last executing test programs: 1m17.145568074s ago: executing program 0 (id=11541): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x8081, 0x0, 0x9, 0x0, 0x3, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0281bb9f72ab25399cd956c0", 0x1c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) 1m15.889414225s ago: executing program 0 (id=11548): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000006100000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000007c0)="e63e039bb50900ba00d83aaa44de243b4d30ab65c08893aa7b4b1d5b9ba8ab3e0a033a77a1a9aa7ae40e938a7072fe479d3b", 0x32}, {0x0}], 0x2, &(0x7f0000000700)=ANY=[], 0xa0}, 0xe53d095caacafea) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000002640)=""/4115, 0x1013}, {&(0x7f0000000140)=""/165, 0xa5}], 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x5, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4dc9, 0x4, @perf_bp={0x0, 0x1}, 0xc981, 0x0, 0x0, 0x3, 0x3, 0x4, 0x0, 0x0, 0x3, 0x0, 0x800}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0xff, 0xf, 0xfd, 0x0, 0x1, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x8400, 0xfffffffffffffffb, 0x6, 0x6, 0x3, 0xffffffff, 0x10, 0x0, 0x10003, 0x0, 0xdc}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000880)={'nicvf0\x00', @random="7cf1e97c9e4f"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='block_split\x00', 0xffffffffffffffff, 0x0, 0x800abdd}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r5 = syz_clone(0x8000000, &(0x7f0000000540)="5ada47437d0722db2a6284d773e242f4058283774f27c6c39238ccdf05b0d0577df877dbaa6248bdf9f9e61dd1a53e38f0b755b470ea408758f20d1cb9c9329c3d30686153bd81b492c7ea16d80178252a72a887f68dbf24d39fe817329b7cb3eddb97a0cd6028e42bbed3e2bdf3c09855b8137fbbde48c99de8896bce71e605a7c76934a202e4f9b75b46c304ad9e", 0x8f, &(0x7f00000000c0), &(0x7f0000000400), &(0x7f0000000640)="67beb509") perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x65, 0x7f, 0x8, 0x7a, 0x0, 0x7, 0x801, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000680)}, 0x2, 0x8, 0xfffd, 0x7, 0x5, 0xff, 0x9, 0x0, 0x7, 0x0, 0x5}, r5, 0x3, r3, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000780)={r0, &(0x7f00000006c0)="513fead41d6fc1859c35eada93a5435b0c1d653f4712998fd564c110ac90019c61fb9fe0c1de2a144f9d8a849a16c86c36d4fa2ed2d24e14ab59aa52c56890938635d7cc3cfd6c11d9f9c161ab6199104736eff440abe65c80686aec47f013e18cae2c83aec6f3c870668989f7c12bc3ac859f513238c9f3492da2d30b30e87b897cd3e11d8b9cd4a070164c0e2e3ee04ed68361f1e3"}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) 1m15.33176645s ago: executing program 2 (id=11554): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x118442}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89ff, &(0x7f0000000080)) 1m15.240175468s ago: executing program 2 (id=11555): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m14.898415885s ago: executing program 0 (id=11558): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x581, 0x20c62, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x69, 0x3}, 0x0, 0xca, 0x200000, 0x0, 0x7, 0x100, 0x0, 0x0, 0xe}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="02"], 0x9a) 1m14.876817757s ago: executing program 2 (id=11559): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x8081, 0x0, 0x9, 0x0, 0x3, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0281bb9f72ab25399cd956c0", 0x1c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) 1m14.623020308s ago: executing program 0 (id=11563): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) r3 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x210b0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000020007008500000086000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000640)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x200ce0c0) sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x40, r1}, 0x38) sendmsg$inet(r8, 0x0, 0x0) 1m14.510461007s ago: executing program 2 (id=11566): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) r3 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x210b0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000020007008500000086000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000640)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x200ce0c0) sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x40, r1}, 0x38) sendmsg$inet(r8, 0x0, 0x0) 1m14.357252639s ago: executing program 2 (id=11568): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x541b, &(0x7f0000000040)={r0}) 1m14.249828618s ago: executing program 0 (id=11569): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xc0000000000000, 0xfffe}, 0x8080, 0xa9, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m14.014978007s ago: executing program 2 (id=11571): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001300)={@fallback=r0, 0x2b, 0x1, 0xb, &(0x7f0000001200), 0x0, 0x0, 0x0, &(0x7f0000001280)=[0x0, 0x0], 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001340)={@cgroup, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value, @void, @void, r1}, 0x20) r2 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x28, &(0x7f0000000000), 0x4) recvmsg(r2, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35", 0x51}], 0x1}, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x100000, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2560, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x4, 0x3c56, 0x1}, 0x50) 1m13.60596852s ago: executing program 32 (id=11571): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001300)={@fallback=r0, 0x2b, 0x1, 0xb, &(0x7f0000001200), 0x0, 0x0, 0x0, &(0x7f0000001280)=[0x0, 0x0], 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001340)={@cgroup, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value, @void, @void, r1}, 0x20) r2 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x28, &(0x7f0000000000), 0x4) recvmsg(r2, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35", 0x51}], 0x1}, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x100000, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2560, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x4, 0x3c56, 0x1}, 0x50) 1m13.59565259s ago: executing program 0 (id=11573): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r0, &(0x7f0000006c40)={0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000004880)=""/4096, 0x1000}], 0x1}, 0x0) 1m13.417392765s ago: executing program 33 (id=11573): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r0, &(0x7f0000006c40)={0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000004880)=""/4096, 0x1000}], 0x1}, 0x0) 10.473104825s ago: executing program 6 (id=11980): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 9.832298127s ago: executing program 6 (id=11985): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000006100000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000007c0)="e63e039bb50900ba00d83aaa44de243b4d30ab65c08893aa7b4b1d5b9ba8ab3e0a033a77a1a9aa7ae40e938a7072fe479d3b", 0x32}, {0x0}], 0x2, &(0x7f0000000700)=ANY=[], 0xa0}, 0xe53d095caacafea) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x5, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4dc9, 0x4, @perf_bp={0x0, 0x1}, 0xc981, 0x0, 0x0, 0x3, 0x3, 0x4, 0x0, 0x0, 0x3, 0x0, 0x800}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0xff, 0xf, 0xfd, 0x0, 