last executing test programs: 16m8.973510379s ago: executing program 3 (id=3325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x5b}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 16m8.114597435s ago: executing program 3 (id=3326): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 16m8.049135312s ago: executing program 3 (id=3327): perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1ffffffffffffef3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x80000, 0x0, 0x0, 0x41000, 0x8}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef) write$cgroup_subtree(r1, 0x0, 0xfdef) write$cgroup_devices(r1, &(0x7f0000000800)=ANY=[], 0xffdd) 16m7.117002686s ago: executing program 3 (id=3333): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0x200000000000001, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) 16m4.348502525s ago: executing program 3 (id=3337): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x9c, 0x0, 0x0, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r0}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000500), 0x0) close(r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1df9f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 16m4.20086494s ago: executing program 3 (id=3342): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x24, 0x0, 0x6, &(0x7f0000000180)) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 15m49.161473187s ago: executing program 32 (id=3342): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x24, 0x0, 0x6, &(0x7f0000000180)) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 4m40.252921232s ago: executing program 1 (id=7173): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x10164) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 4m39.964638052s ago: executing program 1 (id=7178): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000800), 0x4) socket$kcm(0x10, 0x2, 0x10) r1 = syz_clone(0x1000, &(0x7f0000000080)="63fc8afa500bb230", 0x8, &(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000440)="378e3828cb02177921b39c47166df240565bc8c16061e2c7989709253c7552ca95518af43bec2a76f6af1d033f604bb4b79f42a26eaffcc923a29417d2e5d994d811fb229e93bfef4c198a57675e9b973962e8a22a296f6952940ebee7eaf53089862f931c5348dfaeebe82f1f50205848b2") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x4b15}, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001280)={r1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001240)='\x00'}, 0x30) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 4m39.452676704s ago: executing program 1 (id=7184): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x6, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x4c850}, 0x40400c5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0xc0189436, &(0x7f0000000640)={0x0, 0x0}) close(r1) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000004c0)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000500)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r3, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000005c0), 0x0) close(r5) 4m38.855640295s ago: executing program 1 (id=7193): syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/cgroup\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0xc18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x80}, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 4m34.804709838s ago: executing program 1 (id=7201): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="4eaa0000003ff41689d2000080000000711051000000006d95000000f90014f75f41f5ed8a9a3bcd69b243000020d90c164cd8b17603bed18ab48e77fcfdec7c2455265183c53e38646aad15e6390d1ce4d9958a2493b8b2e8ddb3b97105a1e18b614e79143a89c3bd7a12e5980823d64358a1fd1b9184fb1250e1b8a8136fa1b4b05f63ead068"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) close(r1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x29, 0x4a9ad633f96cb892, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000f0000000401a80016200a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x844) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x541b, &(0x7f0000000000)) 4m34.403249049s ago: executing program 1 (id=7206): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300)=r3, 0x12) write$cgroup_freezer_state(r1, &(0x7f00000004c0)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 4m18.501370223s ago: executing program 33 (id=7206): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300)=r3, 0x12) write$cgroup_freezer_state(r1, &(0x7f00000004c0)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 17.634949499s ago: executing program 0 (id=9861): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$inet(r3, 0x0, 0x50010) r4 = socket$kcm(0xa, 0x1, 0x0) r5 = socket$kcm(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r5], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) 17.207634463s ago: executing program 0 (id=9865): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={0x0, 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="934300"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x22a00, 0x0) 16.854164359s ago: executing program 0 (id=9873): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4185, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x44) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4821a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0, 0x8}, 0x8000, 0x3, 0x0, 0xf17b17cb08554aef, 0x7, 0xfffffffd, 0xfffe}, 0x0, 0x2000000000000001, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socket$kcm(0x2b, 0x1, 0x0) 16.691109345s ago: executing program 5 (id=9876): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x20000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0xd, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="720ac4ff000000007110c600000000009500000000000000"], &(0x7f00000009c0)='GPL\x00'}, 0x80) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0b", 0x40}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed", 0x1e}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) 16.504374405s ago: executing program 0 (id=9878): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz0\x00', 0x1ff) 16.404420035s ago: executing program 5 (id=9879): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x5) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x300, 0x808e}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xf0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 15.86618929s ago: executing program 4 (id=9884): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4185, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x44) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4821a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0, 0x8}, 0x8000, 0x3, 0x0, 0xf17b17cb08554aef, 0x7, 0xfffffffd, 0xfffe}, 0x0, 0x2000000000000001, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socket$kcm(0x2b, 0x1, 0x0) 15.805197036s ago: executing program 2 (id=9885): socket$kcm(0x11, 0x6, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb1e67bce340dd99e45bcdcadc74f805a09abbf42c5735c0c0bfeb02c6eba50461c506405541b1d81412f4d6e0409c", 0x5d}, {&(0x7f0000001b40)="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", 0x44c}], 0x2}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fec1123a0b09cc7e0dc3f5a9429f67002f742e5bede8832b0b7f1f4eed5e3f01ceb7ace2806a3f4d63282bdb3fe486b407e80f9295666de3f31e9cecc5ee7cf654e0e3279fe27f1e540d16901b4071c379362435ed245422", 0x59}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {&(0x7f0000000200)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000040)="df3b46a13300"/16, 0x10}, {&(0x7f0000001480)="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", 0xeb6}], 0x5}, 0x40000) 15.790341338s ago: executing program 0 (id=9886): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 15.637414383s ago: executing program 6 (id=9887): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xffffffffffffffff, 0xc}, 0x2000, 0x0, 0x0, 0x8, 0x80000000003fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0x5}, 0x101008, 0x0, 0x0, 0x5, 0x6, 0x6, 0x6, 0x0, 0x0, 0x0, 0x402200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x10890, 0x80000002, 0xfffffffe, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000b00)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000b80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000840)=ANY=[], 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) 15.579655089s ago: executing program 2 (id=9888): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4185, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x44) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4821a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0, 0x8}, 0x8000, 0x3, 0x0, 0xf17b17cb08554aef, 0x7, 0xfffffffd, 0xfffe}, 0x0, 0x2000000000000001, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socket$kcm(0x2b, 0x1, 0x0) 15.255348962s ago: executing program 2 (id=9890): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x20000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0xd, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="720ac4ff000000007110c600000000009500000000000000"], &(0x7f00000009c0)='GPL\x00'}, 0x80) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0b", 0x40}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed", 0x1e}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) 15.255083422s ago: executing program 4 (id=9891): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 15.185828019s ago: executing program 6 (id=9892): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4185, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x44) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4821a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0, 0x8}, 0x8000, 0x3, 0x0, 0xf17b17cb08554aef, 0x7, 0xfffffffd, 0xfffe}, 0x0, 0x2000000000000001, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socket$kcm(0x2b, 0x1, 0x0) 15.100573568s ago: executing program 4 (id=9893): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2100, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x21, &(0x7f0000000440), 0x20) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2, 0x7, 0x0, 0x0, 0x0, 0x200, 0x40082, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0xb, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x80000000004, 0xffffffffffffffff, 0x9) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(r2, &(0x7f0000000980)=ANY=[@ANYRES8], 0x9a) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000500)={'veth1_macvtap\x00', @random="000500004ec6"}) 15.026224496s ago: executing program 5 (id=9894): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000540)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffefffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 14.798835239s ago: executing program 4 (id=9895): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x9, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x4554, 0x1, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xd0}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2d}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 14.713445798s ago: executing program 6 (id=9896): socket$kcm(0xa, 0x922000000003, 0x11) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0xcabb, 0x40}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000006000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c300dc470000000095"], &(0x7f0000000440)='GPL\x00', 0x5, 0xaf, &(0x7f00000006c0)=""/235}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r0, 0x8943, 0x0) 14.712929968s ago: executing program 5 (id=9897): socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x4, 0x19, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xf0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 14.697727309s ago: executing program 2 (id=9898): perf_event_open(&(0x7f0000002f80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000023c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000380)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f00000003c0)='GPL\x00'}, 0x80) close(r0) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x4d, 0x0, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 14.637066175s ago: executing program 4 (id=9899): socket$kcm(0x11, 0x6, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb1e67bce340dd99e45bcdcadc74f805a09abbf42c5735c0c0bfeb02c6eba50461c506405541b1d81412f4d6e0409c", 0x5d}, {&(0x7f0000001b40)="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", 0x44c}], 0x2}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fec1123a0b09cc7e0dc3f5a9429f67002f742e5bede8832b0b7f1f4eed5e3f01ceb7ace2806a3f4d63282bdb3fe486b407e80f9295666de3f31e9cecc5ee7cf654e0e3279fe27f1e540d16901b4071c379362435ed245422", 0x59}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f525c24533658551c3091cb88d3b", 0x4f}, {&(0x7f0000000200)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000040)="df3b46a13300"/16, 0x10}, {&(0x7f0000001480)="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", 0xeb6}], 0x5}, 0x40000) 14.580303131s ago: executing program 6 (id=9900): socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x1e, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x8, &(0x7f00000008c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x4080) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0xe, 0x0, &(0x7f0000000580)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.566776713s ago: executing program 2 (id=9901): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4185, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x44) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4821a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0, 0x8}, 0x8000, 0x3, 0x0, 0xf17b17cb08554aef, 0x7, 0xfffffffd, 0xfffe}, 0x0, 0x2000000000000001, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socket$kcm(0x2b, 0x1, 0x0) 159.697814ms ago: executing program 34 (id=9886): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 157.512994ms ago: executing program 2 (id=9903): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xffffffffffffffff, 0xc}, 0x2000, 0x0, 0x0, 0x8, 0x80000000003fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0x5}, 0x101008, 0x0, 0x0, 0x5, 0x6, 0x6, 0x6, 0x0, 0x0, 0x0, 0x402200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x10890, 0x80000002, 0xfffffffe, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000b00)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000b80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000840)=ANY=[], 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) 156.784804ms ago: executing program 5 (id=9904): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 156.525264ms ago: executing program 4 (id=9905): close(0xffffffffffffffff) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000006c0)='GPL\x00'}, 0x94) r0 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x894c, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xf2ee, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x2, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 155.297024ms ago: executing program 6 (id=9912): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x2, 0x4, 0x4, 0x1, 0x1014}, 0x50) close(0x3) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x2, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 40.483876ms ago: executing program 5 (id=9906): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4185, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x44) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4821a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0, 0x8}, 0x8000, 0x3, 0x0, 0xf17b17cb08554aef, 0x7, 0xfffffffd, 0xfffe}, 0x0, 0x2000000000000001, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socket$kcm(0x2b, 0x1, 0x0) 0s ago: executing program 6 (id=9907): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000540)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffefffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) kernel console output (not intermixed with test programs): et to 825 [ 1403.235420][T23814] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1403.254996][T23814] syzkaller1: linktype set to 24 [ 1403.273495][T23818] netlink: 'syz.5.7459': attribute type 10 has an invalid length. [ 1403.282557][T23818] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7459'. [ 1403.295473][T23818] device bond0 entered promiscuous mode [ 1403.318394][T23818] device bond_slave_0 entered promiscuous mode [ 1403.336883][T23818] device bond_slave_1 entered promiscuous mode [ 1403.349034][T23818] device wlan1 entered promiscuous mode [ 1403.357593][T23818] bridge0: port 2(bond0) entered blocking state [ 1403.370680][T23818] bridge0: port 2(bond0) entered disabled state [ 1403.405112][T23818] bridge0: port 2(bond0) entered blocking state [ 1403.411971][T23818] bridge0: port 2(bond0) entered forwarding state [ 1403.474071][T23826] netlink: 'syz.6.7462': attribute type 13 has an invalid length. [ 1403.509139][T23826] netlink: 14581 bytes leftover after parsing attributes in process `syz.6.7462'. [ 1403.679984][T23835] netlink: 'syz.4.7464': attribute type 4 has an invalid length. [ 1403.708260][T23835] netlink: 'syz.4.7464': attribute type 1 has an invalid length. [ 1403.726100][T23835] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.7464'. [ 1404.013905][T23850] validate_nla: 3 callbacks suppressed [ 1404.013941][T23850] netlink: 'syz.2.7480': attribute type 13 has an invalid length. [ 1404.036903][T23850] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.7480'. [ 1404.425607][T23858] netlink: 'syz.2.7474': attribute type 10 has an invalid length. [ 1404.571720][T23865] netlink: 'syz.4.7477': attribute type 10 has an invalid length. [ 1404.613596][T23865] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7477'. [ 1404.653518][T23865] device bond0 entered promiscuous mode [ 1404.675924][T23865] bridge0: port 4(bond0) entered blocking state [ 1404.691138][T23865] bridge0: port 4(bond0) entered disabled state [ 1405.351134][T23879] netlink: 