last executing test programs: 41m15.583142884s ago: executing program 32 (id=923): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f00000001c0), 0x0}, 0x20) 41m15.338560549s ago: executing program 33 (id=927): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x6a203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 40m15.879844115s ago: executing program 1 (id=1264): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 40m15.362956765s ago: executing program 1 (id=1274): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 40m15.062726891s ago: executing program 0 (id=1277): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) 40m14.892998904s ago: executing program 1 (id=1280): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xead3086ce9776e26}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000)=r3, 0x8) 40m13.58486447s ago: executing program 0 (id=1281): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x4) 40m13.212304847s ago: executing program 1 (id=1295): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)='.', 0x1}], 0x1}, 0x20000010) 40m12.977290272s ago: executing program 1 (id=1286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) 40m12.946919343s ago: executing program 0 (id=1287): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000300)=r2, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394", 0xf}], 0x1}, 0x0) 40m12.346825004s ago: executing program 34 (id=1288): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe8000000000000000000000000000aafe80000000000002"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 39m52.104064858s ago: executing program 0 (id=1302): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 39m51.740223555s ago: executing program 0 (id=1326): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3c, &(0x7f0000000500)=r0, 0x4) 39m50.923091371s ago: executing program 35 (id=1329): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x300}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 39m50.737246104s ago: executing program 36 (id=1332): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x11, 0x0, 0x0) 39m50.709164035s ago: executing program 1 (id=1303): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 39m50.207259675s ago: executing program 37 (id=1303): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 39m49.97063489s ago: executing program 0 (id=1334): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 39m49.585878037s ago: executing program 38 (id=1334): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 29m31.580483752s ago: executing program 9 (id=4931): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x689, 0x6}, 0x80, &(0x7f0000000640)=[{0x0}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1546], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 29m31.559621391s ago: executing program 3 (id=4932): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) r2 = socket$kcm(0x1e, 0x4, 0x0) close(r0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) 29m31.325682166s ago: executing program 3 (id=4935): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="97", 0x1}, {&(0x7f0000001080)="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", 0x4e4}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 29m31.267735048s ago: executing program 9 (id=4936): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000c80)='B', 0x1}], 0x1}, 0x810) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="c6", 0x1}], 0x1}, 0x20008840) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 29m31.10639476s ago: executing program 3 (id=4938): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x106, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0}, 0xa404, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 29m31.039737382s ago: executing program 9 (id=4939): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 29m30.779589647s ago: executing program 3 (id=4944): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r3}, 0x38) 29m30.779228877s ago: executing program 9 (id=4945): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x0, {0xa, 0x4e23, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x97}}}, 0x62, 0x0, 0x0, 0x0, 0x5c8}, 0x2000f765) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x21, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 29m29.720496007s ago: executing program 9 (id=4950): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, 0x0, 0x102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r2) 29m29.646401479s ago: executing program 3 (id=4951): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89ef, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7a, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c}, 0x3f) 29m29.295660406s ago: executing program 3 (id=4956): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 29m28.827835575s ago: executing program 39 (id=4956): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 29m28.817471645s ago: executing program 9 (id=4961): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 29m28.624230409s ago: executing program 40 (id=4961): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 25m14.341646956s ago: executing program 4 (id=6405): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 25m13.332174956s ago: executing program 4 (id=6418): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) 25m12.991115833s ago: executing program 4 (id=6409): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x810, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="2e000000110081880466cdecdb4cb9cca7480ef421000000e3bd6efb440013030e0013000d000008ba8000001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="2e00000010008188040f46ecdb4cb9cca7", 0x11}], 0x1}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x0, 0x0}) 25m9.248505205s ago: executing program 4 (id=6413): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r1) 25m8.99073992s ago: executing program 4 (id=6420): socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0xfffffffe, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x21, 0x1000, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 25m8.751729345s ago: executing program 4 (id=6423): r0 = socket$kcm(0x2, 0x1, 0x84) close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x1000, 0x3, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x14) 25m8.377759513s ago: executing program 41 (id=6423): r0 = socket$kcm(0x2, 0x1, 0x84) close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x1000, 0x3, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x14) 2.093754019s ago: executing program 6 (id=14678): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe0000"], 0xfe33) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40880) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r1) 1.743658135s ago: executing program 6 (id=14682): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100808, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d50a0000000000006111780000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x8000, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, 0x0, 0x40010080) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='@/]f&\x00') 1.677817107s ago: executing program 7 (id=14683): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r10, 0x4) 1.580078748s ago: executing program 8 (id=14685): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000004"], 0x50) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) close(r2) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70c03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x200}, 0x0, 0xd, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r1) 1.575273059s ago: executing program 2 (id=14686): bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000002) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:* mw'], 0x9) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 1.526977169s ago: executing program 6 (id=14687): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000300)='cpu\t&0&&\t') r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 1.476726401s ago: executing program 7 (id=14688): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r10, 0x4) 1.367000653s ago: executing program 8 (id=14690): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000300)='cpu\t&0&&\t') r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) close(r2) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 1.299356244s ago: executing program 6 (id=14691): bpf$PROG_BIND_MAP(0x1e, &(0x7f0000000500), 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='cachefiles_ondemand_close\x00', r2, 0x0, 0x1}, 0x18) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x7f, 0x9, 0x7, 0x0, 0x6, 0x10, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5, 0x3}, 0x80000, 0x8000000000000001, 0x800, 0x4, 0x100000001, 0x3, 0xf0, 0x0, 0x10000, 0x0, 0x3d}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b06, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 1.299157344s ago: executing program 2 (id=14692): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.240119025s ago: executing program 7 (id=14693): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe0000"], 0xfe33) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40880) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r1) 1.239575955s ago: executing program 5 (id=14694): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x108}, 0x14002) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.051497388s ago: executing program 8 (id=14695): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000}, 0x0, 0x9, 0xacd9, 0x0, 0xfffffffffff7bbfe, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x3}, 0xffffffffffffffff, 0x4000000000e, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x820}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89ee, &(0x7f0000000300)={r0}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x100190, 0xc8, 0x9, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x4, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0)=r2) 794.482173ms ago: executing program 5 (id=14696): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 703.709556ms ago: executing program 7 (id=14697): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100808, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d50a0000000000006111780000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x8000, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, 0x0, 0x40010080) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='@/]f&\x00') 668.822047ms ago: executing program 2 (id=14698): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r10, 0x4) 629.417947ms ago: executing program 8 (id=14699): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000300)='cpu\t&0&&\t') r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) close(r3) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 601.179237ms ago: executing program 5 (id=14700): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000004"], 0x50) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) close(r4) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70c03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x200}, 0x0, 0xd, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r3) 540.791529ms ago: executing program 7 (id=14701): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000300)='cpu\t&0&&\t') r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 508.801169ms ago: executing program 6 (id=14702): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000000)='./file0/../file0/../file0/file0\x00', 0x104) mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x3, 0x0, 0x0, 0xc, 0x1}]}}, 0x0, 0x26, 0x0, 0x4}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) 441.321441ms ago: executing program 2 (id=14703): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r10, 0x4) 371.032092ms ago: executing program 8 (id=14704): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000300)='cpu\t&0&&\t') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) close(r1) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 327.502553ms ago: executing program 5 (id=14705): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000300)='cpu\t&0&&\t') r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) close(r3) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 287.276744ms ago: executing program 7 (id=14706): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000031000b03d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 211.543825ms ago: executing program 2 (id=14707): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe0000"], 0xfe33) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40880) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r1) 190.863665ms ago: executing program 8 (id=14708): socket$kcm(0x2, 0x200000000000001, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100808, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 187.849686ms ago: executing program 6 (id=14709): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000}, 0x0, 0x9, 0xacd9, 0x0, 0xfffffffffff7bbfe, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x3}, 0xffffffffffffffff, 0x4000000000e, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x820}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89ee, &(0x7f0000000300)={r0}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x100190, 0xc8, 0x9, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x4, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0)=r2) 164.845896ms ago: executing program 5 (id=14710): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 79.728328ms ago: executing program 2 (id=14711): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100808, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r1, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d50a0000000000006111780000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x8000, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r3, 0x0, 0x40010080) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='@/]f&\x00') 0s ago: executing program 5 (id=14712): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x20, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0xd}}]}}, &(0x7f0000001dc0)=""/219, 0x32, 0xdb, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.stat\x00', 0x26e1, 0x0) close(r2) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b30, &(0x7f0000000080)={'wlan1\x00', @broadcast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x50) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 00 [ 2156.205153][ T2330] R13: 00007fb39d1c6038 R14: 00007fb39d1c5fa0 R15: 00007ffc2ee44bd8 [ 2156.213226][ T2330] [ 2156.531674][ T2348] netlink: 'syz.6.11593': attribute type 21 has an invalid length. [ 2156.552693][ T2348] netlink: 'syz.6.11593': attribute type 6 has an invalid length. [ 2156.570648][ T2348] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11593'. [ 2158.533630][ T2398] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.11607'. [ 2158.643781][ T2398] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2158.674986][ T2398] CPU: 1 PID: 2398 Comm: syz.6.11607 Not tainted syzkaller #0 [ 2158.682538][ T2398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2158.692653][ T2398] Call Trace: [ 2158.695969][ T2398] [ 2158.698986][ T2398] dump_stack_lvl+0x168/0x22e [ 2158.703717][ T2398] ? show_regs_print_info+0x12/0x12 [ 2158.708967][ T2398] ? load_image+0x3b0/0x3b0 [ 2158.713565][ T2398] sysfs_warn_dup+0x8a/0xa0 [ 2158.718121][ T2398] sysfs_do_create_link_sd+0xc0/0x110 [ 2158.723562][ T2398] device_add+0x7ed/0xfb0 [ 2158.727954][ T2398] wiphy_register+0x1e68/0x2bd0 [ 2158.732883][ T2398] ? cfg80211_event_work+0x40/0x40 [ 2158.738147][ T2398] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2158.744369][ T2398] ? ieee80211_register_hw+0x27eb/0x38c0 [ 2158.750068][ T2398] ieee80211_register_hw+0x2c29/0x38c0 [ 2158.755766][ T2398] ? ieee80211_register_hw+0xec1/0x38c0 [ 2158.761364][ T2398] ? ieee80211_register_hw+0xec1/0x38c0 [ 2158.766975][ T2398] ? ieee80211_tasklet_handler+0x20/0x20 [ 2158.772675][ T2398] ? memset+0x1e/0x40 [ 2158.776723][ T2398] ? __hrtimer_init+0x186/0x270 [ 2158.781624][ T2398] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2158.787434][ T2398] hwsim_new_radio_nl+0xafa/0xce0 [ 2158.792539][ T2398] genl_family_rcv_msg_doit+0x22e/0x320 [ 2158.798140][ T2398] ? end_current_label_crit_section+0x170/0x170 [ 2158.804443][ T2398] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 2158.810497][ T2398] ? lockdep_hardirqs_on+0x94/0x140 [ 2158.815851][ T2398] ? bpf_lsm_capable+0x5/0x10 [ 2158.820658][ T2398] ? security_capable+0x85/0xb0 [ 2158.825569][ T2398] genl_rcv_msg+0x5f2/0x780 [ 2158.830129][ T2398] ? genl_bind+0x350/0x350 [ 2158.834588][ T2398] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 2158.840973][ T2398] ? lock_acquire+0x20f/0x490 [ 2158.845708][ T2398] netlink_rcv_skb+0x1de/0x420 [ 2158.850510][ T2398] ? genl_bind+0x350/0x350 [ 2158.854973][ T2398] ? netlink_ack+0x1100/0x1100 [ 2158.859802][ T2398] ? down_read+0x1a8/0x2d0 [ 2158.864286][ T2398] genl_rcv+0x24/0x40 [ 2158.868312][ T2398] netlink_unicast+0x74d/0x8d0 [ 2158.873126][ T2398] netlink_sendmsg+0x89e/0xbc0 [ 2158.877945][ T2398] ? netlink_getsockopt+0x540/0x540 [ 2158.883183][ T2398] ? aa_sock_msg_perm+0x94/0x150 [ 2158.888175][ T2398] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2158.893499][ T2398] ? security_socket_sendmsg+0x7c/0xa0 [ 2158.899008][ T2398] ? netlink_getsockopt+0x540/0x540 [ 2158.904288][ T2398] ____sys_sendmsg+0x59b/0x970 [ 2158.909118][ T2398] ? __sys_sendmsg_sock+0x30/0x30 [ 2158.914372][ T2398] ? __import_iovec+0x315/0x500 [ 2158.919304][ T2398] ? import_iovec+0x6f/0xa0 [ 