last executing test programs: 7.291888058s ago: executing program 1 (id=5240): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x67, 0xff, 0x1, 0x4, 0x0, 0x1, 0x14141, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0xfffffffffffffff6, 0x400}, 0x526, 0x9, 0x1ff, 0x8, 0x9, 0x8, 0x7, 0x0, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0x8, r0, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = getpid() r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r4, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140)='syzkaller\x00'}, 0x30) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1000000}, r4, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x3168, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x5, 0x2, 0x1, 0x68, 0x0, 0x7, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000240)}, 0x19090, 0x80, 0x8, 0xdda20a3153014ab, 0xffffffffffffff00, 0x400, 0x2, 0x0, 0x5f, 0x0, 0x9}, r4, 0x6, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x3, 0xa, 0xb, 0x0, 0x5, 0x110, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xb597, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x100740, 0x1, 0x800, 0x4, 0x2, 0x9, 0x3, 0x0, 0x800, 0x0, 0x100000001}, r4, 0x5, r0, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) 6.932635029s ago: executing program 0 (id=5245): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80800, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) setsockopt$sock_attach_bpf(r0, 0x11e, 0x8, 0x0, 0x7c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) 6.903140511s ago: executing program 2 (id=5247): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 6.855267784s ago: executing program 4 (id=5250): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, 0x0, 0x4040004) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8d0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0901020028000b05d25a806f8c6394f90224fc600d00030009000100ff3582c137153e370248018010000000d1bd", 0x33fe0}], 0x1}, 0x0) 6.766146739s ago: executing program 1 (id=5251): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x6a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001bc0), 0xc}, 0x40, 0x8, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) syz_clone(0x8004000, &(0x7f00000004c0)="22eb2333ffb3ae91480e4db99bb3bf1e3f0007861633937c7127be797758e214a9887d2e96673c6e805c95e5c2646db93d959ed2105b9799bd282a8765b1bcba1247a28b326b9867f92519d0b8cc6f860c9841a9123e004e6c0d3ababa5895f2734db7eadf374514cf26731e238f2a6e07e76fe991bbf5d8e00767ab7bf1cc82d83643d3570481509ac125bab75827bf64cb24cf9330aaaaa0a47efcd7aef2a3e3a9ff9e8c845e296f8f4345ba621acf", 0xb0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 6.631485367s ago: executing program 2 (id=5253): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x1000, 0x3, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000001dc0)=""/146, 0x2c, 0x92, 0x1}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0xfffffdcb, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xb8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 6.468054736s ago: executing program 3 (id=5254): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1}, 0x4000000) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x2e, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.410488549s ago: executing program 4 (id=5255): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x10804, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.350223433s ago: executing program 2 (id=5256): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80800, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) setsockopt$sock_attach_bpf(r0, 0x11e, 0x8, 0x0, 0x7c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) 6.271366697s ago: executing program 3 (id=5257): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) 5.672040662s ago: executing program 1 (id=5258): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[@ANYBLOB="b70200000f0e1d14bfa300000000000024020000fffeff7f7a03f0fff8ffffff79a4f0ff00000000b7060000d0b68af1de640300000000007502faff07cd10020404000003007d60b70700000d1000006a0a00fe000000188500000008000000b70000000604002995000000000000001da5ad3548ebb63d18db6a1c72821c9b767ac8328fbcd5c5e4a5ad1059b5725ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1aa503b8de7ab9a780001000000000000d4bf20c2bd152d814f01f2cd539e030b0000000000007f4133b08e6e497640000000aea5cac0ceafdb9a2eeb02a1f5104d16ddb64963d84d91004cd5817e0b7f005e6ee7a39e2f0b5a18ed786b783ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a62d79b4c03e53466fa4f22d8c19f958e8b34de3535e7dacf1b13f7e875d1843c2288e7ff949a7a48ce18799ee53de177a81ea67a8f84538a9a311c754e5ab59a43f56d2085786e7ec07d78917f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d34a442bc098f4fcc96623b7c373b0ef04d55b846b094b0d6c7a75a76d445e0dcdf72c7ef97e08200000007b6e09a6a7caffff0000141f65e7d9ebe3be70c4364333af9a9d91c3e41ac37a63f85ad8254479c12f7c84fa5df32b70a80cce69cf30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48eb19767e00b75041739952fe87fde27ce0172f497e251f5b102893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7686bc2e1b45577c205c70631e8ad585951950e851250540593e61860b69a521f4e210b6494e3ab2d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7f58bde38b44ab13d980c894e00009338923789a1edcd8043fe83919088383268324a25df14010c8ea79c0d93ca77fd6c7ee30ea3aad2c6d6b8c97c00eaa00ff9bc46e1cfecbdc0e4ffac53e8f76c8b556306b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404a0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37d2fe7a60b903d2d9fe9c151c2fcc8dc389671c2d08b6e2641500568445b00cee4585af04fa69e0380be0d66649dcf3bf8a9066e5961197332c5c9da52b573109ea8b308ff070000aab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628ebe757bae30b356521df06f995cb57f97052fc4158250ccecfb47ea8faf509593fadc76e5d3c6840ad05a57af1ede94d87590ce90a0a7579766f847ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6c9eb0dcca5303eed6689ea910900785f61278dde47e6672e93a314a5f60e7b682bf0cacde21f6090f4fb311afd7f8b48f3f0d8c66449d8687dcf2d0f76668b2b9bf8b32b518e01ffb985f8054d37959c529e99b7daf32acfed749d516d014cef5f98126324e202badc1e5c20d69e576a770000000000005addc0103756b894418e4591c624a9b2ccabbfb85ad413d923b0c901973cd7c9d197d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe84f483b15f45b9a1d3af087047c568aef1d8659c6146a793026ebfc0bb5ec10b6290dc757a4903a88fb2c035f9349b6d2f0c051b8b775152786118a1020000fc19928ccb713ff09e179c308fbe9bc543dcf43f731074d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad10e5e9d26631c2f1db3a2882f6e130a79517a88de7596429a20793e12616aa32b3e720c6521fbe933321adde8ca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9605a504bca38627df469cebb7db08358e1e5ab17eea477b1754f78f45468c9568471647f8bc03d11811ac6eec1741ceb39a3ecd043c325fcabbab3d12f6a759f7ce11dafa387a8077db8a2230d2014a57bc8dd47741270000008000000000b2eebd5e1626cab98499328ff024a240199993433ceb5be20427a32df7047d63010dfc6a461517ad48ff64042e84c85c899fd11c6320a8d8fc0e78c15a5a4dd567f91dd943f6c2b32d094a461a990000000000000000000000000000000000000000000200000000000000000000b385c644a4a170e6dc9e9e546bfa049d025b319abd87fd85481743db5d6c2cb6a204d4d888dd4140c8edb598a36e21ad132bf6b88c99c5a5ed047d6589c10a5f6633b01813fc5cd7d048469a966bbfb300fd772cbadf2cf26899bfd15e7d9408026a92f13f11d1c9832259b2f97227f84a3bb96253717a1f7ac091d0f4632f638b09a0307ff31729857f9e6fe9f19e481a3f77cead663f42456e080952636515c758f1047b2148944133a492ef20a1778088c42094903d6ece2497b99fc745c420b035ff7961484a0f62a2d957ae2e47ff1ea8a059f2d03bf9c3e8d2b16ab409de762522f6008de48bb70b698c5c9867437ac3127fad4bd699acaad78a5f66c7fc7d46e048082a0af61e6b052e473ed26b0309080ea10e985703b292c7336112b1f35c3b069363869dce725d8da75dcec76dcfa0c052feecee18c64c4600a0bc3d4945d4b918865bb7a8a726a500689cbd9a84d07846417796f2a85e7a41d27d64b10f8e970469cf495b4a1b4ea8b5322f78e9f3048351b550c59a634b47981420081ea4da18b9d318fa001ce660b28bbcf3c1a8893d130b26d25e491f478ae4f95f71ea8897b32858f78d6e25537b959b69a04c5507008b8453f08a5ae1b3b4d8c83053c57637a98ef57e5fa51971eba5e287e9d10cba734336703def181022cb9f1e62079c48c13fe1659b157e5d9de7bfb929e715ed1a9a505a04a8d8474482295afbb9de90de2e918522cac2d5b5ac09d1fdc4147d6393a684ad7234ecb65d0008000000000000560ad146e8b9e9cd9b050edb1f6735c90a76b1ba4dbdee34d0b6750f25ba7251944ada7766c301c65e56351d009a568c782f4438ecba9bee47f25286300e83bd1853076ad52eac84029335b86e7f21e39a1af3d070abef94bc0827db0046dcb7d63bf64bf801c836a40b0100d0961533737c57e9b7337b981a99f63f600f90647703f0640f6594dd9f26436024a1f90f174769bad5a283271e6d7f49dec90a05bd771dd0502dc2170ccf98ade27e858eb5686ac900000000ae1bc4246ae316c6af10bf02088b4bb2ac89c96e58578dc50eddbf01ece3cb8a363ecbeb8198997115d7151f691a2a755d8233e006dd38ed5ba350bd6aad3bf6f5108083f0100f8a20be455d16134d65ce69c4b906b76427224b69750b779d81eb6e37e1db62b1788ff918433787f8026ef5c518113d48419a14a2bd8d4afff527513a2efc8403be48e494b3de33b1deefd9d902e8dc868f30161c2cd13b21b0a20362181186ff8cf4c8d58d74822f92554287ee157e9f1597c3e2e238f382a91bf48b4de88363c841bd7a8cddae3344295bd3d434d9ecf74634ffc9539010f0d36e672b9d668cc6762c0b25e4a22afb4d184ba84498b1367e4b31faf75f1b3dcecfd80c57015d8cd16171507add30833865fc1a42780e9d57bb14a6ebea4018d26e18747546fc7a4a619753fd9ba9c18e746aa9ea132058eb90f9b80549473eea2fb9bc43d38d8719a1cca094bd933ceef87a3ec0c2ac70d5f843425100950000009e000000000008000018779600e4283095c203b1f2ae5ed34f5b7e77278f7ded9f030000002e050000009f95a59418f612dfa87c654043da1a59c3c43c7884ab65d4b34984afe30c67179c4f5a3ba0e491f2b942b754a3c0d5b878c4ad63591c3fc7d3a4d4296d4bab0a88e55ff9c2536654bb2f83e8015fac216119e8ce582698938c9a331a974087b71f07e50300f7ff00d03bf057b408c86a1165bd9a1bdbf3dff88c9b2173a75d5fc82dce6d8a3f297231e33588d7cf183109c1118d94a41d48f8efcf193ff2699a76973f3f1ec1cff64a1b912ededeb080f9a241e07709e6dd6a3a7e18200c9e80b9634e6f0c4d000000000000000000000000000000005e50e77d04fcf8931ad07b38a39957e6b3a3c909000000e9d694e483e848fe0d00ee7c7d6cc30932a9575aa8808d10a4963560250bb4e60e88c726f63662cb143daf4b9ebd0774998a59fbb42dc35f12452cca456a12b7d15cf3ce7ea350e9510e96527cde622998e83e65b235c284542d48052eb15e6600733ca32436f9e705dff00f08df1115175628a327876dea291480c2dde8a59d1856eed2b502965038af0d56e49e0e2e9cb0e25104805f386d460e212c27ac7bafe6a0078f8648ff9f1e0257338ae58457fb27b29430cc9ac6a33ea11b88ae8bc95dffa293aa69d6d47f89b28a25a7ec2fce6691549990f93d1f02e1b619813699303b6b1260d5537e85315551adabe00c98282795dc5547aab3dcbd82a06e7f00c8160af19f1fc456b5fc4f099814631024b734c0cd8843c5cb124a21092e6cdd8aa2f4d3f93e92c6d850898890d9449e3f499af92be74ba8ba7928feabbd99d6288dece7513c50b973bab87214415078857d18032ab5adb8d4bf32405cc5f63eba7e60bcd0098fd7957943b3c4cf13de4e049e06ad7ebc236d1088c99d35f40555364ff86cab4542261999bccd3269e51d10900a1c05696b47ff33a159abce6bb1d69193bd01f59f1d3f431b4e0868db623cb8375baa50785b8fcd37ce4c52abe43c1e3368735022e7cc7a9b397b494d0183cbd8dae2ba19b32adc91444f519ad33f7f2680e3cf7ecd3cfc67816eb66b1faa78dd8e3f7e233b6048c53813e6b508dfc713583d8ef8f9cfff5cdae59aa7aca654b1740c90eb75ca000000000000000000000000000000000000000000faa13c07b5f590ee4c8bfbd828e912b150dde95dafe80ee043a107bde9c0bb87155691d640fd000000e4a2d2aa0607b026f78417471e6ea0d10000309b29d0dae2d2c9c730ac21040000000000000009775f86a9e6d5b6c7b3c5d10177a873edb630fdf9b1e11005a1ce41d04a2ad3f5d25a1595e7609849033d2e86ac682f2f0cde376f50a88a3ab5e83f56e43a07641b82c077fa1479b79e85c71a9c00000000000000078ce7c4ab383dac0325fa7f4ffb201c479265ff572dd061679c0000000000000f4f6b4ef8eb757ac80dc44711ae17816e32e38d7c894ab51238b2d7051ee26121404c0ade6faea7e72449cf38be7173b066f3a7835a31f1516c4cb1fda57ec8c19bc2800e246c1b64cf278c7afb3c9a5e346bdb259ac6788eefd5086e45554c8e2bdde8a3ac990dd929277a6af1876940c7c012f4b7d3d7aa68f2f07d83e925b326b05f130000000000000000000000000000000003572023092306e73a16f4b362f725b22b32be04e53a2219e3b08d75537c158ea4c4821d17d3b844dbe87408c34bb0f26ba43bd4530000769d45b93b8f2b6c194afc197f77bfb136dfd38c265479bd4f74b9d0b5c2f37eaacb2894370ab02abe06b823a2753ca82ea8888f2a5063212212772dcc541de26c97c1312fc247b56a9cd3e05bcb8bc93363edfa05f9c76e94190f917c3af6884c8742371f25eb0000000000000000000000004ae9afd11c62a57a29a163acc55ca9fe6da9ce6d59bdd87adec5ba4052a5edcd9999720e8b2a08b69f79f78c78b9f720bcf6a2ab411d420db8231780cdf52d44985768353ce1bc587700adf3a307ff11be0ca772f1bcc565070ef9345c2d55f0506d9059fff65ca75c9809c8e5e423f6f210a195e9b59a08c43dab5b025b1dc33cfdafe62aa8f13c38341267a920fc0be4e61fe9d8bed61524ad62896e3dfba3091cf028cdb3fabb530f1d0d4bdf391c5dda4b8b248ea58cb56aed4d968d506a108626e2423c506cc11bc2ec9de3b793fec489d08085e8c582cf6fc06c20eb57f7a1ba7315c67bd0e50f529a01211f8add5f28fd65fcd373982ae902e67966990cf34be5ed5dcf39b9e44fb0165fa40fcc5643678bab244a3a76f43dd267db562efe5156b85f6e909066b8f37b81b756eeeeee4598195e70d74bd1e221c5e0cf111b816f8bd5c2ac451fabd160815b9e81b9c4abffef4b12d82e401a0cce36fbfedaec4ab6a89e128ef71e63f2239792338e87e4c7d571d6e4bc165ea1d476531b4ddfbb698101e8563f7c25b4d527240dafb074437aa96f66e293df5e132fa95aa09c08ee57f089afc0522b438480aa3dc9f41330dcd3b25703feb85777de8fd5ac57464a31ae5924745f797a0c852ddf67e01dd5736b4826e16f885afb91b6a7f226e0d0aaabd0c01a8262cb35e501ddb3c191797560c91717a2215012da9e717ec8d65887138e3bc3886e5b6f3058e58fb4320338d6413ce94012c293e0042a2f5dd86b78d05efd9e44bbbccfae8b9361072af38c1aa3c030196d72d01a160a19c0060900e8bb2f3613a7ddacf2b878aa6b2952556d79bd183ae195e14d32ffd398ae01dbd20b034da17f5a78ceb03a16e39181a07b14e54f4e2061049569046877b9f5478106f6ac76e56213ec2e85a4dcd5960ad486e7c05a21e52e5c688c1f315169452b1b6a795dd837867899c64a04ec08a4b2d5455d93f6d5baf14ffced8576bfde19de2903835607505b4af824a0a69aee28fe65683dc83c19f6d253a5824442530c85d354c05c8b95030e629fb817697f746b9dd02fb40edf4f9886a758e0741ca2711e425f2f5be70a7fa600718fa7af2eb416a2b774f5d36f5632d791e0ba01f58f2165e6d5e564aef11dbc558170cf47c5934d41f558b02dc04d3ae4aee08aa5ad7d1e5ad92cdb90db79e73524d97ca3ce0828513c74fb0a1543eba7d17d37cc1f1f2d937bfd5fafeb23f691b326554b92d8b97e76e2cbbcb858a16287c2090727334096e574b6bb937ec9f048e041f178e8d3a3543c6862fc8b63f968501fabd17cbc81db1ad47d37d3fe02190fde2af3ac5c9a2d64ec4db0c8b211dbdf4d7b7c01248de7269c0b8d4c374d9fecb9fdff846c4e57d7d976c3f571474e4f65a87954e31e67c8cf6ac7823451b448ec90ca0b36405f6d2eef4055b5d2f4dad1aa89216f6d89bd43c4de92d8f61781a9349626fb65952dfa3c68aada76c3105d65bde2bddb981f753407c7696b767aeb3707606d0d9930b79f449557d6c3088c740f2a08c68b67f8dbbf93da08544ca26db1b58baae17c091f9bc28042630d76248e4d9d326ee62fd6e5d9bedee38b0e8da3cff3ba22e92e800b28c26901cd1a32b7aae2d762e776d66f08d78666364a2fc154fadfd105b28495e8702400a53f5191908b98a4d109a9d44107369cdf864fa8be46f52d88b01bcd795025a90669e55fc634692e554fe3a73ae6db0a5aa706c83061ba3b99aa992947346327a2521d3d4294115d9c4b44f949ae465d5aa24e3911520658e542e85023552e91dd39d98065dabfec69691c868bfc45f5830de8089ae1074b6ff56b7dd8e9029b7e5ab8e500b970cb391b14302315f99ab3bc102fbcc8d911c931c662c2a53c7a7bce275bb76b4096ee6d21acb49b088c7b7e05f70e6ed4cade99d907717b43b958390caec36fdb71fb1a5f374e86d3181ae12d12ff6a279e2047d26803cf7b1684c561ee8ff8250230e5de4171803ec2f03615f231d51f8a005a1487fb51b657a7b7f352adbd86fe56bd9bd02063b2bad542ca2ca3b61b8946abb3012c87cfa11e6df516ae4f29577dfda12068197eafdf0e343738778335ea5491cdcd7fe699a075425c9a35a731d63c2f7d3260ca187e2959223dc1a70f55"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdir(&(0x7f0000000100)='./file0\x00', 0x38) socketpair(0x22, 0x800, 0x7fff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000140)='cpu.max.burst\x00', 0x2, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006300000000000000bf91000000000000b7020000000000008500000085000000b70000000000000094ffffec00000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000000000000000020000000002000000000000080200"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x2}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[], 0x50) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='-'], 0x5) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.28811072s ago: executing program 0 (id=5259): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0xe53d095caacafea) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x30004081) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3.266301271s ago: executing program 3 (id=5260): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 3.054869423s ago: executing program 0 (id=5261): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1c000000190081084e81f782db44b904021d080006", 0x15}], 0x1, 0x0, 0x0, 0x6000}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000640)=r1) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000"], 0xfdef) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, r7, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000240)=r7, 0x12) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r4}, 0xc) 3.053874313s ago: executing program 1 (id=5271): socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x10804, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.045868303s ago: executing program 2 (id=5272): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80800, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) setsockopt$sock_attach_bpf(r0, 0x11e, 0x8, 0x0, 0x7c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) 3.043483904s ago: executing program 4 (id=5273): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdir(&(0x7f0000000100)='./file0\x00', 0x38) socketpair(0x22, 0x800, 0x7fff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000140)='cpu.max.burst\x00', 0x2, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006300000000000000bf91000000000000b7020000000000008500000085000000b70000000000000094ffffec00000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000000000000000020000000002000000000000080200"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x2}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[], 0x50) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='-'], 0x5) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 652.334172ms ago: executing program 0 (id=5262): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r4 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x20000094) 651.937482ms ago: executing program 1 (id=5263): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 651.573102ms ago: executing program 2 (id=5264): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x4, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x6, [{0x4, 0x5, 0x6}, {0xa, 0x8, 0xe}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x5}, @fwd={0xe}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000700)=""/195, 0x70, 0xc3, 0x0, 0x3ff, 0x10000, @value=r5}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1c, 0x14, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @exit, @exit]}, &(0x7f0000000100)='GPL\x00', 0xc, 0xc6, &(0x7f0000000600)=""/198, 0x41000, 0x8, '\x00', 0x0, @fallback=0x30, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, &(0x7f0000000380)=[r5, r5], 0x0, 0x10, 0x6}, 0x94) 651.428752ms ago: executing program 3 (id=5265): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000200006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 651.055182ms ago: executing program 4 (id=5266): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f00000000c0)}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbf, 0x9}, 0x48) socketpair(0x10, 0x3, 0x4, &(0x7f0000000400)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}]}, {0x0, [0x0, 0x5f, 0x2e]}}, 0x0, 0x65}, 0x28) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 468.889993ms ago: executing program 0 (id=5267): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x1000, 0x3, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000001dc0)=""/146, 0x2c, 0x92, 0x1}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0xfffffdcb, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xb8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 402.154626ms ago: executing program 3 (id=5268): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100108}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) 366.882198ms ago: executing program 1 (id=5269): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80800, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) setsockopt$sock_attach_bpf(r0, 0x11e, 0x8, 0x0, 0x7c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) 286.087683ms ago: executing program 4 (id=5270): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) 230.434776ms ago: executing program 0 (id=5274): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0x2000}}, 0x10, 0x0}, 0x0) 210.614748ms ago: executing program 3 (id=5275): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20, 0x1, 0x40000000}, 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000000", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008043) 61.150736ms ago: executing program 2 (id=5276): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x104101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) socket$kcm(0xa, 0x2, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7fe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 0s ago: executing program 4 (id=5277): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x9c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000001d40)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000000) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000480)="2d4624e18a8dc16a6e119d96f1ba18", 0xf}], 0x1}, 0x200000fd) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x1b, &(0x7f0000000100), 0x4) socket$kcm(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) kernel console output (not intermixed with test programs): 00246 ORIG_RAX: 000000000000002e [ 380.152161][ T8987] RAX: ffffffffffffffda RBX: 00007f661aa15fa0 RCX: 00007f661a79aeb9 [ 380.160155][ T8987] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 380.168142][ T8987] RBP: 00007f661a808c1f R08: 0000000000000000 R09: 0000000000000000 [ 380.176130][ T8987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.184119][ T8987] R13: 00007f661aa16038 R14: 00007f661aa15fa0 R15: 00007ffe1e0bd2d8 [ 380.192159][ T8987] [ 381.242592][ T8994] device syzkaller0 entered promiscuous mode [ 381.315836][ T9007] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1741'. [ 381.340233][ T9007] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 381.585316][ T9012] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1743'. [ 381.690774][ T9015] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1755'. [ 381.710711][ T9018] netlink: 'syz.4.1747': attribute type 3 has an invalid length. [ 381.751161][ T9017] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 381.785586][ T9018] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1747'. [ 381.815130][ T9015] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 381.833135][ T9015] CPU: 1 PID: 9015 Comm: syz.1.1755 Not tainted syzkaller #0 [ 381.840591][ T9015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 381.850680][ T9015] Call Trace: [ 381.853983][ T9015] [ 381.856944][ T9015] dump_stack_lvl+0x188/0x24e [ 381.861848][ T9015] ? show_regs_print_info+0x12/0x12 [ 381.867085][ T9015] ? load_image+0x400/0x400 [ 381.871681][ T9015] sysfs_warn_dup+0x8a/0xa0 [ 381.876238][ T9015] sysfs_do_create_link_sd+0xc0/0x110 [ 381.881659][ T9015] device_add+0x7ed/0xfb0 [ 381.886076][ T9015] wiphy_register+0x1d9f/0x2ac0 [ 381.891045][ T9015] ? cfg80211_event_work+0x40/0x40 [ 381.896210][ T9015] ? minstrel_ht_alloc+0x894/0xa20 [ 381.901391][ T9015] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 381.907523][ T9015] ieee80211_register_hw+0x2d00/0x39f0 [ 381.913079][ T9015] ? ieee80211_register_hw+0xea1/0x39f0 [ 381.918742][ T9015] ? ieee80211_register_hw+0xea1/0x39f0 [ 381.924362][ T9015] ? ieee80211_tasklet_handler+0x20/0x20 [ 381.930163][ T9015] ? memset+0x1e/0x40 [ 381.934195][ T9015] ? __hrtimer_init+0x186/0x270 [ 381.939114][ T9015] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 381.944953][ T9015] hwsim_new_radio_nl+0xafa/0xce0 [ 381.950069][ T9015] genl_family_rcv_msg_doit+0x22a/0x330 [ 381.955654][ T9015] ? end_current_label_crit_section+0x170/0x170 [ 381.961938][ T9015] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 381.967908][ T9015] ? bpf_lsm_capable+0x5/0x10 [ 381.972609][ T9015] ? security_capable+0x85/0xb0 [ 381.977532][ T9015] genl_rcv_msg+0x604/0x790 [ 381.982114][ T9015] ? genl_bind+0x360/0x360 [ 381.986566][ T9015] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 381.993022][ T9015] netlink_rcv_skb+0x1fb/0x450 [ 381.997867][ T9015] ? genl_bind+0x360/0x360 [ 382.002347][ T9015] ? netlink_ack+0x1170/0x1170 [ 382.007207][ T9015] ? down_read+0x1a8/0x2d0 [ 382.011872][ T9015] genl_rcv+0x24/0x40 [ 382.015894][ T9015] netlink_unicast+0x74d/0x8d0 [ 382.020754][ T9015] netlink_sendmsg+0x8ad/0xbd0 [ 382.025600][ T9015] ? netlink_getsockopt+0x550/0x550 [ 382.030853][ T9015] ? aa_sock_msg_perm+0x94/0x150 [ 382.035839][ T9015] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 382.041146][ T9015] ? security_socket_sendmsg+0x7c/0xa0 [ 382.046649][ T9015] ? netlink_getsockopt+0x550/0x550 [ 382.051900][ T9015] ____sys_sendmsg+0x5be/0x970 [ 382.056754][ T9015] ? __sys_sendmsg_sock+0x30/0x30 [ 382.061817][ T9015] ? __import_iovec+0x315/0x500 [ 382.066742][ T9015] ? import_iovec+0x6f/0xa0 [ 382.071300][ T9015] ___sys_sendmsg+0x2a2/0x360 [ 382.076020][ T9015] ? try_to_wake_up+0x67c/0x1080 [ 382.081017][ T9015] ? __sys_sendmsg+0x290/0x290 [ 382.086046][ T9015] __se_sys_sendmsg+0x1bb/0x2a0 [ 382.090950][ T9015] ? __x64_sys_sendmsg+0x80/0x80 [ 382.096000][ T9015] ? lockdep_hardirqs_on+0x94/0x140 [ 382.101288][ T9015] do_syscall_64+0x4c/0xa0 [ 382.105736][ T9015] ? clear_bhb_loop+0x60/0xb0 [ 382.110443][ T9015] ? clear_bhb_loop+0x60/0xb0 [ 382.115166][ T9015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.121088][ T9015] RIP: 0033:0x7fe03c99aeb9 [ 382.125539][ T9015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.145171][ T9015] RSP: 002b:00007fe03abf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.153618][ T9015] RAX: ffffffffffffffda RBX: 00007fe03cc15fa0 RCX: 00007fe03c99aeb9 [ 382.161616][ T9015] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 382.169611][ T9015] RBP: 00007fe03ca08c1f R08: 0000000000000000 R09: 0000000000000000 [ 382.177695][ T9015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.185693][ T9015] R13: 00007fe03cc16038 R14: 00007fe03cc15fa0 R15: 00007ffd736d0718 [ 382.193756][ T9015] [ 382.242730][ T9021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1747'. [ 382.267825][ T9021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.299887][ T9024] netlink: 'syz.2.1745': attribute type 10 has an invalid length. [ 382.332363][ T9024] device bridge0 left promiscuous mode [ 382.369244][ T9024] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.376945][ T9024] bridge0: port 2(bridge_slave_1) entered listening state [ 382.385507][ T9024] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.393470][ T9024] bridge0: port 1(bridge_slave_0) entered listening state [ 382.473020][ T9024] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 383.026715][ T9041] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1756'. [ 383.053701][ T9041] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 383.086298][ T9044] device syzkaller0 entered promiscuous mode [ 383.253444][ T9048] bond0: (slave wlan1): Error: Slave device does not support XDP [ 383.293491][ T9052] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1761'. [ 383.533190][ T9061] netlink: 'syz.3.1764': attribute type 29 has an invalid length. [ 383.573478][ T9061] netlink: 'syz.3.1764': attribute type 29 has an invalid length. [ 383.579988][ T9059] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1763'. [ 383.637852][ T9065] netlink: 'syz.3.1764': attribute type 29 has an invalid length. [ 383.709275][ T9063] netlink: 'syz.0.1762': attribute type 10 has an invalid length. [ 383.731919][ T9063] device bridge0 left promiscuous mode [ 383.847128][ T9063] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.859325][ T9063] bridge0: port 2(bridge_slave_1) entered listening state [ 383.874209][ T9063] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.885701][ T9063] bridge0: port 1(bridge_slave_0) entered listening state [ 384.163724][ T9063] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 384.174895][ T9059] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 384.183527][ T9059] CPU: 1 PID: 9059 Comm: syz.1.1763 Not tainted syzkaller #0 [ 384.190959][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.201082][ T9059] Call Trace: [ 384.204405][ T9059] [ 384.207386][ T9059] dump_stack_lvl+0x188/0x24e [ 384.212144][ T9059] ? show_regs_print_info+0x12/0x12 [ 384.217409][ T9059] ? load_image+0x400/0x400 [ 384.222036][ T9059] sysfs_warn_dup+0x8a/0xa0 [ 384.226612][ T9059] sysfs_do_create_link_sd+0xc0/0x110 [ 384.232070][ T9059] device_add+0x7ed/0xfb0 [ 384.236520][ T9059] wiphy_register+0x1d9f/0x2ac0 [ 384.241519][ T9059] ? cfg80211_event_work+0x40/0x40 [ 384.246692][ T9059] ? minstrel_ht_alloc+0x894/0xa20 [ 384.251897][ T9059] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 384.258046][ T9059] ieee80211_register_hw+0x2d00/0x39f0 [ 384.263576][ T9059] ? ieee80211_register_hw+0xea1/0x39f0 [ 384.269152][ T9059] ? ieee80211_register_hw+0xea1/0x39f0 [ 384.274771][ T9059] ? ieee80211_tasklet_handler+0x20/0x20 [ 384.280474][ T9059] ? memset+0x1e/0x40 [ 384.284492][ T9059] ? __hrtimer_init+0x186/0x270 [ 384.289390][ T9059] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 384.295204][ T9059] hwsim_new_radio_nl+0xafa/0xce0 [ 384.300316][ T9059] genl_family_rcv_msg_doit+0x22a/0x330 [ 384.305897][ T9059] ? end_current_label_crit_section+0x170/0x170 [ 384.312172][ T9059] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 384.318122][ T9059] ? bpf_lsm_capable+0x5/0x10 [ 384.322817][ T9059] ? security_capable+0x85/0xb0 [ 384.327717][ T9059] genl_rcv_msg+0x604/0x790 [ 384.332300][ T9059] ? genl_bind+0x360/0x360 [ 384.336740][ T9059] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 384.343145][ T9059] netlink_rcv_skb+0x1fb/0x450 [ 384.347941][ T9059] ? genl_bind+0x360/0x360 [ 384.352389][ T9059] ? netlink_ack+0x1170/0x1170 [ 384.357214][ T9059] ? down_read+0x1a8/0x2d0 [ 384.361674][ T9059] genl_rcv+0x24/0x40 [ 384.365682][ T9059] netlink_unicast+0x74d/0x8d0 [ 384.370505][ T9059] netlink_sendmsg+0x8ad/0xbd0 [ 384.375321][ T9059] ? netlink_getsockopt+0x550/0x550 [ 384.380556][ T9059] ? aa_sock_msg_perm+0x94/0x150 [ 384.385527][ T9059] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 384.390829][ T9059] ? security_socket_sendmsg+0x7c/0xa0 [ 384.396321][ T9059] ? netlink_getsockopt+0x550/0x550 [ 384.401575][ T9059] ____sys_sendmsg+0x5be/0x970 [ 384.406395][ T9059] ? __sys_sendmsg_sock+0x30/0x30 [ 384.411439][ T9059] ? __import_iovec+0x315/0x500 [ 384.416338][ T9059] ? import_iovec+0x6f/0xa0 [ 384.420876][ T9059] ___sys_sendmsg+0x2a2/0x360 [ 384.425600][ T9059] ? try_to_wake_up+0x67c/0x1080 [ 384.430589][ T9059] ? __sys_sendmsg+0x290/0x290 [ 384.435552][ T9059] __se_sys_sendmsg+0x1bb/0x2a0 [ 384.440443][ T9059] ? __x64_sys_sendmsg+0x80/0x80 [ 384.445463][ T9059] ? lockdep_hardirqs_on+0x94/0x140 [ 384.450760][ T9059] do_syscall_64+0x4c/0xa0 [ 384.455216][ T9059] ? clear_bhb_loop+0x60/0xb0 [ 384.459926][ T9059] ? clear_bhb_loop+0x60/0xb0 [ 384.464646][ T9059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.470565][ T9059] RIP: 0033:0x7fe03c99aeb9 [ 384.475050][ T9059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.494682][ T9059] RSP: 002b:00007fe03abf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.503118][ T9059] RAX: ffffffffffffffda RBX: 00007fe03cc15fa0 RCX: 00007fe03c99aeb9 [ 384.511107][ T9059] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 384.519094][ T9059] RBP: 00007fe03ca08c1f R08: 0000000000000000 R09: 0000000000000000 [ 384.527081][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.535075][ T9059] R13: 00007fe03cc16038 R14: 00007fe03cc15fa0 R15: 00007ffd736d0718 [ 384.543123][ T9059] [ 384.567878][ T9061] netlink: 'syz.3.1764': attribute type 29 has an invalid length. [ 384.586453][ T9065] netlink: 'syz.3.1764': attribute type 29 has an invalid length. [ 384.619699][ T9069] netlink: 'syz.3.1764': attribute type 29 has an invalid length. [ 385.398720][ T9078] netlink: 'syz.3.1772': attribute type 15 has an invalid length. [ 385.431541][ T9078] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.1772'. [ 385.593157][ T9086] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1773'. [ 385.616382][ T9086] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 385.705812][ T9088] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 385.787511][ T9085] device syzkaller0 entered promiscuous mode [ 386.272546][ T9106] device syzkaller0 entered promiscuous mode [ 386.282993][ T9108] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1779'. [ 387.736958][ T9113] validate_nla: 2 callbacks suppressed [ 387.736974][ T9113] netlink: 'syz.3.1783': attribute type 10 has an invalid length. [ 387.750664][ T9113] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.757836][ T9113] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.873693][ T9121] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1786'. [ 388.192074][ T9135] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1803'. [ 388.247048][ T9134] device syzkaller0 entered promiscuous mode [ 388.299830][ T9137] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 388.970924][ T4276] Bluetooth: hci4: unexpected event 0x0b length: 15 > 11 [ 389.506749][ T9180] bond0: (slave wlan1): Error: Slave device does not support XDP [ 389.884011][ T9186] bond0: (slave wlan1): Error: Slave device does not support XDP [ 391.314600][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 391.322396][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 392.594136][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.601396][ C1] bridge0: topology change detected, propagating [ 392.609087][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.616336][ C1] bridge0: topology change detected, propagating [ 393.081626][ T9202] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1819'. [ 393.180263][ T9205] netlink: 'syz.2.1821': attribute type 2 has an invalid length. [ 393.284988][ T9205] netlink: 'syz.2.1821': attribute type 2 has an invalid length. [ 394.857676][ T9228] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 397.086587][ T4276] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 397.724188][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 397.738629][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 398.137163][ T9252] netlink: 'syz.0.1839': attribute type 29 has an invalid length. [ 398.156032][ T9252] netlink: 'syz.0.1839': attribute type 29 has an invalid length. [ 398.186607][ T9255] netlink: 'syz.0.1839': attribute type 29 has an invalid length. [ 398.217670][ T9252] netlink: 'syz.0.1839': attribute type 29 has an invalid length. [ 398.242369][ T9252] netlink: 'syz.0.1839': attribute type 29 has an invalid length. [ 398.300175][ T9255] netlink: 'syz.0.1839': attribute type 29 has an invalid length. [ 398.879431][ T9272] netlink: 'syz.2.1848': attribute type 3 has an invalid length. [ 398.946234][ T9272] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1848'. [ 399.004886][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 399.012284][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 399.048185][ T9272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1848'. [ 401.243287][ T9272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.281879][ T9276] netlink: 'syz.0.1850': attribute type 15 has an invalid length. [ 401.294628][ T9276] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.1850'. [ 401.973812][ T9284] netlink: 'syz.1.1855': attribute type 29 has an invalid length. [ 401.993021][ T4276] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 402.002561][ T9284] netlink: 'syz.1.1855': attribute type 29 has an invalid length. [ 402.049391][ T9287] netlink: 'syz.1.1855': attribute type 29 has an invalid length. [ 402.128320][ T9284] netlink: 'syz.1.1855': attribute type 29 has an invalid length. [ 406.123879][ T9317] validate_nla: 2 callbacks suppressed [ 406.123914][ T9317] netlink: 