave_0 left promiscuous mode [ 2455.653622][ T5751] team0: Port device team_slave_0 removed [ 2455.666627][ T5751] device veth0_to_team left promiscuous mode [ 2455.677372][ T5751] Ÿë: port 1(veth0_to_team) entered disabled state [ 2455.741765][ T5755] netlink: 128 bytes leftover after parsing attributes in process `syz.0.44613'. [ 2455.754919][ T5755] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 2456.354656][ T5788] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.44625'. [ 2456.382629][ T5788] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 2456.775126][ T5797] sctp: [Deprecated]: syz.6.44628 (pid 5797) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2456.775126][ T5797] Use struct sctp_sack_info instead [ 2459.376005][ T5832] netlink: 128 bytes leftover after parsing attributes in process `syz.6.44639'. [ 2459.410354][ T5832] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2459.435597][ T5832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2459.579573][ T5850] sctp: [Deprecated]: syz.0.44642 (pid 5850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2459.579573][ T5850] Use struct sctp_sack_info instead [ 2459.915348][ T5861] syzkaller0: refused to change device tx_queue_len [ 2460.286058][ T5872] netlink: 14 bytes leftover after parsing attributes in process `syz.2.44650'. [ 2460.431855][ T5872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2460.443821][ T5872] device bond_slave_1 left promiscuous mode [ 2460.473488][ T5872] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 2460.497741][ T5872] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2460.521246][ T5872] device batadv_slave_0 left promiscuous mode [ 2460.632924][ T5872] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2460.857334][ T5872] bond0 (unregistering): Released all slaves [ 2460.989424][ T5875] netlink: 14 bytes leftover after parsing attributes in process `syz.2.44650'. [ 2461.048446][ T5875] device veth0_to_team left promiscuous mode [ 2461.077446][ T5875] Ÿë: port 1(veth0_to_team) entered disabled state [ 2461.105418][ T5882] netlink: 128 bytes leftover after parsing attributes in process `syz.3.44654'. [ 2461.136302][ T5882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2461.362301][ T5907] sctp: [Deprecated]: syz.2.44657 (pid 5907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2461.362301][ T5907] Use struct sctp_sack_info instead [ 2462.325649][ T5940] netlink: 'syz.5.44668': attribute type 2 has an invalid length. [ 2462.343158][ T5933] netlink: 128 bytes leftover after parsing attributes in process `syz.2.44671'. [ 2462.394121][ T5933] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2462.416161][ T5940] netlink: 'syz.5.44668': attribute type 1 has an invalid length. [ 2462.480651][ T5933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2462.501362][ T5940] netlink: 9 bytes leftover after parsing attributes in process `syz.5.44668'. [ 2462.689070][ T5947] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.44672'. [ 2462.769202][ T5947] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 2463.156441][ T5965] sctp: [Deprecated]: syz.5.44677 (pid 5965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2463.156441][ T5965] Use struct sctp_sack_info instead [ 2463.847497][ T5992] netlink: 'syz.2.44689': attribute type 10 has an invalid length. [ 2463.953798][ T5997] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.44693'. [ 2463.976349][ T5997] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 2464.561558][ T6011] netlink: 'syz.2.44700': attribute type 2 has an invalid length. [ 2464.599028][ T6011] netlink: 'syz.2.44700': attribute type 1 has an invalid length. [ 2464.668564][ T6011] netlink: 9 bytes leftover after parsing attributes in process `syz.2.44700'. [ 2464.746111][ T6015] sctp: [Deprecated]: syz.3.44699 (pid 6015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2464.746111][ T6015] Use struct sctp_sack_info instead [ 2465.177102][ T6030] netlink: 'syz.3.44704': attribute type 2 has an invalid length. [ 2465.287629][ T6033] netlink: 'syz.3.44704': attribute type 2 has an invalid length. [ 2465.325717][ T6035] netlink: 'syz.0.44706': attribute type 3 has an invalid length. [ 2465.354528][ T6035] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.44706'. [ 2465.435222][ T6039] netlink: 14 bytes leftover after parsing attributes in process `syz.6.44709'. [ 2465.478101][ T6039] netlink: 14 bytes leftover after parsing attributes in process `syz.6.44709'. [ 2465.537318][ T6041] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.44710'. [ 2465.584593][ T6041] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 2465.765818][ T6039] device veth0_to_team left promiscuous mode [ 2465.799459][ T6039] Ÿë: port 2(veth0_to_team) entered disabled state [ 2466.436813][ T6061] netlink: 'syz.6.44715': attribute type 2 has an invalid length. [ 2466.459575][ T6061] netlink: 'syz.6.44715': attribute type 1 has an invalid length. [ 2466.506159][ T6061] netlink: 9 bytes leftover after parsing attributes in process `syz.6.44715'. [ 2467.282061][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.288866][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.064480][ T6098] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.44725'. [ 2468.102246][ T6098] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 2468.356844][ T6109] netlink: 'syz.0.44731': attribute type 10 has an invalid length. [ 2468.547115][ T6111] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.44743'. [ 2468.589429][ T6111] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 2468.591672][ T6113] netlink: 'syz.3.44732': attribute type 2 has an invalid length. [ 2468.740516][ T6113] netlink: 'syz.3.44732': attribute type 1 has an invalid length. [ 2468.748456][ T6113] netlink: 9 bytes leftover after parsing attributes in process `syz.3.44732'. [ 2470.813854][ T6171] netlink: 'syz.5.44747': attribute type 10 has an invalid length. [ 2470.892519][ T6174] netlink: 'syz.3.44748': attribute type 10 has an invalid length. [ 2471.154961][ T6183] netlink: 'syz.0.44753': attribute type 2 has an invalid length. [ 2471.257858][ T6181] netlink: 14 bytes leftover after parsing attributes in process `syz.5.44755'. [ 2471.307732][ T6183] netlink: 'syz.0.44753': attribute type 1 has an invalid length. [ 2471.447268][ T6188] netlink: 14 bytes leftover after parsing attributes in process `syz.5.44755'. [ 2471.571610][ T6183] netlink: 9 bytes leftover after parsing attributes in process `syz.0.44753'. [ 2471.760868][ T6188] device veth0_to_team left promiscuous mode [ 2471.957029][ T6188] Ÿë: port 1(veth0_to_team) entered disabled state [ 2472.069092][ T6197] netlink: 'syz.3.44757': attribute type 10 has an invalid length. [ 2472.077863][ T6197] nr0: port 1(hsr0) entered disabled state [ 2473.362493][ T6236] netlink: 'syz.5.44770': attribute type 10 has an invalid length. [ 2474.403747][ T6250] netlink: 152 bytes leftover after parsing attributes in process `syz.5.44773'. [ 2474.514877][ T6250] netlink: 6 bytes leftover after parsing attributes in process `syz.5.44773'. [ 2474.586035][ T6256] delete_channel: no stack [ 2474.660735][ T6256] delete_channel: no stack [ 2474.875625][ T6265] netlink: 14 bytes leftover after parsing attributes in process `syz.0.44776'. [ 2474.940248][ T6269] netlink: 14 bytes leftover after parsing attributes in process `syz.0.44776'. [ 2475.175697][ T6269] device veth0_to_team left promiscuous mode [ 2475.222376][ T6269] Ÿë: port 1(veth0_to_team) entered disabled state [ 2476.572719][ T6297] delete_channel: no stack [ 2476.577420][ T6297] delete_channel: no stack [ 2476.906555][ T6302] mac80211_hwsim hwsim117 »»»»»»: renamed from wlan0 [ 2477.366867][ T6319] netdevsim netdevsim6: Firmware load for '/../file0' refused, path contains '..' component [ 2478.262414][ T6333] netlink: 'syz.5.44800': attribute type 10 has an invalid length. [ 2478.901513][ T6349] delete_channel: no stack [ 2478.906238][ T6349] delete_channel: no stack [ 2479.637177][ T6368] netlink: 'syz.6.44808': attribute type 10 has an invalid length. [ 2479.886973][ T6375] netlink: 180 bytes leftover after parsing attributes in process `syz.3.44810'. [ 2480.522115][ T6390] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.44816'. [ 2480.688990][ T6390] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.44816'. [ 2480.811591][ T6395] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.44816'. [ 2481.182702][ T6404] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.44821'. [ 2481.390618][ T6408] netlink: 10 bytes leftover after parsing attributes in process `syz.3.44822'. [ 2481.403059][ T6404] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.44821'. [ 2481.634989][ T6415] netlink: 'syz.2.44824': attribute type 3 has an invalid length. [ 2481.770016][ T6415] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.44824'. [ 2481.984391][ T6421] netdevsim netdevsim0: Firmware load for '/../file0' refused, path contains '..' component [ 2482.085587][ T6425] netlink: 180 bytes leftover after parsing attributes in process `syz.5.44829'. [ 2483.745271][ T6458] mac80211_hwsim hwsim127 »»»»»»: renamed from wlan0 [ 2483.809081][ T6462] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.44840'. [ 2484.100161][ T6468] netlink: 'syz.0.44844': attribute type 3 has an invalid length. [ 2484.703977][ T6485] netlink: 'syz.5.44849': attribute type 10 has an invalid length. [ 2484.931606][ T6485] nr0: port 1(hsr0) entered disabled state [ 2484.995629][ T6485] nr0: port 1(hsr0) entered disabled state [ 2486.024375][ T6514] netlink: 'syz.3.44858': attribute type 3 has an invalid length. [ 2486.091763][ T6514] __nla_validate_parse: 2 callbacks suppressed [ 2486.091796][ T6514] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.44858'. [ 2486.230438][ T6519] mac80211_hwsim hwsim135 »»»»»»: renamed from wlan0 [ 2487.449933][ T6547] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.44868'. [ 2487.624399][ T6547] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.44868'. [ 2487.659889][ T6548] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.44868'. [ 2487.868194][ T6566] netlink: 'syz.5.44873': attribute type 3 has an invalid length. [ 2487.886251][ T6566] netlink: 114680 bytes leftover after parsing attributes in process `syz.5.44873'. [ 2488.573135][ T6580] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.44889'. [ 2488.813592][ T6589] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.44881'. [ 2489.582471][ T6611] netlink: 'syz.6.44888': attribute type 3 has an invalid length. [ 2489.754445][ T6611] netlink: 114680 bytes leftover after parsing attributes in process `syz.6.44888'. [ 2490.150343][ T6632] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.44894'. [ 2490.209172][ T6636] netlink: 60 bytes leftover after parsing attributes in process `syz.5.44895'. [ 2490.425092][ T6641] netlink: 'syz.2.44897': attribute type 10 has an invalid length. [ 2490.504174][ T6641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2490.529204][ T6641] nr0: port 1(hsr0) entered blocking state [ 2490.535082][ T6641] nr0: port 1(hsr0) entered forwarding state [ 2490.579586][ T6641] nr0: port 1(hsr0) entered disabled state [ 2491.806559][ T6676] netlink: 'syz.3.44906': attribute type 3 has an invalid length. [ 2491.932353][ T6676] __nla_validate_parse: 2 callbacks suppressed [ 2491.932382][ T6676] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.44906'. [ 2492.495980][ T6692] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.44911'. [ 2495.900186][ T6704] delete_channel: no stack [ 2496.189657][ T6727] netlink: 'syz.5.44927': attribute type 9 has an invalid length. [ 2496.209063][ T6727] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.44927'. [ 2496.252686][ T6729] netlink: 'syz.0.44928': attribute type 10 has an invalid length. [ 2499.822812][ T6766] netlink: 'syz.0.44939': attribute type 10 has an invalid length. [ 2499.842561][ T6766] netlink: 2 bytes leftover after parsing attributes in process `syz.0.44939'. [ 2499.854730][ T6766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2499.864942][ T6766] nr0: port 1(hsr0) entered blocking state [ 2499.871015][ T6766] nr0: port 1(hsr0) entered forwarding state [ 2499.886297][ T6766] nr0: port 1(hsr0) entered disabled state [ 2499.913762][ T6766] bridge0: port 2(hsr0) entered blocking state [ 2499.927905][ T6773] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.44943'. [ 2499.940345][ T6766] bridge0: port 2(hsr0) entered disabled state [ 2499.971269][ T6766] bridge0: port 2(hsr0) entered blocking state [ 2499.977665][ T6766] bridge0: port 2(hsr0) entered forwarding state [ 2500.097920][ T6776] netlink: 'syz.5.44941': attribute type 10 has an invalid length. [ 2500.173553][ T6783] netlink: 'syz.0.44945': attribute type 9 has an invalid length. [ 2500.202367][ T6783] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.44945'. [ 2503.787668][ T6825] netlink: 'syz.3.44959': attribute type 10 has an invalid length. [ 2503.910395][ T6825] device team_slave_1 left promiscuous mode [ 2503.993990][ T6825] team0 (unregistering): Port device team_slave_1 removed [ 2504.028765][ T6825] device netdevsim0 left promiscuous mode [ 2504.054941][ T6825] team0 (unregistering): Port device netdevsim0 removed [ 2504.073370][ T6825] device geneve1 left promiscuous mode [ 2504.112798][ T6825] team0 (unregistering): Port device geneve1 removed [ 2504.134022][ T6825] device wlan1 left promiscuous mode [ 2504.162747][ T6825] team0 (unregistering): Port device wlan1 removed [ 2504.256004][ T6828] netlink: 'syz.5.44960': attribute type 10 has an invalid length. [ 2504.292863][ T6828] netlink: 2 bytes leftover after parsing attributes in process `syz.5.44960'. [ 2504.472593][ T6828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2507.067775][ T6852] netlink: 'syz.3.44965': attribute type 9 has an invalid length. [ 2507.102685][ T6851] netlink: 'syz.2.44976': attribute type 10 has an invalid length. [ 2507.103678][ T6852] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.44965'. [ 2511.156112][ T6904] IPv6: Can't replace route, no match found [ 2511.183817][ T6898] netlink: 'syz.2.44981': attribute type 10 has an invalid length. [ 2511.215552][ T6898] netlink: 2 bytes leftover after parsing attributes in process `syz.2.44981'. [ 2511.343243][ T6914] netlink: 'syz.2.44983': attribute type 9 has an invalid length. [ 2511.386560][ T6914] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.44983'. [ 2512.639994][ T6965] netdevsim netdevsim0: Direct firmware load for ß failed with error -2 [ 2512.689564][ T6965] netdevsim netdevsim0: Falling back to sysfs fallback for: ß [ 2512.795892][ T6966] netlink: 'syz.6.45001': attribute type 10 has an invalid length. [ 2512.849927][ T6966] netlink: 2 bytes leftover after parsing attributes in process `syz.6.45001'. [ 2515.186169][ T7002] netlink: 'syz.3.45018': attribute type 10 has an invalid length. [ 