0x1, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x8400, 0xfffffffffffffffb, 0x6, 0x6, 0x3, 0xffffffff, 0x10, 0x0, 0x10003, 0x0, 0xdc}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000880)={'nicvf0\x00', @random="7cf1e97c9e4f"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='block_split\x00', 0xffffffffffffffff, 0x0, 0x800abdd}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r5 = syz_clone(0x8000000, &(0x7f0000000540)="5ada47437d0722db2a6284d773e242f4058283774f27c6c39238ccdf05b0d0577df877dbaa6248bdf9f9e61dd1a53e38f0b755b470ea408758f20d1cb9c9329c3d30686153bd81b492c7ea16d80178252a72a887f68dbf24d39fe817329b7cb3eddb97a0cd6028e42bbed3e2bdf3c09855b8137fbbde48c99de8896bce71e605a7c76934a202e4f9b75b46c304ad9e", 0x8f, &(0x7f00000000c0), &(0x7f0000000400), &(0x7f0000000640)="67beb509") perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x65, 0x7f, 0x8, 0x7a, 0x0, 0x7, 0x801, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000680)}, 0x2, 0x8, 0xfffd, 0x7, 0x5, 0xff, 0x9, 0x0, 0x7, 0x0, 0x5}, r5, 0x3, r3, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000780)={r0, &(0x7f00000006c0)="513fead41d6fc1859c35eada93a5435b0c1d653f4712998fd564c110ac90019c61fb9fe0c1de2a144f9d8a849a16c86c36d4fa2ed2d24e14ab59aa52c56890938635d7cc3cfd6c11d9f9c161ab6199104736eff440abe65c80686aec47f013e18cae2c83aec6f3c870668989f7c12bc3ac859f513238c9f3492da2d30b30e87b897cd3e11d8b9cd4a070164c0e2e3ee04ed68361f1e3"}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) 9.54436193s ago: executing program 6 (id=11989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 9.496317134s ago: executing program 1 (id=11991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x226140, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 9.493001604s ago: executing program 5 (id=11992): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.385469993s ago: executing program 3 (id=11993): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa404, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x4, r2}, 0x10) 9.315116308s ago: executing program 5 (id=11994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(0x3) 9.272406452s ago: executing program 4 (id=11995): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.231319005s ago: executing program 6 (id=11996): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x240) 9.037887861s ago: executing program 1 (id=11997): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x6}, 0x4008, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') 8.998150284s ago: executing program 3 (id=11998): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r0, &(0x7f0000000680)="97f268fae4d343902602bda3148c1fe94b44baf18f7f109f226497d7", 0x0, 0x4}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x10012, 0x0, 0x0, 0x4, 0x5a7, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 8.867981315s ago: executing program 5 (id=11999): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0xd) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 7.502411215s ago: executing program 1 (id=12000): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x5, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x6}, 0x14105, 0x2e, 0xffffebff, 0x3, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x21, 0x2, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000001000850000009b0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 7.501798475s ago: executing program 3 (id=12001): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) r3 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x210b0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000020007008500000086000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000640)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x200ce0c0) sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x40, r1}, 0x38) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="1c0000001a006b005b597e116e080000810000000006b25709000864", 0x1c}, {&(0x7f0000000400)="c7d6d1e922f3a80c57f7ec3d51f3e90cd34c62ed80a35c56652ba2efe08a54c401ac02", 0x23}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 7.501167465s ago: executing program 4 (id=12002): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) r3 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x210b0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000020007008500000086000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000640)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x200ce0c0) sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x40, r1}, 0x38) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="1c0000001a006b005b597e116e080000810000000006b25709000864", 0x1c}, {&(0x7f0000000400)="c7d6d1e922f3a80c57f7ec3d51f3e90cd34c62ed80a35c56652ba2efe08a54c4", 0x20}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 7.455078349s ago: executing program 5 (id=12003): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000006100000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000007c0)="e63e039bb50900ba00d83aaa44de243b4d30ab65c08893aa7b4b1d5b9ba8ab3e0a033a77a1a9aa7ae40e938a7072fe479d3b", 0x32}, {0x0}], 0x2, &(0x7f0000000700)=ANY=[], 0xa0}, 0xe53d095caacafea) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x5, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4dc9, 0x4, @perf_bp={0x0, 0x1}, 0xc981, 0x0, 0x0, 0x3, 0x3, 0x4, 0x0, 0x0, 0x3, 0x0, 0x800}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0xff, 0xf, 0xfd, 0x0, 0x1, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x8400, 0xfffffffffffffffb, 0x6, 0x6, 0x3, 0xffffffff, 0x10, 0x0, 0x10003, 0x0, 0xdc}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000880)={'nicvf0\x00', @random="7cf1e97c9e4f"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='block_split\x00', 0xffffffffffffffff, 0x0, 0x800abdd}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r5 = syz_clone(0x8000000, &(0x7f0000000540)="5ada47437d0722db2a6284d773e242f4058283774f27c6c39238ccdf05b0d0577df877dbaa6248bdf9f9e61dd1a53e38f0b755b470ea408758f20d1cb9c9329c3d30686153bd81b492c7ea16d80178252a72a887f68dbf24d39fe817329b7cb3eddb97a0cd6028e42bbed3e2bdf3c09855b8137fbbde48c99de8896bce71e605a7c76934a202e4f9b75b46c304ad9e", 0x8f, &(0x7f00000000c0), &(0x7f0000000400), &(0x7f0000000640)="67beb509") perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x65, 0x7f, 0x8, 0x7a, 0x0, 0x7, 0x801, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000680)}, 0x2, 0x8, 0xfffd, 0x7, 0x5, 0xff, 0x9, 0x0, 0x7, 0x0, 0x5}, r5, 0x3, r3, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000780)={r0, &(0x7f00000006c0)="513fead41d6fc1859c35eada93a5435b0c1d653f4712998fd564c110ac90019c61fb9fe0c1de2a144f9d8a849a16c86c36d4fa2ed2d24e14ab59aa52c56890938635d7cc3cfd6c11d9f9c161ab6199104736eff440abe65c80686aec47f013e18cae2c83aec6f3c870668989f7c12bc3ac859f513238c9f3492da2d30b30e87b897cd3e11d8b9cd4a070164c0e2e3ee04ed68361f1e3"}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) 7.322461329s ago: executing program 3 (id=12004): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000006100000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000007c0)="e63e039bb50900ba00d83aaa44de243b4d30ab65c08893aa7b4b1d5b9ba8ab3e0a033a77a1a9aa7ae40e938a7072fe479d3b", 0x32}, {0x0}], 0x2, &(0x7f0000000700)=ANY=[], 0xa0}, 0xe53d095caacafea) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x5, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4dc9, 