'syz.2.1868': attribute type 29 has an invalid length. [ 406.166241][ T9320] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 406.189583][ T9317] netlink: 'syz.2.1868': attribute type 29 has an invalid length. [ 406.223257][ T9322] netlink: 'syz.2.1868': attribute type 29 has an invalid length. [ 406.328281][ T9317] netlink: 'syz.2.1868': attribute type 29 has an invalid length. [ 406.389062][ T9317] netlink: 'syz.2.1868': attribute type 29 has an invalid length. [ 406.436994][ T9317] netlink: 'syz.2.1868': attribute type 29 has an invalid length. [ 406.674160][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.681487][ C0] bridge0: topology change detected, propagating [ 406.688105][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.695345][ C0] bridge0: topology change detected, propagating [ 408.764992][ T5936] wlan1: Trigger new scan to find an IBSS to join [ 410.973913][ T9371] netlink: 'syz.4.1890': attribute type 29 has an invalid length. [ 411.020640][ T9371] netlink: 'syz.4.1890': attribute type 29 has an invalid length. [ 411.042829][ T9375] netlink: 'syz.4.1890': attribute type 29 has an invalid length. [ 411.117264][ T9374] netlink: 'syz.1.1891': attribute type 10 has an invalid length. [ 411.139741][ T9379] netlink: 'syz.4.1890': attribute type 29 has an invalid length. [ 411.187981][ T9371] netlink: 'syz.4.1890': attribute type 29 has an invalid length. [ 411.238788][ T9381] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1892'. [ 411.262678][ T9375] netlink: 'syz.4.1890': attribute type 29 has an invalid length. [ 411.655506][ T9392] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1897'. [ 411.794914][ T5934] wlan1: Trigger new scan to find an IBSS to join [ 412.556152][ T9413] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 413.088547][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.096201][ C1] bridge0: topology change detected, propagating [ 413.105086][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.112696][ C1] bridge0: topology change detected, propagating [ 414.385978][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.393733][ C1] bridge0: topology change detected, propagating [ 414.402346][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.409859][ C1] bridge0: topology change detected, propagating [ 414.725297][ T9434] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1913'. [ 414.835527][ T5936] wlan1: Trigger new scan to find an IBSS to join [ 415.549001][ T9440] netlink: 'syz.3.1917': attribute type 29 has an invalid length. [ 415.616854][ T9440] netlink: 'syz.3.1917': attribute type 29 has an invalid length. [ 415.631999][ T9443] netlink: 'syz.3.1917': attribute type 29 has an invalid length. [ 415.648620][ T9440] netlink: 'syz.3.1917': attribute type 29 has an invalid length. [ 415.658917][ T9440] netlink: 'syz.3.1917': attribute type 29 has an invalid length. [ 415.702556][ T9440] netlink: 'syz.3.1917': attribute type 29 has an invalid length. [ 415.746248][ T5936] wlan1: Creating new IBSS network, BSSID 6a:0f:d5:0d:52:0d [ 417.321905][ T9481] netlink: 'syz.0.1940': attribute type 10 has an invalid length. [ 421.364715][ T9512] netlink: 'syz.3.1944': attribute type 10 has an invalid length. [ 421.372681][ T9512] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1944'. [ 421.394017][ T9514] netlink: 'syz.2.1946': attribute type 10 has an invalid length. [ 421.402151][ T9516] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1945'. [ 421.916307][ T9534] netlink: 'syz.1.1953': attribute type 11 has an invalid length. [ 421.938004][ T9534] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1953'. [ 421.958459][ T9534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.279058][ T9552] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1960'. [ 422.292643][ T9552] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 422.622060][ T9557] netlink: 'syz.1.1962': attribute type 1 has an invalid length. [ 422.629988][ T9557] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1962'. [ 422.683418][ T9565] netlink: 'syz.3.1966': attribute type 10 has an invalid length. [ 422.877397][ T9571] netlink: 'syz.1.1969': attribute type 10 has an invalid length. [ 422.887717][ T9571] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1969'. [ 423.001870][ T9573] netlink: 'syz.3.1971': attribute type 11 has an invalid length. [ 423.025436][ T9573] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1971'. [ 423.052233][ T9577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.429871][ T9590] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1977'. [ 423.467417][ T9590] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 423.717992][ T9603] netlink: 'syz.4.1980': attribute type 10 has an invalid length. [ 423.866571][ T9605] netlink: 'syz.2.1982': attribute type 1 has an invalid length. [ 423.889709][ T9605] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1982'. [ 424.012974][ T9613] netlink: 'syz.3.1997': attribute type 10 has an invalid length. [ 424.050165][ T9615] netlink: 'syz.0.1984': attribute type 10 has an invalid length. [ 424.085682][ T9615] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1984'. [ 424.200161][ T9621] netlink: 'syz.4.1988': attribute type 11 has an invalid length. [ 424.239989][ T9621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.496719][ T9630] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 424.939222][ T9651] netlink: 'syz.0.2000': attribute type 1 has an invalid length. [ 424.998110][ T9652] netlink: 'syz.2.2003': attribute type 10 has an invalid length. [ 425.082530][ T9652] team0: Port device macvlan1 added [ 425.222501][ T9658] netlink: 'syz.4.2006': attribute type 10 has an invalid length. [ 425.331443][ T9662] netlink: 'syz.0.2008': attribute type 11 has an invalid length. [ 425.362331][ T9662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.590352][ T4276] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 425.731024][ T9673] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 426.373350][ T9699] netlink: 'syz.2.2023': attribute type 11 has an invalid length. [ 426.382699][ T9699] __nla_validate_parse: 7 callbacks suppressed [ 426.382731][ T9699] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2023'. [ 426.420624][ T4276] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 426.421091][ T9699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.260299][ T9709] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2029'. [ 428.281438][ T9709] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 428.781025][ T9717] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2045'. [ 428.813692][ T9717] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 429.922942][ T9751] device wlan0 entered promiscuous mode [ 430.147906][ T9759] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2053'. [ 430.197905][ T9759] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 430.228441][ T9763] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2055'. [ 430.248927][ T9763] validate_nla: 1 callbacks suppressed [ 430.248950][ T9763] netlink: 'syz.0.2055': attribute type 7 has an invalid length. [ 430.268741][ T9763] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2055'. [ 432.224474][ T9781] netlink: 'syz.3.2059': attribute type 10 has an invalid length. [ 432.855812][ T9789] netlink: 'syz.3.2064': attribute type 10 has an invalid length. [ 432.919159][ T9789] bond0: (slave netdevsim0): Releasing backup interface [ 432.958884][ T9789] team0: Port device netdevsim0 added [ 433.169134][ T9799] netlink: 'syz.2.2066': attribute type 10 has an invalid length. [ 433.184309][ T9799] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2066'. [ 438.267853][ T9819] netlink: 'syz.0.2075': attribute type 10 has an invalid length. [ 438.471145][ T9835] netlink: 'syz.4.2086': attribute type 10 has an invalid length. [ 438.489692][ T9835] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2086'. [ 438.542163][ T9839] device wlan0 entered promiscuous mode [ 438.872819][ T9856] netlink: 'syz.4.2095': attribute type 10 has an invalid length. [ 438.910714][ T9856] team0: Port device macvlan1 added [ 439.803078][ T9882] device wlan0 entered promiscuous mode [ 439.821304][ T9881] netlink: 'syz.3.2104': attribute type 29 has an invalid length. [ 439.845231][ T9881] netlink: 'syz.3.2104': attribute type 29 has an invalid length. [ 439.896984][ T9880] delete_channel: no stack [ 439.956844][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.963188][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.971839][ T4276] Bluetooth: hci2: Unknown advertising packet type: 0x3030 [ 439.971867][ T4276] Bluetooth: hci2: Malformed LE Event: 0x0d [ 440.494375][ T9905] sock: sock_set_timeout: `syz.1.2114' (pid 9905) tries to set negative timeout [ 440.666640][ T9901] device wlan0 entered promiscuous mode [ 441.450041][ T9922] device wg2 entered promiscuous mode [ 441.531785][ T9928] device syzkaller0 entered promiscuous mode [ 441.553604][ T9929] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2123'. [ 441.596896][ T9931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2123'. [ 445.081657][ T9996] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2151'. [ 445.191233][T10001] netlink: 'syz.3.2151': attribute type 7 has an invalid length. [ 445.215424][T10001] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2151'. [ 445.506629][T10000] sock: sock_set_timeout: `syz.2.2153' (pid 10000) tries to set negative timeout [ 445.986200][T10020] netlink: 'syz.4.2160': attribute type 10 has an invalid length. [ 446.041493][T10020] bond0: (slave netdevsim0): Releasing backup interface [ 446.092539][T10020] team0: Port device netdevsim0 added [ 446.458149][T10030] device wg2 entered promiscuous mode [ 446.904763][T10044] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.2168'. [ 446.943876][T10044] netlink: 'syz.4.2168': attribute type 7 has an invalid length. [ 446.994400][T10044] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.2168'. [ 448.017016][T10065] netlink: 'syz.1.2175': attribute type 10 has an invalid length. [ 448.118518][T10065] team0: Device vxcan1 is of different type [ 448.391507][T10078] device wg2 entered promiscuous mode [ 448.847651][T10088] netlink: 'syz.4.2195': attribute type 10 has an invalid length. [ 448.995476][T10088] team0: Device vxcan1 is of different type [ 449.356990][T10084] device wg2 entered promiscuous mode [ 449.703445][T10101] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2185'. [ 449.732548][T10103] netlink: 'syz.2.2185': attribute type 7 has an invalid length. [ 449.754925][T10103] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2185'. [ 450.292138][T10117] device wg2 entered promiscuous mode [ 450.719647][T10126] netlink: 'syz.2.2197': attribute type 10 has an invalid length. [ 450.823766][T10126] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.873344][T10126] bond0: (slave team0): Enslaving as an active interface with an up link [ 450.951170][T10132] netlink: 'syz.0.2200': attribute type 10 has an invalid length. [ 451.050720][T10132] team0: Device vxcan1 is of different type [ 451.170991][T10128] device syzkaller0 entered promiscuous mode [ 451.431825][T10141] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2204'. [ 451.788522][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2216'. [ 454.483249][T10146] netlink: 'syz.0.2204': attribute type 7 has an invalid length. [ 454.491107][T10146] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2204'. [ 454.512516][T10148] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2205'. [ 454.522910][T10149] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2205'. [ 454.623450][T10155] device syzkaller0 entered promiscuous mode [ 456.259059][T10168] device wg2 left promiscuous mode [ 456.538501][T10186] netlink: 'syz.3.2215': attribute type 10 has an invalid length. [ 457.391199][T10186] team0: Device vxcan1 is of different type [ 457.416353][T10192] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2219'. [ 457.633954][T10197] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2221'. [ 457.668927][T10203] netlink: 'syz.2.2232': attribute type 10 has an invalid length. [ 457.703547][T10203] team0: Device vxcan1 is of different type [ 457.712158][T10197] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2221'. [ 457.811656][T10209] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.2225'. [ 457.865354][T10209] netlink: zone id is out of range [ 457.870516][T10209] netlink: zone id is out of range [ 457.899332][T10209] netlink: zone id is out of range [ 457.919614][T10209] netlink: zone id is out of range [ 457.920145][T10205] device syzkaller0 entered promiscuous mode [ 457.943230][T10209] netlink: zone id is out of range [ 457.979425][T10210] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2225'. [ 457.996709][T10209] netlink: zone id is out of range [ 458.016070][T10209] netlink: zone id is out of range [ 458.022577][T10209] netlink: zone id is out of range [ 458.031796][T10209] netlink: zone id is out of range [ 458.039372][T10209] netlink: zone id is out of range [ 460.172001][T10240] netlink: 'syz.1.2238': attribute type 10 has an invalid length. [ 460.254271][T10240] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.306924][T10240] bond0: (slave team0): Enslaving as an active interface with an up link [ 460.354629][T10245] netlink: 'syz.2.2240': attribute type 10 has an invalid length. [ 460.402545][T10245] team0: Device vxcan1 is of different type [ 461.471974][T10275] netlink: 'syz.3.2254': attribute type 10 has an invalid length. [ 461.473818][T10268] delete_channel: no stack [ 461.555518][T10275] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.588127][T10275] bond0: (slave team0): Enslaving as an active interface with an up link [ 461.819087][T10286] netlink: 'syz.1.2258': attribute type 10 has an invalid length. [ 461.857544][T10286] team0: Device vxcan1 is of different type [ 463.068754][T10297] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2273'. [ 464.561236][T10338] netlink: 'syz.4.2278': attribute type 10 has an invalid length. [ 464.591536][T10338] team0: Device vxcan1 is of different type [ 465.149603][T10350] delete_channel: no stack [ 465.950967][T10381] netlink: 'syz.0.2300': attribute type 10 has an invalid length. [ 465.984367][T10381] team0: Device vxcan1 is of different type [ 466.388277][T10388] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2313'. [ 466.569660][T10394] delete_channel: no stack [ 466.637918][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2307'. [ 466.667183][T10402] netlink: 'syz.3.2316': attribute type 10 has an invalid length. [ 466.799400][T10402] team0: Device vxcan1 is of different type [ 467.216030][T10417] netlink: 'syz.0.2325': attribute type 10 has an invalid length. [ 467.238172][T10417] team0: Device vxcan1 is of different type [ 468.302893][T10427] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2318'. [ 468.754321][ T5936] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 468.839561][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2324'. [ 469.028235][T10450] delete_channel: no stack [ 469.512071][T10464] netlink: 'syz.2.2334': attribute type 10 has an invalid length. [ 469.534290][T10464] team0: Device vxcan1 is of different type [ 469.840451][T10478] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2335'. [ 471.941804][T10488] delete_channel: no stack [ 472.145812][T10505] netlink: 'syz.2.2353': attribute type 10 has an invalid length. [ 472.167995][T10505] team0: Device vxcan1 is of different type [ 472.207834][T10500] netlink: 'syz.3.2349': attribute type 2 has an invalid length. [ 472.242861][T10500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2349'. [ 472.430847][T10511] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2355'. [ 473.752140][T10529] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.759894][T10529] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.797281][T10530] delete_channel: no stack [ 475.039254][T10551] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2372'. [ 475.131567][T10550] netlink: 'syz.4.2371': attribute type 10 has an invalid length. [ 475.143224][T10550] team0: Device vxcan1 is of different type [ 476.690164][T10570] delete_channel: no stack [ 477.392909][T10578] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2384'. [ 477.873121][T10591] netlink: 'syz.4.2390': attribute type 10 has an invalid length. [ 477.895473][T10591] team0: Device vxcan1 is of different type [ 481.145772][T10641] delete_channel: no stack [ 481.153681][T10644] netlink: 'syz.4.2411': attribute type 10 has an invalid length. [ 481.205470][T10644] team0: Device vxcan1 is of different type [ 483.972381][T10683] delete_channel: no stack [ 484.541951][T10705] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2430'. [ 485.291601][T10715] delete_channel: no stack [ 486.494827][T10736] delete_channel: no stack [ 486.795370][T10749] netlink: 'syz.0.2453': attribute type 10 has an invalid length. [ 486.849666][T10749] team0: Device vxcan1 is of different type [ 486.938260][T10738] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2449'. [ 487.131813][T10755] delete_channel: no stack [ 487.299903][T10761] netlink: 'syz.0.2456': attribute type 10 has an invalid length. [ 487.310875][T10761] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2456'. [ 487.325393][T10761] bridge0: port 3(veth0_vlan) entered blocking state [ 487.332379][T10761] bridge0: port 3(veth0_vlan) entered disabled state [ 487.341878][T10761] net_ratelimit: 3660 callbacks suppressed [ 487.341893][T10761] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 487.379738][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2458'. [ 487.883381][T10784] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2467'. [ 487.902834][T10786] delete_channel: no stack [ 487.953223][T10784] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 487.976281][T10784] CPU: 