'syz.0.7482': attribute type 29 has an invalid length. [ 1405.395315][T23879] netlink: 'syz.0.7482': attribute type 29 has an invalid length. [ 1405.464892][T23879] netlink: 'syz.0.7482': attribute type 29 has an invalid length. [ 1405.762708][T23897] netlink: 'syz.5.7490': attribute type 10 has an invalid length. [ 1405.809291][T23895] netlink: 'syz.4.7487': attribute type 13 has an invalid length. [ 1405.817519][T23895] netlink: 14581 bytes leftover after parsing attributes in process `syz.4.7487'. [ 1405.913190][T23901] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.7492'. [ 1405.954598][T23901] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1406.045540][T23903] netlink: 'syz.2.7493': attribute type 10 has an invalid length. [ 1406.063446][T23903] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7493'. [ 1406.080639][T23903] bridge0: port 2(bond0) entered blocking state [ 1406.092856][T23903] bridge0: port 2(bond0) entered disabled state [ 1406.131398][T23906] netlink: 'syz.5.7494': attribute type 10 has an invalid length. [ 1406.463458][T23907] rxe_eth0 speed is unknown, defaulting to 1000 [ 1407.756251][T23941] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.7504'. [ 1410.207708][T23931] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.7501'. [ 1410.307573][T23933] validate_nla: 1 callbacks suppressed [ 1410.307610][T23933] netlink: 'syz.5.7502': attribute type 29 has an invalid length. [ 1410.327338][T23935] netlink: 'syz.5.7502': attribute type 29 has an invalid length. [ 1410.512005][T23949] netlink: 'syz.4.7506': attribute type 10 has an invalid length. [ 1410.684858][T23956] bridge0: port 4(batadv0) entered blocking state [ 1410.727893][T23956] bridge0: port 4(batadv0) entered disabled state [ 1410.757346][T23956] device batadv0 entered promiscuous mode [ 1410.766241][T23956] bridge0: port 4(batadv0) entered blocking state [ 1410.772820][T23956] bridge0: port 4(batadv0) entered forwarding state [ 1411.093023][T13411] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1411.102836][T13411] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1411.170664][T23973] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.7519'. [ 1412.201552][T23992] netlink: 'syz.2.7521': attribute type 29 has an invalid length. [ 1412.246090][T23992] netlink: 'syz.2.7521': attribute type 29 has an invalid length. [ 1412.286581][T23992] netlink: 'syz.2.7521': attribute type 29 has an invalid length. [ 1413.073620][T24013] bridge0: port 4(batadv0) entered blocking state [ 1413.084063][T24013] bridge0: port 4(batadv0) entered disabled state [ 1413.093008][T24013] device batadv0 entered promiscuous mode [ 1413.102810][T24013] bridge0: port 4(batadv0) entered blocking state [ 1413.109407][T24013] bridge0: port 4(batadv0) entered forwarding state [ 1413.180945][ T48] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1413.190314][ T48] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1416.041261][T24023] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.7534'. [ 1416.895934][T24030] netlink: 'syz.4.7540': attribute type 29 has an invalid length. [ 1416.918807][T24030] netlink: 'syz.4.7540': attribute type 29 has an invalid length. [ 1416.933605][T24032] netlink: 65185 bytes leftover after parsing attributes in process `syz.5.7551'. [ 1416.960379][T24030] netlink: 'syz.4.7540': attribute type 29 has an invalid length. [ 1417.001360][T24034] netlink: 'syz.2.7541': attribute type 4 has an invalid length. [ 1417.050834][T24034] netlink: 'syz.2.7541': attribute type 1 has an invalid length. [ 1417.112362][T24034] netlink: 'syz.2.7541': attribute type 1 has an invalid length. [ 1417.163469][T24034] netlink: 'syz.2.7541': attribute type 4 has an invalid length. [ 1417.233648][T24034] netlink: 'syz.2.7541': attribute type 26 has an invalid length. [ 1417.288524][T24034] netlink: 60519 bytes leftover after parsing attributes in process `syz.2.7541'. [ 1418.282526][T24062] netlink: 'syz.5.7546': attribute type 7 has an invalid length. [ 1418.403631][T24066] netlink: 'syz.2.7548': attribute type 15 has an invalid length. [ 1418.430546][T24066] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.7548'. [ 1418.490659][T24073] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.7555'. [ 1418.595270][T24074] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.7552'. [ 1418.856519][T24068] rxe_eth0 speed is unknown, defaulting to 1000 [ 1419.238668][T24081] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7556'. [ 1419.395130][T24081] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1419.424741][T24081] CPU: 1 PID: 24081 Comm: syz.2.7556 Not tainted syzkaller #0 [ 1419.432263][T24081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1419.442340][T24081] Call Trace: [ 1419.445641][T24081] [ 1419.448594][T24081] dump_stack_lvl+0x188/0x24e [ 1419.453308][T24081] ? show_regs_print_info+0x12/0x12 [ 1419.458539][T24081] ? load_image+0x410/0x410 [ 1419.463084][T24081] sysfs_warn_dup+0x8a/0xa0 [ 1419.467625][T24081] sysfs_do_create_link_sd+0xc0/0x110 [ 1419.473036][T24081] device_add+0x83b/0x1050 [ 1419.477489][T24081] wiphy_register+0x1f16/0x2c50 [ 1419.482393][T24081] ? cfg80211_event_work+0x40/0x40 [ 1419.487535][T24081] ? minstrel_ht_alloc+0x894/0xa20 [ 1419.492682][T24081] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1419.498779][T24081] ieee80211_register_hw+0x2e33/0x3b00 [ 1419.504277][T24081] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1419.510472][T24081] ? ieee80211_register_hw+0xec1/0x3b00 [ 1419.516048][T24081] ? ieee80211_register_hw+0xec1/0x3b00 [ 1419.521635][T24081] ? ieee80211_tasklet_handler+0x20/0x20 [ 1419.527297][T24081] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1419.533222][T24081] ? __debug_object_init+0xed/0x440 [ 1419.538456][T24081] ? memset+0x1e/0x40 [ 1419.542456][T24081] ? __hrtimer_init+0x189/0x270 [ 1419.547330][T24081] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1419.553084][T24081] ? memcpy+0x3c/0x60 [ 1419.557092][T24081] hwsim_new_radio_nl+0xab7/0xc90 [ 1419.562157][T24081] genl_family_rcv_msg_doit+0x22f/0x350 [ 1419.567735][T24081] ? end_current_label_crit_section+0x170/0x170 [ 1419.574012][T24081] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1419.579939][T24081] ? bpf_lsm_capable+0x5/0x10 [ 1419.584645][T24081] ? security_capable+0x85/0xb0 [ 1419.589533][T24081] genl_rcv_msg+0x601/0x790 [ 1419.594074][T24081] ? genl_bind+0x360/0x360 [ 1419.598514][T24081] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1419.604870][T24081] netlink_rcv_skb+0x1ef/0x440 [ 1419.609640][T24081] ? genl_bind+0x360/0x360 [ 1419.614116][T24081] ? netlink_ack+0x1160/0x1160 [ 1419.618929][T24081] ? down_read+0x1a8/0x2d0 [ 1419.623372][T24081] genl_rcv+0x24/0x40 [ 1419.627383][T24081] netlink_unicast+0x7ad/0x920 [ 1419.632183][T24081] netlink_sendmsg+0x8ad/0xbd0 [ 1419.636986][T24081] ? netlink_getsockopt+0x550/0x550 [ 1419.642228][T24081] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1419.647812][T24081] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1419.653166][T24081] ? security_socket_sendmsg+0x7c/0xa0 [ 1419.658661][T24081] ? netlink_getsockopt+0x550/0x550 [ 1419.663892][T24081] ____sys_sendmsg+0x5ed/0x9a0 [ 1419.668705][T24081] ? __sys_sendmsg_sock+0x30/0x30 [ 1419.673765][T24081] ? __import_iovec+0x306/0x510 [ 1419.678668][T24081] ? import_iovec+0x6f/0xa0 [ 1419.683203][T24081] ___sys_sendmsg+0x2a2/0x360 [ 1419.687909][T24081] ? migrate_enable+0x148/0x220 [ 1419.692799][T24081] ? __sys_sendmsg+0x2a0/0x2a0 [ 1419.697644][T24081] __se_sys_sendmsg+0x1c3/0x2b0 [ 1419.702525][T24081] ? __x64_sys_sendmsg+0x80/0x80 [ 1419.707506][T24081] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1419.713425][T24081] do_syscall_64+0x4c/0xa0 [ 1419.717867][T24081] ? clear_bhb_loop+0x60/0xb0 [ 1419.722574][T24081] ? clear_bhb_loop+0x60/0xb0 [ 1419.727281][T24081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1419.733199][T24081] RIP: 0033:0x7feade99fb19 [ 1419.737641][T24081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1419.757272][T24081] RSP: 002b:00007feadf786028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1419.765721][T24081] RAX: ffffffffffffffda RBX: 00007feadec25fa0 RCX: 00007feade99fb19 [ 1419.773719][T24081] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1419.781716][T24081] RBP: 00007feadea37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1419.789707][T24081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1419.797704][T24081] R13: 00007feadec26038 R14: 00007feadec25fa0 R15: 00007ffdbf7f0d98 [ 1419.805719][T24081] [ 1420.263940][T24097] netlink: 14581 bytes leftover after parsing attributes in process `syz.5.7569'. [ 1421.512710][T24133] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7572'. [ 1421.563862][T24131] netlink: 14581 bytes leftover after parsing attributes in process `syz.6.7573'. [ 1421.616480][T24133] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1421.648191][T24133] CPU: 1 PID: 24133 Comm: syz.4.7572 Not tainted syzkaller #0 [ 1421.655710][T24133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1421.665790][T24133] Call Trace: [ 1421.669085][T24133] [ 1421.672035][T24133] dump_stack_lvl+0x188/0x24e [ 1421.676750][T24133] ? show_regs_print_info+0x12/0x12 [ 1421.682240][T24133] ? load_image+0x410/0x410 [ 1421.686781][T24133] sysfs_warn_dup+0x8a/0xa0 [ 1421.691313][T24133] sysfs_do_create_link_sd+0xc0/0x110 [ 1421.696718][T24133] device_add+0x83b/0x1050 [ 1421.701165][T24133] wiphy_register+0x1f16/0x2c50 [ 1421.706063][T24133] ? cfg80211_event_work+0x40/0x40 [ 1421.711203][T24133] ? minstrel_ht_alloc+0x894/0xa20 [ 1421.716356][T24133] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1421.722454][T24133] ieee80211_register_hw+0x2e33/0x3b00 [ 1421.727963][T24133] ? ieee80211_register_hw+0xec1/0x3b00 [ 1421.733541][T24133] ? ieee80211_register_hw+0xec1/0x3b00 [ 1421.739138][T24133] ? ieee80211_tasklet_handler+0x20/0x20 [ 1421.744790][T24133] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1421.750693][T24133] ? __debug_object_init+0xed/0x440 [ 1421.755902][T24133] ? memset+0x1e/0x40 [ 1421.759889][T24133] ? __hrtimer_init+0x189/0x270 [ 1421.764740][T24133] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1421.770466][T24133] ? memcpy+0x3c/0x60 [ 1421.774451][T24133] hwsim_new_radio_nl+0xab7/0xc90 [ 1421.779489][T24133] genl_family_rcv_msg_doit+0x22f/0x350 [ 1421.785039][T24133] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1421.790956][T24133] ? bpf_lsm_capable+0x5/0x10 [ 1421.795644][T24133] ? security_capable+0x85/0xb0 [ 1421.800507][T24133] genl_rcv_msg+0x601/0x790 [ 1421.805027][T24133] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1421.811196][T24133] ? genl_bind+0x360/0x360 [ 1421.815614][T24133] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1421.821951][T24133] ? lock_acquire+0x226/0x4a0 [ 1421.826636][T24133] netlink_rcv_skb+0x1ef/0x440 [ 1421.831401][T24133] ? genl_bind+0x360/0x360 [ 1421.835817][T24133] ? netlink_ack+0x1160/0x1160 [ 1421.840586][T24133] ? down_read+0x1a8/0x2d0 [ 1421.844997][T24133] genl_rcv+0x24/0x40 [ 1421.848989][T24133] netlink_unicast+0x7ad/0x920 [ 1421.853760][T24133] netlink_sendmsg+0x8ad/0xbd0 [ 1421.858531][T24133] ? netlink_getsockopt+0x550/0x550 [ 1421.863731][T24133] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1421.869276][T24133] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1421.874557][T24133] ? security_socket_sendmsg+0x7c/0xa0 [ 1421.880043][T24133] ? netlink_getsockopt+0x550/0x550 [ 1421.885242][T24133] ____sys_sendmsg+0x5ed/0x9a0 [ 1421.890018][T24133] ? __sys_sendmsg_sock+0x30/0x30 [ 1421.895043][T24133] ? __import_iovec+0x306/0x510 [ 1421.899897][T24133] ? import_iovec+0x6f/0xa0 [ 1421.904401][T24133] ___sys_sendmsg+0x2a2/0x360 [ 1421.909088][T24133] ? __sys_sendmsg+0x2a0/0x2a0 [ 1421.913927][T24133] __se_sys_sendmsg+0x1c3/0x2b0 [ 1421.918773][T24133] ? ct_nmi_exit+0x145/0x1c0 [ 1421.923359][T24133] ? __x64_sys_sendmsg+0x80/0x80 [ 1421.928311][T24133] ? lockdep_hardirqs_on+0x94/0x140 [ 1421.933508][T24133] do_syscall_64+0x4c/0xa0 [ 1421.937925][T24133] ? clear_bhb_loop+0x60/0xb0 [ 1421.942610][T24133] ? clear_bhb_loop+0x60/0xb0 [ 1421.947295][T24133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1421.953189][T24133] RIP: 0033:0x7f77ce59fb19 [ 1421.957598][T24133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1421.977200][T24133] RSP: 002b:00007f77cf3db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1421.985608][T24133] RAX: ffffffffffffffda RBX: 00007f77ce825fa0 RCX: 00007f77ce59fb19 [ 1421.993574][T24133] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1422.001539][T24133] RBP: 00007f77ce637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1422.009503][T24133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1422.017465][T24133] R13: 00007f77ce826038 R14: 00007f77ce825fa0 R15: 00007ffe1d7ceb38 [ 1422.025443][T24133] [ 1422.212224][T24136] rxe_eth0 speed is unknown, defaulting to 1000 [ 1422.990095][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.996528][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.405429][T24202] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7591'. [ 1426.526530][T24202] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1426.585811][T24202] CPU: 1 PID: 24202 Comm: syz.0.7591 Not tainted syzkaller #0 [ 1426.593331][T24202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1426.603413][T24202] Call Trace: [ 1426.606709][T24202] [ 1426.609656][T24202] dump_stack_lvl+0x188/0x24e [ 1426.614371][T24202] ? show_regs_print_info+0x12/0x12 [ 1426.619603][T24202] ? load_image+0x410/0x410 [ 1426.624146][T24202] sysfs_warn_dup+0x8a/0xa0 [ 1426.628676][T24202] sysfs_do_create_link_sd+0xc0/0x110 [ 1426.634062][T24202] device_add+0x83b/0x1050 [ 1426.638496][T24202] wiphy_register+0x1f16/0x2c50 [ 1426.643373][T24202] ? cfg80211_event_work+0x40/0x40 [ 1426.648492][T24202] ? minstrel_ht_alloc+0x894/0xa20 [ 1426.653610][T24202] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1426.659683][T24202] ieee80211_register_hw+0x2e33/0x3b00 [ 1426.665160][T24202] ? ieee80211_register_hw+0xec1/0x3b00 [ 1426.670704][T24202] ? ieee80211_register_hw+0xec1/0x3b00 [ 1426.676263][T24202] ? ieee80211_tasklet_handler+0x20/0x20 [ 1426.681907][T24202] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1426.687811][T24202] ? __debug_object_init+0xed/0x440 [ 1426.693011][T24202] ? memset+0x1e/0x40 [ 1426.696987][T24202] ? __hrtimer_init+0x189/0x270 [ 1426.701843][T24202] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1426.707570][T24202] ? memcpy+0x3c/0x60 [ 1426.711550][T24202] hwsim_new_radio_nl+0xab7/0xc90 [ 1426.716587][T24202] genl_family_rcv_msg_doit+0x22f/0x350 [ 1426.722132][T24202] ? end_current_label_crit_section+0x170/0x170 [ 1426.728378][T24202] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1426.734283][T24202] ? bpf_lsm_capable+0x5/0x10 [ 1426.738955][T24202] ? security_capable+0x85/0xb0 [ 1426.743811][T24202] genl_rcv_msg+0x601/0x790 [ 1426.748321][T24202] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1426.754480][T24202] ? genl_bind+0x360/0x360 [ 1426.758896][T24202] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1426.765227][T24202] ? lock_acquire+0x226/0x4a0 [ 1426.769906][T24202] netlink_rcv_skb+0x1ef/0x440 [ 1426.774670][T24202] ? genl_bind+0x360/0x360 [ 1426.779092][T24202] ? netlink_ack+0x1160/0x1160 [ 1426.783864][T24202] ? down_read+0x1a8/0x2d0 [ 1426.788281][T24202] genl_rcv+0x24/0x40 [ 1426.792260][T24202] netlink_unicast+0x7ad/0x920 [ 1426.797032][T24202] netlink_sendmsg+0x8ad/0xbd0 [ 1426.801800][T24202] ? netlink_getsockopt+0x550/0x550 [ 1426.806999][T24202] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1426.812541][T24202] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1426.817822][T24202] ? security_socket_sendmsg+0x7c/0xa0 [ 1426.823285][T24202] ? netlink_getsockopt+0x550/0x550 [ 1426.828483][T24202] ____sys_sendmsg+0x5ed/0x9a0 [ 1426.833260][T24202] ? __sys_sendmsg_sock+0x30/0x30 [ 1426.838280][T24202] ? __import_iovec+0x306/0x510 [ 1426.843144][T24202] ? import_iovec+0x6f/0xa0 [ 1426.847655][T24202] ___sys_sendmsg+0x2a2/0x360 [ 1426.852337][T24202] ? __sys_sendmsg+0x2a0/0x2a0 [ 1426.857123][T24202] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1426.862863][T24202] __se_sys_sendmsg+0x1c3/0x2b0 [ 1426.867720][T24202] ? __x64_sys_sendmsg+0x80/0x80 [ 1426.872670][T24202] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1426.878565][T24202] do_syscall_64+0x4c/0xa0 [ 1426.882982][T24202] ? clear_bhb_loop+0x60/0xb0 [ 1426.887659][T24202] ? clear_bhb_loop+0x60/0xb0 [ 1426.892333][T24202] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1426.898224][T24202] RIP: 0033:0x7effbc39fb19 [ 1426.902635][T24202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1426.922237][T24202] RSP: 002b:00007effbd233028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1426.930654][T24202] RAX: ffffffffffffffda RBX: 00007effbc625fa0 RCX: 00007effbc39fb19 [ 1426.938626][T24202] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1426.946595][T24202] RBP: 00007effbc437b70 R08: 0000000000000000 R09: 0000000000000000 [ 1426.954563][T24202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1426.962528][T24202] R13: 00007effbc626038 R14: 00007effbc625fa0 R15: 00007ffe03730a18 [ 1426.970511][T24202] [ 1427.304869][T24214] validate_nla: 4 callbacks suppressed [ 1427.304911][T24214] netlink: 'syz.2.7600': attribute type 10 has an invalid length. [ 1430.848856][T24240] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7611'. [ 1430.963132][T24240] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1431.002981][T24240] CPU: 0 PID: 24240 Comm: syz.4.7611 Not tainted syzkaller #0 [ 1431.010496][T24240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1431.020553][T24240] Call Trace: [ 1431.023831][T24240] [ 1431.026758][T24240] dump_stack_lvl+0x188/0x24e [ 1431.031445][T24240] ? show_regs_print_info+0x12/0x12 [ 1431.036648][T24240] ? load_image+0x410/0x410 [ 1431.041163][T24240] sysfs_warn_dup+0x8a/0xa0 [ 1431.045670][T24240] sysfs_do_create_link_sd+0xc0/0x110 [ 1431.051044][T24240] device_add+0x83b/0x1050 [ 1431.055460][T24240] wiphy_register+0x1f16/0x2c50 [ 1431.060320][T24240] ? cfg80211_event_work+0x40/0x40 [ 1431.065430][T24240] ? minstrel_ht_alloc+0x894/0xa20 [ 1431.070546][T24240] ? ieee80211_init_rate_ctrl_alg+0x404/0x5e0 [ 1431.076611][T24240] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1431.082672][T24240] ieee80211_register_hw+0x2e33/0x3b00 [ 1431.088274][T24240] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1431.094442][T24240] ? ieee80211_register_hw+0xec1/0x3b00 [ 1431.100015][T24240] ? ieee80211_register_hw+0xec1/0x3b00 [ 1431.105565][T24240] ? ieee80211_tasklet_handler+0x20/0x20 [ 1431.111199][T24240] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1431.117122][T24240] ? __debug_object_init+0xed/0x440 [ 1431.122320][T24240] ? memset+0x1e/0x40 [ 1431.126300][T24240] ? __hrtimer_init+0x189/0x270 [ 1431.131148][T24240] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1431.136900][T24240] ? memcpy+0x3c/0x60 [ 1431.140909][T24240] hwsim_new_radio_nl+0xab7/0xc90 [ 1431.145955][T24240] genl_family_rcv_msg_doit+0x22f/0x350 [ 1431.151529][T24240] ? end_current_label_crit_section+0x170/0x170 [ 1431.157788][T24240] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1431.163701][T24240] ? bpf_lsm_capable+0x5/0x10 [ 1431.168380][T24240] ? security_capable+0x85/0xb0 [ 1431.173238][T24240] genl_rcv_msg+0x601/0x790 [ 1431.177748][T24240] ? genl_bind+0x360/0x360 [ 1431.182162][T24240] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1431.188505][T24240] netlink_rcv_skb+0x1ef/0x440 [ 1431.193267][T24240] ? genl_bind+0x360/0x360 [ 1431.197686][T24240] ? netlink_ack+0x1160/0x1160 [ 1431.202455][T24240] ? down_read+0x1a8/0x2d0 [ 1431.206863][T24240] genl_rcv+0x24/0x40 [ 1431.210841][T24240] netlink_unicast+0x7ad/0x920 [ 1431.215638][T24240] netlink_sendmsg+0x8ad/0xbd0 [ 1431.220408][T24240] ? netlink_getsockopt+0x550/0x550 [ 1431.225630][T24240] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1431.231178][T24240] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1431.236458][T24240] ? security_socket_sendmsg+0x7c/0xa0 [ 1431.241909][T24240] ? netlink_getsockopt+0x550/0x550 [ 1431.247107][T24240] ____sys_sendmsg+0x5ed/0x9a0 [ 1431.251882][T24240] ? __sys_sendmsg_sock+0x30/0x30 [ 1431.256910][T24240] ? __import_iovec+0x306/0x510 [ 1431.261766][T24240] ? import_iovec+0x6f/0xa0 [ 1431.266267][T24240] ___sys_sendmsg+0x2a2/0x360 [ 1431.270942][T24240] ? __sys_sendmsg+0x2a0/0x2a0 [ 1431.275743][T24240] __se_sys_sendmsg+0x1c3/0x2b0 [ 1431.280591][T24240] ? __x64_sys_sendmsg+0x80/0x80 [ 1431.285540][T24240] do_syscall_64+0x4c/0xa0 [ 1431.289951][T24240] ? clear_bhb_loop+0x60/0xb0 [ 1431.294634][T24240] ? clear_bhb_loop+0x60/0xb0 [ 1431.299313][T24240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1431.305204][T24240] RIP: 0033:0x7f77ce59fb19 [ 1431.309611][T24240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1431.329209][T24240] RSP: 002b:00007f77cf3db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1431.337624][T24240] RAX: ffffffffffffffda RBX: 00007f77ce825fa0 RCX: 00007f77ce59fb19 [ 1431.345606][T24240] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1431.353567][T24240] RBP: 00007f77ce637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1431.361528][T24240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1431.369488][T24240] R13: 00007f77ce826038 R14: 00007f77ce825fa0 R15: 00007ffe1d7ceb38 [ 1431.377463][T24240] [ 1431.793209][T24262] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.7619'. [ 1432.920333][T24289] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7628'. [ 1432.980245][T24289] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1432.996471][T24289] CPU: 0 PID: 24289 Comm: syz.2.7628 Not tainted syzkaller #0 [ 1433.003989][T24289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1433.014071][T24289] Call Trace: [ 1433.017368][T24289] [ 1433.020317][T24289] dump_stack_lvl+0x188/0x24e [ 1433.025033][T24289] ? show_regs_print_info+0x12/0x12 [ 1433.030266][T24289] ? load_image+0x410/0x410 [ 1433.034814][T24289] sysfs_warn_dup+0x8a/0xa0 [ 1433.039353][T24289] sysfs_do_create_link_sd+0xc0/0x110 [ 1433.044765][T24289] device_add+0x83b/0x1050 [ 1433.049221][T24289] wiphy_register+0x1f16/0x2c50 [ 1433.054126][T24289] ? cfg80211_event_work+0x40/0x40 [ 1433.059274][T24289] ? minstrel_ht_alloc+0x894/0xa20 [ 1433.064428][T24289] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1433.070520][T24289] ieee80211_register_hw+0x2e33/0x3b00 [ 1433.076003][T24289] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1433.082186][T24289] ? ieee80211_register_hw+0xec1/0x3b00 [ 1433.087753][T24289] ? ieee80211_register_hw+0xec1/0x3b00 [ 1433.093325][T24289] ? ieee80211_tasklet_handler+0x20/0x20 [ 1433.098973][T24289] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1433.104891][T24289] ? __debug_object_init+0xed/0x440 [ 1433.110118][T24289] ? memset+0x1e/0x40 [ 1433.114111][T24289] ? __hrtimer_init+0x189/0x270 [ 1433.118976][T24289] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1433.124724][T24289] ? memcpy+0x3c/0x60 [ 1433.128722][T24289] hwsim_new_radio_nl+0xab7/0xc90 [ 1433.134034][T24289] genl_family_rcv_msg_doit+0x22f/0x350 [ 1433.139597][T24289] ? end_current_label_crit_section+0x170/0x170 [ 1433.145852][T24289] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1433.151770][T24289] ? bpf_lsm_capable+0x5/0x10 [ 1433.156458][T24289] ? security_capable+0x85/0xb0 [ 1433.161328][T24289] genl_rcv_msg+0x601/0x790 [ 1433.165863][T24289] ? genl_bind+0x360/0x360 [ 1433.170288][T24289] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1433.176646][T24289] netlink_rcv_skb+0x1ef/0x440 [ 1433.181425][T24289] ? genl_bind+0x360/0x360 [ 1433.185857][T24289] ? netlink_ack+0x1160/0x1160 [ 1433.190643][T24289] ? down_read+0x1a8/0x2d0 [ 1433.195072][T24289] genl_rcv+0x24/0x40 [ 1433.199071][T24289] netlink_unicast+0x7ad/0x920 [ 1433.203866][T24289] netlink_sendmsg+0x8ad/0xbd0 [ 1433.208651][T24289] ? netlink_getsockopt+0x550/0x550 [ 1433.213865][T24289] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1433.219422][T24289] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1433.224712][T24289] ? security_socket_sendmsg+0x7c/0xa0 [ 1433.230178][T24289] ? netlink_getsockopt+0x550/0x550 [ 1433.235391][T24289] ____sys_sendmsg+0x5ed/0x9a0 [ 1433.240178][T24289] ? __sys_sendmsg_sock+0x30/0x30 [ 1433.245214][T24289] ? __import_iovec+0x306/0x510 [ 1433.250087][T24289] ? import_iovec+0x6f/0xa0 [ 1433.254607][T24289] ___sys_sendmsg+0x2a2/0x360 [ 1433.259309][T24289] ? __sys_sendmsg+0x2a0/0x2a0 [ 1433.264104][T24289] ? ktime_get+0x7b/0x270 [ 1433.268443][T24289] ? trace_call_bpf+0xbf/0x6b0 [ 1433.273241][T24289] __se_sys_sendmsg+0x1c3/0x2b0 [ 1433.278105][T24289] ? perf_trace_preemptirq_template+0x268/0x320 [ 1433.284357][T24289] ? __x64_sys_sendmsg+0x80/0x80 [ 1433.289321][T24289] ? lockdep_hardirqs_on+0x94/0x140 [ 1433.294540][T24289] do_syscall_64+0x4c/0xa0 [ 1433.298971][T24289] ? clear_bhb_loop+0x60/0xb0 [ 1433.303658][T24289] ? clear_bhb_loop+0x60/0xb0 [ 1433.308348][T24289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1433.314251][T24289] RIP: 0033:0x7feade99fb19 [ 1433.318671][T24289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1433.338282][T24289] RSP: 002b:00007feadf786028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1433.346704][T24289] RAX: ffffffffffffffda RBX: 00007feadec25fa0 RCX: 00007feade99fb19 [ 1433.354683][T24289] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1433.362659][T24289] RBP: 00007feadea37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1433.370636][T24289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1433.378609][T24289] R13: 00007feadec26038 R14: 00007feadec25fa0 R15: 00007ffdbf7f0d98 [ 1433.386601][T24289] [ 1433.810628][T24304] netlink: 'syz.0.7634': attribute type 21 has an invalid length. [ 1433.848477][T24304] netlink: 9618 bytes leftover after parsing attributes in process `syz.0.7634'. [ 1434.072997][T24320] netlink: 'syz.2.7642': attribute type 10 has an invalid length. [ 1434.363601][T24322] rxe_eth0 speed is unknown, defaulting to 1000 [ 1434.890574][T24343] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.7648'. [ 1434.929189][T24343] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1434.984597][T24343] CPU: 1 PID: 24343 Comm: syz.6.7648 Not tainted syzkaller #0 [ 1434.992112][T24343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1435.002176][T24343] Call Trace: [ 1435.005453][T24343] [ 1435.008384][T24343] dump_stack_lvl+0x188/0x24e [ 1435.013071][T24343] ? show_regs_print_info+0x12/0x12 [ 1435.018272][T24343] ? load_image+0x410/0x410 [ 1435.022783][T24343] sysfs_warn_dup+0x8a/0xa0 [ 1435.027313][T24343] sysfs_do_create_link_sd+0xc0/0x110 [ 1435.032691][T24343] device_add+0x83b/0x1050 [ 1435.037113][T24343] wiphy_register+0x1f16/0x2c50 [ 1435.041980][T24343] ? cfg80211_event_work+0x40/0x40 [ 1435.047092][T24343] ? minstrel_ht_alloc+0x894/0xa20 [ 1435.052212][T24343] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1435.058283][T24343] ieee80211_register_hw+0x2e33/0x3b00 [ 1435.063751][T24343] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1435.069915][T24343] ? ieee80211_register_hw+0xec1/0x3b00 [ 1435.075464][T24343] ? ieee80211_register_hw+0xec1/0x3b00 [ 1435.081014][T24343] ? ieee80211_tasklet_handler+0x20/0x20 [ 1435.086643][T24343] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1435.092537][T24343] ? __debug_object_init+0xed/0x440 [ 1435.097739][T24343] ? memset+0x1e/0x40 [ 1435.101717][T24343] ? __hrtimer_init+0x189/0x270 [ 1435.106569][T24343] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1435.112299][T24343] ? memcpy+0x3c/0x60 [ 1435.116281][T24343] hwsim_new_radio_nl+0xab7/0xc90 [ 1435.121319][T24343] genl_family_rcv_msg_doit+0x22f/0x350 [ 1435.126875][T24343] ? end_current_label_crit_section+0x170/0x170 [ 1435.133114][T24343] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1435.139018][T24343] ? bpf_lsm_capable+0x5/0x10 [ 1435.143698][T24343] ? security_capable+0x85/0xb0 [ 1435.148558][T24343] genl_rcv_msg+0x601/0x790 [ 1435.153071][T24343] ? genl_bind+0x360/0x360 [ 1435.157484][T24343] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1435.163819][T24343] ? lock_chain_count+0x20/0x20 [ 1435.168675][T24343] netlink_rcv_skb+0x1ef/0x440 [ 1435.173441][T24343] ? genl_bind+0x360/0x360 [ 1435.177859][T24343] ? netlink_ack+0x1160/0x1160 [ 1435.182631][T24343] ? down_read+0x1a8/0x2d0 [ 1435.187044][T24343] genl_rcv+0x24/0x40 [ 1435.191021][T24343] netlink_unicast+0x7ad/0x920 [ 1435.195794][T24343] netlink_sendmsg+0x8ad/0xbd0 [ 1435.200564][T24343] ? netlink_getsockopt+0x550/0x550 [ 1435.205760][T24343] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1435.211307][T24343] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1435.216597][T24343] ? security_socket_sendmsg+0x7c/0xa0 [ 1435.222051][T24343] ? netlink_getsockopt+0x550/0x550 [ 1435.227285][T24343] ____sys_sendmsg+0x5ed/0x9a0 [ 1435.232055][T24343] ? __sys_sendmsg_sock+0x30/0x30 [ 1435.237074][T24343] ? __import_iovec+0x306/0x510 [ 1435.241932][T24343] ? import_iovec+0x6f/0xa0 [ 1435.246436][T24343] ___sys_sendmsg+0x2a2/0x360 [ 1435.251123][T24343] ? __sys_sendmsg+0x2a0/0x2a0 [ 1435.255904][T24343] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1435.261637][T24343] __se_sys_sendmsg+0x1c3/0x2b0 [ 1435.266488][T24343] ? __x64_sys_sendmsg+0x80/0x80 [ 1435.271439][T24343] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1435.277338][T24343] do_syscall_64+0x4c/0xa0 [ 1435.281757][T24343] ? clear_bhb_loop+0x60/0xb0 [ 1435.286432][T24343] ? clear_bhb_loop+0x60/0xb0 [ 1435.291109][T24343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1435.296998][T24343] RIP: 0033:0x7f74e4d9fb19 [ 1435.301409][T24343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1435.321011][T24343] RSP: 002b:00007f74e2ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1435.329419][T24343] RAX: ffffffffffffffda RBX: 00007f74e5025fa0 RCX: 00007f74e4d9fb19 [ 1435.337385][T24343] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1435.345349][T24343] RBP: 00007f74e4e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1435.353315][T24343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1435.361288][T24343] R13: 00007f74e5026038 R14: 00007f74e5025fa0 R15: 00007ffec1067af8 [ 1435.369280][T24343] [ 1436.246982][T24363] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7666'. [ 1436.275875][T24363] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1436.292420][T24363] CPU: 0 PID: 24363 Comm: syz.0.7666 Not tainted syzkaller #0 [ 1436.299934][T24363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1436.310019][T24363] Call Trace: [ 1436.313320][T24363] [ 1436.316266][T24363] dump_stack_lvl+0x188/0x24e [ 1436.320979][T24363] ? show_regs_print_info+0x12/0x12 [ 1436.326209][T24363] ? load_image+0x410/0x410 [ 1436.330747][T24363] sysfs_warn_dup+0x8a/0xa0 [ 1436.335279][T24363] sysfs_do_create_link_sd+0xc0/0x110 [ 1436.341032][T24363] device_add+0x83b/0x1050 [ 1436.345473][T24363] wiphy_register+0x1f16/0x2c50 [ 1436.350358][T24363] ? cfg80211_event_work+0x40/0x40 [ 1436.355487][T24363] ? minstrel_ht_alloc+0x894/0xa20 [ 1436.360615][T24363] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1436.366686][T24363] ieee80211_register_hw+0x2e33/0x3b00 [ 1436.372159][T24363] ? ieee80211_register_hw+0xec1/0x3b00 [ 1436.377707][T24363] ? ieee80211_register_hw+0xec1/0x3b00 [ 1436.383255][T24363] ? ieee80211_tasklet_handler+0x20/0x20 [ 1436.388887][T24363] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1436.394783][T24363] ? __debug_object_init+0xed/0x440 [ 1436.399987][T24363] ? memset+0x1e/0x40 [ 1436.403969][T24363] ? __hrtimer_init+0x189/0x270 [ 1436.408818][T24363] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1436.414550][T24363] ? memcpy+0x3c/0x60 [ 1436.418533][T24363] hwsim_new_radio_nl+0xab7/0xc90 [ 1436.423567][T24363] genl_family_rcv_msg_doit+0x22f/0x350 [ 1436.429113][T24363] ? end_current_label_crit_section+0x170/0x170 [ 1436.435353][T24363] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1436.441253][T24363] ? bpf_lsm_capable+0x5/0x10 [ 1436.445932][T24363] ? security_capable+0x85/0xb0 [ 1436.450791][T24363] genl_rcv_msg+0x601/0x790 [ 1436.455307][T24363] ? genl_bind+0x360/0x360 [ 1436.459721][T24363] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1436.466060][T24363] netlink_rcv_skb+0x1ef/0x440 [ 1436.470823][T24363] ? genl_bind+0x360/0x360 [ 1436.475244][T24363] ? netlink_ack+0x1160/0x1160 [ 1436.480014][T24363] ? down_read+0x1a8/0x2d0 [ 1436.484426][T24363] genl_rcv+0x24/0x40 [ 1436.488406][T24363] netlink_unicast+0x7ad/0x920 [ 1436.493176][T24363] netlink_sendmsg+0x8ad/0xbd0 [ 1436.497943][T24363] ? apparmor_socket_sendmsg+0x15/0x330 [ 1436.503496][T24363] ? netlink_getsockopt+0x550/0x550 [ 1436.508698][T24363] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1436.514245][T24363] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1436.519528][T24363] ? security_socket_sendmsg+0x7c/0xa0 [ 1436.524981][T24363] ? netlink_getsockopt+0x550/0x550 [ 1436.530181][T24363] ____sys_sendmsg+0x5ed/0x9a0 [ 1436.534950][T24363] ? __sys_sendmsg_sock+0x30/0x30 [ 1436.539971][T24363] ? __import_iovec+0x306/0x510 [ 1436.544829][T24363] ? import_iovec+0x6f/0xa0 [ 1436.549332][T24363] ___sys_sendmsg+0x2a2/0x360 [ 1436.554015][T24363] ? __sys_sendmsg+0x2a0/0x2a0 [ 1436.558789][T24363] ? ktime_get+0x7b/0x270 [ 1436.563139][T24363] __se_sys_sendmsg+0x1c3/0x2b0 [ 1436.567985][T24363] ? perf_trace_preemptirq_template+0x268/0x320 [ 1436.574247][T24363] ? __x64_sys_sendmsg+0x80/0x80 [ 1436.579210][T24363] ? lockdep_hardirqs_on+0x94/0x140 [ 1436.584416][T24363] do_syscall_64+0x4c/0xa0 [ 1436.588841][T24363] ? clear_bhb_loop+0x60/0xb0 [ 1436.593516][T24363] ? clear_bhb_loop+0x60/0xb0 [ 1436.598198][T24363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1436.604102][T24363] RIP: 0033:0x7effbc39fb19 [ 1436.608515][T24363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1436.628116][T24363] RSP: 002b:00007effbd233028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1436.636542][T24363] RAX: ffffffffffffffda RBX: 00007effbc625fa0 RCX: 00007effbc39fb19 [ 1436.644520][T24363] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1436.652505][T24363] RBP: 00007effbc437b70 R08: 0000000000000000 R09: 0000000000000000 [ 1436.660480][T24363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1436.668451][T24363] R13: 00007effbc626038 R14: 00007effbc625fa0 R15: 00007ffe03730a18 [ 1436.676438][T24363] [ 1437.042646][T24380] netlink: 'syz.4.7665': attribute type 4 has an invalid length. [ 1437.059190][T24380] netlink: 134728 bytes leftover after parsing attributes in process `syz.4.7665'. [ 1437.815207][T24416] netlink: 'syz.0.7681': attribute type 27 has an invalid length. [ 1438.019356][T24416] bond0: (slave bond_slave_0): Releasing backup interface [ 1438.964246][T24428] netlink: 'syz.6.7685': attribute type 21 has an invalid length. [ 1438.973176][T24428] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7685'. [ 1440.586727][T24474] netlink: 'syz.4.7707': attribute type 7 has an invalid length. [ 1440.823668][T24488] netlink: 'syz.6.7712': attribute type 27 has an invalid length. [ 1440.944039][T24488] bond0: (slave bond_slave_0): Releasing backup interface [ 1440.960903][T24488] device bond_slave_0 left promiscuous mode [ 1442.306854][T24522] netlink: 'syz.4.7727': attribute type 21 has an invalid length. [ 1442.340980][T24522] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7727'. [ 1442.814576][T24531] netlink: 'syz.2.7729': attribute type 27 has an invalid length. [ 1442.936191][T24531] bond0: (slave bond_slave_0): Releasing backup interface [ 1442.953562][T24531] device bond_slave_0 left promiscuous mode [ 1443.352739][T24538] tun0: tun_chr_ioctl cmd 1074025675 [ 1443.358691][T24538] tun0: persist enabled [ 1443.795496][T24563] netlink: 'syz.2.7742': attribute type 4 has an invalid length. [ 1443.833625][T24563] netlink: 134728 bytes leftover after parsing attributes in process `syz.2.7742'. [ 1444.124275][T24578] tun0: tun_chr_ioctl cmd 1074025675 [ 1444.131093][T24578] tun0: persist enabled [ 1444.906874][T24605] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.7761'. [ 1445.083272][T24609] netlink: 'syz.0.7762': attribute type 4 has an invalid length. [ 1445.092464][T24609] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.7762'. [ 1445.284950][T24615] netlink: 'syz.4.7765': attribute type 10 has an invalid length. [ 1445.401426][T24621] tun0: tun_chr_ioctl cmd 1074025675 [ 1445.407039][T24621] tun0: persist enabled [ 1445.645031][T24620] rxe_eth0 speed is unknown, defaulting to 1000 [ 1445.908662][T24632] tun0: tun_chr_ioctl cmd 1074025675 [ 1445.914831][T24632] tun0: persist enabled [ 1446.492983][T24652] netlink: 'syz.5.7781': attribute type 4 has an invalid length. [ 1446.508793][T24652] netlink: 134728 bytes leftover after parsing attributes in process `syz.5.7781'. [ 1447.162702][T24671] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7791'. [ 1447.206883][T24671] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.232048][T24671] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.236286][T24674] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7792'. [ 1447.245533][T24671] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.467390][T24674] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1447.496001][T24674] CPU: 0 PID: 24674 Comm: syz.4.7792 Not tainted syzkaller #0 [ 1447.503529][T24674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1447.513610][T24674] Call Trace: [ 1447.516913][T24674] [ 1447.519862][T24674] dump_stack_lvl+0x188/0x24e [ 1447.524567][T24674] ? show_regs_print_info+0x12/0x12 [ 1447.529766][T24674] ? load_image+0x410/0x410 [ 1447.534280][T24674] sysfs_warn_dup+0x8a/0xa0 [ 1447.538793][T24674] sysfs_do_create_link_sd+0xc0/0x110 [ 1447.544187][T24674] device_add+0x83b/0x1050 [ 1447.548600][T24674] wiphy_register+0x1f16/0x2c50 [ 1447.553458][T24674] ? cfg80211_event_work+0x40/0x40 [ 1447.558579][T24674] ? minstrel_ht_alloc+0x894/0xa20 [ 1447.563693][T24674] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1447.569754][T24674] ieee80211_register_hw+0x2e33/0x3b00 [ 1447.575266][T24674] ? ieee80211_register_hw+0xec1/0x3b00 [ 1447.580817][T24674] ? ieee80211_register_hw+0xec1/0x3b00 [ 1447.586371][T24674] ? ieee80211_tasklet_handler+0x20/0x20 [ 1447.592005][T24674] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1447.597902][T24674] ? __debug_object_init+0xed/0x440 [ 1447.603276][T24674] ? memset+0x1e/0x40 [ 1447.607273][T24674] ? __hrtimer_init+0x189/0x270 [ 1447.612119][T24674] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1447.617856][T24674] ? memcpy+0x3c/0x60 [ 1447.621844][T24674] hwsim_new_radio_nl+0xab7/0xc90 [ 1447.626874][T24674] genl_family_rcv_msg_doit+0x22f/0x350 [ 1447.632415][T24674] ? end_current_label_crit_section+0x170/0x170 [ 1447.638652][T24674] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1447.644547][T24674] ? bpf_lsm_capable+0x5/0x10 [ 1447.649219][T24674] ? security_capable+0x85/0xb0 [ 1447.654072][T24674] genl_rcv_msg+0x601/0x790 [ 1447.658585][T24674] ? genl_bind+0x360/0x360 [ 1447.662995][T24674] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1447.669333][T24674] netlink_rcv_skb+0x1ef/0x440 [ 1447.674100][T24674] ? genl_bind+0x360/0x360 [ 1447.678511][T24674] ? netlink_ack+0x1160/0x1160 [ 1447.683272][T24674] ? down_read+0x1a8/0x2d0 [ 1447.687677][T24674] genl_rcv+0x24/0x40 [ 1447.691655][T24674] netlink_unicast+0x7ad/0x920 [ 1447.696418][T24674] netlink_sendmsg+0x8ad/0xbd0 [ 1447.701184][T24674] ? netlink_getsockopt+0x550/0x550 [ 1447.706375][T24674] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1447.711913][T24674] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1447.717195][T24674] ? security_socket_sendmsg+0x7c/0xa0 [ 1447.722658][T24674] ? netlink_getsockopt+0x550/0x550 [ 1447.727878][T24674] ____sys_sendmsg+0x5ed/0x9a0 [ 1447.732659][T24674] ? __sys_sendmsg_sock+0x30/0x30 [ 1447.737673][T24674] ? __import_iovec+0x306/0x510 [ 1447.742522][T24674] ? import_iovec+0x6f/0xa0 [ 1447.747022][T24674] ___sys_sendmsg+0x2a2/0x360 [ 1447.751698][T24674] ? __sys_sendmsg+0x2a0/0x2a0 [ 1447.756466][T24674] ? ktime_get+0x7b/0x270 [ 1447.760888][T24674] __se_sys_sendmsg+0x1c3/0x2b0 [ 1447.765730][T24674] ? perf_trace_preemptirq_template+0x268/0x320 [ 1447.771966][T24674] ? __x64_sys_sendmsg+0x80/0x80 [ 1447.776923][T24674] ? lockdep_hardirqs_on+0x94/0x140 [ 1447.782128][T24674] do_syscall_64+0x4c/0xa0 [ 1447.786535][T24674] ? clear_bhb_loop+0x60/0xb0 [ 1447.791211][T24674] ? clear_bhb_loop+0x60/0xb0 [ 1447.795903][T24674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1447.801789][T24674] RIP: 0033:0x7f77ce59fb19 [ 1447.806195][T24674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1447.825797][T24674] RSP: 002b:00007f77cf3db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1447.834201][T24674] RAX: ffffffffffffffda RBX: 00007f77ce825fa0 RCX: 00007f77ce59fb19 [ 1447.842194][T24674] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1447.850180][T24674] RBP: 00007f77ce637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1447.858155][T24674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1447.866132][T24674] R13: 00007f77ce826038 R14: 00007f77ce825fa0 R15: 00007ffe1d7ceb38 [ 1447.874116][T24674] [ 1448.070757][T24683] netlink: 'syz.5.7797': attribute type 10 has an invalid length. [ 1448.354171][T24683] rxe_eth0 speed is unknown, defaulting to 1000 [ 1448.682028][T24700] netlink: 'syz.0.7804': attribute type 3 has an invalid length. [ 1448.717648][T24700] netlink: 'syz.0.7804': attribute type 1 has an invalid length. [ 1448.748418][T24700] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.7804'. [ 1448.761721][T24702] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.7805'. [ 1449.916315][T24718] netlink: 'syz.5.7811': attribute type 27 has an invalid length. [ 1450.061883][T24718] bond0: (slave bond_slave_0): Releasing backup interface [ 1450.081853][T24718] device bond_slave_0 left promiscuous mode [ 1450.627360][T24736] tun0: tun_chr_ioctl cmd 1074025675 [ 1450.635350][T24736] tun0: persist enabled [ 1450.902334][T24744] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7819'. [ 1450.945681][T24740] rxe_eth0 speed is unknown, defaulting to 1000 [ 1452.652834][T24748] netlink: 'syz.5.7822': attribute type 10 has an invalid length. [ 1452.697833][T24751] rxe_eth0 speed is unknown, defaulting to 1000 [ 1452.817549][T24758] netlink: 'syz.4.7827': attribute type 2 has an invalid length. [ 1452.844698][T24758] netlink: 'syz.4.7827': attribute type 8 has an invalid length. [ 1452.867110][T24758] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7827'. [ 1452.926582][T24760] netlink: 'syz.4.7827': attribute type 2 has an invalid length. [ 1452.949867][T24760] netlink: 'syz.4.7827': attribute type 8 has an invalid length. [ 1452.984074][T24760] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7827'. [ 1453.428862][T24768] netlink: 'syz.4.7833': attribute type 3 has an invalid length. [ 1453.436803][T24768] netlink: 'syz.4.7833': attribute type 1 has an invalid length. [ 1453.445083][T24768] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.7833'. [ 1454.122456][T24795] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7843'. [ 1454.416813][T24790] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7841'. [ 1454.681147][T24790] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.691911][T24790] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.702917][T24790] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.712653][T24790] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.917129][T24795] netlink: 'syz.0.7843': attribute type 10 has an invalid length. [ 1454.970497][T24794] rxe_eth0 speed is unknown, defaulting to 1000 [ 1455.122477][T24802] netlink: 'syz.2.7846': attribute type 3 has an invalid length. [ 1455.141315][T24802] netlink: 'syz.2.7846': attribute type 1 has an invalid length. [ 1455.149925][T24802] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.7846'. [ 1455.151915][T24804] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7844'. [ 1456.348306][T24841] netlink: 14 bytes leftover after parsing attributes in process `syz.6.7858'. [ 1457.042719][T24861] rxe_eth0 speed is unknown, defaulting to 1000 [ 1458.156049][T24895] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7880'. [ 1458.187577][T24895] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.201733][T24895] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.214100][T24895] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.654547][T24942] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7901'. [ 1459.677559][T24942] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.688008][T24942] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.697837][T24942] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.708303][T24942] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.519479][T25008] netlink: 'syz.4.7930': attribute type 3 has an invalid length. [ 1461.527721][T25008] netlink: 'syz.4.7930': attribute type 1 has an invalid length. [ 1461.540320][T25008] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.7930'. [ 1462.569968][T25020] netlink: 'syz.4.7935': attribute type 3 has an invalid length. [ 1462.578851][T25020] netlink: 'syz.4.7935': attribute type 1 has an invalid length. [ 1462.591329][T25020] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.7935'. [ 1464.830575][T25077] netlink: 'syz.2.7957': attribute type 3 has an invalid length. [ 1464.849311][T25077] netlink: 'syz.2.7957': attribute type 1 has an invalid length. [ 1464.875496][T25077] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.7957'. [ 1466.112537][T25122] netlink: 'syz.2.7978': attribute type 3 has an invalid length. [ 1466.164060][T25122] netlink: 'syz.2.7978': attribute type 1 has an invalid length. [ 1466.194213][T25122] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.7978'. [ 1468.454081][T25208] netlink: 'syz.6.8013': attribute type 3 has an invalid length. [ 1468.478268][T25208] netlink: 'syz.6.8013': attribute type 1 has an invalid length. [ 1468.486213][T25208] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.8013'. [ 1469.503638][T25231] rxe_eth0 speed is unknown, defaulting to 1000 [ 1470.215688][T25257] netlink: 'syz.0.8034': attribute type 3 has an invalid length. [ 1470.238288][T25257] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.8034'. [ 1470.566838][T25267] netlink: 'syz.0.8049': attribute type 3 has an invalid length. [ 1470.576113][T25267] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.8049'. [ 1471.591707][T25280] bond0: (slave macvlan0): Releasing backup interface [ 1471.959382][T25307] netlink: 'syz.2.8053': attribute type 3 has an invalid length. [ 1471.988458][T25307] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.8053'. [ 1472.094374][T25313] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8056'. [ 1474.190749][T25381] netlink: 'syz.5.8085': attribute type 3 has an invalid length. [ 1474.200052][T25381] netlink: 'syz.5.8085': attribute type 1 has an invalid length. [ 1474.232433][T25381] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.8085'. [ 1475.694954][T25430] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8101'. [ 1475.846953][T25442] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8106'. [ 1476.189864][T25455] netlink: 'syz.6.8112': attribute type 3 has an invalid length. [ 1476.197701][T25455] netlink: 'syz.6.8112': attribute type 1 has an invalid length. [ 1476.235028][T25455] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.8112'. [ 1476.511661][T25467] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8118'. [ 1476.995579][T25486] netlink: 'syz.4.8127': attribute type 3 has an invalid length. [ 1477.022326][T25486] netlink: 'syz.4.8127': attribute type 1 has an invalid length. [ 1477.041648][T25486] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.8127'. [ 1477.661090][T25511] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8138'. [ 1477.707592][T25517] netlink: 'syz.4.8141': attribute type 3 has an invalid length. [ 1477.746686][T25517] netlink: 'syz.4.8141': attribute type 1 has an invalid length. [ 1477.778196][T25517] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.8141'. [ 1478.405236][T25545] netlink: 'syz.4.8155': attribute type 3 has an invalid length. [ 1478.424572][T25545] netlink: 'syz.4.8155': attribute type 1 has an invalid length. [ 1478.436823][T25545] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.8155'. [ 1479.151450][T25558] rxe_eth0 speed is unknown, defaulting to 1000 [ 1480.221960][T25586] bond0: (slave macvlan0): Releasing backup interface [ 1481.631213][T25632] netlink: 'syz.4.8190': attribute type 3 has an invalid length. [ 1481.654529][T25632] netlink: 'syz.4.8190': attribute type 1 has an invalid length. [ 1481.668910][T25632] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.8190'. [ 1482.947216][T25670] netlink: 'syz.5.8205': attribute type 3 has an invalid length. [ 1482.957875][T25670] netlink: 'syz.5.8205': attribute type 1 has an invalid length. [ 1482.984041][T25670] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.8205'. [ 1483.755719][T25701] netlink: 'syz.5.8221': attribute type 3 has an invalid length. [ 1483.774013][T25701] netlink: 'syz.5.8221': attribute type 1 has an invalid length. [ 1483.784205][T25701] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.8221'. [ 1484.424206][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.430671][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.889285][T25721] rxe_eth0 speed is unknown, defaulting to 1000 [ 1485.125476][T25738] netlink: 'syz.5.8237': attribute type 3 has an invalid length. [ 1485.165966][T25738] netlink: 'syz.5.8237': attribute type 1 has an invalid length. [ 1485.198617][T25738] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.8237'. [ 1486.522719][T25774] netlink: 'syz.4.8252': attribute type 3 has an invalid length. [ 1486.545020][T25774] netlink: 'syz.4.8252': attribute type 1 has an invalid length. [ 1486.560156][T25774] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.8252'. [ 1487.255717][T25805] netlink: 'syz.6.8269': attribute type 3 has an invalid length. [ 1487.264779][T25805] netlink: 'syz.6.8269': attribute type 1 has an invalid length. [ 1487.290956][T25805] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.8269'. [ 1487.954209][T25835] netlink: 'syz.6.8282': attribute type 3 has an invalid length. [ 1487.966079][T25835] netlink: 'syz.6.8282': attribute type 1 has an invalid length. [ 1487.975151][T25835] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.8282'. [ 1488.263528][T25849] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8289'. [ 1488.420115][T25852] netlink: 'syz.6.8300': attribute type 3 has an invalid length. [ 1488.447973][T25852] netlink: 'syz.6.8300': attribute type 1 has an invalid length. [ 1488.460241][T25852] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.8300'. [ 1490.674293][T25944] netlink: 'syz.4.8330': attribute type 3 has an invalid length. [ 1490.711614][T25944] netlink: 'syz.4.8330': attribute type 1 has an invalid length. [ 1490.725926][T25944] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.8330'. [ 1491.333967][T25978] netlink: 'syz.0.8347': attribute type 3 has an invalid length. [ 1491.352345][T25978] netlink: 'syz.0.8347': attribute type 1 has an invalid length. [ 1491.376220][T25978] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.8347'. [ 1491.618234][T21739] Bluetooth: hci5: command 0x0406 tx timeout [ 1492.073485][T26010] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.8364'. [ 1492.941842][T26046] validate_nla: 2 callbacks suppressed [ 1492.941859][T26046] netlink: 'syz.5.8380': attribute type 3 has an invalid length. [ 1492.978392][T26046] netlink: 'syz.5.8380': attribute type 1 has an invalid length. [ 1492.986167][T26046] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.8380'. [ 1493.824362][T26081] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8395'. [ 1494.565776][T26109] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8411'. [ 1496.667362][T26194] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8450'. [ 1497.389657][T26225] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8467'. [ 1497.536852][T26227] rxe_eth0 speed is unknown, defaulting to 1000 [ 1497.571469][T26233] netlink: 'syz.5.8469': attribute type 2 has an invalid length. [ 1497.600640][T26233] netlink: 'syz.5.8469': attribute type 8 has an invalid length. [ 1497.649629][T26233] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8469'. [ 1498.431540][T26260] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8479'. [ 1499.117506][T26290] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8493'. [ 1499.812315][T26320] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8510'. [ 1500.645526][T26360] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8529'. [ 1500.927052][T26374] netlink: 'syz.2.8535': attribute type 2 has an invalid length. [ 1500.937774][T26374] netlink: 'syz.2.8535': attribute type 8 has an invalid length. [ 1500.946238][T26374] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8535'. [ 1501.500249][T26390] sctp: [Deprecated]: syz.5.8544 (pid 26390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1501.500249][T26390] Use struct sctp_sack_info instead [ 1501.665357][T26398] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8545'. [ 1501.818854][T26405] netlink: 'syz.4.8551': attribute type 2 has an invalid length. [ 1501.826761][T26405] netlink: 'syz.4.8551': attribute type 8 has an invalid length. [ 