0x4, @perf_bp={0x0, 0x1}, 0xc981, 0x0, 0x0, 0x3, 0x3, 0x4, 0x0, 0x0, 0x3, 0x0, 0x800}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0xff, 0xf, 0xfd, 0x0, 0x1, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x8400, 0xfffffffffffffffb, 0x6, 0x6, 0x3, 0xffffffff, 0x10, 0x0, 0x10003, 0x0, 0xdc}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000880)={'nicvf0\x00', @random="7cf1e97c9e4f"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='block_split\x00', 0xffffffffffffffff, 0x0, 0x800abdd}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r5 = syz_clone(0x8000000, &(0x7f0000000540)="5ada47437d0722db2a6284d773e242f4058283774f27c6c39238ccdf05b0d0577df877dbaa6248bdf9f9e61dd1a53e38f0b755b470ea408758f20d1cb9c9329c3d30686153bd81b492c7ea16d80178252a72a887f68dbf24d39fe817329b7cb3eddb97a0cd6028e42bbed3e2bdf3c09855b8137fbbde48c99de8896bce71e605a7c76934a202e4f9b75b46c304ad9e", 0x8f, &(0x7f00000000c0), &(0x7f0000000400), &(0x7f0000000640)="67beb509") perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x65, 0x7f, 0x8, 0x7a, 0x0, 0x7, 0x801, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000680)}, 0x2, 0x8, 0xfffd, 0x7, 0x5, 0xff, 0x9, 0x0, 0x7, 0x0, 0x5}, r5, 0x3, r3, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000780)={r0, &(0x7f00000006c0)="513fead41d6fc1859c35eada93a5435b0c1d653f4712998fd564c110ac90019c61fb9fe0c1de2a144f9d8a849a16c86c36d4fa2ed2d24e14ab59aa52c56890938635d7cc3cfd6c11d9f9c161ab6199104736eff440abe65c80686aec47f013e18cae2c83aec6f3c870668989f7c12bc3ac859f513238c9f3492da2d30b30e87b897cd3e11d8b9cd4a070164c0e2e3ee04ed68361f1e3"}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) 7.217949708s ago: executing program 4 (id=12005): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) r3 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x210b0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000020007008500000086000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000640)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x200ce0c0) sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x40, r1}, 0x38) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="c7d6d1e922f3a80c57f7ec3d51f3e90cd34c62ed80a35c56652ba2efe08a54c401ac02a1", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.924367061s ago: executing program 4 (id=12006): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000006100000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000007c0)="e63e039bb50900ba00d83aaa44de243b4d30ab65c08893aa7b4b1d5b9ba8ab3e0a033a77a1a9aa7ae40e938a7072fe479d3b", 0x32}, {0x0}], 0x2, &(0x7f0000000700)=ANY=[], 0xa0}, 0xe53d095caacafea) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000002640)=""/4115, 0x1013}, {0x0}], 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x5, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4dc9, 0x4, @perf_bp={0x0, 0x1}, 0xc981, 0x0, 0x0, 0x3, 0x3, 0x4, 0x0, 0x0, 0x3, 0x0, 0x800}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0xff, 0xf, 0xfd, 0x0, 0x1, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x8400, 0xfffffffffffffffb, 0x6, 0x6, 0x3, 0xffffffff, 0x10, 0x0, 0x10003, 0x0, 0xdc}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000880)={'nicvf0\x00', @random="7cf1e97c9e4f"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='block_split\x00', 0xffffffffffffffff, 0x0, 0x800abdd}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r5 = syz_clone(0x8000000, &(0x7f0000000540)="5ada47437d0722db2a6284d773e242f4058283774f27c6c39238ccdf05b0d0577df877dbaa6248bdf9f9e61dd1a53e38f0b755b470ea408758f20d1cb9c9329c3d30686153bd81b492c7ea16d80178252a72a887f68dbf24d39fe817329b7cb3eddb97a0cd6028e42bbed3e2bdf3c09855b8137fbbde48c99de8896bce71e605a7c76934a202e4f9b75b46c304ad9e", 0x8f, &(0x7f00000000c0), &(0x7f0000000400), &(0x7f0000000640)="67beb509") perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x65, 0x7f, 0x8, 0x7a, 0x0, 0x7, 0x801, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000680)}, 0x2, 0x8, 0xfffd, 0x7, 0x5, 0xff, 0x9, 0x0, 0x7, 0x0, 0x5}, r5, 0x3, r3, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000780)={r0, &(0x7f00000006c0)="513fead41d6fc1859c35eada93a5435b0c1d653f4712998fd564c110ac90019c61fb9fe0c1de2a144f9d8a849a16c86c36d4fa2ed2d24e14ab59aa52c56890938635d7cc3cfd6c11d9f9c161ab6199104736eff440abe65c80686aec47f013e18cae2c83aec6f3c870668989f7c12bc3ac859f513238c9f3492da2d30b30e87b897cd3e11d8b9cd4a070164c0e2e3ee04ed68361f1e3"}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) 2.98348963s ago: executing program 1 (id=12007): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001300)={@fallback=r0, 0x2b, 0x1, 0xb, &(0x7f0000001200), 0x0, 0x0, 0x0, &(0x7f0000001280)=[0x0, 0x0], 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001340)={@cgroup, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value, @void, @void, r1}, 0x20) r2 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x28, &(0x7f0000000000), 0x4) recvmsg(r2, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x100000, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2560, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x4, 0x3c56, 0x1}, 0x50) 2.925779514s ago: executing program 3 (id=12008): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x3}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000007000000dfc900000000001404000000fdae000000000000000000000000000020"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603", 0x21}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x50, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x4, &(0x7f0000000500)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0xcb}, @ldst={0x3, 0x0, 0x1, 0xb, 0x6, 0x40, 0xfffffffffffffff7}], &(0x7f0000000640)='syzkaller\x00', 0xfffffffa, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x3, 0x0, 0xfc}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000840)=[r1], &(0x7f0000000880)=[{0x1, 0x2, 0x3, 0x5}, {0x1, 0x4, 0xd, 0x72fec2ed1b8dee10}]}, 0x94) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xc13}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 2.912323205s ago: executing program 6 (id=12009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$kcm(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="b3ffe14e4d56"}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e580000002c"], 0x66) 2.911354635s ago: executing program 4 (id=12010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(0x3) 2.911189695s ago: executing program 5 (id=12019): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tm'], 0xa) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000900)=ANY=[@ANYBLOB='a!'], 0x8) 138.507639ms ago: executing program 5 (id=12011): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x6}, 0x4008, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') 137.656409ms ago: executing program 1 (id=12022): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000079000000010001b82a384e"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x5, 0x0, &(0x7f0000000180)="0005000000", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 78.012454ms ago: executing program 6 (id=12012): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r0, &(0x7f0000000680)="97f268fae4d343902602bda3148c1fe94b44baf18f7f109f226497d7", 0x0, 0x4}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x10012, 