last executing test programs: 5.336695004s ago: executing program 4 (id=11120): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x3, 0x2, 0x1, 0x6, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x65ca, 0x6, @perf_config_ext={0x0, 0x8}, 0x4280, 0x0, 0x6904, 0x5, 0xa, 0x7, 0x2, 0x0, 0x575, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x9, r0, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0x1ff, 0x3}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81202a8800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r5], 0x14) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3010000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 5.014203822s ago: executing program 4 (id=11123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000880)}, 0x20) recvmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d18"], 0xfe33) r1 = socket$kcm(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x23, &(0x7f0000000000), 0x8) 3.94850784s ago: executing program 2 (id=11130): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r1'], 0x31) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x80a0, 0x0, 0x4, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c0000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79e3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) 3.93520302s ago: executing program 4 (id=11131): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r1'], 0x31) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) r2 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x80a0, 0x0, 0x4, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c0000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79e3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000080)) 3.713074645s ago: executing program 1 (id=11133): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4e, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x223}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x800, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0xff, 0x7f}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0]}}, &(0x7f00000005c0)=""/240, 0x47, 0xf0, 0x1}, 0x28) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c00000000000000180000000000000000000000000000009500000000000000950000000000000079905023dc5a746f69aa41ab294fbd52e6874cefa2317023e7358c57fdce21bc454dcc43767c0e73743afbc75a67c277a3ee9c5858c6ec3f29546c671f4146c003ab83adf8a4b1f1a54f920c191359c1461c23f361546ef61f85d19644bbbc8ff232697bafc3d136461162afc3a963ceee3e436a051fe7dea792"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r3 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x8, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x1000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 2.850012117s ago: executing program 3 (id=11134): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r1'], 0x31) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) r2 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x80a0, 0x0, 0x4, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79e3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000080)) 2.818282398s ago: executing program 2 (id=11135): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x3, 0x2, 0x1, 0x6, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x65ca, 0x6, @perf_config_ext={0x0, 0x8}, 0x4280, 0x0, 0x6904, 0x5, 0xa, 0x7, 0x2, 0x0, 0x575, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x9, r0, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0x1ff, 0x3}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81202a8800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r5], 0x14) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3010000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 2.815643358s ago: executing program 0 (id=11136): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x7000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="2e00000039000511d25a80698c63940d0224fc602f6e35400c000200680ec00037153e370a", 0x25}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x29, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r3) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0xe, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x8, 0x5, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r5, &(0x7f0000000680), &(0x7f0000000600)=""/73}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x2) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x20000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x4, 0x4}, 0x50) 2.319999941s ago: executing program 4 (id=11137): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r1 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) socket$kcm(0x11, 0xa, 0x300) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612", 0x1d}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext, 0x8104, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r5 = syz_clone(0x10000000, &(0x7f0000000240)="45dcfdbac200b160136fb70efc2809f277b56d80aa0eacc611e6a041025cbebb230e0d0dfc9c5e61fd3f36e268596a6f5705eed7bc41c63c44895bb1435f1086864d144247d3c37222717ace54c28e8e0d", 0x51, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="1dcf31408ee997f05ce24e14799969cbca4adf90b40f8bfcbe976b916fd8127b7291beb0569c3e716ceb0d7681e06cd932c7fe5c588e2139a761553263aaff08bd474bd311801a97b7f5c8773408a65c77b2f4d50a0da1b86ccfbb49ae9d9491e46186f3c6e1b919d1e73f708ed2e4063baadab9c5f7eff8f8") perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x3, 0xa, 0x1, 0x98, 0x0, 0xfffffffffffff42c, 0x8000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xb41c, 0x1, @perf_bp={&(0x7f0000000500), 0x3}, 0x0, 0x6, 0x9, 0x5, 0xffffffffffffffc0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x1}, r5, 0xc, 0xffffffffffffffff, 0x6) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf0bc7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xc57f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r0, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0800000000000000000000000000000000020000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="03000000020000000100"/28], 0x50) 2.251802592s ago: executing program 1 (id=11138): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r1'], 0x31) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c0000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79e3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000080)) 2.206268954s ago: executing program 2 (id=11139): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x3, 0x2, 0x1, 0x6, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x65ca, 0x6, @perf_config_ext={0x0, 0x8}, 0x4280, 0x0, 0x6904, 0x5, 0xa, 0x7, 0x2, 0x0, 0x575, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x9, r0, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0x1ff, 0x3}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81202a8800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r5], 0x14) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3010000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 2.097548137s ago: executing program 3 (id=11140): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x3, 0x2, 0x1, 0x6, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x65ca, 0x6, @perf_config_ext={0x0, 0x8}, 0x4280, 0x0, 0x6904, 0x5, 0xa, 0x7, 0x2, 0x0, 0x575, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x9, r0, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0x1ff, 0x3}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81202a8800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r5], 0x14) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3010000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 1.996800899s ago: executing program 0 (id=11141): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000880)}, 0x20) recvmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r1 = socket$kcm(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x23, &(0x7f0000000000), 0x8) 1.94216982s ago: executing program 4 (id=11142): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, 0x0, 0x0) r5 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="9be2", 0x2}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x541b, &(0x7f0000000080)) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x804) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x400c084) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000041) sendmsg(r7, &(0x7f00000008c0)={0x0, 0x241, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) 1.937044961s ago: executing program 1 (id=11143): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r1'], 0x31) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x80a0, 0x0, 0x4, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c0000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79e3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) 1.899596841s ago: executing program 2 (id=11144): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x840, 0x3, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNGETFEATURES(r2, 0x5452, &(0x7f00000013c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x6, 0xfdfffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3, 0xffffffffffffffff}, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r4}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x82000, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000000380)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000500), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x28}, 0x18) 1.631010219s ago: executing program 3 (id=11145): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r1'], 0x31) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x80a0, 0x0, 0x4, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c0000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79e3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000001040000005b7d5ed86682b241452d90f69f0661daf604474c111e1eeff46feab235ad0cff68eed84e3ed43c16cd2c60b5e7c161e43de7a38bcc78e0c047f981605fcdc59d06b7c748d3b8113c3e42877db3c1194239d13a865b04ed28d2c121f4a2dd7c7ab2171c54fa015253b84d64ab7d1d98c5f6605ae9b8ebcd832de3c4f27066916f382f485dc0d1bd34da3d02f36d0d8f2b7fd78b73d76ed7b16828517c2a95eab14130a52bc80b3aeaf11050bdfc168a6de3ab312efa923ab8c571bfdf2c71dde79687d7c9e694bbcd43976fcab5e35fbdab283c0e805390d268bdf3097aac9598392bc10752f833d0b2c2de295a3136384d67be852c9fd766ea0f82774f5d1cb7f1e34c17f9e8f3a0dba641be054316a7e77eca29ca20128c1d1d34b405df86187e372d73e47237e0ed0d6afec5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) 1.364475875s ago: executing program 2 (id=11146): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x30c6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x8, 0x80, 0x40, 0x40, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020019f9ccd97829570000000000000100000d00000000000000000000000000000000000000030000000002000000030000000000"], &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28) perf_event_open$cgroup(0x0, r4, 0xd, r6, 0x8) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000900)=""/170, &(0x7f0000000c40), &(0x7f0000000a40), 0x80000001}, 0x38) mkdirat$cgroup(r7, &(0x7f0000000b80)='syz0\x00', 0x1ff) socketpair(0x18, 0x2, 0x1, &(0x7f0000000000)) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 988.038224ms ago: executing program 0 (id=11147): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r1'], 0x31) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) r2 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x80a0, 0x0, 0x4, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c0000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79e3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000080)) 961.122326ms ago: executing program 1 (id=11148): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x25, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000340), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r1}, 0x20) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000dc0)={&(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000c00)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x21, 0x1, 0x4, [{@multicast2, 0x3}, {@broadcast, 0xad}, {@loopback, 0x8}, {@rand_addr=0x64010102, 0x7}]}]}}}], 0x38}, 0x810) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890c, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r6, 0x0, 0x20000800) r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) write$cgroup_subtree(r0, 0x0, 0x14) 938.599836ms ago: executing program 4 (id=11149): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000560000009523000000000000398d1b7f7b2244348b184d63734a6edab4a5e3166a77b8c40085feff070000aeb6ee9da39ba0c46fd11d59ff49d393b3174b41d4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2, &(0x7f00000002c0), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x4, 0x9b, &(0x7f0000000300)=""/155}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x100}, 0x10}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000180)='syz1\x00', 0x1ff) openat$cgroup_ro(r6, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES64=0x0, @ANYBLOB="f9ffffffffffffffdcd5635f5f"], 0x48) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000800)=ANY=[@ANYBLOB="8fedcb791f6f9875"], 0xfdef) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041000000000000aa11800150006", 0x21}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 777.08531ms ago: executing program 3 (id=11150): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r1'], 0x31) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) r2 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x80a0, 0x0, 0x4, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79e3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000080)) 668.669703ms ago: executing program 1 (id=11151): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x3, 0x2, 0x1, 0x6, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x65ca, 0x6, @perf_config_ext={0x0, 0x8}, 0x4280, 0x0, 0x6904, 0x5, 0xa, 0x7, 0x2, 0x0, 0x575, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x9, r0, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0x1ff, 0x3}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81202a8800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r5], 0x14) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3010000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 629.703824ms ago: executing program 2 (id=11152): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a0", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000000) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 613.083145ms ago: executing program 0 (id=11153): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r1'], 0x31) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c0000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79e3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000001040000005b7d5ed86682b241452d90f69f0661daf604474c111e1eeff46feab235ad0cff68eed84e3ed43c16cd2c60b5e7c161e43de7a38bcc78e0c047f981605fcdc59d06b7c748d3b8113c3e42877db3c1194239d13a865b04ed28d2c121f4a2dd7c7ab2171c54fa015253b84d64ab7d1d98c5f6605ae9b8ebcd832de3c4f27066916f382f485dc0d1bd34da3d02f36d0d8f2b7fd78b73d76ed7b16828517c2a95eab14130a52bc80b3aeaf11050bdfc168a6de3ab312efa923ab8c571bfdf2c71dde79687d7c9e694bbcd43976fcab5e35fbdab283c0e805390d268bdf3097aac9598392bc10752f833d0b2c2de295a3136384d67be852c9fd766ea0f82774f5d1cb7f1e34c17f9e8f3a0dba641be054316a7e77eca29ca20128c1d1d34b405df86187e372d73e47237e0ed0d6afec5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000080)) 415.326429ms ago: executing program 0 (id=11154): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x3, 0x2, 0x1, 0x6, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x65ca, 0x6, @perf_config_ext={0x0, 0x8}, 0x4280, 0x0, 0x6904, 0x5, 0xa, 0x7, 0x2, 0x0, 0x575, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x9, r0, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0x1ff, 0x3}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81202a8800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r5], 0x14) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3010000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 323.766001ms ago: executing program 3 (id=11155): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x3, 0x2, 0x1, 0x6, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x65ca, 0x6, @perf_config_ext={0x0, 0x8}, 0x4280, 0x0, 0x6904, 0x5, 0xa, 0x7, 0x2, 0x0, 0x575, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x9, r0, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0x1ff, 0x3}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81202a8800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r5], 0x14) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3010000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 292.451032ms ago: executing program 1 (id=11156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0xe) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000008500000007000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000000)=0x20000, &(0x7f00000001c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f00000005c0)=0x20000, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f00000005c0)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000010000000000000000000000000000000000000000000000009a6023de68573d9e546128daa46aca15544dfea366843ca982e7463d64d92285abecc0d11c6d844f0f2728d47343d28070e8221eb75f09e6b8f36d81892f3d1fc8f0e22a8ef9f848c835"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x4000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) socketpair(0x22, 