1 PID: 10784 Comm: syz.1.2467 Not tainted syzkaller #0 [ 487.983791][T10784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.993867][T10784] Call Trace: [ 487.997163][T10784] [ 488.000111][T10784] dump_stack_lvl+0x188/0x24e [ 488.004822][T10784] ? show_regs_print_info+0x12/0x12 [ 488.010046][T10784] ? load_image+0x400/0x400 [ 488.014586][T10784] sysfs_warn_dup+0x8a/0xa0 [ 488.019121][T10784] sysfs_do_create_link_sd+0xc0/0x110 [ 488.024526][T10784] device_add+0x7ed/0xfb0 [ 488.028897][T10784] wiphy_register+0x1d9f/0x2ac0 [ 488.033793][T10784] ? cfg80211_event_work+0x40/0x40 [ 488.038925][T10784] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 488.045118][T10784] ieee80211_register_hw+0x2d00/0x39f0 [ 488.050610][T10784] ? ieee80211_register_hw+0xea1/0x39f0 [ 488.056179][T10784] ? ieee80211_register_hw+0xea1/0x39f0 [ 488.061764][T10784] ? ieee80211_tasklet_handler+0x20/0x20 [ 488.067436][T10784] ? memset+0x1e/0x40 [ 488.071437][T10784] ? __hrtimer_init+0x186/0x270 [ 488.076311][T10784] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 488.082073][T10784] hwsim_new_radio_nl+0xafa/0xce0 [ 488.087142][T10784] genl_family_rcv_msg_doit+0x22a/0x330 [ 488.092721][T10784] ? end_current_label_crit_section+0x170/0x170 [ 488.093242][T10790] delete_channel: no stack [ 488.098966][T10784] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 488.109340][T10784] ? bpf_lsm_capable+0x5/0x10 [ 488.114037][T10784] ? security_capable+0x85/0xb0 [ 488.118916][T10784] genl_rcv_msg+0x604/0x790 [ 488.123461][T10784] ? genl_bind+0x360/0x360 [ 488.127901][T10784] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 488.134275][T10784] netlink_rcv_skb+0x1fb/0x450 [ 488.139077][T10784] ? genl_bind+0x360/0x360 [ 488.143526][T10784] ? netlink_ack+0x1170/0x1170 [ 488.148327][T10784] ? down_read+0x1a8/0x2d0 [ 488.152771][T10784] genl_rcv+0x24/0x40 [ 488.156779][T10784] netlink_unicast+0x74d/0x8d0 [ 488.161579][T10784] netlink_sendmsg+0x8ad/0xbd0 [ 488.166379][T10784] ? netlink_getsockopt+0x550/0x550 [ 488.171610][T10784] ? aa_sock_msg_perm+0x94/0x150 [ 488.176565][T10784] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 488.181850][T10784] ? security_socket_sendmsg+0x7c/0xa0 [ 488.187317][T10784] ? netlink_getsockopt+0x550/0x550 [ 488.192515][T10784] ____sys_sendmsg+0x5be/0x970 [ 488.197289][T10784] ? __sys_sendmsg_sock+0x30/0x30 [ 488.202311][T10784] ? __import_iovec+0x315/0x500 [ 488.207164][T10784] ? import_iovec+0x6f/0xa0 [ 488.211665][T10784] ___sys_sendmsg+0x2a2/0x360 [ 488.216352][T10784] ? __sys_sendmsg+0x290/0x290 [ 488.221152][T10784] __se_sys_sendmsg+0x1bb/0x2a0 [ 488.226005][T10784] ? ct_nmi_exit+0x145/0x1c0 [ 488.230590][T10784] ? __x64_sys_sendmsg+0x80/0x80 [ 488.235541][T10784] ? lockdep_hardirqs_on+0x94/0x140 [ 488.240742][T10784] do_syscall_64+0x4c/0xa0 [ 488.245155][T10784] ? clear_bhb_loop+0x60/0xb0 [ 488.249840][T10784] ? clear_bhb_loop+0x60/0xb0 [ 488.254527][T10784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.260429][T10784] RIP: 0033:0x7fe03c99aeb9 [ 488.264851][T10784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.284453][T10784] RSP: 002b:00007fe03abf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.292861][T10784] RAX: ffffffffffffffda RBX: 00007fe03cc15fa0 RCX: 00007fe03c99aeb9 [ 488.300827][T10784] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 488.308791][T10784] RBP: 00007fe03ca08c1f R08: 0000000000000000 R09: 0000000000000000 [ 488.316756][T10784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.324727][T10784] R13: 00007fe03cc16038 R14: 00007fe03cc15fa0 R15: 00007ffd736d0718 [ 488.332703][T10784] [ 488.423750][T10789] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2471'. [ 488.650725][T10801] netlink: 'syz.3.2474': attribute type 10 has an invalid length. [ 488.684490][T10801] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2474'. [ 488.721362][T10801] bridge0: port 3(veth0_vlan) entered blocking state [ 488.739300][T10801] bridge0: port 3(veth0_vlan) entered disabled state [ 488.780834][T10801] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 489.105134][T10820] delete_channel: no stack [ 489.383419][T10827] delete_channel: no stack [ 489.419548][ T4276] Bluetooth: hci3: unexpected subevent 0x12 length: 150 > 5 [ 489.572780][T10832] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2489'. [ 489.688820][T10835] delete_channel: no stack [ 489.701865][T10840] delete_channel: no stack [ 489.918446][T10846] netlink: 'syz.2.2495': attribute type 10 has an invalid length. [ 489.934703][T10849] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2494'. [ 489.938567][T10846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2495'. [ 489.960092][T10846] bridge0: port 3(veth0_vlan) entered blocking state [ 489.961452][T10850] delete_channel: no stack [ 489.970154][T10846] bridge0: port 3(veth0_vlan) entered disabled state [ 490.015110][T10846] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 490.059158][T10849] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 490.068321][T10849] CPU: 0 PID: 10849 Comm: syz.4.2494 Not tainted syzkaller #0 [ 490.075824][T10849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 490.085899][T10849] Call Trace: [ 490.089201][T10849] [ 490.092148][T10849] dump_stack_lvl+0x188/0x24e [ 490.096865][T10849] ? show_regs_print_info+0x12/0x12 [ 490.102099][T10849] ? load_image+0x400/0x400 [ 490.106648][T10849] sysfs_warn_dup+0x8a/0xa0 [ 490.111183][T10849] sysfs_do_create_link_sd+0xc0/0x110 [ 490.116593][T10849] device_add+0x7ed/0xfb0 [ 490.120966][T10849] wiphy_register+0x1d9f/0x2ac0 [ 490.125959][T10849] ? cfg80211_event_work+0x40/0x40 [ 490.131101][T10849] ? minstrel_ht_alloc+0x894/0xa20 [ 490.136248][T10849] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 490.142360][T10849] ieee80211_register_hw+0x2d00/0x39f0 [ 490.147859][T10849] ? ieee80211_register_hw+0xea1/0x39f0 [ 490.153431][T10849] ? ieee80211_register_hw+0xea1/0x39f0 [ 490.159012][T10849] ? ieee80211_tasklet_handler+0x20/0x20 [ 490.164676][T10849] ? lockdep_hardirqs_on+0x94/0x140 [ 490.169904][T10849] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 490.176090][T10849] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 490.181835][T10849] hwsim_new_radio_nl+0xafa/0xce0 [ 490.186874][T10849] genl_family_rcv_msg_doit+0x22a/0x330 [ 490.192421][T10849] ? end_current_label_crit_section+0x170/0x170 [ 490.198655][T10849] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 490.204552][T10849] ? bpf_lsm_capable+0x5/0x10 [ 490.209220][T10849] ? security_capable+0x85/0xb0 [ 490.214073][T10849] genl_rcv_msg+0x604/0x790 [ 490.218582][T10849] ? genl_bind+0x360/0x360 [ 490.222994][T10849] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 490.229343][T10849] netlink_rcv_skb+0x1fb/0x450 [ 490.234130][T10849] ? genl_bind+0x360/0x360 [ 490.238566][T10849] ? netlink_ack+0x1170/0x1170 [ 490.243348][T10849] ? down_read+0x1a8/0x2d0 [ 490.247829][T10849] genl_rcv+0x24/0x40 [ 490.251818][T10849] netlink_unicast+0x74d/0x8d0 [ 490.256605][T10849] netlink_sendmsg+0x8ad/0xbd0 [ 490.261384][T10849] ? netlink_getsockopt+0x550/0x550 [ 490.266588][T10849] ? aa_sock_msg_perm+0x94/0x150 [ 490.271523][T10849] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 490.276803][T10849] ? security_socket_sendmsg+0x7c/0xa0 [ 490.282264][T10849] ? netlink_getsockopt+0x550/0x550 [ 490.287458][T10849] ____sys_sendmsg+0x5be/0x970 [ 490.292229][T10849] ? __sys_sendmsg_sock+0x30/0x30 [ 490.297268][T10849] ? __import_iovec+0x315/0x500 [ 490.302136][T10849] ? import_iovec+0x6f/0xa0 [ 490.306638][T10849] ___sys_sendmsg+0x2a2/0x360 [ 490.311319][T10849] ? try_to_wake_up+0x6ae/0x1080 [ 490.316258][T10849] ? __sys_sendmsg+0x290/0x290 [ 490.321043][T10849] ? btf_new_fd+0x396/0x780 [ 490.325575][T10849] __se_sys_sendmsg+0x1bb/0x2a0 [ 490.330435][T10849] ? ct_nmi_exit+0x145/0x1c0 [ 490.335026][T10849] ? __x64_sys_sendmsg+0x80/0x80 [ 490.339982][T10849] ? lockdep_hardirqs_on+0x94/0x140 [ 490.345192][T10849] do_syscall_64+0x4c/0xa0 [ 490.349614][T10849] ? clear_bhb_loop+0x60/0xb0 [ 490.354289][T10849] ? clear_bhb_loop+0x60/0xb0 [ 490.358967][T10849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.364857][T10849] RIP: 0033:0x7ff7d239aeb9 [ 490.369268][T10849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.388873][T10849] RSP: 002b:00007ff7d3310028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.397281][T10849] RAX: ffffffffffffffda RBX: 00007ff7d2615fa0 RCX: 00007ff7d239aeb9 [ 490.405263][T10849] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 490.413224][T10849] RBP: 00007ff7d2408c1f R08: 0000000000000000 R09: 0000000000000000 [ 490.421201][T10849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.429185][T10849] R13: 00007ff7d2616038 R14: 00007ff7d2615fa0 R15: 00007ffd795e8e78 [ 490.437259][T10849] [ 490.841486][ T4276] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5 [ 491.016791][T10871] delete_channel: no stack [ 491.369470][T10878] delete_channel: no stack [ 491.411308][T10875] netlink: 'syz.3.2508': attribute type 3 has an invalid length. [ 491.423676][T10875] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2508'. [ 491.577804][T10883] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2506'. [ 491.651532][T10885] delete_channel: no stack [ 491.767835][T10889] netlink: 'syz.1.2515': attribute type 10 has an invalid length. [ 491.794567][T10889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2515'. [ 491.827911][T10889] bridge0: port 3(veth0_vlan) entered blocking state [ 491.842298][T10889] bridge0: port 3(veth0_vlan) entered disabled state [ 491.860709][T10889] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 492.244664][T10902] delete_channel: no stack [ 492.511437][T10909] delete_channel: no stack [ 492.825940][T10915] delete_channel: no stack [ 493.079770][T10921] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2529'. [ 493.097444][T10924] delete_channel: no stack [ 493.415595][T10937] delete_channel: no stack [ 493.639365][T10945] delete_channel: no stack [ 493.808771][T10954] delete_channel: no stack [ 494.130508][T10965] device syzkaller0 entered promiscuous mode [ 494.496649][T10974] delete_channel: no stack [ 494.956274][T10993] delete_channel: no stack [ 495.240358][T11004] delete_channel: no stack [ 495.531561][T11014] delete_channel: no stack [ 495.582173][T11020] netlink: 'syz.4.2566': attribute type 10 has an invalid length. [ 495.619495][T11020] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2566'. [ 495.665803][T11020] bridge0: port 3(veth0_vlan) entered blocking state [ 495.711756][T11020] bridge0: port 3(veth0_vlan) entered disabled state [ 495.760891][T11020] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 495.822501][T11024] delete_channel: no stack [ 496.023815][T11028] delete_channel: no stack [ 496.118454][T11033] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2571'. [ 496.169405][T11033] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 496.179928][T11034] delete_channel: no stack [ 496.186122][T11033] CPU: 0 PID: 11033 Comm: syz.0.2571 Not tainted syzkaller #0 [ 496.193629][T11033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.203683][T11033] Call Trace: [ 496.206960][T11033] [ 496.209892][T11033] dump_stack_lvl+0x188/0x24e [ 496.214576][T11033] ? show_regs_print_info+0x12/0x12 [ 496.219774][T11033] ? load_image+0x400/0x400 [ 496.224295][T11033] sysfs_warn_dup+0x8a/0xa0 [ 496.228794][T11033] sysfs_do_create_link_sd+0xc0/0x110 [ 496.234165][T11033] device_add+0x7ed/0xfb0 [ 496.238511][T11033] wiphy_register+0x1d9f/0x2ac0 [ 496.243378][T11033] ? cfg80211_event_work+0x40/0x40 [ 496.248490][T11033] ? minstrel_ht_alloc+0x894/0xa20 [ 496.253614][T11033] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 496.259694][T11033] ieee80211_register_hw+0x2d00/0x39f0 [ 496.265153][T11033] ? lockdep_hardirqs_on+0x94/0x140 [ 496.270365][T11033] ? ieee80211_register_hw+0xea1/0x39f0 [ 496.275907][T11033] ? ieee80211_register_hw+0xea1/0x39f0 [ 496.281458][T11033] ? ieee80211_tasklet_handler+0x20/0x20 [ 496.287102][T11033] ? memset+0x1e/0x40 [ 496.291080][T11033] ? __hrtimer_init+0x186/0x270 [ 496.295931][T11033] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 496.301672][T11033] hwsim_new_radio_nl+0xafa/0xce0 [ 496.306705][T11033] genl_family_rcv_msg_doit+0x22a/0x330 [ 496.312313][T11033] ? end_current_label_crit_section+0x170/0x170 [ 496.318553][T11033] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 496.324458][T11033] ? bpf_lsm_capable+0x5/0x10 [ 496.329138][T11033] ? security_capable+0x85/0xb0 [ 496.333990][T11033] genl_rcv_msg+0x604/0x790 [ 496.338504][T11033] ? genl_bind+0x360/0x360 [ 496.342922][T11033] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 496.349268][T11033] netlink_rcv_skb+0x1fb/0x450 [ 496.354033][T11033] ? genl_bind+0x360/0x360 [ 496.358459][T11033] ? netlink_ack+0x1170/0x1170 [ 496.363320][T11033] ? down_read+0x1a8/0x2d0 [ 496.367740][T11033] genl_rcv+0x24/0x40 [ 496.371721][T11033] netlink_unicast+0x74d/0x8d0 [ 496.376503][T11033] netlink_sendmsg+0x8ad/0xbd0 [ 496.381272][T11033] ? netlink_getsockopt+0x550/0x550 [ 496.386473][T11033] ? aa_sock_msg_perm+0x94/0x150 [ 496.391411][T11033] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 496.396776][T11033] ? security_socket_sendmsg+0x7c/0xa0 [ 496.402238][T11033] ? netlink_getsockopt+0x550/0x550 [ 496.407440][T11033] ____sys_sendmsg+0x5be/0x970 [ 496.412217][T11033] ? __sys_sendmsg_sock+0x30/0x30 [ 496.417245][T11033] ? __import_iovec+0x315/0x500 [ 496.422096][T11033] ? import_iovec+0x6f/0xa0 [ 496.426597][T11033] ___sys_sendmsg+0x2a2/0x360 [ 496.431277][T11033] ? __sys_sendmsg+0x290/0x290 [ 496.436080][T11033] __se_sys_sendmsg+0x1bb/0x2a0 [ 496.440959][T11033] ? __x64_sys_sendmsg+0x80/0x80 [ 496.445932][T11033] ? syscall_enter_from_user_mode+0x2a/0x80 [ 496.451841][T11033] do_syscall_64+0x4c/0xa0 [ 496.456264][T11033] ? clear_bhb_loop+0x60/0xb0 [ 496.460952][T11033] ? clear_bhb_loop+0x60/0xb0 [ 496.465627][T11033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.471528][T11033] RIP: 0033:0x7fc6b7b9aeb9 [ 496.475944][T11033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.495545][T11033] RSP: 002b:00007fc6b8a92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.503957][T11033] RAX: ffffffffffffffda RBX: 00007fc6b7e15fa0 RCX: 00007fc6b7b9aeb9 [ 496.511922][T11033] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 496.519884][T11033] RBP: 00007fc6b7c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 496.527847][T11033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.536104][T11033] R13: 00007fc6b7e16038 R14: 00007fc6b7e15fa0 R15: 00007ffc634b1008 [ 496.544120][T11033] [ 496.933423][T11048] delete_channel: no stack [ 496.953165][T11051] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2593'. [ 497.023221][T11051] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 497.043262][T11051] CPU: 0 PID: 11051 Comm: syz.3.2593 Not tainted syzkaller #0 [ 497.050781][T11051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 497.060954][T11051] Call Trace: [ 497.064250][T11051] [ 497.067206][T11051] dump_stack_lvl+0x188/0x24e [ 497.071913][T11051] ? show_regs_print_info+0x12/0x12 [ 497.077145][T11051] ? load_image+0x400/0x400 [ 497.081682][T11051] sysfs_warn_dup+0x8a/0xa0 [ 497.086215][T11051] sysfs_do_create_link_sd+0xc0/0x110 [ 497.091619][T11051] device_add+0x7ed/0xfb0 [ 497.095991][T11051] wiphy_register+0x1d9f/0x2ac0 [ 497.100861][T11051] ? __rtnl_unlock+0x14/0xe0 [ 497.105490][T11051] ? cfg80211_event_work+0x40/0x40 [ 497.110706][T11051] ? minstrel_ht_alloc+0x894/0xa20 [ 497.115846][T11051] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 497.121937][T11051] ieee80211_register_hw+0x2d00/0x39f0 [ 497.127430][T11051] ? ieee80211_register_hw+0xea1/0x39f0 [ 497.132992][T11051] ? ieee80211_register_hw+0xea1/0x39f0 [ 497.138562][T11051] ? ieee80211_tasklet_handler+0x20/0x20 [ 497.144225][T11051] ? memset+0x1e/0x40 [ 497.148221][T11051] ? __hrtimer_init+0x186/0x270 [ 497.153088][T11051] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 497.158850][T11051] hwsim_new_radio_nl+0xafa/0xce0 [ 497.163903][T11051] genl_family_rcv_msg_doit+0x22a/0x330 [ 497.169468][T11051] ? end_current_label_crit_section+0x170/0x170 [ 497.175726][T11051] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 497.181660][T11051] ? bpf_lsm_capable+0x5/0x10 [ 497.186353][T11051] ? security_capable+0x85/0xb0 [ 497.191227][T11051] genl_rcv_msg+0x604/0x790 [ 497.195770][T11051] ? genl_bind+0x360/0x360 [ 497.200204][T11051] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 497.206566][T11051] netlink_rcv_skb+0x1fb/0x450 [ 497.211351][T11051] ? genl_bind+0x360/0x360 [ 497.215797][T11051] ? netlink_ack+0x1170/0x1170 [ 497.220584][T11051] ? down_read+0x1a8/0x2d0 [ 497.225016][T11051] genl_rcv+0x24/0x40 [ 497.229020][T11051] netlink_unicast+0x74d/0x8d0 [ 497.233811][T11051] netlink_sendmsg+0x8ad/0xbd0 [ 497.238603][T11051] ? netlink_getsockopt+0x550/0x550 [ 497.243823][T11051] ? aa_sock_msg_perm+0x94/0x150 [ 497.248778][T11051] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 497.254072][T11051] ? security_socket_sendmsg+0x7c/0xa0 [ 497.259551][T11051] ? netlink_getsockopt+0x550/0x550 [ 497.264765][T11051] ____sys_sendmsg+0x5be/0x970 [ 497.269559][T11051] ? __sys_sendmsg_sock+0x30/0x30 [ 497.274598][T11051] ? __import_iovec+0x315/0x500 [ 497.279470][T11051] ? import_iovec+0x6f/0xa0 [ 497.283988][T11051] ___sys_sendmsg+0x2a2/0x360 [ 497.288682][T11051] ? try_to_wake_up+0x6ae/0x1080 [ 497.293639][T11051] ? __sys_sendmsg+0x290/0x290 [ 497.298515][T11051] __se_sys_sendmsg+0x1bb/0x2a0 [ 497.303385][T11051] ? ct_nmi_exit+0x145/0x1c0 [ 497.307988][T11051] ? __x64_sys_sendmsg+0x80/0x80 [ 497.312959][T11051] ? lockdep_hardirqs_on+0x94/0x140 [ 497.318177][T11051] do_syscall_64+0x4c/0xa0 [ 497.322605][T11051] ? clear_bhb_loop+0x60/0xb0 [ 497.327297][T11051] ? clear_bhb_loop+0x60/0xb0 [ 497.331989][T11051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.337895][T11051] RIP: 