0x0, 0x0, 0x4, 0x5a7, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 47.067586ms ago: executing program 4 (id=12013): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0xd) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 31.862688ms ago: executing program 3 (id=12014): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) r3 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x210b0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000020007008500000086000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000640)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x200ce0c0) sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x40, r1}, 0x38) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="1c0000001a006b005b597e116e080000810000000006b25709000864", 0x1c}, {&(0x7f0000000400)="c7d6d1e922f3a80c57f7ec3d51f3e90cd34c62ed80a35c56652ba2efe08a54c401ac02", 0x23}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 1 (id=12015): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) r3 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x210b0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000020007008500000086000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000640)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x200ce0c0) sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x40, r1}, 0x38) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="1c0000001a006b005b597e116e080000810000000006b25709000864", 0x1c}, {&(0x7f0000000400)="c7d6d1e922f3a80c57f7ec3d51f3e90cd34c62ed80a35c56652ba2efe08a54c401ac", 0x22}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): z.0.6885': attribute type 19 has an invalid length. [ 818.240703][T23950] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6885'. [ 818.296098][T23951] netlink: 'syz.1.6875': attribute type 10 has an invalid length. [ 818.360743][T23951] device netdevsim0 entered promiscuous mode [ 818.418982][T23951] team0: Port device netdevsim0 added [ 818.447844][T23953] netlink: 'syz.1.6875': attribute type 10 has an invalid length. [ 818.495045][T23953] device netdevsim0 left promiscuous mode [ 818.534332][T23953] team0: Port device netdevsim0 removed [ 819.198283][T23973] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6887'. [ 819.337449][T23981] netlink: 'syz.0.6890': attribute type 10 has an invalid length. [ 819.381495][T23981] bond0: (slave netdevsim0): Releasing backup interface [ 819.494535][T23981] team0: Port device netdevsim0 added [ 819.538144][T23984] team0: Port device netdevsim0 removed [ 819.598708][T23984] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 819.656300][T23988] device netdevsim0 entered promiscuous mode [ 819.668949][T23988] team0: Port device netdevsim0 added [ 819.689202][T23992] device netdevsim0 left promiscuous mode [ 819.726072][T23992] team0: Port device netdevsim0 removed [ 819.767848][T23996] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6896'. [ 820.061666][T24007] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6901'. [ 821.238277][T24032] validate_nla: 4 callbacks suppressed [ 821.238324][T24032] netlink: 'syz.3.6912': attribute type 10 has an invalid length. [ 821.351212][T24032] bond0: (slave netdevsim0): Releasing backup interface [ 821.392103][T24032] team0: Port device netdevsim0 added [ 821.416373][T24041] netlink: 'syz.3.6912': attribute type 10 has an invalid length. [ 821.463300][T24041] team0: Port device netdevsim0 removed [ 821.472854][T24041] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 821.493279][T24045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6916'. [ 821.720089][T24057] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6920'. [ 822.328045][T24083] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6932'. [ 822.747641][T24095] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6938'. [ 822.775881][T24095] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 823.810330][T24129] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6954'. [ 824.312006][T24139] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6959'. [ 826.204038][T24204] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6986'. [ 827.458105][T24236] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7001'. [ 827.502668][T24236] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 827.525799][T24236] CPU: 0 PID: 24236 Comm: syz.0.7001 Not tainted 6.1.148-syzkaller #0 [ 827.534015][T24236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 827.544098][T24236] Call Trace: [ 827.547392][T24236] [ 827.550324][T24236] dump_stack_lvl+0x168/0x22e [ 827.555014][T24236] ? show_regs_print_info+0x12/0x12 [ 827.560240][T24236] ? load_image+0x3b0/0x3b0 [ 827.564760][T24236] sysfs_warn_dup+0x8a/0xa0 [ 827.569292][T24236] sysfs_do_create_link_sd+0xc0/0x110 [ 827.574662][T24236] device_add+0x7ed/0xfb0 [ 827.578990][T24236] wiphy_register+0x1e68/0x2bd0 [ 827.583852][T24236] ? cfg80211_event_work+0x40/0x40 [ 827.588956][T24236] ? minstrel_ht_alloc+0x894/0xa20 [ 827.594075][T24236] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 827.600139][T24236] ieee80211_register_hw+0x2c29/0x38c0 [ 827.605597][T24236] ? ieee80211_register_hw+0xe91/0x38c0 [ 827.611131][T24236] ? ieee80211_register_hw+0xe91/0x38c0 [ 827.616678][T24236] ? ieee80211_tasklet_handler+0x20/0x20 [ 827.622407][T24236] ? memset+0x1e/0x40 [ 827.626470][T24236] ? __hrtimer_init+0x186/0x270 [ 827.631316][T24236] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 827.637044][T24236] hwsim_new_radio_nl+0xafa/0xce0 [ 827.642131][T24236] genl_family_rcv_msg_doit+0x22e/0x320 [ 827.647710][T24236] ? end_current_label_crit_section+0x170/0x170 [ 827.653950][T24236] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 827.659840][T24236] ? bpf_lsm_capable+0x5/0x10 [ 827.664505][T24236] ? security_capable+0x85/0xb0 [ 827.669348][T24236] genl_rcv_msg+0x5f2/0x780 [ 827.673850][T24236] ? genl_bind+0x350/0x350 [ 827.678260][T24236] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 827.684590][T24236] ? lock_acquire+0x20f/0x490 [ 827.689277][T24236] netlink_rcv_skb+0x1de/0x420 [ 827.694040][T24236] ? genl_bind+0x350/0x350 [ 827.698453][T24236] ? netlink_ack+0x1100/0x1100 [ 827.703302][T24236] ? down_read+0x1a8/0x2d0 [ 827.707881][T24236] genl_rcv+0x24/0x40 [ 827.711862][T24236] netlink_unicast+0x74d/0x8d0 [ 827.716625][T24236] netlink_sendmsg+0x89e/0xbc0 [ 827.721386][T24236] ? netlink_getsockopt+0x540/0x540 [ 827.726922][T24236] ? aa_sock_msg_perm+0x94/0x150 [ 827.731871][T24236] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 827.737359][T24236] ? security_socket_sendmsg+0x7c/0xa0 [ 827.743000][T24236] ? netlink_getsockopt+0x540/0x540 [ 827.748311][T24236] ____sys_sendmsg+0x59b/0x970 [ 827.753233][T24236] ? __sys_sendmsg_sock+0x30/0x30 [ 827.758382][T24236] ? __import_iovec+0x315/0x500 [ 827.763434][T24236] ? import_iovec+0x6f/0xa0 [ 827.767956][T24236] ___sys_sendmsg+0x21c/0x290 [ 827.772650][T24236] ? __sys_sendmsg+0x270/0x270 [ 827.777447][T24236] ? __fdget+0x17c/0x200 [ 827.781753][T24236] __se_sys_sendmsg+0x19e/0x270 [ 827.786617][T24236] ? __x64_sys_sendmsg+0x80/0x80 [ 827.791653][T24236] ? syscall_enter_from_user_mode+0x2a/0x80 [ 827.797550][T24236] do_syscall_64+0x4c/0xa0 [ 827.802007][T24236] ? clear_bhb_loop+0x60/0xb0 [ 