0x2, 0x25, &(0x7f00000000c0)) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010102}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d700000010"], 0x10b8}, 0x4000ff04) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 225.343114ms ago: executing program 0 (id=11157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000880)}, 0x20) recvmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r1 = socket$kcm(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x23, &(0x7f0000000000), 0x8) 0s ago: executing program 3 (id=11158): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r1'], 0x31) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x80a0, 0x0, 0x4, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c0000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79e3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) kernel console output (not intermixed with test programs): own_read+0x1aa/0x2e0 [ 1048.637822][T29373] genl_rcv+0x24/0x40 [ 1048.641848][T29373] netlink_unicast+0x78f/0x940 [ 1048.646687][T29373] netlink_sendmsg+0x8ba/0xbe0 [ 1048.651517][T29373] ? netlink_getsockopt+0x570/0x570 [ 1048.656764][T29373] ? aa_sock_msg_perm+0x94/0x150 [ 1048.661774][T29373] ? apparmor_socket_sendmsg+0x88/0x230 [ 1048.667364][T29373] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1048.672695][T29373] ? security_socket_sendmsg+0x7c/0xa0 [ 1048.678222][T29373] ? netlink_getsockopt+0x570/0x570 [ 1048.683478][T29373] ____sys_sendmsg+0x5be/0x8f0 [ 1048.688312][T29373] ? __sys_sendmsg_sock+0x30/0x30 [ 1048.693401][T29373] ? import_iovec+0x6f/0xa0 [ 1048.697970][T29373] ___sys_sendmsg+0x236/0x2e0 [ 1048.702734][T29373] ? __sys_sendmsg+0x290/0x290 [ 1048.707594][T29373] __se_sys_sendmsg+0x1b7/0x2a0 [ 1048.712495][T29373] ? __x64_sys_sendmsg+0x80/0x80 [ 1048.717485][T29373] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1048.723541][T29373] ? lockdep_hardirqs_on+0x94/0x140 [ 1048.728800][T29373] do_syscall_64+0x4c/0xa0 [ 1048.733265][T29373] ? clear_bhb_loop+0x30/0x80 [ 1048.737991][T29373] ? clear_bhb_loop+0x30/0x80 [ 1048.742722][T29373] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1048.748660][T29373] RIP: 0033:0x7f4a14398019 [ 1048.753150][T29373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.772804][T29373] RSP: 002b:00007f4a125cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1048.781277][T29373] RAX: ffffffffffffffda RBX: 00007f4a14620090 RCX: 00007f4a14398019 [ 1048.789296][T29373] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1048.797323][T29373] RBP: 00007f4a1442f00c R08: 0000000000000000 R09: 0000000000000000 [ 1048.805344][T29373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.813402][T29373] R13: 00007f4a14620128 R14: 00007f4a14620090 R15: 00007ffec87090e8 [ 1048.821471][T29373] [ 1049.198898][T29389] netlink: 'syz.0.9106': attribute type 2 has an invalid length. [ 1049.269051][T29389] netlink: 'syz.0.9106': attribute type 8 has an invalid length. [ 1049.333798][T29389] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9106'. [ 1049.375604][T29394] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9109'. [ 1049.530245][T29401] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9110'. [ 1049.714025][T29406] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9112'. [ 1049.802087][T29406] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1049.869265][T29416] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9114'. [ 1049.945951][T29410] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.9113'. [ 1050.069801][T29422] netlink: 105940 bytes leftover after parsing attributes in process `syz.3.9116'. [ 1050.325149][T29424] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.9118'. [ 1050.470014][T29437] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9122'. [ 1050.883620][T29444] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1050.951402][T29448] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1050.992546][T29438] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1051.030900][T29438] CPU: 0 PID: 29438 Comm: syz.4.9121 Not tainted syzkaller #0 [ 1051.038440][T29438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1051.048537][T29438] Call Trace: [ 1051.052309][T29438] [ 1051.055276][T29438] dump_stack_lvl+0x188/0x250 [ 1051.060046][T29438] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1051.066264][T29438] ? show_regs_print_info+0x20/0x20 [ 1051.071512][T29438] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1051.077722][T29438] sysfs_warn_dup+0x8a/0xa0 [ 1051.082274][T29438] sysfs_do_create_link_sd+0xc0/0x110 [ 1051.087690][T29438] device_add+0x83b/0x1050 [ 1051.092154][T29438] wiphy_register+0x1e74/0x2c40 [ 1051.097075][T29438] ? cfg80211_event_work+0x40/0x40 [ 1051.102246][T29438] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1051.108368][T29438] ieee80211_register_hw+0x2a03/0x3a60 [ 1051.113880][T29438] ? ieee80211_register_hw+0xae1/0x3a60 [ 1051.119491][T29438] ? ieee80211_tasklet_handler+0x20/0x20 [ 1051.125177][T29438] ? rcu_is_watching+0x11/0xa0 [ 1051.129997][T29438] ? hrtimer_init+0x10c/0x220 [ 1051.134729][T29438] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1051.140525][T29438] hwsim_new_radio_nl+0xa7d/0xc50 [ 1051.145614][T29438] genl_rcv_msg+0xd0b/0xfa0 [ 1051.150170][T29438] ? genl_bind+0x370/0x370 [ 1051.154656][T29438] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1051.160684][T29438] ? lock_chain_count+0x20/0x20 [ 1051.165588][T29438] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1051.171782][T29438] ? lockdep_hardirqs_on+0x94/0x140 [ 1051.177030][T29438] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1051.183245][T29438] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1051.189627][T29438] ? lock_acquire+0x208/0x400 [ 1051.194387][T29438] netlink_rcv_skb+0x1e9/0x430 [ 1051.199219][T29438] ? genl_bind+0x370/0x370 [ 1051.203676][T29438] ? netlink_ack+0xb10/0xb10 [ 1051.208330][T29438] ? down_read+0x1aa/0x2e0 [ 1051.212795][T29438] genl_rcv+0x24/0x40 [ 1051.216819][T29438] netlink_unicast+0x78f/0x940 [ 1051.221637][T29438] netlink_sendmsg+0x8ba/0xbe0 [ 1051.226449][T29438] ? netlink_getsockopt+0x570/0x570 [ 1051.231691][T29438] ? aa_sock_msg_perm+0x94/0x150 [ 1051.236675][T29438] ? apparmor_socket_sendmsg+0x88/0x230 [ 1051.242288][T29438] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1051.247614][T29438] ? security_socket_sendmsg+0x7c/0xa0 [ 1051.253129][T29438] ? netlink_getsockopt+0x570/0x570 [ 1051.258407][T29438] ____sys_sendmsg+0x5be/0x8f0 [ 1051.263231][T29438] ? __sys_sendmsg_sock+0x30/0x30 [ 1051.268305][T29438] ? import_iovec+0x6f/0xa0 [ 1051.272852][T29438] ___sys_sendmsg+0x236/0x2e0 [ 1051.277584][T29438] ? __sys_sendmsg+0x290/0x290 [ 1051.282439][T29438] __se_sys_sendmsg+0x1b7/0x2a0 [ 1051.287334][T29438] ? __x64_sys_sendmsg+0x80/0x80 [ 1051.292330][T29438] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1051.298282][T29438] do_syscall_64+0x4c/0xa0 [ 1051.302740][T29438] ? clear_bhb_loop+0x30/0x80 [ 1051.307462][T29438] ? clear_bhb_loop+0x30/0x80 [ 1051.312197][T29438] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1051.318151][T29438] RIP: 0033:0x7f36a5e58019 [ 1051.322613][T29438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.342364][T29438] RSP: 002b:00007f36a40b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1051.350832][T29438] RAX: ffffffffffffffda RBX: 00007f36a60dffa0 RCX: 00007f36a5e58019 [ 1051.358852][T29438] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1051.366871][T29438] RBP: 00007f36a5eef00c R08: 0000000000000000 R09: 0000000000000000 [ 1051.374884][T29438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1051.382909][T29438] R13: 00007f36a60e0038 R14: 00007f36a60dffa0 R15: 00007ffc6bf1d6c8 [ 1051.390948][T29438] [ 1052.303508][T29484] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1052.357191][T29488] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1053.130147][T29512] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1053.153151][T29512] CPU: 1 PID: 29512 Comm: syz.3.9150 Not tainted syzkaller #0 [ 1053.160692][T29512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1053.170795][T29512] Call Trace: [ 1053.174113][T29512] [ 1053.177091][T29512] dump_stack_lvl+0x188/0x250 [ 1053.181836][T29512] ? show_regs_print_info+0x20/0x20 [ 1053.187082][T29512] ? load_image+0x410/0x410 [ 1053.191655][T29512] sysfs_warn_dup+0x8a/0xa0 [ 1053.196208][T29512] sysfs_do_create_link_sd+0xc0/0x110 [ 1053.201635][T29512] device_add+0x83b/0x1050 [ 1053.206105][T29512] wiphy_register+0x1e74/0x2c40 [ 1053.211028][T29512] ? cfg80211_event_work+0x40/0x40 [ 1053.216192][T29512] ? minstrel_ht_alloc+0x807/0x980 [ 1053.221363][T29512] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1053.227494][T29512] ieee80211_register_hw+0x2a03/0x3a60 [ 1053.233069][T29512] ? ieee80211_register_hw+0xae1/0x3a60 [ 1053.238684][T29512] ? ieee80211_tasklet_handler+0x20/0x20 [ 1053.244376][T29512] ? rcu_is_watching+0x11/0xa0 [ 1053.249195][T29512] ? hrtimer_init+0x10c/0x220 [ 1053.253925][T29512] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1053.259717][T29512] hwsim_new_radio_nl+0xa7d/0xc50 [ 1053.264814][T29512] genl_rcv_msg+0xd0b/0xfa0 [ 1053.269391][T29512] ? genl_bind+0x370/0x370 [ 1053.273864][T29512] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1053.279904][T29512] ? lock_chain_count+0x20/0x20 [ 1053.284821][T29512] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1053.291028][T29512] ? lockdep_hardirqs_on+0x94/0x140 [ 1053.296278][T29512] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1053.302485][T29512] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1053.308877][T29512] ? lock_acquire+0x208/0x400 [ 1053.313618][T29512] netlink_rcv_skb+0x1e9/0x430 [ 1053.318445][T29512] ? genl_bind+0x370/0x370 [ 1053.322904][T29512] ? netlink_ack+0xb10/0xb10 [ 1053.327555][T29512] ? down_read+0x1aa/0x2e0 [ 1053.332026][T29512] genl_rcv+0x24/0x40 [ 1053.336052][T29512] netlink_unicast+0x78f/0x940 [ 1053.340881][T29512] netlink_sendmsg+0x8ba/0xbe0 [ 1053.345700][T29512] ? aa_sock_msg_perm+0x94/0x150 [ 1053.350686][T29512] ? netlink_getsockopt+0x570/0x570 [ 1053.355933][T29512] ? aa_sk_perm+0x1/0x910 [ 1053.360398][T29512] ? apparmor_socket_sendmsg+0x88/0x230 [ 1053.365990][T29512] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1053.371332][T29512] ? security_socket_sendmsg+0x7c/0xa0 [ 1053.376845][T29512] ? netlink_getsockopt+0x570/0x570 [ 1053.382113][T29512] ____sys_sendmsg+0x5be/0x8f0 [ 1053.386943][T29512] ? __sys_sendmsg_sock+0x30/0x30 [ 1053.392029][T29512] ? import_iovec+0x6f/0xa0 [ 1053.396585][T29512] ___sys_sendmsg+0x236/0x2e0 [ 1053.401329][T29512] ? __sys_sendmsg+0x290/0x290 [ 1053.406169][T29512] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1053.412531][T29512] __se_sys_sendmsg+0x1b7/0x2a0 [ 1053.417441][T29512] ? __x64_sys_sendmsg+0x80/0x80 [ 1053.422457][T29512] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1053.428397][T29512] do_syscall_64+0x4c/0xa0 [ 1053.432854][T29512] ? clear_bhb_loop+0x30/0x80 [ 1053.437570][T29512] ? clear_bhb_loop+0x30/0x80 [ 1053.442308][T29512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1053.448243][T29512] RIP: 0033:0x7f5f6be2e019 [ 1053.452734][T29512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.472649][T29512] RSP: 002b:00007f5f6a086028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1053.481145][T29512] RAX: ffffffffffffffda RBX: 00007f5f6c0b5fa0 RCX: 00007f5f6be2e019 [ 1053.489168][T29512] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1053.497187][T29512] RBP: 00007f5f6bec500c R08: 0000000000000000 R09: 0000000000000000 [ 1053.505215][T29512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.513243][T29512] R13: 00007f5f6c0b6038 R14: 00007f5f6c0b5fa0 R15: 00007ffc4549db08 [ 1053.521290][T29512] [ 1053.596313][T29522] __nla_validate_parse: 19 callbacks suppressed [ 1053.596350][T29522] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9154'. [ 1053.620706][T29524] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9153'. [ 1053.837743][T29528] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9156'. [ 1053.971357][T29530] device syzkaller0 entered promiscuous mode [ 1054.016454][T29534] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9159'. [ 1054.047466][T29534] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1054.082788][T29532] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9158'. [ 1054.113262][T29532] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1054.216700][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.223069][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.243661][T29545] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9161'. [ 1054.511883][T29547] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.9162'. [ 1054.733729][T29563] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9167'. [ 1054.779153][T29565] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9168'. [ 1055.073471][T29576] netlink: 105940 bytes leftover after parsing attributes in process `syz.1.9170'. [ 1055.214747][T29580] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1055.321940][T29587] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1056.762448][T29622] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1056.809137][T29619] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1056.866652][T29625] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1057.740826][T29659] device syzkaller0 entered promiscuous mode [ 1058.512667][T29693] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1058.619897][T29706] __nla_validate_parse: 15 callbacks suppressed [ 1058.619936][T29706] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9213'. [ 1058.701571][T29705] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9212'. [ 1058.766723][T29709] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9214'. [ 1059.620359][T29721] device syzkaller0 entered promiscuous mode [ 1059.725928][T29736] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9222'. [ 1060.011220][T29744] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9225'. [ 1060.021476][T29744] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1060.359397][T29760] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9228'. [ 1060.422081][T29755] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9229'. [ 1060.571213][T29766] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9241'. [ 1060.609554][T29766] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1060.637208][T29764] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9231'. [ 1060.691764][T29769] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9234'. [ 1060.715111][T29764] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1060.723199][T29764] CPU: 0 PID: 29764 Comm: syz.0.9231 Not tainted syzkaller #0 [ 1060.730790][T29764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1060.740894][T29764] Call Trace: [ 1060.744216][T29764] [ 1060.747185][T29764] dump_stack_lvl+0x188/0x250 [ 1060.751916][T29764] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1060.758125][T29764] ? show_regs_print_info+0x20/0x20 [ 1060.763372][T29764] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1060.769765][T29764] sysfs_warn_dup+0x8a/0xa0 [ 1060.774318][T29764] sysfs_do_create_link_sd+0xc0/0x110 [ 1060.779737][T29764] device_add+0x83b/0x1050 [ 1060.784210][T29764] wiphy_register+0x1e74/0x2c40 [ 1060.789213][T29764] ? cfg80211_event_work+0x40/0x40 [ 1060.794379][T29764] ? minstrel_ht_alloc+0x807/0x980 [ 1060.799540][T29764] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1060.805660][T29764] ieee80211_register_hw+0x2a03/0x3a60 [ 1060.811178][T29764] ? ieee80211_register_hw+0xae1/0x3a60 [ 1060.816777][T29764] ? ieee80211_tasklet_handler+0x20/0x20 [ 1060.822463][T29764] ? rcu_is_watching+0x11/0xa0 [ 1060.827282][T29764] ? hrtimer_init+0x10c/0x220 [ 1060.832038][T29764] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1060.837831][T29764] hwsim_new_radio_nl+0xa7d/0xc50 [ 1060.842920][T29764] genl_rcv_msg+0xd0b/0xfa0 [ 1060.847481][T29764] ? genl_bind+0x370/0x370 [ 1060.851937][T29764] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1060.857890][T29764] ? swake_up_one+0x6d/0x130 [ 1060.862558][T29764] ? verify_lock_unused+0x140/0x140 [ 1060.867856][T29764] ? rcu_preempt_deferred_qs_irqrestore+0x993/0xbd0 [ 1060.874521][T29764] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1060.881038][T29764] netlink_rcv_skb+0x1e9/0x430 [ 1060.885942][T29764] ? genl_bind+0x370/0x370 [ 1060.890418][T29764] ? netlink_ack+0xb10/0xb10 [ 1060.895069][T29764] ? down_read+0x1aa/0x2e0 [ 1060.899538][T29764] genl_rcv+0x24/0x40 [ 1060.903559][T29764] netlink_unicast+0x78f/0x940 [ 1060.908385][T29764] netlink_sendmsg+0x8ba/0xbe0 [ 1060.913249][T29764] ? netlink_getsockopt+0x570/0x570 [ 1060.918496][T29764] ? aa_sock_msg_perm+0x94/0x150 [ 1060.923520][T29764] ? apparmor_socket_sendmsg+0x88/0x230 [ 1060.929108][T29764] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1060.934523][T29764] ? security_socket_sendmsg+0x7c/0xa0 [ 1060.940030][T29764] ? netlink_getsockopt+0x570/0x570 [ 1060.945277][T29764] ____sys_sendmsg+0x5be/0x8f0 [ 1060.950108][T29764] ? __sys_sendmsg_sock+0x30/0x30 [ 1060.955194][T29764] ? import_iovec+0x6f/0xa0 [ 1060.959736][T29764] ___sys_sendmsg+0x236/0x2e0 [ 1060.964499][T29764] ? __sys_sendmsg+0x290/0x290 [ 1060.969560][T29764] __se_sys_sendmsg+0x1b7/0x2a0 [ 1060.974563][T29764] ? __x64_sys_sendmsg+0x80/0x80 [ 1060.979555][T29764] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1060.985601][T29764] ? lockdep_hardirqs_on+0x94/0x140 [ 1060.990843][T29764] do_syscall_64+0x4c/0xa0 [ 1060.995330][T29764] ? clear_bhb_loop+0x30/0x80 [ 1061.000126][T29764] ? clear_bhb_loop+0x30/0x80 [ 1061.004843][T29764] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1061.010771][T29764] RIP: 0033:0x7f72e9088019 [ 1061.015223][T29764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.035055][T29764] RSP: 002b:00007f72e72e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1061.043636][T29764] RAX: ffffffffffffffda RBX: 00007f72e930ffa0 RCX: 00007f72e9088019 [ 1061.051748][T29764] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1061.059762][T29764] RBP: 00007f72e911f00c R08: 0000000000000000 R09: 0000000000000000 [ 1061.067779][T29764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1061.075808][T29764] R13: 00007f72e9310038 R14: 00007f72e930ffa0 R15: 00007fff1c469a68 [ 1061.083832][T29764] [ 1061.789034][T29784] netlink: 'syz.1.9236': attribute type 5 has an invalid length. [ 1062.252408][T29799] device syzkaller0 entered promiscuous mode [ 1062.291162][T29803] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1062.726467][T29818] device wlan1 left promiscuous mode [ 1062.876879][T29827] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1063.191100][T29834] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1063.207783][T29834] CPU: 0 PID: 29834 Comm: syz.1.9251 Not tainted syzkaller #0 [ 1063.215318][T29834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1063.225428][T29834] Call Trace: [ 1063.228769][T29834] [ 1063.231737][T29834] dump_stack_lvl+0x188/0x250 [ 1063.236462][T29834] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1063.242667][T29834] ? show_regs_print_info+0x20/0x20 [ 1063.247913][T29834] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1063.254139][T29834] sysfs_warn_dup+0x8a/0xa0 [ 1063.258689][T29834] sysfs_do_create_link_sd+0xc0/0x110 [ 1063.264111][T29834] device_add+0x83b/0x1050 [ 1063.268614][T29834] wiphy_register+0x1e74/0x2c40 [ 1063.273529][T29834] ? cfg80211_event_work+0x40/0x40 [ 1063.278841][T29834] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1063.285063][T29834] ieee80211_register_hw+0x2a03/0x3a60 [ 1063.290593][T29834] ? ieee80211_register_hw+0xae1/0x3a60 [ 1063.296211][T29834] ? ieee80211_tasklet_handler+0x20/0x20 [ 1063.301903][T29834] ? rcu_is_watching+0x11/0xa0 [ 1063.306725][T29834] ? hrtimer_init+0x10c/0x220 [ 1063.311468][T29834] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1063.317257][T29834] hwsim_new_radio_nl+0xa7d/0xc50 [ 1063.322353][T29834] genl_rcv_msg+0xd0b/0xfa0 [ 1063.326919][T29834] ? genl_bind+0x370/0x370 [ 1063.331383][T29834] ? verify_lock_unused+0x140/0x140 [ 1063.336633][T29834] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 1063.343274][T29834] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1063.349074][T29834] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1063.355471][T29834] netlink_rcv_skb+0x1e9/0x430 [ 1063.360281][T29834] ? genl_bind+0x370/0x370 [ 1063.364750][T29834] ? netlink_ack+0xb10/0xb10 [ 1063.369401][T29834] ? lockdep_hardirqs_on+0x94/0x140 [ 1063.374656][T29834] ? down_read+0x1aa/0x2e0 [ 1063.379126][T29834] genl_rcv+0x24/0x40 [ 1063.383145][T29834] netlink_unicast+0x78f/0x940 [ 1063.387976][T29834] netlink_sendmsg+0x8ba/0xbe0 [ 1063.392803][T29834] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1063.399017][T29834] ? netlink_getsockopt+0x570/0x570 [ 1063.404282][T29834] ? apparmor_socket_sendmsg+0x88/0x230 [ 1063.409877][T29834] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1063.415214][T29834] ? security_socket_sendmsg+0x7c/0xa0 [ 1063.420715][T29834] ? netlink_getsockopt+0x570/0x570 [ 1063.425968][T29834] ____sys_sendmsg+0x5be/0x8f0 [ 1063.430801][T29834] ? __sys_sendmsg_sock+0x30/0x30 [ 1063.435923][T29834] ? import_iovec+0x6f/0xa0 [ 1063.440472][T29834] ___sys_sendmsg+0x236/0x2e0 [ 1063.445197][T29834] ? __sys_sendmsg+0x290/0x290 [ 1063.450063][T29834] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1063.455983][T29834] __se_sys_sendmsg+0x1b7/0x2a0 [ 1063.460975][T29834] ? __x64_sys_sendmsg+0x80/0x80 [ 1063.465980][T29834] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1063.472222][T29834] do_syscall_64+0x4c/0xa0 [ 1063.476681][T29834] ? clear_bhb_loop+0x30/0x80 [ 1063.481447][T29834] ? clear_bhb_loop+0x30/0x80 [ 1063.486180][T29834] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1063.492121][T29834] RIP: 0033:0x7ff46362c019 [ 1063.496604][T29834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.516250][T29834] RSP: 002b:00007ff461884028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1063.524713][T29834] RAX: ffffffffffffffda RBX: 00007ff4638b3fa0 RCX: 00007ff46362c019 [ 1063.532725][T29834] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1063.540739][T29834] RBP: 00007ff4636c300c R08: 0000000000000000 R09: 0000000000000000 [ 1063.548750][T29834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1063.556766][T29834] R13: 00007ff4638b4038 R14: 00007ff4638b3fa0 R15: 00007fff10bcf6b8 [ 1063.564809][T29834] [ 1064.082982][T29861] __nla_validate_parse: 11 callbacks suppressed [ 1064.083010][T29861] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9260'. [ 1064.110556][T29872] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9261'. [ 1064.134720][T29872] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1064.196543][T29873] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9263'. [ 1064.266865][T29880] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9265'. [ 1064.335538][T29881] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9264'. [ 1064.416155][T29881] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1064.433771][T29888] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9266'. [ 1064.494469][T29886] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9278'. [ 1064.542652][T29886] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1064.881895][T29905] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9272'. [ 1064.962730][T29912] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9276'. [ 1065.137534][T29918] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9280'. [ 1066.143983][T29949] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1067.245970][T29990] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1067.315065][T29984] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1067.679416][T30000] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1067.982437][T30011] netlink: 'syz.2.9309': attribute type 5 has an invalid length. [ 1068.265040][T30032] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1068.787811][T30044] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1069.571337][T30056] netlink: 'syz.4.9327': attribute type 5 has an invalid length. [ 1069.643276][T30070] __nla_validate_parse: 19 callbacks suppressed [ 1069.643318][T30070] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9330'. [ 1069.675095][T30070] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1069.805874][T30078] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.9332'. [ 1069.877316][T30079] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1069.930594][T30083] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9335'. [ 1069.973354][T30079] netlink: 'syz.1.9333': attribute type 21 has an invalid length. [ 1069.988614][T30079] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9333'. [ 1070.068770][T30085] netlink: 'syz.0.9336': attribute type 25 has an invalid length. [ 1070.079064][T30085] netlink: 'syz.0.9336': attribute type 25 has an invalid length. [ 1070.112709][T30087] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9338'. [ 1070.166416][T30096] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9337'. [ 1070.183330][T30096] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1070.969771][T30112] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9344'. [ 1071.385340][T30120] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9346'. [ 1071.431720][T30120] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1071.597250][T30127] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.9350'. [ 1071.652522][T30129] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9349'. [ 1071.891342][T30133] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1072.421677][T30147] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1072.474915][T30147] CPU: 0 PID: 30147 Comm: syz.2.9355 Not tainted syzkaller #0 [ 1072.482456][T30147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1072.492552][T30147] Call Trace: [ 1072.495869][T30147] [ 1072.498835][T30147] dump_stack_lvl+0x188/0x250 [ 1072.503564][T30147] ? show_regs_print_info+0x20/0x20 [ 1072.508812][T30147] ? load_image+0x410/0x410 [ 1072.513375][T30147] sysfs_warn_dup+0x8a/0xa0 [ 1072.517915][T30147] sysfs_do_create_link_sd+0xc0/0x110 [ 1072.523331][T30147] device_add+0x83b/0x1050 [ 1072.527794][T30147] wiphy_register+0x1e74/0x2c40 [ 1072.532708][T30147] ? cfg80211_event_work+0x40/0x40 [ 1072.537905][T30147] ? minstrel_ht_alloc+0x807/0x980 [ 1072.543077][T30147] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1072.549222][T30147] ieee80211_register_hw+0x2a03/0x3a60 [ 1072.554740][T30147] ? ieee80211_register_hw+0xae1/0x3a60 [ 1072.560345][T30147] ? ieee80211_tasklet_handler+0x20/0x20 [ 1072.566035][T30147] ? rcu_is_watching+0x11/0xa0 [ 1072.570867][T30147] ? hrtimer_init+0x10c/0x220 [ 1072.575589][T30147] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1072.581370][T30147] hwsim_new_radio_nl+0xa7d/0xc50 [ 1072.586452][T30147] genl_rcv_msg+0xd0b/0xfa0 [ 1072.591005][T30147] ? genl_bind+0x370/0x370 [ 1072.595461][T30147] ? mark_lock+0x94/0x320 [ 1072.599826][T30147] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1072.605851][T30147] ? lock_chain_count+0x20/0x20 [ 1072.610771][T30147] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1072.616970][T30147] ? lockdep_hardirqs_on+0x94/0x140 [ 1072.622211][T30147] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1072.628589][T30147] ? netlink_rcv_skb+0x81/0x430 [ 1072.633484][T30147] netlink_rcv_skb+0x1e9/0x430 [ 1072.638288][T30147] ? genl_bind+0x370/0x370 [ 1072.642736][T30147] ? netlink_ack+0xb10/0xb10 [ 1072.647371][T30147] ? down_read+0x1aa/0x2e0 [ 1072.651836][T30147] genl_rcv+0x24/0x40 [ 1072.655851][T30147] netlink_unicast+0x78f/0x940 [ 1072.660666][T30147] netlink_sendmsg+0x8ba/0xbe0 [ 1072.665486][T30147] ? netlink_getsockopt+0x570/0x570 [ 1072.670730][T30147] ? netlink_getsockopt+0x570/0x570 [ 1072.675965][T30147] ____sys_sendmsg+0x5be/0x8f0 [ 1072.680773][T30147] ? __sys_sendmsg_sock+0x30/0x30 [ 1072.685836][T30147] ? import_iovec+0x6f/0xa0 [ 1072.690491][T30147] ___sys_sendmsg+0x236/0x2e0 [ 1072.695244][T30147] ? __sys_sendmsg+0x290/0x290 [ 1072.700087][T30147] __se_sys_sendmsg+0x1b7/0x2a0 [ 1072.704974][T30147] ? __x64_sys_sendmsg+0x80/0x80 [ 1072.709957][T30147] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1072.715892][T30147] do_syscall_64+0x4c/0xa0 [ 1072.720346][T30147] ? clear_bhb_loop+0x30/0x80 [ 1072.725057][T30147] ? clear_bhb_loop+0x30/0x80 [ 1072.729769][T30147] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1072.735699][T30147] RIP: 0033:0x7f4a14398019 [ 1072.740157][T30147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.759891][T30147] RSP: 002b:00007f4a125f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1072.768354][T30147] RAX: ffffffffffffffda RBX: 00007f4a1461ffa0 RCX: 00007f4a14398019 [ 1072.776391][T30147] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1072.784397][T30147] RBP: 00007f4a1442f00c R08: 0000000000000000 R09: 0000000000000000 [ 1072.792409][T30147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1072.800413][T30147] R13: 00007f4a14620038 R14: 00007f4a1461ffa0 R15: 00007ffec87090e8 [ 1072.808441][T30147] [ 1073.087943][T30161] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1074.518244][T30187] netlink: 'syz.3.9368': attribute type 5 has an invalid length. [ 1074.909871][T30206] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1074.999864][T30205] netlink: 'syz.2.9373': attribute type 21 has an invalid length. [ 1075.042696][T30205] __nla_validate_parse: 9 callbacks suppressed [ 1075.042717][T30205] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9373'. [ 1075.081031][T30210] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9374'. [ 1075.135980][T30210] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1075.517676][T30219] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9378'. [ 1075.940033][T30235] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9383'. [ 1076.367720][T30241] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9385'. [ 1076.397097][T30241] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1076.574913][T30248] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9387'. [ 1076.740905][T30261] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.9388'. [ 1076.854285][T30263] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9392'. [ 1076.875448][T30263] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1077.065867][T30272] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9393'. [ 1077.113620][T30272] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1077.235059][T30274] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9395'. [ 1078.757960][T30302] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1079.153938][T30316] netlink: 'syz.2.9408': attribute type 21 has an invalid length. [ 1079.198147][T30316] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1079.289404][T30316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1079.330787][T30321] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1079.412334][T30321] netlink: 'syz.4.9410': attribute type 21 has an invalid length. [ 1079.620966][T30332] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1080.312507][T30347] __nla_validate_parse: 11 callbacks suppressed [ 1080.312530][T30347] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9418'. [ 1080.334772][T30347] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1080.436787][T30349] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9420'. [ 1080.566569][T30360] netlink: 'syz.4.9424': attribute type 21 has an invalid length. [ 1080.618757][T30360] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9424'. [ 1080.641912][T30360] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1080.677339][T30360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1080.705284][T30366] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9423'. [ 1081.158175][T30373] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9429'. [ 1081.290826][T30374] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.9428'. [ 1081.322184][T30380] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1081.380299][T30382] netlink: 'syz.0.9427': attribute type 21 has an invalid length. [ 1081.394546][T30382] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9427'. [ 1081.540665][T30396] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9432'. [ 1081.568518][T30396] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1081.593799][T30395] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9434'. [ 1081.614326][T30399] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9431'. [ 1081.789514][T30402] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1081.801694][T30402] CPU: 0 PID: 30402 Comm: syz.2.9436 Not tainted syzkaller #0 [ 1081.809309][T30402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1081.819406][T30402] Call Trace: [ 1081.822720][T30402] [ 1081.825728][T30402] dump_stack_lvl+0x188/0x250 [ 1081.830462][T30402] ? lockdep_hardirqs_on+0x94/0x140 [ 1081.835745][T30402] ? show_regs_print_info+0x20/0x20 [ 1081.841004][T30402] ? audit_tree_destroy_watch+0x20/0x20 [ 1081.846607][T30402] sysfs_warn_dup+0x8a/0xa0 [ 1081.851162][T30402] sysfs_do_create_link_sd+0xc0/0x110 [ 1081.856582][T30402] device_add+0x83b/0x1050 [ 1081.861051][T30402] wiphy_register+0x1e74/0x2c40 [ 1081.865977][T30402] ? cfg80211_event_work+0x40/0x40 [ 1081.871133][T30402] ? minstrel_ht_alloc+0x807/0x980 [ 1081.876296][T30402] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1081.882428][T30402] ieee80211_register_hw+0x2a03/0x3a60 [ 1081.887951][T30402] ? ieee80211_register_hw+0xae1/0x3a60 [ 1081.893552][T30402] ? ieee80211_tasklet_handler+0x20/0x20 [ 1081.899281][T30402] ? rcu_is_watching+0x11/0xa0 [ 1081.904105][T30402] ? hrtimer_init+0x10c/0x220 [ 1081.908878][T30402] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1081.914674][T30402] hwsim_new_radio_nl+0xa7d/0xc50 [ 1081.919765][T30402] genl_rcv_msg+0xd0b/0xfa0 [ 1081.924328][T30402] ? genl_bind+0x370/0x370 [ 1081.928803][T30402] ? mark_lock+0x94/0x320 [ 1081.933182][T30402] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1081.939212][T30402] ? lock_chain_count+0x20/0x20 [ 1081.944140][T30402] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1081.950339][T30402] ? lockdep_hardirqs_on+0x94/0x140 [ 1081.955587][T30402] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1081.961986][T30402] netlink_rcv_skb+0x1e9/0x430 [ 1081.966800][T30402] ? genl_bind+0x370/0x370 [ 1081.971479][T30402] ? netlink_ack+0xb10/0xb10 [ 1081.976146][T30402] ? down_read+0x1aa/0x2e0 [ 1081.980610][T30402] genl_rcv+0x24/0x40 [ 1081.984632][T30402] netlink_unicast+0x78f/0x940 [ 1081.989468][T30402] netlink_sendmsg+0x8ba/0xbe0 [ 1081.994285][T30402] ? lockdep_hardirqs_on+0x94/0x140 [ 1081.999544][T30402] ? netlink_getsockopt+0x570/0x570 [ 1082.004791][T30402] ? aa_sock_msg_perm+0x94/0x150 [ 1082.009784][T30402] ? apparmor_socket_sendmsg+0x88/0x230 [ 1082.015382][T30402] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1082.020711][T30402] ? security_socket_sendmsg+0x7c/0xa0 [ 1082.026242][T30402] ? netlink_getsockopt+0x570/0x570 [ 1082.031499][T30402] ____sys_sendmsg+0x5be/0x8f0 [ 1082.036333][T30402] ? __sys_sendmsg_sock+0x30/0x30 [ 1082.041413][T30402] ? import_iovec+0x6f/0xa0 [ 1082.045993][T30402] ___sys_sendmsg+0x236/0x2e0 [ 1082.050731][T30402] ? __sys_sendmsg+0x290/0x290 [ 1082.055555][T30402] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1082.061349][T30402] __se_sys_sendmsg+0x1b7/0x2a0 [ 1082.066280][T30402] ? __x64_sys_sendmsg+0x80/0x80 [ 1082.071274][T30402] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1082.077219][T30402] do_syscall_64+0x4c/0xa0 [ 1082.081676][T30402] ? clear_bhb_loop+0x30/0x80 [ 1082.086395][T30402] ? clear_bhb_loop+0x30/0x80 [ 1082.091110][T30402] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1082.097044][T30402] RIP: 0033:0x7f4a14398019 [ 1082.101495][T30402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.121139][T30402] RSP: 002b:00007f4a125f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1082.129602][T30402] RAX: ffffffffffffffda RBX: 00007f4a1461ffa0 RCX: 00007f4a14398019 [ 1082.137646][T30402] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1082.145662][T30402] RBP: 00007f4a1442f00c R08: 0000000000000000 R09: 0000000000000000 [ 1082.153674][T30402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.161683][T30402] R13: 00007f4a14620038 R14: 00007f4a1461ffa0 R15: 00007ffec87090e8 [ 1082.169713][T30402] [ 1082.389131][T30410] netlink: 'syz.1.9438': attribute type 21 has an invalid length. [ 1082.438322][T30410] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1082.587564][T30410] net_ratelimit: 2 callbacks suppressed [ 1082.587605][T30410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1083.999081][T30455] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1084.318680][T30468] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1084.437450][T30467] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1084.454979][T30467] CPU: 1 PID: 30467 Comm: syz.3.9454 Not tainted syzkaller #0 [ 1084.462635][T30467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1084.472757][T30467] Call Trace: [ 1084.476103][T30467] [ 1084.479057][T30467] dump_stack_lvl+0x188/0x250 [ 1084.483774][T30467] ? show_regs_print_info+0x20/0x20 [ 1084.489014][T30467] ? load_image+0x410/0x410 [ 1084.493560][T30467] sysfs_warn_dup+0x8a/0xa0 [ 1084.498091][T30467] sysfs_do_create_link_sd+0xc0/0x110 [ 1084.503494][T30467] device_add+0x83b/0x1050 [ 1084.507944][T30467] wiphy_register+0x1e74/0x2c40 [ 1084.512838][T30467] ? cfg80211_event_work+0x40/0x40 [ 1084.517974][T30467] ? minstrel_ht_alloc+0x807/0x980 [ 1084.523116][T30467] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1084.529240][T30467] ieee80211_register_hw+0x2a03/0x3a60 [ 1084.534741][T30467] ? ieee80211_register_hw+0xae1/0x3a60 [ 1084.540324][T30467] ? ieee80211_tasklet_handler+0x20/0x20 [ 1084.545995][T30467] ? rcu_is_watching+0x11/0xa0 [ 1084.550794][T30467] ? hrtimer_init+0x10c/0x220 [ 1084.555525][T30467] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1084.561295][T30467] hwsim_new_radio_nl+0xa7d/0xc50 [ 1084.566359][T30467] genl_rcv_msg+0xd0b/0xfa0 [ 1084.570896][T30467] ? genl_bind+0x370/0x370 [ 1084.575339][T30467] ? rcu_nmi_exit+0x6f/0xf0 [ 1084.579866][T30467] ? verify_lock_unused+0x140/0x140 [ 1084.585101][T30467] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1084.591148][T30467] ? lock_chain_count+0x20/0x20 [ 1084.596052][T30467] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1084.602252][T30467] ? lockdep_hardirqs_on+0x94/0x140 [ 1084.607600][T30467] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1084.613984][T30467] netlink_rcv_skb+0x1e9/0x430 [ 1084.618789][T30467] ? genl_bind+0x370/0x370 [ 1084.623235][T30467] ? netlink_ack+0xb10/0xb10 [ 1084.627861][T30467] ? down_read+0x1aa/0x2e0 [ 1084.632338][T30467] genl_rcv+0x24/0x40 [ 1084.636352][T30467] netlink_unicast+0x78f/0x940 [ 1084.641156][T30467] netlink_sendmsg+0x8ba/0xbe0 [ 1084.645972][T30467] ? netlink_getsockopt+0x570/0x570 [ 1084.651299][T30467] ? aa_sock_msg_perm+0x94/0x150 [ 1084.656266][T30467] ? apparmor_socket_sendmsg+0x88/0x230 [ 1084.661840][T30467] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1084.667303][T30467] ? security_socket_sendmsg+0x7c/0xa0 [ 1084.672789][T30467] ? netlink_getsockopt+0x570/0x570 [ 1084.678035][T30467] ____sys_sendmsg+0x5be/0x8f0 [ 1084.682834][T30467] ? __sys_sendmsg_sock+0x30/0x30 [ 1084.687894][T30467] ? import_iovec+0x6f/0xa0 [ 1084.692428][T30467] ___sys_sendmsg+0x236/0x2e0 [ 1084.697140][T30467] ? __sys_sendmsg+0x290/0x290 [ 1084.701957][T30467] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1084.708273][T30467] __se_sys_sendmsg+0x1b7/0x2a0 [ 1084.713153][T30467] ? __x64_sys_sendmsg+0x80/0x80 [ 1084.718139][T30467] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1084.724247][T30467] do_syscall_64+0x4c/0xa0 [ 1084.728686][T30467] ? clear_bhb_loop+0x30/0x80 [ 1084.733388][T30467] ? clear_bhb_loop+0x30/0x80 [ 1084.738096][T30467] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1084.744024][T30467] RIP: 0033:0x7f5f6be2e019 [ 1084.748468][T30467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.768096][T30467] RSP: 002b:00007f5f6a086028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1084.776545][T30467] RAX: ffffffffffffffda RBX: 00007f5f6c0b5fa0 RCX: 00007f5f6be2e019 [ 1084.784540][T30467] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1084.792548][T30467] RBP: 00007f5f6bec500c R08: 0000000000000000 R09: 0000000000000000 [ 1084.800540][T30467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1084.808574][T30467] R13: 00007f5f6c0b6038 R14: 00007f5f6c0b5fa0 R15: 00007ffc4549db08 [ 1084.816603][T30467] [ 1084.885660][T30477] netlink: 'syz.0.9455': attribute type 21 has an invalid length. [ 1084.916093][T30477] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1084.970427][T30477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1085.300585][T30492] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1085.655989][T30506] __nla_validate_parse: 19 callbacks suppressed [ 1085.656023][T30506] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9467'. [ 1085.855790][T30506] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1085.895187][T30502] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9468'. [ 1085.925148][T30504] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.9469'. [ 1086.162916][T30513] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9472'. [ 1086.235759][T30515] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9471'. [ 1086.476934][T30522] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.9475'. [ 1086.619110][T30522] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1086.668551][T30522] CPU: 0 PID: 30522 Comm: syz.4.9475 Not tainted syzkaller #0 [ 1086.676130][T30522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1086.686230][T30522] Call Trace: [ 1086.689551][T30522] [ 1086.692552][T30522] dump_stack_lvl+0x188/0x250 [ 1086.697280][T30522] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1086.703493][T30522] ? show_regs_print_info+0x20/0x20 [ 1086.708740][T30522] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1086.714961][T30522] ? dump_stack+0x5/0x20 [ 1086.719266][T30522] sysfs_warn_dup+0x8a/0xa0 [ 1086.723834][T30522] sysfs_do_create_link_sd+0xc0/0x110 [ 1086.729257][T30522] device_add+0x83b/0x1050 [ 1086.733710][T30522] wiphy_register+0x1e74/0x2c40 [ 1086.738607][T30522] ? cfg80211_event_work+0x40/0x40 [ 1086.743745][T30522] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1086.749944][T30522] ieee80211_register_hw+0x2a03/0x3a60 [ 1086.755436][T30522] ? ieee80211_register_hw+0xae1/0x3a60 [ 1086.761018][T30522] ? ieee80211_tasklet_handler+0x20/0x20 [ 1086.766700][T30522] ? rcu_is_watching+0x11/0xa0 [ 1086.771499][T30522] ? hrtimer_init+0x10c/0x220 [ 1086.776207][T30522] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1086.781997][T30522] hwsim_new_radio_nl+0xa7d/0xc50 [ 1086.787068][T30522] genl_rcv_msg+0xd0b/0xfa0 [ 1086.791614][T30522] ? genl_bind+0x370/0x370 [ 1086.796067][T30522] ? swake_up_one+0x6d/0x130 [ 1086.800691][T30522] ? verify_lock_unused+0x140/0x140 [ 1086.805916][T30522] ? rcu_preempt_deferred_qs_irqrestore+0x855/0xbd0 [ 1086.812545][T30522] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1086.818940][T30522] netlink_rcv_skb+0x1e9/0x430 [ 1086.823759][T30522] ? genl_bind+0x370/0x370 [ 1086.828204][T30522] ? netlink_ack+0xb10/0xb10 [ 1086.832831][T30522] ? down_read+0x1aa/0x2e0 [ 1086.837282][T30522] genl_rcv+0x24/0x40 [ 1086.841289][T30522] netlink_unicast+0x78f/0x940 [ 1086.846092][T30522] netlink_sendmsg+0x8ba/0xbe0 [ 1086.850900][T30522] ? netlink_getsockopt+0x570/0x570 [ 1086.856128][T30522] ? aa_sock_msg_perm+0x94/0x150 [ 1086.861096][T30522] ? apparmor_socket_sendmsg+0x88/0x230 [ 1086.866664][T30522] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1086.871978][T30522] ? security_socket_sendmsg+0x7c/0xa0 [ 1086.877487][T30522] ? netlink_getsockopt+0x570/0x570 [ 1086.882722][T30522] ____sys_sendmsg+0x5be/0x8f0 [ 1086.887527][T30522] ? __sys_sendmsg_sock+0x30/0x30 [ 1086.892580][T30522] ? import_iovec+0x6f/0xa0 [ 1086.897116][T30522] ___sys_sendmsg+0x236/0x2e0 [ 1086.901824][T30522] ? __sys_sendmsg+0x290/0x290 [ 1086.906626][T30522] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1086.912916][T30522] __se_sys_sendmsg+0x1b7/0x2a0 [ 1086.917794][T30522] ? __x64_sys_sendmsg+0x80/0x80 [ 1086.922792][T30522] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1086.928718][T30522] do_syscall_64+0x4c/0xa0 [ 1086.933158][T30522] ? clear_bhb_loop+0x30/0x80 [ 1086.937858][T30522] ? clear_bhb_loop+0x30/0x80 [ 1086.942557][T30522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1086.948476][T30522] RIP: 0033:0x7f36a5e58019 [ 1086.952919][T30522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.972576][T30522] RSP: 002b:00007f36a40b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1086.981142][T30522] RAX: ffffffffffffffda RBX: 00007f36a60dffa0 RCX: 00007f36a5e58019 [ 1086.989146][T30522] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1086.997149][T30522] RBP: 00007f36a5eef00c R08: 0000000000000000 R09: 0000000000000000 [ 1087.005162][T30522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.013153][T30522] R13: 00007f36a60e0038 R14: 00007f36a60dffa0 R15: 00007ffc6bf1d6c8 [ 1087.021164][T30522] [ 1087.060438][T30532] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9476'. [ 1087.082919][T30532] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1087.140311][T30534] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9479'. [ 1087.166992][T30534] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1087.253652][T30540] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9481'. [ 1087.412647][T30547] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1087.430770][T30542] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.9483'. [ 1087.541231][T30547] netlink: 'syz.3.9484': attribute type 21 has an invalid length. [ 1087.852103][T30558] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1088.070411][T30571] netlink: 'syz.3.9491': attribute type 21 has an invalid length. [ 1088.085315][T30571] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1088.131364][T30571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1088.161503][T30575] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1088.350116][T30582] netlink: 'syz.3.9495': attribute type 27 has an invalid length. [ 1088.376882][T30582] netlink: 'syz.3.9495': attribute type 3 has an invalid length. [ 1088.387839][T30586] netlink: 'syz.3.9495': attribute type 21 has an invalid length. [ 1088.429746][T30586] IPv6: NLM_F_CREATE should be specified when creating new route [ 1089.260785][T30619] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1089.324165][T30615] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1089.618088][T30636] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1090.017362][T30650] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1090.749644][T30676] __nla_validate_parse: 22 callbacks suppressed [ 1090.749664][T30676] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9530'. [ 1090.790884][T30676] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1090.849623][T30678] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9532'. [ 1091.084721][T30690] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1091.112816][T30693] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9536'. [ 1091.127795][T30690] netlink: 'syz.3.9537': attribute type 21 has an invalid length. [ 1091.137439][T30690] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9537'. [ 1091.188451][T30694] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9538'. [ 1091.302554][T30697] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9539'. [ 1091.589300][T30706] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9542'. [ 1091.599177][T30706] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1091.699617][T30709] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9543'. [ 1091.810418][T30719] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9546'. [ 1091.951535][T30723] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9557'. [ 1093.047245][T30758] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1093.062090][T30758] CPU: 0 PID: 30758 Comm: syz.1.9559 Not tainted syzkaller #0 [ 1093.069622][T30758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1093.079724][T30758] Call Trace: [ 1093.083042][T30758] [ 1093.086011][T30758] dump_stack_lvl+0x188/0x250 [ 1093.090746][T30758] ? show_regs_print_info+0x20/0x20 [ 1093.095998][T30758] ? load_image+0x410/0x410 [ 1093.100598][T30758] sysfs_warn_dup+0x8a/0xa0 [ 1093.105154][T30758] sysfs_do_create_link_sd+0xc0/0x110 [ 1093.110563][T30758] device_add+0x83b/0x1050 [ 1093.115018][T30758] wiphy_register+0x1e74/0x2c40 [ 1093.119947][T30758] ? cfg80211_event_work+0x40/0x40 [ 1093.125073][T30758] ? minstrel_ht_alloc+0x807/0x980 [ 1093.130209][T30758] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1093.136298][T30758] ieee80211_register_hw+0x2a03/0x3a60 [ 1093.141807][T30758] ? ieee80211_register_hw+0xae1/0x3a60 [ 1093.147406][T30758] ? ieee80211_tasklet_handler+0x20/0x20 [ 1093.153064][T30758] ? rcu_is_watching+0x11/0xa0 [ 1093.157861][T30758] ? hrtimer_init+0x10c/0x220 [ 1093.162580][T30758] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1093.168357][T30758] hwsim_new_radio_nl+0xa7d/0xc50 [ 1093.173410][T30758] genl_rcv_msg+0xd0b/0xfa0 [ 1093.177946][T30758] ? genl_bind+0x370/0x370 [ 1093.182380][T30758] ? __dev_queue_xmit+0x1b64/0x2e50 [ 1093.187605][T30758] ? verify_lock_unused+0x140/0x140 [ 1093.192824][T30758] ? perf_trace_lock_acquire+0xed/0x3f0 [ 1093.198413][T30758] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1093.205021][T30758] ? perf_trace_lock+0xe4/0x390 [ 1093.209897][T30758] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1093.216267][T30758] netlink_rcv_skb+0x1e9/0x430 [ 1093.221083][T30758] ? genl_bind+0x370/0x370 [ 1093.225541][T30758] ? netlink_ack+0xb10/0xb10 [ 1093.230187][T30758] ? down_read+0x1aa/0x2e0 [ 1093.234633][T30758] genl_rcv+0x24/0x40 [ 1093.238662][T30758] netlink_unicast+0x78f/0x940 [ 1093.243472][T30758] netlink_sendmsg+0x8ba/0xbe0 [ 1093.248282][T30758] ? lockdep_hardirqs_on+0x94/0x140 [ 1093.253498][T30758] ? netlink_getsockopt+0x570/0x570 [ 1093.258742][T30758] ? aa_sock_msg_perm+0x94/0x150 [ 1093.263700][T30758] ? apparmor_socket_sendmsg+0x88/0x230 [ 1093.269275][T30758] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1093.274605][T30758] ? security_socket_sendmsg+0x7c/0xa0 [ 