2515.209065][ T7002] netlink: 2 bytes leftover after parsing attributes in process `syz.3.45018'. [ 2515.238657][ T7002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2515.455863][ T7013] hsr0: VLAN not yet supported [ 2515.496428][ T7010] netlink: 'syz.6.45019': attribute type 9 has an invalid length. [ 2515.632317][ T7010] netlink: 181324 bytes leftover after parsing attributes in process `syz.6.45019'. [ 2519.640796][ T7054] IPv6: Can't replace route, no match found [ 2519.817979][ T7060] netdevsim netdevsim2: Direct firmware load for ß failed with error -2 [ 2519.867199][ T7060] netdevsim netdevsim2: Falling back to sysfs fallback for: ß [ 2520.066667][ T7068] netlink: 'syz.3.45040': attribute type 21 has an invalid length. [ 2521.771286][ T7106] netlink: 'syz.2.45052': attribute type 10 has an invalid length. [ 2521.800067][ T7106] netlink: 2 bytes leftover after parsing attributes in process `syz.2.45052'. [ 2522.069205][ T7111] netlink: 'syz.2.45055': attribute type 21 has an invalid length. [ 2525.682205][ T7157] netlink: 'syz.6.45070': attribute type 21 has an invalid length. [ 2525.857367][ T7159] netlink: 'syz.5.45072': attribute type 10 has an invalid length. [ 2526.001957][ T7168] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2528.731991][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.738337][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 2528.835405][ T7191] netlink: 'syz.5.45078': attribute type 9 has an invalid length. [ 2528.853618][ T7191] netlink: 181324 bytes leftover after parsing attributes in process `syz.5.45078'. [ 2529.203359][ T7201] netlink: 'syz.0.45084': attribute type 21 has an invalid length. [ 2529.416402][ T7208] netlink: 'syz.0.45087': attribute type 10 has an invalid length. [ 2529.433826][ T7208] netlink: 2 bytes leftover after parsing attributes in process `syz.0.45087'. [ 2530.004462][ T7222] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.45101'. [ 2530.048222][ T7222] netlink: 22796 bytes leftover after parsing attributes in process `syz.0.45101'. [ 2530.379891][ T7245] netlink: 'syz.5.45099': attribute type 21 has an invalid length. [ 2530.485389][ T7247] netlink: 'syz.0.45098': attribute type 9 has an invalid length. [ 2530.504024][ T7247] netlink: 181324 bytes leftover after parsing attributes in process `syz.0.45098'. [ 2530.670522][ T7249] netlink: 'syz.3.45100': attribute type 10 has an invalid length. [ 2530.686999][ T7249] netlink: 2 bytes leftover after parsing attributes in process `syz.3.45100'. [ 2531.023253][ T7264] netlink: 'syz.3.45106': attribute type 10 has an invalid length. [ 2532.006022][ T7304] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.45119'. [ 2532.074874][ T7304] netlink: 22796 bytes leftover after parsing attributes in process `syz.6.45119'. [ 2532.117303][ T7310] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2532.847759][ T7337] netlink: 'syz.3.45136': attribute type 21 has an invalid length. [ 2532.882306][ T7337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2532.889653][ T7337] IPv6: NLM_F_CREATE should be set when creating new route [ 2532.897094][ T7337] IPv6: NLM_F_CREATE should be set when creating new route [ 2532.904471][ T7337] IPv6: NLM_F_CREATE should be set when creating new route [ 2533.226772][ T7350] netlink: 'syz.0.45138': attribute type 10 has an invalid length. [ 2533.256951][ T7350] netlink: 2 bytes leftover after parsing attributes in process `syz.0.45138'. [ 2533.285077][ T7353] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2533.377285][ T7354] netlink: 'syz.3.45141': attribute type 10 has an invalid length. [ 2533.392565][ T7354] netlink: 2 bytes leftover after parsing attributes in process `syz.3.45141'. [ 2534.967078][ T7402] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2535.033148][ T7400] netlink: 'syz.2.45157': attribute type 10 has an invalid length. [ 2535.069253][ T7400] netlink: 2 bytes leftover after parsing attributes in process `syz.2.45157'. [ 2535.369140][ T7415] netlink: 'syz.6.45162': attribute type 10 has an invalid length. [ 2535.880302][ T7437] netlink: 'syz.2.45167': attribute type 9 has an invalid length. [ 2535.922339][ T7437] netlink: 181324 bytes leftover after parsing attributes in process `syz.2.45167'. [ 2536.341393][ T7444] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.45171'. [ 2536.443232][ T7444] netlink: 22796 bytes leftover after parsing attributes in process `syz.5.45171'. [ 2536.517785][ T7453] netlink: 152 bytes leftover after parsing attributes in process `syz.2.45174'. [ 2536.549040][ T7453] netlink: 6 bytes leftover after parsing attributes in process `syz.2.45174'. [ 2536.603285][ T7446] delete_channel: no stack [ 2536.779210][ T7459] netlink: 'syz.6.45176': attribute type 21 has an invalid length. [ 2536.830683][ T7459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2536.837988][ T7459] IPv6: NLM_F_CREATE should be set when creating new route [ 2536.845385][ T7459] IPv6: NLM_F_CREATE should be set when creating new route [ 2536.852706][ T7459] IPv6: NLM_F_CREATE should be set when creating new route [ 2537.684614][ T7485] delete_channel: no stack [ 2537.797305][ T7492] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.45189'. [ 2537.820315][ T7492] netlink: 22796 bytes leftover after parsing attributes in process `syz.3.45189'. [ 2537.952082][ T7503] netlink: 'syz.6.45192': attribute type 10 has an invalid length. [ 2538.012041][ T7503] netlink: 2 bytes leftover after parsing attributes in process `syz.6.45192'. [ 2538.187470][ T7519] netlink: 'syz.5.45200': attribute type 10 has an invalid length. [ 2538.220597][ T7521] netlink: 'syz.0.45199': attribute type 21 has an invalid length. [ 2538.249331][ T7521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2538.256673][ T7521] IPv6: NLM_F_CREATE should be set when creating new route [ 2538.264075][ T7521] IPv6: NLM_F_CREATE should be set when creating new route [ 2538.271444][ T7521] IPv6: NLM_F_CREATE should be set when creating new route [ 2538.342859][ T7522] Â: renamed from pim6reg1 [ 2538.750352][ T7539] delete_channel: no stack [ 2539.101846][ T7560] netlink: 'syz.3.45214': attribute type 10 has an invalid length. [ 2539.195713][ T7564] netlink: 'syz.2.45217': attribute type 21 has an invalid length. [ 2539.224349][ T7564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2539.231651][ T7564] IPv6: NLM_F_CREATE should be set when creating new route [ 2539.239047][ T7564] IPv6: NLM_F_CREATE should be set when creating new route [ 2539.246351][ T7564] IPv6: NLM_F_CREATE should be set when creating new route [ 2540.065155][ T7602] netlink: 'syz.3.45226': attribute type 9 has an invalid length. [ 2540.083318][ T7602] netlink: 181324 bytes leftover after parsing attributes in process `syz.3.45226'. [ 2540.498287][ T7621] netlink: 'syz.0.45233': attribute type 10 has an invalid length. [ 2540.922511][ T7640] netlink: 'syz.5.45243': attribute type 21 has an invalid length. [ 2540.969396][ T7640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2540.976743][ T7640] IPv6: NLM_F_CREATE should be set when creating new route [ 2540.984158][ T7640] IPv6: NLM_F_CREATE should be set when creating new route [ 2540.991464][ T7640] IPv6: NLM_F_CREATE should be set when creating new route [ 2541.397225][ T7658] netlink: 'syz.3.45248': attribute type 9 has an invalid length. [ 2541.409739][ T7658] netlink: 181324 bytes leftover after parsing attributes in process `syz.3.45248'. [ 2541.705306][ T7672] netlink: 152 bytes leftover after parsing attributes in process `syz.3.45254'. [ 2541.729177][ T7672] netlink: 6 bytes leftover after parsing attributes in process `syz.3.45254'. [ 2541.880396][ T7673] delete_channel: no stack [ 2542.215048][ T7695] Â: renamed from pim6reg1 [ 2542.620897][ T7717] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.45267'. [ 2543.114034][ T7737] netlink: 152 bytes leftover after parsing attributes in process `syz.0.45275'. [ 2543.189008][ T7737] netlink: 6 bytes leftover after parsing attributes in process `syz.0.45275'. [ 2543.848040][ T7767] netlink: 'syz.3.45285': attribute type 21 has an invalid length. [ 2543.922848][ T7767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2543.932625][ T7774] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.45287'. [ 2545.033207][ T7811] netlink: 'syz.6.45300': attribute type 39 has an invalid length. [ 2545.350010][ T7820] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.45302'. [ 2546.436519][ T7839] netlink: 'syz.0.45319': attribute type 2 has an invalid length. [ 2546.462516][ T7839] netlink: 'syz.0.45319': attribute type 8 has an invalid length. [ 2546.500486][ T7839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.45319'. [ 2546.519165][ T7838] netlink: 'syz.0.45319': attribute type 2 has an invalid length. [ 2546.536249][ T7838] netlink: 'syz.0.45319': attribute type 8 has an invalid length. [ 2546.588616][ T7838] netlink: 132 bytes leftover after parsing attributes in process `syz.0.45319'. [ 2547.905950][ T7866] netlink: 152 bytes leftover after parsing attributes in process `syz.5.45316'. [ 2547.935826][ T7866] netlink: 6 bytes leftover after parsing attributes in process `syz.5.45316'. [ 2548.106800][ T7874] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2548.159685][ T7874] netlink: 'syz.3.45320': attribute type 21 has an invalid length. [ 2548.173805][ T7874] netlink: 156 bytes leftover after parsing attributes in process `syz.3.45320'. [ 2549.173954][ T7906] netlink: 'syz.0.45332': attribute type 39 has an invalid length. [ 2549.611099][ T7906] device hsr_slave_0 left promiscuous mode [ 2551.505308][ T7978] netlink: 'syz.5.45360': attribute type 22 has an invalid length. [ 2551.534427][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.45360'. [ 2552.394684][ T8004] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2552.426399][ T8004] netlink: 'syz.6.45370': attribute type 21 has an invalid length. [ 2552.528591][ T8004] netlink: 156 bytes leftover after parsing attributes in process `syz.6.45370'. [ 2554.659032][ T8072] netlink: 152 bytes leftover after parsing attributes in process `syz.6.45392'. [ 2554.702408][ T8072] netlink: 6 bytes leftover after parsing attributes in process `syz.6.45392'. [ 2555.399653][ T8104] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.45405'. [ 2555.729783][ T8124] netlink: 152 bytes leftover after parsing attributes in process `syz.2.45417'. [ 2555.770951][ T8124] netlink: 6 bytes leftover after parsing attributes in process `syz.2.45417'. [ 2557.152999][ T8176] netlink: 152 bytes leftover after parsing attributes in process `syz.2.45433'. [ 2557.189117][ T8176] netlink: 6 bytes leftover after parsing attributes in process `syz.2.45433'. [ 2557.877715][ T8189] netlink: 132 bytes leftover after parsing attributes in process `syz.2.45442'. [ 2558.258141][ T8204] netlink: 'syz.2.45449': attribute type 39 has an invalid length. [ 2558.489104][ T8204] device hsr_slave_0 left promiscuous mode [ 2558.928805][ T8226] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.45455'. [ 2559.040374][ T8223] netlink: 'syz.6.45453': attribute type 22 has an invalid length. [ 2559.059586][ T8226] openvswitch: netlink: Flow key attribute not present in set flow. [ 2559.072080][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.6.45453'. [ 2559.333826][ T8227] device syzkaller0 entered promiscuous mode [ 2559.967525][ T8242] netlink: 132 bytes leftover after parsing attributes in process `syz.6.45460'. [ 2560.427128][ T8261] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.45468'. [ 2560.464363][ T8261] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 2561.254265][ T8278] netlink: 'syz.5.45473': attribute type 8 has an invalid length. [ 2561.332780][ T8278] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.45473'. [ 2561.514085][ T8294] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.45481'. [ 2561.579133][ T8294] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 2562.480311][ T8342] netlink: 'syz.0.45498': attribute type 22 has an invalid length. [ 2562.556575][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45498'. [ 2565.260497][ T8462] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2565.321646][ T8462] netlink: 'syz.5.45541': attribute type 21 has an invalid length. [ 2565.363071][ T8462] netlink: 156 bytes leftover after parsing attributes in process `syz.5.45541'. [ 2565.598340][ T8481] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.45552'. [ 2565.628767][ T8481] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 2565.968169][ T8496] netlink: 'syz.3.45557': attribute type 10 has an invalid length. [ 2566.023046][ T8499] netlink: 'syz.3.45557': attribute type 9 has an invalid length. [ 2566.119048][ T8499] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.45557'. [ 2566.738152][ T8531] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.45571'. [ 2566.766068][ T8531] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 2568.714289][ T8625] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.45608'. [ 2568.781435][ T8625] bridge_slave_1: default FDB implementation only supports local addresses [ 2569.474803][ T8648] netlink: 10 bytes leftover after parsing attributes in process `syz.6.45620'. [ 2570.223444][ T8685] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.45634'. [ 2570.236011][ T8685] openvswitch: netlink: Flow key attribute not present in set flow. [ 2570.448393][ T8685] device syzkaller0 entered promiscuous mode [ 2571.633496][ T8739] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.45655'. [ 2571.652948][ T8739] openvswitch: netlink: Flow key attribute not present in set flow. [ 2571.856854][ T8739] device syzkaller0 entered promiscuous mode [ 2571.886187][ T8752] syz.6.45670[8752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2571.886423][ T8752] syz.6.45670[8752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2572.088160][ T8755] netlink: 10 bytes leftover after parsing attributes in process `syz.2.45661'. [ 2572.423788][ T8774] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.45666'. [ 2572.530200][ T8774] bridge_slave_1: default FDB implementation only supports local addresses [ 2572.884300][ T8794] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.45677'. [ 2572.906020][ T8794] openvswitch: netlink: Flow key attribute not present in set flow. [ 2573.166875][ T8794] device syzkaller0 entered promiscuous mode [ 2573.593437][ T8820] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.45685'. [ 2573.651970][ T8820] bridge_slave_1: default FDB implementation only supports local addresses [ 2574.982109][ T8889] netlink: 'syz.6.45712': attribute type 10 has an invalid length. [ 2575.011427][ T8889] netlink: 40 bytes leftover after parsing attributes in process `syz.6.45712'. [ 2575.072588][ T8878] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.45704'. [ 2575.121295][ T8878] bridge_slave_1: default FDB