0033:0x7f661a79aeb9 [ 497.342322][T11051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.362289][T11051] RSP: 002b:00007f661b5b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.370722][T11051] RAX: ffffffffffffffda RBX: 00007f661aa15fa0 RCX: 00007f661a79aeb9 [ 497.378705][T11051] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 497.386685][T11051] RBP: 00007f661a808c1f R08: 0000000000000000 R09: 0000000000000000 [ 497.394661][T11051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.402650][T11051] R13: 00007f661aa16038 R14: 00007f661aa15fa0 R15: 00007ffe1e0bd2d8 [ 497.410670][T11051] [ 497.652391][T11061] netlink: 'syz.2.2587': attribute type 39 has an invalid length. [ 497.685389][T11062] delete_channel: no stack [ 497.906813][T11071] delete_channel: no stack [ 498.407728][T11080] netlink: 'syz.2.2594': attribute type 3 has an invalid length. [ 498.463003][T11080] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2594'. [ 499.073316][T11092] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2600'. [ 499.149870][T11092] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 499.181620][T11092] CPU: 0 PID: 11092 Comm: syz.2.2600 Not tainted syzkaller #0 [ 499.189155][T11092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 499.199238][T11092] Call Trace: [ 499.202538][T11092] [ 499.205490][T11092] dump_stack_lvl+0x188/0x24e [ 499.210202][T11092] ? show_regs_print_info+0x12/0x12 [ 499.215430][T11092] ? load_image+0x400/0x400 [ 499.219966][T11092] sysfs_warn_dup+0x8a/0xa0 [ 499.224505][T11092] sysfs_do_create_link_sd+0xc0/0x110 [ 499.229928][T11092] device_add+0x7ed/0xfb0 [ 499.234302][T11092] wiphy_register+0x1d9f/0x2ac0 [ 499.239198][T11092] ? cfg80211_event_work+0x40/0x40 [ 499.244330][T11092] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 499.250519][T11092] ? rtnl_unlock+0x5/0x10 [ 499.254888][T11092] ieee80211_register_hw+0x2d00/0x39f0 [ 499.260401][T11092] ? lockdep_hardirqs_on+0x94/0x140 [ 499.265644][T11092] ? ieee80211_register_hw+0xea1/0x39f0 [ 499.271214][T11092] ? ieee80211_register_hw+0xea1/0x39f0 [ 499.276791][T11092] ? ieee80211_tasklet_handler+0x20/0x20 [ 499.282460][T11092] ? memset+0x1e/0x40 [ 499.286467][T11092] ? __hrtimer_init+0x186/0x270 [ 499.291336][T11092] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 499.297100][T11092] hwsim_new_radio_nl+0xafa/0xce0 [ 499.302170][T11092] genl_family_rcv_msg_doit+0x22a/0x330 [ 499.307745][T11092] ? end_current_label_crit_section+0x170/0x170 [ 499.314004][T11092] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 499.319938][T11092] ? bpf_lsm_capable+0x5/0x10 [ 499.324645][T11092] ? security_capable+0x85/0xb0 [ 499.329519][T11092] genl_rcv_msg+0x604/0x790 [ 499.334043][T11092] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 499.340217][T11092] ? genl_bind+0x360/0x360 [ 499.344670][T11092] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 499.351050][T11092] ? lock_acquire+0x225/0x4a0 [ 499.355763][T11092] netlink_rcv_skb+0x1fb/0x450 [ 499.360560][T11092] ? genl_bind+0x360/0x360 [ 499.365006][T11092] ? netlink_ack+0x1170/0x1170 [ 499.369806][T11092] ? down_read+0x1a8/0x2d0 [ 499.374244][T11092] genl_rcv+0x24/0x40 [ 499.378252][T11092] netlink_unicast+0x74d/0x8d0 [ 499.383059][T11092] netlink_sendmsg+0x8ad/0xbd0 [ 499.387867][T11092] ? netlink_getsockopt+0x550/0x550 [ 499.393090][T11092] ? aa_sock_msg_perm+0x94/0x150 [ 499.398052][T11092] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 499.403349][T11092] ? security_socket_sendmsg+0x7c/0xa0 [ 499.408838][T11092] ? netlink_getsockopt+0x550/0x550 [ 499.414066][T11092] ____sys_sendmsg+0x5be/0x970 [ 499.418862][T11092] ? __sys_sendmsg_sock+0x30/0x30 [ 499.423901][T11092] ? __import_iovec+0x315/0x500 [ 499.428772][T11092] ? import_iovec+0x6f/0xa0 [ 499.433291][T11092] ___sys_sendmsg+0x2a2/0x360 [ 499.438021][T11092] ? __sys_sendmsg+0x290/0x290 [ 499.442856][T11092] __se_sys_sendmsg+0x1bb/0x2a0 [ 499.447742][T11092] ? ct_nmi_exit+0x145/0x1c0 [ 499.452366][T11092] ? __x64_sys_sendmsg+0x80/0x80 [ 499.457348][T11092] ? lockdep_hardirqs_on+0x94/0x140 [ 499.462578][T11092] do_syscall_64+0x4c/0xa0 [ 499.467020][T11092] ? clear_bhb_loop+0x60/0xb0 [ 499.471713][T11092] ? clear_bhb_loop+0x60/0xb0 [ 499.476415][T11092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.482335][T11092] RIP: 0033:0x7f2d4b99aeb9 [ 499.486759][T11092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.506391][T11092] RSP: 002b:00007f2d4c87a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.514829][T11092] RAX: ffffffffffffffda RBX: 00007f2d4bc15fa0 RCX: 00007f2d4b99aeb9 [ 499.522813][T11092] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 499.530793][T11092] RBP: 00007f2d4ba08c1f R08: 0000000000000000 R09: 0000000000000000 [ 499.538772][T11092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.546758][T11092] R13: 00007f2d4bc16038 R14: 00007f2d4bc15fa0 R15: 00007ffcbb02df28 [ 499.554764][T11092] [ 499.751060][T11102] delete_channel: no stack [ 500.391034][T11131] netlink: 'syz.4.2615': attribute type 3 has an invalid length. [ 500.449237][T11129] delete_channel: no stack [ 500.464952][T11131] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2615'. [ 500.653004][T11139] device syzkaller0 entered promiscuous mode [ 501.180483][T11152] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2625'. [ 501.265750][T11152] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 501.306890][T11152] CPU: 1 PID: 11152 Comm: syz.0.2625 Not tainted syzkaller #0 [ 501.314406][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 501.324487][T11152] Call Trace: [ 501.327786][T11152] [ 501.330730][T11152] dump_stack_lvl+0x188/0x24e [ 501.335435][T11152] ? show_regs_print_info+0x12/0x12 [ 501.340648][T11152] ? load_image+0x400/0x400 [ 501.345171][T11152] sysfs_warn_dup+0x8a/0xa0 [ 501.349685][T11152] sysfs_do_create_link_sd+0xc0/0x110 [ 501.355068][T11152] device_add+0x7ed/0xfb0 [ 501.359423][T11152] wiphy_register+0x1d9f/0x2ac0 [ 501.364316][T11152] ? cfg80211_event_work+0x40/0x40 [ 501.369443][T11152] ? minstrel_ht_alloc+0x894/0xa20 [ 501.374578][T11152] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 501.380662][T11152] ieee80211_register_hw+0x2d00/0x39f0 [ 501.386151][T11152] ? ieee80211_register_hw+0xea1/0x39f0 [ 501.391719][T11152] ? ieee80211_register_hw+0xea1/0x39f0 [ 501.397339][T11152] ? ieee80211_tasklet_handler+0x20/0x20 [ 501.402994][T11152] ? memset+0x1e/0x40 [ 501.406986][T11152] ? __hrtimer_init+0x186/0x270 [ 501.411865][T11152] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 501.417625][T11152] hwsim_new_radio_nl+0xafa/0xce0 [ 501.422679][T11152] genl_family_rcv_msg_doit+0x22a/0x330 [ 501.428263][T11152] ? end_current_label_crit_section+0x170/0x170 [ 501.434537][T11152] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 501.440468][T11152] ? bpf_lsm_capable+0x5/0x10 [ 501.445157][T11152] ? security_capable+0x85/0xb0 [ 501.450035][T11152] genl_rcv_msg+0x604/0x790 [ 501.454569][T11152] ? genl_bind+0x360/0x360 [ 501.459001][T11152] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 501.465370][T11152] netlink_rcv_skb+0x1fb/0x450 [ 501.470148][T11152] ? genl_bind+0x360/0x360 [ 501.474583][T11152] ? netlink_ack+0x1170/0x1170 [ 501.479370][T11152] ? down_read+0x1a8/0x2d0 [ 501.483807][T11152] genl_rcv+0x24/0x40 [ 501.487819][T11152] netlink_unicast+0x74d/0x8d0 [ 501.492611][T11152] netlink_sendmsg+0x8ad/0xbd0 [ 501.497488][T11152] ? netlink_getsockopt+0x550/0x550 [ 501.502711][T11152] ? aa_sock_msg_perm+0x94/0x150 [ 501.507657][T11152] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 501.512948][T11152] ? security_socket_sendmsg+0x7c/0xa0 [ 501.518423][T11152] ? netlink_getsockopt+0x550/0x550 [ 501.523638][T11152] ____sys_sendmsg+0x5be/0x970 [ 501.528433][T11152] ? __sys_sendmsg_sock+0x30/0x30 [ 501.533475][T11152] ? __import_iovec+0x315/0x500 [ 501.538341][T11152] ? import_iovec+0x6f/0xa0 [ 501.542853][T11152] ___sys_sendmsg+0x2a2/0x360 [ 501.547539][T11152] ? try_to_wake_up+0x67c/0x1080 [ 501.552495][T11152] ? __sys_sendmsg+0x290/0x290 [ 501.557323][T11152] __se_sys_sendmsg+0x1bb/0x2a0 [ 501.562182][T11152] ? ct_nmi_exit+0x145/0x1c0 [ 501.566779][T11152] ? __x64_sys_sendmsg+0x80/0x80 [ 501.571749][T11152] ? lockdep_hardirqs_on+0x94/0x140 [ 501.576962][T11152] do_syscall_64+0x4c/0xa0 [ 501.581382][T11152] ? clear_bhb_loop+0x60/0xb0 [ 501.586069][T11152] ? clear_bhb_loop+0x60/0xb0 [ 501.590762][T11152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 501.596663][T11152] RIP: 0033:0x7fc6b7b9aeb9 [ 501.601086][T11152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.620710][T11152] RSP: 002b:00007fc6b8a92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.629135][T11152] RAX: ffffffffffffffda RBX: 00007fc6b7e15fa0 RCX: 00007fc6b7b9aeb9 [ 501.637110][T11152] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 501.645086][T11152] RBP: 00007fc6b7c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 501.653059][T11152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.661034][T11152] R13: 00007fc6b7e16038 R14: 00007fc6b7e15fa0 R15: 00007ffc634b1008 [ 501.669030][T11152] [ 501.675965][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.682293][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.949738][T11171] delete_channel: no stack [ 502.292941][T11185] delete_channel: no stack [ 503.049922][T11204] delete_channel: no stack [ 503.083557][T11206] delete_channel: no stack [ 503.287531][T11218] delete_channel: no stack [ 503.735608][T11234] delete_channel: no stack [ 503.742671][T11236] delete_channel: no stack [ 503.945085][T11247] delete_channel: no stack [ 504.557400][T11261] netlink: 'syz.3.2671': attribute type 3 has an invalid length. [ 504.591902][T11261] netlink: 'syz.3.2671': attribute type 4 has an invalid length. [ 504.674303][T11261] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.2671'. [ 504.826217][T11267] delete_channel: no stack [ 504.907154][T11273] delete_channel: no stack [ 504.927287][T11275] delete_channel: no stack [ 505.060381][T11279] delete_channel: no stack [ 505.453745][T11299] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2687'. [ 505.734832][T11308] delete_channel: no stack [ 505.925825][T11316] delete_channel: no stack [ 506.574736][T11338] delete_channel: no stack [ 506.696739][T11344] delete_channel: no stack [ 507.334782][T11364] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2714'. [ 508.199046][T11381] delete_channel: no stack [ 508.720729][T11400] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2727'. [ 509.019769][T11416] netlink: 'syz.4.2732': attribute type 3 has an invalid length. [ 509.077286][T11416] netlink: 'syz.4.2732': attribute type 4 has an invalid length. [ 509.117174][T11416] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.2732'. [ 509.292832][T11420] delete_channel: no stack [ 510.552911][T11451] delete_channel: no stack [ 511.135352][T11467] netlink: 'syz.1.2758': attribute type 2 has an invalid length. [ 511.143295][T11467] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2758'. [ 511.445688][T11487] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2763'. [ 511.517253][T11490] delete_channel: no stack [ 512.880413][T11524] delete_channel: no stack [ 512.888895][T11531] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2779'. [ 513.222241][T11541] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2787'. [ 513.840949][T11565] delete_channel: no stack [ 514.040460][T11573] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2799'. [ 515.215604][T11611] device syzkaller0 entered promiscuous mode [ 517.269382][T11640] delete_channel: no stack [ 517.503017][T11653] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2834'. [ 517.636414][T11659] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2830'. [ 518.288802][T11679] delete_channel: no stack [ 518.481237][T11685] device syzkaller0 entered promiscuous mode [ 518.999769][T11704] delete_channel: no stack [ 519.098703][T11706] delete_channel: no stack [ 519.276641][T11715] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2861'. [ 519.335736][T11717] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2862'. [ 519.358658][T11712] netlink: 'syz.1.2860': attribute type 33 has an invalid length. [ 519.373802][T11712] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2860'. [ 519.472522][T11712] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 519.737599][T11730] device syzkaller0 entered promiscuous mode [ 519.762181][T11713] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.2857'. [ 520.149122][T11743] delete_channel: no stack [ 520.334370][T11747] delete_channel: no stack [ 520.878579][T11762] netlink: 'syz.3.2878': attribute type 33 has an invalid length. [ 520.898366][T11762] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2878'. [ 520.995870][T11762] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 521.248339][T11769] device syzkaller0 entered promiscuous mode [ 521.271486][T11770] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2879'. [ 521.307686][T11776] netlink: 'syz.3.2882': attribute type 10 has an invalid length. [ 521.432188][T11782] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.2883'. [ 521.602597][T11785] delete_channel: no stack [ 521.728477][T11784] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2887'. [ 521.791524][T11791] delete_channel: no stack [ 522.278099][T11803] delete_channel: no stack [ 522.280367][T11802] netlink: 'syz.2.2894': attribute type 33 has an invalid length. [ 522.314791][T11802] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2894'. [ 522.364722][T11802] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 522.664261][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 522.798418][T11812] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2897'. [ 523.093494][T11820] delete_channel: no stack [ 523.349853][T11831] delete_channel: no stack [ 524.119728][T11857] delete_channel: no stack [ 524.337842][T11853] netlink: 'syz.0.2912': attribute type 33 has an invalid length. [ 524.370838][T11853] __nla_validate_parse: 2 callbacks suppressed [ 524.370857][T11853] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2912'. [ 524.555872][T11853] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 524.638893][T11861] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2913'. [ 524.765293][T11869] delete_channel: no stack [ 524.968511][T11872] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2921'. [ 525.422150][T11886] delete_channel: no stack [ 525.728479][T11899] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2931'. [ 525.792636][T11898] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2933'. [ 525.961574][T11904] delete_channel: no stack [ 526.221718][T11910] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2935'. [ 526.518172][T11921] delete_channel: no stack [ 526.830506][T11936] delete_channel: no stack [ 527.035879][T11942] delete_channel: no stack [ 527.201642][T11947] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2952'. [ 527.240257][T11932] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2944'. [ 527.398822][T11956] delete_channel: no stack [ 527.867683][T11970] delete_channel: no stack [ 528.419620][T11983] delete_channel: no stack [ 529.219361][T11986] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2969'. [ 529.242194][T11987] delete_channel: no stack [ 529.334377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 529.584753][T12000] delete_channel: no stack [ 529.783951][T12009] delete_channel: no stack [ 530.026422][T12016] delete_channel: no stack [ 530.148988][T12020] delete_channel: no stack [ 530.458895][T12031] delete_channel: no stack [ 530.568350][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 530.770862][T12039] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2991'. [ 531.081530][T12052] delete_channel: no stack [ 531.163871][T12055] netlink: 'syz.1.2998': attribute type 2 has an invalid length. [ 531.184466][T12055] netlink: 'syz.1.2998': attribute type 8 has an invalid length. [ 531.214400][T12055] netlink: 'syz.1.2998': attribute type 9 has an invalid length. [ 531.243908][T12058] delete_channel: no stack [ 531.264204][T12055] netlink: 'syz.1.2998': attribute type 10 has an invalid length. [ 531.289104][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2998'. [ 531.303982][T12063] delete_channel: no stack [ 531.347728][T12057] netlink: 'syz.3.2999': attribute type 2 has an invalid length. [ 531.357986][T12057] netlink: 'syz.3.2999': attribute type 8 has an invalid length. [ 531.391578][T12057] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2999'. [ 531.449515][T12065] netlink: 'syz.3.2999': attribute type 19 has an invalid length. [ 531.470873][T12065] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2999'. [ 531.801058][T12081] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3007'. [ 532.037080][T12072] device syzkaller0 entered promiscuous mode [ 533.449635][T12094] delete_channel: no stack [ 533.613710][T12098] delete_channel: no stack [ 533.739409][T12100] delete_channel: no stack [ 535.396281][T12112] device syzkaller0 left promiscuous mode [ 535.635070][T12124] netlink: 'syz.0.3023': attribute type 2 has an invalid length. [ 535.638534][T12125] delete_channel: no stack [ 535.656178][T12124] netlink: 'syz.0.3023': attribute type 8 has an invalid length. [ 535.682594][T12124] netlink: 'syz.0.3023': attribute type 9 has an invalid length. [ 535.693694][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3023'. [ 535.806431][T12131] delete_channel: no stack [ 535.870331][T12129] device syzkaller0 entered promiscuous mode [ 535.883075][T12135] delete_channel: no stack [ 537.849991][T12151] delete_channel: no stack [ 537.902156][T12156] validate_nla: 1 callbacks suppressed [ 537.902193][T12156] netlink: 'syz.4.3039': attribute type 2 has an invalid length. [ 537.924425][T12156] netlink: 'syz.4.3039': attribute type 8 has an invalid length. [ 537.942499][T12157] delete_channel: no stack [ 