1501.835255][T26405] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8551'. [ 1502.074031][T26413] netlink: 'syz.2.8553': attribute type 2 has an invalid length. [ 1502.089369][T26413] netlink: 'syz.2.8553': attribute type 8 has an invalid length. [ 1502.103773][T26413] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8553'. [ 1502.435341][T26432] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8561'. [ 1503.261564][T26468] netlink: 'syz.6.8579': attribute type 2 has an invalid length. [ 1503.279312][T26468] netlink: 'syz.6.8579': attribute type 8 has an invalid length. [ 1503.287090][T26468] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8579'. [ 1503.652763][T26486] sctp: [Deprecated]: syz.0.8597 (pid 26486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1503.652763][T26486] Use struct sctp_sack_info instead [ 1504.589208][T26516] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8601'. [ 1504.632550][T26519] sctp: [Deprecated]: syz.4.8602 (pid 26519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1504.632550][T26519] Use struct sctp_sack_info instead [ 1505.324135][T26549] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8615'. [ 1505.443205][T26555] sctp: [Deprecated]: syz.2.8616 (pid 26555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1505.443205][T26555] Use struct sctp_sack_info instead [ 1505.857155][T26574] netlink: 'syz.0.8624': attribute type 2 has an invalid length. [ 1505.874080][T26574] netlink: 'syz.0.8624': attribute type 8 has an invalid length. [ 1505.882292][T26574] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8624'. [ 1505.935613][T26579] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8629'. [ 1506.103220][T26587] sctp: [Deprecated]: syz.6.8632 (pid 26587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1506.103220][T26587] Use struct sctp_sack_info instead [ 1506.696124][T26613] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8644'. [ 1507.079440][T13436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.229046][T26633] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8655'. [ 1507.354205][T26639] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8658'. [ 1507.746378][T26660] netlink: 'syz.5.8664': attribute type 2 has an invalid length. [ 1507.756161][T26660] netlink: 'syz.5.8664': attribute type 8 has an invalid length. [ 1507.765948][T26660] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8664'. [ 1507.797259][T26654] netlink: 'syz.6.8665': attribute type 10 has an invalid length. [ 1508.052718][T26668] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8670'. [ 1509.130995][T26715] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8691'. [ 1509.575942][T26734] netlink: 'syz.6.8696': attribute type 2 has an invalid length. [ 1509.593869][T26734] netlink: 'syz.6.8696': attribute type 8 has an invalid length. [ 1509.628671][T26734] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8696'. [ 1510.512849][T26772] netlink: 'syz.4.8718': attribute type 10 has an invalid length. [ 1511.877965][T26810] netlink: 'syz.4.8731': attribute type 2 has an invalid length. [ 1511.896758][T26810] netlink: 'syz.4.8731': attribute type 8 has an invalid length. [ 1511.897750][T26814] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.8741'. [ 1511.905075][T26810] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8731'. [ 1512.199218][T26821] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8737'. [ 1512.405265][T26831] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8740'. [ 1513.082031][T26858] netlink: 'syz.0.8752': attribute type 10 has an invalid length. [ 1513.161865][T26862] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8756'. [ 1514.237938][T26894] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8769'. [ 1514.483324][T26898] netlink: 'syz.2.8770': attribute type 10 has an invalid length. [ 1514.880375][T26912] device batadv0 left promiscuous mode [ 1514.886595][T26912] bridge0: port 4(batadv0) entered disabled state [ 1514.914991][T26912] bridge0: port 3(bond0) entered disabled state [ 1514.936589][T26912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.957979][T26912] device bridge_slave_0 left promiscuous mode [ 1514.965215][T26912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.184707][T26930] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8784'. [ 1515.305387][T26933] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8786'. [ 1516.247638][T26962] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8800'. [ 1516.511291][T26970] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8801'. [ 1517.027999][T26988] tun1: tun_chr_ioctl cmd 1074025675 [ 1517.040474][T26988] tun1: persist enabled [ 1517.058908][T26988] tun1: tun_chr_ioctl cmd 1074025675 [ 1517.064441][T26988] tun1: persist enabled [ 1517.113470][T26992] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8813'. [ 1517.303599][T27000] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8817'. [ 1517.357429][T27006] netlink: 'syz.4.8820': attribute type 1 has an invalid length. [ 1517.395670][T27006] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.8820'. [ 1518.088418][T27022] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8827'. [ 1518.253702][T27024] tun1: tun_chr_ioctl cmd 1074025675 [ 1518.280871][T27024] tun1: persist enabled [ 1518.309370][T27029] tun1: tun_chr_ioctl cmd 1074025675 [ 1518.326133][T27029] tun1: persist enabled [ 1518.501064][T27035] netlink: 'syz.6.8833': attribute type 1 has an invalid length. [ 1518.518294][T27035] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.8833'. [ 1518.857439][T27047] device batadv0 left promiscuous mode [ 1518.868955][T27047] bridge0: port 4(batadv0) entered disabled state [ 1518.894992][T27047] bridge0: port 2(bond0) entered disabled state [ 1518.895598][T27049] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8839'. [ 1518.931649][T27047] bridge0: port 3(batadv_slave_0) entered disabled state [ 1518.972555][T27047] device bridge_slave_0 left promiscuous mode [ 1518.989808][T27047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.458274][T27066] tun1: tun_chr_ioctl cmd 1074025675 [ 1519.487013][T27066] tun1: persist enabled [ 1519.554790][T27066] tun1: tun_chr_ioctl cmd 1074025675 [ 1519.560779][T27066] tun1: persist enabled [ 1520.562977][T27102] __nla_validate_parse: 3 callbacks suppressed [ 1520.563019][T27102] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8860'. [ 1520.667749][T27104] bridge0: port 2(bond0) entered disabled state [ 1520.699582][T27104] bridge0: port 3(batadv_slave_0) entered disabled state [ 1520.715405][T27104] device bridge_slave_0 left promiscuous mode [ 1520.722694][T27104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.089404][T27120] tun1: tun_chr_ioctl cmd 1074025675 [ 1521.094888][T27120] tun1: persist enabled [ 1521.115309][T27120] tun1: tun_chr_ioctl cmd 1074025675 [ 1521.131567][T27120] tun1: persist enabled [ 1522.007008][T27144] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8877'. [ 1522.139176][T27146] netlink: 188 bytes leftover after parsing attributes in process `syz.5.8878'. [ 1522.170798][T27146] netlink: 105 bytes leftover after parsing attributes in process `syz.5.8878'. [ 1522.195347][T27146] netlink: 105 bytes leftover after parsing attributes in process `syz.5.8878'. [ 1522.577683][T27170] netlink: 'syz.5.8890': attribute type 3 has an invalid length. [ 1522.586603][T27170] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.8890'. [ 1522.716056][T27174] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8892'. [ 1522.889433][T27184] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8897'. [ 1522.943688][T27186] netlink: 188 bytes leftover after parsing attributes in process `syz.4.8898'. [ 1522.959946][T27186] netlink: 105 bytes leftover after parsing attributes in process `syz.4.8898'. [ 1523.112454][T27195] netlink: 'syz.5.8902': attribute type 3 has an invalid length. [ 1524.051144][T27238] netlink: 'syz.2.8924': attribute type 9 has an invalid length. [ 1526.495489][T27327] __nla_validate_parse: 11 callbacks suppressed [ 1526.495526][T27327] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8967'. [ 1526.653932][T27335] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8970'. [ 1526.751571][T27337] bridge0: port 3(batadv_slave_0) entered disabled state [ 1526.782751][T27337] device ip6gretap0 left promiscuous mode [ 1526.791143][T27337] bridge0: port 2(ip6gretap0) entered disabled state [ 1526.821194][T27337] device bridge_slave_0 left promiscuous mode [ 1526.839872][T27337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.932139][T27337] bond0: (slave bridge0): Releasing backup interface [ 1527.245541][T27356] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8980'. [ 1528.102633][T27377] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8989'. [ 1528.383656][T27388] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8994'. [ 1528.554634][T27393] bridge0: port 5(batadv_slave_0) entered disabled state [ 1528.595152][T27393] device ip6gretap0 left promiscuous mode [ 1528.603020][T27393] bridge0: port 4(ip6gretap0) entered disabled state [ 1528.619525][T27393] bridge0: port 3(dummy0) entered disabled state [ 1528.649791][T27393] device bridge_slave_0 left promiscuous mode [ 1528.667784][T27393] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.758918][T27393] bond0: (slave bridge0): Releasing backup interface [ 1528.767798][T27393] device bridge0 left promiscuous mode [ 1529.381888][T27424] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9008'. [ 1529.610387][T27432] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9012'. [ 1530.545527][T27470] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9028'. [ 1531.077850][T27491] netlink: 'syz.0.9039': attribute type 3 has an invalid length. [ 1531.086125][T27491] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.9039'. [ 1531.307600][T27501] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9044'. [ 1531.614907][T27517] netlink: 'syz.5.9052': attribute type 3 has an invalid length. [ 1531.678949][T27517] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.9052'. [ 1532.161288][T27529] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9057'. [ 1532.941253][T27561] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9072'. [ 1534.056214][T27594] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9087'. [ 1534.567290][T27617] netlink: 'syz.6.9097': attribute type 10 has an invalid length. [ 1535.046028][T27633] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9103'. [ 1535.487672][T27648] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9112'. [ 1535.523427][T27650] netlink: 'syz.5.9113': attribute type 10 has an invalid length. [ 1536.061078][T27667] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9118'. [ 1536.573385][T27690] netlink: 'syz.4.9130': attribute type 10 has an invalid length. [ 1536.745573][T27696] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9132'. [ 1536.832493][T27700] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9133'. [ 1537.004552][T27707] netlink: 68520 bytes leftover after parsing attributes in process `syz.6.9136'. [ 1537.572565][T27729] netlink: 'syz.2.9145': attribute type 10 has an invalid length. [ 1537.717238][T27733] netlink: 152 bytes leftover after parsing attributes in process `syz.6.9149'. [ 1537.754352][T27735] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9150'. [ 1537.879119][T27741] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9152'. [ 1538.352846][T27757] netlink: 'syz.2.9161': attribute type 10 has an invalid length. [ 1538.381797][T27757] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9161'. [ 1538.405168][T27757] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1538.654187][T27769] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9164'. [ 1538.836503][T27780] netlink: 'syz.0.9166': attribute type 10 has an invalid length. [ 1539.076302][T27790] netlink: 'syz.0.9174': attribute type 3 has an invalid length. [ 1539.088146][T27790] netlink: 61203 bytes leftover after parsing attributes in process `syz.0.9174'. [ 1539.275414][T27798] netlink: 152 bytes leftover after parsing attributes in process `syz.6.9179'. [ 1539.862931][T27822] netlink: 'syz.2.9188': attribute type 3 has an invalid length. [ 1540.614387][T27852] netlink: 'syz.5.9203': attribute type 3 has an invalid length. [ 1540.839101][T27865] netlink: 'syz.0.9218': attribute type 3 has an invalid length. [ 1541.071768][T27877] netlink: 'syz.6.9212': attribute type 10 has an invalid length. [ 1541.091247][T27879] netlink: 'syz.4.9213': attribute type 10 has an invalid length. [ 1541.099381][T27879] device dummy0 entered promiscuous mode [ 1541.106289][T27879] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1541.826075][T27902] __nla_validate_parse: 12 callbacks suppressed [ 1541.826112][T27902] netlink: 152 bytes leftover after parsing attributes in process `syz.6.9236'. [ 1542.014230][T27909] validate_nla: 2 callbacks suppressed [ 1542.014265][T27909] netlink: 'syz.5.9229': attribute type 10 has an invalid length. [ 1542.043832][T27909] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9229'. [ 1542.056958][T27917] netlink: 'syz.6.9232': attribute type 3 has an invalid length. [ 1542.059109][T27909] device dummy0 entered promiscuous mode [ 1542.081413][T27909] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1542.110320][T27915] netlink: 'syz.0.9231': attribute type 15 has an invalid length. [ 1542.120189][T27917] netlink: 'syz.6.9232': attribute type 4 has an invalid length. [ 1542.120215][T27917] netlink: 'syz.6.9232': attribute type 6 has an invalid length. [ 1542.120233][T27917] netlink: 'syz.6.9232': attribute type 15 has an invalid length. [ 1542.120251][T27917] netlink: 'syz.6.9232': attribute type 16 has an invalid length. [ 1542.120269][T27917] netlink: 'syz.6.9232': attribute type 20 has an invalid length. [ 1542.120286][T27917] netlink: 'syz.6.9232': attribute type 21 has an invalid length. [ 1542.120303][T27917] netlink: 15922 bytes leftover after parsing attributes in process `syz.6.9232'. [ 1542.195258][T27915] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9231'. [ 1542.310920][T27926] netlink: 'syz.6.9234': attribute type 3 has an invalid length. [ 1542.319053][T27926] netlink: 61155 bytes leftover after parsing attributes in process `syz.6.9234'. [ 1542.733725][T27938] netlink: 68520 bytes leftover after parsing attributes in process `syz.0.9239'. [ 1542.941071][T27944] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9244'. [ 1543.192331][T27954] netlink: 61155 bytes leftover after parsing attributes in process `syz.4.9250'. [ 1543.255115][T27952] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9247'. [ 1543.268268][T27952] device dummy0 entered promiscuous mode [ 1543.283623][T27952] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1543.302084][T27958] netlink: 61155 bytes leftover after parsing attributes in process `syz.5.9262'. [ 1544.361292][T27999] device dummy0 entered promiscuous mode [ 1544.381718][T27999] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1545.391499][T28039] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1545.877366][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.883817][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.199697][T28073] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1546.870948][T28099] __nla_validate_parse: 25 callbacks suppressed [ 1546.871005][T28099] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.9316'. [ 1547.209348][T28110] validate_nla: 27 callbacks suppressed [ 1547.209382][T28110] netlink: 'syz.6.9322': attribute type 21 has an invalid length. [ 1547.256407][T28110] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9322'. [ 1547.321463][T28117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9326'. [ 1547.341843][T28117] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9326'. [ 1547.687718][T28130] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9332'. [ 1547.749075][T28132] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9333'. [ 1548.005380][T28141] netlink: 68520 bytes leftover after parsing attributes in process `syz.0.9337'. [ 1548.517523][T28164] netlink: 'syz.4.9345': attribute type 21 has an invalid length. [ 1548.550110][T28164] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9345'. [ 1548.593049][T28167] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9347'. [ 1548.760865][T28173] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9350'. [ 1548.948439][T28180] netlink: 'syz.5.9352': attribute type 15 has an invalid length. [ 1549.627994][T28213] netlink: 'syz.0.9368': attribute type 4 has an invalid length. [ 1549.668803][T28215] syz.0.9368[28215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1549.944560][T28225] netlink: 'syz.2.9370': attribute type 15 has an invalid length. [ 1550.646175][T28253] netlink: 'syz.2.9385': attribute type 4 has an invalid length. [ 1550.695714][T28253] syz.2.9385[28253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1551.428996][T28281] netlink: 'syz.4.9398': attribute type 12 has an invalid length. [ 1553.752563][T28356] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1554.109718][T28370] __nla_validate_parse: 12 callbacks suppressed [ 1554.109756][T28370] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9437'. [ 1554.517696][T28386] netlink: 68520 bytes leftover after parsing attributes in process `syz.2.9442'. [ 1554.869994][T28394] netlink: 'syz.5.9446': attribute type 4 has an invalid length. [ 1554.874132][T28395] netlink: 'syz.2.9448': attribute type 2 has an invalid length. [ 1554.877845][T28394] netlink: 206236 bytes leftover after parsing attributes in process `syz.5.9446'. [ 1554.943229][T28395] device .