implementation only supports local addresses [ 2575.782822][ T8926] netlink: 'syz.0.45730': attribute type 10 has an invalid length. [ 2575.801651][ T8926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45730'. [ 2576.410000][ T8933] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.45732'. [ 2576.427495][ T8933] bridge_slave_1: default FDB implementation only supports local addresses [ 2576.538728][ T8958] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.45744'. [ 2576.606329][ T8958] openvswitch: netlink: Flow key attribute not present in set flow. [ 2576.700251][ T8960] netlink: 10 bytes leftover after parsing attributes in process `syz.5.45745'. [ 2576.886922][ T8964] device syzkaller0 entered promiscuous mode [ 2576.935016][ T8965] netlink: 'syz.3.45746': attribute type 10 has an invalid length. [ 2576.992740][ T8965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.45746'. [ 2577.579141][ T9006] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.45762'. [ 2577.597473][ T9006] bridge_slave_1: default FDB implementation only supports local addresses [ 2577.735236][ T9014] IPv6: Can't replace route, no match found [ 2577.937933][ T9020] netlink: 'syz.5.45769': attribute type 10 has an invalid length. [ 2577.988170][ T9020] netlink: 40 bytes leftover after parsing attributes in process `syz.5.45769'. [ 2579.597605][ T9114] IPv6: Can't replace route, no match found [ 2579.775204][ T9124] netlink: 196 bytes leftover after parsing attributes in process `syz.3.45820'. [ 2580.213690][ T9143] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.45829'. [ 2580.473944][ T9167] netlink: 'syz.2.45838': attribute type 10 has an invalid length. [ 2580.495672][ T9167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.45838'. [ 2581.018456][ T9197] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.45852'. [ 2581.087764][ T9206] netlink: 'syz.6.45860': attribute type 10 has an invalid length. [ 2581.104676][ T9206] netlink: 40 bytes leftover after parsing attributes in process `syz.6.45860'. [ 2581.724959][ T9247] netlink: 'syz.6.45877': attribute type 10 has an invalid length. [ 2581.733652][ T9247] netlink: 40 bytes leftover after parsing attributes in process `syz.6.45877'. [ 2581.754500][ T9242] netlink: 212912 bytes leftover after parsing attributes in process `syz.5.45875'. [ 2581.839049][ T9249] netlink: 'syz.0.45878': attribute type 39 has an invalid length. [ 2582.178967][ T9276] device pim6reg1 entered promiscuous mode [ 2582.427509][ T9286] netlink: 'syz.2.45895': attribute type 10 has an invalid length. [ 2582.439417][ T9286] netlink: 40 bytes leftover after parsing attributes in process `syz.2.45895'. [ 2582.523702][ T9297] IPv6: Can't replace route, no match found [ 2582.622227][T24657] tipc: Subscription rejected, illegal request [ 2582.720651][ T9310] netlink: 'syz.2.45907': attribute type 41 has an invalid length. [ 2582.733687][ T9310] netlink: 'syz.2.45907': attribute type 41 has an invalid length. [ 2583.131619][ T9342] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.45920'. [ 2583.487748][ T9369] delete_channel: no stack [ 2583.512374][ T9369] delete_channel: no stack [ 2584.115090][ T9406] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.45948'. [ 2585.122845][T24657] tipc: Subscription rejected, illegal request [ 2585.320239][ T9465] netlink: 'syz.3.45975': attribute type 10 has an invalid length. [ 2585.328182][ T9465] netlink: 40 bytes leftover after parsing attributes in process `syz.3.45975'. [ 2585.686421][T24662] tipc: Subscription rejected, illegal request [ 2586.016643][ T9511] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.45993'. [ 2586.346076][T24665] tipc: Subscription rejected, illegal request [ 2586.498671][ T9550] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.46011'. [ 2586.831243][ T9564] netlink: 212912 bytes leftover after parsing attributes in process `syz.5.46017'. [ 2587.191682][ T9595] delete_channel: no stack [ 2587.198039][ T9595] delete_channel: no stack [ 2587.605667][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 2587.643199][ T9626] netlink: 'syz.0.46040': attribute type 10 has an invalid length. [ 2587.689618][ T9626] batman_adv: batadv0: Adding interface: netdevsim0 [ 2587.744208][ T9626] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2587.808083][ T9627] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.46043'. [ 2587.825112][ T9626] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 2588.011821][ T9642] delete_channel: no stack [ 2588.016783][ T9642] delete_channel: no stack [ 2588.075237][ T9639] netlink: 'syz.6.46057': attribute type 10 has an invalid length. [ 2588.111485][ T9639] netlink: 40 bytes leftover after parsing attributes in process `syz.6.46057'. [ 2588.422300][ T9657] netlink: 'syz.3.46054': attribute type 39 has an invalid length. [ 2588.726379][T24662] tipc: Subscription rejected, illegal request [ 2588.960777][ T9696] delete_channel: no stack [ 2588.967114][ T9696] delete_channel: no stack [ 2589.349233][ T9708] netlink: 'syz.5.46077': attribute type 39 has an invalid length. [ 2589.514485][T24665] tipc: Subscription rejected, illegal request [ 2590.164211][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.170707][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.466597][T24665] tipc: Subscription rejected, illegal request [ 2590.846368][ T9769] netlink: 'syz.6.46098': attribute type 39 has an invalid length. [ 2591.408701][ T9797] netlink: 'syz.0.46112': attribute type 10 has an invalid length. [ 2591.423266][ T9797] netlink: 55 bytes leftover after parsing attributes in process `syz.0.46112'. [ 2591.444630][T24657] tipc: Subscription rejected, illegal request [ 2591.737810][ T9819] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 2591.845038][ T9815] netlink: 'syz.5.46120': attribute type 10 has an invalid length. [ 2592.491682][T24662] tipc: Subscription rejected, illegal request [ 2592.968361][ T9864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2592.989076][ T9864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2593.036851][ T9864] batman_adv: batadv0: Removing interface: netdevsim0 [ 2593.079294][ T9864] bridge0: port 3(batadv0) entered disabled state [ 2593.509235][ T9886] netlink: 'syz.6.46149': attribute type 10 has an invalid length. [ 2593.569660][ T9886] netlink: 40 bytes leftover after parsing attributes in process `syz.6.46149'. [ 2594.203312][ T9923] netlink: 132 bytes leftover after parsing attributes in process `syz.0.46164'. [ 2595.162155][ T9958] netlink: 'syz.5.46178': attribute type 10 has an invalid length. [ 2595.209275][ T9958] netlink: 55 bytes leftover after parsing attributes in process `syz.5.46178'. [ 2595.302200][ T9961] netlink: 'syz.0.46187': attribute type 10 has an invalid length. [ 2595.339003][ T9961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.46187'. [ 2595.443631][ T9966] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 2595.470209][ T9966] netlink: 'syz.3.46177': attribute type 10 has an invalid length. [ 2596.220002][ T9987] netlink: 132 bytes leftover after parsing attributes in process `syz.3.46188'. [ 2596.887537][T10000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2596.934822][T10000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2597.032858][T10000] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 2597.119745][T10000] batman_adv: batadv0: Removing interface: virt_wifi0 [ 2597.753546][T10030] netlink: 'syz.3.46201': attribute type 10 has an invalid length. [ 2597.839838][T10030] netlink: 55 bytes leftover after parsing attributes in process `syz.3.46201'. [ 2598.320658][T10027] netlink: 'syz.2.46199': attribute type 10 has an invalid length. [ 2598.328605][T10027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.46199'. [ 2598.853734][T10052] netlink: 'syz.0.46210': attribute type 21 has an invalid length. [ 2599.288413][T10071] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 2599.371476][T10071] netlink: 'syz.2.46214': attribute type 10 has an invalid length. [ 2599.537160][T10071] batman_adv: batadv0: Adding interface: netdevsim0 [ 2599.650439][T10071] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2599.910593][T10071] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 2600.047305][T10085] netlink: 132 bytes leftover after parsing attributes in process `syz.5.46224'. [ 2600.307688][T10093] netlink: 14326 bytes leftover after parsing attributes in process `syz.3.46227'. [ 2600.731092][T10106] netlink: 156 bytes leftover after parsing attributes in process `syz.0.46231'. [ 2601.437584][T10133] netlink: 'syz.6.46240': attribute type 10 has an invalid length. [ 2601.701182][T10135] netlink: 132 bytes leftover after parsing attributes in process `syz.2.46241'. [ 2602.253311][T10161] netlink: 14326 bytes leftover after parsing attributes in process `syz.5.46253'. [ 2602.310714][T10166] netlink: 156 bytes leftover after parsing attributes in process `syz.6.46255'. [ 2602.840879][T10193] netlink: 'syz.3.46268': attribute type 21 has an invalid length. [ 2602.981360][T10193] netlink: 128 bytes leftover after parsing attributes in process `syz.3.46268'. [ 2603.059228][T10193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2603.101672][T10202] netlink: 14326 bytes leftover after parsing attributes in process `syz.6.46271'. [ 2603.252720][T10210] netlink: 156 bytes leftover after parsing attributes in process `syz.5.46274'. [ 2604.194783][T10255] netlink: 156 bytes leftover after parsing attributes in process `syz.3.46292'. [ 2604.308165][T10257] netlink: 14326 bytes leftover after parsing attributes in process `syz.0.46290'. [ 2604.593769][T10274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.46297'. [ 2605.194152][T10309] netlink: 'syz.2.46311': attribute type 21 has an invalid length. [ 2605.286624][T10309] netlink: 128 bytes leftover after parsing attributes in process `syz.2.46311'. [ 2605.327567][T10309] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2605.417756][T10309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2606.267848][T10364] netlink: 'syz.6.46332': attribute type 21 has an invalid length. [ 2606.359796][T10364] netlink: 128 bytes leftover after parsing attributes in process `syz.6.46332'. [ 2606.496953][T10364] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2606.642082][T10364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2606.695757][T10388] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.46342'. [ 2607.452374][T10422] netlink: 'syz.0.46357': attribute type 21 has an invalid length. [ 2607.542601][T10422] netlink: 128 bytes leftover after parsing attributes in process `syz.0.46357'. [ 2607.583877][T10422] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 2608.052907][T10448] netlink: 'syz.2.46368': attribute type 15 has an invalid length. [ 2608.091761][T10448] __nla_validate_parse: 2 callbacks suppressed [ 2608.091802][T10448] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.46368'. [ 2608.174351][T10456] netlink: 'syz.2.46368': attribute type 4 has an invalid length. [ 2608.223562][T10456] netlink: 'syz.2.46368': attribute type 5 has an invalid length. [ 2608.281751][T10456] netlink: 'syz.2.46368': attribute type 6 has an invalid length. [ 2608.361607][T10456] netlink: 'syz.2.46368': attribute type 7 has an invalid length. [ 2608.378993][T10456] netlink: 'syz.2.46368': attribute type 11 has an invalid length. [ 2608.386920][T10456] netlink: 'syz.2.46368': attribute type 15 has an invalid length. [ 2608.529250][T10456] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.46368'. [ 2608.591539][T10452] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.46369'. [ 2611.201531][T10480] validate_nla: 7 callbacks suppressed [ 2611.201564][T10480] netlink: 'syz.5.46377': attribute type 21 has an invalid length. [ 2611.256139][T10484] netlink: 40 bytes leftover after parsing attributes in process `syz.0.46380'. [ 2611.292374][T10480] netlink: 128 bytes leftover after parsing attributes in process `syz.5.46377'. [ 2611.322022][T10480] IPv6: ADDRCONF(NETDEV_CHANGE): Q±6ã×\b‹¡Y­4: link becomes ready [ 2611.371913][T10480] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 2611.430807][T10492] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.46383'. [ 2611.465047][T10492] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2611.474463][T10492] CPU: 1 PID: 10492 Comm: syz.2.46383 Not tainted syzkaller #0 [ 2611.482028][T10492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2611.492082][T10492] Call Trace: [ 2611.495356][T10492] [ 2611.498286][T10492] dump_stack_lvl+0x188/0x250 [ 2611.502969][T10492] ? show_regs_print_info+0x20/0x20 [ 2611.508159][T10492] ? load_image+0x410/0x410 [ 2611.512662][T10492] sysfs_warn_dup+0x8a/0xa0 [ 2611.517152][T10492] sysfs_do_create_link_sd+0xc0/0x110 [ 2611.522509][T10492] device_add+0x83b/0x1050 [ 2611.526918][T10492] wiphy_register+0x1e74/0x2c40 [ 2611.531773][T10492] ? cfg80211_event_work+0x40/0x40 [ 2611.536874][T10492] ? minstrel_ht_alloc+0x807/0x980 [ 2611.541980][T10492] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2611.548037][T10492] ieee80211_register_hw+0x2a03/0x3a60 [ 2611.553487][T10492] ? ieee80211_register_hw+0xa91/0x3a60 [ 2611.559024][T10492] ? ieee80211_tasklet_handler+0x20/0x20 [ 2611.564659][T10492] ? rcu_is_watching+0x11/0xa0 [ 2611.569412][T10492] ? hrtimer_init+0x10c/0x220 [ 2611.574078][T10492] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2611.579802][T10492] hwsim_new_radio_nl+0xa7d/0xc50 [ 2611.584825][T10492] genl_rcv_msg+0xd0b/0xfa0 [ 2611.589321][T10492] ? genl_bind+0x370/0x370 [ 2611.593735][T10492] ? verify_lock_unused+0x140/0x140 [ 2611.598922][T10492] ? perf_trace_lock_acquire+0xed/0x3f0 [ 2611.604460][T10492] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2611.611037][T10492] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2611.617363][T10492] netlink_rcv_skb+0x1e9/0x430 [ 2611.622115][T10492] ? genl_bind+0x370/0x370 [ 2611.626519][T10492] ? netlink_ack+0xb10/0xb10 [ 2611.631103][T10492] ? down_read+0x1aa/0x2e0 [ 2611.635512][T10492] genl_rcv+0x24/0x40 [ 2611.639477][T10492] netlink_unicast+0x78f/0x940 [ 2611.644235][T10492] netlink_sendmsg+0x8ba/0xbe0 [ 2611.648995][T10492] ? netlink_getsockopt+0x570/0x570 [ 2611.654177][T10492] ? aa_sock_msg_perm+0x94/0x150 [ 2611.659100][T10492] ? apparmor_socket_sendmsg+0x88/0x230 [ 2611.664631][T10492] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2611.669902][T10492] ? security_socket_sendmsg+0x7c/0xa0 [ 2611.675353][T10492] ? netlink_getsockopt+0x570/0x570 [ 2611.680541][T10492] ____sys_sendmsg+0x5be/0x8f0 [ 2611.685300][T10492] ? __sys_sendmsg_sock+0x30/0x30 [ 2611.690317][T10492] ? import_iovec+0x6f/0xa0 [ 2611.694814][T10492] ___sys_sendmsg+0x236/0x2e0 [ 2611.699483][T10492] ? __sys_sendmsg+0x290/0x290 [ 2611.704271][T10492] __se_sys_sendmsg+0x1b7/0x2a0 [ 2611.709109][T10492] ? __x64_sys_sendmsg+0x80/0x80 [ 