2158.923869][ T2398] ___sys_sendmsg+0x21c/0x290 [ 2158.928596][ T2398] ? __sys_sendmsg+0x270/0x270 [ 2158.933429][ T2398] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2158.939225][ T2398] ? __fdget+0x17c/0x200 [ 2158.943526][ T2398] __se_sys_sendmsg+0x19e/0x270 [ 2158.948439][ T2398] ? __x64_sys_sendmsg+0x80/0x80 [ 2158.953479][ T2398] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2158.959441][ T2398] do_syscall_64+0x4c/0xa0 [ 2158.963907][ T2398] ? clear_bhb_loop+0x60/0xb0 [ 2158.968615][ T2398] ? clear_bhb_loop+0x60/0xb0 [ 2158.973330][ T2398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2158.979271][ T2398] RIP: 0033:0x7ff3af18ebe9 [ 2158.983720][ T2398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2159.003507][ T2398] RSP: 002b:00007ff3affad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2159.012141][ T2398] RAX: ffffffffffffffda RBX: 00007ff3af3c5fa0 RCX: 00007ff3af18ebe9 [ 2159.020238][ T2398] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2159.028242][ T2398] RBP: 00007ff3af211e19 R08: 0000000000000000 R09: 0000000000000000 [ 2159.036241][ T2398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2159.044343][ T2398] R13: 00007ff3af3c6038 R14: 00007ff3af3c5fa0 R15: 00007ffce3952a88 [ 2159.052472][ T2398] [ 2159.114250][ T2402] netlink: 'syz.2.11608': attribute type 21 has an invalid length. [ 2159.168285][ T2402] netlink: 'syz.2.11608': attribute type 6 has an invalid length. [ 2159.205228][ T2402] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11608'. [ 2159.623161][ T2422] netlink: 122896 bytes leftover after parsing attributes in process `syz.7.11622'. [ 2159.638139][ T2420] netlink: 'syz.5.11613': attribute type 39 has an invalid length. [ 2159.670685][ T2423] netlink: 'syz.8.11612': attribute type 29 has an invalid length. [ 2159.727258][ T2420] device veth0_macvtap left promiscuous mode [ 2159.953065][ T2423] netlink: 'syz.8.11612': attribute type 29 has an invalid length. [ 2159.968025][ T2431] netlink: 'syz.8.11612': attribute type 29 has an invalid length. [ 2159.982417][ T2422] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2159.991238][ T2422] CPU: 1 PID: 2422 Comm: syz.7.11622 Not tainted syzkaller #0 [ 2159.998925][ T2422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2160.009196][ T2422] Call Trace: [ 2160.012670][ T2422] [ 2160.015613][ T2422] dump_stack_lvl+0x168/0x22e [ 2160.020328][ T2422] ? show_regs_print_info+0x12/0x12 [ 2160.025555][ T2422] ? load_image+0x3b0/0x3b0 [ 2160.030131][ T2422] sysfs_warn_dup+0x8a/0xa0 [ 2160.034664][ T2422] sysfs_do_create_link_sd+0xc0/0x110 [ 2160.040062][ T2422] device_add+0x7ed/0xfb0 [ 2160.044419][ T2422] wiphy_register+0x1e68/0x2bd0 [ 2160.049397][ T2422] ? cfg80211_event_work+0x40/0x40 [ 2160.054525][ T2422] ? minstrel_ht_alloc+0x894/0xa20 [ 2160.059757][ T2422] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2160.065849][ T2422] ieee80211_register_hw+0x2c29/0x38c0 [ 2160.071350][ T2422] ? ieee80211_register_hw+0xec1/0x38c0 [ 2160.076931][ T2422] ? ieee80211_register_hw+0xec1/0x38c0 [ 2160.082543][ T2422] ? ieee80211_tasklet_handler+0x20/0x20 [ 2160.088213][ T2422] ? memset+0x1e/0x40 [ 2160.092222][ T2422] ? __hrtimer_init+0x186/0x270 [ 2160.097106][ T2422] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2160.103046][ T2422] hwsim_new_radio_nl+0xafa/0xce0 [ 2160.108146][ T2422] genl_family_rcv_msg_doit+0x22e/0x320 [ 2160.113714][ T2422] ? end_current_label_crit_section+0x170/0x170 [ 2160.119984][ T2422] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 2160.125922][ T2422] ? bpf_lsm_capable+0x5/0x10 [ 2160.130620][ T2422] ? security_capable+0x85/0xb0 [ 2160.135493][ T2422] genl_rcv_msg+0x5f2/0x780 [ 2160.140020][ T2422] ? __kasan_check_write+0x2/0x10 [ 2160.145163][ T2422] ? genl_bind+0x350/0x350 [ 2160.149598][ T2422] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 2160.155994][ T2422] netlink_rcv_skb+0x1de/0x420 [ 2160.160779][ T2422] ? genl_bind+0x350/0x350 [ 2160.165219][ T2422] ? netlink_ack+0x1100/0x1100 [ 2160.170012][ T2422] ? down_read+0x1a8/0x2d0 [ 2160.174456][ T2422] genl_rcv+0x24/0x40 [ 2160.178464][ T2422] netlink_unicast+0x74d/0x8d0 [ 2160.183252][ T2422] netlink_sendmsg+0x89e/0xbc0 [ 2160.188041][ T2422] ? netlink_getsockopt+0x540/0x540 [ 2160.193278][ T2422] ? aa_sock_msg_perm+0x94/0x150 [ 2160.198245][ T2422] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2160.203562][ T2422] ? security_socket_sendmsg+0x7c/0xa0 [ 2160.209136][ T2422] ? netlink_getsockopt+0x540/0x540 [ 2160.214372][ T2422] ____sys_sendmsg+0x59b/0x970 [ 2160.219166][ T2422] ? __sys_sendmsg_sock+0x30/0x30 [ 2160.224293][ T2422] ? __import_iovec+0x315/0x500 [ 2160.229272][ T2422] ? import_iovec+0x6f/0xa0 [ 2160.233825][ T2422] ___sys_sendmsg+0x21c/0x290 [ 2160.238531][ T2422] ? __sys_sendmsg+0x270/0x270 [ 2160.243330][ T2422] ? ktime_get_real_ts64+0x420/0x420 [ 2160.248651][ T2422] ? __fdget+0x17c/0x200 [ 2160.252924][ T2422] __se_sys_sendmsg+0x19e/0x270 [ 2160.257803][ T2422] ? perf_trace_preemptirq_template+0x287/0x330 [ 2160.264152][ T2422] ? __x64_sys_sendmsg+0x80/0x80 [ 2160.269120][ T2422] ? lockdep_hardirqs_on+0x94/0x140 [ 2160.274431][ T2422] do_syscall_64+0x4c/0xa0 [ 2160.278857][ T2422] ? clear_bhb_loop+0x60/0xb0 [ 2160.283546][ T2422] ? clear_bhb_loop+0x60/0xb0 [ 2160.288236][ T2422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2160.294158][ T2422] RIP: 0033:0x7fc81f58ebe9 [ 2160.298589][ T2422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2160.318219][ T2422] RSP: 002b:00007fc82045c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2160.326659][ T2422] RAX: ffffffffffffffda RBX: 00007fc81f7c5fa0 RCX: 00007fc81f58ebe9 [ 2160.334655][ T2422] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2160.342643][ T2422] RBP: 00007fc81f611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2160.350627][ T2422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2160.358607][ T2422] R13: 00007fc81f7c6038 R14: 00007fc81f7c5fa0 R15: 00007fffa343ed88 [ 2160.366782][ T2422] [ 2160.430223][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.436707][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.007677][ T2452] netlink: 'syz.7.11632': attribute type 39 has an invalid length. [ 2161.049413][ T2455] netlink: 'syz.5.11623': attribute type 21 has an invalid length. [ 2161.086870][ T2455] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11623'. [ 2162.282950][ T2482] validate_nla: 1 callbacks suppressed [ 2162.282986][ T2482] netlink: 'syz.7.11629': attribute type 29 has an invalid length. [ 2162.331056][ T2482] netlink: 'syz.7.11629': attribute type 29 has an invalid length. [ 2162.353596][ T2487] netlink: 'syz.7.11629': attribute type 29 has an invalid length. [ 2162.907140][ T2504] netlink: 'syz.7.11646': attribute type 29 has an invalid length. [ 2162.929902][ T2504] netlink: 'syz.7.11646': attribute type 29 has an invalid length. [ 2162.949092][ T2504] netlink: 'syz.7.11646': attribute type 29 has an invalid length. [ 2163.760307][ T2520] netlink: 'syz.2.11641': attribute type 29 has an invalid length. [ 2163.814291][ T2520] netlink: 'syz.2.11641': attribute type 29 has an invalid length. [ 2163.873216][ T2525] netlink: 'syz.2.11641': attribute type 29 has an invalid length. [ 2164.604068][ T2536] netlink: 122896 bytes leftover after parsing attributes in process `syz.8.11656'. [ 2164.734482][ T2536] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2164.795035][ T2536] CPU: 0 PID: 2536 Comm: syz.8.11656 Not tainted syzkaller #0 [ 2164.802621][ T2536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2164.812736][ T2536] Call Trace: [ 2164.816065][ T2536] [ 2164.819043][ T2536] dump_stack_lvl+0x168/0x22e [ 2164.823778][ T2536] ? show_regs_print_info+0x12/0x12 [ 2164.829037][ T2536] ? load_image+0x3b0/0x3b0 [ 2164.833620][ T2536] sysfs_warn_dup+0x8a/0xa0 [ 2164.838188][ T2536] sysfs_do_create_link_sd+0xc0/0x110 [ 2164.843628][ T2536] device_add+0x7ed/0xfb0 [ 2164.848020][ T2536] wiphy_register+0x1e68/0x2bd0 [ 2164.852950][ T2536] ? cfg80211_event_work+0x40/0x40 [ 2164.858108][ T2536] ? minstrel_ht_alloc+0x894/0xa20 [ 2164.863268][ T2536] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2164.869389][ T2536] ieee80211_register_hw+0x2c29/0x38c0 [ 2164.874917][ T2536] ? ieee80211_register_hw+0xec1/0x38c0 [ 2164.880550][ T2536] ? ieee80211_register_hw+0xec1/0x38c0 [ 2164.886162][ T2536] ? ieee80211_tasklet_handler+0x20/0x20 [ 2164.891944][ T2536] ? lockdep_hardirqs_on+0x94/0x140 [ 2164.897294][ T2536] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2164.903613][ T2536] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2164.909409][ T2536] hwsim_new_radio_nl+0xafa/0xce0 [ 2164.914590][ T2536] genl_family_rcv_msg_doit+0x22e/0x320 [ 2164.920191][ T2536] ? end_current_label_crit_section+0x170/0x170 [ 2164.926495][ T2536] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 2164.932550][ T2536] ? bpf_lsm_capable+0x5/0x10 [ 2164.937278][ T2536] ? security_capable+0x85/0xb0 [ 2164.942178][ T2536] genl_rcv_msg+0x5f2/0x780 [ 2164.946763][ T2536] ? genl_bind+0x350/0x350 [ 2164.951222][ T2536] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 2164.957644][ T2536] netlink_rcv_skb+0x1de/0x420 [ 2164.962538][ T2536] ? genl_bind+0x350/0x350 [ 2164.966996][ T2536] ? netlink_ack+0x1100/0x1100 [ 2164.971808][ T2536] ? down_read+0x1a8/0x2d0 [ 2164.976266][ T2536] genl_rcv+0x24/0x40 [ 2164.980324][ T2536] netlink_unicast+0x74d/0x8d0 [ 2164.985129][ T2536] netlink_sendmsg+0x89e/0xbc0 [ 2164.989937][ T2536] ? netlink_getsockopt+0x540/0x540 [ 2164.995210][ T2536] ? aa_sock_msg_perm+0x94/0x150 [ 2165.000202][ T2536] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2165.005523][ T2536] ? security_socket_sendmsg+0x7c/0xa0 [ 2165.011213][ T2536] ? netlink_getsockopt+0x540/0x540 [ 2165.016466][ T2536] ____sys_sendmsg+0x59b/0x970 [ 2165.021397][ T2536] ? __sys_sendmsg_sock+0x30/0x30 [ 2165.026544][ T2536] ? __import_iovec+0x315/0x500 [ 2165.031451][ T2536] ? import_iovec+0x6f/0xa0 [ 2165.036010][ T2536] ___sys_sendmsg+0x21c/0x290 [ 2165.040746][ T2536] ? __sys_sendmsg+0x270/0x270 [ 2165.045580][ T2536] ? ktime_get_real_ts64+0x420/0x420 [ 2165.050927][ T2536] ? __fdget+0x17c/0x200 [ 2165.055212][ T2536] __se_sys_sendmsg+0x19e/0x270 [ 2165.060275][ T2536] ? __x64_sys_sendmsg+0x80/0x80 [ 2165.065263][ T2536] ? lockdep_hardirqs_on+0x94/0x140 [ 2165.070499][ T2536] do_syscall_64+0x4c/0xa0 [ 2165.074947][ T2536] ? clear_bhb_loop+0x60/0xb0 [ 2165.079644][ T2536] ? clear_bhb_loop+0x60/0xb0 [ 2165.084344][ T2536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2165.090277][ T2536] RIP: 0033:0x7fb39cf8ebe9 [ 2165.094747][ T2536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2165.114477][ T2536] RSP: 002b:00007fb39dec5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2165.122942][ T2536] RAX: ffffffffffffffda RBX: 00007fb39d1c6090 RCX: 00007fb39cf8ebe9 [ 2165.130958][ T2536] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2165.138985][ T2536] RBP: 00007fb39d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 2165.146996][ T2536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2165.154994][ T2536] R13: 00007fb39d1c6128 R14: 00007fb39d1c6090 R15: 00007ffc2ee44bd8 [ 2165.163097][ T2536] [ 2165.445585][ T2544] netlink: 122896 bytes leftover after parsing attributes in process `syz.7.11644'. [ 2165.487777][ T2544] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2165.495594][ T2544] CPU: 1 PID: 2544 Comm: syz.7.11644 Not tainted syzkaller #0 [ 2165.503106][ T2544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2165.513206][ T2544] Call Trace: [ 2165.516614][ T2544] [ 2165.519598][ T2544] dump_stack_lvl+0x168/0x22e [ 2165.524503][ T2544] ? show_regs_print_info+0x12/0x12 [ 2165.529759][ T2544] ? load_image+0x3b0/0x3b0 [ 2165.534304][ T2544] sysfs_warn_dup+0x8a/0xa0 [ 2165.538832][ T2544] sysfs_do_create_link_sd+0xc0/0x110 [ 2165.544232][ T2544] device_add+0x7ed/0xfb0 [ 2165.548602][ T2544] wiphy_register+0x1e68/0x2bd0 [ 2165.553493][ T2544] ? cfg80211_event_work+0x40/0x40 [ 2165.558656][ T2544] ? minstrel_ht_alloc+0x894/0xa20 [ 2165.563796][ T2544] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2165.569901][ T2544] ieee80211_register_hw+0x2c29/0x38c0 [ 2165.575398][ T2544] ? ieee80211_register_hw+0xec1/0x38c0 [ 2165.580963][ T2544] ? ieee80211_register_hw+0xec1/0x38c0 [ 2165.586569][ T2544] ? ieee80211_tasklet_handler+0x20/0x20 [ 2165.592258][ T2544] ? memset+0x1e/0x40 [ 2165.596263][ T2544] ? __hrtimer_init+0x186/0x270 [ 2165.601137][ T2544] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2165.606909][ T2544] hwsim_new_radio_nl+0xafa/0xce0 [ 2165.611981][ T2544] genl_family_rcv_msg_doit+0x22e/0x320 [ 2165.617571][ T2544] ? end_current_label_crit_section+0x170/0x170 [ 2165.623855][ T2544] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 2165.629804][ T2544] ? bpf_lsm_capable+0x5/0x10 [ 2165.634514][ T2544] ? security_capable+0x85/0xb0 [ 2165.639489][ T2544] genl_rcv_msg+0x5f2/0x780 [ 2165.644039][ T2544] ? genl_bind+0x350/0x350 [ 2165.648480][ T2544] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 2165.654877][ T2544] netlink_rcv_skb+0x1de/0x420 [ 2165.659706][ T2544] ? genl_bind+0x350/0x350 [ 2165.664249][ T2544] ? netlink_ack+0x1100/0x1100 [ 2165.669056][ T2544] ? down_read+0x1a8/0x2d0 [ 2165.673680][ T2544] genl_rcv+0x24/0x40 [ 2165.677689][ T2544] netlink_unicast+0x74d/0x8d0 [ 2165.682491][ T2544] netlink_sendmsg+0x89e/0xbc0 [ 2165.687290][ T2544] ? netlink_getsockopt+0x540/0x540 [ 2165.692572][ T2544] ? aa_sock_msg_perm+0x94/0x150 [ 2165.697546][ T2544] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2165.702866][ T2544] ? security_socket_sendmsg+0x7c/0xa0 [ 2165.708364][ T2544] ? netlink_getsockopt+0x540/0x540 [ 2165.713870][ T2544] ____sys_sendmsg+0x59b/0x970 [ 2165.718664][ T2544] ? __sys_sendmsg_sock+0x30/0x30 [ 2165.723918][ T2544] ? __import_iovec+0x315/0x500 [ 2165.728835][ T2544] ? import_iovec+0x6f/0xa0 [ 2165.733401][ T2544] ___sys_sendmsg+0x21c/0x290 [ 2165.738114][ T2544] ? __sys_sendmsg+0x270/0x270 [ 2165.743010][ T2544] ? rcu_read_lock_any_held+0xb0/0x120 [ 2165.748516][ T2544] ? __fdget+0x17c/0x200 [ 2165.752879][ T2544] __se_sys_sendmsg+0x19e/0x270 [ 2165.757863][ T2544] ? __x64_sys_sendmsg+0x80/0x80 [ 2165.762955][ T2544] ? lockdep_hardirqs_on+0x94/0x140 [ 2165.768209][ T2544] do_syscall_64+0x4c/0xa0 [ 2165.773089][ T2544] ? clear_bhb_loop+0x60/0xb0 [ 2165.777798][ T2544] ? clear_bhb_loop+0x60/0xb0 [ 2165.782501][ T2544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2165.788455][ T2544] RIP: 0033:0x7fc81f58ebe9 [ 2165.792903][ T2544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2165.812550][ T2544] RSP: 002b:00007fc82045c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2165.820989][ T2544] RAX: ffffffffffffffda RBX: 00007fc81f7c5fa0 RCX: 00007fc81f58ebe9 [ 2165.828986][ T2544] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2165.836973][ T2544] RBP: 00007fc81f611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2165.845043][ T2544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2165.853117][ T2544] R13: 00007fc81f7c6038 R14: 00007fc81f7c5fa0 R15: 00007fffa343ed88 [ 2165.861168][ T2544] [ 2167.771197][ T2595] netlink: 'syz.5.11661': attribute type 29 has an invalid length. [ 2167.794929][ T2595] netlink: 'syz.5.11661': attribute type 29 has an invalid length. [ 2167.825060][ T2598] netlink: 'syz.5.11661': attribute type 29 has an invalid length. [ 2168.362762][ T2621] netlink: 'syz.8.11670': attribute type 10 has an invalid length. [ 2168.427924][ T2621] team0: Port device wlan1 added [ 2168.545059][ T2623] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.11669'. [ 2170.284988][ T2652] netlink: 'syz.5.11690': attribute type 29 has an invalid length. [ 2170.344299][ T2652] netlink: 'syz.5.11690': attribute type 29 has an invalid length. [ 2170.370426][ T2656] netlink: 'syz.7.11678': attribute type 29 has an invalid length. [ 2170.390272][ T2657] netlink: 'syz.5.11690': attribute type 29 has an invalid length. [ 2170.443931][ T2656] netlink: 'syz.7.11678': attribute type 29 has an invalid length. [ 2170.483546][ T2661] netlink: 'syz.7.11678': attribute type 29 has an invalid length. [ 2170.639097][ T2669] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11683'. [ 2170.907001][ T9525] wlan1: Trigger new scan to find an IBSS to join [ 2172.505705][ T2721] netlink: 152 bytes leftover after parsing attributes in process `syz.8.11699'. [ 2172.928733][ T2732] validate_nla: 9 callbacks suppressed [ 2172.928770][ T2732] netlink: 'syz.6.11700': attribute type 29 has an invalid length. [ 2172.999032][ T2732] netlink: 'syz.6.11700': attribute type 29 has an invalid length. [ 2173.373540][ T2732] netlink: 'syz.6.11700': attribute type 29 has an invalid length. [ 2173.971834][T17723] wlan1: Trigger new scan to find an IBSS to join [ 2175.719511][ T2792] netlink: 'syz.8.11726': attribute type 29 has an invalid length. [ 2175.819798][ T2790] device syzkaller0 entered promiscuous mode [ 2175.837983][ T2792] netlink: 'syz.8.11726': attribute type 29 has an invalid length. [ 2175.885290][ T2791] netlink: 'syz.8.11726': attribute type 29 has an invalid length. [ 2176.906920][T24199] wlan1: Creating new IBSS network, BSSID 16:72:d8:e2:5f:a2 [ 2181.884802][T17745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2184.724608][ T2839] netlink: 'syz.8.11733': attribute type 39 has an invalid length. [ 2184.817667][ T2839] device veth0_macvtap left promiscuous mode [ 2185.696214][ T2860] netlink: 'syz.6.11743': attribute type 29 has an invalid length. [ 2186.019472][ T2860] netlink: 'syz.6.11743': attribute type 29 has an invalid length. [ 2186.102534][ T2863] netlink: 'syz.6.11743': attribute