*! entered promiscuous mode [ 1554.960862][T28400] syz.5.9446[28400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1554.965936][T28394] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9446'. [ 1555.092592][T28402] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9451'. [ 1556.289311][T28424] rxe_eth0 speed is unknown, defaulting to 1000 [ 1556.433798][T28437] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9466'. [ 1556.960456][T28454] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.9473'. [ 1557.761127][T28472] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9481'. [ 1558.442844][T28498] netlink: 152 bytes leftover after parsing attributes in process `syz.6.9493'. [ 1558.841039][T28512] netlink: 152 bytes leftover after parsing attributes in process `syz.6.9508'. [ 1562.697852][T28553] netlink: 134268 bytes leftover after parsing attributes in process `syz.6.9515'. [ 1563.463694][T28580] rxe_eth0 speed is unknown, defaulting to 1000 [ 1566.336867][T28590] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9541'. [ 1566.367612][T28592] netlink: 134268 bytes leftover after parsing attributes in process `syz.5.9531'. [ 1566.574223][T28603] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9536'. [ 1566.618491][T28603] netlink: 'syz.0.9536': attribute type 12 has an invalid length. [ 1566.634032][T28603] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9536'. [ 1567.153158][T28619] netlink: 'syz.6.9543': attribute type 2 has an invalid length. [ 1567.247007][T28619] device .*! entered promiscuous mode [ 1567.421729][T28624] rxe_eth0 speed is unknown, defaulting to 1000 [ 1570.615301][T28635] netlink: 134268 bytes leftover after parsing attributes in process `syz.2.9549'. [ 1573.911370][T28656] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9553'. [ 1573.975702][T28662] netlink: 'syz.6.9553': attribute type 12 has an invalid length. [ 1574.007554][T28662] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9553'. [ 1574.244613][T28673] netlink: 'syz.5.9562': attribute type 10 has an invalid length. [ 1574.498759][T28670] rxe_eth0 speed is unknown, defaulting to 1000 [ 1577.881074][T28698] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.9568'. [ 1577.904488][T28696] netlink: 'syz.0.9578': attribute type 21 has an invalid length. [ 1577.913932][T28696] netlink: 9618 bytes leftover after parsing attributes in process `syz.0.9578'. [ 1578.624224][T28713] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1578.813736][T28718] netlink: 'syz.6.9577': attribute type 10 has an invalid length. [ 1578.825170][T28718] device bond0 left promiscuous mode [ 1578.830892][T28718] device bond_slave_1 left promiscuous mode [ 1579.886581][T28736] C: renamed from team_slave_0 [ 1580.206230][T28736] netlink: 'syz.4.9589': attribute type 2 has an invalid length. [ 1580.216354][T28736] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9589'. [ 1580.235038][T28736] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1580.850075][T28762] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1581.103196][T28768] netlink: 'syz.0.9597': attribute type 10 has an invalid length. [ 1581.127284][T28768] device bond0 left promiscuous mode [ 1581.133482][T28768] device bond_slave_1 left promiscuous mode [ 1581.169248][T28768] device bridge_slave_1 left promiscuous mode [ 1581.442706][T28782] C: renamed from team_slave_0 [ 1581.545698][T28782] netlink: 'syz.2.9605': attribute type 2 has an invalid length. [ 1581.556524][T28782] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9605'. [ 1581.584954][T28782] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1582.075004][T28800] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1582.173903][T28809] netlink: 'syz.5.9616': attribute type 10 has an invalid length. [ 1582.206031][T28809] device bond0 left promiscuous mode [ 1582.230395][T28809] device bond_slave_1 left promiscuous mode [ 1582.256917][T28809] device wlan1 left promiscuous mode [ 1582.663989][T28821] C: renamed from team_slave_0 [ 1582.811157][T28821] netlink: 'syz.5.9621': attribute type 2 has an invalid length. [ 1582.823007][T28821] netlink: 128 bytes leftover after parsing attributes in process `syz.5.9621'. [ 1582.839552][T28821] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1583.193884][T28830] netlink: 'syz.4.9626': attribute type 10 has an invalid length. [ 1583.220705][T28830] bond0: (slave wlan1): Releasing backup interface [ 1583.625880][T28851] netlink: 'syz.6.9642': attribute type 10 has an invalid length. [ 1583.729061][T28839] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1584.277566][T28857] rxe_eth0 speed is unknown, defaulting to 1000 [ 1584.956929][T28875] netlink: 131088 bytes leftover after parsing attributes in process `syz.4.9641'. [ 1585.035173][T28875] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1585.060036][T28875] CPU: 0 PID: 28875 Comm: syz.4.9641 Not tainted syzkaller #0 [ 1585.067547][T28875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1585.077622][T28875] Call Trace: [ 1585.080916][T28875] [ 1585.083863][T28875] dump_stack_lvl+0x188/0x24e [ 1585.088563][T28875] ? show_regs_print_info+0x12/0x12 [ 1585.093773][T28875] ? load_image+0x410/0x410 [ 1585.098297][T28875] sysfs_warn_dup+0x8a/0xa0 [ 1585.102820][T28875] sysfs_do_create_link_sd+0xc0/0x110 [ 1585.108195][T28875] device_add+0x83b/0x1050 [ 1585.112613][T28875] wiphy_register+0x1f16/0x2c50 [ 1585.117510][T28875] ? cfg80211_event_work+0x40/0x40 [ 1585.122621][T28875] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1585.128792][T28875] ieee80211_register_hw+0x2e33/0x3b00 [ 1585.134258][T28875] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1585.140423][T28875] ? ieee80211_register_hw+0xec1/0x3b00 [ 1585.145968][T28875] ? ieee80211_register_hw+0xec1/0x3b00 [ 1585.151516][T28875] ? ieee80211_tasklet_handler+0x20/0x20 [ 1585.157145][T28875] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1585.163037][T28875] ? __debug_object_init+0xed/0x440 [ 1585.168241][T28875] ? memset+0x1e/0x40 [ 1585.172218][T28875] ? __hrtimer_init+0x189/0x270 [ 1585.177066][T28875] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1585.182802][T28875] ? memcpy+0x3c/0x60 [ 1585.186782][T28875] hwsim_new_radio_nl+0xab7/0xc90 [ 1585.191818][T28875] genl_family_rcv_msg_doit+0x22f/0x350 [ 1585.197364][T28875] ? end_current_label_crit_section+0x170/0x170 [ 1585.203607][T28875] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1585.209507][T28875] ? bpf_lsm_capable+0x5/0x10 [ 1585.214182][T28875] ? security_capable+0x85/0xb0 [ 1585.219036][T28875] genl_rcv_msg+0x601/0x790 [ 1585.223548][T28875] ? genl_bind+0x360/0x360 [ 1585.227961][T28875] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1585.234307][T28875] netlink_rcv_skb+0x1ef/0x440 [ 1585.239071][T28875] ? genl_bind+0x360/0x360 [ 1585.243486][T28875] ? netlink_ack+0x1160/0x1160 [ 1585.248255][T28875] ? down_read+0x1a8/0x2d0 [ 1585.252673][T28875] genl_rcv+0x24/0x40 [ 1585.256653][T28875] netlink_unicast+0x7ad/0x920 [ 1585.261427][T28875] netlink_sendmsg+0x8ad/0xbd0 [ 1585.266199][T28875] ? netlink_getsockopt+0x550/0x550 [ 1585.271397][T28875] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1585.276941][T28875] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1585.282220][T28875] ? security_socket_sendmsg+0x7c/0xa0 [ 1585.287676][T28875] ? netlink_getsockopt+0x550/0x550 [ 1585.292873][T28875] ____sys_sendmsg+0x5ed/0x9a0 [ 1585.297643][T28875] ? __sys_sendmsg_sock+0x30/0x30 [ 1585.302663][T28875] ? __import_iovec+0x306/0x510 [ 1585.307521][T28875] ? import_iovec+0x6f/0xa0 [ 1585.312022][T28875] ___sys_sendmsg+0x2a2/0x360 [ 1585.316788][T28875] ? __sys_sendmsg+0x2a0/0x2a0 [ 1585.321569][T28875] ? ktime_get+0x7b/0x270 [ 1585.325927][T28875] __se_sys_sendmsg+0x1c3/0x2b0 [ 1585.330779][T28875] ? perf_trace_preemptirq_template+0x268/0x320 [ 1585.337023][T28875] ? __x64_sys_sendmsg+0x80/0x80 [ 1585.341992][T28875] ? lockdep_hardirqs_on+0x94/0x140 [ 1585.347186][T28875] do_syscall_64+0x4c/0xa0 [ 1585.351606][T28875] ? clear_bhb_loop+0x60/0xb0 [ 1585.356281][T28875] ? clear_bhb_loop+0x60/0xb0 [ 1585.360956][T28875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1585.366845][T28875] RIP: 0033:0x7f77ce59fb19 [ 1585.371256][T28875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1585.390859][T28875] RSP: 002b:00007f77cf3db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1585.399270][T28875] RAX: ffffffffffffffda RBX: 00007f77ce825fa0 RCX: 00007f77ce59fb19 [ 1585.407236][T28875] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000006 [ 1585.415200][T28875] RBP: 00007f77ce637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1585.423184][T28875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1585.431164][T28875] R13: 00007f77ce826038 R14: 00007f77ce825fa0 R15: 00007ffe1d7ceb38 [ 1585.439154][T28875] [ 1585.635909][T28882] netdevsim netdevsim0: Direct firmware load for Ö failed with error -2 [ 1585.669055][T28882] netdevsim netdevsim0: Falling back to sysfs fallback for: Ö [ 1585.729520][T28887] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1585.906872][T28898] netlink: 'syz.2.9652': attribute type 10 has an invalid length. [ 1585.956193][T28898] bond0: (slave wlan1): Releasing backup interface [ 1585.978913][T28898] device wlan1 left promiscuous mode [ 1586.017686][T28900] netlink: 'syz.4.9653': attribute type 10 has an invalid length. [ 1586.107500][T28900] device netdevsim0 entered promiscuous mode [ 1586.127854][T28900] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1586.415330][T28913] netlink: 'syz.0.9664': attribute type 10 has an invalid length. [ 1586.439692][T28913] bond0: (slave wlan1): Releasing backup interface [ 1586.706936][T28921] netlink: 'syz.6.9658': attribute type 21 has an invalid length. [ 1586.725000][T28921] netlink: 9618 bytes leftover after parsing attributes in process `syz.6.9658'. [ 1586.935445][T28928] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1587.493863][T28939] netdevsim netdevsim2: Direct firmware load for Ö failed with error -2 [ 1587.538492][T28939] netdevsim netdevsim2: Falling back to sysfs fallback for: Ö [ 1587.774717][T28943] rxe_eth0 speed is unknown, defaulting to 1000 [ 1588.511873][T28955] netlink: 'syz.4.9672': attribute type 21 has an invalid length. [ 1588.538305][T28955] netlink: 9618 bytes leftover after parsing attributes in process `syz.4.9672'. [ 1588.636118][T28962] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1589.120586][T28977] netdevsim netdevsim6: Direct firmware load for Ö failed with error -2 [ 1589.168241][T28977] netdevsim netdevsim6: Falling back to sysfs fallback for: Ö [ 1589.494738][T28991] netlink: 'syz.4.9687': attribute type 4 has an invalid length. [ 1589.521428][T28991] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9687'. [ 1589.773047][T28999] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1589.784571][T29000] netlink: 'syz.2.9691': attribute type 21 has an invalid length. [ 1589.803261][T29000] netlink: 9618 bytes leftover after parsing attributes in process `syz.2.9691'. [ 1589.970315][T29009] netlink: 'syz.0.9694': attribute type 10 has an invalid length. [ 1590.064799][T29009] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1591.145264][T29038] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1591.177595][T29044] netlink: 'syz.5.9708': attribute type 21 has an invalid length. [ 1591.190600][T29044] netlink: 9618 bytes leftover after parsing attributes in process `syz.5.9708'. [ 1591.304877][T29052] netdevsim netdevsim4: Direct firmware load for Ö failed with error -2 [ 1591.346375][T29052] netdevsim netdevsim4: Falling back to sysfs fallback for: Ö [ 1591.494408][T29063] netlink: 'syz.6.9714': attribute type 10 has an invalid length. [ 1591.497641][T29062] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.9716'. [ 1591.575767][T29063] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1591.603209][T29062] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1591.615303][T29062] CPU: 0 PID: 29062 Comm: syz.0.9716 Not tainted syzkaller #0 [ 1591.622818][T29062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1591.632912][T29062] Call Trace: [ 1591.636210][T29062] [ 1591.639155][T29062] dump_stack_lvl+0x188/0x24e [ 1591.643868][T29062] ? show_regs_print_info+0x12/0x12 [ 1591.649101][T29062] ? load_image+0x410/0x410 [ 1591.653645][T29062] sysfs_warn_dup+0x8a/0xa0 [ 1591.658182][T29062] sysfs_do_create_link_sd+0xc0/0x110 [ 1591.663587][T29062] device_add+0x83b/0x1050 [ 1591.668035][T29062] wiphy_register+0x1f16/0x2c50 [ 1591.672935][T29062] ? cfg80211_event_work+0x40/0x40 [ 1591.678087][T29062] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1591.684182][T29062] ieee80211_register_hw+0x2e33/0x3b00 [ 1591.689686][T29062] ? ieee80211_register_hw+0xec1/0x3b00 [ 1591.695258][T29062] ? ieee80211_register_hw+0xec1/0x3b00 [ 1591.700846][T29062] ? ieee80211_tasklet_handler+0x20/0x20 [ 1591.706512][T29062] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1591.712440][T29062] ? __debug_object_init+0xed/0x440 [ 1591.717679][T29062] ? memset+0x1e/0x40 [ 1591.721685][T29062] ? __hrtimer_init+0x189/0x270 [ 1591.726565][T29062] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1591.732331][T29062] ? memcpy+0x3c/0x60 [ 1591.736344][T29062] hwsim_new_radio_nl+0xab7/0xc90 [ 1591.741414][T29062] genl_family_rcv_msg_doit+0x22f/0x350 [ 1591.746989][T29062] ? end_current_label_crit_section+0x170/0x170 [ 1591.753253][T29062] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1591.759229][T29062] ? bpf_lsm_capable+0x5/0x10 [ 1591.763942][T29062] ? security_capable+0x85/0xb0 [ 1591.768807][T29062] genl_rcv_msg+0x601/0x790 [ 1591.773354][T29062] ? genl_bind+0x360/0x360 [ 1591.777827][T29062] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1591.784159][T29062] netlink_rcv_skb+0x1ef/0x440 [ 1591.788917][T29062] ? genl_bind+0x360/0x360 [ 1591.793330][T29062] ? netlink_ack+0x1160/0x1160 [ 1591.798096][T29062] ? down_read+0x1a8/0x2d0 [ 1591.802510][T29062] genl_rcv+0x24/0x40 [ 1591.806492][T29062] netlink_unicast+0x7ad/0x920 [ 1591.811280][T29062] netlink_sendmsg+0x8ad/0xbd0 [ 1591.816045][T29062] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1591.822221][T29062] ? netlink_getsockopt+0x550/0x550 [ 1591.827461][T29062] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1591.832774][T29062] ? security_socket_sendmsg+0x7c/0xa0 [ 1591.838257][T29062] ? netlink_getsockopt+0x550/0x550 [ 1591.843490][T29062] ____sys_sendmsg+0x5ed/0x9a0 [ 1591.848283][T29062] ? __sys_sendmsg_sock+0x30/0x30 [ 1591.853303][T29062] ? __import_iovec+0x306/0x510 [ 1591.858172][T29062] ? import_iovec+0x6f/0xa0 [ 1591.862686][T29062] ___sys_sendmsg+0x2a2/0x360 [ 1591.867399][T29062] ? __sys_sendmsg+0x2a0/0x2a0 [ 1591.872190][T29062] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1591.878016][T29062] __se_sys_sendmsg+0x1c3/0x2b0 [ 1591.882897][T29062] ? __x64_sys_sendmsg+0x80/0x80 [ 1591.887853][T29062] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1591.893757][T29062] do_syscall_64+0x4c/0xa0 [ 1591.898173][T29062] ? clear_bhb_loop+0x60/0xb0 [ 1591.902844][T29062] ? clear_bhb_loop+0x60/0xb0 [ 1591.907521][T29062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1591.913409][T29062] RIP: 0033:0x7effbc39fb19 [ 1591.917815][T29062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1591.937430][T29062] RSP: 002b:00007effbd233028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1591.945852][T29062] RAX: ffffffffffffffda RBX: 00007effbc625fa0 RCX: 00007effbc39fb19 [ 1591.953819][T29062] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000006 [ 1591.961783][T29062] RBP: 00007effbc437b70 R08: 0000000000000000 R09: 0000000000000000 [ 1591.969748][T29062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1591.977713][T29062] R13: 00007effbc626038 R14: 00007effbc625fa0 R15: 00007ffe03730a18 [ 1591.985719][T29062] [ 1592.386621][T29081] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1592.795117][T29107] netlink: 'syz.2.9732': attribute type 10 has an invalid length. [ 1592.829555][T29104] netlink: 131088 bytes leftover after parsing attributes in process `syz.6.9733'. [ 1592.886681][T29107] device netdevsim0 entered promiscuous mode [ 1592.926012][T29107] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1592.972584][T29104] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1592.998778][T29109] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1593.011921][T29104] CPU: 0 PID: 29104 Comm: syz.6.9733 Not tainted syzkaller #0 [ 1593.019423][T29104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1593.029500][T29104] Call Trace: [ 1593.032803][T29104] [ 1593.035761][T29104] dump_stack_lvl+0x188/0x24e [ 1593.040475][T29104] ? show_regs_print_info+0x12/0x12 [ 1593.045709][T29104] ? load_image+0x410/0x410 [ 1593.050257][T29104] sysfs_warn_dup+0x8a/0xa0 [ 1593.054788][T29104] sysfs_do_create_link_sd+0xc0/0x110 [ 1593.060199][T29104] device_add+0x83b/0x1050 [ 1593.064648][T29104] wiphy_register+0x1f16/0x2c50 [ 1593.069546][T29104] ? cfg80211_event_work+0x40/0x40 [ 1593.074681][T29104] ? minstrel_ht_alloc+0x894/0xa20 [ 1593.079832][T29104] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1593.085929][T29104] ieee80211_register_hw+0x2e33/0x3b00 [ 1593.091433][T29104] ? ieee80211_register_hw+0xec1/0x3b00 [ 1593.097007][T29104] ? ieee80211_register_hw+0xec1/0x3b00 [ 1593.102598][T29104] ? ieee80211_tasklet_handler+0x20/0x20 [ 1593.108256][T29104] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1593.114185][T29104] ? __debug_object_init+0xed/0x440 [ 1593.119417][T29104] ? memset+0x1e/0x40 [ 1593.123420][T29104] ? __hrtimer_init+0x189/0x270 [ 1593.128304][T29104] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1593.134070][T29104] ? memcpy+0x3c/0x60 [ 1593.138088][T29104] hwsim_new_radio_nl+0xab7/0xc90 [ 1593.143161][T29104] genl_family_rcv_msg_doit+0x22f/0x350 [ 1593.148750][T29104] ? end_current_label_crit_section+0x170/0x170 [ 1593.155025][T29104] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1593.160963][T29104] ? bpf_lsm_capable+0x5/0x10 [ 1593.165670][T29104] ? security_capable+0x85/0xb0 [ 