2611.714042][T10492] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2611.719925][T10492] do_syscall_64+0x4c/0xa0 [ 2611.724326][T10492] ? clear_bhb_loop+0x30/0x80 [ 2611.728988][T10492] ? clear_bhb_loop+0x30/0x80 [ 2611.733653][T10492] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2611.739531][T10492] RIP: 0033:0x7efe3ba36159 [ 2611.743935][T10492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2611.763699][T10492] RSP: 002b:00007efe39c8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2611.772099][T10492] RAX: ffffffffffffffda RBX: 00007efe3bcbdfa0 RCX: 00007efe3ba36159 [ 2611.780057][T10492] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2611.788015][T10492] RBP: 00007efe3bacd024 R08: 0000000000000000 R09: 0000000000000000 [ 2611.795969][T10492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2611.803949][T10492] R13: 00007efe3bcbe038 R14: 00007efe3bcbdfa0 R15: 00007fff91cc7388 [ 2611.811918][T10492] [ 2611.861591][T10494] netlink: 'syz.0.46384': attribute type 1 has an invalid length. [ 2611.864307][T10500] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.46385'. [ 2611.872620][T10494] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.46384'. [ 2612.395676][T10529] netlink: 40 bytes leftover after parsing attributes in process `syz.3.46397'. [ 2612.656637][T10543] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.46401'. [ 2612.781117][T10543] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2612.808930][T10543] CPU: 0 PID: 10543 Comm: syz.3.46401 Not tainted syzkaller #0 [ 2612.816512][T10543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2612.826574][T10543] Call Trace: [ 2612.829859][T10543] [ 2612.832794][T10543] dump_stack_lvl+0x188/0x250 [ 2612.837485][T10543] ? show_regs_print_info+0x20/0x20 [ 2612.842674][T10543] ? load_image+0x410/0x410 [ 2612.847172][T10543] sysfs_warn_dup+0x8a/0xa0 [ 2612.851674][T10543] sysfs_do_create_link_sd+0xc0/0x110 [ 2612.857053][T10543] device_add+0x83b/0x1050 [ 2612.861484][T10543] wiphy_register+0x1e74/0x2c40 [ 2612.866360][T10543] ? cfg80211_event_work+0x40/0x40 [ 2612.871475][T10543] ? minstrel_ht_alloc+0x807/0x980 [ 2612.876607][T10543] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2612.882689][T10543] ieee80211_register_hw+0x2a03/0x3a60 [ 2612.888163][T10543] ? ieee80211_register_hw+0xa91/0x3a60 [ 2612.893722][T10543] ? ieee80211_tasklet_handler+0x20/0x20 [ 2612.899367][T10543] ? rcu_is_watching+0x11/0xa0 [ 2612.904136][T10543] ? hrtimer_init+0x10c/0x220 [ 2612.908827][T10543] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2612.914573][T10543] hwsim_new_radio_nl+0xa7d/0xc50 [ 2612.919626][T10543] genl_rcv_msg+0xd0b/0xfa0 [ 2612.924151][T10543] ? genl_bind+0x370/0x370 [ 2612.928575][T10543] ? up_read+0x20/0x20 [ 2612.932655][T10543] ? vmacache_find+0x238/0x590 [ 2612.937423][T10543] ? verify_lock_unused+0x140/0x140 [ 2612.942627][T10543] ? verify_lock_unused+0x140/0x140 [ 2612.947840][T10543] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2612.953828][T10543] ? lock_chain_count+0x20/0x20 [ 2612.958694][T10543] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2612.965045][T10543] netlink_rcv_skb+0x1e9/0x430 [ 2612.969818][T10543] ? genl_bind+0x370/0x370 [ 2612.974241][T10543] ? netlink_ack+0xb10/0xb10 [ 2612.978845][T10543] ? down_read+0x1aa/0x2e0 [ 2612.983268][T10543] genl_rcv+0x24/0x40 [ 2612.987249][T10543] netlink_unicast+0x78f/0x940 [ 2612.992030][T10543] netlink_sendmsg+0x8ba/0xbe0 [ 2612.996814][T10543] ? netlink_getsockopt+0x570/0x570 [ 2613.002013][T10543] ? aa_sock_msg_perm+0x94/0x150 [ 2613.006957][T10543] ? apparmor_socket_sendmsg+0x88/0x230 [ 2613.012506][T10543] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2613.017793][T10543] ? security_socket_sendmsg+0x7c/0xa0 [ 2613.023253][T10543] ? netlink_getsockopt+0x570/0x570 [ 2613.028455][T10543] ____sys_sendmsg+0x5be/0x8f0 [ 2613.033232][T10543] ? __sys_sendmsg_sock+0x30/0x30 [ 2613.038270][T10543] ? import_iovec+0x6f/0xa0 [ 2613.042779][T10543] ___sys_sendmsg+0x236/0x2e0 [ 2613.047475][T10543] ? __sys_sendmsg+0x290/0x290 [ 2613.052252][T10543] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2613.058526][T10543] __se_sys_sendmsg+0x1b7/0x2a0 [ 2613.063387][T10543] ? __x64_sys_sendmsg+0x80/0x80 [ 2613.068330][T10543] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2613.074330][T10543] ? lockdep_hardirqs_on+0x94/0x140 [ 2613.079540][T10543] do_syscall_64+0x4c/0xa0 [ 2613.083954][T10543] ? clear_bhb_loop+0x30/0x80 [ 2613.088638][T10543] ? clear_bhb_loop+0x30/0x80 [ 2613.093321][T10543] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2613.099215][T10543] RIP: 0033:0x7f7c9c238159 [ 2613.103636][T10543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2613.123243][T10543] RSP: 002b:00007f7c9a490028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2613.131664][T10543] RAX: ffffffffffffffda RBX: 00007f7c9c4bffa0 RCX: 00007f7c9c238159 [ 2613.139647][T10543] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2613.147620][T10543] RBP: 00007f7c9c2cf024 R08: 0000000000000000 R09: 0000000000000000 [ 2613.155597][T10543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2613.163572][T10543] R13: 00007f7c9c4c0038 R14: 00007f7c9c4bffa0 R15: 00007fff30788348 [ 2613.171569][T10543] [ 2613.802856][T10589] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.46425'. [ 2613.861678][T10589] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2613.889150][T10589] CPU: 1 PID: 10589 Comm: syz.5.46425 Not tainted syzkaller #0 [ 2613.896735][T10589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2613.906798][T10589] Call Trace: [ 2613.910083][T10589] [ 2613.913022][T10589] dump_stack_lvl+0x188/0x250 [ 2613.917726][T10589] ? show_regs_print_info+0x20/0x20 [ 2613.922952][T10589] ? load_image+0x410/0x410 [ 2613.927480][T10589] sysfs_warn_dup+0x8a/0xa0 [ 2613.931970][T10589] sysfs_do_create_link_sd+0xc0/0x110 [ 2613.937327][T10589] device_add+0x83b/0x1050 [ 2613.941729][T10589] wiphy_register+0x1e74/0x2c40 [ 2613.946589][T10589] ? cfg80211_event_work+0x40/0x40 [ 2613.951702][T10589] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2613.957757][T10589] ieee80211_register_hw+0x2a03/0x3a60 [ 2613.963206][T10589] ? ieee80211_register_hw+0xa91/0x3a60 [ 2613.968740][T10589] ? ieee80211_tasklet_handler+0x20/0x20 [ 2613.974360][T10589] ? rcu_is_watching+0x11/0xa0 [ 2613.979118][T10589] ? hrtimer_init+0x10c/0x220 [ 2613.983783][T10589] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2613.989499][T10589] hwsim_new_radio_nl+0xa7d/0xc50 [ 2613.994526][T10589] genl_rcv_msg+0xd0b/0xfa0 [ 2613.999047][T10589] ? genl_bind+0x370/0x370 [ 2614.003472][T10589] ? verify_lock_unused+0x140/0x140 [ 2614.008660][T10589] ? perf_trace_lock_acquire+0xed/0x3f0 [ 2614.014192][T10589] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2614.020764][T10589] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2614.027344][T10589] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2614.033682][T10589] netlink_rcv_skb+0x1e9/0x430 [ 2614.038433][T10589] ? genl_bind+0x370/0x370 [ 2614.042834][T10589] ? netlink_ack+0xb10/0xb10 [ 2614.047417][T10589] ? down_read+0x1aa/0x2e0 [ 2614.051838][T10589] genl_rcv+0x24/0x40 [ 2614.055813][T10589] netlink_unicast+0x78f/0x940 [ 2614.060584][T10589] netlink_sendmsg+0x8ba/0xbe0 [ 2614.065338][T10589] ? netlink_getsockopt+0x570/0x570 [ 2614.070519][T10589] ? aa_sock_msg_perm+0x94/0x150 [ 2614.075443][T10589] ? apparmor_socket_sendmsg+0x88/0x230 [ 2614.080970][T10589] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2614.086236][T10589] ? security_socket_sendmsg+0x7c/0xa0 [ 2614.091676][T10589] ? netlink_getsockopt+0x570/0x570 [ 2614.096863][T10589] ____sys_sendmsg+0x5be/0x8f0 [ 2614.101617][T10589] ? __sys_sendmsg_sock+0x30/0x30 [ 2614.106632][T10589] ? import_iovec+0x6f/0xa0 [ 2614.111123][T10589] ___sys_sendmsg+0x236/0x2e0 [ 2614.115794][T10589] ? __sys_sendmsg+0x290/0x290 [ 2614.120569][T10589] __se_sys_sendmsg+0x1b7/0x2a0 [ 2614.125403][T10589] ? __x64_sys_sendmsg+0x80/0x80 [ 2614.130319][T10589] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2614.136293][T10589] ? lockdep_hardirqs_on+0x94/0x140 [ 2614.141479][T10589] do_syscall_64+0x4c/0xa0 [ 2614.145877][T10589] ? clear_bhb_loop+0x30/0x80 [ 2614.150540][T10589] ? clear_bhb_loop+0x30/0x80 [ 2614.155226][T10589] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2614.161105][T10589] RIP: 0033:0x7f3deb529159 [ 2614.165525][T10589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2614.185145][T10589] RSP: 002b:00007f3de9781028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2614.193545][T10589] RAX: ffffffffffffffda RBX: 00007f3deb7b0fa0 RCX: 00007f3deb529159 [ 2614.201505][T10589] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2614.209474][T10589] RBP: 00007f3deb5c0024 R08: 0000000000000000 R09: 0000000000000000 [ 2614.217441][T10589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2614.225391][T10589] R13: 00007f3deb7b1038 R14: 00007f3deb7b0fa0 R15: 00007ffc7c73c238 [ 2614.233356][T10589] [ 2614.848167][T10621] netlink: 212912 bytes leftover after parsing attributes in process `syz.6.46438'. [ 2615.097815][T10638] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.46445'. [ 2615.122085][T10638] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2615.130912][T10638] CPU: 1 PID: 10638 Comm: syz.0.46445 Not tainted syzkaller #0 [ 2615.138480][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2615.148534][T10638] Call Trace: [ 2615.151808][T10638] [ 2615.154744][T10638] dump_stack_lvl+0x188/0x250 [ 2615.159442][T10638] ? show_regs_print_info+0x20/0x20 [ 2615.164680][T10638] ? load_image+0x410/0x410 [ 2615.169210][T10638] sysfs_warn_dup+0x8a/0xa0 [ 2615.173723][T10638] sysfs_do_create_link_sd+0xc0/0x110 [ 2615.179143][T10638] device_add+0x83b/0x1050 [ 2615.183575][T10638] wiphy_register+0x1e74/0x2c40 [ 2615.188469][T10638] ? cfg80211_event_work+0x40/0x40 [ 2615.193595][T10638] ? minstrel_ht_alloc+0x807/0x980 [ 2615.198729][T10638] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2615.204812][T10638] ieee80211_register_hw+0x2a03/0x3a60 [ 2615.210289][T10638] ? ieee80211_register_hw+0xa91/0x3a60 [ 2615.215849][T10638] ? ieee80211_tasklet_handler+0x20/0x20 [ 2615.221508][T10638] ? rcu_is_watching+0x11/0xa0 [ 2615.226268][T10638] ? hrtimer_init+0x10c/0x220 [ 2615.230939][T10638] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2615.236662][T10638] hwsim_new_radio_nl+0xa7d/0xc50 [ 2615.241683][T10638] genl_rcv_msg+0xd0b/0xfa0 [ 2615.246183][T10638] ? genl_bind+0x370/0x370 [ 2615.250589][T10638] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2615.256559][T10638] ? verify_lock_unused+0x140/0x140 [ 2615.261742][T10638] ? verify_lock_unused+0x140/0x140 [ 2615.266931][T10638] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2615.273077][T10638] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2615.279404][T10638] netlink_rcv_skb+0x1e9/0x430 [ 2615.284160][T10638] ? genl_bind+0x370/0x370 [ 2615.288560][T10638] ? netlink_ack+0xb10/0xb10 [ 2615.293143][T10638] ? down_read+0x1aa/0x2e0 [ 2615.297550][T10638] genl_rcv+0x24/0x40 [ 2615.301519][T10638] netlink_unicast+0x78f/0x940 [ 2615.306277][T10638] netlink_sendmsg+0x8ba/0xbe0 [ 2615.311033][T10638] ? netlink_getsockopt+0x570/0x570 [ 2615.316214][T10638] ? aa_sock_msg_perm+0x94/0x150 [ 2615.321138][T10638] ? apparmor_socket_sendmsg+0x88/0x230 [ 2615.326666][T10638] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2615.331935][T10638] ? security_socket_sendmsg+0x7c/0xa0 [ 2615.337387][T10638] ? netlink_getsockopt+0x570/0x570 [ 2615.342572][T10638] ____sys_sendmsg+0x5be/0x8f0 [ 2615.347330][T10638] ? __sys_sendmsg_sock+0x30/0x30 [ 2615.352346][T10638] ? import_iovec+0x6f/0xa0 [ 2615.356839][T10638] ___sys_sendmsg+0x236/0x2e0 [ 2615.361507][T10638] ? __sys_sendmsg+0x290/0x290 [ 2615.366262][T10638] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2615.372504][T10638] __se_sys_sendmsg+0x1b7/0x2a0 [ 2615.377342][T10638] ? __x64_sys_sendmsg+0x80/0x80 [ 2615.382261][T10638] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2615.388235][T10638] ? lockdep_hardirqs_on+0x94/0x140 [ 2615.393423][T10638] do_syscall_64+0x4c/0xa0 [ 2615.397830][T10638] ? clear_bhb_loop+0x30/0x80 [ 2615.402492][T10638] ? clear_bhb_loop+0x30/0x80 [ 2615.407154][T10638] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2615.413034][T10638] RIP: 0033:0x7f1280cb2159 [ 2615.417440][T10638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2615.437027][T10638] RSP: 002b:00007f127ef0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2615.445425][T10638] RAX: ffffffffffffffda RBX: 00007f1280f39fa0 RCX: 00007f1280cb2159 [ 2615.453385][T10638] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2615.461336][T10638] RBP: 00007f1280d49024 R08: 0000000000000000 R09: 0000000000000000 [ 2615.469288][T10638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2615.477239][T10638] R13: 00007f1280f3a038 R14: 00007f1280f39fa0 R15: 00007fffa4d52278 [ 2615.485206][T10638] [ 2616.193656][T10686] netlink: 'syz.5.46466': attribute type 1 has an invalid length. [ 2616.241236][T10686] netlink: 126632 bytes leftover after parsing attributes in process `syz.5.46466'. [ 2618.098323][T10792] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.46514'. [ 2619.163440][T10853] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.46542'. [ 2619.631612][T10874] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.46552'. [ 2620.063779][T10912] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.46567'. [ 2620.973391][T10966] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.46592'. [ 2621.226686][T10975] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.46599'. [ 2621.275395][T10975] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2621.310295][T10975] CPU: 1 PID: 10975 Comm: syz.6.46599 Not tainted syzkaller #0 [ 2621.317883][T10975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2621.327945][T10975] Call Trace: [ 2621.331226][T10975] [ 2621.334164][T10975] dump_stack_lvl+0x188/0x250 [ 2621.338865][T10975] ? show_regs_print_info+0x20/0x20 [ 2621.344077][T10975] ? load_image+0x410/0x410 [ 2621.348625][T10975] sysfs_warn_dup+0x8a/0xa0 [ 2621.353140][T10975] sysfs_do_create_link_sd+0xc0/0x110 [ 2621.358522][T10975] device_add+0x83b/0x1050 [ 2621.362950][T10975] wiphy_register+0x1e74/0x2c40 [ 2621.367829][T10975] ? cfg80211_event_work+0x40/0x40 [ 2621.372968][T10975] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2621.379055][T10975] ieee80211_register_hw+0x2a03/0x3a60 [ 2621.384536][T10975] ? ieee80211_register_hw+0xa91/0x3a60 [ 2621.390113][T10975] ? ieee80211_tasklet_handler+0x20/0x20 [ 2621.395763][T10975] ? rcu_is_watching+0x11/0xa0 [ 2621.400627][T10975] ? hrtimer_init+0x10c/0x220 [ 2621.405317][T10975] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2621.411065][T10975] hwsim_new_radio_nl+0xa7d/0xc50 [ 2621.416114][T10975] genl_rcv_msg+0xd0b/0xfa0 [ 2621.420634][T10975] ? genl_bind+0x370/0x370 [ 