827.806674][T24236] ? clear_bhb_loop+0x60/0xb0 [ 827.811350][T24236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 827.817237][T24236] RIP: 0033:0x7fbd6e98ebe9 [ 827.821643][T24236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 827.841238][T24236] RSP: 002b:00007fbd6f759038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 827.849730][T24236] RAX: ffffffffffffffda RBX: 00007fbd6ebb5fa0 RCX: 00007fbd6e98ebe9 [ 827.857689][T24236] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 827.865646][T24236] RBP: 00007fbd6ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 827.873619][T24236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.881711][T24236] R13: 00007fbd6ebb6038 R14: 00007fbd6ebb5fa0 R15: 00007ffe9303e338 [ 827.889794][T24236] [ 828.283916][T24258] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7009'. [ 828.946493][T24277] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7019'. [ 829.067619][T24277] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 829.078472][T24277] CPU: 1 PID: 24277 Comm: syz.3.7019 Not tainted 6.1.148-syzkaller #0 [ 829.086658][T24277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 829.096872][T24277] Call Trace: [ 829.100256][T24277] [ 829.103214][T24277] dump_stack_lvl+0x168/0x22e [ 829.107926][T24277] ? show_regs_print_info+0x12/0x12 [ 829.113139][T24277] ? load_image+0x3b0/0x3b0 [ 829.117676][T24277] sysfs_warn_dup+0x8a/0xa0 [ 829.122204][T24277] sysfs_do_create_link_sd+0xc0/0x110 [ 829.127602][T24277] device_add+0x7ed/0xfb0 [ 829.131957][T24277] wiphy_register+0x1e68/0x2bd0 [ 829.136930][T24277] ? cfg80211_event_work+0x40/0x40 [ 829.142494][T24277] ? minstrel_ht_alloc+0x894/0xa20 [ 829.148065][T24277] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 829.154162][T24277] ieee80211_register_hw+0x2c29/0x38c0 [ 829.159659][T24277] ? ieee80211_register_hw+0xe91/0x38c0 [ 829.165222][T24277] ? ieee80211_register_hw+0xe91/0x38c0 [ 829.170809][T24277] ? ieee80211_tasklet_handler+0x20/0x20 [ 829.176484][T24277] ? memset+0x1e/0x40 [ 829.180526][T24277] ? __hrtimer_init+0x186/0x270 [ 829.185412][T24277] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 829.191176][T24277] hwsim_new_radio_nl+0xafa/0xce0 [ 829.196231][T24277] genl_family_rcv_msg_doit+0x22e/0x320 [ 829.201795][T24277] ? end_current_label_crit_section+0x170/0x170 [ 829.208078][T24277] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 829.213997][T24277] ? bpf_lsm_capable+0x5/0x10 [ 829.218688][T24277] ? security_capable+0x85/0xb0 [ 829.223557][T24277] genl_rcv_msg+0x5f2/0x780 [ 829.228085][T24277] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 829.233910][T24277] ? genl_bind+0x350/0x350 [ 829.238342][T24277] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 829.244708][T24277] netlink_rcv_skb+0x1de/0x420 [ 829.249493][T24277] ? genl_bind+0x350/0x350 [ 829.253938][T24277] ? netlink_ack+0x1100/0x1100 [ 829.258748][T24277] ? down_read+0x1a8/0x2d0 [ 829.263186][T24277] genl_rcv+0x24/0x40 [ 829.267275][T24277] netlink_unicast+0x74d/0x8d0 [ 829.272158][T24277] netlink_sendmsg+0x89e/0xbc0 [ 829.276937][T24277] ? lockdep_hardirqs_on+0x94/0x140 [ 829.282163][T24277] ? netlink_getsockopt+0x540/0x540 [ 829.287385][T24277] ? security_socket_sendmsg+0x41/0xa0 [ 829.292862][T24277] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 829.298161][T24277] ? security_socket_sendmsg+0x7c/0xa0 [ 829.303644][T24277] ? netlink_getsockopt+0x540/0x540 [ 829.308859][T24277] ____sys_sendmsg+0x59b/0x970 [ 829.313841][T24277] ? __sys_sendmsg_sock+0x30/0x30 [ 829.318977][T24277] ? __import_iovec+0x315/0x500 [ 829.323855][T24277] ? import_iovec+0x6f/0xa0 [ 829.328383][T24277] ___sys_sendmsg+0x21c/0x290 [ 829.333078][T24277] ? __sys_sendmsg+0x270/0x270 [ 829.337888][T24277] ? ktime_get_real_ts64+0x420/0x420 [ 829.343394][T24277] ? __fdget+0x17c/0x200 [ 829.347671][T24277] __se_sys_sendmsg+0x19e/0x270 [ 829.352548][T24277] ? ct_nmi_exit+0x145/0x1c0 [ 829.357165][T24277] ? __x64_sys_sendmsg+0x80/0x80 [ 829.362144][T24277] ? lockdep_hardirqs_on+0x94/0x140 [ 829.367643][T24277] do_syscall_64+0x4c/0xa0 [ 829.372112][T24277] ? clear_bhb_loop+0x60/0xb0 [ 829.376887][T24277] ? clear_bhb_loop+0x60/0xb0 [ 829.381579][T24277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 829.387488][T24277] RIP: 0033:0x7fab11b8ebe9 [ 829.391909][T24277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.411534][T24277] RSP: 002b:00007fab129cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.420053][T24277] RAX: ffffffffffffffda RBX: 00007fab11db5fa0 RCX: 00007fab11b8ebe9 [ 829.428039][T24277] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 829.436116][T24277] RBP: 00007fab11c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 829.444106][T24277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.452089][T24277] R13: 00007fab11db6038 R14: 00007fab11db5fa0 R15: 00007ffc5afe4b48 [ 829.460092][T24277] [ 830.370662][T24309] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7031'. [ 830.661945][T24321] netlink: 'syz.1.7036': attribute type 10 has an invalid length. [ 830.782355][T24324] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7037'. [ 830.842520][T24324] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 830.859195][T24324] CPU: 1 PID: 24324 Comm: syz.0.7037 Not tainted 6.1.148-syzkaller #0 [ 830.867406][T24324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 830.877661][T24324] Call Trace: [ 830.880988][T24324] [ 830.883945][T24324] dump_stack_lvl+0x168/0x22e [ 830.888643][T24324] ? show_regs_print_info+0x12/0x12 [ 830.893907][T24324] ? load_image+0x3b0/0x3b0 [ 830.898447][T24324] sysfs_warn_dup+0x8a/0xa0 [ 830.902978][T24324] sysfs_do_create_link_sd+0xc0/0x110 [ 830.908377][T24324] device_add+0x7ed/0xfb0 [ 830.912753][T24324] wiphy_register+0x1e68/0x2bd0 [ 830.917651][T24324] ? cfg80211_event_work+0x40/0x40 [ 830.922794][T24324] ? minstrel_ht_alloc+0x894/0xa20 [ 830.928105][T24324] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 830.934209][T24324] ieee80211_register_hw+0x2c29/0x38c0 [ 830.939825][T24324] ? ieee80211_register_hw+0xe91/0x38c0 [ 830.945395][T24324] ? ieee80211_register_hw+0xe91/0x38c0 [ 830.950967][T24324] ? ieee80211_tasklet_handler+0x20/0x20 [ 830.956630][T24324] ? memset+0x1e/0x40 [ 830.960635][T24324] ? __hrtimer_init+0x186/0x270 [ 830.965508][T24324] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 830.971269][T24324] hwsim_new_radio_nl+0xafa/0xce0 [ 830.976329][T24324] genl_family_rcv_msg_doit+0x22e/0x320 [ 830.981902][T24324] ? end_current_label_crit_section+0x170/0x170 [ 830.988256][T24324] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 830.994177][T24324] ? bpf_lsm_capable+0x5/0x10 [ 830.998871][T24324] ? security_capable+0x85/0xb0 [ 831.003752][T24324] genl_rcv_msg+0x5f2/0x780 [ 831.008287][T24324] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 831.014126][T24324] ? genl_bind+0x350/0x350 [ 831.018565][T24324] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 831.024934][T24324] netlink_rcv_skb+0x1de/0x420 [ 831.029729][T24324] ? genl_bind+0x350/0x350 [ 831.034169][T24324] ? netlink_ack+0x1100/0x1100 [ 831.038970][T24324] ? down_read+0x1a8/0x2d0 [ 831.043406][T24324] genl_rcv+0x24/0x40 [ 831.047410][T24324] netlink_unicast+0x74d/0x8d0 [ 831.052199][T24324] netlink_sendmsg+0x89e/0xbc0 [ 831.056986][T24324] ? netlink_getsockopt+0x540/0x540 [ 831.062202][T24324] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 831.067502][T24324] ? security_socket_sendmsg+0x7c/0xa0 [ 831.073074][T24324] ? netlink_getsockopt+0x540/0x540 [ 831.078289][T24324] ____sys_sendmsg+0x59b/0x970 [ 831.083078][T24324] ? __sys_sendmsg_sock+0x30/0x30 [ 831.088112][T24324] ? __import_iovec+0x315/0x500 [ 831.092990][T24324] ? import_iovec+0x6f/0xa0 [ 831.097518][T24324] ___sys_sendmsg+0x21c/0x290 [ 831.102216][T24324] ? __sys_sendmsg+0x270/0x270 [ 831.107029][T24324] ? __fdget+0x17c/0x200 [ 831.111294][T24324] __se_sys_sendmsg+0x19e/0x270 [ 831.116173][T24324] ? ct_nmi_exit+0x145/0x1c0 [ 831.120887][T24324] ? __x64_sys_sendmsg+0x80/0x80 [ 831.125895][T24324] ? lockdep_hardirqs_on+0x94/0x140 [ 831.131121][T24324] do_syscall_64+0x4c/0xa0 [ 831.135639][T24324] ? clear_bhb_loop+0x60/0xb0 [ 831.140339][T24324] ? clear_bhb_loop+0x60/0xb0 [ 831.145037][T24324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 831.150956][T24324] RIP: 0033:0x7fbd6e98ebe9 [ 831.155390][T24324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.175016][T24324] RSP: 002b:00007fbd6f759038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.183539][T24324] RAX: ffffffffffffffda RBX: 00007fbd6ebb5fa0 RCX: 00007fbd6e98ebe9 [ 831.191534][T24324] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 831.199535][T24324] RBP: 00007fbd6ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 831.207523][T24324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.215536][T24324] R13: 00007fbd6ebb6038 R14: 00007fbd6ebb5fa0 R15: 00007ffe9303e338 [ 831.223555][T24324] [ 831.842283][T24349] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7045'. [ 832.680446][T24369] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7052'. [ 834.371106][T24418] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7072'. [ 835.579566][T24440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7088'. [ 835.745574][T24445] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 835.894205][T24445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7080'. [ 836.882112][T24476] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7100'. [ 838.344595][T24511] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.7105'. [ 838.390179][T24511] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 838.409040][T24511] CPU: 0 PID: 24511 Comm: syz.1.7105 Not tainted 6.1.148-syzkaller #0 [ 838.417320][T24511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 838.427576][T24511] Call Trace: [ 838.430871][T24511] [ 838.433811][T24511] dump_stack_lvl+0x168/0x22e [ 838.438561][T24511] ? show_regs_print_info+0x12/0x12 [ 838.443774][T24511] ? load_image+0x3b0/0x3b0 [ 838.448337][T24511] ? sysfs_warn_dup+0x61/0xa0 [ 838.453127][T24511] sysfs_warn_dup+0x8a/0xa0 [ 838.457648][T24511] sysfs_do_create_link_sd+0xc0/0x110 [ 838.463127][T24511] device_add+0x7ed/0xfb0 [ 838.467486][T24511] wiphy_register+0x1e68/0x2bd0 [ 838.472364][T24511] ? lock_chain_count+0x20/0x20 [ 838.477255][T24511] ? cfg80211_event_work+0x40/0x40 [ 838.482398][T24511] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 838.488497][T24511] ieee80211_register_hw+0x2c29/0x38c0 [ 838.493992][T24511] ? ieee80211_register_hw+0xe91/0x38c0 [ 838.499562][T24511] ? ieee80211_register_hw+0xe91/0x38c0 [ 838.505137][T24511] ? ieee80211_tasklet_handler+0x20/0x20 [ 838.510802][T24511] ? memset+0x1e/0x40 [ 838.514804][T24511] ? __hrtimer_init+0x186/0x270 [ 838.519674][T24511] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 838.525436][T24511] hwsim_new_radio_nl+0xafa/0xce0 [ 838.530577][T24511] genl_family_rcv_msg_doit+0x22e/0x320 [ 838.536138][T24511] ? end_current_label_crit_section+0x170/0x170 [ 838.542401][T24511] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 838.548321][T24511] ? bpf_lsm_capable+0x5/0x10 [ 838.553030][T24511] ? security_capable+0x85/0xb0 [ 838.557907][T24511] genl_rcv_msg+0x5f2/0x780 [ 838.562435][T24511] ? lockdep_hardirqs_on+0x94/0x140 [ 838.567656][T24511] ? genl_bind+0x350/0x350 [ 838.572077][T24511] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 838.578426][T24511] netlink_rcv_skb+0x1de/0x420 [ 838.583188][T24511] ? genl_bind+0x350/0x350 [ 838.587606][T24511] ? netlink_ack+0x1100/0x1100 [ 838.592368][T24511] ? down_read+0x1a8/0x2d0 [ 838.596774][T24511] genl_rcv+0x24/0x40 [ 838.600833][T24511] netlink_unicast+0x74d/0x8d0 [ 838.605603][T24511] netlink_sendmsg+0x89e/0xbc0 [ 838.610396][T24511] ? netlink_getsockopt+0x540/0x540 [ 838.615603][T24511] ? aa_sock_msg_perm+0x94/0x150 [ 838.620558][T24511] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 838.625830][T24511] ? security_socket_sendmsg+0x7c/0xa0 [ 838.631278][T24511] ? netlink_getsockopt+0x540/0x540 [ 838.636469][T24511] ____sys_sendmsg+0x59b/0x970 [ 838.641238][T24511] ? __sys_sendmsg_sock+0x30/0x30 [ 838.646248][T24511] ? __import_iovec+0x315/0x500 [ 838.651183][T24511] ? import_iovec+0x6f/0xa0 [ 838.655691][T24511] ___sys_sendmsg+0x21c/0x290 [ 838.660358][T24511] ? __sys_sendmsg+0x270/0x270 [ 838.665142][T24511] ? __fdget+0x17c/0x200 [ 838.669382][T24511] __se_sys_sendmsg+0x19e/0x270 [ 838.674228][T24511] ? __x64_sys_sendmsg+0x80/0x80 [ 838.679169][T24511] ? syscall_enter_from_user_mode+0x2a/0x80 [ 838.685059][T24511] do_syscall_64+0x4c/0xa0 [ 838.689464][T24511] ? clear_bhb_loop+0x60/0xb0 [ 838.694126][T24511] ? clear_bhb_loop+0x60/0xb0 [ 838.698788][T24511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 838.704670][T24511] RIP: 0033:0x7f88c798ebe9 [ 838.709165][T24511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.728757][T24511] RSP: 002b:00007f88c8732038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 838.737154][T24511] RAX: ffffffffffffffda RBX: 00007f88c7bb5fa0 RCX: 00007f88c798ebe9 [ 838.745124][T24511] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 838.753088][T24511] RBP: 00007f88c7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 838.761092][T24511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.769117][T24511] R13: 00007f88c7bb6038 R14: 00007f88c7bb5fa0 R15: 00007ffe6eaf2a88 [ 838.777130][T24511] [ 839.307410][T24523] netlink: 'syz.2.7107': attribute type 10 has an invalid length. [ 839.359708][T24523] device netdevsim0 entered promiscuous mode [ 839.402026][T24523] team0: Port device netdevsim0 added [ 839.430060][T24518] netlink: 'syz.2.7107': attribute type 10 has an invalid length. [ 839.451789][T24518] device netdevsim0 left promiscuous mode [ 839.506005][T24518] team0: Port device netdevsim0 removed [ 839.892074][T24543] netlink: 'syz.0.7114': attribute type 19 has an invalid length. [ 839.914942][T24543] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7114'. [ 840.993858][T24563] device syzkaller0 left promiscuous mode [ 841.039600][T24562] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7122'. [ 841.088077][T24562] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 841.126574][T24562] CPU: 0 PID: 24562 Comm: syz.2.7122 Not tainted 6.1.148-syzkaller #0 [ 841.134795][T24562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 841.144958][T24562] Call Trace: [ 841.148249][T24562] [ 841.151276][T24562] dump_stack_lvl+0x168/0x22e [ 841.155971][T24562] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 841.162277][T24562] ? show_regs_print_info+0x12/0x12 [ 