537.973954][T12156] netlink: 'syz.4.3039': attribute type 9 has an invalid length. [ 537.982197][T12156] netlink: 'syz.4.3039': attribute type 10 has an invalid length. [ 538.004662][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3039'. [ 538.097541][T12160] delete_channel: no stack [ 538.475796][T12180] delete_channel: no stack [ 538.498177][T12185] delete_channel: no stack [ 538.708822][T12190] delete_channel: no stack [ 538.724618][T12193] delete_channel: no stack [ 540.633751][T12227] delete_channel: no stack [ 540.665667][T12225] delete_channel: no stack [ 542.829918][T12260] delete_channel: no stack [ 542.977768][T12264] delete_channel: no stack [ 543.107469][T12270] netlink: 'syz.0.3091': attribute type 3 has an invalid length. [ 543.125545][T12270] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3091'. [ 543.794825][T12295] delete_channel: no stack [ 544.020123][T12306] delete_channel: no stack [ 544.108028][T12309] netdevsim netdevsim2: Direct firmware load for Ö failed with error -2 [ 544.144150][T12309] netdevsim netdevsim2: Falling back to sysfs fallback for: Ö [ 545.528756][T12328] delete_channel: no stack [ 545.639302][T12332] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3115'. [ 545.673024][T12333] delete_channel: no stack [ 545.771720][T12337] delete_channel: no stack [ 545.967921][T12345] IPv6: NLM_F_CREATE should be specified when creating new route [ 545.994240][T12345] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3122'. [ 546.222857][ T5934] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 546.479913][T12360] delete_channel: no stack [ 546.645146][T12363] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3131'. [ 547.154877][T12368] delete_channel: no stack [ 547.288669][T12374] delete_channel: no stack [ 548.160958][T12400] netlink: 'syz.1.3146': attribute type 3 has an invalid length. [ 548.173500][T12400] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3146'. [ 548.195811][T12405] delete_channel: no stack [ 548.302111][T12411] delete_channel: no stack [ 548.382893][T12414] netdevsim netdevsim0: Direct firmware load for Ö failed with error -2 [ 548.432617][T12414] netdevsim netdevsim0: Falling back to sysfs fallback for: Ö [ 548.533958][T12419] delete_channel: no stack [ 548.891252][T12432] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3158'. [ 549.402258][T12436] delete_channel: no stack [ 550.382873][T12478] delete_channel: no stack [ 550.560600][T12486] IPv6: NLM_F_CREATE should be specified when creating new route [ 550.592708][T12486] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3184'. [ 551.123236][T12505] delete_channel: no stack [ 551.165565][T12504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.234394][T12504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.319495][T12504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.364456][T12504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.927630][T12533] IPv6: NLM_F_CREATE should be specified when creating new route [ 552.965624][T12533] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3201'. [ 553.187647][T12543] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.3208'. [ 553.200676][T12540] delete_channel: no stack [ 553.659517][T12563] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3215'. [ 554.414430][T12580] delete_channel: no stack [ 556.243755][T12593] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3232'. [ 556.616797][T12606] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3234'. [ 556.626796][T12606] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 556.750925][T12610] delete_channel: no stack [ 556.972973][T12617] device syzkaller0 left promiscuous mode [ 557.075442][ C0] syzkaller0: tun_net_xmit 48 [ 557.512280][T12634] delete_channel: no stack [ 557.843953][T12644] delete_channel: no stack [ 558.713797][T12669] device syzkaller0 left promiscuous mode [ 558.738696][T12669] syzkaller0: create flow: hash 3061895784 index 1 [ 558.766033][T12670] delete_channel: no stack [ 558.814464][ T128] syzkaller0: tun_net_xmit 76 [ 558.819529][ T128] syzkaller0: tun_net_xmit 48 [ 558.836565][T12668] syzkaller0: delete flow: hash 3061895784 index 1 [ 558.921460][T12674] delete_channel: no stack [ 559.991050][T12696] delete_channel: no stack [ 560.332532][T12702] delete_channel: no stack [ 560.383680][T12704] delete_channel: no stack [ 560.393413][T12707] device syzkaller0 left promiscuous mode [ 561.659813][T12734] delete_channel: no stack [ 562.838606][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.844956][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.806789][T12764] delete_channel: no stack [ 564.728324][T12802] netlink: 'syz.4.3319': attribute type 11 has an invalid length. [ 564.736787][T12802] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3319'. [ 565.412957][T12797] delete_channel: no stack [ 565.492345][T12800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.758642][T12828] device syzkaller0 entered promiscuous mode [ 567.833744][T12832] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3332'. [ 567.924205][T12835] netlink: 'syz.3.3333': attribute type 9 has an invalid length. [ 567.945509][T12835] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.3333'. [ 568.043062][T12838] delete_channel: no stack [ 570.521523][T12873] delete_channel: no stack [ 570.701113][T12879] netlink: 'syz.0.3349': attribute type 9 has an invalid length. [ 570.742699][T12879] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.3349'. [ 570.790110][T12881] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 570.797297][T12881] syzkaller1: linktype set to 823 [ 571.016844][T12897] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3357'. [ 571.277587][T12908] delete_channel: no stack [ 571.602380][T12920] netlink: 'syz.4.3367': attribute type 9 has an invalid length. [ 571.610785][T12920] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.3367'. [ 571.823211][T12922] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 571.847005][T12922] syzkaller1: linktype set to 823 [ 572.166431][T12938] delete_channel: no stack [ 572.911595][T12970] netlink: 'syz.1.3385': attribute type 9 has an invalid length. [ 572.923116][T12970] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.3385'. [ 572.977486][T12969] delete_channel: no stack [ 573.138194][T12974] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 573.148863][T12974] syzkaller1: linktype set to 823 [ 573.936105][T13004] delete_channel: no stack [ 574.643180][T13038] delete_channel: no stack [ 574.781930][T13043] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3414'. [ 575.086020][T13050] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3434'. [ 575.531071][T13061] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3428'. [ 575.789099][T13069] delete_channel: no stack [ 576.140081][T13079] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 576.163203][T13079] syzkaller1: linktype set to 823 [ 576.560503][T13099] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3446'. [ 576.623426][T13102] delete_channel: no stack [ 577.522703][T13140] delete_channel: no stack [ 577.701122][T13146] delete_channel: no stack [ 578.253395][T13168] delete_channel: no stack [ 578.416347][T13178] netlink: 'syz.2.3479': attribute type 5 has an invalid length. [ 578.506453][T13183] syz.1.3481 (13183) used obsolete PPPIOCDETACH ioctl [ 578.611516][T13184] delete_channel: no stack [ 578.842969][T13196] delete_channel: no stack [ 579.101822][T13204] delete_channel: no stack [ 579.124630][T13211] device bridge_slave_1 left promiscuous mode [ 579.155022][T13211] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.287639][T13211] device bridge_slave_0 left promiscuous mode [ 579.295750][T13211] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.326128][T13211] bond0: (slave bridge0): Releasing backup interface [ 579.386653][T13213] tipc: Started in network mode [ 579.392869][T13213] tipc: Node identity 9215a268, cluster identity 4711 [ 579.418448][T13213] tipc: Node number set to 2450891368 [ 579.421556][T13223] delete_channel: no stack [ 579.733317][T13233] delete_channel: no stack [ 579.988288][T13244] delete_channel: no stack [ 580.253598][T13249] delete_channel: no stack [ 580.488941][T13265] device bridge_slave_1 left promiscuous mode [ 580.552248][T13265] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.571382][T13267] netlink: 'syz.3.3517': attribute type 2 has an invalid length. [ 580.583637][T13265] device bridge_slave_0 left promiscuous mode [ 580.592158][T13267] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3517'. [ 580.605837][T13265] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.632567][T13270] delete_channel: no stack [ 580.666471][T13265] bond0: (slave bridge0): Releasing backup interface [ 580.898679][T13278] delete_channel: no stack [ 581.021443][T13282] delete_channel: no stack [ 581.602899][T13307] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3532'. [ 581.628171][T13308] delete_channel: no stack [ 581.911265][T13318] delete_channel: no stack [ 582.210212][T13333] device bridge_slave_1 left promiscuous mode [ 582.216938][T13333] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.235069][T13328] delete_channel: no stack [ 582.243125][T13333] device bridge_slave_0 left promiscuous mode [ 582.294303][T13333] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.446431][T13333] bond0: (slave bridge0): Releasing backup interface [ 582.677936][T13350] delete_channel: no stack [ 582.870091][T13358] delete_channel: no stack [ 582.956637][T13355] delete_channel: no stack [ 583.142841][T13366] delete_channel: no stack [ 583.219390][T13373] delete_channel: no stack [ 583.529825][T13389] delete_channel: no stack [ 583.990438][T13398] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3570'. [ 584.182242][T13404] delete_channel: no stack [ 584.340507][T13408] delete_channel: no stack [ 584.887777][T13417] delete_channel: no stack [ 585.048504][T13428] netlink: 'syz.1.3584': attribute type 10 has an invalid length. [ 585.066895][T13428] team0: Device hsr_slave_0 failed to register rx_handler [ 585.348766][T13433] delete_channel: no stack [ 585.413569][T13436] delete_channel: no stack [ 585.560092][T13441] delete_channel: no stack [ 585.577107][T13445] delete_channel: no stack [ 585.786021][T13453] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3593'. [ 585.818447][T13454] delete_channel: no stack [ 585.835222][T13443] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3592'. [ 586.345811][T13474] delete_channel: no stack [ 586.441397][T13480] delete_channel: no stack [ 586.510146][T13484] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 586.577213][T13485] delete_channel: no stack [ 586.607551][T13488] tipc: Started in network mode [ 586.632864][T13488] tipc: Node identity 9215a268, cluster identity 4711 [ 586.645513][T13488] tipc: Node number set to 2450891368 [ 587.216096][T13507] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3618'. [ 587.296625][T13509] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3613'. [ 587.307376][T13511] delete_channel: no stack [ 587.596477][T13517] delete_channel: no stack [ 587.629589][T13520] delete_channel: no stack [ 587.899186][T13525] netlink: 'syz.1.3625': attribute type 10 has an invalid length. [ 587.914402][T13525] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3625'. [ 587.927524][T13525] device ipvlan1 entered promiscuous mode [ 587.960232][T13525] bridge0: port 3(ipvlan1) entered blocking state [ 587.970311][T13525] bridge0: port 3(ipvlan1) entered disabled state [ 588.018749][T13525] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 589.423370][T13554] delete_channel: no stack [ 589.451051][T13557] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 589.657502][T13560] delete_channel: no stack [ 589.658342][T13552] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3636'. [ 591.459524][T13596] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 591.998882][T13605] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3654'. [ 592.338787][T13613] bond0: (slave wlan1): Error: Slave device does not support XDP [ 592.968605][T13634] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 593.463908][T13638] delete_channel: no stack [ 594.559664][T13653] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 594.680103][T13650] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3673'. [ 595.276091][T13675] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 595.538167][T13680] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3691'. [ 595.618999][T13681] delete_channel: no stack [ 596.130698][T13694] bond0: (slave team0): Error: Slave device does not support XDP [ 597.772996][T13715] netlink: 'syz.3.3696': attribute type 10 has an invalid length. [ 597.819880][T13715] team0: Device hsr_slave_0 failed to register rx_handler [ 597.871566][T13721] delete_channel: no stack [ 598.091165][T13727] delete_channel: no stack [ 598.413752][T13737] delete_channel: no stack [ 599.392952][T13742] delete_channel: no stack [ 601.094474][T13762] bond0: (slave wlan1): Error: Slave device does not support XDP [ 601.636317][T13782] delete_channel: no stack [ 604.704730][T13796] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 604.836939][T13801] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 605.315994][T13817] delete_channel: no stack [ 605.335164][T13817] delete_channel: no stack [ 605.360524][T13818] delete_channel: no stack [ 606.029592][T13841] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 606.256132][ T4283] Bluetooth: hci4: unexpected event 0x3d length: 15 > 14 [ 606.599026][T13854] delete_channel: no stack [ 606.612384][T13859] delete_channel: no stack [ 606.644740][T13859] delete_channel: no stack [ 608.120082][T13895] delete_channel: no stack [ 608.388940][T13910] delete_channel: no stack [ 608.595895][T13921] delete_channel: no stack [ 608.600531][T13921] delete_channel: no stack [ 609.306644][T13936] netlink: 'syz.0.3779': attribute type 10 has an invalid length. [ 609.373122][T13936] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.393890][T13936] bond0: (slave team0): Enslaving as an active interface with an up link [ 609.414367][T13940] netlink: 'syz.4.3780': attribute type 10 has an invalid length. [ 609.426064][T13940] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3780'. [ 609.437616][T13940] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 609.691761][T13948] delete_channel: no stack [ 609.869461][T13956] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3791'. [ 609.891993][T13957] delete_channel: no stack [ 610.294995][T13969] delete_channel: no stack [ 610.468413][T13982] netlink: 'syz.3.3796': attribute type 10 has an invalid length. [ 610.658071][T13995] IPv6: Can't replace route, no match found [ 610.928965][T14003] delete_channel: no stack [ 610.938689][T14003] delete_channel: no stack [ 610.967541][T14004] delete_channel: no stack [ 611.299780][T14021] netlink: 'syz.2.3815': attribute type 10 has an invalid length. [ 611.316358][ T4283] Bluetooth: hci3: unexpected event 0x3d length: 15 > 14 [ 611.321821][T14013] delete_channel: no stack [ 612.506183][T14053] delete_channel: no stack [ 612.524765][T14053] delete_channel: no stack [ 613.064183][T14057] delete_channel: no stack [ 613.169627][T14063] delete_channel: no stack [ 613.527192][T14073] netlink: 'syz.2.3839': attribute type 25 has an invalid length. [ 613.551781][T14073] netlink: 'syz.2.3839': attribute type 1 has an invalid length. [ 613.977641][T14087] À: port 1(vlan0) entered blocking state [ 613.994298][T14087] À: port 1(vlan0) entered disabled state [ 614.029466][T14087] device vlan0 entered promiscuous mode [ 614.168150][T14093] delete_channel: no stack [ 614.177593][T14095] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 614.196792][T14093] delete_channel: no stack [ 614.294582][T14097] netlink: 'syz.1.3842': attribute type 10 has an invalid length. [ 614.412250][T14101] delete_channel: no stack [ 614.680074][T14104] delete_channel: no stack [ 615.646295][T14134] delete_channel: no stack [ 615.706765][T14135] delete_channel: no stack [ 615.829084][T14144] delete_channel: no stack [ 616.411881][T14164] netlink: 'syz.1.3873': attribute type 25 has an invalid length. [ 616.433668][T14164] netlink: 'syz.1.3873': attribute type 1 has an invalid length. [ 618.589855][T14172] delete_channel: no stack [ 618.713794][T14180] delete_channel: no stack [ 618.812000][T14182] delete_channel: no stack [ 618.914588][T14188] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 619.212967][T14203] delete_channel: no stack [ 619.396556][T14212] bond0: (slave wlan1): Error: Slave device does not support XDP [ 619.429827][T14212] netlink: 'syz.4.3895': attribute type 10 has an invalid length. [ 619.430385][T14213] delete_channel: no stack [ 619.456919][T14212] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 620.001657][T14237] delete_channel: no stack [ 620.171219][T14248] delete_channel: no stack [ 620.198030][T14246] delete_channel: no stack [ 624.130019][T14293] delete_channel: no stack [ 624.141695][T14291] delete_channel: no stack [ 624.277943][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.284332][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.515755][T14338] delete_channel: no stack [ 633.025330][T14384] delete_channel: no stack [ 633.300219][T14397] netlink: 'syz.0.3967': attribute type 10 has an invalid length. [ 633.421897][T14397] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 633.536126][T14404] delete_channel: no stack [ 634.104871][T14419] netdevsim netdevsim4: Direct firmware load for Ö failed with error -2 [ 634.162396][T14419] netdevsim netdevsim4: Falling back to sysfs fallback for: Ö [ 638.825018][T14473] IPv6: pim6reg1: Disabled Multicast RS [ 639.186834][T14488] netlink: 'syz.4.4000': attribute type 10 has an invalid length. [ 639.238868][T14488] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 