type 29 has an invalid length. [ 2186.255495][ T2866] device syzkaller0 entered promiscuous mode [ 2186.380507][ T2870] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2186.519182][ T2870] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2186.530118][ T2870] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2186.539906][ T2870] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2186.550737][ T2870] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2186.561432][ T2870] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2186.571777][ T2870] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2186.582681][ T2870] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2186.592641][ T2870] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2186.602475][ T2870] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2191.908672][ T2884] net_ratelimit: 2295 callbacks suppressed [ 2191.908711][ T2884] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2192.073704][ T2885] netlink: 'syz.2.11755': attribute type 39 has an invalid length. [ 2192.808835][ T2903] netlink: 'syz.5.11758': attribute type 29 has an invalid length. [ 2193.063114][ T2903] netlink: 'syz.5.11758': attribute type 29 has an invalid length. [ 2193.097554][ T2891] netlink: 122896 bytes leftover after parsing attributes in process `syz.8.11757'. [ 2193.138803][ T2891] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2193.164214][ T2891] CPU: 0 PID: 2891 Comm: syz.8.11757 Not tainted syzkaller #0 [ 2193.171762][ T2891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2193.181862][ T2891] Call Trace: [ 2193.185191][ T2891] [ 2193.188167][ T2891] dump_stack_lvl+0x168/0x22e [ 2193.192901][ T2891] ? show_regs_print_info+0x12/0x12 [ 2193.198143][ T2891] ? load_image+0x3b0/0x3b0 [ 2193.202716][ T2891] sysfs_warn_dup+0x8a/0xa0 [ 2193.207278][ T2891] sysfs_do_create_link_sd+0xc0/0x110 [ 2193.212711][ T2891] device_add+0x7ed/0xfb0 [ 2193.217102][ T2891] wiphy_register+0x1e68/0x2bd0 [ 2193.222027][ T2891] ? cfg80211_event_work+0x40/0x40 [ 2193.227204][ T2891] ? minstrel_ht_alloc+0x894/0xa20 [ 2193.232385][ T2891] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2193.238538][ T2891] ieee80211_register_hw+0x2c29/0x38c0 [ 2193.244071][ T2891] ? ieee80211_register_hw+0xec1/0x38c0 [ 2193.249669][ T2891] ? ieee80211_register_hw+0xec1/0x38c0 [ 2193.255288][ T2891] ? ieee80211_tasklet_handler+0x20/0x20 [ 2193.261004][ T2891] ? memset+0x1e/0x40 [ 2193.265051][ T2891] ? __hrtimer_init+0x186/0x270 [ 2193.270014][ T2891] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2193.275844][ T2891] hwsim_new_radio_nl+0xafa/0xce0 [ 2193.280956][ T2891] genl_family_rcv_msg_doit+0x22e/0x320 [ 2193.286615][ T2891] ? end_current_label_crit_section+0x170/0x170 [ 2193.292929][ T2891] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 2193.298976][ T2891] ? bpf_lsm_capable+0x5/0x10 [ 2193.303702][ T2891] ? security_capable+0x85/0xb0 [ 2193.308620][ T2891] genl_rcv_msg+0x5f2/0x780 [ 2193.313219][ T2891] ? genl_bind+0x350/0x350 [ 2193.317702][ T2891] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 2193.324128][ T2891] netlink_rcv_skb+0x1de/0x420 [ 2193.329035][ T2891] ? genl_bind+0x350/0x350 [ 2193.333514][ T2891] ? netlink_ack+0x1100/0x1100 [ 2193.338353][ T2891] ? down_read+0x1a8/0x2d0 [ 2193.342825][ T2891] genl_rcv+0x24/0x40 [ 2193.346867][ T2891] netlink_unicast+0x74d/0x8d0 [ 2193.351697][ T2891] netlink_sendmsg+0x89e/0xbc0 [ 2193.356566][ T2891] ? netlink_getsockopt+0x540/0x540 [ 2193.361833][ T2891] ? aa_sock_msg_perm+0x94/0x150 [ 2193.366839][ T2891] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2193.372166][ T2891] ? security_socket_sendmsg+0x7c/0xa0 [ 2193.377771][ T2891] ? netlink_getsockopt+0x540/0x540 [ 2193.383126][ T2891] ____sys_sendmsg+0x59b/0x970 [ 2193.387952][ T2891] ? __sys_sendmsg_sock+0x30/0x30 [ 2193.393032][ T2891] ? __import_iovec+0x315/0x500 [ 2193.397957][ T2891] ? import_iovec+0x6f/0xa0 [ 2193.402543][ T2891] ___sys_sendmsg+0x21c/0x290 [ 2193.407341][ T2891] ? __sys_sendmsg+0x270/0x270 [ 2193.412215][ T2891] ? __fdget+0x17c/0x200 [ 2193.416524][ T2891] __se_sys_sendmsg+0x19e/0x270 [ 2193.421423][ T2891] ? ct_nmi_exit+0x145/0x1c0 [ 2193.426072][ T2891] ? __x64_sys_sendmsg+0x80/0x80 [ 2193.431192][ T2891] ? lockdep_hardirqs_on+0x94/0x140 [ 2193.436471][ T2891] do_syscall_64+0x4c/0xa0 [ 2193.440947][ T2891] ? clear_bhb_loop+0x60/0xb0 [ 2193.445668][ T2891] ? clear_bhb_loop+0x60/0xb0 [ 2193.450481][ T2891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2193.456525][ T2891] RIP: 0033:0x7fb39cf8ebe9 [ 2193.460978][ T2891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2193.480753][ T2891] RSP: 002b:00007fb39dee6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2193.489267][ T2891] RAX: ffffffffffffffda RBX: 00007fb39d1c5fa0 RCX: 00007fb39cf8ebe9 [ 2193.497310][ T2891] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2193.505341][ T2891] RBP: 00007fb39d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 2193.513449][ T2891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2193.521473][ T2891] R13: 00007fb39d1c6038 R14: 00007fb39d1c5fa0 R15: 00007ffc2ee44bd8 [ 2193.529513][ T2891] [ 2194.261235][ T2927] netlink: 'syz.8.11770': attribute type 39 has an invalid length. [ 2194.788784][ T2932] device syzkaller0 entered promiscuous mode [ 2195.253658][ T2942] netlink: 'syz.7.11774': attribute type 29 has an invalid length. [ 2197.909673][ T2940] device syzkaller0 entered promiscuous mode [ 2197.917087][ T2942] netlink: 'syz.7.11774': attribute type 29 has an invalid length. [ 2199.459416][T31626] Bluetooth: hci4: unexpected event 0x35 length: 82 > 6 [ 2200.971179][ T2971] netlink: 'syz.7.11785': attribute type 39 has an invalid length. [ 2201.667583][ T2983] device syzkaller0 entered promiscuous mode [ 2205.036356][T17723] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2205.444769][ T3010] netlink: 'syz.7.11800': attribute type 39 has an invalid length. [ 2206.061128][T17714] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2206.767403][ T3036] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2206.827788][ T3033] device syzkaller0 entered promiscuous mode [ 2209.257741][ T3046] bond_slave_1: mtu less than device minimum [ 2209.529167][ T3054] device syzkaller0 entered promiscuous mode [ 2210.113845][ T3056] netlink: 'syz.2.11820': attribute type 29 has an invalid length. [ 2212.992179][ T3056] netlink: 'syz.2.11820': attribute type 29 has an invalid length. [ 2213.208362][ T3080] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2213.355903][ T3087] bond_slave_1: mtu less than device minimum [ 2213.732681][ T3101] netlink: 'syz.7.11836': attribute type 3 has an invalid length. [ 2213.749474][ T3101] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.11836'. [ 2213.926704][T31626] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 2214.085754][ T3110] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.11840'. [ 2214.802678][ T3121] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2216.536655][ T3146] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.11856'. [ 2216.595792][ T3153] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2217.032290][ T3161] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.11871'. [ 2217.592986][ T3171] netlink: 122896 bytes leftover after parsing attributes in process `syz.8.11865'. [ 2217.727727][ T3171] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 2219.386743][T31626] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 2219.800768][ T3199] netlink: 'syz.6.11873': attribute type 29 has an invalid length. [ 2219.930969][ T3199] netlink: 'syz.6.11873': attribute type 29 has an invalid length. [ 2220.116729][ T3206] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2221.879387][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.885798][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.334608][ T3227] netlink: 'syz.5.11895': attribute type 3 has an invalid length. [ 2222.408842][ T3227] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.11895'. [ 2223.627247][ T3246] netlink: 'syz.2.11900': attribute type 3 has an invalid length. [ 2223.673813][ T3246] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11900'. [ 2224.204992][ T3256] netlink: 'syz.8.11890': attribute type 29 has an invalid length. [ 2224.217680][ T3256] netlink: 'syz.8.11890': attribute type 29 has an invalid length. [ 2224.677992][T31626] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3 [ 2225.035519][ T3283] netlink: 'syz.6.11906': attribute type 3 has an invalid length. [ 2225.052392][ T3283] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.11906'. [ 2225.756459][ T3303] netlink: 128 bytes leftover after parsing attributes in process `syz.5.11924'. [ 2225.766044][ T3303] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2226.083150][ T3299] netlink: 'syz.8.11912': attribute type 29 has an invalid length. [ 2226.127901][ T3299] netlink: 'syz.8.11912': attribute type 29 has an invalid length. [ 2226.929506][ T3326] netlink: 'syz.8.11919': attribute type 3 has an invalid length. [ 2226.966127][ T3326] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.11919'. [ 2227.749859][ T3338] netlink: 'syz.8.11928': attribute type 29 has an invalid length. [ 2227.780920][ T3338] netlink: 'syz.8.11928': attribute type 29 has an invalid length. [ 2228.291320][ T3365] netlink: 'syz.5.11935': attribute type 4 has an invalid length. [ 2228.352243][ T3365] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.11935'. [ 2228.854990][ T3363] netlink: 'syz.7.11943': attribute type 29 has an invalid length. [ 2229.120722][ T3363] netlink: 'syz.7.11943': attribute type 29 has an invalid length. [ 2230.424447][ T3402] netlink: 'syz.7.11949': attribute type 4 has an invalid length. [ 2230.469922][ T3402] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.11949'. [ 2230.659460][ T3403] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.11945'. [ 2231.684378][ T3417] netlink: 'syz.8.11954': attribute type 29 has an invalid length. [ 2231.722371][ T3417] netlink: 'syz.8.11954': attribute type 29 has an invalid length. [ 2231.939781][ T3422] netlink: 128 bytes leftover after parsing attributes in process `syz.6.11965'. [ 2231.991356][ T3422] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2232.221091][ T3429] netlink: 'syz.8.11958': attribute type 9 has an invalid length. [ 2232.331664][ T3429] netlink: 126588 bytes leftover after parsing attributes in process `syz.8.11958'. [ 2233.985715][ T3466] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11972'. [ 2234.006997][ T3466] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2234.371760][ T3478] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2236.191723][ T3507] netlink: 128 bytes leftover after parsing attributes in process `syz.8.11988'. [ 2236.237080][ T3507] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2236.513367][ T3511] netlink: 'syz.6.11989': attribute type 4 has an invalid length. [ 2236.692514][ T3511] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.11989'. [ 2237.340273][ T3531] netlink: 'syz.8.11995': attribute type 4 has an invalid length. [ 2237.395732][T17745] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2237.422786][ T3531] netlink: 152 bytes leftover after parsing attributes in process `syz.8.11995'. [ 2237.523726][ T3531] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2237.722743][ T3535] netlink: 'syz.8.11995': attribute type 10 has an invalid length. [ 2237.747264][ T3535] team0: Device hsr_slave_0 failed to register rx_handler [ 2238.434496][T17745] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2239.116894][ T3552] netlink: 128 bytes leftover after parsing attributes in process `syz.7.12003'. [ 2239.197631][ T3552] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2239.263997][ T3554] netlink: 'syz.8.12006': attribute type 4 has an invalid length. [ 2239.272175][ T3554] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.12006'. [ 2239.544753][ T3562] netlink: 128 bytes leftover after parsing attributes in process `syz.7.12018'. [ 2239.591895][ T3562] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2240.005995][ T3571] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2240.888943][ T3590] device sit0 left promiscuous mode [ 2241.312010][ T3592] device sit0 entered promiscuous mode [ 2241.926465][ T3608] syzkaller0: create flow: hash 3725029020 index 1 [ 2242.057949][ T3604] netlink: 'syz.7.12035': attribute type 15 has an invalid length. [ 2242.969317][ T3612] syzkaller0: delete flow: hash 3725029020 index 1 [ 2246.569116][ T3658] netlink: 'syz.7.12042': attribute type 4 has an invalid length. [ 2246.583116][ T3658] netlink: 152 bytes leftover after parsing attributes in process `syz.7.12042'. [ 2246.611631][ T3658] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2246.672370][ T3659] netlink: 'syz.7.12042': attribute type 10 has an invalid length. [ 2246.732028][ T3659] team0: Port device hsr_slave_0 added [ 2246.756703][ T3656] netlink: 'syz.8.12043': attribute type 15 has an invalid length. [ 2246.824332][ T3665] device sit0 left promiscuous mode [ 2246.967951][ T3668] device sit0 entered promiscuous mode [ 2248.770590][ T3702] syzkaller0: create flow: hash 3725029020 index 1 [ 2248.833529][ T3699] netlink: 'syz.5.12058': attribute type 15 has an invalid length. [ 2249.163162][T23273] syzkaller0: tun_net_xmit 76 [ 2249.168844][T23273] syzkaller0: tun_net_xmit 48 [ 2249.180156][ T3697] syzkaller0: delete flow: hash 3725029020 index 1 [ 2253.259309][ T3714] device sit0 left promiscuous mode [ 2253.369279][ T3717] device sit0 entered promiscuous mode [ 2254.385157][ T3750] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2254.391706][ T3750] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2255.548622][ T3761] device sit0 left promiscuous mode [ 2255.630967][ T3764] device sit0 entered promiscuous mode [ 2255.831516][ T3768] netlink: 'syz.7.12086': attribute type 15 has an invalid length. [ 2255.846210][ T3768] netlink: 11594 bytes leftover after parsing attributes in process `syz.7.12086'. [ 2256.921286][ T3771] device syzkaller0 entered promiscuous mode [ 2256.942221][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2259.351809][ T3817] netlink: 'syz.5.12107': attribute type 39 has an invalid length. [ 2261.174714][ T3851] netlink: 129384 bytes leftover after parsing attributes in process `syz.8.12116'. [ 2265.484944][ T3885] device sit0 left promiscuous mode [ 2265.498454][T31626] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2265.505953][T31626] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 2265.630387][ T3887] device sit0 entered promiscuous mode [ 2267.385239][ T3914] device syzkaller0 entered promiscuous mode [ 2267.616057][ T3921] device sit0 left promiscuous mode [ 2267.785396][ T3923] device sit0 entered promiscuous mode [ 2269.262710][ T3956] device syzkaller0 entered promiscuous mode [ 2269.650725][T17733] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2269.850464][ T3971] device sit0 left promiscuous mode [ 2270.127980][ T3972] device sit0 entered promiscuous mode [ 2270.876692][ T3993] device syzkaller0 entered promiscuous mode [ 2271.967598][ T4006] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.12174'. [ 2272.595292][ T4023] device sit0 left promiscuous mode [ 2272.755816][ T4023] device sit0 entered promiscuous mode [ 2272.958852][ T4036] delete_channel: no stack [ 2272.975913][ T4036] delete_channel: no stack [ 2274.035377][ T4040] device syzkaller0 entered promiscuous mode [ 2274.058223][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2275.660448][ T4065] netlink: 15231 bytes leftover after parsing attributes in process `syz.7.12193'. [ 2275.778227][ T4066] netlink: 'syz.7.12193': attribute type 21 has an invalid length. [ 2275.787376][ T4066] netlink: 156 bytes leftover after parsing attributes in process `syz.7.12193'. [ 2276.117607][ T4071] netlink: 'syz.7.12195': attribute type 39 has an invalid length. [ 2276.448326][ T4075] device sit0 left promiscuous mode [ 2276.536241][ T4078] device sit0 entered promiscuous mode [ 2277.505930][ T4097] device syzkaller0 entered promiscuous mode [ 2277.971505][ T4116] netlink: 'syz.8.12212': attribute type 39 has an invalid length. [ 2279.353202][ T4130] device sit0 left promiscuous mode [ 2279.548299][ T4131] device sit0 entered promiscuous mode [ 2281.144121][ T4158] delete_channel: no stack [ 2281.158997][ T4158] delete_channel: no stack [ 2281.786680][ T4166] netlink: 15231 bytes leftover after parsing attributes in process `syz.6.12226'. [ 2281.831619][ T4166] netlink: 'syz.6.12226': attribute type 21 has an invalid length. [ 2281.865139][ T4166] netlink: 156 bytes leftover after parsing attributes in process `syz.6.12226'. [ 2282.310151][ T4178] netlink: 'syz.6.12237': attribute type 10 has an invalid length. [ 2282.371564][ T4178] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12237'. [ 2282.455954][ T4178] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2282.942754][ T4183] device syzkaller0 entered promiscuous mode [ 2283.065604][ T4194] device sit0 left promiscuous mode [ 2283.206605][ T4195] device sit0 entered promiscuous mode [ 2283.309040][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.315509][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.248068][ T4211] device sit0 left promiscuous mode [ 2284.388523][ T4218] device sit0 entered promiscuous mode [ 2285.316462][ T4224] netlink: 15231 bytes leftover after parsing attributes in process `syz.5.12249'. [ 2285.364069][ T4223] delete_channel: no stack [ 2285.371487][ T4227] netlink: 'syz.5.12249': attribute type 21 has an invalid length. [ 2285.390601][ T4223] delete_channel: no stack [ 2285.405672][ T4227] netlink: 156 bytes leftover after parsing attributes in process `syz.5.12249'. [ 2285.714880][T27006] Bluetooth: hci4: unexpected event 0x33 length: 15 > 10 [ 2285.873839][ T4241] device syzkaller0 entered promiscuous mode [ 2286.034596][ T4243] netlink: 'syz.6.12258': attribute type 39 has an invalid length. [ 2287.320067][ T4263] device sit0 left promiscuous mode [ 2287.560360][ T4264] device sit0 entered promiscuous mode [ 2288.389467][ T4271] device sit0 left promiscuous mode [ 2288.591812][ T4276] device sit0 entered promiscuous mode [ 2289.390036][ T4290] delete_channel: no stack [ 2289.419568][ T4290] delete_channel: no stack [ 2289.662438][T27006] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 2290.402810][ T4308] netlink: 129384 bytes leftover after parsing attributes in process `syz.7.12281'. [ 2291.048490][ T4320] netlink: 129384 bytes leftover after parsing attributes in process `syz.6.12296'. [ 2291.730804][ T4328] netlink: 'syz.2.12287': attribute type 39 has an invalid length. [ 2292.705872][ T4348] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2293.035928][ T4356] delete_channel: no stack [ 2293.047690][ T4356] delete_channel: no stack [ 2294.129371][ T4368] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.12304'. [ 2294.642267][ T4382] netlink: 'syz.7.12308': attribute type 3 has an invalid length. [ 2294.679761][ T4382] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.12308'. [ 2294.907823][T17723] wlan1: Trigger new scan to find an IBSS to join [ 2294.994957][ T4396] netlink: 'syz.7.12315': attribute type 10 has an invalid length. [ 2295.036388][ T4396] netlink: 2 bytes leftover after parsing attributes in process `syz.7.12315'. [ 2295.058632][ T4396] device bond0 entered promiscuous mode [ 2295.075021][ T4396] device bond_slave_0 entered promiscuous mode [ 2295.099234][ T4396] device bond_slave_1 entered promiscuous mode [ 2295.109465][ T4396] device team0 entered promiscuous mode [ 2295.121833][ T4396] device team_slave_0 entered promiscuous mode [ 2295.149166][ T4396] device team_slave_1 entered promiscuous mode [ 2295.169753][ T4396] device wlan1 entered promiscuous mode [ 2295.189239][ T4396] device hsr_slave_0 entered promiscuous mode [ 2297.946948][T24199] wlan1: Trigger new scan to find an IBSS to join [ 2298.099148][ T4442] netlink: 'syz.7.12335': attribute type 10 has an invalid length. [ 2298.140735][ T4442] netlink: 55 bytes leftover after parsing attributes in process `syz.7.12335'. [ 2298.492538][ T4440] netlink: 'syz.8.12334': attribute type 28 has an invalid length. [ 2300.685612][ T4492] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2300.986729][T17733] wlan1: Creating new IBSS network, BSSID 72:af:13:eb:25:38 [ 2301.381356][ T4511] device syzkaller0 entered promiscuous mode [ 2305.429514][ T4542] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2307.122889][ T4569] netlink: 'syz.2.12386': attribute type 3 has an invalid length. [ 2307.132509][ T4569] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12386'. [ 2307.462745][ T4571] netlink: 71 bytes leftover after parsing attributes in process `syz.5.12389'. [ 2307.819765][ T4583] netlink: 'syz.8.12392': attribute type 10 has an invalid length. [ 2307.846899][ T4583] netlink: 2 bytes leftover after parsing attributes in process `syz.8.12392'. [ 2307.881060][ T4583] device bond0 entered promiscuous mode [ 2307.912857][ T4583] device bond_slave_0 entered promiscuous mode [ 2307.935294][ T4583] device bond_slave_1 entered promiscuous mode [ 2307.952771][ T9525] wlan1: Trigger new scan to find an IBSS to join [ 2307.968516][ T4583] device batadv0 entered promiscuous mode [ 2308.007491][ T4583] device team0 entered promiscuous mode [ 2308.014004][ T4583] device team_slave_0 entered promiscuous mode [ 2308.048376][ T4583] device team_slave_1 entered promiscuous mode [ 2308.078713][ T4583] device geneve0 entered promiscuous mode [ 2308.090008][ T4583] device netdevsim0 entered promiscuous mode [ 2308.105526][ T4583] device wlan1 entered promiscuous mode [ 2308.164289][ T4590] netlink: 'syz.5.12393': attribute type 10 has an invalid length. [ 2308.184027][ T4590] netlink: 55 bytes leftover after parsing attributes in process `syz.5.12393'. [ 2308.358816][ T4592] netlink: 'syz.6.12397': attribute type 11 has an invalid length. [ 2308.423600][ T4592] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.12397'. [ 2308.479565][ T4591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2308.496792][ T4599] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2309.240446][ T4605] device veth1_macvtap entered promiscuous mode [ 2310.674350][ T4613] netlink: 'syz.7.12416': attribute type 28 has an invalid length. [ 2310.948692][ T4624] netlink: 'syz.6.12410': attribute type 10 has an invalid length. [ 2310.987019][ T4624] netlink: 2 bytes leftover after parsing attributes in process `syz.6.12410'. [ 2311.002684][ T4624] device bond0 entered promiscuous mode [ 2311.009353][ T4624] device bond_slave_0 entered promiscuous mode [ 2311.033997][ T4624] device bond_slave_1 entered promiscuous mode [ 2311.050773][ T4624] device team0 entered promiscuous mode [ 2311.086960][ T4624] device team_slave_0 entered promiscuous mode [ 2311.106364][ T4624] device team_slave_1 entered promiscuous mode [ 2311.128430][ T4624] device netdevsim0 entered promiscuous mode [ 2311.237590][ T4632] netlink: 'syz.8.12412': attribute type 10 has an invalid length. [ 2311.257886][ T4632] netlink: 55 bytes leftover after parsing attributes in process `syz.8.12412'. [ 2312.608174][ T4639] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2312.838330][ T4654] netlink: 71 bytes leftover after parsing attributes in process `syz.7.12420'. [ 2312.906973][ T9525] wlan1: Trigger new scan to find an IBSS to join [ 2313.231193][ T4662] netlink: 'syz.5.12425': attribute type 10 has an invalid length. [ 2313.246922][ T4662] netlink: 2 bytes leftover after parsing attributes in process `syz.5.12425'. [ 2313.267273][ T4662] device bond0 entered promiscuous mode [ 2313.275786][ T4662] device bond_slave_0 entered promiscuous mode [ 2313.320522][ T4662] device bond_slave_1 entered promiscuous mode [ 2313.362638][ T4662] device team0 entered promiscuous mode [ 2313.391248][ T4662] device team_slave_0 entered promiscuous mode [ 2313.426166][ T4662] device team_slave_1 entered promiscuous mode [ 2313.436559][ T4662] device netdevsim0 entered promiscuous mode [ 2313.457913][ T4669] tc_dump_action: action bad kind [ 2313.842736][T17745] wlan1: Creating new IBSS network, BSSID 0e:e2:32:eb:bf:37 [ 2314.093099][ T4685] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2314.805211][ T4695] netlink: 'syz.6.12435': attribute type 10 has an invalid length. [ 2314.838032][ T4695] netlink: 55 bytes leftover after parsing attributes in process `syz.6.12435'. [ 2315.162124][ T4699] device veth1_macvtap entered promiscuous mode [ 2315.409659][ T4701] netlink: 'syz.2.12440': attribute type 10 has an invalid length. [ 2315.438976][ T4701] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12440'. [ 2315.467336][ T4701] device bond0 entered promiscuous mode [ 2315.486124][ T4701] device bond_slave_0 entered promiscuous mode [ 2315.522837][ T4701] device bond_slave_1 entered promiscuous mode [ 2315.579455][ T4701] device team0 entered promiscuous mode [ 2315.605484][ T4701] device team_slave_0 entered promiscuous mode [ 2315.752822][ T4701] device team_slave_1 entered promiscuous mode [ 2315.828271][ T4701] device geneve0 entered promiscuous mode [ 2315.993954][ T4708] device syzkaller0 entered promiscuous mode [ 2316.002898][ T4707] netlink: 71 bytes leftover after parsing attributes in process `syz.8.12442'. [ 2319.642906][ T4719] netlink: 71 bytes leftover after parsing attributes in process `syz.6.12458'. [ 2319.711079][ T4723] netlink: 'syz.7.12456': attribute type 10 has an invalid length. [ 2319.727809][ T4723] netlink: 2 bytes leftover after parsing attributes in process `syz.7.12456'. [ 2319.740202][ T4731] netlink: 'syz.8.12449': attribute type 10 has an invalid length. [ 2319.999764][ T4744] netlink: 'syz.8.12464': attribute type 10 has an invalid length. [ 2320.065046][ T4744] netlink: 2 bytes leftover after parsing attributes in process `syz.8.12464'. [ 2321.241891][ T4764] netlink: 'syz.2.12455': attribute type 10 has an invalid length. [ 2321.261411][ T4764] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12455'. [ 2322.995682][ T4794] tc_dump_action: action bad kind [ 2323.136432][ T4795] device syzkaller0 entered promiscuous mode [ 2323.146801][ T4799] netlink: 71 bytes leftover after parsing attributes in process `syz.2.12465'. [ 2323.236741][T27006] Bluetooth: hci4: Malformed LE Event: 0x0d [ 2327.363830][ T4812] netlink: 'syz.5.12478': attribute type 10 has an invalid length. [ 2327.375812][ T4812] netlink: 55 bytes leftover after parsing attributes in process `syz.5.12478'. [ 2327.398805][ T4840] tc_dump_action: action bad kind [ 2329.994298][ T4884] device syzkaller0 entered promiscuous mode [ 2330.014575][ T4888] tc_dump_action: action bad kind [ 2336.636029][ T4982] netlink: 'syz.2.12538': attribute type 11 has an invalid length. [ 2336.655220][T27006] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17 [ 2336.665763][ T4982] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12538'. [ 2336.725881][ T4981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2339.037855][T27006] Bluetooth: hci4: unexpected event 0x2c length: 82 > 17 [ 2341.185618][ T5057] : port 1(erspan0) entered blocking state [ 2341.192563][ T5057] : port 1(erspan0) entered disabled state [ 2341.218080][ T5057] device erspan0 entered promiscuous mode [ 2341.335646][ T5059] : port 2(veth0_to_bridge) entered blocking state [ 2341.355827][ T5059] : port 2(veth0_to_bridge) entered disabled state [ 2341.397866][ T5059] device veth0_to_bridge entered promiscuous mode [ 2343.890836][T17714] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2344.761132][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.767591][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.144527][ T5098] netlink: 'syz.7.12585': attribute type 2 has an invalid length. [ 2345.166827][ T5099] netlink: 'syz.7.12585': attribute type 2 has an invalid length. [ 2348.784965][ T5157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2348.809935][ T5157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2348.986184][ T5157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2349.008175][ T5157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2354.134447][ T5234] netlink: 'syz.8.12639': attribute type 2 has an invalid length. [ 2354.185909][ T5234] netlink: 'syz.8.12639': attribute type 8 has an invalid length. [ 2354.198438][ T5234] netlink: 132 bytes leftover after parsing attributes in process `syz.8.12639'. [ 2355.862581][ T5272] : port 1(veth0_to_bridge) entered blocking state [ 2355.873594][ T5272] : port 1(veth0_to_bridge) entered disabled state [ 2355.885068][ T5272] device veth0_to_bridge entered promiscuous mode [ 2355.909640][ T5272] : port 2(erspan0) entered blocking state [ 2355.919610][ T5272] : port 2(erspan0) entered disabled state [ 2355.941938][ T5272] device erspan0 entered promiscuous mode [ 2358.935212][ T5311] netlink: 'syz.6.12667': attribute type 2 has an invalid length. [ 2358.970687][ T5311] netlink: 'syz.6.12667': attribute type 8 has an invalid length. [ 2359.000356][ T5311] netlink: 132 bytes leftover after parsing attributes in process `syz.6.12667'. [ 2360.467262][ T5332] netlink: 10 bytes leftover after parsing attributes in process `syz.2.12676'. [ 2364.031103][ T5391] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2364.068665][ T5391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2364.206756][ T5396] netlink: 'syz.5.12701': attribute type 2 has an invalid length. [ 2364.215347][ T5396] netlink: 'syz.5.12701': attribute type 8 has an invalid length. [ 2364.248321][ T5396] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12701'. [ 2372.173356][ T5412] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2372.239154][ T5417] netlink: 'syz.2.12716': attribute type 10 has an invalid length. [ 2372.262363][ T5417] bond0: (slave bond_slave_0): Releasing backup interface [ 2372.299595][ T5417] device bond_slave_0 left promiscuous mode [ 2372.631777][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2372.728868][ T5428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2373.120784][ T5439] netlink: 'syz.5.12718': attribute type 1 has an invalid length. [ 2373.207563][ T5439] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.12718'. [ 2373.532310][ T5456] device syzkaller0 entered promiscuous mode [ 2373.893139][ T5470] netlink: 'syz.7.12730': attribute type 2 has an invalid length. [ 2373.903970][ T5470] netlink: 'syz.7.12730': attribute type 8 has an invalid length. [ 2373.912342][ T5470] netlink: 132 bytes leftover after parsing attributes in process `syz.7.12730'. [ 2374.822709][T17745] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2375.127123][ T5493] device syzkaller0 entered promiscuous mode [ 2375.461434][ T5502] netlink: 'syz.5.12745': attribute type 2 has an invalid length. [ 2375.496517][ T5502] netlink: 'syz.5.12745': attribute type 8 has an invalid length. [ 2375.504424][ T5502] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12745'. [ 2375.931792][ T5518] netlink: 10 bytes leftover after parsing attributes in process `syz.7.12749'. [ 2376.942978][ T5533] netlink: 'syz.6.12759': attribute type 2 has an invalid length. [ 2376.976591][ T5533] netlink: 'syz.6.12759': attribute type 8 has an invalid length. [ 2376.984668][ T5533] netlink: 132 bytes leftover after parsing attributes in process `syz.6.12759'. [ 2376.996438][ T5535] device syzkaller0 entered promiscuous mode [ 2377.022276][ T5537] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2377.044555][ T5539] netlink: 'syz.5.12756': attribute type 10 has an invalid length. [ 2377.053852][ T5539] bond0: (slave bond_slave_0): Releasing backup interface [ 2377.063160][ T5539] device bond_slave_0 left promiscuous mode [ 2379.037362][ T5567] netlink: 10 bytes leftover after parsing attributes in process `syz.8.12768'. [ 2379.241196][ T5581] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2379.366611][ T5584] netlink: 'syz.7.12773': attribute type 10 has an invalid length. [ 2379.403662][ T5584] bond0: (slave bond_slave_0): Releasing backup interface [ 2380.250678][ T5584] device bond_slave_0 left promiscuous mode [ 2380.291520][ T5589] netlink: 'syz.8.12778': attribute type 10 has an invalid length. [ 2380.897815][ T5611] netlink: 'syz.7.12787': attribute type 1 has an invalid length. [ 2380.936859][ T5611] netlink: 105120 bytes leftover after parsing attributes in process `syz.7.12787'. [ 2381.473890][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2381.546159][ T5619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2381.631152][ T5623] netlink: 10 bytes leftover after parsing attributes in process `syz.5.12788'. [ 2382.161771][ T5638] netlink: 'syz.5.12793': attribute type 10 has an invalid length. [ 2383.014174][T27006] Bluetooth: hci1: unexpected event 0x36 length: 82 > 7 [ 2385.222786][ T5681] netlink: 'syz.6.12808': attribute type 10 has an invalid length. [ 2388.331151][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2388.423019][ T5709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2389.832113][ T5733] netlink: 60 bytes leftover after parsing attributes in process `syz.8.12835'. [ 2389.891865][ T5733] netlink: 60 bytes leftover after parsing attributes in process `syz.8.12835'. [ 2389.996201][ T5737] netlink: 60 bytes leftover after parsing attributes in process `syz.8.12835'. [ 2390.036039][ T5739] netlink: 60 bytes leftover after parsing attributes in process `syz.8.12835'. [ 2390.204740][ T5746] netlink: 'syz.2.12839': attribute type 10 has an invalid length. [ 2390.351420][ T5746] device geneve1 entered promiscuous mode [ 2390.368801][ T5746] team0: Port device geneve1 added [ 2392.188338][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2392.241676][ T5761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2392.670561][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2392.749844][ T5777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2392.982934][ T5787] netlink: 'syz.5.12854': attribute type 10 has an invalid length. [ 2393.117815][ T5787] device geneve1 entered promiscuous mode [ 2393.164571][ T5787] team0: Port device geneve1 added [ 2395.583215][ T5836] netlink: 'syz.6.12875': attribute type 10 has an invalid length. [ 2395.700282][ T5836] device geneve1 entered promiscuous mode [ 2395.724289][ T5836] team0: Port device geneve1 added [ 2396.182640][ T5843] netlink: 'syz.8.12878': attribute type 10 has an invalid length. [ 2396.209957][ T5843] netlink: 55 bytes leftover after parsing attributes in process `syz.8.12878'. [ 2401.107235][ T5877] netlink: 'syz.8.12889': attribute type 10 has an invalid length. [ 2401.115498][ T5877] device wlan1 left promiscuous mode [ 2401.122832][ T5877] team0: Port device wlan1 removed [ 2401.130967][ T5877] device wlan1 entered promiscuous mode [ 2401.138215][ T5877] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2401.375296][ T5886] netlink: 'syz.7.12890': attribute type 10 has an invalid length. [ 2401.605582][ T5886] device geneve1 entered promiscuous mode [ 2401.679899][ T5886] team0: Port device geneve1 added [ 2401.777820][ T5894] netlink: 'syz.5.12896': attribute type 3 has an invalid length. [ 2401.844637][ T5894] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.12896'. [ 2402.142956][ T5889] device