1093.280313][T30758] ? netlink_getsockopt+0x570/0x570 [ 1093.285537][T30758] ____sys_sendmsg+0x5be/0x8f0 [ 1093.290364][T30758] ? __sys_sendmsg_sock+0x30/0x30 [ 1093.295457][T30758] ? import_iovec+0x6f/0xa0 [ 1093.300026][T30758] ___sys_sendmsg+0x236/0x2e0 [ 1093.304740][T30758] ? __sys_sendmsg+0x290/0x290 [ 1093.309592][T30758] __se_sys_sendmsg+0x1b7/0x2a0 [ 1093.314471][T30758] ? __x64_sys_sendmsg+0x80/0x80 [ 1093.319436][T30758] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1093.325459][T30758] ? lockdep_hardirqs_on+0x94/0x140 [ 1093.330685][T30758] do_syscall_64+0x4c/0xa0 [ 1093.335132][T30758] ? clear_bhb_loop+0x30/0x80 [ 1093.339827][T30758] ? clear_bhb_loop+0x30/0x80 [ 1093.344539][T30758] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1093.350468][T30758] RIP: 0033:0x7ff46362c019 [ 1093.354914][T30758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.374564][T30758] RSP: 002b:00007ff461884028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1093.382997][T30758] RAX: ffffffffffffffda RBX: 00007ff4638b3fa0 RCX: 00007ff46362c019 [ 1093.391003][T30758] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1093.398999][T30758] RBP: 00007ff4636c300c R08: 0000000000000000 R09: 0000000000000000 [ 1093.407035][T30758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1093.415048][T30758] R13: 00007ff4638b4038 R14: 00007ff4638b3fa0 R15: 00007fff10bcf6b8 [ 1093.423204][T30758] [ 1093.909711][T30785] net_ratelimit: 1 callbacks suppressed [ 1093.909753][T30785] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1095.492744][T30830] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1095.693654][T30843] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1095.991409][T30849] __nla_validate_parse: 21 callbacks suppressed [ 1095.991479][T30849] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9603'. [ 1097.096320][T30887] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.9605'. [ 1097.108412][T30882] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9604'. [ 1097.137681][T30886] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9606'. [ 1097.162321][T30880] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9602'. [ 1097.188804][T30880] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1098.131028][T30912] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.9611'. [ 1098.437047][T30924] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.9617'. [ 1098.911071][T30932] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9620'. [ 1098.939115][T30937] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9621'. [ 1098.976539][T30940] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1099.037902][T30940] netlink: 'syz.3.9622': attribute type 21 has an invalid length. [ 1099.081370][T30940] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9622'. [ 1099.420521][T30946] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1101.185427][T30998] __nla_validate_parse: 4 callbacks suppressed [ 1101.185474][T30998] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.9640'. [ 1101.302272][T31004] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1101.401234][T31004] netlink: 'syz.3.9641': attribute type 21 has an invalid length. [ 1101.426128][T31004] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9641'. [ 1101.443685][T31010] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9644'. [ 1101.570975][T31012] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.9645'. [ 1101.854091][T31027] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9649'. [ 1102.049451][T31029] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9650'. [ 1102.733078][T31043] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9653'. [ 1102.763338][T31043] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1102.987069][T31056] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9658'. [ 1103.104918][T31055] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.9659'. [ 1103.175824][T31065] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1103.239691][T31065] netlink: 'syz.2.9663': attribute type 21 has an invalid length. [ 1103.348706][T31065] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9663'. [ 1103.526082][T31078] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1103.641952][T31085] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1104.993385][T31125] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1105.318269][T31134] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1105.437516][T31144] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1105.496537][T31144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1106.484671][T31168] netlink: 'syz.2.9701': attribute type 2 has an invalid length. [ 1106.495718][T31168] netlink: 'syz.2.9701': attribute type 8 has an invalid length. [ 1106.503896][T31168] __nla_validate_parse: 11 callbacks suppressed [ 1106.503932][T31168] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9701'. [ 1106.533489][T31169] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9700'. [ 1106.605409][T31169] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1106.659184][T31172] netlink: 'syz.2.9701': attribute type 2 has an invalid length. [ 1106.683940][T31172] netlink: 'syz.2.9701': attribute type 8 has an invalid length. [ 1106.742143][T31172] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9701'. [ 1106.778764][T31178] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9703'. [ 1106.980795][T31187] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9707'. [ 1107.158030][T31185] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9706'. [ 1107.205188][T31185] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1107.713834][T31204] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9714'. [ 1107.862064][T31213] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9714'. [ 1107.899336][T31210] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9716'. [ 1108.029535][T31217] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.9717'. [ 1108.193879][T31215] netlink: 'syz.4.9717': attribute type 10 has an invalid length. [ 1109.523994][T31238] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1109.618064][T31244] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1109.662980][T31241] netlink: 'syz.1.9726': attribute type 10 has an invalid length. [ 1110.626688][T31281] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1110.867638][T31285] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1111.159087][T31290] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1111.192001][T31290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1111.894185][T31322] __nla_validate_parse: 9 callbacks suppressed [ 1111.894206][T31322] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9756'. [ 1111.914089][T31322] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1111.939456][T31317] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9757'. [ 1111.952414][T31317] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1112.852063][T31337] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.9763'. [ 1112.866839][T31336] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9764'. [ 1113.220169][T31350] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.9767'. [ 1113.450575][T31350] netlink: 'syz.3.9767': attribute type 10 has an invalid length. [ 1113.503962][T31357] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9770'. [ 1113.750220][T31364] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9782'. [ 1113.785200][T31364] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1113.825007][T31362] netlink: 'syz.4.9773': attribute type 2 has an invalid length. [ 1113.853603][T31362] netlink: 'syz.4.9773': attribute type 8 has an invalid length. [ 1113.892237][T31362] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9773'. [ 1113.920320][T31368] netlink: 'syz.2.9774': attribute type 10 has an invalid length. [ 1113.931642][T31375] netlink: 'syz.4.9773': attribute type 2 has an invalid length. [ 1113.940522][T31375] netlink: 'syz.4.9773': attribute type 8 has an invalid length. [ 1113.948860][T31375] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9773'. [ 1114.015333][T31380] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.9777'. [ 1114.511723][T31405] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1114.892215][T31422] netlink: 'syz.4.9795': attribute type 10 has an invalid length. [ 1115.637605][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.644041][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.099426][T31466] netlink: 'syz.3.9812': attribute type 2 has an invalid length. [ 1116.214204][T31470] netlink: 'syz.1.9814': attribute type 4 has an invalid length. [ 1116.232883][T31470] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1116.623069][T31485] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1116.932715][T31500] netlink: 'syz.4.9825': attribute type 4 has an invalid length. [ 1117.003795][T31500] __nla_validate_parse: 20 callbacks suppressed [ 1117.003817][T31500] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9825'. [ 1117.119635][T31502] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9827'. [ 1117.145154][T31502] tc_dump_action: action bad kind [ 1117.351695][T31514] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9830'. [ 1117.647521][T31533] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9837'. [ 1117.701558][T31532] device sit0 left promiscuous mode [ 1117.946958][T31541] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9840'. [ 1118.048124][T31538] device sit0 entered promiscuous mode [ 1118.092624][T31542] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9839'. [ 1118.307200][T31541] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9840'. [ 1118.710438][T31562] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9845'. [ 1118.971294][T31575] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9851'. [ 1119.451445][T31594] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.9858'. [ 1120.022707][T31623] netlink: 'syz.4.9866': attribute type 2 has an invalid length. [ 1121.005549][T31655] netlink: 'syz.2.9882': attribute type 4 has an invalid length. [ 1121.103071][T31670] netlink: 'syz.0.9886': attribute type 2 has an invalid length. [ 1122.489897][T31700] __nla_validate_parse: 14 callbacks suppressed [ 1122.489937][T31700] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9898'. [ 1122.613275][T31711] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.9899'. [ 1122.983075][T31723] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9906'. [ 1123.089572][T31725] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1123.151332][T31725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1123.169898][T31721] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.9905'. [ 1123.197619][T31729] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.9908'. [ 1123.371852][T31737] netlink: 'syz.3.9921': attribute type 10 has an invalid length. [ 1123.401685][T31737] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9921'. [ 1123.433469][T31741] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9911'. [ 1123.545410][T31742] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9914'. [ 1123.603635][T31746] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9911'. [ 1124.150267][T31762] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9920'. [ 1125.179845][T31776] netlink: 'syz.3.9925': attribute type 10 has an invalid length. [ 1125.553713][T31776] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1125.817632][T31776] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1126.294057][T31820] netlink: 'syz.2.9940': attribute type 21 has an invalid length. [ 1126.325257][T31820] IPv6: NLM_F_CREATE should be specified when creating new route [ 1126.368813][T31820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1126.376180][T31820] IPv6: NLM_F_CREATE should be set when creating new route [ 1126.383519][T31820] IPv6: NLM_F_CREATE should be set when creating new route [ 1126.390859][T31820] IPv6: NLM_F_CREATE should be set when creating new route [ 1127.255556][T31837] device sit0 left promiscuous mode [ 1127.898529][T31843] device sit0 entered promiscuous mode [ 1128.121491][T31856] __nla_validate_parse: 10 callbacks suppressed [ 1128.121534][T31856] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9954'. [ 1128.398874][T31867] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9959'. [ 1128.625652][T31875] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9960'. [ 1128.741263][T31877] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.9962'. [ 1128.812841][T31882] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.9963'. [ 1129.148564][T31896] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9967'. [ 1129.171626][T31894] netlink: 'syz.1.9968': attribute type 10 has an invalid length. [ 1129.194890][T31894] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9968'. [ 1129.421455][T31908] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9972'. [ 1129.662349][T31917] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9973'. [ 1129.801455][T31912] netlink: 'syz.2.9974': attribute type 29 has an invalid length. [ 1129.844640][T31921] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.9976'. [ 1129.902879][T31922] netlink: 'syz.0.9973': attribute type 10 has an invalid length. [ 1129.923111][T31926] netlink: 'syz.2.9974': attribute type 4 has an invalid length. [ 1130.106102][T31922] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1130.340406][T31922] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1130.374276][T31912] netlink: 'syz.2.9974': attribute type 29 has an invalid length. [ 1130.543940][T31939] netlink: 'syz.4.9983': attribute type 10 has an invalid length. [ 1131.699959][T31971] netlink: 'syz.2.9993': attribute type 10 has an invalid length. [ 1131.987266][T31971] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1132.021525][T31978] netlink: 'syz.0.9995': attribute type 29 has an invalid length. [ 1132.251907][T31971] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1132.616389][T31980] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1132.651059][T31980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1132.669321][T31978] netlink: 'syz.0.9995': attribute type 29 has an invalid length. [ 1133.158466][T32007] __nla_validate_parse: 9 callbacks suppressed [ 1133.158486][T32007] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.10004'. [ 1133.282339][T32005] netlink: 'syz.2.10002': attribute type 10 has an invalid length. [ 1133.293028][T32005] netlink: 55 bytes leftover after parsing attributes in process `syz.2.10002'. [ 1133.863234][T32016] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.10006'. [ 1133.957182][T32029] sock: sock_set_timeout: `syz.4.10011' (pid 32029) tries to set negative timeout [ 1134.190731][T32029] netlink: 'syz.4.10011': attribute type 39 has an invalid length. [ 1134.246404][T32026] netlink: 'syz.1.10009': attribute type 29 has an invalid length. [ 1134.288365][T32026] netlink: 'syz.1.10009': attribute type 29 has an invalid length. [ 1134.505840][T32038] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.10012'. [ 1134.803911][T32055] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.10020'. [ 1135.464166][T32067] netlink: 'syz.0.10022': attribute type 10 has an invalid length. [ 1135.473012][T32067] netlink: 55 bytes leftover after parsing attributes in process `syz.0.10022'. [ 1135.610830][T32064] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.10024'. [ 1135.676342][T32073] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.10026'. [ 1135.921705][T32079] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.10029'. [ 1136.470664][T32092] netlink: 'syz.1.10031': attribute type 10 has an invalid length. [ 1136.565232][T32092] netlink: 55 bytes leftover after parsing attributes in process `syz.1.10031'. [ 1136.885676][T32092] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1136.972681][T32092] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1137.777070][T32132] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1137.885220][T32134] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1138.245881][T32149] __nla_validate_parse: 6 callbacks suppressed [ 1138.245902][T32149] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10052'. [ 1138.451361][T32152] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10051'. [ 1138.579547][T32146] netlink: 'syz.3.10049': attribute type 4 has an invalid length. [ 1138.592085][T32146] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.10049'. [ 1138.797831][T32160] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10055'. [ 1139.114028][T32164] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.10054'. [ 1139.541899][T32170] netlink: 'syz.1.10058': attribute type 10 has an invalid length. [ 1139.881595][T32215] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.10062'. [ 1140.106163][T32204] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10061'. [ 1140.868999][T32252] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10066'. [ 