1593.170651][T29104] genl_rcv_msg+0x601/0x790 [ 1593.175185][T29104] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1593.181361][T29104] ? genl_bind+0x360/0x360 [ 1593.185780][T29104] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1593.192125][T29104] ? lock_acquire+0x226/0x4a0 [ 1593.196829][T29104] netlink_rcv_skb+0x1ef/0x440 [ 1593.201588][T29104] ? genl_bind+0x360/0x360 [ 1593.206001][T29104] ? netlink_ack+0x1160/0x1160 [ 1593.210765][T29104] ? down_read+0x1a8/0x2d0 [ 1593.215189][T29104] genl_rcv+0x24/0x40 [ 1593.219203][T29104] netlink_unicast+0x7ad/0x920 [ 1593.224009][T29104] netlink_sendmsg+0x8ad/0xbd0 [ 1593.228811][T29104] ? netlink_getsockopt+0x550/0x550 [ 1593.234043][T29104] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1593.239617][T29104] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1593.244928][T29104] ? security_socket_sendmsg+0x7c/0xa0 [ 1593.250409][T29104] ? netlink_getsockopt+0x550/0x550 [ 1593.255639][T29104] ____sys_sendmsg+0x5ed/0x9a0 [ 1593.260440][T29104] ? __sys_sendmsg_sock+0x30/0x30 [ 1593.265489][T29104] ? __import_iovec+0x306/0x510 [ 1593.270374][T29104] ? import_iovec+0x6f/0xa0 [ 1593.274911][T29104] ___sys_sendmsg+0x2a2/0x360 [ 1593.279612][T29104] ? migrate_enable+0x148/0x220 [ 1593.284492][T29104] ? __sys_sendmsg+0x2a0/0x2a0 [ 1593.289334][T29104] __se_sys_sendmsg+0x1c3/0x2b0 [ 1593.294225][T29104] ? __x64_sys_sendmsg+0x80/0x80 [ 1593.299226][T29104] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1593.305155][T29104] do_syscall_64+0x4c/0xa0 [ 1593.309603][T29104] ? clear_bhb_loop+0x60/0xb0 [ 1593.314276][T29104] ? clear_bhb_loop+0x60/0xb0 [ 1593.318964][T29104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1593.324880][T29104] RIP: 0033:0x7f74e4d9fb19 [ 1593.329306][T29104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1593.348909][T29104] RSP: 002b:00007f74e2ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1593.357323][T29104] RAX: ffffffffffffffda RBX: 00007f74e5025fa0 RCX: 00007f74e4d9fb19 [ 1593.365288][T29104] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000006 [ 1593.373262][T29104] RBP: 00007f74e4e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1593.381229][T29104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1593.389200][T29104] R13: 00007f74e5026038 R14: 00007f74e5025fa0 R15: 00007ffec1067af8 [ 1593.397176][T29104] [ 1593.862683][T29139] netlink: 'syz.6.9744': attribute type 4 has an invalid length. [ 1593.887722][T29139] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.9744'. [ 1594.007149][T29144] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1594.350528][T29155] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1594.654900][T29163] netlink: 'syz.5.9751': attribute type 10 has an invalid length. [ 1594.702867][T29163] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1595.566238][T29183] netlink: 131088 bytes leftover after parsing attributes in process `syz.5.9757'. [ 1595.624764][T29183] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1595.656064][T29183] CPU: 0 PID: 29183 Comm: syz.5.9757 Not tainted syzkaller #0 [ 1595.663758][T29183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1595.673835][T29183] Call Trace: [ 1595.677129][T29183] [ 1595.680083][T29183] dump_stack_lvl+0x188/0x24e [ 1595.684802][T29183] ? show_regs_print_info+0x12/0x12 [ 1595.690039][T29183] ? load_image+0x410/0x410 [ 1595.694587][T29183] sysfs_warn_dup+0x8a/0xa0 [ 1595.699127][T29183] sysfs_do_create_link_sd+0xc0/0x110 [ 1595.704535][T29183] device_add+0x83b/0x1050 [ 1595.708986][T29183] wiphy_register+0x1f16/0x2c50 [ 1595.713874][T29183] ? cfg80211_event_work+0x40/0x40 [ 1595.718999][T29183] ? minstrel_ht_alloc+0x894/0xa20 [ 1595.724208][T29183] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1595.730274][T29183] ieee80211_register_hw+0x2e33/0x3b00 [ 1595.735735][T29183] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1595.741900][T29183] ? ieee80211_register_hw+0xec1/0x3b00 [ 1595.747447][T29183] ? ieee80211_register_hw+0xec1/0x3b00 [ 1595.752994][T29183] ? ieee80211_tasklet_handler+0x20/0x20 [ 1595.758627][T29183] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1595.764524][T29183] ? __debug_object_init+0xed/0x440 [ 1595.769726][T29183] ? memset+0x1e/0x40 [ 1595.773705][T29183] ? __hrtimer_init+0x189/0x270 [ 1595.778556][T29183] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1595.784283][T29183] ? memcpy+0x3c/0x60 [ 1595.788262][T29183] hwsim_new_radio_nl+0xab7/0xc90 [ 1595.793298][T29183] genl_family_rcv_msg_doit+0x22f/0x350 [ 1595.798844][T29183] ? end_current_label_crit_section+0x170/0x170 [ 1595.805188][T29183] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1595.811087][T29183] ? bpf_lsm_capable+0x5/0x10 [ 1595.815758][T29183] ? security_capable+0x85/0xb0 [ 1595.820615][T29183] genl_rcv_msg+0x601/0x790 [ 1595.825125][T29183] ? genl_bind+0x360/0x360 [ 1595.829539][T29183] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1595.835880][T29183] netlink_rcv_skb+0x1ef/0x440 [ 1595.840753][T29183] ? genl_bind+0x360/0x360 [ 1595.845184][T29183] ? netlink_ack+0x1160/0x1160 [ 1595.849967][T29183] ? down_read+0x1a8/0x2d0 [ 1595.854390][T29183] genl_rcv+0x24/0x40 [ 1595.858377][T29183] netlink_unicast+0x7ad/0x920 [ 1595.863151][T29183] netlink_sendmsg+0x8ad/0xbd0 [ 1595.867949][T29183] ? netlink_getsockopt+0x550/0x550 [ 1595.873149][T29183] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1595.878718][T29183] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1595.883998][T29183] ? security_socket_sendmsg+0x7c/0xa0 [ 1595.889467][T29183] ? netlink_getsockopt+0x550/0x550 [ 1595.894666][T29183] ____sys_sendmsg+0x5ed/0x9a0 [ 1595.899442][T29183] ? __import_iovec+0x43a/0x510 [ 1595.904290][T29183] ? __sys_sendmsg_sock+0x30/0x30 [ 1595.909317][T29183] ? import_iovec+0x6f/0xa0 [ 1595.913821][T29183] ___sys_sendmsg+0x2a2/0x360 [ 1595.918506][T29183] ? __sys_sendmsg+0x2a0/0x2a0 [ 1595.923285][T29183] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1595.929023][T29183] __se_sys_sendmsg+0x1c3/0x2b0 [ 1595.933883][T29183] ? __x64_sys_sendmsg+0x80/0x80 [ 1595.938837][T29183] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1595.944743][T29183] do_syscall_64+0x4c/0xa0 [ 1595.949159][T29183] ? clear_bhb_loop+0x60/0xb0 [ 1595.953832][T29183] ? clear_bhb_loop+0x60/0xb0 [ 1595.958514][T29183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1595.964410][T29183] RIP: 0033:0x7f9da0d9fb19 [ 1595.968847][T29183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1595.988452][T29183] RSP: 002b:00007f9d9eff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1595.996865][T29183] RAX: ffffffffffffffda RBX: 00007f9da1025fa0 RCX: 00007f9da0d9fb19 [ 1596.004854][T29183] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000006 [ 1596.012837][T29183] RBP: 00007f9da0e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1596.020800][T29183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1596.028764][T29183] R13: 00007f9da1026038 R14: 00007f9da1025fa0 R15: 00007fff53b2cc48 [ 1596.036746][T29183] [ 1596.279534][T29191] netlink: 'syz.2.9761': attribute type 4 has an invalid length. [ 1596.305403][T29191] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9761'. [ 1596.701261][T29211] netlink: 'syz.5.9770': attribute type 10 has an invalid length. [ 1597.396549][T29234] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.9777'. [ 1597.460240][T29234] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1597.511360][T29234] CPU: 1 PID: 29234 Comm: syz.2.9777 Not tainted syzkaller #0 [ 1597.518884][T29234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1597.528968][T29234] Call Trace: [ 1597.532261][T29234] [ 1597.535201][T29234] dump_stack_lvl+0x188/0x24e [ 1597.539910][T29234] ? show_regs_print_info+0x12/0x12 [ 1597.545115][T29234] ? load_image+0x410/0x410 [ 1597.549625][T29234] sysfs_warn_dup+0x8a/0xa0 [ 1597.554130][T29234] sysfs_do_create_link_sd+0xc0/0x110 [ 1597.559508][T29234] device_add+0x83b/0x1050 [ 1597.563928][T29234] wiphy_register+0x1f16/0x2c50 [ 1597.568792][T29234] ? cfg80211_event_work+0x40/0x40 [ 1597.573910][T29234] ? minstrel_ht_alloc+0x894/0xa20 [ 1597.579052][T29234] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1597.585140][T29234] ieee80211_register_hw+0x2e33/0x3b00 [ 1597.590631][T29234] ? ieee80211_register_hw+0xec1/0x3b00 [ 1597.596215][T29234] ? ieee80211_register_hw+0xec1/0x3b00 [ 1597.601773][T29234] ? ieee80211_tasklet_handler+0x20/0x20 [ 1597.607407][T29234] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1597.613311][T29234] ? __debug_object_init+0xed/0x440 [ 1597.618517][T29234] ? memset+0x1e/0x40 [ 1597.622537][T29234] ? __hrtimer_init+0x189/0x270 [ 1597.627393][T29234] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1597.633123][T29234] ? memcpy+0x3c/0x60 [ 1597.637110][T29234] hwsim_new_radio_nl+0xab7/0xc90 [ 1597.642154][T29234] genl_family_rcv_msg_doit+0x22f/0x350 [ 1597.647708][T29234] ? end_current_label_crit_section+0x170/0x170 [ 1597.653962][T29234] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1597.659866][T29234] ? bpf_lsm_capable+0x5/0x10 [ 1597.664539][T29234] ? security_capable+0x85/0xb0 [ 1597.669398][T29234] genl_rcv_msg+0x601/0x790 [ 1597.673914][T29234] ? genl_bind+0x360/0x360 [ 1597.678333][T29234] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1597.684674][T29234] netlink_rcv_skb+0x1ef/0x440 [ 1597.689440][T29234] ? genl_bind+0x360/0x360 [ 1597.693856][T29234] ? netlink_ack+0x1160/0x1160 [ 1597.698627][T29234] ? down_read+0x1a8/0x2d0 [ 1597.703043][T29234] genl_rcv+0x24/0x40 [ 1597.707029][T29234] netlink_unicast+0x7ad/0x920 [ 1597.711803][T29234] netlink_sendmsg+0x8ad/0xbd0 [ 1597.716622][T29234] ? netlink_getsockopt+0x550/0x550 [ 1597.722000][T29234] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1597.727570][T29234] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1597.732852][T29234] ? security_socket_sendmsg+0x7c/0xa0 [ 1597.738308][T29234] ? netlink_getsockopt+0x550/0x550 [ 1597.743511][T29234] ____sys_sendmsg+0x5ed/0x9a0 [ 1597.748282][T29234] ? __sys_sendmsg_sock+0x30/0x30 [ 1597.753327][T29234] ? __import_iovec+0x306/0x510 [ 1597.758186][T29234] ? import_iovec+0x6f/0xa0 [ 1597.762690][T29234] ___sys_sendmsg+0x2a2/0x360 [ 1597.767378][T29234] ? __sys_sendmsg+0x2a0/0x2a0 [ 1597.772206][T29234] __se_sys_sendmsg+0x1c3/0x2b0 [ 1597.777061][T29234] ? __x64_sys_sendmsg+0x80/0x80 [ 1597.782025][T29234] do_syscall_64+0x4c/0xa0 [ 1597.786447][T29234] ? clear_bhb_loop+0x60/0xb0 [ 1597.791127][T29234] ? clear_bhb_loop+0x60/0xb0 [ 1597.795812][T29234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1597.801709][T29234] RIP: 0033:0x7feade99fb19 [ 1597.806127][T29234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1597.825740][T29234] RSP: 002b:00007feadf786028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1597.834151][T29234] RAX: ffffffffffffffda RBX: 00007feadec25fa0 RCX: 00007feade99fb19 [ 1597.842118][T29234] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000006 [ 1597.850083][T29234] RBP: 00007feadea37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1597.858049][T29234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1597.866017][T29234] R13: 00007feadec26038 R14: 00007feadec25fa0 R15: 00007ffdbf7f0d98 [ 1597.873996][T29234] [ 1598.147018][T29243] netlink: 'syz.0.9779': attribute type 4 has an invalid length. [ 1598.197665][T29243] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9779'. [ 1598.787049][T29272] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.9793'. [ 1598.805406][T29272] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1598.826782][T29272] CPU: 1 PID: 29272 Comm: syz.2.9793 Not tainted syzkaller #0 [ 1598.834296][T29272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1598.844357][T29272] Call Trace: [ 1598.847637][T29272] [ 1598.850572][T29272] dump_stack_lvl+0x188/0x24e [ 1598.855264][T29272] ? show_regs_print_info+0x12/0x12 [ 1598.860463][T29272] ? load_image+0x410/0x410 [ 1598.864979][T29272] sysfs_warn_dup+0x8a/0xa0 [ 1598.869485][T29272] sysfs_do_create_link_sd+0xc0/0x110 [ 1598.874859][T29272] device_add+0x83b/0x1050 [ 1598.879282][T29272] wiphy_register+0x1f16/0x2c50 [ 1598.884151][T29272] ? cfg80211_event_work+0x40/0x40 [ 1598.889260][T29272] ? minstrel_ht_alloc+0x894/0xa20 [ 1598.894381][T29272] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1598.900455][T29272] ieee80211_register_hw+0x2e33/0x3b00 [ 1598.905928][T29272] ? ieee80211_register_hw+0xec1/0x3b00 [ 1598.911473][T29272] ? ieee80211_register_hw+0xec1/0x3b00 [ 1598.917030][T29272] ? ieee80211_tasklet_handler+0x20/0x20 [ 1598.922662][T29272] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1598.928555][T29272] ? __debug_object_init+0xed/0x440 [ 1598.933759][T29272] ? memset+0x1e/0x40 [ 1598.937736][T29272] ? __hrtimer_init+0x189/0x270 [ 1598.942593][T29272] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1598.948323][T29272] ? memcpy+0x3c/0x60 [ 1598.952304][T29272] hwsim_new_radio_nl+0xab7/0xc90 [ 1598.957337][T29272] genl_family_rcv_msg_doit+0x22f/0x350 [ 1598.962887][T29272] ? end_current_label_crit_section+0x170/0x170 [ 1598.969134][T29272] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1598.975034][T29272] ? bpf_lsm_capable+0x5/0x10 [ 1598.979709][T29272] ? security_capable+0x85/0xb0 [ 1598.984565][T29272] genl_rcv_msg+0x601/0x790 [ 1598.989077][T29272] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1598.995234][T29272] ? genl_bind+0x360/0x360 [ 1598.999646][T29272] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1599.005977][T29272] ? lock_acquire+0x226/0x4a0 [ 1599.010657][T29272] netlink_rcv_skb+0x1ef/0x440 [ 1599.015427][T29272] ? genl_bind+0x360/0x360 [ 1599.019841][T29272] ? netlink_ack+0x1160/0x1160 [ 1599.024614][T29272] ? down_read+0x1a8/0x2d0 [ 1599.029033][T29272] genl_rcv+0x24/0x40 [ 1599.033016][T29272] netlink_unicast+0x7ad/0x920 [ 1599.037785][T29272] netlink_sendmsg+0x8ad/0xbd0 [ 1599.042551][T29272] ? netlink_getsockopt+0x550/0x550 [ 1599.047754][T29272] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1599.053297][T29272] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1599.058587][T29272] ? security_socket_sendmsg+0x7c/0xa0 [ 1599.064038][T29272] ? netlink_getsockopt+0x550/0x550 [ 1599.069236][T29272] ____sys_sendmsg+0x5ed/0x9a0 [ 1599.074005][T29272] ? __sys_sendmsg_sock+0x30/0x30 [ 1599.079026][T29272] ? __import_iovec+0x306/0x510 [ 1599.083883][T29272] ? import_iovec+0x6f/0xa0 [ 1599.088386][T29272] ___sys_sendmsg+0x2a2/0x360 [ 1599.093070][T29272] ? __sys_sendmsg+0x2a0/0x2a0 [ 1599.097871][T29272] ? ktime_get+0x7b/0x270 [ 1599.102198][T29272] ? trace_call_bpf+0xbf/0x6b0 [ 1599.106980][T29272] __se_sys_sendmsg+0x1c3/0x2b0 [ 1599.111827][T29272] ? perf_trace_preemptirq_template+0x268/0x320 [ 1599.118065][T29272] ? __x64_sys_sendmsg+0x80/0x80 [ 1599.123014][T29272] ? lockdep_hardirqs_on+0x94/0x140 [ 1599.128210][T29272] do_syscall_64+0x4c/0xa0 [ 1599.132632][T29272] ? clear_bhb_loop+0x60/0xb0 [ 1599.137305][T29272] ? clear_bhb_loop+0x60/0xb0 [ 1599.141980][T29272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1599.147876][T29272] RIP: 0033:0x7feade99fb19 [ 1599.152288][T29272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1599.171911][T29272] RSP: 002b:00007feadf786028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1599.180320][T29272] RAX: ffffffffffffffda RBX: 00007feadec25fa0 RCX: 00007feade99fb19 [ 1599.188284][T29272] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000006 [ 1599.196249][T29272] RBP: 00007feadea37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1599.204225][T29272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1599.212204][T29272] R13: 00007feadec26038 R14: 00007feadec25fa0 R15: 00007ffdbf7f0d98 [ 1599.220187][T29272] [ 1599.822428][T29291] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1600.593433][T29310] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.9809'. [ 1600.650878][T29310] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1600.678801][T29310] CPU: 1 PID: 29310 Comm: syz.2.9809 Not tainted syzkaller #0 [ 1600.686315][T29310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1600.696409][T29310] Call Trace: [ 1600.699710][T29310] [ 1600.702661][T29310] dump_stack_lvl+0x188/0x24e [ 1600.707375][T29310] ? show_regs_print_info+0x12/0x12 [ 1600.712604][T29310] ? load_image+0x410/0x410 [ 1600.717132][T29310] sysfs_warn_dup+0x8a/0xa0 [ 1600.721640][T29310] sysfs_do_create_link_sd+0xc0/0x110 [ 1600.727013][T29310] device_add+0x83b/0x1050 [ 1600.731430][T29310] wiphy_register+0x1f16/0x2c50 [ 1600.736293][T29310] ? cfg80211_event_work+0x40/0x40 [ 1600.741408][T29310] ? minstrel_ht_alloc+0x894/0xa20 [ 1600.746528][T29310] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1600.752597][T29310] ieee80211_register_hw+0x2e33/0x3b00 [ 1600.758067][T29310] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1600.764258][T29310] ? ieee80211_register_hw+0xec1/0x3b00 [ 1600.769803][T29310] ? ieee80211_register_hw+0xec1/0x3b00 [ 1600.775354][T29310] ? ieee80211_tasklet_handler+0x20/0x20 [ 1600.781014][T29310] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1600.786910][T29310] ? __debug_object_init+0xed/0x440 [ 1600.792110][T29310] ? memset+0x1e/0x40 [ 1600.796084][T29310] ? __hrtimer_init+0x189/0x270 [ 1600.800936][T29310] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1600.806663][T29310] ? memcpy+0x3c/0x60 [ 1600.810646][T29310] hwsim_new_radio_nl+0xab7/0xc90 [ 1600.815682][T29310] genl_family_rcv_msg_doit+0x22f/0x350 [ 1600.821229][T29310] ? end_current_label_crit_section+0x170/0x170 [ 1600.827469][T29310] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1600.833369][T29310] ? bpf_lsm_capable+0x5/0x10 [ 1600.838073][T29310] ? security_capable+0x85/0xb0 [ 1600.842930][T29310] genl_rcv_msg+0x601/0x790 [ 1600.847442][T29310] ? genl_bind+0x360/0x360 [ 1600.851854][T29310] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1600.858192][T29310] netlink_rcv_skb+0x1ef/0x440 [ 1600.862954][T29310] ? genl_bind+0x360/0x360 [ 1600.867369][T29310] ? netlink_ack+0x1160/0x1160 [ 1600.872143][T29310] ? down_read+0x1a8/0x2d0 [ 1600.876555][T29310] genl_rcv+0x24/0x40 [ 1600.880539][T29310] netlink_unicast+0x7ad/0x920 [ 1600.885309][T29310] netlink_sendmsg+0x8ad/0xbd0 [ 1600.890088][T29310] ? netlink_getsockopt+0x550/0x550 [ 1600.895287][T29310] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1600.900918][T29310] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1600.906198][T29310] ? security_socket_sendmsg+0x7c/0xa0 [ 1600.911741][T29310] ? netlink_getsockopt+0x550/0x550 [ 1600.916973][T29310] ____sys_sendmsg+0x5ed/0x9a0 [ 1600.921748][T29310] ? __sys_sendmsg_sock+0x30/0x30 [ 1600.926771][T29310] ? __import_iovec+0x306/0x510 [ 1600.931628][T29310] ? import_iovec+0x6f/0xa0 [ 1600.936131][T29310] ___sys_sendmsg+0x2a2/0x360 [ 1600.940815][T29310] ? __sys_sendmsg+0x2a0/0x2a0 [ 1600.945598][T29310] ? ktime_get+0x7b/0x270 [ 1600.949921][T29310] ? trace_call_bpf+0xbf/0x6b0 [ 1600.954706][T29310] __se_sys_sendmsg+0x1c3/0x2b0 [ 1600.959557][T29310] ? perf_trace_preemptirq_template+0x268/0x320 [ 1600.965814][T29310] ? __x64_sys_sendmsg+0x80/0x80 [ 1600.970781][T29310] ? lockdep_hardirqs_on+0x94/0x140 [ 1600.975996][T29310] do_syscall_64+0x4c/0xa0 [ 1600.980425][T29310] ? clear_bhb_loop+0x60/0xb0 [ 1600.985112][T29310] ? clear_bhb_loop+0x60/0xb0 [ 1600.989796][T29310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1600.995720][T29310] RIP: 0033:0x7feade99fb19 [ 1601.000134][T29310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1601.019740][T29310] RSP: 002b:00007feadf786028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1601.028172][T29310] RAX: ffffffffffffffda RBX: 00007feadec25fa0 RCX: 00007feade99fb19 [ 1601.036141][T29310] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000006 [ 1601.044104][T29310] RBP: 00007feadea37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1601.052090][T29310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1601.060054][T29310] R13: 00007feadec26038 R14: 00007feadec25fa0 R15: 00007ffdbf7f0d98 [ 1601.068037][T29310] [ 1601.473563][T29329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9814'. [ 1601.521021][T29329] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9814'. [ 1601.533780][T29332] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1602.278487][T29362] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.9824'. [ 1602.349226][T29362] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1602.383504][T29362] CPU: 1 PID: 29362 Comm: syz.2.9824 Not tainted syzkaller #0 [ 1602.391031][T29362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1602.401114][T29362] Call Trace: [ 1602.404418][T29362] [ 1602.407371][T29362] dump_stack_lvl+0x188/0x24e [ 1602.412090][T29362] ? show_regs_print_info+0x12/0x12 [ 1602.417324][T29362] ? load_image+0x410/0x410 [ 1602.421881][T29362] sysfs_warn_dup+0x8a/0xa0 [ 1602.426420][T29362] sysfs_do_create_link_sd+0xc0/0x110 [ 1602.431838][T29362] device_add+0x83b/0x1050 [ 1602.436294][T29362] wiphy_register+0x1f16/0x2c50 [ 1602.441204][T29362] ? cfg80211_event_work+0x40/0x40 [ 1602.446354][T29362] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1602.452551][T29362] ? rtnl_unlock+0x5/0x10 [ 1602.456914][T29362] ieee80211_register_hw+0x2e33/0x3b00 [ 1602.462403][T29362] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1602.468572][T29362] ? ieee80211_register_hw+0xec1/0x3b00 [ 1602.474121][T29362] ? ieee80211_register_hw+0xec1/0x3b00 [ 1602.479696][T29362] ? ieee80211_tasklet_handler+0x20/0x20 [ 1602.485330][T29362] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1602.491227][T29362] ? __debug_object_init+0xed/0x440 [ 1602.496430][T29362] ? memset+0x1e/0x40 [ 1602.500409][T29362] ? __hrtimer_init+0x189/0x270 [ 1602.505285][T29362] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1602.511013][T29362] ? memcpy+0x3c/0x60 [ 1602.514993][T29362] hwsim_new_radio_nl+0xab7/0xc90 [ 1602.520059][T29362] genl_family_rcv_msg_doit+0x22f/0x350 [ 1602.525611][T29362] ? end_current_label_crit_section+0x170/0x170 [ 1602.531858][T29362] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1602.537763][T29362] ? bpf_lsm_capable+0x5/0x10 [ 1602.542442][T29362] ? security_capable+0x85/0xb0 [ 1602.547298][T29362] genl_rcv_msg+0x601/0x790 [ 1602.551824][T29362] ? genl_bind+0x360/0x360 [ 1602.556241][T29362] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1602.562580][T29362] netlink_rcv_skb+0x1ef/0x440 [ 1602.567344][T29362] ? genl_bind+0x360/0x360 [ 1602.571782][T29362] ? netlink_ack+0x1160/0x1160 [ 1602.576575][T29362] ? down_read+0x1a8/0x2d0 [ 1602.581006][T29362] genl_rcv+0x24/0x40 [ 1602.584995][T29362] netlink_unicast+0x7ad/0x920 [ 1602.589768][T29362] netlink_sendmsg+0x8ad/0xbd0 [ 1602.594540][T29362] ? netlink_getsockopt+0x550/0x550 [ 1602.599749][T29362] ? netlink_getsockopt+0x550/0x550 [ 1602.604947][T29362] ____sys_sendmsg+0x5ed/0x9a0 [ 1602.609718][T29362] ? __sys_sendmsg_sock+0x30/0x30 [ 1602.614739][T29362] ? __import_iovec+0x306/0x510 [ 1602.619597][T29362] ? import_iovec+0x6f/0xa0 [ 1602.624101][T29362] ___sys_sendmsg+0x2a2/0x360 [ 1602.628786][T29362] ? __sys_sendmsg+0x2a0/0x2a0 [ 1602.633562][T29362] ? ktime_get+0x7b/0x270 [ 1602.637908][T29362] __se_sys_sendmsg+0x1c3/0x2b0 [ 1602.642759][T29362] ? ct_nmi_exit+0x145/0x1c0 [ 1602.647349][T29362] ? __x64_sys_sendmsg+0x80/0x80 [ 1602.652299][T29362] ? lockdep_hardirqs_on+0x94/0x140 [ 1602.657503][T29362] do_syscall_64+0x4c/0xa0 [ 1602.661917][T29362] ? clear_bhb_loop+0x60/0xb0 [ 1602.666590][T29362] ? clear_bhb_loop+0x60/0xb0 [ 1602.671293][T29362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1602.677185][T29362] RIP: 0033:0x7feade99fb19 [ 1602.681596][T29362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1602.701199][T29362] RSP: 002b:00007feadf786028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1602.709616][T29362] RAX: ffffffffffffffda RBX: 00007feadec25fa0 RCX: 00007feade99fb19 [ 1602.717580][T29362] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000006 [ 1602.725548][T29362] RBP: 00007feadea37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1602.733516][T29362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1602.741485][T29362] R13: 00007feadec26038 R14: 00007feadec25fa0 R15: 00007ffdbf7f0d98 [ 1602.749468][T29362] [ 1603.397143][T29392] netlink: 'syz.6.9839': attribute type 4 has an invalid length. [ 1603.453443][T29392] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.9839'. [ 1603.644626][T29400] netlink: 'syz.2.9841': attribute type 10 has an invalid length. [ 1603.739890][T29404] netlink: 131088 bytes leftover after parsing attributes in process `syz.5.9844'. [ 1603.838355][T29404] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1603.846283][T29404] CPU: 1 PID: 29404 Comm: syz.5.9844 Not tainted syzkaller #0 [ 1603.853770][T29404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1603.863850][T29404] Call Trace: [ 1603.867155][T29404] [ 1603.870111][T29404] dump_stack_lvl+0x188/0x24e [ 1603.874839][T29404] ? show_regs_print_info+0x12/0x12 [ 1603.880066][T29404] ? load_image+0x410/0x410 [ 1603.884593][T29404] sysfs_warn_dup+0x8a/0xa0 [ 1603.889105][T29404] sysfs_do_create_link_sd+0xc0/0x110 [ 1603.894490][T29404] device_add+0x83b/0x1050 [ 1603.898948][T29404] wiphy_register+0x1f16/0x2c50 [ 1603.903817][T29404] ? cfg80211_event_work+0x40/0x40 [ 1603.908928][T29404] ? minstrel_ht_alloc+0x894/0xa20 [ 1603.914219][T29404] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1603.920288][T29404] ieee80211_register_hw+0x2e33/0x3b00 [ 1603.925770][T29404] ? ieee80211_register_hw+0xec1/0x3b00 [ 1603.931334][T29404] ? ieee80211_register_hw+0xec1/0x3b00 [ 1603.936903][T29404] ? ieee80211_tasklet_handler+0x20/0x20 [ 1603.942539][T29404] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1603.948435][T29404] ? __debug_object_init+0xed/0x440 [ 1603.953643][T29404] ? memset+0x1e/0x40 [ 1603.957619][T29404] ? __hrtimer_init+0x189/0x270 [ 1603.962471][T29404] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1603.968224][T29404] ? memcpy+0x3c/0x60 [ 1603.972207][T29404] hwsim_new_radio_nl+0xab7/0xc90 [ 1603.977244][T29404] genl_family_rcv_msg_doit+0x22f/0x350 [ 1603.982793][T29404] ? end_current_label_crit_section+0x170/0x170 [ 1603.989038][T29404] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1603.994949][T29404] ? lockdep_hardirqs_on+0x94/0x140 [ 1604.000150][T29404] ? bpf_lsm_capable+0x5/0x10 [ 1604.004821][T29404] ? security_capable+0x85/0xb0 [ 1604.009677][T29404] genl_rcv_msg+0x601/0x790 [ 1604.014190][T29404] ? genl_bind+0x360/0x360 [ 1604.018635][T29404] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1604.024971][T29404] ? lock_chain_count+0x20/0x20 [ 1604.029827][T29404] netlink_rcv_skb+0x1ef/0x440 [ 1604.034612][T29404] ? genl_bind+0x360/0x360 [ 1604.039029][T29404] ? netlink_ack+0x1160/0x1160 [ 1604.043819][T29404] ? down_read+0x1a8/0x2d0 [ 1604.048251][T29404] genl_rcv+0x24/0x40 [ 1604.052246][T29404] netlink_unicast+0x7ad/0x920 [ 1604.057027][T29404] netlink_sendmsg+0x8ad/0xbd0 [ 1604.061801][T29404] ? netlink_getsockopt+0x550/0x550 [ 1604.066999][T29404] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1604.072549][T29404] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1604.077840][T29404] ? security_socket_sendmsg+0x7c/0xa0 [ 1604.083330][T29404] ? netlink_getsockopt+0x550/0x550 [ 1604.088532][T29404] ____sys_sendmsg+0x5ed/0x9a0 [ 1604.093300][T29404] ? __import_iovec+0x1c7/0x510 [ 1604.098156][T29404] ? __sys_sendmsg_sock+0x30/0x30 [ 1604.103177][T29404] ? __import_iovec+0x306/0x510 [ 1604.108035][T29404] ? import_iovec+0x6f/0xa0 [ 1604.112553][T29404] ___sys_sendmsg+0x2a2/0x360 [ 1604.117238][T29404] ? __sys_sendmsg+0x2a0/0x2a0 [ 1604.122040][T29404] __se_sys_sendmsg+0x1c3/0x2b0 [ 1604.126891][T29404] ? perf_trace_preemptirq_template+0x268/0x320 [ 1604.133132][T29404] ? __x64_sys_sendmsg+0x80/0x80 [ 1604.138098][T29404] ? lockdep_hardirqs_on+0x94/0x140 [ 1604.143303][T29404] do_syscall_64+0x4c/0xa0 [ 1604.147717][T29404] ? clear_bhb_loop+0x60/0xb0 [ 1604.152394][T29404] ? clear_bhb_loop+0x60/0xb0 [ 1604.157066][T29404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1604.162963][T29404] RIP: 0033:0x7f9da0d9fb19 [ 1604.167375][T29404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1604.187153][T29404] RSP: 002b:00007f9d9eff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1604.195567][T29404] RAX: ffffffffffffffda RBX: 00007f9da1025fa0 RCX: 00007f9da0d9fb19 [ 1604.203536][T29404] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000006 [ 1604.211502][T29404] RBP: 00007f9da0e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1604.219465][T29404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1604.227433][T29404] R13: 00007f9da1026038 R14: 00007f9da1025fa0 R15: 00007fff53b2cc48 [ 1604.235430][T29404] [ 1604.792327][T29437] netlink: 'syz.4.9853': attribute type 4 has an invalid length. [ 1604.837199][T29437] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9853'. [ 1606.216172][T29475] netlink: 'syz.4.9870': attribute type 10 has an invalid length. [ 1606.235075][T29475] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9870'. [ 1606.262372][T29475] device  entered promiscuous mode [ 1606.282622][T29475] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1607.320731][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.327063][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.632127][T29525] netlink: 'syz.6.9887': attribute type 10 has an invalid length. [ 1607.671976][T29525] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9887'. [ 1607.698780][T29525] device caif0 entered promiscuous mode [ 1607.718313][T29525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1622.979052][T29564] delete_channel: no stack [ 1623.050316][T29570] netlink: 'syz.2.9903': attribute type 10 has an invalid length. [ 1623.076908][T29568] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1623.084752][T29568] #PF: supervisor instruction fetch in kernel mode [ 1623.091267][T29568] #PF: error_code(0x0010) - not-present page [ 1623.093282][T29570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9903'. [ 1623.097251][T29568] PGD 473ce067 P4D 473ce067 PUD 0 [ 1623.111328][T29568] Oops: 0010 [#1] PREEMPT SMP KASAN [ 1623.116538][T29568] CPU: 0 PID: 29568 Comm: syz.4.9905 Not tainted syzkaller #0 [ 1623.118604][T29570] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 1623.123987][T29568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1623.124000][T29568] RIP: 0010:0x0 [ 1623.124025][T29568] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1623.124033][T29568] RSP: 0018:ffffc9000deaf298 EFLAGS: 00010246 [ 1623.124049][T29568] RAX: 1ffffffff1696f77 RBX: 1ffff92001bd5e64 RCX: 0000000000000000 [ 1623.124062][T29568] RDX: ffffc9000deaf340 RSI: 0000000000000001 RDI: ffff888056ffc000 [ 1623.124075][T29568] RBP: ffffc9000deaf3b0 R08: ffff888056ffc03f R09: 1ffff1100adff807 [ 1623.124089][T29568] R10: dffffc0000000000 R11: ffffed100adff808 R12: ffffe8ffffc463b0 [ 1623.124101][T29568] R13: ffffffff8b4b7bb8 R14: 0000000000000001 R15: ffff888056ffc000 [ 1623.124113][T29568] FS: 00007f77cf3db6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1623.124129][T29568] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1623.124141][T29568] CR2: ffffffffffffffd6 CR3: 000000001d248000 CR4: 00000000003506f0 [ 1623.124158][T29568] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1623.124169][T29568] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1623.124181][T29568] Call Trace: [ 1623.124187][T29568] [ 1623.124193][T29568] bond_xdp_xmit+0x31e/0x550 [ 1623.124308][T29568] ? bond_xdp_xmit+0x94/0x550 [ 1623.124331][T29568] ? bond_xdp+0x8c0/0x8c0 [ 1623.124350][T29568] ? __lock_acquire+0x7ea0/0x7ea0 [ 1623.124378][T29568] bq_xmit_all+0xca9/0x1120 [ 1623.124398][T29568] ? get_page_from_freelist+0x206b/0x2180 [ 1623.124465][T29568] ? lockdep_hardirqs_on+0x94/0x140 [ 1623.124486][T29568] ? __dev_flush+0x1b0/0x1b0 [ 1623.124502][T29568] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1623.124535][T29568] ? rcu_is_watching+0x11/0xa0 [ 1623.124561][T29568] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 1623.124586][T29568] ? rcu_read_lock_bh_held+0x76/0xf0 [ 1623.124606][T29568] ? rcu_read_lock_held+0x40/0x40 [ 1623.124627][T29568] bq_enqueue+0x338/0x3d0 [ 1623.124645][T29568] dev_map_enqueue_multi+0xf89/0x10f0 [ 1623.124668][T29568] ? dev_map_enqueue+0x330/0x330 [ 1623.124683][T29568] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 1623.332144][T29568] ? rcu_read_lock_held+0x40/0x40 [ 1623.337185][T29568] xdp_do_redirect_frame+0x477/0x650 [ 1623.342472][T29568] bpf_test_run_xdp_live+0xa8b/0x1a90 [ 1623.347918][T29568] ? 0xffffffffa0004fc0 [ 1623.352064][T29568] ? text_poke_copy+0x7b/0x90 [ 1623.356791][T29568] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 1623.362330][T29568] ? xdp_convert_md_to_buff+0x330/0x330 [ 1623.367894][T29568] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1623.374157][T29568] ? _copy_from_user+0xe7/0x170 [ 1623.379021][T29568] ? bpf_test_init+0x119/0x140 [ 1623.383785][T29568] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1623.389241][T29568] bpf_prog_test_run_xdp+0x757/0xf80 [ 1623.394552][T29568] ? __lock_acquire+0x7ea0/0x7ea0 [ 1623.399580][T29568] ? dev_put+0x80/0x80 [ 1623.403641][T29568] ? dev_put+0x80/0x80 [ 1623.407696][T29568] bpf_prog_test_run+0x31c/0x390 [ 1623.412725][T29568] __sys_bpf+0x62b/0x780 [ 1623.416967][T29568] ? bpf_link_show_fdinfo+0x550/0x550 [ 1623.422336][T29568] ? lock_chain_count+0x20/0x20 [ 1623.427179][T29568] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1623.433156][T29568] __x64_sys_bpf+0x78/0x90 [ 1623.437567][T29568] do_syscall_64+0x4c/0xa0 [ 1623.442000][T29568] ? clear_bhb_loop+0x60/0xb0 [ 1623.446673][T29568] ? clear_bhb_loop+0x60/0xb0 [ 1623.451350][T29568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1623.457257][T29568] RIP: 0033:0x7f77ce59fb19 [ 1623.461667][T29568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1623.481270][T29568] RSP: 002b:00007f77cf3db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1623.489676][T29568] RAX: ffffffffffffffda RBX: 00007f77ce825fa0 RCX: 00007f77ce59fb19 [ 1623.497638][T29568] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1623.505630][T29568] RBP: 00007f77ce637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1623.513592][T29568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1623.521556][T29568] R13: 00007f77ce826038 R14: 00007f77ce825fa0 R15: 00007ffe1d7ceb38 [ 1623.529525][T29568] [ 1623.532548][T29568] Modules linked in: [ 1623.536439][T29568] CR2: 0000000000000000 [ 1623.540592][T29568] ---[ end trace 0000000000000000 ]--- [ 1623.546050][T29568] RIP: 0010:0x0 [ 1623.549508][T29568] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1623.556861][T29568] RSP: 0018:ffffc9000deaf298 EFLAGS: 00010246 [ 1623.562931][T29568] RAX: 1ffffffff1696f77 RBX: 1ffff92001bd5e64 RCX: 0000000000000000 [ 1623.570915][T29568] RDX: ffffc9000deaf340 RSI: 0000000000000001 RDI: ffff888056ffc000 [ 1623.578885][T29568] RBP: ffffc9000deaf3b0 R08: ffff888056ffc03f R09: 1ffff1100adff807 [ 1623.586851][T29568] R10: dffffc0000000000 R11: ffffed100adff808 R12: ffffe8ffffc463b0 [ 1623.594815][T29568] R13: ffffffff8b4b7bb8 R14: 0000000000000001 R15: ffff888056ffc000 [ 1623.602783][T29568] FS: 00007f77cf3db6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1623.611702][T29568] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1623.618276][T29568] CR2: ffffffffffffffd6 CR3: 000000001d248000 CR4: 00000000003506f0 [ 1623.626242][T29568] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1623.634201][T29568] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1623.642167][T29568] Kernel panic - not syncing: Fatal exception in interrupt [ 1623.649604][T29568] Kernel Offset: disabled [ 1623.653914][T29568] Rebooting in 86400 seconds..