syzkaller0 entered promiscuous mode [ 2403.048990][ T5905] delete_channel: no stack [ 2403.947381][ T3460] wlan1: Trigger new scan to find an IBSS to join [ 2404.699052][ T5920] netlink: 154788 bytes leftover after parsing attributes in process `syz.7.12906'. [ 2404.709348][ T5920] openvswitch: netlink: Message has 48126 unknown bytes. [ 2406.189674][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.196156][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.538935][ T5926] netlink: 'syz.8.12908': attribute type 10 has an invalid length. [ 2406.717861][ T5926] device geneve1 entered promiscuous mode [ 2406.732120][ T5926] team0: Port device geneve1 added [ 2406.987248][T17723] wlan1: Trigger new scan to find an IBSS to join [ 2407.777910][ T5938] delete_channel: no stack [ 2407.799443][ T5944] device sit0 left promiscuous mode [ 2408.021420][ T5949] device sit0 entered promiscuous mode [ 2409.199078][ T5974] netlink: 'syz.5.12927': attribute type 10 has an invalid length. [ 2409.704996][ T5976] delete_channel: no stack [ 2409.947405][T24199] wlan1: Creating new IBSS network, BSSID 8e:12:94:2a:9a:59 [ 2410.364453][ T5986] netlink: 'syz.5.12933': attribute type 29 has an invalid length. [ 2410.394341][ T5986] netlink: 'syz.5.12933': attribute type 29 has an invalid length. [ 2410.970396][ T5998] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12937'. [ 2411.150923][ T5998] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12937'. [ 2411.175778][ T6001] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12937'. [ 2411.329071][ T6002] netlink: 60 bytes leftover after parsing attributes in process `syz.7.12937'. [ 2411.833193][ T6013] delete_channel: no stack [ 2416.515021][ T6016] device syzkaller0 entered promiscuous mode [ 2420.288484][ T6047] netlink: 'syz.6.12954': attribute type 10 has an invalid length. [ 2420.299903][ T6047] device wlan1 entered promiscuous mode [ 2420.306044][ T6047] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2420.683839][ T6054] netlink: 154788 bytes leftover after parsing attributes in process `syz.8.12957'. [ 2420.708341][ T6051] delete_channel: no stack [ 2420.718474][ T6054] openvswitch: netlink: Message has 48126 unknown bytes. [ 2420.931011][ T6062] netlink: 'syz.8.12962': attribute type 10 has an invalid length. [ 2420.954832][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2421.073272][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2421.104421][ T6062] device batadv_slave_0 entered promiscuous mode [ 2421.132514][ T6062] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2421.170421][ T6070] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2422.986559][T17745] wlan1: Trigger new scan to find an IBSS to join [ 2423.387427][ T6095] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.12973'. [ 2423.416714][ T6095] openvswitch: netlink: Message has 48126 unknown bytes. [ 2423.890135][ T6098] netlink: 'syz.6.12974': attribute type 29 has an invalid length. [ 2423.900489][ T6098] netlink: 'syz.6.12974': attribute type 29 has an invalid length. [ 2424.824796][ T6101] device syzkaller0 entered promiscuous mode [ 2428.913028][ T9525] wlan1: Trigger new scan to find an IBSS to join [ 2429.172074][ T6117] netlink: 830 bytes leftover after parsing attributes in process `syz.2.12982'. [ 2430.587527][ T9525] wlan1: Creating new IBSS network, BSSID 32:b6:3e:b7:0d:3a [ 2430.796355][ T6166] device lo left promiscuous mode [ 2430.819676][T27006] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 2430.838398][ T6166] Q6`Ҙ: renamed from lo [ 2432.966181][ T6188] netlink: 'syz.8.13009': attribute type 10 has an invalid length. [ 2433.083024][ T6188] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2433.303850][ T6202] netlink: 'syz.7.13013': attribute type 29 has an invalid length. [ 2433.332138][ T6202] netlink: 'syz.7.13013': attribute type 29 has an invalid length. [ 2434.215445][ T6216] netlink: 'syz.8.13028': attribute type 29 has an invalid length. [ 2434.259776][ T6216] netlink: 'syz.8.13028': attribute type 29 has an invalid length. [ 2435.855433][ T6224] can: request_module (can-proto-4) failed. [ 2436.027691][ T6237] netlink: 'syz.8.13027': attribute type 10 has an invalid length. [ 2437.625726][ T6252] netlink: 'syz.6.13032': attribute type 10 has an invalid length. [ 2437.688416][ T6252] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2438.078304][ T6264] can: request_module (can-proto-4) failed. [ 2438.101157][T24199] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2439.127548][T17723] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2442.116267][ T6309] netlink: 'syz.2.13052': attribute type 10 has an invalid length. [ 2442.152429][ T6309] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2442.382511][ T6317] netlink: 'syz.2.13053': attribute type 29 has an invalid length. [ 2442.406157][ T6317] netlink: 'syz.2.13053': attribute type 29 has an invalid length. [ 2443.921279][ T6351] netlink: 'syz.7.13069': attribute type 10 has an invalid length. [ 2446.919109][ T6395] netlink: 'syz.5.13087': attribute type 10 has an invalid length. [ 2447.545811][T27006] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 2448.844970][ T6436] netlink: 'syz.7.13111': attribute type 29 has an invalid length. [ 2448.932260][ T6436] netlink: 'syz.7.13111': attribute type 29 has an invalid length. [ 2449.055059][ T6439] netlink: 'syz.5.13105': attribute type 10 has an invalid length. [ 2449.183979][T27006] Bluetooth: hci1: Unknown advertising packet type: 0x8100 [ 2449.184025][T27006] Bluetooth: hci1: Unknown advertising packet type: 0x500 [ 2449.191490][T27006] Bluetooth: hci1: Unknown advertising packet type: 0x4000 [ 2449.199055][T27006] Bluetooth: hci1: Malformed LE Event: 0x0d [ 2449.500077][ T6449] IPv6: NLM_F_CREATE should be specified when creating new route [ 2449.537408][ T6449] netlink: 1 bytes leftover after parsing attributes in process `syz.5.13110'. [ 2450.627071][ T6467] netlink: 'syz.2.13118': attribute type 10 has an invalid length. [ 2450.651474][ T6467] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2450.701212][ T6469] netlink: 'syz.5.13120': attribute type 39 has an invalid length. [ 2451.038140][ T6476] netlink: 'syz.6.13121': attribute type 10 has an invalid length. [ 2451.255923][ T6476] team0: Device ipvlan1 failed to register rx_handler [ 2453.815942][ T6503] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2454.537853][ T6519] netlink: 'syz.2.13148': attribute type 3 has an invalid length. [ 2454.561907][ T6519] netlink: 'syz.2.13148': attribute type 1 has an invalid length. [ 2454.575417][ T6519] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.13148'. [ 2454.976125][ T6532] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13141'. [ 2455.326082][ T6539] netlink: 'syz.7.13142': attribute type 10 has an invalid length. [ 2456.467607][T27006] Bluetooth: hci4: unexpected event 0x2c length: 82 > 17 [ 2456.467650][T27006] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 2456.984892][ T6569] netlink: 1 bytes leftover after parsing attributes in process `syz.8.13155'. [ 2458.357924][ T6591] netlink: 'syz.2.13163': attribute type 10 has an invalid length. [ 2458.691648][ T6598] netlink: 'syz.2.13165': attribute type 10 has an invalid length. [ 2460.213774][ T6630] netlink: 'syz.6.13176': attribute type 10 has an invalid length. [ 2460.249222][ T6630] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2460.630099][T24199] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2462.205091][ T6665] netlink: 'syz.2.13193': attribute type 10 has an invalid length. [ 2462.240882][ T6665] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2463.235529][ T6688] netlink: 122896 bytes leftover after parsing attributes in process `syz.7.13212'. [ 2463.268629][ T6688] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 2463.354086][ T6693] netlink: 'syz.2.13205': attribute type 39 has an invalid length. [ 2463.665804][ T6698] netlink: 'syz.5.13207': attribute type 10 has an invalid length. [ 2464.095430][ T6708] netlink: 'syz.5.13221': attribute type 10 has an invalid length. [ 2464.534727][ T6719] netlink: 'syz.5.13226': attribute type 10 has an invalid length. [ 2464.905446][ T6725] netlink: 'syz.7.13216': attribute type 3 has an invalid length. [ 2464.946499][ T6725] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.13216'. [ 2465.549188][ T6740] netlink: 'syz.7.13222': attribute type 39 has an invalid length. [ 2467.405048][ T6784] netlink: 'syz.8.13241': attribute type 39 has an invalid length. [ 2467.632441][ T6791] netlink: 'syz.5.13243': attribute type 39 has an invalid length. [ 2467.641069][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.647615][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.201013][ T6808] netlink: 'syz.6.13263': attribute type 39 has an invalid length. [ 2468.539743][ T6818] netlink: 'syz.5.13255': attribute type 3 has an invalid length. [ 2468.555799][ T6818] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.13255'. [ 2469.333236][ T6841] netlink: 'syz.2.13265': attribute type 39 has an invalid length. [ 2469.692535][ T6845] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.13267'. [ 2469.778393][ T6845] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 2470.170673][ T6852] netlink: 'syz.2.13269': attribute type 39 has an invalid length. [ 2471.610262][ T9525] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2472.493592][ T6903] netlink: 122896 bytes leftover after parsing attributes in process `syz.8.13286'. [ 2472.578127][ T6903] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2472.604172][ T6903] CPU: 0 PID: 6903 Comm: syz.8.13286 Not tainted syzkaller #0 [ 2472.611722][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2472.621835][ T6903] Call Trace: [ 2472.625152][ T6903] [ 2472.628147][ T6903] dump_stack_lvl+0x168/0x22e [ 2472.632984][ T6903] ? show_regs_print_info+0x12/0x12 [ 2472.638242][ T6903] ? load_image+0x3b0/0x3b0 [ 2472.642809][ T6903] sysfs_warn_dup+0x8a/0xa0 [ 2472.647353][ T6903] sysfs_do_create_link_sd+0xc0/0x110 [ 2472.653040][ T6903] device_add+0x7ed/0xfb0 [ 2472.657493][ T6903] wiphy_register+0x1e68/0x2bd0 [ 2472.662379][ T6903] ? cfg80211_event_work+0x40/0x40 [ 2472.667620][ T6903] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2472.673760][ T6903] ieee80211_register_hw+0x2c29/0x38c0 [ 2472.679259][ T6903] ? ieee80211_register_hw+0xec1/0x38c0 [ 2472.684857][ T6903] ? ieee80211_register_hw+0xec1/0x38c0 [ 2472.690518][ T6903] ? ieee80211_tasklet_handler+0x20/0x20 [ 2472.696184][ T6903] ? memset+0x1e/0x40 [ 2472.700236][ T6903] ? __hrtimer_init+0x186/0x270 [ 2472.705107][ T6903] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2472.710900][ T6903] hwsim_new_radio_nl+0xafa/0xce0 [ 2472.715966][ T6903] genl_family_rcv_msg_doit+0x22e/0x320 [ 2472.721534][ T6903] ? end_current_label_crit_section+0x170/0x170 [ 2472.727856][ T6903] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 2472.733962][ T6903] ? bpf_lsm_capable+0x5/0x10 [ 2472.738658][ T6903] ? security_capable+0x85/0xb0 [ 2472.743532][ T6903] genl_rcv_msg+0x5f2/0x780 [ 2472.748065][ T6903] ? genl_bind+0x350/0x350 [ 2472.752500][ T6903] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 2472.758868][ T6903] netlink_rcv_skb+0x1de/0x420 [ 2472.763749][ T6903] ? genl_bind+0x350/0x350 [ 2472.768206][ T6903] ? netlink_ack+0x1100/0x1100 [ 2472.773138][ T6903] ? down_read+0x1a8/0x2d0 [ 2472.777589][ T6903] genl_rcv+0x24/0x40 [ 2472.781609][ T6903] netlink_unicast+0x74d/0x8d0 [ 2472.786408][ T6903] netlink_sendmsg+0x89e/0xbc0 [ 2472.791214][ T6903] ? netlink_getsockopt+0x540/0x540 [ 2472.796546][ T6903] ? aa_sock_msg_perm+0x94/0x150 [ 2472.801524][ T6903] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2472.806834][ T6903] ? security_socket_sendmsg+0x7c/0xa0 [ 2472.812423][ T6903] ? netlink_getsockopt+0x540/0x540 [ 2472.817661][ T6903] ____sys_sendmsg+0x59b/0x970 [ 2472.822469][ T6903] ? __sys_sendmsg_sock+0x30/0x30 [ 2472.827883][ T6903] ? __import_iovec+0x315/0x500 [ 2472.832800][ T6903] ? import_iovec+0x6f/0xa0 [ 2472.837347][ T6903] ___sys_sendmsg+0x21c/0x290 [ 2472.842063][ T6903] ? __sys_sendmsg+0x270/0x270 [ 2472.846982][ T6903] ? ktime_get_real_ts64+0x420/0x420 [ 2472.852329][ T6903] ? __fdget+0x17c/0x200 [ 2472.856604][ T6903] __se_sys_sendmsg+0x19e/0x270 [ 2472.861484][ T6903] ? perf_trace_preemptirq_template+0x287/0x330 [ 2472.867778][ T6903] ? __x64_sys_sendmsg+0x80/0x80 [ 2472.872785][ T6903] ? lockdep_hardirqs_on+0x94/0x140 [ 2472.878017][ T6903] do_syscall_64+0x4c/0xa0 [ 2472.882636][ T6903] ? clear_bhb_loop+0x60/0xb0 [ 2472.887329][ T6903] ? clear_bhb_loop+0x60/0xb0 [ 2472.892115][ T6903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2472.898058][ T6903] RIP: 0033:0x7fb39cf8ebe9 [ 2472.902491][ T6903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2472.922310][ T6903] RSP: 002b:00007fb39dee6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2472.930872][ T6903] RAX: ffffffffffffffda RBX: 00007fb39d1c5fa0 RCX: 00007fb39cf8ebe9 [ 2472.938951][ T6903] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2472.946952][ T6903] RBP: 00007fb39d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 2472.954957][ T6903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2472.963037][ T6903] R13: 00007fb39d1c6038 R14: 00007fb39d1c5fa0 R15: 00007ffc2ee44bd8 [ 2472.971056][ T6903] [ 2473.930563][T27006] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 2474.770519][ T6942] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.13305'. [ 2474.892156][ T6942] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 2476.054546][ T6973] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2477.003512][ T6999] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.13326'. [ 2477.133838][ T6999] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2477.201956][ T6999] CPU: 1 PID: 6999 Comm: syz.6.13326 Not tainted syzkaller #0 [ 2477.209531][ T6999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2477.219697][ T6999] Call Trace: [ 2477.223059][ T6999] [ 2477.226071][ T6999] dump_stack_lvl+0x168/0x22e [ 2477.230806][ T6999] ? show_regs_print_info+0x12/0x12 [ 2477.236055][ T6999] ? load_image+0x3b0/0x3b0 [ 2477.240627][ T6999] sysfs_warn_dup+0x8a/0xa0 [ 2477.245205][ T6999] sysfs_do_create_link_sd+0xc0/0x110 [ 2477.250636][ T6999] device_add+0x7ed/0xfb0 [ 2477.255034][ T6999] wiphy_register+0x1e68/0x2bd0 [ 2477.259959][ T6999] ? cfg80211_event_work+0x40/0x40 [ 2477.265124][ T6999] ? minstrel_ht_alloc+0x894/0xa20 [ 2477.270285][ T6999] ? strcmp+0x59/0xb0 [ 2477.274315][ T6999] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2477.280414][ T6999] ieee80211_register_hw+0x2c29/0x38c0 [ 2477.285997][ T6999] ? ieee80211_register_hw+0xec1/0x38c0 [ 2477.291569][ T6999] ? ieee80211_register_hw+0xec1/0x38c0 [ 2477.297244][ T6999] ? ieee80211_tasklet_handler+0x20/0x20 [ 2477.303038][ T6999] ? memset+0x1e/0x40 [ 2477.307177][ T6999] ? __hrtimer_init+0x186/0x270 [ 2477.312083][ T6999] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2477.317860][ T6999] hwsim_new_radio_nl+0xafa/0xce0 [ 2477.323025][ T6999] genl_family_rcv_msg_doit+0x22e/0x320 [ 2477.328699][ T6999] ? end_current_label_crit_section+0x170/0x170 [ 2477.334978][ T6999] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 2477.340908][ T6999] ? bpf_lsm_capable+0x5/0x10 [ 2477.345620][ T6999] ? security_capable+0x85/0xb0 [ 2477.350532][ T6999] genl_rcv_msg+0x5f2/0x780 [ 2477.355185][ T6999] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2477.361363][ T6999] ? genl_bind+0x350/0x350 [ 2477.365860][ T6999] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 2477.372268][ T6999] ? netlink_rcv_skb+0x80/0x420 [ 2477.377169][ T6999] ? genl_bind+0x350/0x350 [ 2477.381629][ T6999] netlink_rcv_skb+0x1de/0x420 [ 2477.386449][ T6999] ? genl_bind+0x350/0x350 [ 2477.391003][ T6999] ? netlink_ack+0x1100/0x1100 [ 2477.395802][ T6999] ? down_read+0x1a8/0x2d0 [ 2477.400298][ T6999] genl_rcv+0x24/0x40 [ 2477.404333][ T6999] netlink_unicast+0x74d/0x8d0 [ 2477.409129][ T6999] netlink_sendmsg+0x89e/0xbc0 [ 2477.413922][ T6999] ? netlink_getsockopt+0x540/0x540 [ 2477.419142][ T6999] ? lockdep_hardirqs_on+0x94/0x140 [ 2477.424392][ T6999] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2477.430568][ T6999] ? aa_sock_msg_perm+0x94/0x150 [ 2477.435537][ T6999] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2477.440854][ T6999] ? security_socket_sendmsg+0x7c/0xa0 [ 2477.446396][ T6999] ? netlink_getsockopt+0x540/0x540 [ 2477.451658][ T6999] ____sys_sendmsg+0x59b/0x970 [ 2477.456571][ T6999] ? iovec_from_user+0x28e/0x360 [ 2477.461687][ T6999] ? __sys_sendmsg_sock+0x30/0x30 [ 2477.466762][ T6999] ? __import_iovec+0x315/0x500 [ 2477.471664][ T6999] ? import_iovec+0x6f/0xa0 [ 2477.476207][ T6999] ___sys_sendmsg+0x21c/0x290 [ 2477.481097][ T6999] ? __sys_sendmsg+0x270/0x270 [ 2477.486005][ T6999] ? __fdget+0x17c/0x200 [ 2477.490422][ T6999] __se_sys_sendmsg+0x19e/0x270 [ 2477.495300][ T6999] ? rcu_is_watching+0x11/0xa0 [ 2477.500104][ T6999] ? __x64_sys_sendmsg+0x80/0x80 [ 2477.505095][ T6999] do_syscall_64+0x4c/0xa0 [ 2477.509539][ T6999] ? clear_bhb_loop+0x60/0xb0 [ 2477.514324][ T6999] ? clear_bhb_loop+0x60/0xb0 [ 2477.519130][ T6999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2477.525066][ T6999] RIP: 0033:0x7ff3af18ebe9 [ 2477.529507][ T6999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2477.549147][ T6999] RSP: 002b:00007ff3affad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2477.557587][ T6999] RAX: ffffffffffffffda RBX: 00007ff3af3c5fa0 RCX: 00007ff3af18ebe9 [ 2477.565600][ T6999] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2477.575426][ T6999] RBP: 00007ff3af211e19 