640.266245][T14530] netlink: 'syz.4.4013': attribute type 9 has an invalid length. [ 640.277606][T14530] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4013'. [ 640.597254][T14537] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 640.612867][T14537] syzkaller1: group set to 778 [ 641.336675][T14542] netlink: 'syz.3.4019': attribute type 10 has an invalid length. [ 641.392831][T14542] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 641.763667][T14554] delete_channel: no stack [ 641.783489][T14554] delete_channel: no stack [ 641.993963][T14565] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4030'. [ 643.120022][T14593] netlink: 'syz.2.4038': attribute type 10 has an invalid length. [ 643.838961][T14593] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 644.828874][T14604] netlink: 'syz.1.4044': attribute type 3 has an invalid length. [ 644.841201][T14604] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.4044'. [ 644.891000][T14608] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.4043'. [ 644.910408][T14608] netlink: 'syz.0.4043': attribute type 10 has an invalid length. [ 644.918628][T14608] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4043'. [ 646.240594][T14645] netlink: 'syz.2.4058': attribute type 9 has an invalid length. [ 646.282721][T14645] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4058'. [ 647.211965][T14682] IPv6: pim6reg1: Disabled Multicast RS [ 647.723152][T14691] netlink: 'syz.1.4077': attribute type 9 has an invalid length. [ 647.777769][T14691] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4077'. [ 648.473219][T14721] IPv6: pim6reg1: Disabled Multicast RS [ 655.132707][T14872] device wlan0 left promiscuous mode [ 655.178406][T14872] mac80211_hwsim hwsim10 »»»»»»: renamed from wlan0 [ 655.417652][T14883] netlink: 'syz.0.4161': attribute type 21 has an invalid length. [ 655.436520][T14883] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4161'. [ 660.490029][T14963] netlink: 'syz.2.4190': attribute type 3 has an invalid length. [ 660.509111][T14963] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.4190'. [ 660.683705][T14970] netlink: 'syz.4.4195': attribute type 10 has an invalid length. [ 660.870781][T14981] netlink: 'syz.4.4195': attribute type 29 has an invalid length. [ 661.182575][T14984] netlink: 'syz.0.4201': attribute type 13 has an invalid length. [ 661.192766][T14984] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4201'. [ 664.242949][T15001] netlink: 'syz.4.4211': attribute type 3 has an invalid length. [ 664.285565][T15001] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.4211'. [ 664.690655][T15024] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4218'. [ 665.296138][T15040] netlink: 'syz.3.4224': attribute type 29 has an invalid length. [ 667.557590][T15050] netlink: 'syz.1.4228': attribute type 13 has an invalid length. [ 667.585444][T15050] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4228'. [ 667.669447][T15049] netlink: 'syz.3.4229': attribute type 3 has an invalid length. [ 667.704413][T15049] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.4229'. [ 667.967658][T15062] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4235'. [ 671.519521][T15081] netlink: 'syz.1.4245': attribute type 10 has an invalid length. [ 671.654271][T15086] netlink: 'syz.1.4245': attribute type 29 has an invalid length. [ 671.770694][T15090] netlink: 'syz.3.4247': attribute type 13 has an invalid length. [ 671.799922][T15090] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4247'. [ 672.164836][T15106] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4251'. [ 672.343836][T15114] device syzkaller0 entered promiscuous mode [ 672.364488][ T4378] syzkaller0: tun_net_xmit 76 [ 672.387475][T15114] syzkaller0: tun_net_xmit 1280 [ 672.424412][ T4345] syzkaller0: tun_net_xmit 76 [ 672.449346][T15118] netlink: 'syz.3.4259': attribute type 7 has an invalid length. [ 672.494566][T15118] netlink: 'syz.3.4259': attribute type 6 has an invalid length. [ 672.537175][T15123] syzkaller0: tun_net_xmit 1280 [ 672.554363][ T4345] syzkaller0: tun_net_xmit 76 [ 672.616424][T15126] netlink: 'syz.2.4263': attribute type 10 has an invalid length. [ 672.868555][T15129] netlink: 'syz.2.4263': attribute type 29 has an invalid length. [ 673.140459][T15128] netlink: 'syz.4.4264': attribute type 13 has an invalid length. [ 673.163242][T15128] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4264'. [ 673.752234][T15164] netlink: 'syz.2.4276': attribute type 7 has an invalid length. [ 673.812991][T15164] netlink: 'syz.2.4276': attribute type 6 has an invalid length. [ 673.902937][T15172] netlink: 'syz.1.4280': attribute type 27 has an invalid length. [ 674.743100][T15182] netlink: 'syz.0.4283': attribute type 29 has an invalid length. [ 674.871029][T15172] bond0: (slave bond_slave_0): Releasing backup interface [ 674.901497][T15171] device syzkaller0 left promiscuous mode [ 674.911375][T15184] netlink: 'syz.0.4283': attribute type 10 has an invalid length. [ 674.984328][T15185] device syzkaller0 entered promiscuous mode [ 675.128230][T15191] device syzkaller0 left promiscuous mode [ 675.168224][T15191] syzkaller0: tun_net_xmit 1280 [ 675.186818][ T4345] syzkaller0: tun_net_xmit 76 [ 675.209910][T15196] netlink: 'syz.2.4284': attribute type 13 has an invalid length. [ 675.238454][T15196] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4284'. [ 675.651642][T15214] netlink: 'syz.1.4293': attribute type 7 has an invalid length. [ 676.548148][T15218] bond0: (slave bond_slave_0): Releasing backup interface [ 677.772966][T15280] validate_nla: 5 callbacks suppressed [ 677.772984][T15280] netlink: 'syz.3.4319': attribute type 27 has an invalid length. [ 678.265725][T15280] bond0: (slave bond_slave_0): Releasing backup interface [ 681.128329][T15344] netlink: 'syz.2.4340': attribute type 27 has an invalid length. [ 681.272115][T15344] bond0: (slave bond_slave_0): Releasing backup interface [ 685.718054][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.724465][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.741697][T15456] device syzkaller0 entered promiscuous mode [ 692.764411][ T4345] syzkaller0: tun_net_xmit 76 [ 692.821770][T15456] syzkaller0: tun_net_xmit 1280 [ 692.827151][ T4345] syzkaller0: tun_net_xmit 76 [ 693.881247][ T126] syzkaller0: tun_net_xmit 76 [ 695.825812][ T4345] syzkaller0: tun_net_xmit 76 [ 695.830723][ T4345] syzkaller0: tun_net_xmit 48 [ 696.650635][T15492] netlink: 'syz.2.4402': attribute type 10 has an invalid length. [ 696.660136][T15492] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4402'. [ 696.701323][T15492] device ipvlan1 entered promiscuous mode [ 696.717301][T15492] bridge0: port 3(ipvlan1) entered blocking state [ 696.725034][T15492] bridge0: port 3(ipvlan1) entered disabled state [ 696.735028][T15492] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 696.751376][T15494] device syzkaller0 entered promiscuous mode [ 696.933708][T15500] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 696.970063][T15500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 696.989344][T15502] netlink: 'syz.4.4404': attribute type 1 has an invalid length. [ 697.020438][T15502] netlink: 'syz.4.4404': attribute type 4 has an invalid length. [ 697.071941][T15502] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4404'. [ 697.125719][T15508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4407'. [ 697.136979][T15508] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4407'. [ 697.148498][T15507] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4407'. [ 697.303016][T15514] device syzkaller0 entered promiscuous mode [ 697.718687][T15528] netlink: 'syz.0.4414': attribute type 10 has an invalid length. [ 697.811166][T15528] team0: Device ipvlan1 failed to register rx_handler [ 698.105847][ T4283] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5 [ 698.349839][T15548] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 698.371983][T15548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 698.498725][T15554] netlink: 'syz.0.4427': attribute type 1 has an invalid length. [ 698.509233][T15554] netlink: 'syz.0.4427': attribute type 4 has an invalid length. [ 698.522386][T15554] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4427'. [ 698.817081][T15564] netlink: 'syz.2.4442': attribute type 1 has an invalid length. [ 698.836038][T15564] netlink: 'syz.2.4442': attribute type 4 has an invalid length. [ 698.877466][T15564] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4442'. [ 699.126890][T15577] netlink: 'syz.4.4434': attribute type 10 has an invalid length. [ 699.140900][ T4283] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 699.243649][T15577] team0: Device ipvlan1 failed to register rx_handler [ 699.744902][T15590] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 699.782184][T15590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 700.396728][ T4283] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5 [ 701.220518][T15628] netlink: 'syz.3.4455': attribute type 10 has an invalid length. [ 701.370318][T15628] team0: Device ipvlan1 failed to register rx_handler [ 704.709532][T15676] netlink: 'syz.1.4470': attribute type 10 has an invalid length. [ 704.732927][T15676] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 708.730303][T15716] netlink: 'syz.2.4491': attribute type 10 has an invalid length. [ 708.797362][T15716] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 710.222911][T15754] netlink: 'syz.1.4507': attribute type 10 has an invalid length. [ 710.256035][T15754] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 710.297251][T15757] netlink: 'syz.3.4508': attribute type 10 has an invalid length. [ 710.308295][T15757] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4508'. [ 710.328559][T15757] device ipvlan1 entered promiscuous mode [ 710.357672][T15757] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 712.028598][T15794] netlink: 'syz.4.4524': attribute type 10 has an invalid length. [ 712.054243][T15794] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4524'. [ 712.063736][T15794] device ipvlan1 entered promiscuous mode [ 712.088165][T15796] sock: sock_timestamping_bind_phc: sock not bind to device [ 712.099075][T15794] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 712.429263][T15804] device syzkaller0 entered promiscuous mode [ 712.446529][ T128] syzkaller0: tun_net_xmit 76 [ 712.610823][T15811] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.4531'. [ 713.598027][T15826] sock: sock_timestamping_bind_phc: sock not bind to device [ 715.109995][T15869] sock: sock_timestamping_bind_phc: sock not bind to device [ 719.134915][T15905] sock: sock_timestamping_bind_phc: sock not bind to device [ 719.331403][T15907] device bond0 entered promiscuous mode [ 719.337317][T15907] device bond_slave_1 entered promiscuous mode [ 719.344986][T15907] device netdevsim0 entered promiscuous mode [ 719.351229][T15907] device bridge0 entered promiscuous mode [ 719.435412][T15907] device team0 entered promiscuous mode [ 719.457648][T15907] device team_slave_1 entered promiscuous mode [ 719.483460][T15907] device wlan1 entered promiscuous mode [ 719.492860][T15907] device macvlan1 entered promiscuous mode [ 719.508437][T15911] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.4570'. [ 723.870739][T15938] sock: sock_timestamping_bind_phc: sock not bind to device [ 724.471611][T15963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4591'. [ 724.485769][T15963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4591'. [ 724.549245][T15965] netlink: 'syz.1.4592': attribute type 3 has an invalid length. [ 724.560937][T15965] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.4592'. [ 724.723900][T15963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4591'. [ 725.015582][T15977] sock: sock_timestamping_bind_phc: sock not bind to device [ 725.392728][T15991] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.4603'. [ 725.531918][T15995] netlink: 'syz.0.4606': attribute type 10 has an invalid length. [ 725.555506][T15995] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4606'. [ 725.566133][T15995] device bond0 entered promiscuous mode [ 725.574241][T15995] device bond_slave_0 entered promiscuous mode [ 725.581443][T15995] device bond_slave_1 entered promiscuous mode [ 725.590017][T15995] device netdevsim0 entered promiscuous mode [ 725.597211][T15995] device team0 entered promiscuous mode [ 725.603141][T15995] device team_slave_1 entered promiscuous mode [ 725.610640][T15995] device wlan1 entered promiscuous mode [ 725.633268][T15995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.813584][T16002] device bond0 entered promiscuous mode [ 725.823709][T16002] device bond_slave_1 entered promiscuous mode [ 725.831771][T16002] device wlan1 entered promiscuous mode [ 725.839595][T16002] device netdevsim0 entered promiscuous mode [ 725.848067][T16002] device bridge0 entered promiscuous mode [ 725.853947][T16002] device team0 entered promiscuous mode [ 725.859776][T16002] device team_slave_1 entered promiscuous mode [ 726.167408][T16014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4612'. [ 726.198782][T16014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4612'. [ 726.446453][T16010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4612'. [ 726.706387][T16029] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.4620'. [ 727.360823][T16047] netlink: 'syz.4.4627': attribute type 10 has an invalid length. [ 727.369061][T16047] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4627'. [ 727.380063][T16047] device bond0 entered promiscuous mode [ 727.393441][T16047] device bond_slave_1 entered promiscuous mode [ 727.421514][T16047] device wlan1 entered promiscuous mode [ 727.431774][T16047] device dummy0 entered promiscuous mode [ 727.445888][T16047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.788174][T16061] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4635'. [ 727.837700][T16061] netlink: 'syz.3.4635': attribute type 29 has an invalid length. [ 727.866395][T16061] netlink: 'syz.3.4635': attribute type 29 has an invalid length. [ 727.888492][T16068] netlink: 'syz.3.4635': attribute type 29 has an invalid length. [ 727.941028][T16061] netlink: 'syz.3.4635': attribute type 29 has an invalid length. [ 728.543500][T16088] netlink: 'syz.3.4643': attribute type 10 has an invalid length. [ 728.572878][T16088] device bond0 entered promiscuous mode [ 728.581113][T16088] device bond_slave_1 entered promiscuous mode [ 728.605572][T16088] device team0 entered promiscuous mode [ 728.612065][T16088] device team_slave_1 entered promiscuous mode [ 728.637867][T16088] device netdevsim0 entered promiscuous mode [ 728.667990][T16088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.685660][T16132] __nla_validate_parse: 4 callbacks suppressed [ 729.685676][T16132] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4661'. [ 729.759783][T16132] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4661'. [ 729.815373][T16134] netlink: 'syz.2.4663': attribute type 10 has an invalid length. [ 729.865560][T16134] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4663'. [ 729.885679][T16134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.894478][T16134] bridge0: port 3(bond0) entered blocking state [ 729.901675][T16134] bridge0: port 3(bond0) entered disabled state [ 729.931357][T16129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4661'. [ 731.744245][T16183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4680'. [ 731.870018][T16183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4680'. [ 731.917911][T16183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4680'. [ 732.248299][T16198] netlink: 'syz.3.4689': attribute type 3 has an invalid length. [ 732.265240][T16198] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.4689'. [ 732.622381][T16207] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4695'. [ 732.688009][T16207] netlink: 'syz.4.4695': attribute type 29 has an invalid length. [ 732.851420][T16207] netlink: 'syz.4.4695': attribute type 29 has an invalid length. [ 732.863807][T16212] netlink: 'syz.4.4695': attribute type 29 has an invalid length. [ 732.872921][T16214] netlink: 'syz.4.4695': attribute type 29 has an invalid length. [ 734.247936][T16257] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4718'. [ 734.280460][T16257] netlink: 'syz.1.4718': attribute type 29 has an invalid length. [ 734.290579][T16257] netlink: 'syz.1.4718': attribute type 29 has an invalid length. [ 734.307428][T16257] netlink: 'syz.1.4718': attribute type 29 has an invalid length. [ 734.319699][T16257] netlink: 'syz.1.4718': attribute type 29 has an invalid length. [ 735.162251][T16264] netlink: 'syz.1.4722': attribute type 10 has an invalid length. [ 735.209288][T16264] bond0: (slave wlan1): Releasing backup interface [ 735.216519][T16264] device wlan1 left promiscuous mode [ 735.230068][T16264] device wlan1 entered promiscuous mode [ 735.241126][T16264] team0: Port device wlan1 added [ 735.652494][T16280] netlink: 'syz.1.4727': attribute type 10 has an invalid length. [ 735.691911][T16280] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4727'. [ 735.711162][T16280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.725383][T16280] bridge0: port 3(bond0) entered blocking state [ 735.732393][T16280] bridge0: port 3(bond0) entered disabled state [ 736.044997][T16293] netlink: 'syz.1.4742': attribute type 10 has an invalid length. [ 736.053487][T16293] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4742'. [ 736.086180][T16293] bridge0: port 3(bond0) entered blocking state [ 736.103633][T16293] bridge0: port 3(bond0) entered disabled state [ 736.169535][T16297] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4732'. [ 736.199352][T16297] netlink: 'syz.0.4732': attribute type 29 has an invalid length. [ 736.209798][T16297] netlink: 'syz.0.4732': attribute