841.167497][T24562] ? load_image+0x3b0/0x3b0 [ 841.172033][T24562] sysfs_warn_dup+0x8a/0xa0 [ 841.176557][T24562] sysfs_do_create_link_sd+0xc0/0x110 [ 841.181959][T24562] device_add+0x7ed/0xfb0 [ 841.186318][T24562] wiphy_register+0x1e68/0x2bd0 [ 841.191204][T24562] ? cfg80211_event_work+0x40/0x40 [ 841.196332][T24562] ? minstrel_ht_alloc+0x894/0xa20 [ 841.201469][T24562] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 841.207562][T24562] ieee80211_register_hw+0x2c29/0x38c0 [ 841.213128][T24562] ? ieee80211_register_hw+0xe91/0x38c0 [ 841.218685][T24562] ? ieee80211_register_hw+0xe91/0x38c0 [ 841.224262][T24562] ? ieee80211_tasklet_handler+0x20/0x20 [ 841.229924][T24562] ? memset+0x1e/0x40 [ 841.233927][T24562] ? __hrtimer_init+0x186/0x270 [ 841.238789][T24562] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 841.244566][T24562] hwsim_new_radio_nl+0xafa/0xce0 [ 841.249634][T24562] genl_family_rcv_msg_doit+0x22e/0x320 [ 841.255225][T24562] ? end_current_label_crit_section+0x170/0x170 [ 841.261589][T24562] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 841.267534][T24562] ? bpf_lsm_capable+0x5/0x10 [ 841.272246][T24562] ? security_capable+0x85/0xb0 [ 841.277179][T24562] genl_rcv_msg+0x5f2/0x780 [ 841.281732][T24562] ? genl_bind+0x350/0x350 [ 841.286217][T24562] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 841.292586][T24562] netlink_rcv_skb+0x1de/0x420 [ 841.297461][T24562] ? genl_bind+0x350/0x350 [ 841.301907][T24562] ? netlink_ack+0x1100/0x1100 [ 841.306703][T24562] ? down_read+0x1a8/0x2d0 [ 841.311148][T24562] genl_rcv+0x24/0x40 [ 841.315155][T24562] netlink_unicast+0x74d/0x8d0 [ 841.320048][T24562] netlink_sendmsg+0x89e/0xbc0 [ 841.324940][T24562] ? netlink_getsockopt+0x540/0x540 [ 841.330169][T24562] ? aa_sock_msg_perm+0x94/0x150 [ 841.335232][T24562] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 841.340532][T24562] ? security_socket_sendmsg+0x7c/0xa0 [ 841.346014][T24562] ? netlink_getsockopt+0x540/0x540 [ 841.351236][T24562] ____sys_sendmsg+0x59b/0x970 [ 841.356031][T24562] ? __sys_sendmsg_sock+0x30/0x30 [ 841.361256][T24562] ? __import_iovec+0x315/0x500 [ 841.366144][T24562] ? import_iovec+0x6f/0xa0 [ 841.370682][T24562] ___sys_sendmsg+0x21c/0x290 [ 841.375405][T24562] ? __sys_sendmsg+0x270/0x270 [ 841.380307][T24562] ? ktime_get_real_ts64+0x420/0x420 [ 841.385637][T24562] ? __fdget+0x17c/0x200 [ 841.389909][T24562] __se_sys_sendmsg+0x19e/0x270 [ 841.394786][T24562] ? perf_trace_preemptirq_template+0x287/0x330 [ 841.401058][T24562] ? __x64_sys_sendmsg+0x80/0x80 [ 841.406146][T24562] ? lockdep_hardirqs_on+0x94/0x140 [ 841.411375][T24562] do_syscall_64+0x4c/0xa0 [ 841.415812][T24562] ? clear_bhb_loop+0x60/0xb0 [ 841.420510][T24562] ? clear_bhb_loop+0x60/0xb0 [ 841.425219][T24562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 841.431134][T24562] RIP: 0033:0x7fabfab8ebe9 [ 841.435566][T24562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.455279][T24562] RSP: 002b:00007fabfba72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.463728][T24562] RAX: ffffffffffffffda RBX: 00007fabfadb5fa0 RCX: 00007fabfab8ebe9 [ 841.471810][T24562] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 841.479978][T24562] RBP: 00007fabfac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 841.487967][T24562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.496166][T24562] R13: 00007fabfadb6038 R14: 00007fabfadb5fa0 R15: 00007fff187869f8 [ 841.504176][T24562] [ 841.554380][T24572] netlink: 'syz.4.7126': attribute type 10 has an invalid length. [ 841.620588][T24572] bond0: (slave netdevsim0): Releasing backup interface [ 841.673043][T24572] device netdevsim0 entered promiscuous mode [ 841.693606][T24572] team0: Port device netdevsim0 added [ 841.744808][T24573] netlink: 'syz.4.7126': attribute type 10 has an invalid length. [ 841.753210][T24573] device netdevsim0 left promiscuous mode [ 841.861311][T24573] team0: Port device netdevsim0 removed [ 841.907913][T24573] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 842.277536][T24590] netlink: 'syz.3.7133': attribute type 19 has an invalid length. [ 842.305022][T24590] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7133'. [ 843.242024][T24615] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7141'. [ 843.297157][T24615] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 843.335504][T24615] CPU: 1 PID: 24615 Comm: syz.2.7141 Not tainted 6.1.148-syzkaller #0 [ 843.343718][T24615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 843.353801][T24615] Call Trace: [ 843.357095][T24615] [ 843.360042][T24615] dump_stack_lvl+0x168/0x22e [ 843.364747][T24615] ? show_regs_print_info+0x12/0x12 [ 843.370052][T24615] ? load_image+0x3b0/0x3b0 [ 843.374584][T24615] sysfs_warn_dup+0x8a/0xa0 [ 843.379104][T24615] sysfs_do_create_link_sd+0xc0/0x110 [ 843.384500][T24615] device_add+0x7ed/0xfb0 [ 843.388863][T24615] wiphy_register+0x1e68/0x2bd0 [ 843.393826][T24615] ? lock_chain_count+0x20/0x20 [ 843.398743][T24615] ? cfg80211_event_work+0x40/0x40 [ 843.403883][T24615] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 843.410025][T24615] ieee80211_register_hw+0x2c29/0x38c0 [ 843.415612][T24615] ? ieee80211_register_hw+0xe91/0x38c0 [ 843.421185][T24615] ? ieee80211_register_hw+0xe91/0x38c0 [ 843.426760][T24615] ? ieee80211_tasklet_handler+0x20/0x20 [ 843.432420][T24615] ? memset+0x1e/0x40 [ 843.436420][T24615] ? __hrtimer_init+0x186/0x270 [ 843.441286][T24615] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 843.447045][T24615] hwsim_new_radio_nl+0xafa/0xce0 [ 843.452102][T24615] genl_family_rcv_msg_doit+0x22e/0x320 [ 843.457707][T24615] ? end_current_label_crit_section+0x170/0x170 [ 843.463974][T24615] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 843.469897][T24615] ? bpf_lsm_capable+0x5/0x10 [ 843.474597][T24615] ? security_capable+0x85/0xb0 [ 843.479470][T24615] genl_rcv_msg+0x5f2/0x780 [ 843.484007][T24615] ? genl_bind+0x350/0x350 [ 843.488444][T24615] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 843.494812][T24615] ? lock_acquire+0x20f/0x490 [ 843.499519][T24615] netlink_rcv_skb+0x1de/0x420 [ 843.504311][T24615] ? genl_bind+0x350/0x350 [ 843.508756][T24615] ? netlink_ack+0x1100/0x1100 [ 843.513562][T24615] ? down_read+0x1a8/0x2d0 [ 843.517998][T24615] genl_rcv+0x24/0x40 [ 843.521995][T24615] netlink_unicast+0x74d/0x8d0 [ 843.526908][T24615] netlink_sendmsg+0x89e/0xbc0 [ 843.531711][T24615] ? netlink_getsockopt+0x540/0x540 [ 843.537036][T24615] ? netlink_getsockopt+0x540/0x540 [ 843.542261][T24615] ____sys_sendmsg+0x59b/0x970 [ 843.547056][T24615] ? __sys_sendmsg_sock+0x30/0x30 [ 843.552190][T24615] ? __import_iovec+0x315/0x500 [ 843.557080][T24615] ? import_iovec+0x6f/0xa0 [ 843.561709][T24615] ___sys_sendmsg+0x21c/0x290 [ 843.566411][T24615] ? __sys_sendmsg+0x270/0x270 [ 843.571243][T24615] ? __fdget+0x17c/0x200 [ 843.575510][T24615] __se_sys_sendmsg+0x19e/0x270 [ 843.580384][T24615] ? __x64_sys_sendmsg+0x80/0x80 [ 843.585360][T24615] ? syscall_enter_from_user_mode+0x2a/0x80 [ 843.591380][T24615] do_syscall_64+0x4c/0xa0 [ 843.595925][T24615] ? clear_bhb_loop+0x60/0xb0 [ 843.601152][T24615] ? clear_bhb_loop+0x60/0xb0 [ 843.605854][T24615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 843.611766][T24615] RIP: 0033:0x7fabfab8ebe9 [ 