2621.425061][T10975] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2621.431046][T10975] ? vmacache_find+0x238/0x590 [ 2621.435813][T10975] ? lock_chain_count+0x20/0x20 [ 2621.440671][T10975] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2621.446822][T10975] ? lockdep_hardirqs_on+0x94/0x140 [ 2621.452021][T10975] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2621.458167][T10975] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2621.464485][T10975] ? lock_acquire+0x208/0x400 [ 2621.469157][T10975] netlink_rcv_skb+0x1e9/0x430 [ 2621.473910][T10975] ? genl_bind+0x370/0x370 [ 2621.478311][T10975] ? netlink_ack+0xb10/0xb10 [ 2621.482899][T10975] ? down_read+0x1aa/0x2e0 [ 2621.487305][T10975] genl_rcv+0x24/0x40 [ 2621.491274][T10975] netlink_unicast+0x78f/0x940 [ 2621.496035][T10975] netlink_sendmsg+0x8ba/0xbe0 [ 2621.500790][T10975] ? netlink_getsockopt+0x570/0x570 [ 2621.505971][T10975] ? aa_sock_msg_perm+0x94/0x150 [ 2621.510896][T10975] ? apparmor_socket_sendmsg+0x88/0x230 [ 2621.516427][T10975] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2621.521695][T10975] ? security_socket_sendmsg+0x7c/0xa0 [ 2621.527136][T10975] ? netlink_getsockopt+0x570/0x570 [ 2621.532325][T10975] ____sys_sendmsg+0x5be/0x8f0 [ 2621.537082][T10975] ? __sys_sendmsg_sock+0x30/0x30 [ 2621.542098][T10975] ? import_iovec+0x6f/0xa0 [ 2621.546592][T10975] ___sys_sendmsg+0x236/0x2e0 [ 2621.551264][T10975] ? __sys_sendmsg+0x290/0x290 [ 2621.556040][T10975] __se_sys_sendmsg+0x1b7/0x2a0 [ 2621.560876][T10975] ? __x64_sys_sendmsg+0x80/0x80 [ 2621.565801][T10975] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2621.571782][T10975] ? lockdep_hardirqs_on+0x94/0x140 [ 2621.576972][T10975] do_syscall_64+0x4c/0xa0 [ 2621.581374][T10975] ? clear_bhb_loop+0x30/0x80 [ 2621.586036][T10975] ? clear_bhb_loop+0x30/0x80 [ 2621.590698][T10975] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2621.596576][T10975] RIP: 0033:0x7fe5b63ca159 [ 2621.600978][T10975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2621.620570][T10975] RSP: 002b:00007fe5b4622028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2621.628974][T10975] RAX: ffffffffffffffda RBX: 00007fe5b6651fa0 RCX: 00007fe5b63ca159 [ 2621.636933][T10975] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2621.644884][T10975] RBP: 00007fe5b6461024 R08: 0000000000000000 R09: 0000000000000000 [ 2621.652839][T10975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2621.660790][T10975] R13: 00007fe5b6652038 R14: 00007fe5b6651fa0 R15: 00007ffe44834348 [ 2621.668759][T10975] [ 2622.421110][T11029] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.46620'. [ 2622.677579][T11046] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.46626'. [ 2622.741248][T11046] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2622.769022][T11046] CPU: 0 PID: 11046 Comm: syz.0.46626 Not tainted syzkaller #0 [ 2622.776606][T11046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2622.786668][T11046] Call Trace: [ 2622.789949][T11046] [ 2622.792885][T11046] dump_stack_lvl+0x188/0x250 [ 2622.797568][T11046] ? lockdep_hardirqs_on+0x94/0x140 [ 2622.802769][T11046] ? show_regs_print_info+0x20/0x20 [ 2622.807986][T11046] ? _printk+0x121/0x130 [ 2622.812237][T11046] sysfs_warn_dup+0x8a/0xa0 [ 2622.816746][T11046] sysfs_do_create_link_sd+0xc0/0x110 [ 2622.822112][T11046] device_add+0x83b/0x1050 [ 2622.826519][T11046] wiphy_register+0x1e74/0x2c40 [ 2622.831372][T11046] ? cfg80211_event_work+0x40/0x40 [ 2622.836468][T11046] ? minstrel_ht_alloc+0x807/0x980 [ 2622.841568][T11046] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2622.847625][T11046] ieee80211_register_hw+0x2a03/0x3a60 [ 2622.853072][T11046] ? ieee80211_register_hw+0xa91/0x3a60 [ 2622.858609][T11046] ? ieee80211_tasklet_handler+0x20/0x20 [ 2622.864228][T11046] ? rcu_is_watching+0x11/0xa0 [ 2622.868980][T11046] ? hrtimer_init+0x10c/0x220 [ 2622.873646][T11046] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2622.879367][T11046] hwsim_new_radio_nl+0xa7d/0xc50 [ 2622.884385][T11046] genl_rcv_msg+0xd0b/0xfa0 [ 2622.888884][T11046] ? genl_bind+0x370/0x370 [ 2622.893291][T11046] ? up_read+0x20/0x20 [ 2622.897348][T11046] ? vmacache_find+0x238/0x590 [ 2622.902098][T11046] ? verify_lock_unused+0x140/0x140 [ 2622.907287][T11046] ? verify_lock_unused+0x140/0x140 [ 2622.912467][T11046] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2622.918435][T11046] ? lock_chain_count+0x20/0x20 [ 2622.923278][T11046] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2622.929603][T11046] netlink_rcv_skb+0x1e9/0x430 [ 2622.934357][T11046] ? genl_bind+0x370/0x370 [ 2622.938756][T11046] ? netlink_ack+0xb10/0xb10 [ 2622.943339][T11046] ? down_read+0x1aa/0x2e0 [ 2622.947743][T11046] genl_rcv+0x24/0x40 [ 2622.951706][T11046] netlink_unicast+0x78f/0x940 [ 2622.956464][T11046] netlink_sendmsg+0x8ba/0xbe0 [ 2622.961225][T11046] ? netlink_getsockopt+0x570/0x570 [ 2622.966407][T11046] ? aa_sock_msg_perm+0x94/0x150 [ 2622.971334][T11046] ? apparmor_socket_sendmsg+0x88/0x230 [ 2622.976861][T11046] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2622.982129][T11046] ? security_socket_sendmsg+0x7c/0xa0 [ 2622.987576][T11046] ? netlink_getsockopt+0x570/0x570 [ 2622.992764][T11046] ____sys_sendmsg+0x5be/0x8f0 [ 2622.997522][T11046] ? __sys_sendmsg_sock+0x30/0x30 [ 2623.002536][T11046] ? import_iovec+0x6f/0xa0 [ 2623.007028][T11046] ___sys_sendmsg+0x236/0x2e0 [ 2623.011697][T11046] ? __sys_sendmsg+0x290/0x290 [ 2623.016477][T11046] __se_sys_sendmsg+0x1b7/0x2a0 [ 2623.021314][T11046] ? __x64_sys_sendmsg+0x80/0x80 [ 2623.026249][T11046] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2623.032245][T11046] ? lockdep_hardirqs_on+0x94/0x140 [ 2623.037444][T11046] do_syscall_64+0x4c/0xa0 [ 2623.041855][T11046] ? clear_bhb_loop+0x30/0x80 [ 2623.046526][T11046] ? clear_bhb_loop+0x30/0x80 [ 2623.051192][T11046] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2623.057077][T11046] RIP: 0033:0x7f1280cb2159 [ 2623.061481][T11046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2623.081073][T11046] RSP: 002b:00007f127ef0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2623.089494][T11046] RAX: ffffffffffffffda RBX: 00007f1280f39fa0 RCX: 00007f1280cb2159 [ 2623.097451][T11046] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2623.105406][T11046] RBP: 00007f1280d49024 R08: 0000000000000000 R09: 0000000000000000 [ 2623.113360][T11046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2623.121316][T11046] R13: 00007f1280f3a038 R14: 00007f1280f39fa0 R15: 00007fffa4d52278 [ 2623.129289][T11046] [ 2624.037466][T11111] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.46655'. [ 2624.096615][T11111] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2624.111229][T11111] CPU: 0 PID: 11111 Comm: syz.0.46655 Not tainted syzkaller #0 [ 2624.118807][T11111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2624.128867][T11111] Call Trace: [ 2624.132147][T11111] [ 2624.135072][T11111] dump_stack_lvl+0x188/0x250 [ 2624.139763][T11111] ? show_regs_print_info+0x20/0x20 [ 2624.144963][T11111] ? load_image+0x410/0x410 [ 2624.149476][T11111] sysfs_warn_dup+0x8a/0xa0 [ 2624.153979][T11111] sysfs_do_create_link_sd+0xc0/0x110 [ 2624.159371][T11111] device_add+0x83b/0x1050 [ 2624.163798][T11111] wiphy_register+0x1e74/0x2c40 [ 2624.168668][T11111] ? cfg80211_event_work+0x40/0x40 [ 2624.173774][T11111] ? minstrel_ht_alloc+0x807/0x980 [ 2624.178891][T11111] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2624.184967][T11111] ieee80211_register_hw+0x2a03/0x3a60 [ 2624.190433][T11111] ? ieee80211_register_hw+0xa91/0x3a60 [ 2624.195987][T11111] ? ieee80211_tasklet_handler+0x20/0x20 [ 2624.201624][T11111] ? rcu_is_watching+0x11/0xa0 [ 2624.206389][T11111] ? hrtimer_init+0x10c/0x220 [ 2624.211066][T11111] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2624.216803][T11111] hwsim_new_radio_nl+0xa7d/0xc50 [ 2624.221832][T11111] genl_rcv_msg+0xd0b/0xfa0 [ 2624.226340][T11111] ? genl_bind+0x370/0x370 [ 2624.230758][T11111] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2624.236738][T11111] ? verify_lock_unused+0x140/0x140 [ 2624.241935][T11111] ? lock_chain_count+0x20/0x20 [ 2624.246791][T11111] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2624.252945][T11111] ? lockdep_hardirqs_on+0x94/0x140 [ 2624.258142][T11111] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2624.264299][T11111] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2624.270640][T11111] netlink_rcv_skb+0x1e9/0x430 [ 2624.275577][T11111] ? genl_bind+0x370/0x370 [ 2624.279997][T11111] ? netlink_ack+0xb10/0xb10 [ 2624.284594][T11111] ? down_read+0x1aa/0x2e0 [ 2624.289011][T11111] genl_rcv+0x24/0x40 [ 2624.292989][T11111] netlink_unicast+0x78f/0x940 [ 2624.297756][T11111] netlink_sendmsg+0x8ba/0xbe0 [ 2624.302521][T11111] ? netlink_getsockopt+0x570/0x570 [ 2624.307713][T11111] ? aa_sock_msg_perm+0x94/0x150 [ 2624.312645][T11111] ? apparmor_socket_sendmsg+0x88/0x230 [ 2624.318183][T11111] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2624.323460][T11111] ? security_socket_sendmsg+0x7c/0xa0 [ 2624.328916][T11111] ? netlink_getsockopt+0x570/0x570 [ 2624.334117][T11111] ____sys_sendmsg+0x5be/0x8f0 [ 2624.338886][T11111] ? __sys_sendmsg_sock+0x30/0x30 [ 2624.343912][T11111] ? import_iovec+0x6f/0xa0 [ 2624.348415][T11111] ___sys_sendmsg+0x236/0x2e0 [ 2624.353097][T11111] ? __sys_sendmsg+0x290/0x290 [ 2624.357891][T11111] __se_sys_sendmsg+0x1b7/0x2a0 [ 2624.362737][T11111] ? __x64_sys_sendmsg+0x80/0x80 [ 2624.367666][T11111] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2624.373656][T11111] ? lockdep_hardirqs_on+0x94/0x140 [ 2624.378855][T11111] do_syscall_64+0x4c/0xa0 [ 2624.383263][T11111] ? clear_bhb_loop+0x30/0x80 [ 2624.387934][T11111] ? clear_bhb_loop+0x30/0x80 [ 2624.392609][T11111] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2624.398494][T11111] RIP: 0033:0x7f1280cb2159 [ 2624.402907][T11111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2624.422505][T11111] RSP: 002b:00007f127ef0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2624.430914][T11111] RAX: ffffffffffffffda RBX: 00007f1280f39fa0 RCX: 00007f1280cb2159 [ 2624.438881][T11111] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2624.446846][T11111] RBP: 00007f1280d49024 R08: 0000000000000000 R09: 0000000000000000 [ 2624.454810][T11111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2624.462770][T11111] R13: 00007f1280f3a038 R14: 00007f1280f39fa0 R15: 00007fffa4d52278 [ 2624.470751][T11111] [ 2624.785564][T11142] netlink: 'syz.3.46667': attribute type 21 has an invalid length. [ 2624.870628][T11142] netlink: 128 bytes leftover after parsing attributes in process `syz.3.46667'. [ 2624.894509][T11142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2625.342380][T11164] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.46675'. [ 2625.403152][T11164] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 2627.551127][T11298] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.46733'. [ 2627.855484][T11317] netlink: 'syz.2.46742': attribute type 21 has an invalid length. [ 2627.879791][T11317] netlink: 132 bytes leftover after parsing attributes in process `syz.2.46742'. [ 2628.201906][T11332] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.46748'. [ 2628.706328][T11365] netlink: 212912 bytes leftover after parsing attributes in process `syz.6.46762'. [ 2628.819463][T11374] netlink: 'syz.0.46767': attribute type 21 has an invalid length. [ 2628.846954][T11374] netlink: 132 bytes leftover after parsing attributes in process `syz.0.46767'. [ 2629.448772][T11412] netlink: 60823 bytes leftover after parsing attributes in process `syz.0.46781'. [ 2629.479080][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46781'. [ 2629.726766][T11415] netlink: set zone limit has 8 unknown bytes [ 2630.152933][T11446] netlink: 'syz.5.46794': attribute type 21 has an invalid length. [ 2630.179163][T11446] netlink: 132 bytes leftover after parsing attributes in process `syz.5.46794'. [ 2630.366097][T11454] netlink: 60823 bytes leftover after parsing attributes in process `syz.6.46795'. [ 2630.427428][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.46795'. [ 2631.304065][T11499] netlink: 'syz.3.46814': attribute type 21 has an invalid length. [ 2631.341322][T11499] netlink: 132 bytes leftover after parsing attributes in process `syz.3.46814'. [ 2631.967074][T11536] netlink: 60823 bytes leftover after parsing attributes in process `syz.2.46826'. [ 2632.116126][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46826'. [ 2632.171480][T11538] netlink: 'syz.3.46827': attribute type 21 has an invalid length. [ 2632.240662][T11538] netlink: 132 bytes leftover after parsing attributes in process `syz.3.46827'. [ 2632.931082][T11576] netlink: 'syz.5.46840': attribute type 15 has an invalid length. [ 2632.983313][T11576] netlink: 11834 bytes leftover after parsing attributes in process `syz.5.46840'. [ 2633.049221][T11579] netlink: 'syz.5.46840': attribute type 4 has an invalid length. [ 2633.057077][T11579] netlink: 'syz.5.46840': attribute type 5 has an invalid length. [ 2633.080410][T11579] netlink: 'syz.5.46840': attribute type 6 has an invalid length. [ 2633.089350][T11579] netlink: 'syz.5.46840': attribute type 7 has an invalid length. [ 2633.097174][T11579] netlink: 'syz.5.46840': attribute type 11 has an invalid length. [ 2633.266662][T11579] netlink: 'syz.5.46840': attribute type 15 has an invalid length. [ 2633.351443][T11579] netlink: 11834 bytes leftover after parsing attributes in process `syz.5.46840'. [ 2633.432966][T11596] netlink: 60823 bytes leftover after parsing attributes in process `syz.3.46846'. [ 2636.213898][T11630] __nla_validate_parse: 1 callbacks suppressed [ 2636.213942][T11630] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.46860'. [ 2636.409551][T11633] netlink: set zone limit has 8 unknown bytes [ 2636.522862][T11640] netlink: 60823 bytes leftover after parsing attributes in process `syz.5.46862'. [ 2636.566508][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.46862'. [ 2636.652925][T11647] netlink: 192436 bytes leftover after parsing attributes in process `syz.6.46866'. [ 2636.679103][T11647] openvswitch: netlink: Key 0 has unexpected len 7424 expected 0 [ 2636.987625][T11669] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.46874'. [ 2637.008981][T11663] validate_nla: 7 callbacks suppressed [ 2637.009015][T11663] netlink: 'syz.3.46873': attribute type 15 has an invalid length. [ 2637.069293][T11663] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.46873'. [ 2637.127481][T11671] netlink: 'syz.3.46873': attribute type 4 has an invalid length. [ 2637.166136][T11671] netlink: 'syz.3.46873': attribute type 5 has an invalid length. [ 2637.219889][T11671] netlink: 'syz.3.46873': attribute type 6 has an invalid length. [ 2637.271655][T11671] netlink: 'syz.3.46873': attribute type 7 has an invalid length. [ 2637.330371][T11671] netlink: 'syz.3.46873': attribute type 11 has an