type 29 has an invalid length. [ 736.225000][T16297] netlink: 'syz.0.4732': attribute type 29 has an invalid length. [ 736.252766][T16297] netlink: 'syz.0.4732': attribute type 29 has an invalid length. [ 737.196059][T16330] netlink: 'syz.3.4748': attribute type 10 has an invalid length. [ 737.206994][T16330] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4748'. [ 737.586709][T16344] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4749'. [ 737.678726][T16344] netlink: 'syz.2.4749': attribute type 29 has an invalid length. [ 737.698081][T16344] netlink: 'syz.2.4749': attribute type 29 has an invalid length. [ 737.731907][T16350] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4756'. [ 738.413520][T16376] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.4766'. [ 738.435982][T16376] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.4766'. [ 738.463027][T16376] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4766'. [ 738.614375][T16380] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.4767'. [ 743.465620][T16464] validate_nla: 10 callbacks suppressed [ 743.465655][T16464] netlink: 'syz.4.4803': attribute type 10 has an invalid length. [ 743.538312][T16466] __nla_validate_parse: 2 callbacks suppressed [ 743.538348][T16466] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.4805'. [ 743.573204][T16464] bond0: (slave wlan1): Releasing backup interface [ 743.631126][T16464] device wlan1 left promiscuous mode [ 743.691024][T16464] team0: Port device wlan1 added [ 744.402064][T16499] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.4815'. [ 744.422644][T16499] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.4815'. [ 744.433431][T16499] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4815'. [ 744.699212][T16515] netlink: 'syz.3.4823': attribute type 10 has an invalid length. [ 744.753761][T16515] device wlan1 entered promiscuous mode [ 744.772599][T16515] team0: Port device wlan1 added [ 745.284012][T16536] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.4833'. [ 745.873224][T16558] netlink: 'syz.0.4842': attribute type 10 has an invalid length. [ 746.534429][T16588] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.4856'. [ 747.163247][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.169718][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.629180][T16672] ªªªªªª: renamed from vlan0 [ 751.325790][T16701] delete_channel: no stack [ 751.347013][T16709] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4906'. [ 751.415607][T16709] device hsr_slave_0 left promiscuous mode [ 751.437682][T16709] device hsr_slave_1 left promiscuous mode [ 751.535246][ T4283] Bluetooth: hci2: unexpected event 0x17 length: 151 > 6 [ 762.041304][T16803] netlink: 'syz.3.4945': attribute type 39 has an invalid length. [ 762.089268][T16803] device veth0_macvtap left promiscuous mode [ 762.247156][T16810] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4946'. [ 763.313211][T16843] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4959'. [ 766.034869][T16843] device hsr_slave_0 left promiscuous mode [ 766.061719][T16843] device hsr_slave_1 left promiscuous mode [ 766.868956][T16863] netlink: 'syz.2.4965': attribute type 13 has an invalid length. [ 766.876985][T16863] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4965'. [ 767.029913][ T4283] Bluetooth: hci4: unexpected event 0x17 length: 151 > 6 [ 767.919794][T16902] device aaaaaaaaaaaaaaa entered promiscuous mode [ 767.969748][T16903] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4978'. [ 770.594167][T16903] device hsr_slave_0 left promiscuous mode [ 770.639605][T16903] device hsr_slave_1 left promiscuous mode [ 771.284387][T16922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 771.311609][T16922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 771.331593][T16922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 771.355276][T16922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 771.363561][T16922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 771.374108][T16922] Dead loop on virtual device ip6_vti0, fix it urgently! [ 775.141681][T16949] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.4993'. [ 775.517663][T16968] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5000'. [ 775.600311][T16972] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.5001'. [ 775.622917][T16970] ªªªªªª: renamed from vlan0 [ 775.686065][T16968] device aaaaaaaaaaaaaaa entered promiscuous mode [ 776.351459][T17001] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.5012'. [ 776.652389][T17008] netlink: 'syz.4.5013': attribute type 39 has an invalid length. [ 779.142834][T17008] device veth0_macvtap left promiscuous mode [ 779.329009][T17013] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5017'. [ 779.579308][T17022] device aaaaaaaaaaaaaaa entered promiscuous mode [ 780.105795][T17045] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.5026'. [ 784.538428][T17082] netlink: 'syz.2.5042': attribute type 39 has an invalid length. [ 784.572620][T17085] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.5041'. [ 785.073162][T17105] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5047'. [ 785.089445][T17102] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.5048'. [ 785.099025][T17105] device hsr_slave_0 left promiscuous mode [ 785.106217][T17105] device hsr_slave_1 left promiscuous mode [ 785.975041][T17136] netlink: 'syz.1.5060': attribute type 39 has an invalid length. [ 786.100530][T17142] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.5061'. [ 787.090513][T17184] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.5077'. [ 787.242427][T17188] netlink: 'syz.4.5079': attribute type 39 has an invalid length. [ 788.285821][T17228] netlink: 'syz.3.5096': attribute type 39 has an invalid length. [ 788.579750][T17235] netlink: 'syz.0.5098': attribute type 39 has an invalid length. [ 788.625511][T17235] device veth1_vlan left promiscuous mode [ 789.383602][T17267] netlink: 'syz.2.5112': attribute type 39 has an invalid length. [ 789.416829][T17267] device veth0_macvtap left promiscuous mode [ 789.609102][T17275] sock: sock_timestamping_bind_phc: sock not bind to device [ 790.581588][T17289] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5124'. [ 790.601522][T17289] openvswitch: netlink: Message has 6 unknown bytes. [ 791.027888][T17310] sock: sock_timestamping_bind_phc: sock not bind to device [ 791.780059][T17339] netlink: 'syz.2.5143': attribute type 10 has an invalid length. [ 791.788634][T17339] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.796043][T17339] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.900036][T17343] netlink: 'syz.1.5145': attribute type 10 has an invalid length. [ 794.537314][T17373] netlink: 'syz.2.5156': attribute type 1 has an invalid length. [ 794.571475][T17373] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.5156'. [ 794.681713][T17374] tap0: tun_chr_ioctl cmd 1074025675 [ 794.714387][T17374] tap0: persist enabled [ 794.718962][T17379] netlink: 'syz.4.5160': attribute type 39 has an invalid length. [ 794.912411][T17374] tap0: tun_chr_ioctl cmd 1074025675 [ 794.918477][T17374] tap0: persist disabled [ 794.934598][T17389] netlink: 'syz.3.5162': attribute type 10 has an invalid length. [ 795.129400][T17395] netlink: 'syz.4.5164': attribute type 10 has an invalid length. [ 795.189663][T17395] team0: Port device netdevsim0 removed [ 795.222282][T17395] device netdevsim0 entered promiscuous mode [ 795.239652][T17395] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 795.312181][T17406] netlink: 'syz.3.5168': attribute type 10 has an invalid length. [ 795.976995][T17427] netlink: 'syz.2.5175': attribute type 25 has an invalid length. [ 796.663116][T17433] netlink: 'syz.4.5177': attribute type 10 has an invalid length. [ 796.780860][T17440] netlink: 'syz.3.5178': attribute type 21 has an invalid length. [ 796.795138][T17440] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5178'. [ 796.808798][T17440] netlink: 'syz.3.5178': attribute type 5 has an invalid length. [ 796.818537][T17440] netlink: 'syz.3.5178': attribute type 6 has an invalid length. [ 796.830137][T17440] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5178'. [ 796.842842][T17437] netlink: 'syz.2.5176': attribute type 39 has an invalid length. [ 797.211888][T17449] netlink: 'syz.3.5181': attribute type 10 has an invalid length. [ 797.253806][T17449] device netdevsim0 left promiscuous mode [ 797.273066][T17449] team0: Port device netdevsim0 removed [ 797.292401][T17449] device netdevsim0 entered promiscuous mode [ 797.302344][T17449] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 798.965251][T17502] netlink: 'syz.1.5203': attribute type 10 has an invalid length. [ 799.243973][T17513] netlink: 'syz.2.5208': attribute type 10 has an invalid length. [ 799.272365][T17511] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5206'. [ 799.315001][T17511] openvswitch: netlink: Message has 6 unknown bytes. [ 799.983072][T17531] netlink: 'syz.1.5215': attribute type 1 has an invalid length. [ 799.993708][T17531] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.5215'. [ 802.838916][T17543] netlink: 'syz.2.5226': attribute type 21 has an invalid length. [ 802.856017][T17543] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5226'. [ 802.898185][T17543] netlink: 'syz.2.5226': attribute type 5 has an invalid length. [ 803.044296][T17543] netlink: 'syz.2.5226': attribute type 6 has an invalid length. [ 803.138011][T17543] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5226'. [ 808.497399][T17591] netlink: 'syz.3.5230': attribute type 1 has an invalid length. [ 808.515753][T17591] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.5230'. [ 808.607788][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.614307][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.637747][T17601] netlink: 'syz.2.5248': attribute type 10 has an invalid length. [ 811.656861][T17606] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5233'. [ 811.663989][T17601] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5248'. [ 811.675242][T17606] openvswitch: netlink: Message has 6 unknown bytes. [ 811.702087][T17601] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.675618][T17601] bond0: (slave team0): Releasing backup interface [ 814.798533][T17601] bridge0: port 3(team0) entered blocking state [ 814.823704][T17601] bridge0: port 3(team0) entered disabled state [ 814.839244][T17608] netlink: 'syz.0.5236': attribute type 10 has an invalid length. [ 815.096725][T17629] netlink: 'syz.1.5240': attribute type 21 has an invalid length. [ 815.105287][T17629] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5240'. [ 815.116036][T17629] netlink: 'syz.1.5240': attribute type 5 has an invalid length. [ 815.124797][T17629] netlink: 'syz.1.5240': attribute type 6 has an invalid length. [ 815.132828][T17629] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5240'. [ 815.476273][T17642] netlink: 'syz.4.5250': attribute type 1 has an invalid length. [ 815.495766][T17642] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.5250'. [ 815.532536][T17644] netlink: 'syz.1.5251': attribute type 25 has an invalid length. [ 815.568828][T17647] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5252'. [ 815.586022][T17647] openvswitch: netlink: Message has 6 unknown bytes. [ 816.568916][T17660] netlink: 'syz.1.5258': attribute type 10 has an invalid length. [ 816.591135][T17660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5258'. [ 816.641978][T17660] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.772678][T17660] bond0: (slave team0): Releasing backup interface [ 818.879524][T17660] bridge0: port 3(team0) entered blocking state [ 818.908554][T17660] bridge0: port 3(team0) entered disabled state [ 819.176581][T17669] netlink: 'syz.4.5273': attribute type 10 has an invalid length. [ 819.185526][T17669] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5273'. [ 819.197262][T17669] device team0 entered promiscuous mode [ 819.203011][T17669] device team_slave_1 entered promiscuous mode [ 819.211491][T17669] device macvlan1 entered promiscuous mode [ 819.219974][T17669] device wlan1 entered promiscuous mode [ 819.237896][T17669] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 821.561333][T17684] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5265'. [ 821.588110][T17684] openvswitch: netlink: Message has 6 unknown bytes. [ 822.132715][T17701] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 822.140573][T17701] #PF: supervisor instruction fetch in kernel mode [ 822.147086][T17701] #PF: error_code(0x0010) - not-present page [ 822.153086][T17701] PGD 40a5b067 P4D 40a5b067 PUD 0 [ 822.158239][T17701] Oops: 0010 [#1] PREEMPT SMP KASAN [ 822.163447][T17701] CPU: 1 PID: 17701 Comm: syz.3.5275 Not tainted syzkaller #0 [ 822.170917][T17701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 822.180998][T17701] RIP: 0010:0x0 [ 822.184475][T17701] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 822.191842][T17701] RSP: 0018:ffffc90003e1f458 EFLAGS: 00010246 [ 822.197926][T17701] RAX: 1ffffffff1657f43 RBX: 1ffff920007c3e9c RCX: 0000000000000001 [ 822.205902][T17701] RDX: ffffc90003e1f500 RSI: 0000000000000001 RDI: ffff888025694000 [ 822.213854][T17701] RBP: ffffc90003e1f570 R08: ffff88802569403f R09: 1ffff11004ad2807 [ 822.221824][T17701] R10: dffffc0000000000 R11: ffffed1004ad2808 R12: ffffe8ffffd44868 [ 822.229817][T17701] R13: ffffffff8b2bfa18 R14: 0000000000000000 R15: ffff888025694000 [ 822.237840][T17701] FS: 00007f661b5b56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 822.246795][T17701] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.253395][T17701] CR2: ffffffffffffffd6 CR3: 0000000027b6f000 CR4: 00000000003506e0 [ 822.261827][T17701] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 822.269903][T17701] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 822.277903][T17701] Call Trace: [ 822.281203][T17701] [ 822.284145][T17701] bond_xdp_xmit+0x31e/0x550 [ 822.288763][T17701] ? bond_xdp_xmit+0x94/0x550 [ 822.293461][T17701] ? bond_xdp+0x850/0x850 [ 822.297795][T17701] ? __next_zones_zonelist+0x99/0x120 [ 822.303180][T17701] bq_xmit_all+0xd3f/0x11b0 [ 822.307696][T17701] ? irqentry_enter+0x33/0x50 [ 822.312374][T17701] ? zone_statistics+0x170/0x170 [ 822.317316][T17701] ? lock_chain_count+0x20/0x20 [ 822.322169][T17701] ? __dev_flush+0x1b0/0x1b0 [ 822.326760][T17701] ? __alloc_pages_bulk+0x49a/0x920 [ 822.331957][T17701] ? xdp_test_run_init_page+0x33b/0x440 [ 822.337502][T17701] ? memcpy+0x3c/0x60 [ 822.341479][T17701] ? rcu_is_watching+0x11/0xa0 [ 822.346246][T17701] ? bq_enqueue+0x2ee/0x3d0 [ 822.350779][T17701] ? rcu_is_watching+0x11/0xa0 [ 822.355545][T17701] ? trace_xdp_redirect+0xb3/0x2b0 [ 822.360661][T17701] __dev_flush+0xbf/0x1b0 [ 822.364996][T17701] xdp_do_flush+0xa/0x20 [ 822.369228][T17701] bpf_test_run_xdp_live+0x1545/0x1a90 [ 822.374678][T17701] ? 0xffffffffa00041c0 [ 822.378826][T17701] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 822.384366][T17701] ? xdp_convert_md_to_buff+0x330/0x330 [ 822.389922][T17701] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 822.396157][T17701] ? copy_user_enhanced_fast_string+0xa/0x40 [ 822.402138][T17701] ? bpf_test_init+0x119/0x140 [ 822.406895][T17701] ? xdp_convert_md_to_buff+0x5b/0x330 [ 822.412349][T17701] bpf_prog_test_run_xdp+0x736/0xf10 [ 822.417636][T17701] ? dev_put+0x80/0x80 [ 822.421706][T17701] ? dev_put+0x80/0x80 [ 822.425805][T17701] bpf_prog_test_run+0x31e/0x390 [ 822.430844][T17701] __sys_bpf+0x62b/0x780 [ 822.435095][T17701] ? bpf_link_show_fdinfo+0x380/0x380 [ 822.440476][T17701] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 822.446639][T17701] __x64_sys_bpf+0x78/0x90 [ 822.451051][T17701] do_syscall_64+0x4c/0xa0 [ 822.455463][T17701] ? clear_bhb_loop+0x60/0xb0 [ 822.460132][T17701] ? clear_bhb_loop+0x60/0xb0 [ 822.464805][T17701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 822.470690][T17701] RIP: 0033:0x7f661a79aeb9 [ 822.475098][T17701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.494776][T17701] RSP: 002b:00007f661b5b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 822.503187][T17701] RAX: ffffffffffffffda RBX: 00007f661aa15fa0 RCX: 00007f661a79aeb9 [ 822.511153][T17701] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 822.519134][T17701] RBP: 00007f661a808c1f R08: 0000000000000000 R09: 0000000000000000 [ 822.527110][T17701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.535083][T17701] R13: 00007f661aa16038 R14: 00007f661aa15fa0 R15: 00007ffe1e0bd2d8 [ 822.543059][T17701] [ 822.546077][T17701] Modules linked in: [ 822.549977][T17701] CR2: 0000000000000000 [ 822.554128][T17701] ---[ end trace 0000000000000000 ]--- [ 822.559584][T17701] RIP: 0010:0x0 [ 822.563045][T17701] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 822.570396][T17701] RSP: 0018:ffffc90003e1f458 EFLAGS: 00010246 [ 822.576456][T17701] RAX: 1ffffffff1657f43 RBX: 1ffff920007c3e9c RCX: 0000000000000001 [ 822.584424][T17701] RDX: ffffc90003e1f500 RSI: 0000000000000001 RDI: ffff888025694000 [ 822.592387][T17701] RBP: ffffc90003e1f570 R08: ffff88802569403f R09: 1ffff11004ad2807 [ 822.600354][T17701] R10: dffffc0000000000 R11: ffffed1004ad2808 R12: ffffe8ffffd44868 [ 822.608318][T17701] R13: ffffffff8b2bfa18 R14: 0000000000000000 R15: ffff888025694000 [ 822.616369][T17701] FS: 00007f661b5b56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 822.625379][T17701] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.631953][T17701] CR2: ffffffffffffffd6 CR3: 0000000027b6f000 CR4: 00000000003506e0 [ 822.639923][T17701] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 822.647891][T17701] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 822.655921][T17701] Kernel panic - not syncing: Fatal exception in interrupt [ 822.663435][T17701] Kernel Offset: disabled [ 822.667787][T17701] Rebooting in 86400 seconds..