1141.052958][T32256] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.10068'. [ 1141.258219][T32267] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10071'. [ 1141.544979][T32275] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1142.669073][T32302] device vlan0 left promiscuous mode [ 1142.687253][T32302] À: port 1(vlan0) entered disabled state [ 1143.505597][T32334] __nla_validate_parse: 6 callbacks suppressed [ 1143.505665][T32334] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10092'. [ 1143.526164][T32337] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10091'. [ 1143.832985][T32338] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.10089'. [ 1144.005266][T32341] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.10093'. [ 1144.699276][T32355] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10097'. [ 1145.179840][T32370] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.10098'. [ 1145.218164][T32365] netlink: 196 bytes leftover after parsing attributes in process `syz.4.10099'. [ 1145.825084][T32417] device wlan1 entered promiscuous mode [ 1146.005972][T32423] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.10105'. [ 1146.956562][T32438] netlink: 'syz.2.10110': attribute type 13 has an invalid length. [ 1147.126317][T32444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10112'. [ 1147.184549][T32438] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.10110'. [ 1149.102118][T32482] __nla_validate_parse: 2 callbacks suppressed [ 1149.102140][T32482] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.10125'. [ 1149.225533][T32479] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.10124'. [ 1149.442279][T32489] netlink: 'syz.3.10128': attribute type 13 has an invalid length. [ 1149.562984][T32489] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.10128'. [ 1150.973531][T32520] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10139'. [ 1151.020689][T32519] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.10137'. [ 1151.279031][T32528] device wlan1 entered promiscuous mode [ 1151.565022][T32532] netlink: 'syz.0.10150': attribute type 21 has an invalid length. [ 1151.601155][T32532] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10150'. [ 1151.605653][T32544] netlink: 196 bytes leftover after parsing attributes in process `syz.1.10141'. [ 1151.619947][T32532] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10150'. [ 1152.038662][T32551] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10146'. [ 1153.178039][T32573] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.10153'. [ 1154.900130][T32608] netlink: 'syz.4.10163': attribute type 13 has an invalid length. [ 1154.919230][T32608] __nla_validate_parse: 2 callbacks suppressed [ 1154.919329][T32608] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.10163'. [ 1155.292906][T32622] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.10167'. [ 1155.308567][T32625] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10168'. [ 1155.348246][T32623] device wlan1 entered promiscuous mode [ 1155.469949][T32618] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10177'. [ 1155.680003][T32635] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.10183'. [ 1156.023681][T32649] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.10176'. [ 1156.136262][T32649] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10176'. [ 1156.291609][T32656] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.10189'. [ 1156.410640][T32662] netlink: 'syz.2.10178': attribute type 21 has an invalid length. [ 1156.458527][T32662] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10178'. [ 1156.481864][T32662] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10178'. [ 1156.918601][T32678] netlink: 'syz.1.10181': attribute type 13 has an invalid length. [ 1157.326614][T32691] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1157.757903][T32708] device wlan1 entered promiscuous mode [ 1157.978136][T32715] delete_channel: no stack [ 1157.999598][T32715] delete_channel: no stack [ 1158.072705][T32716] netlink: 'syz.4.10199': attribute type 21 has an invalid length. [ 1160.017728][ T306] netlink: 'syz.1.10218': attribute type 21 has an invalid length. [ 1160.034642][ T306] __nla_validate_parse: 15 callbacks suppressed [ 1160.034662][ T306] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10218'. [ 1160.050621][ T306] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10218'. [ 1160.351560][ T311] netlink: 'syz.1.10221': attribute type 1 has an invalid length. [ 1160.370013][ T311] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.10221'. [ 1160.575186][ T316] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.10223'. [ 1160.982127][ T311] netlink: 'syz.1.10221': attribute type 9 has an invalid length. [ 1161.018346][ T311] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.10221'. [ 1161.247538][ T324] netlink: 'syz.3.10225': attribute type 10 has an invalid length. [ 1161.301029][ T320] delete_channel: no stack [ 1161.433185][ T333] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.10228'. [ 1161.571115][ T341] device wlan1 entered promiscuous mode [ 1162.021476][ T357] netlink: 'syz.3.10232': attribute type 21 has an invalid length. [ 1162.044603][ T357] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10232'. [ 1162.070403][ T357] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10232'. [ 1162.315787][ T367] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.10239'. [ 1162.612244][ T374] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.10241'. [ 1162.928514][ T388] netlink: 'syz.4.10245': attribute type 1 has an invalid length. [ 1163.356598][ T388] netlink: 'syz.4.10245': attribute type 9 has an invalid length. [ 1163.836491][ T394] netlink: 'syz.2.10246': attribute type 10 has an invalid length. [ 1163.871267][ T393] delete_channel: no stack [ 1164.151997][ T408] netlink: 'syz.0.10265': attribute type 10 has an invalid length. [ 1164.215762][ T407] delete_channel: no stack [ 1164.933324][ T449] netlink: 'syz.0.10269': attribute type 1 has an invalid length. [ 1165.243251][ T449] netlink: 'syz.0.10269': attribute type 9 has an invalid length. [ 1165.263572][ T449] __nla_validate_parse: 10 callbacks suppressed [ 1165.263594][ T449] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.10269'. [ 1166.147715][ T466] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10275'. [ 1166.294634][ T471] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.10277'. [ 1166.358325][ T473] netlink: 'syz.3.10278': attribute type 17 has an invalid length. [ 1166.376537][ T473] netlink: 'syz.3.10278': attribute type 16 has an invalid length. [ 1166.396147][ T473] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10278'. [ 1166.512551][ T479] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.10290'. [ 1166.718567][ T493] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10284'. [ 1166.769403][ T493] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.10284'. [ 1166.964826][ T500] netlink: 'syz.2.10287': attribute type 1 has an invalid length. [ 1167.002796][ T500] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.10287'. [ 1167.237634][ T510] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.10292'. [ 1167.308997][ T508] netlink: 'syz.2.10287': attribute type 9 has an invalid length. [ 1167.332417][ T512] netlink: 'syz.0.10293': attribute type 10 has an invalid length. [ 1167.343381][ T508] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.10287'. [ 1167.588147][ T519] netlink: 'syz.1.10294': attribute type 10 has an invalid length. [ 1168.162806][ T541] device sit0 left promiscuous mode [ 1168.377674][ T550] device sit0 entered promiscuous mode [ 1168.701931][ T556] netlink: 'syz.4.10305': attribute type 10 has an invalid length. [ 1168.918258][ T567] netlink: 'syz.3.10308': attribute type 1 has an invalid length. [ 1169.171967][ T571] netlink: 'syz.3.10308': attribute type 9 has an invalid length. [ 1170.705949][ T619] __nla_validate_parse: 12 callbacks suppressed [ 1170.705968][ T619] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.10326'. [ 1170.782158][ T619] netlink: 21192 bytes leftover after parsing attributes in process `syz.1.10326'. [ 1170.860940][ T625] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.10328'. [ 1171.221943][ T635] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10334'. [ 1171.286248][ T637] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1171.468013][ T645] device sit0 left promiscuous mode [ 1172.080582][ T653] device sit0 entered promiscuous mode [ 1172.189477][ T659] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.10339'. [ 1172.516101][ T670] validate_nla: 1 callbacks suppressed [ 1172.516144][ T670] netlink: 'syz.4.10344': attribute type 21 has an invalid length. [ 1172.635075][ T668] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.10342'. [ 1173.032397][ T690] netlink: 'syz.0.10351': attribute type 10 has an invalid length. [ 1173.385963][ T697] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.10352'. [ 1173.445454][ T700] netlink: 'syz.2.10354': attribute type 10 has an invalid length. [ 1173.971785][ T719] device sit0 left promiscuous mode [ 1174.288761][ T717] device sit0 left promiscuous mode [ 1174.689645][ T723] device sit0 entered promiscuous mode [ 1174.767061][ T724] device sit0 entered promiscuous mode [ 1174.902415][ T733] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.10361'. [ 1175.464316][ T745] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.10366'. [ 1175.669065][ T755] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1175.798566][ T756] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.10368'. [ 1175.881336][ T756] netlink: 21192 bytes leftover after parsing attributes in process `syz.0.10368'. [ 1176.282445][ T770] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10374'. [ 1176.543234][ T773] device sit0 left promiscuous mode [ 1177.080802][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.087243][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.644680][ T784] device sit0 entered promiscuous mode [ 1178.556692][ T804] netlink: 'syz.3.10383': attribute type 10 has an invalid length. [ 1178.665589][ T806] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.10383'. [ 1178.753638][ T809] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.10385'. [ 1178.818925][ T805] netlink: 'syz.1.10379': attribute type 21 has an invalid length. [ 1178.879310][ T809] netlink: 21192 bytes leftover after parsing attributes in process `syz.4.10385'. [ 1179.986291][ T833] device sit0 left promiscuous mode [ 1180.532125][ T838] device sit0 entered promiscuous mode [ 1181.303499][ T860] netlink: 'syz.0.10398': attribute type 21 has an invalid length. [ 1181.546716][ T870] netlink: 'syz.1.10410': attribute type 10 has an invalid length. [ 1181.602915][ T870] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.10410'. [ 1181.644936][ T872] netlink: 'syz.4.10400': attribute type 10 has an invalid length. [ 1182.108997][ T888] netlink: 175 bytes leftover after parsing attributes in process `syz.4.10405'. [ 1182.285191][ T883] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.10404'. [ 1182.301159][ T883] openvswitch: netlink: IP tunnel dst address not specified [ 1182.804308][ T909] netlink: 'syz.2.10414': attribute type 21 has an invalid length. [ 1183.138000][ T918] netlink: 'syz.3.10415': attribute type 10 has an invalid length. [ 1183.345067][ T914] device sit0 left promiscuous mode [ 1183.881727][ T919] device sit0 entered promiscuous mode [ 1184.237199][ T927] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1184.285035][ T927] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1184.302776][ T927] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1184.378407][ T939] netlink: 175 bytes leftover after parsing attributes in process `syz.1.10419'. [ 1184.657066][ T951] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.10422'. [ 1184.739191][ T951] openvswitch: netlink: IP tunnel dst address not specified [ 1185.381537][ T965] netlink: 'syz.3.10429': attribute type 21 has an invalid length. [ 1185.542914][ T974] netlink: 'syz.4.10430': attribute type 21 has an invalid length. [ 1185.615620][ T974] netlink: 'syz.4.10430': attribute type 6 has an invalid length. [ 1185.623645][ T974] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10430'. [ 1185.816612][ T983] device sit0 left promiscuous mode [ 1185.995947][ T982] device sit0 entered promiscuous mode [ 1187.732906][ T1024] device sit0 left promiscuous mode [ 1188.517897][ T1022] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1188.532839][ T1022] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1188.564954][ T1022] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1188.714043][ T1026] device sit0 entered promiscuous mode [ 1188.763885][ T1030] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10447'. [ 1189.054692][ T1042] netlink: 80 bytes leftover after parsing attributes in process `syz.4.10448'. [ 1189.087172][ T1042] netlink: 'syz.4.10448': attribute type 3 has an invalid length. [ 1189.102092][ T1042] netlink: 'syz.4.10448': attribute type 4 has an invalid length. [ 1189.110517][ T1042] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.10448'. [ 1190.088599][ T1069] device sit0 left promiscuous mode [ 1190.605153][ T1074] device sit0 entered promiscuous mode [ 1190.694836][ T1088] netlink: 'syz.1.10458': attribute type 21 has an invalid length. [ 1190.729493][ T1090] netlink: 175 bytes leftover after parsing attributes in process `syz.2.10455'. [ 1191.013604][ T1097] device sit0 left promiscuous mode [ 1191.552467][ T1108] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.10466'. [ 1191.610518][ T1108] openvswitch: netlink: IP tunnel dst address not specified [ 1191.661448][ T1105] device sit0 entered promiscuous mode [ 1191.825661][ T1112] device wlan0 entered promiscuous mode [ 1192.379383][ T1132] device sit0 left promiscuous mode [ 1193.163317][ T1149] device sit0 entered promiscuous mode [ 1193.244573][ T1155] netlink: 'syz.2.10481': attribute type 21 has an invalid length. [ 1193.607155][ T1185] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.10489'. [ 1194.176430][ T1204] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10492'. [ 1194.748348][ T1218] device sit0 left promiscuous mode [ 1195.666038][ T1223] netlink: 'syz.0.10500': attribute type 21 has an invalid length. [ 1195.678523][ T1224] device sit0 entered promiscuous mode [ 1195.793674][ T1242] device sit0 left promiscuous mode [ 1195.971552][ T1246] device sit0 entered promiscuous mode [ 1196.082159][ T1245] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10506'. [ 1196.243162][ T1257] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.10519'. [ 1196.618622][ T1268] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10511'. [ 1196.659166][ T1280] netlink: 'syz.3.10511': attribute type 3 has an invalid length. [ 1196.767328][ T1280] netlink: 'syz.3.10511': attribute type 4 has an invalid length. [ 1196.928397][ T1280] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.10511'. [ 1197.187228][ T1291] device sit0 left promiscuous mode [ 1197.864733][ T1293] device sit0 entered promiscuous mode [ 1198.018519][ T1310] device sit0 left promiscuous mode [ 1198.321881][ T1316] device sit0 entered promiscuous mode [ 1198.435415][ T1319] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10527'. [ 1198.953830][ T1342] device wlan0 entered promiscuous mode [ 1199.631016][ T1366] device sit0 left promiscuous mode [ 1199.855188][ T1373] device sit0 entered promiscuous mode [ 1199.984960][ T1375] netlink: 80 bytes leftover after parsing attributes in process `syz.0.10541'. [ 1200.508190][ T1389] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10549'. [ 1200.576384][ T1389] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1200.645021][ T1385] netlink: 144 bytes leftover after parsing attributes in process `syz.4.10543'. [ 1203.557378][ T1415] device sit0 left promiscuous mode [ 1203.771318][ T1427] device sit0 entered promiscuous mode [ 1204.082754][ T1428] netlink: 'syz.3.10558': attribute type 39 has an invalid length. [ 1204.423170][ T1450] netlink: 'syz.4.10561': attribute type 1 has an invalid length. [ 1204.504912][ T1450] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.10561'. [ 1204.919810][ T1465] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10566'. [ 1205.159089][ T1464] netlink: 144 bytes leftover after parsing attributes in process `syz.3.10567'. [ 1205.571217][ T1470] netlink: 'syz.4.10568': attribute type 4 has an invalid length. [ 1205.589625][ T1470] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10568'. [ 1205.845926][ T1481] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.10570'. [ 1206.218972][ T1503] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10579'. [ 1206.268356][ T1500] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.10580'. [ 1206.420726][ T1508] netlink: 'syz.1.10581': attribute type 4 has an invalid length. [ 