R08: 0000000000000000 R09: 0000000000000000 [ 2477.583872][ T6999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2477.591869][ T6999] R13: 00007ff3af3c6038 R14: 00007ff3af3c5fa0 R15: 00007ffce3952a88 [ 2477.599879][ T6999] [ 2478.461547][ T7025] netlink: 122896 bytes leftover after parsing attributes in process `syz.7.13349'. [ 2478.545940][ T7025] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2478.559432][ T7025] CPU: 1 PID: 7025 Comm: syz.7.13349 Not tainted syzkaller #0 [ 2478.566965][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2478.577074][ T7025] Call Trace: [ 2478.580481][ T7025] [ 2478.583445][ T7025] dump_stack_lvl+0x168/0x22e [ 2478.588211][ T7025] ? show_regs_print_info+0x12/0x12 [ 2478.593483][ T7025] ? load_image+0x3b0/0x3b0 [ 2478.598061][ T7025] sysfs_warn_dup+0x8a/0xa0 [ 2478.602617][ T7025] sysfs_do_create_link_sd+0xc0/0x110 [ 2478.608050][ T7025] device_add+0x7ed/0xfb0 [ 2478.612528][ T7025] wiphy_register+0x1e68/0x2bd0 [ 2478.617443][ T7025] ? cfg80211_event_work+0x40/0x40 [ 2478.622610][ T7025] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2478.628823][ T7025] ? ieee80211_register_hw+0x2854/0x38c0 [ 2478.634516][ T7025] ieee80211_register_hw+0x2c29/0x38c0 [ 2478.640036][ T7025] ? ieee80211_register_hw+0xec1/0x38c0 [ 2478.645725][ T7025] ? ieee80211_register_hw+0xec1/0x38c0 [ 2478.651341][ T7025] ? ieee80211_tasklet_handler+0x20/0x20 [ 2478.657051][ T7025] ? memset+0x1e/0x40 [ 2478.661109][ T7025] ? __hrtimer_init+0x186/0x270 [ 2478.666104][ T7025] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2478.671930][ T7025] hwsim_new_radio_nl+0xafa/0xce0 [ 2478.677067][ T7025] genl_family_rcv_msg_doit+0x22e/0x320 [ 2478.682686][ T7025] ? end_current_label_crit_section+0x170/0x170 [ 2478.689017][ T7025] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 2478.695080][ T7025] ? bpf_lsm_capable+0x5/0x10 [ 2478.699816][ T7025] ? security_capable+0x85/0xb0 [ 2478.704723][ T7025] genl_rcv_msg+0x5f2/0x780 [ 2478.709308][ T7025] ? genl_bind+0x350/0x350 [ 2478.713872][ T7025] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 2478.720368][ T7025] netlink_rcv_skb+0x1de/0x420 [ 2478.725199][ T7025] ? genl_bind+0x350/0x350 [ 2478.729733][ T7025] ? netlink_ack+0x1100/0x1100 [ 2478.734569][ T7025] ? down_read+0x1a8/0x2d0 [ 2478.739210][ T7025] genl_rcv+0x24/0x40 [ 2478.743258][ T7025] netlink_unicast+0x74d/0x8d0 [ 2478.748130][ T7025] netlink_sendmsg+0x89e/0xbc0 [ 2478.753048][ T7025] ? netlink_getsockopt+0x540/0x540 [ 2478.758277][ T7025] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 2478.763843][ T7025] ? aa_sock_msg_perm+0x94/0x150 [ 2478.768822][ T7025] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2478.774186][ T7025] ? security_socket_sendmsg+0x7c/0xa0 [ 2478.779821][ T7025] ? netlink_getsockopt+0x540/0x540 [ 2478.785330][ T7025] ____sys_sendmsg+0x59b/0x970 [ 2478.790266][ T7025] ? __sys_sendmsg_sock+0x30/0x30 [ 2478.795320][ T7025] ? __import_iovec+0x315/0x500 [ 2478.800210][ T7025] ? import_iovec+0x6f/0xa0 [ 2478.804776][ T7025] ___sys_sendmsg+0x21c/0x290 [ 2478.809607][ T7025] ? __sys_sendmsg+0x270/0x270 [ 2478.814607][ T7025] ? __fdget+0x17c/0x200 [ 2478.818937][ T7025] __se_sys_sendmsg+0x19e/0x270 [ 2478.823847][ T7025] ? perf_trace_preemptirq_template+0x287/0x330 [ 2478.830135][ T7025] ? __x64_sys_sendmsg+0x80/0x80 [ 2478.835135][ T7025] ? lockdep_hardirqs_on+0x94/0x140 [ 2478.840477][ T7025] do_syscall_64+0x4c/0xa0 [ 2478.844928][ T7025] ? clear_bhb_loop+0x60/0xb0 [ 2478.849632][ T7025] ? clear_bhb_loop+0x60/0xb0 [ 2478.854434][ T7025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2478.860376][ T7025] RIP: 0033:0x7fc81f58ebe9 [ 2478.864822][ T7025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2478.884553][ T7025] RSP: 002b:00007fc82045c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2478.893033][ T7025] RAX: ffffffffffffffda RBX: 00007fc81f7c5fa0 RCX: 00007fc81f58ebe9 [ 2478.901034][ T7025] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2478.909029][ T7025] RBP: 00007fc81f611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2478.917024][ T7025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2478.925109][ T7025] R13: 00007fc81f7c6038 R14: 00007fc81f7c5fa0 R15: 00007fffa343ed88 [ 2478.933132][ T7025] [ 2479.070213][ T7031] netlink: 'syz.8.13342': attribute type 2 has an invalid length. [ 2479.081646][ T7031] netlink: 164 bytes leftover after parsing attributes in process `syz.8.13342'. [ 2480.002518][ T7066] netlink: 'syz.5.13356': attribute type 33 has an invalid length. [ 2480.309964][ T7074] netlink: 122896 bytes leftover after parsing attributes in process `syz.8.13360'. [ 2480.325784][ T7074] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2480.334340][ T7074] CPU: 0 PID: 7074 Comm: syz.8.13360 Not tainted syzkaller #0 [ 2480.341827][ T7074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2480.351900][ T7074] Call Trace: [ 2480.355195][ T7074] [ 2480.358135][ T7074] dump_stack_lvl+0x168/0x22e [ 2480.362839][ T7074] ? show_regs_print_info+0x12/0x12 [ 2480.368065][ T7074] ? load_image+0x3b0/0x3b0 [ 2480.372597][ T7074] sysfs_warn_dup+0x8a/0xa0 [ 2480.377566][ T7074] sysfs_do_create_link_sd+0xc0/0x110 [ 2480.383004][ T7074] device_add+0x7ed/0xfb0 [ 2480.387378][ T7074] wiphy_register+0x1e68/0x2bd0 [ 2480.392272][ T7074] ? cfg80211_event_work+0x40/0x40 [ 2480.397424][ T7074] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2480.403612][ T7074] ieee80211_register_hw+0x2c29/0x38c0 [ 2480.409127][ T7074] ? ieee80211_register_hw+0xec1/0x38c0 [ 2480.414810][ T7074] ? ieee80211_register_hw+0xec1/0x38c0 [ 2480.420496][ T7074] ? ieee80211_tasklet_handler+0x20/0x20 [ 2480.426183][ T7074] ? memset+0x1e/0x40 [ 2480.430305][ T7074] ? __hrtimer_init+0x186/0x270 [ 2480.435473][ T7074] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2480.441239][ T7074] hwsim_new_radio_nl+0xafa/0xce0 [ 2480.446316][ T7074] genl_family_rcv_msg_doit+0x22e/0x320 [ 2480.451905][ T7074] ? end_current_label_crit_section+0x170/0x170 [ 2480.458190][ T7074] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 2480.464125][ T7074] ? bpf_lsm_capable+0x5/0x10 [ 2480.468846][ T7074] ? security_capable+0x85/0xb0 [ 2480.473748][ T7074] genl_rcv_msg+0x5f2/0x780 [ 2480.478295][ T7074] ? genl_bind+0x350/0x350 [ 2480.482750][ T7074] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 2480.489177][ T7074] ? lock_acquire+0x20f/0x490 [ 2480.493903][ T7074] netlink_rcv_skb+0x1de/0x420 [ 2480.498706][ T7074] ? genl_bind+0x350/0x350 [ 2480.503236][ T7074] ? netlink_ack+0x1100/0x1100 [ 2480.508039][ T7074] ? down_read+0x1a8/0x2d0 [ 2480.512502][ T7074] genl_rcv+0x24/0x40 [ 2480.516510][ T7074] netlink_unicast+0x74d/0x8d0 [ 2480.521312][ T7074] netlink_sendmsg+0x89e/0xbc0 [ 2480.526104][ T7074] ? netlink_getsockopt+0x540/0x540 [ 2480.531320][ T7074] ? aa_sock_msg_perm+0x94/0x150 [ 2480.536297][ T7074] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2480.541701][ T7074] ? security_socket_sendmsg+0x7c/0xa0 [ 2480.547282][ T7074] ? netlink_getsockopt+0x540/0x540 [ 2480.552584][ T7074] ____sys_sendmsg+0x59b/0x970 [ 2480.557392][ T7074] ? __sys_sendmsg_sock+0x30/0x30 [ 2480.562455][ T7074] ? __import_iovec+0x315/0x500 [ 2480.567335][ T7074] ? import_iovec+0x6f/0xa0 [ 2480.571874][ T7074] ___sys_sendmsg+0x21c/0x290 [ 2480.576574][ T7074] ? __sys_sendmsg+0x270/0x270 [ 2480.581409][ T7074] ? __fdget+0x17c/0x200 [ 2480.585672][ T7074] __se_sys_sendmsg+0x19e/0x270 [ 2480.590575][ T7074] ? __x64_sys_sendmsg+0x80/0x80 [ 2480.595636][ T7074] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2480.601558][ T7074] do_syscall_64+0x4c/0xa0 [ 2480.605988][ T7074] ? clear_bhb_loop+0x60/0xb0 [ 2480.610765][ T7074] ? clear_bhb_loop+0x60/0xb0 [ 2480.615543][ T7074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2480.621462][ T7074] RIP: 0033:0x7fb39cf8ebe9 [ 2480.625902][ T7074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2480.645610][ T7074] RSP: 002b:00007fb39dee6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2480.654136][ T7074] RAX: ffffffffffffffda RBX: 00007fb39d1c5fa0 RCX: 00007fb39cf8ebe9 [ 2480.662155][ T7074] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2480.670229][ T7074] RBP: 00007fb39d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 2480.678324][ T7074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2480.686343][ T7074] R13: 00007fb39d1c6038 R14: 00007fb39d1c5fa0 R15: 00007ffc2ee44bd8 [ 2480.694353][ T7074] [ 2481.260883][ T7078] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.13373'. [ 2481.267899][ T7085] netlink: 'syz.8.13374': attribute type 3 has an invalid length. [ 2481.299374][ T7085] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.13374'. [ 2481.335325][ T7078] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2481.352779][ T7078] CPU: 1 PID: 7078 Comm: syz.6.13373 Not tainted syzkaller #0 [ 2481.360326][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2481.370513][ T7078] Call Trace: [ 2481.373829][ T7078] [ 2481.376971][ T7078] dump_stack_lvl+0x168/0x22e [ 2481.381713][ T7078] ? show_regs_print_info+0x12/0x12 [ 2481.386962][ T7078] ? load_image+0x3b0/0x3b0 [ 2481.391546][ T7078] sysfs_warn_dup+0x8a/0xa0 [ 2481.396229][ T7078] sysfs_do_create_link_sd+0xc0/0x110 [ 2481.401744][ T7078] device_add+0x7ed/0xfb0 [ 2481.406133][ T7078] wiphy_register+0x1e68/0x2bd0 [ 2481.411264][ T7078] ? cfg80211_event_work+0x40/0x40 [ 2481.416431][ T7078] ? minstrel_ht_alloc+0x894/0xa20 [ 2481.421630][ T7078] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2481.427745][ T7078] ieee80211_register_hw+0x2c29/0x38c0 [ 2481.433237][ T7078] ? ieee80211_register_hw+0xec1/0x38c0 [ 2481.438800][ T7078] ? ieee80211_register_hw+0xec1/0x38c0 [ 2481.444474][ T7078] ? ieee80211_tasklet_handler+0x20/0x20 [ 2481.450164][ T7078] ? memset+0x1e/0x40 [ 2481.454244][ T7078] ? __hrtimer_init+0x186/0x270 [ 2481.459133][ T7078] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2481.464927][ T7078] hwsim_new_radio_nl+0xafa/0xce0 [ 2481.470004][ T7078] genl_family_rcv_msg_doit+0x22e/0x320 [ 2481.475605][ T7078] ? end_current_label_crit_section+0x170/0x170 [ 2481.481984][ T7078] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 2481.487911][ T7078] ? bpf_lsm_capable+0x5/0x10 [ 2481.492608][ T7078] ? security_capable+0x85/0xb0 [ 2481.497491][ T7078] genl_rcv_msg+0x5f2/0x780 [ 2481.502050][ T7078] ? perf_trace_preemptirq_template+0x287/0x330 [ 2481.508410][ T7078] ? genl_bind+0x350/0x350 [ 2481.512850][ T7078] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 2481.519221][ T7078] netlink_rcv_skb+0x1de/0x420 [ 2481.524020][ T7078] ? genl_bind+0x350/0x350 [ 2481.528465][ T7078] ? netlink_ack+0x1100/0x1100 [ 2481.533287][ T7078] ? down_read+0x1a8/0x2d0 [ 2481.537726][ T7078] genl_rcv+0x24/0x40 [ 2481.541730][ T7078] netlink_unicast+0x74d/0x8d0 [ 2481.546785][ T7078] netlink_sendmsg+0x89e/0xbc0 [ 2481.551579][ T7078] ? netlink_getsockopt+0x540/0x540 [ 2481.556828][ T7078] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2481.562129][ T7078] ? security_socket_sendmsg+0x7c/0xa0 [ 2481.567611][ T7078] ? netlink_getsockopt+0x540/0x540 [ 2481.572945][ T7078] ____sys_sendmsg+0x59b/0x970 [ 2481.577825][ T7078] ? __sys_sendmsg_sock+0x30/0x30 [ 2481.582980][ T7078] ? __import_iovec+0x315/0x500 [ 2481.587871][ T7078] ? import_iovec+0x6f/0xa0 [ 2481.592404][ T7078] ___sys_sendmsg+0x21c/0x290 [ 2481.597198][ T7078] ? __sys_sendmsg+0x270/0x270 [ 2481.602065][ T7078] ? __fdget+0x17c/0x200 [ 2481.606330][ T7078] __se_sys_sendmsg+0x19e/0x270 [ 2481.611202][ T7078] ? __x64_sys_sendmsg+0x80/0x80 [ 2481.616176][ T7078] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2481.622276][ T7078] do_syscall_64+0x4c/0xa0 [ 2481.626793][ T7078] ? clear_bhb_loop+0x60/0xb0 [ 2481.631481][ T7078] ? clear_bhb_loop+0x60/0xb0 [ 2481.636352][ T7078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2481.642455][ T7078] RIP: 0033:0x7ff3af18ebe9 [ 2481.646883][ T7078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2481.666519][ T7078] RSP: 002b:00007ff3affad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2481.674980][ T7078] RAX: ffffffffffffffda RBX: 00007ff3af3c5fa0 RCX: 00007ff3af18ebe9 [ 2481.683073][ T7078] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2481.691150][ T7078] RBP: 00007ff3af211e19 R08: 0000000000000000 R09: 0000000000000000 [ 2481.699148][ T7078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2481.707139][ T7078] R13: 00007ff3af3c6038 R14: 00007ff3af3c5fa0 R15: 00007ffce3952a88 [ 2481.715142][ T7078] [ 2483.157516][ T7125] netlink: 'syz.2.13379': attribute type 2 has an invalid length. [ 2483.175383][ T7125] netlink: 'syz.2.13379': attribute type 8 has an invalid length. [ 2483.183631][ T7125] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13379'. [ 2484.236888][ T7151] netlink: 'syz.6.13389': attribute type 33 has an invalid length. [ 2485.116691][ T7164] netlink: 'syz.6.13394': attribute type 2 has an invalid length. [ 2485.132732][ T7164] netlink: 'syz.6.13394': attribute type 8 has an invalid length. [ 2485.153325][ T7164] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13394'. [ 2485.403301][ T7169] netlink: 67 bytes leftover after parsing attributes in process `syz.5.13395'. [ 2486.170959][ T7191] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2486.200273][ T7187] netlink: 122896 bytes leftover after parsing attributes in process `syz.7.13401'. [ 2486.501940][ T7187] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2486.542001][ T7187] CPU: 0 PID: 7187 Comm: syz.7.13401 Not tainted syzkaller #0 [ 2486.549567][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2486.559687][ T7187] Call Trace: [ 2486.563007][ T7187] [ 2486.566040][ T7187] dump_stack_lvl+0x168/0x22e [ 2486.570774][ T7187] ? show_regs_print_info+0x12/0x12 [ 2486.576058][ T7187] ? load_image+0x3b0/0x3b0 [ 2486.580644][ T7187] ? memset_erms+0xe/0x10 [ 2486.585033][ T7187] sysfs_warn_dup+0x8a/0xa0 [ 2486.589585][ T7187] sysfs_do_create_link_sd+0xc0/0x110 [ 2486.595021][ T7187] device_add+0x7ed/0xfb0 [ 2486.599417][ T7187] wiphy_register+0x1e68/0x2bd0 [ 2486.604338][ T7187] ? cfg80211_event_work+0x40/0x40 [ 2486.609507][ T7187] ? minstrel_ht_alloc+0x894/0xa20 [ 2486.614679][ T7187] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2486.620811][ T7187] ieee80211_register_hw+0x2c29/0x38c0 [ 2486.626348][ T7187] ? ieee80211_register_hw+0xec1/0x38c0 [ 2486.631942][ T7187] ? ieee80211_register_hw+0xec1/0x38c0 [ 2486.637543][ T7187] ? ieee80211_tasklet_handler+0x20/0x20 [ 2486.643236][ T7187] ? memset+0x1e/0x40 [ 2486.647356][ T7187] ? __hrtimer_init+0x186/0x270 [ 2486.652336][ T7187] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2486.658216][ T7187] hwsim_new_radio_nl+0xafa/0xce0 [ 2486.663315][ T7187] genl_family_rcv_msg_doit+0x22e/0x320 [ 2486.668952][ T7187] ? end_current_label_crit_section+0x170/0x170 [ 2486.675346][ T7187] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 2486.681360][ T7187] ? bpf_lsm_capable+0x5/0x10 [ 2486.686097][ T7187] ? security_capable+0x85/0xb0 [ 2486.691001][ T7187] genl_rcv_msg+0x5f2/0x780 [ 2486.695564][ T7187] ? genl_bind+0x350/0x350 [ 2486.700039][ T7187] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 2486.706438][ T7187] ? lock_acquire+0x20f/0x490 [ 2486.711197][ T7187] netlink_rcv_skb+0x1de/0x420 [ 2486.716138][ T7187] ? genl_bind+0x350/0x350 [ 2486.720645][ T7187] ? netlink_ack+0x1100/0x1100 [ 2486.725456][ T7187] ? lockdep_hardirqs_on+0x94/0x140 [ 2486.730746][ T7187] ? down_read+0x1a8/0x2d0 [ 2486.735221][ T7187] genl_rcv+0x24/0x40 [ 2486.739268][ T7187] netlink_unicast+0x74d/0x8d0 [ 2486.744090][ T7187] netlink_sendmsg+0x89e/0xbc0 [ 2486.748947][ T7187] ? netlink_getsockopt+0x540/0x540 [ 2486.754211][ T7187] ? aa_sock_msg_perm+0x94/0x150 [ 2486.759211][ T7187] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2486.764549][ T7187] ? security_socket_sendmsg+0x7c/0xa0 [ 2486.770089][ T7187] ? netlink_getsockopt+0x540/0x540 [ 2486.775436][ T7187] ____sys_sendmsg+0x59b/0x970 [ 2486.780379][ T7187] ? __sys_sendmsg_sock+0x30/0x30 [ 2486.785470][ T7187] ? __import_iovec+0x315/0x500 [ 2486.790496][ T7187] ? import_iovec+0x6f/0xa0 [ 2486.795081][ T7187] ___sys_sendmsg+0x21c/0x290 [ 2486.799833][ T7187] ? __sys_sendmsg+0x270/0x270 [ 2486.804809][ T7187] ? __fdget+0x17c/0x200 [ 2486.809112][ T7187] __se_sys_sendmsg+0x19e/0x270 [ 2486.814098][ T7187] ? rcu_is_watching+0x11/0xa0 [ 2486.818935][ T7187] ? __x64_sys_sendmsg+0x80/0x80 [ 2486.823978][ T7187] do_syscall_64+0x4c/0xa0 [ 2486.828452][ T7187] ? clear_bhb_loop+0x60/0xb0 [ 2486.833194][ T7187] ? clear_bhb_loop+0x60/0xb0 [ 2486.837920][ T7187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2486.843883][ T7187] RIP: 0033:0x7fc81f58ebe9 [ 2486.848431][ T7187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2486.868176][ T7187] RSP: 002b:00007fc82045c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2486.876908][ T7187] RAX: ffffffffffffffda RBX: 00007fc81f7c5fa0 RCX: 00007fc81f58ebe9 [ 2486.884937][ T7187] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2486.892962][ T7187] RBP: 00007fc81f611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2486.900993][ T7187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2486.909190][ T7187] R13: 00007fc81f7c6038 R14: 00007fc81f7c5fa0 R15: 00007fffa343ed88 [ 2486.918118][ T7187] [ 2487.277513][ T7197] netlink: 'syz.5.13403': attribute type 2 has an invalid length. [ 2487.286819][ T7197] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13403'. [ 2490.404295][ T7239] netlink: 122896 bytes leftover after parsing attributes in process `syz.8.13420'. [ 2490.513929][ T7239] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2490.532658][ T7239] CPU: 1 PID: 7239 Comm: syz.8.13420 