invalid length. [ 2637.363931][T11671] netlink: 'syz.3.46873': attribute type 15 has an invalid length. [ 2637.379579][T11687] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.46880'. [ 2637.419442][T11671] netlink: 'syz.3.46873': attribute type 16 has an invalid length. [ 2637.448374][T11671] netlink: 'syz.3.46873': attribute type 21 has an invalid length. [ 2637.481110][T11671] netlink: 'syz.3.46873': attribute type 25 has an invalid length. [ 2637.512307][T11671] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.46873'. [ 2637.575762][T11687] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2637.618978][T11687] CPU: 0 PID: 11687 Comm: syz.5.46880 Not tainted syzkaller #0 [ 2637.626581][T11687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2637.636652][T11687] Call Trace: [ 2637.639947][T11687] [ 2637.642895][T11687] dump_stack_lvl+0x188/0x250 [ 2637.647607][T11687] ? show_regs_print_info+0x20/0x20 [ 2637.652832][T11687] ? load_image+0x410/0x410 [ 2637.657382][T11687] sysfs_warn_dup+0x8a/0xa0 [ 2637.661903][T11687] sysfs_do_create_link_sd+0xc0/0x110 [ 2637.667304][T11687] device_add+0x83b/0x1050 [ 2637.671857][T11687] wiphy_register+0x1e74/0x2c40 [ 2637.676766][T11687] ? cfg80211_event_work+0x40/0x40 [ 2637.681897][T11687] ? minstrel_ht_alloc+0x807/0x980 [ 2637.687055][T11687] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2637.693161][T11687] ieee80211_register_hw+0x2a03/0x3a60 [ 2637.698658][T11687] ? ieee80211_register_hw+0xa91/0x3a60 [ 2637.704252][T11687] ? ieee80211_tasklet_handler+0x20/0x20 [ 2637.709930][T11687] ? rcu_is_watching+0x11/0xa0 [ 2637.714725][T11687] ? hrtimer_init+0x10c/0x220 [ 2637.719432][T11687] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2637.725213][T11687] hwsim_new_radio_nl+0xa7d/0xc50 [ 2637.730304][T11687] genl_rcv_msg+0xd0b/0xfa0 [ 2637.734863][T11687] ? genl_bind+0x370/0x370 [ 2637.739317][T11687] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2637.745068][T11687] ? verify_lock_unused+0x140/0x140 [ 2637.750293][T11687] ? perf_trace_lock_acquire+0x341/0x3f0 [ 2637.755959][T11687] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2637.762566][T11687] ? perf_trace_lock+0xe4/0x390 [ 2637.767446][T11687] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2637.773827][T11687] netlink_rcv_skb+0x1e9/0x430 [ 2637.778613][T11687] ? genl_bind+0x370/0x370 [ 2637.783054][T11687] ? netlink_ack+0xb10/0xb10 [ 2637.787690][T11687] ? down_read+0x1aa/0x2e0 [ 2637.792136][T11687] genl_rcv+0x24/0x40 [ 2637.796133][T11687] netlink_unicast+0x78f/0x940 [ 2637.800943][T11687] netlink_sendmsg+0x8ba/0xbe0 [ 2637.805751][T11687] ? netlink_getsockopt+0x570/0x570 [ 2637.810963][T11687] ? aa_sock_msg_perm+0x94/0x150 [ 2637.815926][T11687] ? apparmor_socket_sendmsg+0x88/0x230 [ 2637.821491][T11687] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2637.826791][T11687] ? security_socket_sendmsg+0x7c/0xa0 [ 2637.832266][T11687] ? netlink_getsockopt+0x570/0x570 [ 2637.837928][T11687] ____sys_sendmsg+0x5be/0x8f0 [ 2637.842730][T11687] ? __sys_sendmsg_sock+0x30/0x30 [ 2637.847796][T11687] ? import_iovec+0x6f/0xa0 [ 2637.852327][T11687] ___sys_sendmsg+0x236/0x2e0 [ 2637.857043][T11687] ? __sys_sendmsg+0x290/0x290 [ 2637.861859][T11687] ? trace_event_raw_event_lock+0x250/0x250 [ 2637.867827][T11687] __se_sys_sendmsg+0x1b7/0x2a0 [ 2637.872703][T11687] ? __x64_sys_sendmsg+0x80/0x80 [ 2637.877654][T11687] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2637.883682][T11687] ? trace_sys_enter+0x1f/0x80 [ 2637.888467][T11687] do_syscall_64+0x4c/0xa0 [ 2637.892900][T11687] ? clear_bhb_loop+0x30/0x80 [ 2637.897592][T11687] ? clear_bhb_loop+0x30/0x80 [ 2637.902291][T11687] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2637.908207][T11687] RIP: 0033:0x7f3deb529159 [ 2637.912643][T11687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2637.932262][T11687] RSP: 002b:00007f3de9760028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2637.940701][T11687] RAX: ffffffffffffffda RBX: 00007f3deb7b1090 RCX: 00007f3deb529159 [ 2637.948685][T11687] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2637.956666][T11687] RBP: 00007f3deb5c0024 R08: 0000000000000000 R09: 0000000000000000 [ 2637.964648][T11687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2637.972628][T11687] R13: 00007f3deb7b1128 R14: 00007f3deb7b1090 R15: 00007ffc7c73c238 [ 2637.980657][T11687] [ 2639.984766][T11712] netlink: 60823 bytes leftover after parsing attributes in process `syz.3.46893'. [ 2640.017471][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46893'. [ 2640.654277][T11746] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 2641.364299][T11791] __nla_validate_parse: 2 callbacks suppressed [ 2641.364331][T11791] netlink: 132 bytes leftover after parsing attributes in process `syz.5.46926'. [ 2641.494202][T11797] netlink: 60823 bytes leftover after parsing attributes in process `syz.6.46927'. [ 2641.578967][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.6.46927'. [ 2641.790892][T11811] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.46935'. [ 2641.865116][T11811] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 2642.365413][T11837] validate_nla: 5 callbacks suppressed [ 2642.365446][T11837] netlink: 'syz.3.46946': attribute type 21 has an invalid length. [ 2642.409154][T11837] netlink: 132 bytes leftover after parsing attributes in process `syz.3.46946'. [ 2642.604583][T11852] netlink: 60823 bytes leftover after parsing attributes in process `syz.5.46954'. [ 2642.657746][T11852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.46954'. [ 2643.258518][T11888] netlink: 60823 bytes leftover after parsing attributes in process `syz.2.46968'. [ 2643.298979][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46968'. [ 2643.451039][T11895] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.46967'. [ 2643.586915][T11895] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 2643.920263][T11905] netlink: 'syz.0.46975': attribute type 21 has an invalid length. [ 2645.485534][T11990] openvswitch: netlink: Key 0 has unexpected len 7424 expected 0 [ 2646.764259][T12050] __nla_validate_parse: 3 callbacks suppressed [ 2646.764311][T12050] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.47037'. [ 2646.892572][T12050] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2646.932902][T12050] CPU: 1 PID: 12050 Comm: syz.2.47037 Not tainted syzkaller #0 [ 2646.940496][T12050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2646.950566][T12050] Call Trace: [ 2646.953856][T12050] [ 2646.956805][T12050] dump_stack_lvl+0x188/0x250 [ 2646.961611][T12050] ? show_regs_print_info+0x20/0x20 [ 2646.966832][T12050] ? load_image+0x410/0x410 [ 2646.971389][T12050] sysfs_warn_dup+0x8a/0xa0 [ 2646.975920][T12050] sysfs_do_create_link_sd+0xc0/0x110 [ 2646.981324][T12050] device_add+0x83b/0x1050 [ 2646.985776][T12050] wiphy_register+0x1e74/0x2c40 [ 2646.990693][T12050] ? cfg80211_event_work+0x40/0x40 [ 2646.995819][T12050] ? minstrel_ht_alloc+0x807/0x980 [ 2647.000967][T12050] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2647.007188][T12050] ieee80211_register_hw+0x2a03/0x3a60 [ 2647.012688][T12050] ? ieee80211_register_hw+0xa91/0x3a60 [ 2647.018274][T12050] ? ieee80211_tasklet_handler+0x20/0x20 [ 2647.023947][T12050] ? rcu_is_watching+0x11/0xa0 [ 2647.028739][T12050] ? hrtimer_init+0x10c/0x220 [ 2647.033446][T12050] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2647.039235][T12050] hwsim_new_radio_nl+0xa7d/0xc50 [ 2647.044316][T12050] genl_rcv_msg+0xd0b/0xfa0 [ 2647.048867][T12050] ? genl_bind+0x370/0x370 [ 2647.053321][T12050] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2647.059068][T12050] ? verify_lock_unused+0x140/0x140 [ 2647.064289][T12050] ? perf_trace_lock_acquire+0x341/0x3f0 [ 2647.069974][T12050] ? mark_lock+0x94/0x320 [ 2647.074322][T12050] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2647.080684][T12050] ? lock_chain_count+0x20/0x20 [ 2647.085569][T12050] netlink_rcv_skb+0x1e9/0x430 [ 2647.090360][T12050] ? genl_bind+0x370/0x370 [ 2647.094803][T12050] ? netlink_ack+0xb10/0xb10 [ 2647.099423][T12050] ? down_read+0x5f/0x2e0 [ 2647.103785][T12050] ? down_read+0x1aa/0x2e0 [ 2647.108359][T12050] genl_rcv+0x24/0x40 [ 2647.112354][T12050] netlink_unicast+0x78f/0x940 [ 2647.117142][T12050] netlink_sendmsg+0x8ba/0xbe0 [ 2647.121926][T12050] ? netlink_getsockopt+0x570/0x570 [ 2647.127122][T12050] ? aa_sock_msg_perm+0x94/0x150 [ 2647.132061][T12050] ? apparmor_socket_sendmsg+0x88/0x230 [ 2647.137599][T12050] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2647.142874][T12050] ? security_socket_sendmsg+0x7c/0xa0 [ 2647.148335][T12050] ? netlink_getsockopt+0x570/0x570 [ 2647.153534][T12050] ____sys_sendmsg+0x5be/0x8f0 [ 2647.158304][T12050] ? __sys_sendmsg_sock+0x30/0x30 [ 2647.163336][T12050] ? import_iovec+0x6f/0xa0 [ 2647.167841][T12050] ___sys_sendmsg+0x236/0x2e0 [ 2647.172525][T12050] ? __sys_sendmsg+0x290/0x290 [ 2647.177296][T12050] ? trace_event_raw_event_lock+0x250/0x250 [ 2647.183222][T12050] __se_sys_sendmsg+0x1b7/0x2a0 [ 2647.188072][T12050] ? __x64_sys_sendmsg+0x80/0x80 [ 2647.192999][T12050] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2647.199000][T12050] ? lockdep_hardirqs_on+0x94/0x140 [ 2647.204199][T12050] do_syscall_64+0x4c/0xa0 [ 2647.208601][T12050] ? clear_bhb_loop+0x30/0x80 [ 2647.213269][T12050] ? clear_bhb_loop+0x30/0x80 [ 2647.217946][T12050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2647.223826][T12050] RIP: 0033:0x7efe3ba36159 [ 2647.228258][T12050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2647.247853][T12050] RSP: 002b:00007efe39c8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2647.256259][T12050] RAX: ffffffffffffffda RBX: 00007efe3bcbdfa0 RCX: 00007efe3ba36159 [ 2647.264219][T12050] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2647.272177][T12050] RBP: 00007efe3bacd024 R08: 0000000000000000 R09: 0000000000000000 [ 2647.280134][T12050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2647.288091][T12050] R13: 00007efe3bcbe038 R14: 00007efe3bcbdfa0 R15: 00007fff91cc7388 [ 2647.296073][T12050] [ 2647.492689][T12067] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.47042'. [ 2648.065553][T12096] netlink: 60823 bytes leftover after parsing attributes in process `syz.5.47053'. [ 2648.096457][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.47053'. [ 2649.017953][T12136] netlink: 60823 bytes leftover after parsing attributes in process `syz.0.47069'. [ 2649.049456][T12136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47069'. [ 2651.165201][T12242] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2651.309834][T12242] netlink: 'syz.6.47113': attribute type 21 has an invalid length. [ 2651.358382][T12242] netlink: 156 bytes leftover after parsing attributes in process `syz.6.47113'. [ 2651.602131][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.608466][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.765825][T12328] device sit0 left promiscuous mode [ 2653.132255][T12339] device sit0 entered promiscuous mode [ 2654.678264][T12424] netlink: 60823 bytes leftover after parsing attributes in process `syz.5.47184'. [ 2654.708463][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.47184'. [ 2655.210130][T12456] device sit0 left promiscuous mode [ 2655.510307][T12473] device sit0 entered promiscuous mode [ 2655.810396][T12491] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2655.865154][T12491] netlink: 'syz.0.47208': attribute type 21 has an invalid length. [ 2655.892147][T12491] netlink: 156 bytes leftover after parsing attributes in process `syz.0.47208'. [ 2658.080593][T12575] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.47241'. [ 2659.891557][T12661] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.47276'. [ 2660.718916][T12698] device sit0 left promiscuous mode [ 2660.900227][T12706] device sit0 entered promiscuous mode [ 2661.027405][T12711] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.47295'. [ 2661.294077][T12724] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.47301'. [ 2661.851876][T12745] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.47307'. [ 2662.148303][T12754] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.47309'. [ 2662.213712][T12758] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.47312'. [ 2662.259978][T12761] device sit0 left promiscuous mode [ 2662.442675][T12767] device sit0 entered promiscuous mode [ 2662.626394][T12777] netlink: 63719 bytes leftover after parsing attributes in process `syz.0.47320'. [ 2662.960656][T12794] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.47326'. [ 2663.005846][T12795] netlink: 63719 bytes leftover after parsing attributes in process `syz.6.47327'. [ 2663.302060][T12808] netlink: 63719 bytes leftover after parsing attributes in process `syz.0.47332'. [ 2664.398611][T12859] device sit0 left promiscuous mode [ 2664.557142][T12866] device sit0 entered promiscuous mode [ 2665.271282][T12891] __nla_validate_parse: 5 callbacks suppressed [ 2665.271315][T12891] netlink: 63719 bytes leftover after parsing attributes in process `syz.6.47366'. [ 2665.373928][T12896] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.47368'. [ 2665.380773][T12900] netlink: 63719 bytes leftover after parsing attributes in process `syz.3.47367'. [ 2665.475899][T12896] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2665.519738][T12896] CPU: 0 PID: 12896 Comm: syz.0.47368 Not tainted syzkaller #0 [ 2665.527324][T12896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2665.537412][T12896] Call Trace: [ 2665.540699][T12896] [ 2665.543640][T12896] dump_stack_lvl+0x188/0x250 [ 2665.548332][T12896] ? show_regs_print_info+0x20/0x20 [ 2665.553534][T12896] ? load_image+0x410/0x410 [ 2665.558054][T12896] sysfs_warn_dup+0x8a/0xa0 [ 2665.562566][T12896] sysfs_do_create_link_sd+0xc0/0x110 [ 2665.567948][T12896] device_add+0x83b/0x1050 [ 2665.572373][T12896] wiphy_register+0x1e74/0x2c40 [ 2665.577242][T12896] ? cfg80211_event_work+0x40/0x40 [ 2665.582353][T12896] ? minstrel_ht_alloc+0x807/0x980 [ 2665.587471][T12896] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2665.593546][T12896] ieee80211_register_hw+0x2a03/0x3a60 [ 2665.599012][T12896] ? ieee80211_register_hw+0xa91/0x3a60 [ 2665.604566][T12896] ? ieee80211_tasklet_handler+0x20/0x20 [ 2665.610206][T12896] ? rcu_is_watching+0x11/0xa0 [ 2665.614971][T12896] ? hrtimer_init+0x10c/0x220 [ 2665.619648][T12896] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2665.625385][T12896] hwsim_new_radio_nl+0xa7d/0xc50 [ 2665.630422][T12896] genl_rcv_msg+0xd0b/0xfa0 [ 2665.634935][T12896] ? genl_bind+0x370/0x370 [ 2665.639350][T12896] ? up_read+0x20/0x20 [ 2665.643418][T12896] ? vmacache_find+0x238/0x590 [ 2665.648177][T12896] ? verify_lock_unused+0x140/0x140 [ 2665.653385][T12896] ? verify_lock_unused+0x140/0x140 [ 2665.658577][T12896] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2665.664564][T12896] ? lock_chain_count+0x20/0x20 [ 2665.669425][T12896] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2665.675767][T12896] netlink_rcv_skb+0x1e9/0x430 [ 2665.680539][T12896] ? genl_bind+0x370/0x370 [ 2665.684955][T12896] ? netlink_ack+0xb10/0xb10 [ 2665.689676][T12896] ? down_read+0x1aa/0x2e0 [ 2665.694099][T12896] genl_rcv+0x24/0x40 [ 2665.698076][T12896] netlink_unicast+0x78f/0x940 [ 2665.702852][T12896] netlink_sendmsg+0x8ba/0xbe0 [ 2665.707629][T12896] ? netlink_getsockopt+0x570/0x570 [ 2665.712824][T12896] ? aa_sock_msg_perm+0x94/0x150 [ 2665.717762][T12896] ? apparmor_socket_sendmsg+0x88/0x230 [ 2665.723304][T12896] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2665.728587][T12896] ? security_socket_sendmsg+0x7c/0xa0 [ 2665.734054][T12896] ? netlink_getsockopt+0x570/0x570 [ 2665.739257][T12896] ____sys_sendmsg+0x5be/0x8f0 [ 2665.744031][T12896] ? __sys_sendmsg_sock+0x30/0x30 [ 2665.749063][T12896] ? import_iovec+0x6f/0xa0 [ 2665.753570][T12896] ___sys_sendmsg+0x236/0x2e0 [ 2665.758258][T12896] ? __sys_sendmsg+0x290/0x290 [ 2665.763052][T12896] __se_sys_sendmsg+0x1b7/0x2a0 [ 2665.767905][T12896] ? __x64_sys_sendmsg+0x80/0x80 [ 2665.772837][T12896] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2665.778831][T12896] ? lockdep_hardirqs_on+0x94/0x140 [ 2665.784031][T12896] do_syscall_64+0x4c/0xa0 [ 2665.788446][T12896] ? clear_bhb_loop+0x30/0x80 [ 2665.793121][T12896] ? clear_bhb_loop+0x30/0x80 [ 2665.797806][T12896] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2665.803699][T12896] RIP: 0033:0x7f1280cb2159 [ 2665.808118][T12896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2665.827721][T12896] RSP: 002b:00007f127ef0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2665.836132][T12896] RAX: ffffffffffffffda RBX: 00007f1280f39fa0 RCX: 00007f1280cb2159 [ 2665.844189][T12896] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2665.852157][T12896] RBP: 00007f1280d49024 R08: 0000000000000000 R09: 0000000000000000 [ 2665.860126][T12896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2665.868094][T12896] R13: 00007f1280f3a038 R14: 00007f1280f39fa0 R15: 00007fffa4d52278 [ 2665.876081][T12896] [ 2665.995370][T12912] netlink: 63719 bytes leftover after parsing attributes in process `syz.3.47374'. [ 2666.210069][T12922] device sit0 left promiscuous mode [ 2666.444103][T12930] device sit0 entered promiscuous mode [ 2666.958260][T12940] netlink: 63719 bytes leftover after parsing attributes in process `syz.2.47383'. [ 2667.028559][T12943] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.47384'. [ 2667.764714][T12970] netlink: 63719 bytes leftover after parsing attributes in process `syz.0.47395'. [ 2667.926936][T12972] device sit0 left promiscuous mode [ 2668.177927][T12978] device sit0 entered promiscuous mode [ 2668.318980][T12988] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.47400'. [ 2668.469596][T13000] netlink: 60823 bytes leftover after parsing attributes in process `syz.3.47407'. [ 2668.518204][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47407'. [ 2670.346159][T13070] __nla_validate_parse: 7 callbacks suppressed [ 2670.346193][T13070] netlink: 60823 bytes leftover after parsing attributes in process `syz.2.47437'. [ 2670.423193][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47437'. [ 2671.162140][T13102] netlink: 60823 bytes leftover after parsing attributes in process `syz.2.47448'. [ 2671.209031][T13102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47448'. [ 2671.380378][T13107] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.47449'. [ 2671.398200][T13108] netlink: 60823 bytes leftover after parsing attributes in process `syz.0.47460'. [ 2671.472637][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47460'. [ 2671.542997][T13107] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2671.570544][T13107] CPU: 1 PID: 13107 Comm: syz.2.47449 Not tainted syzkaller #0 [ 2671.578130][T13107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2671.588191][T13107] Call Trace: [ 2671.591473][T13107] [ 2671.594412][T13107] dump_stack_lvl+0x188/0x250 [ 2671.599103][T13107] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2671.605276][T13107] ? show_regs_print_info+0x20/0x20 [ 2671.610480][T13107] ? load_image+0x410/0x410 [ 2671.614993][T13107] sysfs_warn_dup+0x8a/0xa0 [ 2671.619497][T13107] sysfs_do_create_link_sd+0xc0/0x110 [ 2671.624869][T13107] device_add+0x83b/0x1050 [ 2671.629299][T13107] wiphy_register+0x1e74/0x2c40 [ 2671.634166][T13107] ? cfg80211_event_work+0x40/0x40 [ 2671.639279][T13107] ? minstrel_ht_alloc+0x807/0x980 [ 2671.644391][T13107] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2671.650455][T13107] ieee80211_register_hw+0x2a03/0x3a60 [ 2671.655915][T13107] ? ieee80211_register_hw+0xa91/0x3a60 [ 2671.661465][T13107] ? ieee80211_tasklet_handler+0x20/0x20 [ 2671.667102][T13107] ? rcu_is_watching+0x11/0xa0 [ 2671.671878][T13107] ? hrtimer_init+0x10c/0x220 [ 2671.676556][T13107] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2671.682291][T13107] hwsim_new_radio_nl+0xa7d/0xc50 [ 2671.687324][T13107] genl_rcv_msg+0xd0b/0xfa0 [ 2671.691832][T13107] ? genl_bind+0x370/0x370 [ 2671.696250][T13107] ? verify_lock_unused+0x140/0x140 [ 2671.701451][T13107] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 2671.708047][T13107] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2671.714381][T13107] netlink_rcv_skb+0x1e9/0x430 [ 2671.719140][T13107] ? genl_bind+0x370/0x370 [ 2671.723549][T13107] ? netlink_ack+0xb10/0xb10 [ 2671.728147][T13107] ? down_read+0x1aa/0x2e0 [ 2671.732562][T13107] genl_rcv+0x24/0x40 [ 2671.736552][T13107] netlink_unicast+0x78f/0x940 [ 2671.741331][T13107] netlink_sendmsg+0x8ba/0xbe0 [ 2671.746099][T13107] ? netlink_getsockopt+0x570/0x570 [ 2671.751289][T13107] ? aa_sock_msg_perm+0x94/0x150 [ 2671.756224][T13107] ? apparmor_socket_sendmsg+0x88/0x230 [ 2671.761764][T13107] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2671.767044][T13107] ? security_socket_sendmsg+0x7c/0xa0 [ 2671.772499][T13107] ? netlink_getsockopt+0x570/0x570 [ 2671.777694][T13107] ____sys_sendmsg+0x5be/0x8f0 [ 2671.782552][T13107] ? __sys_sendmsg_sock+0x30/0x30 [ 2671.787588][T13107] ? import_iovec+0x6f/0xa0 [ 2671.792096][T13107] ___sys_sendmsg+0x236/0x2e0 [ 2671.796779][T13107] ? __sys_sendmsg+0x290/0x290 [ 2671.801549][T13107] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2671.807809][T13107] __se_sys_sendmsg+0x1b7/0x2a0 [ 2671.812655][T13107] ? __x64_sys_sendmsg+0x80/0x80 [ 2671.817582][T13107] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2671.823573][T13107] ? lockdep_hardirqs_on+0x94/0x140 [ 2671.828771][T13107] do_syscall_64+0x4c/0xa0 [ 2671.833179][T13107] ? clear_bhb_loop+0x30/0x80 [ 2671.837852][T13107] ? clear_bhb_loop+0x30/0x80 [ 2671.842522][T13107] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2671.848408][T13107] RIP: 0033:0x7efe3ba36159 [ 2671.852818][T13107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2671.872415][T13107] RSP: 002b:00007efe39c8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2671.880830][T13107] RAX: ffffffffffffffda RBX: 00007efe3bcbdfa0 RCX: 00007efe3ba36159 [ 2671.888794][T13107] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2671.896761][T13107] RBP: 00007efe3bacd024 R08: 0000000000000000 R09: 0000000000000000 [ 2671.904726][T13107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2671.912694][T13107] R13: 00007efe3bcbe038 R14: 00007efe3bcbdfa0 R15: 00007fff91cc7388 [ 2671.920674][T13107] [ 2674.693923][T13125] netlink: 60823 bytes leftover after parsing attributes in process `syz.2.47456'. [ 2674.720949][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47456'. [ 2674.769242][T13128] netlink: 60823 bytes leftover after parsing attributes in process `syz.3.47457'. [ 2675.473283][T13173] __nla_validate_parse: 7 callbacks suppressed [ 2675.473317][T13173] netlink: 60823 bytes leftover after parsing attributes in process `syz.5.47479'. [ 2675.530444][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.47479'. [ 2675.592701][T13181] device sit0 left promiscuous mode [ 2675.729249][T13186] netlink: 60823 bytes leftover after parsing attributes in process `syz.5.47485'. [ 2675.748244][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.47485'. [ 2675.795585][T13181] device sit0 entered promiscuous mode [ 2675.972162][T13197] netlink: 60823 bytes leftover after parsing attributes in process `syz.5.47488'. [ 2676.030470][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.47488'. [ 2676.324462][T13215] netlink: 60823 bytes leftover after parsing attributes in process `syz.2.47495'. [ 2676.357559][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47495'. [ 2676.918833][T13241] mac80211_hwsim hwsim132 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2677.125527][T13250] netlink: 60823 bytes leftover after parsing attributes in process `syz.2.47510'. [ 2677.169315][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47510'. [ 2679.652302][T13324] mac80211_hwsim hwsim118 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2680.652372][T13363] mac80211_hwsim hwsim136 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2681.386459][T13394] mac80211_hwsim hwsim128 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2685.814677][T24651] tipc: Subscription rejected, illegal request [ 2686.577907][T13656] __nla_validate_parse: 4 callbacks suppressed [ 2686.577939][T13656] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.47684'. [ 2687.806467][T13716] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.47709'. [ 2687.840362][T13710] netlink: 132 bytes leftover after parsing attributes in process `syz.6.47708'. [ 2687.934806][T13715] netlink: 'syz.6.47708': attribute type 10 has an invalid length. [ 2687.982072][T13715] netlink: 55 bytes leftover after parsing attributes in process `syz.6.47708'. [ 2688.399884][T13728] netlink: 60823 bytes leftover after parsing attributes in process `syz.5.47713'. [ 2688.431217][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.47713'. [ 2689.455180][T13763] netlink: 60823 bytes leftover after parsing attributes in process `syz.3.47727'. [ 2689.480146][T13763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47727'. [ 2692.747493][T13850] netlink: 60823 bytes leftover after parsing attributes in process `syz.3.47764'. [ 2692.796680][T13850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47764'. [ 2693.358751][T13875] netlink: 60823 bytes leftover after parsing attributes in process `syz.0.47771'. [ 2693.409692][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47771'. [ 2693.454023][T13883] netlink: 60823 bytes leftover after parsing attributes in process `syz.5.47777'. [ 2693.474934][T13883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.47777'. [ 2694.173907][T13918] netlink: 60823 bytes leftover after parsing attributes in process `syz.3.47789'. [ 2694.200780][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47789'. [ 2694.367505][T13922] netlink: 60823 bytes leftover after parsing attributes in process `syz.5.47790'. [ 2694.410013][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.47790'. [ 2697.956715][T14058] __nla_validate_parse: 8 callbacks suppressed [ 2697.956751][T14058] netlink: 60823 bytes leftover after parsing attributes in process `syz.5.47846'. [ 2698.000178][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.47846'. [ 2698.336676][T14072] netlink: 60823 bytes leftover after parsing attributes in process `syz.3.47851'. [ 2698.371745][T14072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47851'. [ 2699.238509][T14100] netlink: 60823 bytes leftover after parsing attributes in process `syz.0.47863'. [ 2699.283403][T14100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47863'. [ 2700.125047][T14131] netlink: 60823 bytes leftover after parsing attributes in process `syz.6.47875'. [ 2700.169038][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.47875'. [ 2700.894079][T14160] netlink: 60823 bytes leftover after parsing attributes in process `syz.0.47887'. [ 2700.915679][T14160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47887'. [ 2703.181555][T14262] __nla_validate_parse: 14 callbacks suppressed [ 2703.181598][T14262] netlink: 60823 bytes leftover after parsing attributes in process `syz.2.47930'. [ 2703.294045][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47930'. [ 2703.331267][T14265] netlink: 60823 bytes leftover after parsing attributes in process `syz.0.47932'. [ 2703.410299][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47932'. [ 2703.509468][T14276] netlink: 60823 bytes leftover after parsing attributes in process `syz.2.47936'. [ 2703.545409][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47936'. [ 2704.303947][T14308] netlink: 60823 bytes leftover after parsing attributes in process `syz.3.47946'. [ 2704.419322][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47946'. [ 2704.517943][T14312] netlink: 60823 bytes leftover after parsing attributes in process `syz.2.47948'. [ 2704.537901][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47948'. [ 2708.226438][T14521] __nla_validate_parse: 30 callbacks suppressed [ 2708.226482][T14521] netlink: 60823 bytes leftover after parsing attributes in process `syz.5.48036'. [ 2708.262021][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.48036'. [ 2708.701790][T14553] netlink: 60823 bytes leftover after parsing attributes in process `syz.3.48049'. [ 2708.716997][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.48049'. [ 2709.121214][T14582] netlink: 60823 bytes leftover after parsing attributes in process `syz.6.48062'. [ 2709.145270][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.48062'. [ 2709.605124][T14616] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.48076'. [ 2710.059656][T14641] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.48087'. [ 2710.486874][T14666] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.48098'. [ 2710.847946][T14682] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.48105'. [ 2713.040397][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.046763][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.487837][T14808] __nla_validate_parse: 6 callbacks suppressed [ 2713.487880][T14808] netlink: 63719 bytes leftover after parsing attributes in process `syz.3.48160'. [ 2714.786405][T14821] netlink: 63719 bytes leftover after parsing attributes in process `syz.2.48166'. [ 2715.008698][T14831] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.48171'. [ 2715.056038][T14835] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.48172'. [ 2715.299833][T14847] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.48177'. [ 2715.643313][T14862] netlink: 63719 bytes leftover after parsing attributes in process `syz.6.48182'. [ 2715.684553][T14864] netlink: 63719 bytes leftover after parsing attributes in process `syz.6.48183'. [ 2715.789962][T14870] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.48186'. [ 