1206.434228][ T1508] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10581'. [ 1208.140053][ T1537] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.10592'. [ 1208.342618][ T1552] netlink: 'syz.2.10596': attribute type 4 has an invalid length. [ 1208.430766][ T1552] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10596'. [ 1208.503148][ T1560] netlink: 'syz.1.10598': attribute type 10 has an invalid length. [ 1208.572311][ T1555] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10597'. [ 1208.626732][ T1560] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.10598'. [ 1210.325195][ T1610] netlink: 'syz.0.10612': attribute type 4 has an invalid length. [ 1210.349609][ T1610] __nla_validate_parse: 1 callbacks suppressed [ 1210.349648][ T1610] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10612'. [ 1211.010471][ T1627] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.10618'. [ 1211.126548][ T1630] device sit0 left promiscuous mode [ 1214.716011][ T1672] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.10633'. [ 1215.084922][ T1688] device sit0 left promiscuous mode [ 1215.507565][ T1689] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10637'. [ 1216.068369][ T1711] netlink: 'syz.3.10641': attribute type 4 has an invalid length. [ 1216.112841][ T1711] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10641'. [ 1219.049537][ T1722] device sit0 left promiscuous mode [ 1219.098998][ T1723] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1219.124604][ T1723] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1219.134148][ T1723] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1219.380162][ T1731] netlink: 'syz.2.10651': attribute type 39 has an invalid length. [ 1219.919079][ T1742] device sit0 left promiscuous mode [ 1220.299772][ T1748] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10658'. [ 1220.612468][ T1757] device sit0 left promiscuous mode [ 1221.256119][ T1763] netlink: 'syz.4.10662': attribute type 33 has an invalid length. [ 1221.265518][ T1763] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10662'. [ 1221.315320][ T1764] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1221.352762][ T1764] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1221.377725][ T1769] netlink: 'syz.1.10663': attribute type 9 has an invalid length. [ 1221.385473][ T1764] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1221.473820][ T1769] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.10663'. [ 1221.926342][ T1770] netlink: 'syz.1.10663': attribute type 9 has an invalid length. [ 1221.934278][ T1770] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.10663'. [ 1222.033351][ T1786] IPv6: …: Disabled Multicast RS [ 1222.046529][ T1772] netlink: 160444 bytes leftover after parsing attributes in process `syz.2.10664'. [ 1222.088077][ T1775] netlink: 'syz.2.10664': attribute type 4 has an invalid length. [ 1222.103001][ T1775] netlink: 178700 bytes leftover after parsing attributes in process `syz.2.10664'. [ 1222.305615][ T1791] device sit0 entered promiscuous mode [ 1222.313046][ T1797] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.10672'. [ 1222.767921][ T1805] netlink: 'syz.3.10677': attribute type 1 has an invalid length. [ 1222.850746][ T1805] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.10677'. [ 1223.404375][ T1815] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.10680'. [ 1223.718611][ T1824] netlink: 'syz.2.10683': attribute type 9 has an invalid length. [ 1223.759801][ T1824] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.10683'. [ 1226.604950][ T1835] netlink: 'syz.3.10684': attribute type 39 has an invalid length. [ 1226.627194][ T1830] netlink: 'syz.2.10683': attribute type 9 has an invalid length. [ 1226.637745][ T1830] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.10683'. [ 1226.747862][ T1833] netlink: 160444 bytes leftover after parsing attributes in process `syz.1.10682'. [ 1226.778149][ T1832] netlink: 'syz.1.10682': attribute type 4 has an invalid length. [ 1226.794513][ T1832] netlink: 178700 bytes leftover after parsing attributes in process `syz.1.10682'. [ 1226.818834][ T1843] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10697'. [ 1227.164213][ T1850] IPv6: …: Disabled Multicast RS [ 1227.193505][ T1852] device sit0 left promiscuous mode [ 1227.211373][ T1858] netlink: 'syz.2.10690': attribute type 4 has an invalid length. [ 1227.231901][ T1858] netlink: 'syz.2.10690': attribute type 1 has an invalid length. [ 1227.271029][ T1858] netlink: 198800 bytes leftover after parsing attributes in process `syz.2.10690'. [ 1227.438639][ T1854] netlink: 180 bytes leftover after parsing attributes in process `syz.2.10690'. [ 1227.486785][ T1859] device sit0 entered promiscuous mode [ 1228.008456][ T1871] device sit0 entered promiscuous mode [ 1228.869904][ T1881] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10699'. [ 1229.092442][ T1892] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.10702'. [ 1229.152737][ T1894] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.10713'. [ 1229.172795][ T1899] netlink: 'syz.2.10703': attribute type 28 has an invalid length. [ 1229.485885][ T1918] device sit0 entered promiscuous mode [ 1229.675922][ T1921] device sit0 left promiscuous mode [ 1229.988432][ T1922] device sit0 entered promiscuous mode [ 1230.762697][ T1937] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.10718'. [ 1231.846178][ T1956] device sit0 left promiscuous mode [ 1232.046616][ T1962] device sit0 entered promiscuous mode [ 1232.273065][ T1964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10722'. [ 1232.301957][ T1973] device sit0 left promiscuous mode [ 1232.522001][ T1980] device sit0 entered promiscuous mode [ 1232.882523][ T1982] device sit0 left promiscuous mode [ 1233.068543][ T1983] device sit0 entered promiscuous mode [ 1233.260860][ T1988] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.10731'. [ 1235.070775][ T2020] device sit0 left promiscuous mode [ 1235.197812][ T2022] device sit0 entered promiscuous mode [ 1235.538599][ T2029] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10743'. [ 1235.645190][ T2040] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.10745'. [ 1236.024082][ T2051] device sit0 left promiscuous mode [ 1236.172646][ T2056] device sit0 entered promiscuous mode [ 1236.570757][ T2060] device sit0 entered promiscuous mode [ 1237.201578][ T2075] device sit0 left promiscuous mode [ 1237.350552][ T2078] netlink: 160444 bytes leftover after parsing attributes in process `syz.0.10756'. [ 1237.392754][ T2077] netlink: 'syz.0.10756': attribute type 4 has an invalid length. [ 1237.402824][ T2077] netlink: 178700 bytes leftover after parsing attributes in process `syz.0.10756'. [ 1237.438480][ T2079] device sit0 entered promiscuous mode [ 1237.694270][ T2086] device sit0 left promiscuous mode [ 1237.960253][ T2090] device sit0 entered promiscuous mode [ 1238.465537][ T2103] netlink: 'syz.3.10764': attribute type 9 has an invalid length. [ 1238.474062][ T2103] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.10764'. [ 1238.527322][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.533788][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.911103][ T2110] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10767'. [ 1239.496023][ T2108] netlink: 'syz.3.10764': attribute type 9 has an invalid length. [ 1239.534661][ T2108] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.10764'. [ 1239.593006][ T2121] device sit0 left promiscuous mode [ 1239.765622][ T2125] device sit0 left promiscuous mode [ 1240.024816][ T2129] device sit0 entered promiscuous mode [ 1240.099919][ T2130] device sit0 entered promiscuous mode [ 1240.596077][ T2138] netlink: 160444 bytes leftover after parsing attributes in process `syz.4.10773'. [ 1240.631270][ T2137] netlink: 'syz.4.10773': attribute type 4 has an invalid length. [ 1240.678667][ T2137] netlink: 178700 bytes leftover after parsing attributes in process `syz.4.10773'. [ 1241.015942][ T2144] device sit0 left promiscuous mode [ 1241.386331][ T2149] device sit0 entered promiscuous mode [ 1241.992382][ T2157] netlink: 'syz.1.10779': attribute type 33 has an invalid length. [ 1242.001264][ T2157] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10779'. [ 1242.294735][ T2172] device sit0 left promiscuous mode [ 1242.494758][ T2167] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10784'. [ 1242.511009][ T2175] device sit0 entered promiscuous mode [ 1242.686216][ T2180] device sit0 left promiscuous mode [ 1242.881562][ T2186] device sit0 entered promiscuous mode [ 1243.150580][ T2189] IPv6: …: Disabled Multicast RS [ 1243.422334][ T2199] device sit0 entered promiscuous mode [ 1244.253913][ T2205] netlink: 160444 bytes leftover after parsing attributes in process `syz.3.10792'. [ 1244.316867][ T2206] netlink: 'syz.3.10792': attribute type 4 has an invalid length. [ 1244.327310][ T2218] device sit0 left promiscuous mode [ 1244.360435][ T2206] netlink: 178700 bytes leftover after parsing attributes in process `syz.3.10792'. [ 1245.078753][ T2222] netlink: 'syz.2.10798': attribute type 33 has an invalid length. [ 1245.087172][ T2222] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10798'. [ 1245.098778][ T2224] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1245.107677][ T2227] device sit0 entered promiscuous mode [ 1245.110907][ T2224] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1245.123612][ T2224] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1245.519790][ T2246] device sit0 left promiscuous mode [ 1245.748777][ T2254] device sit0 entered promiscuous mode [ 1245.895458][ T2251] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10804'. [ 1245.949448][ T2259] device sit0 left promiscuous mode [ 1246.498787][ T2264] device sit0 entered promiscuous mode [ 1247.056475][ T2276] device sit0 left promiscuous mode [ 1247.222515][ T2280] device sit0 entered promiscuous mode [ 1247.398907][ T2288] netlink: 'syz.0.10815': attribute type 33 has an invalid length. [ 1247.434633][ T2288] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10815'. [ 1247.688889][ T2283] netlink: 160444 bytes leftover after parsing attributes in process `syz.4.10813'. [ 1247.831793][ T2287] netlink: 'syz.4.10813': attribute type 4 has an invalid length. [ 1247.866885][ T2287] netlink: 178700 bytes leftover after parsing attributes in process `syz.4.10813'. [ 1248.260845][ T2306] netlink: 'syz.1.10817': attribute type 39 has an invalid length. [ 1248.500339][ T2310] device sit0 left promiscuous mode [ 1249.164664][ T2315] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1249.167085][ T2316] device sit0 entered promiscuous mode [ 1249.174012][ T2315] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1249.250319][ T2315] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1249.504065][ T2318] device sit0 left promiscuous mode [ 1249.754360][ T2324] device sit0 entered promiscuous mode [ 1250.546947][ T2333] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10826'. [ 1250.586969][ T2342] device sit0 left promiscuous mode [ 1250.682629][ T2344] device sit0 entered promiscuous mode [ 1251.044483][ T2350] IPv6: …: Disabled Multicast RS [ 1251.090772][ T2348] netlink: 160444 bytes leftover after parsing attributes in process `syz.4.10831'. [ 1251.140172][ T2348] netlink: 'syz.4.10831': attribute type 4 has an invalid length. [ 1251.151106][ T2348] netlink: 178700 bytes leftover after parsing attributes in process `syz.4.10831'. [ 1251.255388][ T2358] device sit0 left promiscuous mode [ 1251.411985][ T2365] device sit0 entered promiscuous mode [ 1251.461041][ T2363] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.10833'. [ 1251.742542][ T2369] netlink: 'syz.4.10834': attribute type 39 has an invalid length. [ 1252.008471][ T2377] device sit0 left promiscuous mode [ 1252.308777][ T2384] device sit0 left promiscuous mode [ 1252.392891][ T2387] device sit0 entered promiscuous mode [ 1252.517312][ T2392] device sit0 entered promiscuous mode [ 1252.633109][ T2388] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10841'. [ 1253.371555][ T2405] netlink: 160444 bytes leftover after parsing attributes in process `syz.4.10844'. [ 1253.586202][ T2408] device sit0 left promiscuous mode [ 1253.912836][ T2413] device sit0 entered promiscuous mode [ 1254.139973][ T2419] IPv6: …: Disabled Multicast RS [ 1254.410909][ T2429] device sit0 left promiscuous mode [ 1254.557968][ T2432] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.10848'. [ 1254.677507][ T2430] device sit0 left promiscuous mode [ 1254.936275][ T2438] device sit0 entered promiscuous mode [ 1255.054561][ T2437] device sit0 entered promiscuous mode [ 1255.291086][ T2449] device sit0 left promiscuous mode [ 1256.100117][ T2462] device sit0 entered promiscuous mode [ 1256.127803][ T2460] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1256.149013][ T2460] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1256.170768][ T2460] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1256.191047][ T2461] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10856'. [ 1256.439582][ T2475] IPv6: …: Disabled Multicast RS [ 1257.779168][ T2510] device sit0 left promiscuous mode [ 1257.956077][ T2515] device sit0 entered promiscuous mode [ 1258.225442][ T2522] device sit0 left promiscuous mode [ 1258.314946][ T2524] device sit0 entered promiscuous mode [ 1258.546164][ T2537] device sit0 left promiscuous mode [ 1258.670464][ T2539] device sit0 entered promiscuous mode [ 1258.858867][ T2545] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.10873'. [ 1259.097768][ T2556] netlink: 'syz.3.10875': attribute type 7 has an invalid length. [ 1259.142079][ T2556] device sit0 left promiscuous mode [ 1260.174014][ T2564] device sit0 entered promiscuous mode [ 1260.493900][ T2585] device sit0 left promiscuous mode [ 1260.786745][ T2593] device sit0 left promiscuous mode [ 1261.212592][ T2591] device sit0 entered promiscuous mode [ 1261.657733][ T2611] device sit0 entered promiscuous mode [ 1261.995882][ T2622] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.10892'. [ 1262.556352][ T2642] device sit0 left promiscuous mode [ 1262.904731][ T2650] device sit0 left promiscuous mode [ 1263.352597][ T2683] device sit0 entered promiscuous mode [ 1263.680469][ T2698] netlink: 'syz.0.10908': attribute type 29 has an invalid length. [ 1263.733831][ T2698] netlink: 'syz.0.10908': attribute type 29 has an invalid length. [ 1263.798755][ T2703] netlink: 'syz.0.10908': attribute type 29 has an invalid length. [ 1263.842593][ T2713] netlink: 'syz.0.10908': attribute type 29 has an invalid length. [ 1263.922383][ T2698] netlink: 'syz.0.10908': attribute type 29 has an invalid length. [ 1264.058014][ T2703] netlink: 'syz.0.10908': attribute type 29 has an invalid length. [ 1265.302660][ T2724] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.10914'. [ 1265.689109][ T2745] netlink: 'syz.2.10918': attribute type 4 has an invalid length. [ 1265.703427][ T2745] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10918'. [ 1265.741878][ T2736] device sit0 left promiscuous mode [ 1265.790116][ T2745] netlink: 'syz.2.10918': attribute type 3 has an invalid length. [ 1265.805186][ T2745] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10918'. [ 1266.309527][ T2763] device sit0 entered promiscuous mode [ 1267.174011][ T2780] device sit0 left promiscuous mode [ 1267.733555][ T2794] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.10929'. [ 1268.245220][ T2808] netlink: 63579 bytes leftover after parsing attributes in process `syz.3.10932'. [ 1268.291598][ T2812] device sit0 left promiscuous mode [ 1268.440639][ T2816] device sit0 entered promiscuous mode [ 1268.602092][ T2812] device sit0 entered promiscuous mode [ 1269.781763][ T2846] netlink: 'syz.4.10944': attribute type 9 has an invalid length. [ 1269.797326][ T2846] netlink: 184904 bytes leftover after parsing attributes in process `syz.4.10944'. [ 1269.801853][ T2849] device sit0 entered promiscuous mode [ 1269.985184][ T2854] device sit0 left promiscuous mode [ 1270.393642][ T2862] device sit0 entered promiscuous mode [ 1270.589705][ T2852] netlink: 'syz.4.10944': attribute type 10 has an invalid length. [ 1270.600563][ T2868] device sit0 left promiscuous mode [ 1270.604790][ T2852] netlink: 185948 bytes leftover after parsing attributes in process `syz.4.10944'. [ 1270.796402][ T2870] device sit0 entered promiscuous mode [ 1271.139462][ T2887] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10953'. [ 1272.502681][ T2963] device sit0 left promiscuous mode [ 1272.764930][ T2971] device sit0 left promiscuous mode [ 1272.926114][ T2975] device sit0 entered promiscuous mode [ 1272.982397][ T2978] device sit0 entered promiscuous mode [ 1273.028038][ T2980] device sit0 left promiscuous mode [ 1274.090704][ T3012] netlink: 'syz.4.10973': attribute type 2 has an invalid length. [ 1274.218050][ T3012] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.10973'. [ 1274.972441][ T3020] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.10974'. [ 1275.009646][ T3020] openvswitch: netlink: IP tunnel dst address not specified [ 1275.048078][ T3028] device sit0 left promiscuous mode [ 1275.194198][ T3031] device sit0 entered promiscuous mode [ 1275.409323][ T3034] device sit0 left promiscuous mode [ 1275.639223][ T3035] device sit0 entered promiscuous mode [ 1275.883802][ T3049] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.10983'. [ 1275.895971][ T3049] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1275.953310][ T3049] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.10983'. [ 1276.338288][ T3062] sctp: [Deprecated]: syz.1.10987 (pid 3062) Use of int in max_burst socket option deprecated. [ 1276.338288][ T3062] Use struct sctp_assoc_value instead [ 1277.134160][ T3081] device sit0 left promiscuous mode [ 1277.518586][ T3089] device sit0 left promiscuous mode [ 1277.756658][ T3087] device sit0 entered promiscuous mode [ 1277.813737][ T3086] device sit0 left promiscuous mode [ 1277.917778][ T3096] device sit0 entered promiscuous mode [ 1278.256535][ T3106] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10999'. [ 1278.312606][ T3108] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11000'. [ 1279.592457][ T3129] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1279.729442][ T3129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1279.934210][ T3142] device sit0 left promiscuous mode [ 1280.124218][ T3146] device sit0 left promiscuous mode [ 1280.414073][ T3143] pim6reg: tun_chr_ioctl cmd 1074025677 [ 1280.428276][ T3143] pim6reg: linktype set to 778 [ 1280.464731][ T3149] device sit0 entered promiscuous mode [ 1280.603259][ T3150] device sit0 entered promiscuous mode [ 1280.783118][ T3158] device sit0 left promiscuous mode [ 1281.353548][ T3166] device sit0 entered promiscuous mode [ 1281.673018][ T3168] netlink: 'syz.2.11014': attribute type 10 has an invalid length. [ 1281.715095][ T3168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11014'. [ 1282.199618][ T3195] device sit0 left promiscuous mode [ 1282.477868][ T3200] device sit0 entered promiscuous mode [ 1282.839227][ T3211] sctp: [Deprecated]: syz.2.11029 (pid 3211) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1282.839227][ T3211] Use struct sctp_sack_info instead [ 1283.109129][ T3219] device sit0 entered promiscuous mode [ 1283.461570][ T3225] netlink: 'syz.2.11034': attribute type 3 has an invalid length. [ 1283.651636][ T3225] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11034'. [ 1284.536114][ T3238] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11036'. [ 1284.703128][ T3257] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.11042'. [ 1285.053603][ T3271] device sit0 left promiscuous mode [ 1285.478962][ T3284] device sit0 entered promiscuous mode [ 1285.743249][ T3275] netlink: 'syz.1.11047': attribute type 27 has an invalid length. [ 1286.485815][ T3301] device sit0 entered promiscuous mode [ 1286.879653][ T3312] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1286.986631][ T3319] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11058'. [ 1287.073382][ T3312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1287.368372][ T3338] device sit0 left promiscuous mode [ 1288.065265][ T3344] device sit0 entered promiscuous mode [ 1288.211998][ T3342] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1288.295231][ T3342] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1288.313470][ T3342] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1288.779979][ T3369] device sit0 left promiscuous mode [ 1289.045625][ T3370] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11072'. [ 1289.080462][ T3379] device sit0 entered promiscuous mode [ 1289.287538][ T3387] netlink: 'syz.3.11076': attribute type 21 has an invalid length. [ 1289.557245][ T3393] tap0: tun_chr_ioctl cmd 1074025677 [ 1289.590192][ T3393] tap0: linktype set to 270 [ 1290.246822][ T3402] device sit0 left promiscuous mode [ 1290.339732][ T3400] device sit0 left promiscuous mode [ 1290.541836][ T3402] device sit0 entered promiscuous mode [ 1290.630156][ T3410] device sit0 entered promiscuous mode [ 1290.840521][ T3420] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11086'. [ 1290.981711][ T3423] device sit0 left promiscuous mode [ 1291.190485][ T3430] device sit0 entered promiscuous mode [ 1291.470741][ T3439] netlink: 'syz.2.11091': attribute type 10 has an invalid length. [ 1291.499617][ T3439] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11091'. [ 1292.522554][ T3452] device sit0 left promiscuous mode [ 1292.710892][ T3454] device sit0 left promiscuous mode [ 1293.004852][ T3462] device sit0 entered promiscuous mode [ 1293.029355][ T3464] device sit0 entered promiscuous mode [ 1293.228502][ T3481] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11100'. [ 1293.308272][ T3481] openvswitch: netlink: Flow key attribute not present in set flow. [ 1293.873985][ T3482] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.11101'. [ 1294.060910][ T3493] device sit0 left promiscuous mode [ 1294.338649][ T3497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11105'. [ 1294.370262][ T3499] device sit0 entered promiscuous mode [ 1294.446813][ T3507] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.11107'. [ 1294.635327][ T3519] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11110'. [ 1295.630618][ T3535] device sit0 left promiscuous mode [ 1295.937675][ T3550] device sit0 entered promiscuous mode [ 1296.061630][ T3552] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.11117'. [ 1297.692905][ T3604] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.11129'. [ 1298.461929][ T3604] netlink: 21192 bytes leftover after parsing attributes in process `syz.3.11129'. [ 1298.482639][ T3607] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11133'. [ 1298.640563][ T3607] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1298.651988][ T3607] CPU: 1 PID: 3607 Comm: syz.1.11133 Not tainted syzkaller #0 [ 1298.659604][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1298.669720][ T3607] Call Trace: [ 1298.673374][ T3607] [ 1298.677949][ T3607] dump_stack_lvl+0x188/0x250 [ 1298.682682][ T3607] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1298.688880][ T3607] ? show_regs_print_info+0x20/0x20 [ 1298.694114][ T3607] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1298.700320][ T3607] sysfs_warn_dup+0x8a/0xa0 [ 1298.704859][ T3607] sysfs_do_create_link_sd+0xc0/0x110 [ 1298.710278][ T3607] device_add+0x83b/0x1050 [ 1298.714781][ T3607] wiphy_register+0x1e74/0x2c40 [ 1298.719776][ T3607] ? cfg80211_event_work+0x40/0x40 [ 1298.724952][ T3607] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1298.731161][ T3607] ieee80211_register_hw+0x2a03/0x3a60 [ 1298.736666][ T3607] ? ieee80211_register_hw+0xae1/0x3a60 [ 1298.742254][ T3607] ? ieee80211_tasklet_handler+0x20/0x20 [ 1298.747928][ T3607] ? rcu_is_watching+0x11/0xa0 [ 1298.752727][ T3607] ? hrtimer_init+0x10c/0x220 [ 1298.757493][ T3607] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1298.763273][ T3607] hwsim_new_radio_nl+0xa7d/0xc50 [ 1298.768348][ T3607] genl_rcv_msg+0xd0b/0xfa0 [ 1298.772889][ T3607] ? finish_lock_switch+0x12f/0x290 [ 1298.778203][ T3607] ? genl_bind+0x370/0x370 [ 1298.782704][ T3607] ? verify_lock_unused+0x140/0x140 [ 1298.788050][ T3607] ? mark_lock+0x94/0x320 [ 1298.792417][ T3607] ? release_firmware_map_entry+0x190/0x190 [ 1298.798704][ T3607] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1298.805396][ T3607] ? lock_chain_count+0x20/0x20 [ 1298.810342][ T3607] ? preempt_schedule+0xbc/0xd0 [ 1298.815244][ T3607] netlink_rcv_skb+0x1e9/0x430 [ 1298.820047][ T3607] ? genl_bind+0x370/0x370 [ 1298.824496][ T3607] ? netlink_ack+0xb10/0xb10 [ 1298.829145][ T3607] ? down_read+0x1da/0x2e0 [ 1298.833597][ T3607] genl_rcv+0x24/0x40 [ 1298.837614][ T3607] netlink_unicast+0x78f/0x940 [ 1298.842419][ T3607] netlink_sendmsg+0x8ba/0xbe0 [ 1298.847256][ T3607] ? lockdep_hardirqs_on+0x94/0x140 [ 1298.852495][ T3607] ? netlink_getsockopt+0x570/0x570 [ 1298.857728][ T3607] ? aa_sock_msg_perm+0x94/0x150 [ 1298.862699][ T3607] ? apparmor_socket_sendmsg+0x88/0x230 [ 1298.868303][ T3607] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1298.873651][ T3607] ? security_socket_sendmsg+0x7c/0xa0 [ 1298.879234][ T3607] ? netlink_getsockopt+0x570/0x570 [ 1298.884699][ T3607] ____sys_sendmsg+0x5be/0x8f0 [ 1298.889529][ T3607] ? __sys_sendmsg_sock+0x30/0x30 [ 1298.894595][ T3607] ? import_iovec+0x74/0xa0 [ 1298.899141][ T3607] ___sys_sendmsg+0x236/0x2e0 [ 1298.903861][ T3607] ? __sys_sendmsg+0x290/0x290 [ 1298.908669][ T3607] ? trace_event_raw_event_lock+0x250/0x250 [ 1298.914614][ T3607] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1298.920912][ T3607] __se_sys_sendmsg+0x1b7/0x2a0 [ 1298.925893][ T3607] ? __x64_sys_sendmsg+0x80/0x80 [ 1298.930862][ T3607] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1298.936884][ T3607] ? lockdep_hardirqs_on+0x94/0x140 [ 1298.942113][ T3607] do_syscall_64+0x4c/0xa0 [ 1298.946664][ T3607] ? clear_bhb_loop+0x30/0x80 [ 1298.951387][ T3607] ? clear_bhb_loop+0x30/0x80 [ 1298.956092][ T3607] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1298.962291][ T3607] RIP: 0033:0x7ff46362c019 [ 1298.966737][ T3607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.986933][ T3607] RSP: 002b:00007ff461884028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1298.995405][ T3607] RAX: ffffffffffffffda RBX: 00007ff4638b3fa0 RCX: 00007ff46362c019 [ 1299.003413][ T3607] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1299.011452][ T3607] RBP: 00007ff4636c300c R08: 0000000000000000 R09: 0000000000000000 [ 1299.019457][ T3607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1299.027456][ T3607] R13: 00007ff4638b4038 R14: 00007ff4638b3fa0 R15: 00007fff10bcf6b8 [ 1299.035486][ T3607] [ 1299.967647][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.974220][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.463146][ T3697] delete_channel: no stack [ 1301.475118][ T3697] delete_channel: no stack [ 1301.500381][ T3680] ------------[ cut here ]------------ [ 1301.506450][ T3680] WARNING: CPU: 0 PID: 3680 at kernel/events/core.c:6688 perf_pending_task+0x353/0x480 [ 1301.516562][ T3680] Modules linked in: [ 1301.520508][ T3680] CPU: 0 PID: 3680 Comm: syz.2.11152 Not tainted syzkaller #0 [ 1301.528060][ T3680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1301.538218][ T3680] RIP: 0010:perf_pending_task+0x353/0x480 [ 1301.544031][ T3680] Code: e8 92 4a de ff 84 db 75 10 e8 29 48 de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 19 48 de ff e8 8c c8 65 ff eb e9 e8 0d 48 de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1301.563804][ T3680] RSP: 0018:ffffc9000310f9c0 EFLAGS: 00010293 [ 1301.569968][ T3680] RAX: ffffffff819ab4a3 RBX: ffff88801e5dc000 RCX: ffff88807df18000 [ 1301.578033][ T3680] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1301.586103][ T3680] RBP: ffff88801e5dbdd0 R08: ffff88807df18a13 R09: 1ffff1100fbe3142 [ 1301.594119][ T3680] R10: dffffc0000000000 R11: ffffed100fbe3143 R12: ffff88807df18000 [ 1301.602275][ T3680] R13: ffff88807893cd58 R14: 0000000000000000 R15: 1ffff11003cbb7ba [ 1301.610365][ T3680] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1301.619390][ T3680] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1301.626057][ T3680] CR2: 00007ff463679700 CR3: 000000006434b000 CR4: 00000000003506f0 [ 1301.634070][ T3680] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1301.642249][ T3680] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1301.650379][ T3680] Call Trace: [ 1301.653706][ T3680] [ 1301.656735][ T3680] task_work_run+0x125/0x1a0 [ 1301.661485][ T3680] do_exit+0x635/0x2110 [ 1301.665789][ T3680] ? put_task_struct+0x80/0x80 [ 1301.670602][ T3680] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1301.676723][ T3680] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1301.681791][ T3680] do_group_exit+0x12c/0x2f0 [ 1301.686469][ T3680] ? lockdep_hardirqs_on+0x94/0x140 [ 1301.691718][ T3680] get_signal+0x7eb/0x12e0 [ 1301.696348][ T3680] arch_do_signal_or_restart+0xe6/0x12a0 [ 1301.702145][ T3680] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1301.707875][ T3680] ? get_sigframe_size+0x10/0x10 [ 1301.712881][ T3680] ? ksys_write+0x203/0x260 [ 1301.717570][ T3680] ? exit_to_user_mode_loop+0x3b/0x130 [ 1301.723171][ T3680] exit_to_user_mode_loop+0x9e/0x130 [ 1301.728568][ T3680] exit_to_user_mode_prepare+0xee/0x180 [ 1301.734155][ T3680] syscall_exit_to_user_mode+0x16/0x40 [ 1301.739750][ T3680] do_syscall_64+0x58/0xa0 [ 1301.744212][ T3680] ? clear_bhb_loop+0x30/0x80 [ 1301.748960][ T3680] ? clear_bhb_loop+0x30/0x80 [ 1301.753705][ T3680] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1301.759697][ T3680] RIP: 0033:0x7f4a14398019 [ 1301.764161][ T3680] Code: Unable to access opcode bytes at RIP 0x7f4a14397fef. [ 1301.771594][ T3680] RSP: 002b:00007f4a125f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1301.780192][ T3680] RAX: 0000000000000009 RBX: 00007f4a1461ffa0 RCX: 00007f4a14398019 [ 1301.788238][ T3680] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000008 [ 1301.796414][ T3680] RBP: 00007f4a1442f00c R08: 0000000000000000 R09: 0000000000000000 [ 1301.804476][ T3680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1301.812494][ T3680] R13: 00007f4a14620038 R14: 00007f4a1461ffa0 R15: 00007ffec87090e8 [ 1301.820562][ T3680] [ 1301.823624][ T3680] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1301.830928][ T3680] CPU: 0 PID: 3680 Comm: syz.2.11152 Not tainted syzkaller #0 [ 1301.838419][ T3680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1301.848552][ T3680] Call Trace: [ 1301.851865][ T3680] [ 1301.854837][ T3680] dump_stack_lvl+0x188/0x250 [ 1301.859611][ T3680] ? show_regs_print_info+0x20/0x20 [ 1301.864855][ T3680] ? load_image+0x410/0x410 [ 1301.869390][ T3680] panic+0x2f8/0x850 [ 1301.873310][ T3680] ? bpf_jit_dump+0xd0/0xd0 [ 1301.877853][ T3680] ? perf_pending_task+0x353/0x480 [ 1301.882987][ T3680] __warn+0x248/0x2b0 [ 1301.886991][ T3680] ? perf_pending_task+0x353/0x480 [ 1301.892133][ T3680] report_bug+0x1b9/0x2e0 [ 1301.896558][ T3680] handle_bug+0x3a/0x70 [ 1301.900731][ T3680] exc_invalid_op+0x16/0x40 [ 1301.905253][ T3680] asm_exc_invalid_op+0x16/0x20 [ 1301.910121][ T3680] RIP: 0010:perf_pending_task+0x353/0x480 [ 1301.915868][ T3680] Code: e8 92 4a de ff 84 db 75 10 e8 29 48 de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 19 48 de ff e8 8c c8 65 ff eb e9 e8 0d 48 de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1301.935509][ T3680] RSP: 0018:ffffc9000310f9c0 EFLAGS: 00010293 [ 1301.941597][ T3680] RAX: ffffffff819ab4a3 RBX: ffff88801e5dc000 RCX: ffff88807df18000 [ 1301.949590][ T3680] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1301.957581][ T3680] RBP: ffff88801e5dbdd0 R08: ffff88807df18a13 R09: 1ffff1100fbe3142 [ 1301.965574][ T3680] R10: dffffc0000000000 R11: ffffed100fbe3143 R12: ffff88807df18000 [ 1301.973562][ T3680] R13: ffff88807893cd58 R14: 0000000000000000 R15: 1ffff11003cbb7ba [ 1301.981559][ T3680] ? perf_pending_task+0x353/0x480 [ 1301.986718][ T3680] task_work_run+0x125/0x1a0 [ 1301.991354][ T3680] do_exit+0x635/0x2110 [ 1301.995538][ T3680] ? put_task_struct+0x80/0x80 [ 1302.000338][ T3680] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1302.006366][ T3680] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1302.011432][ T3680] do_group_exit+0x12c/0x2f0 [ 1302.016040][ T3680] ? lockdep_hardirqs_on+0x94/0x140 [ 1302.021260][ T3680] get_signal+0x7eb/0x12e0 [ 1302.025706][ T3680] arch_do_signal_or_restart+0xe6/0x12a0 [ 1302.031371][ T3680] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1302.037033][ T3680] ? get_sigframe_size+0x10/0x10 [ 1302.042009][ T3680] ? ksys_write+0x203/0x260 [ 1302.046532][ T3680] ? exit_to_user_mode_loop+0x3b/0x130 [ 1302.052057][ T3680] exit_to_user_mode_loop+0x9e/0x130 [ 1302.057367][ T3680] exit_to_user_mode_prepare+0xee/0x180 [ 1302.063068][ T3680] syscall_exit_to_user_mode+0x16/0x40 [ 1302.068551][ T3680] do_syscall_64+0x58/0xa0 [ 1302.072988][ T3680] ? clear_bhb_loop+0x30/0x80 [ 1302.077696][ T3680] ? clear_bhb_loop+0x30/0x80 [ 1302.082394][ T3680] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1302.088306][ T3680] RIP: 0033:0x7f4a14398019 [ 1302.092758][ T3680] Code: Unable to access opcode bytes at RIP 0x7f4a14397fef. [ 1302.100139][ T3680] RSP: 002b:00007f4a125f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1302.108572][ T3680] RAX: 0000000000000009 RBX: 00007f4a1461ffa0 RCX: 00007f4a14398019 [ 1302.116561][ T3680] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000008 [ 1302.124553][ T3680] RBP: 00007f4a1442f00c R08: 0000000000000000 R09: 0000000000000000 [ 1302.132540][ T3680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1302.140535][ T3680] R13: 00007f4a14620038 R14: 00007f4a1461ffa0 R15: 00007ffec87090e8 [ 1302.148539][ T3680] [ 1302.151683][ T3680] Kernel Offset: disabled [ 1302.156037][ T3680] Rebooting in 86400 seconds..