Not tainted syzkaller #0 [ 2490.540202][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2490.550390][ T7239] Call Trace: [ 2490.553717][ T7239] [ 2490.556691][ T7239] dump_stack_lvl+0x168/0x22e [ 2490.561441][ T7239] ? show_regs_print_info+0x12/0x12 [ 2490.566700][ T7239] ? load_image+0x3b0/0x3b0 [ 2490.571282][ T7239] sysfs_warn_dup+0x8a/0xa0 [ 2490.575843][ T7239] sysfs_do_create_link_sd+0xc0/0x110 [ 2490.581275][ T7239] device_add+0x7ed/0xfb0 [ 2490.585672][ T7239] wiphy_register+0x1e68/0x2bd0 [ 2490.590585][ T7239] ? cfg80211_event_work+0x40/0x40 [ 2490.595723][ T7239] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2490.601931][ T7239] ieee80211_register_hw+0x2c29/0x38c0 [ 2490.607425][ T7239] ? ieee80211_register_hw+0xec1/0x38c0 [ 2490.612993][ T7239] ? ieee80211_register_hw+0xec1/0x38c0 [ 2490.618653][ T7239] ? ieee80211_tasklet_handler+0x20/0x20 [ 2490.624312][ T7239] ? memset+0x1e/0x40 [ 2490.628324][ T7239] ? __hrtimer_init+0x186/0x270 [ 2490.633208][ T7239] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2490.639063][ T7239] hwsim_new_radio_nl+0xafa/0xce0 [ 2490.644120][ T7239] genl_family_rcv_msg_doit+0x22e/0x320 [ 2490.649689][ T7239] ? end_current_label_crit_section+0x170/0x170 [ 2490.655962][ T7239] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 2490.661887][ T7239] ? bpf_lsm_capable+0x5/0x10 [ 2490.666585][ T7239] ? security_capable+0x85/0xb0 [ 2490.671458][ T7239] genl_rcv_msg+0x5f2/0x780 [ 2490.675981][ T7239] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2490.682156][ T7239] ? genl_bind+0x350/0x350 [ 2490.686609][ T7239] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 2490.692975][ T7239] netlink_rcv_skb+0x1de/0x420 [ 2490.697778][ T7239] ? genl_bind+0x350/0x350 [ 2490.702213][ T7239] ? netlink_ack+0x1100/0x1100 [ 2490.707010][ T7239] ? down_read+0x1a8/0x2d0 [ 2490.711450][ T7239] genl_rcv+0x24/0x40 [ 2490.715453][ T7239] netlink_unicast+0x74d/0x8d0 [ 2490.720288][ T7239] netlink_sendmsg+0x89e/0xbc0 [ 2490.725073][ T7239] ? lockdep_hardirqs_on+0x94/0x140 [ 2490.730292][ T7239] ? netlink_getsockopt+0x540/0x540 [ 2490.735524][ T7239] ? netlink_getsockopt+0x540/0x540 [ 2490.740746][ T7239] ? netlink_getsockopt+0x540/0x540 [ 2490.745963][ T7239] ____sys_sendmsg+0x59b/0x970 [ 2490.750782][ T7239] ? __sys_sendmsg_sock+0x30/0x30 [ 2490.755886][ T7239] ? __import_iovec+0x315/0x500 [ 2490.760788][ T7239] ? import_iovec+0x6f/0xa0 [ 2490.765358][ T7239] ___sys_sendmsg+0x21c/0x290 [ 2490.770084][ T7239] ? __sys_sendmsg+0x270/0x270 [ 2490.774882][ T7239] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 2490.780989][ T7239] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2490.787185][ T7239] ? __x64_sys_sendmsg+0x61/0x80 [ 2490.792157][ T7239] ? __se_sys_sendmsg+0xcd/0x270 [ 2490.797180][ T7239] ? kasan_check_range+0x77/0x290 [ 2490.802234][ T7239] __se_sys_sendmsg+0x19e/0x270 [ 2490.807165][ T7239] ? __x64_sys_sendmsg+0x80/0x80 [ 2490.812184][ T7239] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2490.818134][ T7239] do_syscall_64+0x4c/0xa0 [ 2490.822922][ T7239] ? clear_bhb_loop+0x60/0xb0 [ 2490.827638][ T7239] ? clear_bhb_loop+0x60/0xb0 [ 2490.832375][ T7239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2490.838307][ T7239] RIP: 0033:0x7fb39cf8ebe9 [ 2490.842742][ T7239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2490.862369][ T7239] RSP: 002b:00007fb39dee6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2490.870813][ T7239] RAX: ffffffffffffffda RBX: 00007fb39d1c5fa0 RCX: 00007fb39cf8ebe9 [ 2490.878903][ T7239] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2490.887069][ T7239] RBP: 00007fb39d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 2490.895081][ T7239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2490.903085][ T7239] R13: 00007fb39d1c6038 R14: 00007fb39d1c5fa0 R15: 00007ffc2ee44bd8 [ 2490.911184][ T7239] [ 2491.132485][ T7248] netlink: 'syz.7.13431': attribute type 33 has an invalid length. [ 2496.568412][ T7369] netlink: 'syz.6.13465': attribute type 10 has an invalid length. [ 2496.585395][ T7369] netlink: 2 bytes leftover after parsing attributes in process `syz.6.13465'. [ 2496.599378][ T7369] 8021q: adding VLAN 0 to HW filter on device team0 [ 2496.619761][ T7369] bond0: (slave team0): Releasing backup interface [ 2497.023266][ T7387] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2499.461061][ T7427] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2499.532015][ T7427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2499.567983][ T7428] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2502.261344][ T7470] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2502.451674][ T7481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2502.459284][ T7481] IPv6: NLM_F_CREATE should be set when creating new route [ 2502.466987][ T7481] IPv6: NLM_F_CREATE should be set when creating new route [ 2502.474602][ T7481] IPv6: NLM_F_CREATE should be set when creating new route [ 2506.974963][ T7525] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2508.043561][ T7539] netlink: 122896 bytes leftover after parsing attributes in process `syz.7.13545'. [ 2508.115422][ T7539] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2508.124268][ T7539] CPU: 0 PID: 7539 Comm: syz.7.13545 Not tainted syzkaller #0 [ 2508.131788][ T7539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2508.141931][ T7539] Call Trace: [ 2508.145242][ T7539] [ 2508.148211][ T7539] dump_stack_lvl+0x168/0x22e [ 2508.152941][ T7539] ? show_regs_print_info+0x12/0x12 [ 2508.158189][ T7539] ? load_image+0x3b0/0x3b0 [ 2508.162764][ T7539] sysfs_warn_dup+0x8a/0xa0 [ 2508.167318][ T7539] sysfs_do_create_link_sd+0xc0/0x110 [ 2508.172740][ T7539] device_add+0x7ed/0xfb0 [ 2508.177127][ T7539] wiphy_register+0x1e68/0x2bd0 [ 2508.182046][ T7539] ? cfg80211_event_work+0x40/0x40 [ 2508.187199][ T7539] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2508.193417][ T7539] ieee80211_register_hw+0x2c29/0x38c0 [ 2508.198939][ T7539] ? ieee80211_register_hw+0xec1/0x38c0 [ 2508.204565][ T7539] ? ieee80211_register_hw+0xec1/0x38c0 [ 2508.210636][ T7539] ? ieee80211_tasklet_handler+0x20/0x20 [ 2508.216325][ T7539] ? memset+0x1e/0x40 [ 2508.220360][ T7539] ? __hrtimer_init+0x186/0x270 [ 2508.225264][ T7539] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2508.231072][ T7539] hwsim_new_radio_nl+0xafa/0xce0 [ 2508.236208][ T7539] genl_family_rcv_msg_doit+0x22e/0x320 [ 2508.241804][ T7539] ? end_current_label_crit_section+0x170/0x170 [ 2508.248106][ T7539] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 2508.254037][ T7539] ? bpf_lsm_capable+0x5/0x10 [ 2508.258737][ T7539] ? security_capable+0x85/0xb0 [ 2508.263630][ T7539] genl_rcv_msg+0x5f2/0x780 [ 2508.268172][ T7539] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 2508.274102][ T7539] ? genl_bind+0x350/0x350 [ 2508.278647][ T7539] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 2508.285023][ T7539] netlink_rcv_skb+0x1de/0x420 [ 2508.289825][ T7539] ? genl_bind+0x350/0x350 [ 2508.294268][ T7539] ? netlink_ack+0x1100/0x1100 [ 2508.299080][ T7539] ? lockdep_hardirqs_on+0x94/0x140 [ 2508.304312][ T7539] ? down_read+0x1a8/0x2d0 [ 2508.308794][ T7539] genl_rcv+0x24/0x40 [ 2508.312798][ T7539] netlink_unicast+0x74d/0x8d0 [ 2508.317587][ T7539] netlink_sendmsg+0x89e/0xbc0 [ 2508.322376][ T7539] ? netlink_getsockopt+0x540/0x540 [ 2508.327605][ T7539] ? aa_sock_msg_perm+0x94/0x150 [ 2508.332572][ T7539] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2508.337966][ T7539] ? security_socket_sendmsg+0x7c/0xa0 [ 2508.343450][ T7539] ? netlink_getsockopt+0x540/0x540 [ 2508.348668][ T7539] ____sys_sendmsg+0x59b/0x970 [ 2508.353464][ T7539] ? __sys_sendmsg_sock+0x30/0x30 [ 2508.358593][ T7539] ? __import_iovec+0x315/0x500 [ 2508.363479][ T7539] ? import_iovec+0x6f/0xa0 [ 2508.368009][ T7539] ___sys_sendmsg+0x21c/0x290 [ 2508.372705][ T7539] ? __sys_sendmsg+0x270/0x270 [ 2508.377530][ T7539] ? ktime_get_real_ts64+0x420/0x420 [ 2508.382854][ T7539] ? __fdget+0x17c/0x200 [ 2508.387117][ T7539] __se_sys_sendmsg+0x19e/0x270 [ 2508.392004][ T7539] ? perf_trace_preemptirq_template+0x287/0x330 [ 2508.398369][ T7539] ? __x64_sys_sendmsg+0x80/0x80 [ 2508.403342][ T7539] ? lockdep_hardirqs_on+0x94/0x140 [ 2508.408576][ T7539] do_syscall_64+0x4c/0xa0 [ 2508.413008][ T7539] ? clear_bhb_loop+0x60/0xb0 [ 2508.417697][ T7539] ? clear_bhb_loop+0x60/0xb0 [ 2508.422401][ T7539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2508.428322][ T7539] RIP: 0033:0x7fc81f58ebe9 [ 2508.432803][ T7539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2508.452429][ T7539] RSP: 002b:00007fc82045c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2508.460865][ T7539] RAX: ffffffffffffffda RBX: 00007fc81f7c5fa0 RCX: 00007fc81f58ebe9 [ 2508.468852][ T7539] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2508.476933][ T7539] RBP: 00007fc81f611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2508.484943][ T7539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2508.492953][ T7539] R13: 00007fc81f7c6038 R14: 00007fc81f7c5fa0 R15: 00007fffa343ed88 [ 2508.500982][ T7539] [ 2510.057190][ T7557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2510.064757][ T7557] IPv6: NLM_F_CREATE should be set when creating new route [ 2510.072391][ T7557] IPv6: NLM_F_CREATE should be set when creating new route [ 2510.079999][ T7557] IPv6: NLM_F_CREATE should be set when creating new route [ 2510.123520][ T7559] netlink: 'syz.7.13540': attribute type 9 has an invalid length. [ 2510.136100][ T7559] netlink: 61951 bytes leftover after parsing attributes in process `syz.7.13540'. [ 2510.219932][ T7566] netlink: 126632 bytes leftover after parsing attributes in process `syz.6.13541'. [ 2519.725061][ T7696] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2519.811732][ T7696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2520.154107][ T7705] device ipvlan1 entered promiscuous mode [ 2520.328195][ T7710] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2520.453177][ T7710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2527.470263][ T7772] netlink: 'syz.7.13622': attribute type 13 has an invalid length. [ 2527.567503][ T7772] netlink: 164 bytes leftover after parsing attributes in process `syz.7.13622'. [ 2529.070673][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.077152][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2530.159776][ T7817] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13632'. [ 2530.209601][ T7821] netlink: 'syz.5.13634': attribute type 10 has an invalid length. [ 2530.827364][T31626] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 2531.673195][ T7852] netlink: 'syz.7.13648': attribute type 10 has an invalid length. [ 2532.201427][T31626] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4 [ 2532.603539][ T7875] netlink: 152 bytes leftover after parsing attributes in process `syz.5.13659'. [ 2533.077606][ T7889] netlink: 'syz.8.13664': attribute type 10 has an invalid length. [ 2533.127894][ T7894] netlink: 10 bytes leftover after parsing attributes in process `syz.7.13663'. [ 2534.732114][ T7928] netlink: 'syz.6.13686': attribute type 4 has an invalid length. [ 2534.758949][ T7928] netlink: 152 bytes leftover after parsing attributes in process `syz.6.13686'. [ 2534.893694][ T7928] wlan1: mtu less than device minimum [ 2536.193915][ T7961] netlink: 152 bytes leftover after parsing attributes in process `syz.7.13684'. [ 2537.734448][ T7989] netlink: 'syz.7.13700': attribute type 4 has an invalid length. [ 2537.746629][ T7989] netlink: 152 bytes leftover after parsing attributes in process `syz.7.13700'. [ 2537.891412][ T7989] wlan1: mtu less than device minimum [ 2537.897762][ T7989] team0: Device wlan1 failed to change mtu [ 2538.318409][ T8001] netlink: 152 bytes leftover after parsing attributes in process `syz.6.13706'. [ 2541.280806][ T8073] netlink: 152 bytes leftover after parsing attributes in process `syz.8.13728'. [ 2541.383719][ T8078] delete_channel: no stack [ 2541.404781][ T8080] netlink: 10 bytes leftover after parsing attributes in process `syz.2.13729'. [ 2542.329596][ T8086] netlink: 'syz.6.13743': attribute type 3 has an invalid length. [ 2542.374695][ T8086] netlink: 118424 bytes leftover after parsing attributes in process `syz.6.13743'. [ 2542.431990][ T8086] netlink: 'syz.6.13743': attribute type 39 has an invalid length. [ 2542.855657][ T8101] netlink: 22 bytes leftover after parsing attributes in process `syz.5.13737'. [ 2543.324090][ T8116] netlink: 152 bytes leftover after parsing attributes in process `syz.6.13745'. [ 2543.623372][ T8127] netlink: 1 bytes leftover after parsing attributes in process `syz.8.13750'. [ 2543.753778][ T8131] netlink: 'syz.2.13752': attribute type 3 has an invalid length. [ 2543.812046][ T8131] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.13752'. [ 2543.877823][ T8131] netlink: 'syz.2.13752': attribute type 39 has an invalid length. [ 2544.945897][ T8157] delete_channel: no stack [ 2545.005814][ T8153] netlink: 'syz.5.13761': attribute type 4 has an invalid length. [ 2545.048711][ T8153] netlink: 152 bytes leftover after parsing attributes in process `syz.5.13761'. [ 2545.876932][ T8153] netlink: 6 bytes leftover after parsing attributes in process `syz.5.13761'. [ 2545.895735][ T8153] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2546.511403][ T8181] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13771'. [ 2546.774991][ T8191] netlink: 10 bytes leftover after parsing attributes in process `syz.6.13772'. [ 2547.757390][ T8208] netlink: 'syz.6.13792': attribute type 10 has an invalid length. [ 2548.599112][ T8222] netlink: 'syz.8.13787': attribute type 3 has an invalid length. [ 2548.611584][ T8222] netlink: 118424 bytes leftover after parsing attributes in process `syz.8.13787'. [ 2548.641483][ T8222] netlink: 'syz.8.13787': attribute type 39 has an invalid length. [ 2548.952412][ T8231] netlink: 'syz.7.13791': attribute type 2 has an invalid length. [ 2549.001762][ T8231] netlink: 'syz.7.13791': attribute type 8 has an invalid length. [ 2549.045900][ T8231] netlink: 132 bytes leftover after parsing attributes in process `syz.7.13791'. [ 2549.109409][ T8235] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13793'. [ 2549.222699][ T8236] netlink: 10 bytes leftover after parsing attributes in process `syz.8.13790'. [ 2549.708885][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13802'. [ 2550.685197][ T8279] netlink: 10 bytes leftover after parsing attributes in process `syz.5.13811'. [ 2550.921799][ T8288] netlink: 'syz.8.13816': attribute type 2 has an invalid length. [ 2550.936639][ T8288] netlink: 'syz.8.13816': attribute type 8 has an invalid length. [ 2550.956541][ T8288] netlink: 132 bytes leftover after parsing attributes in process `syz.8.13816'. [ 2551.065158][ T8294] netlink: 'syz.7.13817': attribute type 10 has an invalid length. [ 2551.185305][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13819'. [ 2551.221544][ T8300] netlink: 152 bytes leftover after parsing attributes in process `syz.8.13821'. [ 2551.439527][ T8309] netlink: 10 bytes leftover after parsing attributes in process `syz.7.13832'. [ 2552.810919][ T8343] netlink: 'syz.8.13834': attribute type 10 has an invalid length. [ 2552.916262][ T8348] netlink: 'syz.6.13833': attribute type 2 has an invalid length. [ 2552.934553][ T8348] netlink: 'syz.6.13833': attribute type 8 has an invalid length. [ 2555.433319][ T8401] __nla_validate_parse: 4 callbacks suppressed [ 2555.433418][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13852'. [ 2555.553923][ T8407] netlink: 152 bytes leftover after parsing attributes in process `syz.8.13856'. [ 2555.781249][ T8415] netlink: 10 bytes leftover after parsing attributes in process `syz.7.13857'. [ 2556.679445][ T8435] netlink: 'syz.5.13866': attribute type 2 has an invalid length. [ 2556.708562][ T8435] netlink: 'syz.5.13866': attribute type 8 has an invalid length. [ 2556.752232][ T8435] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13866'. [ 2558.098432][ T8461] netlink: 124 bytes leftover after parsing attributes in process `syz.8.13877'. [ 2558.891167][ T8481] netdevsim netdevsim8: Direct firmware load for failed with error -2 [ 2558.915155][ T8481] netdevsim netdevsim8: Falling back to sysfs fallback for: [ 2560.485399][ T8519] netlink: 152 bytes leftover after parsing attributes in process `syz.7.13900'. [ 2562.043930][ T8542] netdevsim netdevsim6: Direct firmware load for failed with error -2 [ 2562.070509][ T8542] netdevsim netdevsim6: Falling back to sysfs fallback for: [ 2564.054169][ T8587] netlink: 'syz.7.13931': attribute type 10 has an invalid length. [ 2565.229500][ T8587] device hsr_slave_0 left promiscuous mode [ 2567.763074][ T8587] team0: Port device hsr_slave_0 removed [ 2568.080313][ T8616] delete_channel: no stack [ 2568.144268][ T8621] netlink: 'syz.8.13930': attribute type 1 has an invalid length. [ 2568.319363][ T8625] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 2568.434471][ T8625] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 2568.977128][ T8644] netlink: 152 bytes leftover after parsing attributes in process `syz.7.13937'. [ 2569.553330][ T8652] netlink: 'syz.2.13940': attribute type 10 has an invalid length. [ 2569.621635][ T8654] netdevsim netdevsim5: Direct firmware load for failed with error -2 [ 2569.636767][ T8654] netdevsim netdevsim5: Falling back to sysfs fallback for: [ 2569.911027][ T8656] netlink: 124 bytes leftover after parsing attributes in process `syz.6.13942'. [ 2569.998042][ T8660] netlink: 'syz.2.13944': attribute type 10 has an invalid length. [ 2570.241382][ T8666] delete_channel: no