2715.994704][T14883] netlink: 63719 bytes leftover after parsing attributes in process `syz.0.48191'. [ 2716.088696][T14887] netlink: 63719 bytes leftover after parsing attributes in process `syz.0.48193'. [ 2718.494464][T14909] __nla_validate_parse: 1 callbacks suppressed [ 2718.494493][T14909] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.48199'. [ 2718.612427][T14916] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.48202'. [ 2718.648142][T14920] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.48204'. [ 2718.706017][T14924] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.48206'. [ 2719.331562][T14945] netlink: 63719 bytes leftover after parsing attributes in process `syz.0.48216'. [ 2721.746924][T14949] netlink: 63719 bytes leftover after parsing attributes in process `syz.0.48227'. [ 2721.815804][T14955] netlink: 63719 bytes leftover after parsing attributes in process `syz.0.48220'. [ 2725.086569][T14981] netlink: 63719 bytes leftover after parsing attributes in process `syz.2.48231'. [ 2725.106552][T14986] netlink: 63719 bytes leftover after parsing attributes in process `syz.0.48240'. [ 2725.117715][T14988] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.48230'. [ 2725.385934][T15014] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.48245'. [ 2725.420622][T15016] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.48246'. [ 2728.457436][T15040] netlink: 63719 bytes leftover after parsing attributes in process `syz.6.48256'. [ 2728.540319][T15043] netlink: 63719 bytes leftover after parsing attributes in process `syz.0.48257'. [ 2728.626966][T15035] netlink: 132 bytes leftover after parsing attributes in process `syz.2.48253'. [ 2728.707448][T15047] netlink: 'syz.2.48253': attribute type 10 has an invalid length. [ 2728.759334][T15047] netlink: 55 bytes leftover after parsing attributes in process `syz.2.48253'. [ 2728.942005][T15064] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.48265'. [ 2731.814872][T15094] __nla_validate_parse: 2 callbacks suppressed [ 2731.814905][T15094] netlink: 132 bytes leftover after parsing attributes in process `syz.0.48278'. [ 2731.836011][T15094] netlink: 'syz.0.48278': attribute type 10 has an invalid length. [ 2731.846853][T15094] netlink: 55 bytes leftover after parsing attributes in process `syz.0.48278'. [ 2732.026693][T15101] netlink: 63719 bytes leftover after parsing attributes in process `syz.3.48281'. [ 2732.058215][T15104] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.48282'. [ 2732.262516][T15122] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.48290'. [ 2732.477522][T15134] netlink: 63719 bytes leftover after parsing attributes in process `syz.2.48294'. [ 2732.495720][T15136] netlink: 63719 bytes leftover after parsing attributes in process `syz.5.48295'. [ 2732.532287][T15132] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.48293'. [ 2732.685211][T15150] netlink: 63719 bytes leftover after parsing attributes in process `syz.3.48301'. [ 2732.933504][T15172] netlink: 63719 bytes leftover after parsing attributes in process `syz.6.48310'. [ 2739.351335][T15269] __nla_validate_parse: 5 callbacks suppressed [ 2739.351356][T15269] netlink: 63719 bytes leftover after parsing attributes in process `syz.6.48350'. [ 2742.306861][T15279] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.48351'. [ 2745.817008][T15331] netlink: 63719 bytes leftover after parsing attributes in process `syz.6.48375'. [ 2748.949159][T15361] netlink: 63719 bytes leftover after parsing attributes in process `syz.0.48387'. [ 2749.185857][T15376] netlink: 63719 bytes leftover after parsing attributes in process `syz.6.48395'. [ 2749.350704][T15388] netlink: 63719 bytes leftover after parsing attributes in process `syz.0.48400'. [ 2749.556662][T15405] netlink: 63719 bytes leftover after parsing attributes in process `syz.6.48407'. [ 2749.996963][T15424] netlink: 63719 bytes leftover after parsing attributes in process `syz.6.48414'. [ 2750.232205][T15435] netlink: 63719 bytes leftover after parsing attributes in process `syz.0.48420'. [ 2750.699962][T15454] netlink: 63719 bytes leftover after parsing attributes in process `syz.6.48429'. [ 2750.819330][T15458] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.48431'. [ 2751.527486][T15484] netlink: 65051 bytes leftover after parsing attributes in process `syz.6.48443'. [ 2752.684383][T15548] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.48463'. [ 2753.293657][T15579] netlink: 'syz.2.48476': attribute type 41 has an invalid length. [ 2753.538097][T15587] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.48480'. [ 2755.531678][T15656] netlink: 'syz.0.48510': attribute type 41 has an invalid length. [ 2757.748515][T15724] netlink: 'syz.5.48537': attribute type 41 has an invalid length. [ 2759.081128][T15772] netlink: 'syz.6.48554': attribute type 41 has an invalid length. [ 2760.336549][T15826] netlink: 'syz.3.48576': attribute type 41 has an invalid length. [ 2761.033294][T15855] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.48591'. [ 2761.127047][T15859] netlink: 'syz.6.48593': attribute type 39 has an invalid length. [ 2761.657427][T15873] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.48600'. [ 2762.010358][T15887] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.48616'. [ 2762.085024][T15889] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.48607'. [ 2762.155494][T15894] netlink: 'syz.3.48609': attribute type 2 has an invalid length. [ 2762.188865][T15894] netlink: 'syz.3.48609': attribute type 1 has an invalid length. [ 2762.206547][T15894] netlink: 9 bytes leftover after parsing attributes in process `syz.3.48609'. [ 2762.515522][T15906] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.48614'. [ 2762.881663][T15918] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.48620'. [ 2762.998306][T15924] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.48622'. [ 2763.411718][T15947] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.48634'. [ 2763.563937][T15953] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.48637'. [ 2765.977206][T16077] netlink: 'syz.3.48693': attribute type 10 has an invalid length. [ 2766.146461][T16066] netlink: 'syz.0.48689': attribute type 21 has an invalid length. [ 2766.173916][T16066] __nla_validate_parse: 15 callbacks suppressed [ 2766.173957][T16066] netlink: 128 bytes leftover after parsing attributes in process `syz.0.48689'. [ 2766.257539][T16066] netlink: 'syz.0.48689': attribute type 5 has an invalid length. [ 2766.331070][T16085] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.48695'. [ 2766.467203][T16089] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.48697'. [ 2766.614220][T16096] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.48700'. [ 2766.690643][T16100] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.48702'. [ 2766.920600][T16112] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.48707'. [ 2767.217792][T16122] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.48712'. [ 2767.256093][T16126] netlink: 65055 bytes leftover after parsing attributes in process `syz.6.48714'. [ 2767.517417][T16136] netlink: 65055 bytes leftover after parsing attributes in process `syz.6.48716'. [ 2767.557924][T16138] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.48719'. [ 2769.312879][T16203] netlink: 'syz.6.48735': attribute type 21 has an invalid length. [ 2769.399971][T16203] netlink: 'syz.6.48735': attribute type 5 has an invalid length. [ 2771.496637][T16276] __nla_validate_parse: 10 callbacks suppressed [ 2771.496673][T16276] netlink: 65055 bytes leftover after parsing attributes in process `syz.6.48775'. [ 2771.771223][T16284] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.48779'. [ 2771.981528][T16293] netlink: 'syz.2.48781': attribute type 10 has an invalid length. [ 2772.684989][T16315] netlink: 65055 bytes leftover after parsing attributes in process `syz.6.48790'. [ 2772.858255][T16313] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.48789'. [ 2773.299274][T16318] ------------[ cut here ]------------ [ 2773.304836][T16318] WARNING: CPU: 1 PID: 16318 at kernel/events/core.c:6698 perf_pending_task+0x353/0x480 [ 2773.314735][T16318] Modules linked in: [ 2773.318641][T16318] CPU: 1 PID: 16318 Comm: syz.0.48791 Not tainted syzkaller #0 [ 2773.326383][T16318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2773.336476][T16318] RIP: 0010:perf_pending_task+0x353/0x480 [ 2773.342249][T16318] Code: e8 32 41 de ff 84 db 75 10 e8 c9 3e de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b9 3e de ff e8 3c ac 65 ff eb e9 e8 ad 3e de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 2773.361905][T16318] RSP: 0018:ffffc9000347f9c0 EFLAGS: 00010293 [ 2773.367982][T16318] RAX: ffffffff819ad0f3 RBX: ffff888084899638 RCX: ffff888074e1d940 [ 2773.376008][T16318] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2773.384016][T16318] RBP: ffff888084899408 R08: ffff888074e1e353 R09: 1ffff1100e9c3c6a [ 2773.392032][T16318] R10: dffffc0000000000 R11: ffffed100e9c3c6b R12: ffff888074e1d940 [ 2773.400033][T16318] R13: ffff8880454e8158 R14: 0000000000000000 R15: 1ffff11010913281 [ 2773.408010][T16318] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 2773.416982][T16318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2773.423598][T16318] CR2: 00007efe3c7f5a08 CR3: 0000000076d51000 CR4: 00000000003506e0 [ 2773.431613][T16318] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 2773.439605][T16318] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2773.447580][T16318] Call Trace: [ 2773.450908][T16318] [ 2773.453851][T16318] task_work_run+0x125/0x1a0 [ 2773.458560][T16318] do_exit+0x635/0x2110 [ 2773.462813][T16318] ? preempt_schedule+0xbc/0xd0 [ 2773.467670][T16318] ? put_task_struct+0x80/0x80 [ 2773.472475][T16318] ? preempt_schedule_common+0xa5/0xd0 [ 2773.477937][T16318] ? preempt_schedule+0xbc/0xd0 [ 2773.482847][T16318] do_group_exit+0x12c/0x2f0 [ 2773.487449][T16318] get_signal+0x7eb/0x12e0 [ 2773.491996][T16318] arch_do_signal_or_restart+0xe6/0x12a0 [ 2773.497675][T16318] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2773.503356][T16318] ? get_sigframe_size+0x10/0x10 [ 2773.508322][T16318] ? ksys_write+0x203/0x260 [ 2773.512952][T16318] ? exit_to_user_mode_loop+0x3b/0x130 [ 2773.518419][T16318] exit_to_user_mode_loop+0x9e/0x130 [ 2773.523752][T16318] exit_to_user_mode_prepare+0xee/0x180 [ 2773.529327][T16318] syscall_exit_to_user_mode+0x16/0x40 [ 2773.534798][T16318] do_syscall_64+0x58/0xa0 [ 2773.539253][T16318] ? clear_bhb_loop+0x30/0x80 [ 2773.543943][T16318] ? clear_bhb_loop+0x30/0x80 [ 2773.548629][T16318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2773.554581][T16318] RIP: 0033:0x7f1280cb2159 [ 2773.559022][T16318] Code: Unable to access opcode bytes at RIP 0x7f1280cb212f. [ 2773.566380][T16318] RSP: 002b:00007f127ef0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2773.574842][T16318] RAX: 0000000000000012 RBX: 00007f1280f39fa0 RCX: 00007f1280cb2159 [ 2773.582853][T16318] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000009 [ 2773.591128][T16318] RBP: 00007f1280d49024 R08: 0000000000000000 R09: 0000000000000000 [ 2773.599124][T16318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2773.607096][T16318] R13: 00007f1280f3a038 R14: 00007f1280f39fa0 R15: 00007fffa4d52278 [ 2773.615118][T16318] [ 2773.618170][T16318] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2773.625442][T16318] CPU: 1 PID: 16318 Comm: syz.0.48791 Not tainted syzkaller #0 [ 2773.632986][T16318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2773.643037][T16318] Call Trace: [ 2773.646314][T16318] [ 2773.649246][T16318] dump_stack_lvl+0x188/0x250 [ 2773.653937][T16318] ? show_regs_print_info+0x20/0x20 [ 2773.659143][T16318] ? load_image+0x410/0x410 [ 2773.663668][T16318] panic+0x2f8/0x850 [ 2773.667576][T16318] ? bpf_jit_dump+0xd0/0xd0 [ 2773.672093][T16318] ? perf_pending_task+0x353/0x480 [ 2773.677210][T16318] __warn+0x248/0x2b0 [ 2773.681198][T16318] ? perf_pending_task+0x353/0x480 [ 2773.686315][T16318] report_bug+0x1b9/0x2e0 [ 2773.690737][T16318] handle_bug+0x3a/0x70 [ 2773.694895][T16318] exc_invalid_op+0x16/0x40 [ 2773.699407][T16318] asm_exc_invalid_op+0x16/0x20 [ 2773.704260][T16318] RIP: 0010:perf_pending_task+0x353/0x480 [ 2773.709983][T16318] Code: e8 32 41 de ff 84 db 75 10 e8 c9 3e de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b9 3e de ff e8 3c ac 65 ff eb e9 e8 ad 3e de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 2773.729593][T16318] RSP: 0018:ffffc9000347f9c0 EFLAGS: 00010293 [ 2773.735672][T16318] RAX: ffffffff819ad0f3 RBX: ffff888084899638 RCX: ffff888074e1d940 [ 2773.743820][T16318] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2773.751791][T16318] RBP: ffff888084899408 R08: ffff888074e1e353 R09: 1ffff1100e9c3c6a [ 2773.759766][T16318] R10: dffffc0000000000 R11: ffffed100e9c3c6b R12: ffff888074e1d940 [ 2773.767739][T16318] R13: ffff8880454e8158 R14: 0000000000000000 R15: 1ffff11010913281 [ 2773.775723][T16318] ? perf_pending_task+0x353/0x480 [ 2773.780860][T16318] task_work_run+0x125/0x1a0 [ 2773.785463][T16318] do_exit+0x635/0x2110 [ 2773.789627][T16318] ? preempt_schedule+0xbc/0xd0 [ 2773.794488][T16318] ? put_task_struct+0x80/0x80 [ 2773.799253][T16318] ? preempt_schedule_common+0xa5/0xd0 [ 2773.804718][T16318] ? preempt_schedule+0xbc/0xd0 [ 2773.809584][T16318] do_group_exit+0x12c/0x2f0 [ 2773.814184][T16318] get_signal+0x7eb/0x12e0 [ 2773.818628][T16318] arch_do_signal_or_restart+0xe6/0x12a0 [ 2773.824274][T16318] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2773.829922][T16318] ? get_sigframe_size+0x10/0x10 [ 2773.834879][T16318] ? ksys_write+0x203/0x260 [ 2773.839394][T16318] ? exit_to_user_mode_loop+0x3b/0x130 [ 2773.844857][T16318] exit_to_user_mode_loop+0x9e/0x130 [ 2773.850146][T16318] exit_to_user_mode_prepare+0xee/0x180 [ 2773.855700][T16318] syscall_exit_to_user_mode+0x16/0x40 [ 2773.861168][T16318] do_syscall_64+0x58/0xa0 [ 2773.865589][T16318] ? clear_bhb_loop+0x30/0x80 [ 2773.870266][T16318] ? clear_bhb_loop+0x30/0x80 [ 2773.874950][T16318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2773.880844][T16318] RIP: 0033:0x7f1280cb2159 [ 2773.885265][T16318] Code: Unable to access opcode bytes at RIP 0x7f1280cb212f. [ 2773.892626][T16318] RSP: 002b:00007f127ef0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2773.901039][T16318] RAX: 0000000000000012 RBX: 00007f1280f39fa0 RCX: 00007f1280cb2159 [ 2773.909011][T16318] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000009 [ 2773.916987][T16318] RBP: 00007f1280d49024 R08: 0000000000000000 R09: 0000000000000000 [ 2773.924966][T16318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2773.932941][T16318] R13: 00007f1280f3a038 R14: 00007f1280f39fa0 R15: 00007fffa4d52278 [ 2773.941021][T16318] [ 2773.944290][T16318] Kernel Offset: disabled [ 2773.948644][T16318] Rebooting in 86400 seconds..