stack [ 2570.279273][ T8660] device hsr_slave_0 left promiscuous mode [ 2571.884085][ T8684] netlink: 132 bytes leftover after parsing attributes in process `syz.8.13951'. [ 2572.571101][ T8696] netdevsim netdevsim7: Direct firmware load for failed with error -2 [ 2572.580029][ T8700] netlink: 124 bytes leftover after parsing attributes in process `syz.5.13956'. [ 2572.606818][ T8696] netdevsim netdevsim7: Falling back to sysfs fallback for: [ 2572.965186][ T8703] netlink: 'syz.8.13957': attribute type 10 has an invalid length. [ 2573.069082][ T8705] delete_channel: no stack [ 2573.142565][ T8707] netlink: 152 bytes leftover after parsing attributes in process `syz.5.13959'. [ 2573.341736][ T8711] netdevsim netdevsim7: Direct firmware load for failed with error -2 [ 2573.352218][ T8711] netdevsim netdevsim7: Falling back to sysfs fallback for: [ 2574.191341][ T8730] netlink: 'syz.8.13965': attribute type 10 has an invalid length. [ 2575.260153][ T8730] device hsr_slave_0 left promiscuous mode [ 2575.387121][ T8741] netlink: 'syz.2.13969': attribute type 2 has an invalid length. [ 2575.510438][ T8741] device 5 entered promiscuous mode [ 2575.609707][ T8747] delete_channel: no stack [ 2575.787590][ T8754] netdevsim netdevsim5: Direct firmware load for failed with error -2 [ 2575.830149][ T8754] netdevsim netdevsim5: Falling back to sysfs fallback for: [ 2575.846945][ T8752] netlink: 'syz.7.13975': attribute type 10 has an invalid length. [ 2575.934078][T31626] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 2575.950758][ T8762] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13977'. [ 2576.583204][ T8777] netlink: 152 bytes leftover after parsing attributes in process `syz.6.13984'. [ 2576.808831][ T8788] netlink: 'syz.8.13987': attribute type 2 has an invalid length. [ 2576.925604][ T8788] device 5 entered promiscuous mode [ 2576.937909][ T8790] netlink: 'syz.5.13985': attribute type 10 has an invalid length. [ 2577.919238][T31626] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8 [ 2577.932996][ T8797] netlink: 'syz.8.14001': attribute type 4 has an invalid length. [ 2577.990496][ T8797] netlink: 152 bytes leftover after parsing attributes in process `syz.8.14001'. [ 2578.010444][ T8797] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2578.022783][ T8801] delete_channel: no stack [ 2578.085055][ T8803] netlink: 'syz.6.13990': attribute type 10 has an invalid length. [ 2578.242826][ T8807] netlink: 'syz.7.14005': attribute type 1 has an invalid length. [ 2579.864157][ T8834] netlink: 'syz.6.14003': attribute type 10 has an invalid length. [ 2580.075205][ T8840] delete_channel: no stack [ 2580.625964][ T8834] device hsr_slave_0 left promiscuous mode [ 2580.632307][T31626] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 2581.137454][ T8848] netlink: 'syz.5.14009': attribute type 10 has an invalid length. [ 2581.771186][ T8869] netlink: 'syz.7.14018': attribute type 10 has an invalid length. [ 2581.942889][ T8875] delete_channel: no stack [ 2582.327214][ T8888] netlink: 124 bytes leftover after parsing attributes in process `syz.7.14024'. [ 2582.900124][ T8908] delete_channel: no stack [ 2583.541653][ T8925] netlink: 'syz.5.14046': attribute type 2 has an invalid length. [ 2583.556237][ T8919] netlink: 124 bytes leftover after parsing attributes in process `syz.2.14043'. [ 2583.722678][ T8925] device 2 entered promiscuous mode [ 2584.232533][ T8939] netlink: 'syz.5.14062': attribute type 10 has an invalid length. [ 2584.556287][ T8952] netlink: 132 bytes leftover after parsing attributes in process `syz.7.14065'. [ 2585.729371][ T8972] netlink: 'syz.6.14063': attribute type 2 has an invalid length. [ 2585.901871][ T8972] device 3 entered promiscuous mode [ 2586.334995][ T8993] netlink: 60 bytes leftover after parsing attributes in process `syz.8.14073'. [ 2586.363720][ T8993] netlink: 60 bytes leftover after parsing attributes in process `syz.8.14073'. [ 2586.373782][ T8991] netlink: 60 bytes leftover after parsing attributes in process `syz.8.14073'. [ 2586.389469][ T8995] netlink: 60 bytes leftover after parsing attributes in process `syz.8.14073'. [ 2586.463899][ T8993] netlink: 'syz.8.14073': attribute type 10 has an invalid length. [ 2586.482262][ T8993] netlink: 168 bytes leftover after parsing attributes in process `syz.8.14073'. [ 2588.375829][ T9040] netlink: 124 bytes leftover after parsing attributes in process `syz.7.14093'. [ 2588.690851][ T9049] delete_channel: no stack [ 2589.179612][ T9070] netlink: 132 bytes leftover after parsing attributes in process `syz.6.14104'. [ 2590.510211][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.516705][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2592.425659][ T9089] netlink: 124 bytes leftover after parsing attributes in process `syz.5.14111'. [ 2593.651782][ T9111] delete_channel: no stack [ 2594.280753][ T9131] netlink: 124 bytes leftover after parsing attributes in process `syz.7.14129'. [ 2596.164119][ T9169] netlink: 124 bytes leftover after parsing attributes in process `syz.2.14148'. [ 2596.456745][ T9181] delete_channel: no stack [ 2597.386037][ T9208] netlink: 124 bytes leftover after parsing attributes in process `syz.7.14163'. [ 2600.133782][ T9219] delete_channel: no stack [ 2600.529120][ T9241] IPv6: Can't replace route, no match found [ 2600.542987][ T9241] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2600.560263][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14178'. [ 2602.353046][ T9289] IPv6: Can't replace route, no match found [ 2602.373102][ T9289] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2602.524259][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14196'. [ 2603.432066][ T9313] netlink: 830 bytes leftover after parsing attributes in process `syz.7.14207'. [ 2606.200709][ T9380] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2607.641768][ T9408] netlink: 60 bytes leftover after parsing attributes in process `syz.7.14247'. [ 2607.707372][ T9408] netlink: 60 bytes leftover after parsing attributes in process `syz.7.14247'. [ 2607.742069][ T9411] netlink: 60 bytes leftover after parsing attributes in process `syz.7.14247'. [ 2609.796009][ T9442] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14260'. [ 2609.818381][ T9442] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14260'. [ 2609.845844][ T9442] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14260'. [ 2610.836807][ T9467] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2611.841204][ T9480] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14274'. [ 2611.966795][ T9480] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14274'. [ 2612.026875][ T9481] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14274'. [ 2612.145181][ T9486] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2613.242553][ T9506] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2614.159852][ T9523] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2614.787533][ T9541] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2616.212399][ T9561] netlink: 60 bytes leftover after parsing attributes in process `syz.8.14313'. [ 2616.244429][ T9563] mac80211_hwsim hwsim39 : renamed from wlan0 [ 2616.293781][ T9561] netlink: 60 bytes leftover after parsing attributes in process `syz.8.14313'. [ 2616.347489][ T9566] netlink: 60 bytes leftover after parsing attributes in process `syz.8.14313'. [ 2616.412009][ T9565] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2616.858718][T31626] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5 [ 2617.889125][ T9600] device syzkaller0 entered promiscuous mode [ 2617.899655][ T9606] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2617.941679][ T9611] netlink: 'syz.8.14340': attribute type 39 has an invalid length. [ 2618.612315][T31626] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5 [ 2622.082084][ T9661] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.14351'. [ 2622.190170][ T9665] device syzkaller0 entered promiscuous mode [ 2625.738266][ T9708] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.14369'. [ 2626.432959][ T9728] netlink: 44 bytes leftover after parsing attributes in process `syz.8.14374'. [ 2627.734299][ T9749] device syzkaller0 entered promiscuous mode [ 2631.293189][ T9799] netlink: 14601 bytes leftover after parsing attributes in process `syz.8.14398'. [ 2631.301724][ T9794] netlink: 'syz.8.14398': attribute type 3 has an invalid length. [ 2631.319385][ T9794] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.14398'. [ 2633.568730][ T9861] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.14423'. [ 2633.590389][ T9861] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.14423'. [ 2633.603863][ T9861] netlink: 3 bytes leftover after parsing attributes in process `syz.2.14423'. [ 2634.114223][ T9875] : renamed from vlan1 [ 2634.289032][ T9884] IPv6: NLM_F_CREATE should be specified when creating new route [ 2636.405958][ T9946] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2637.456215][ T9978] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.14472'. [ 2637.465578][ T9977] netlink: 'syz.2.14472': attribute type 3 has an invalid length. [ 2637.465646][ T9977] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.14472'. [ 2637.737217][ T9986] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.14476'. [ 2637.757564][ T9986] netlink: 6324 bytes leftover after parsing attributes in process `syz.7.14476'. [ 2637.791424][ T9986] netlink: 3 bytes leftover after parsing attributes in process `syz.7.14476'. [ 2638.769299][T10016] netlink: 'syz.7.14490': attribute type 3 has an invalid length. [ 2638.803633][T10019] netlink: 14601 bytes leftover after parsing attributes in process `syz.7.14490'. [ 2638.821180][T10016] netlink: 199824 bytes leftover after parsing attributes in process `syz.7.14490'. [ 2639.114265][T10033] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.14497'. [ 2639.136579][T10033] netlink: 6324 bytes leftover after parsing attributes in process `syz.8.14497'. [ 2639.146704][T10033] netlink: 3 bytes leftover after parsing attributes in process `syz.8.14497'. [ 2640.914818][T10093] netlink: 'syz.5.14524': attribute type 10 has an invalid length. [ 2640.924696][T10093] 8021q: adding VLAN 0 to HW filter on device team0 [ 2640.941529][T10093] bond0: (slave team0): Releasing backup interface [ 2641.014637][T10093] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2645.038772][T10228] : port 3(ip6gretap0) entered blocking state [ 2645.045512][T10228] : port 3(ip6gretap0) entered disabled state [ 2645.080725][T10228] device ip6gretap0 entered promiscuous mode [ 2645.285723][T10235] netlink: 'syz.7.14586': attribute type 13 has an invalid length. [ 2645.309113][T10235] __nla_validate_parse: 5 callbacks suppressed [ 2645.309196][T10235] netlink: 24859 bytes leftover after parsing attributes in process `syz.7.14586'. [ 2646.605993][T10276] netlink: 'syz.6.14606': attribute type 3 has an invalid length. [ 2646.628945][T10276] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.14606'. [ 2646.696022][T10281] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.14606'. [ 2647.136696][T10294] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2648.482723][T10326] netlink: 'syz.5.14627': attribute type 3 has an invalid length. [ 2648.492725][T10326] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.14627'. [ 2648.581168][T10326] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.14627'. [ 2650.254697][T10381] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2651.535527][T10426] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 2651.950689][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.957202][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2653.072095][T10473] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2653.594880][T10495] : port 2(ip6gretap0) entered blocking state [ 2653.609882][T10495] : port 2(ip6gretap0) entered disabled state [ 2653.618203][T10495] device ip6gretap0 entered promiscuous mode [ 2653.983375][T10511] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 2653.991249][T10511] #PF: supervisor instruction fetch in kernel mode [ 2653.997785][T10511] #PF: error_code(0x0010) - not-present page [ 2654.003824][T10511] PGD 59292067 P4D 59292067 PUD 0 [ 2654.009168][T10511] Oops: 0010 [#1] PREEMPT SMP KASAN [ 2654.014405][T10511] CPU: 0 PID: 10511 Comm: syz.8.14708 Not tainted syzkaller #0 [ 2654.021988][T10511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2654.032200][T10511] RIP: 0010:0x0 [ 2654.035690][T10511] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2654.043154][T10511] RSP: 0018:ffffc900041af398 EFLAGS: 00010246 [ 2654.049423][T10511] RAX: 1ffffffff175bb4f RBX: 000000000000000f RCX: 0000000000000000 [ 2654.057512][T10511] RDX: ffffc900041af440 RSI: 0000000000000001 RDI: ffff888026884000 [ 2654.065565][T10511] RBP: ffffc900041af4b0 R08: dffffc0000000000 R09: ffffed1004d10808 [ 2654.073659][T10511] R10: ffffed1004d10808 R11: 1ffff11004d10807 R12: ffffe8ffff854850 [ 2654.081742][T10511] R13: ffffffff8badda78 R14: 0000000000000000 R15: ffff888026884000 [ 2654.089765][T10511] FS: 00007fb39dee66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2654.098995][T10511] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2654.105612][T10511] CR2: ffffffffffffffd6 CR3: 0000000026029000 CR4: 00000000003506f0 [ 2654.113622][T10511] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00002000000000c0 [ 2654.121687][T10511] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2654.129702][T10511] Call Trace: [ 2654.133102][T10511] [ 2654.136071][T10511] bond_xdp_xmit+0x309/0x520 [ 2654.140758][T10511] ? bond_xdp_xmit+0x93/0x520 [ 2654.145502][T10511] ? bond_xdp+0x840/0x840 [ 2654.149889][T10511] ? bq_xmit_all+0x12a/0x10d0 [ 2654.154685][T10511] bq_xmit_all+0xc99/0x10d0 [ 2654.159259][T10511] ? perf_trace_preemptirq_template+0x287/0x330 [ 2654.165568][T10511] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2654.171353][T10511] ? __dev_flush+0x1b0/0x1b0 [ 2654.176002][T10511] ? irqentry_enter+0x33/0x50 [ 2654.180843][T10511] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 2654.186886][T10511] ? irqentry_enter+0x33/0x50 [ 2654.191621][T10511] ? lock_chain_count+0x20/0x20 [ 2654.196625][T10511] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2654.202849][T10511] ? lockdep_hardirqs_on+0x94/0x140 [ 2654.208464][T10511] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2654.214680][T10511] bq_enqueue+0x337/0x3d0 [ 2654.219079][T10511] dev_map_enqueue+0x1b4/0x340 [ 2654.223939][T10511] xdp_do_redirect_frame+0x30c/0x650 [ 2654.229311][T10511] bpf_test_run_xdp_live+0x9dd/0x1970 [ 2654.234762][T10511] ? bpf_test_run_xdp_live+0x45c/0x1970 [ 2654.240376][T10511] ? xdp_convert_md_to_buff+0x330/0x330 [ 2654.246022][T10511] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2654.252320][T10511] ? bpf_test_init+0x134/0x150 [ 2654.257220][T10511] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2654.262731][T10511] bpf_prog_test_run_xdp+0x6f1/0xe50 [ 2654.268056][T10511] ? dev_put+0x80/0x80 [ 2654.272346][T10511] ? dev_put+0x80/0x80 [ 2654.276498][T10511] bpf_prog_test_run+0x31e/0x390 [ 2654.281502][T10511] __sys_bpf+0x593/0x6d0 [ 2654.285797][T10511] ? bpf_link_show_fdinfo+0x340/0x340 [ 2654.291234][T10511] ? lock_chain_count+0x20/0x20 [ 2654.296129][T10511] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 2654.302144][T10511] __x64_sys_bpf+0x78/0x90 [ 2654.306597][T10511] do_syscall_64+0x4c/0xa0 [ 2654.311114][T10511] ? clear_bhb_loop+0x60/0xb0 [ 2654.315802][T10511] ? clear_bhb_loop+0x60/0xb0 [ 2654.320598][T10511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2654.326528][T10511] RIP: 0033:0x7fb39cf8ebe9 [ 2654.330961][T10511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2654.350596][T10511] RSP: 002b:00007fb39dee6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2654.359052][T10511] RAX: ffffffffffffffda RBX: 00007fb39d1c5fa0 RCX: 00007fb39cf8ebe9 [ 2654.367040][T10511] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 2654.375031][T10511] RBP: 00007fb39d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 2654.383021][T10511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2654.391020][T10511] R13: 00007fb39d1c6038 R14: 00007fb39d1c5fa0 R15: 00007ffc2ee44bd8 [ 2654.399040][T10511] [ 2654.402183][T10511] Modules linked in: [ 2654.406237][T10511] CR2: 0000000000000000 [ 2654.410501][T10511] ---[ end trace 0000000000000000 ]--- [ 2654.415970][T10511] RIP: 0010:0x0 [ 2654.419445][T10511] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2654.426818][T10511] RSP: 0018:ffffc900041af398 EFLAGS: 00010246 [ 2654.432914][T10511] RAX: 1ffffffff175bb4f RBX: 000000000000000f RCX: 0000000000000000 [ 2654.440988][T10511] RDX: ffffc900041af440 RSI: 0000000000000001 RDI: ffff888026884000 [ 2654.449232][T10511] RBP: ffffc900041af4b0 R08: dffffc0000000000 R09: ffffed1004d10808 [ 2654.457234][T10511] R10: ffffed1004d10808 R11: 1ffff11004d10807 R12: ffffe8ffff854850 [ 2654.465242][T10511] R13: ffffffff8badda78 R14: 0000000000000000 R15: ffff888026884000 [ 2654.473247][T10511] FS: 00007fb39dee66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2654.482369][T10511] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2654.488983][T10511] CR2: ffffffffffffffd6 CR3: 0000000026029000 CR4: 00000000003506f0 [ 2654.496981][T10511] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00002000000000c0 [ 2654.504973][T10511] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2654.512967][T10511] Kernel panic - not syncing: Fatal exception in interrupt [ 2654.520503][T10511] Kernel Offset: disabled [ 2654.524857][T10511] Rebooting in 86400 seconds..