843.616184][T24615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.636066][T24615] RSP: 002b:00007fabfba72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.644502][T24615] RAX: ffffffffffffffda RBX: 00007fabfadb5fa0 RCX: 00007fabfab8ebe9 [ 843.652472][T24615] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 843.660535][T24615] RBP: 00007fabfac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 843.668595][T24615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.676841][T24615] R13: 00007fabfadb6038 R14: 00007fabfadb5fa0 R15: 00007fff187869f8 [ 843.684831][T24615] [ 843.701752][T24617] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 843.756202][T24624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7142'. [ 844.026176][T24631] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7146'. [ 844.359835][T24645] netlink: 'syz.4.7155': attribute type 19 has an invalid length. [ 844.389933][T24645] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7155'. [ 844.948177][T24666] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7162'. [ 844.990504][T24664] netlink: 'syz.3.7161': attribute type 10 has an invalid length. [ 845.382580][T24664] bond0: (slave netdevsim0): Releasing backup interface [ 845.452299][T24664] team0: Port device netdevsim0 added [ 845.473530][T24669] netlink: 'syz.3.7161': attribute type 10 has an invalid length. [ 845.590484][T24669] team0: Port device netdevsim0 removed [ 845.657590][T24669] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 845.675603][T24666] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 845.693964][T24666] CPU: 1 PID: 24666 Comm: syz.0.7162 Not tainted 6.1.148-syzkaller #0 [ 845.702344][T24666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 845.712434][T24666] Call Trace: [ 845.715737][T24666] [ 845.718682][T24666] dump_stack_lvl+0x168/0x22e [ 845.723388][T24666] ? show_regs_print_info+0x12/0x12 [ 845.728680][T24666] ? load_image+0x3b0/0x3b0 [ 845.733220][T24666] sysfs_warn_dup+0x8a/0xa0 [ 845.737756][T24666] sysfs_do_create_link_sd+0xc0/0x110 [ 845.743156][T24666] device_add+0x7ed/0xfb0 [ 845.747523][T24666] wiphy_register+0x1e68/0x2bd0 [ 845.752432][T24666] ? cfg80211_event_work+0x40/0x40 [ 845.757572][T24666] ? minstrel_ht_alloc+0x894/0xa20 [ 845.762723][T24666] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 845.768905][T24666] ieee80211_register_hw+0x2c29/0x38c0 [ 845.774396][T24666] ? ieee80211_register_hw+0xe91/0x38c0 [ 845.779976][T24666] ? ieee80211_register_hw+0xe91/0x38c0 [ 845.785638][T24666] ? ieee80211_tasklet_handler+0x20/0x20 [ 845.791303][T24666] ? memset+0x1e/0x40 [ 845.795310][T24666] ? __hrtimer_init+0x186/0x270 [ 845.800184][T24666] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 845.805960][T24666] hwsim_new_radio_nl+0xafa/0xce0 [ 845.811022][T24666] genl_family_rcv_msg_doit+0x22e/0x320 [ 845.816598][T24666] ? end_current_label_crit_section+0x170/0x170 [ 845.822875][T24666] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 845.828792][T24666] ? lockdep_hardirqs_on+0x94/0x140 [ 845.834119][T24666] ? bpf_lsm_capable+0x5/0x10 [ 845.838813][T24666] ? security_capable+0x85/0xb0 [ 845.843688][T24666] genl_rcv_msg+0x5f2/0x780 [ 845.848397][T24666] ? genl_bind+0x350/0x350 [ 845.852826][T24666] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 845.859159][T24666] netlink_rcv_skb+0x1de/0x420 [ 845.863943][T24666] ? genl_bind+0x350/0x350 [ 845.868449][T24666] ? netlink_ack+0x1100/0x1100 [ 845.873308][T24666] ? down_read+0x1a8/0x2d0 [ 845.877743][T24666] genl_rcv+0x24/0x40 [ 845.881733][T24666] netlink_unicast+0x74d/0x8d0 [ 845.886500][T24666] netlink_sendmsg+0x89e/0xbc0 [ 845.891262][T24666] ? netlink_getsockopt+0x540/0x540 [ 845.896465][T24666] ? aa_sock_msg_perm+0x94/0x150 [ 845.901531][T24666] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 845.906832][T24666] ? security_socket_sendmsg+0x7c/0xa0 [ 845.912303][T24666] ? netlink_getsockopt+0x540/0x540 [ 845.917774][T24666] ____sys_sendmsg+0x59b/0x970 [ 845.922559][T24666] ? __sys_sendmsg_sock+0x30/0x30 [ 845.927581][T24666] ? __import_iovec+0x315/0x500 [ 845.932516][T24666] ? import_iovec+0x6f/0xa0 [ 845.937158][T24666] ___sys_sendmsg+0x21c/0x290 [ 845.942358][T24666] ? __sys_sendmsg+0x270/0x270 [ 845.947159][T24666] ? __fdget+0x17c/0x200 [ 845.951408][T24666] __se_sys_sendmsg+0x19e/0x270 [ 845.956277][T24666] ? __x64_sys_sendmsg+0x80/0x80 [ 845.961226][T24666] ? syscall_enter_from_user_mode+0x2a/0x80 [ 845.967294][T24666] do_syscall_64+0x4c/0xa0 [ 845.971793][T24666] ? clear_bhb_loop+0x60/0xb0 [ 845.976462][T24666] ? clear_bhb_loop+0x60/0xb0 [ 845.981133][T24666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 845.987025][T24666] RIP: 0033:0x7fbd6e98ebe9 [ 845.991437][T24666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.011127][T24666] RSP: 002b:00007fbd6f759038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.019531][T24666] RAX: ffffffffffffffda RBX: 00007fbd6ebb5fa0 RCX: 00007fbd6e98ebe9 [ 846.027491][T24666] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 846.035460][T24666] RBP: 00007fbd6ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 846.043437][T24666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.051428][T24666] R13: 00007fbd6ebb6038 R14: 00007fbd6ebb5fa0 R15: 00007ffe9303e338 [ 846.059412][T24666] [ 846.075018][T24677] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 846.085811][T24673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7163'. [ 846.434456][T24698] netlink: 'syz.2.7175': attribute type 19 has an invalid length. [ 846.505199][T24698] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7175'. [ 846.639307][T24703] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7176'. [ 847.212967][T24724] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 847.314517][T24724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7185'. [ 847.736670][T24742] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7192'. [ 848.045770][T24757] netlink: 'syz.0.7199': attribute type 19 has an invalid length. [ 848.065465][T24757] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7199'. [ 849.049338][T24777] netlink: 'syz.0.7215': attribute type 19 has an invalid length. [ 849.084603][T24777] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7215'. [ 849.148899][T24778] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 849.210521][T24778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7205'. [ 849.250680][T24783] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7209'. [ 849.655872][T24800] netlink: 'syz.2.7219': attribute type 10 has an invalid length. [ 849.680228][T24800] device netdevsim0 entered promiscuous mode [ 849.690783][T24800] team0: Port device netdevsim0 added [ 849.710635][T24800] netlink: 'syz.2.7219': attribute type 10 has an invalid length. [ 849.729452][T24800] device netdevsim0 left promiscuous mode [ 849.802523][T24800] team0: Port device netdevsim0 removed [ 850.184254][T24817] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 850.202964][T24817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7227'. [ 850.497099][T24831] netlink: 'syz.3.7234': attribute type 19 has an invalid length. [ 850.507627][T24831] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7234'. [ 850.766262][T24845] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7237'. [ 851.989306][T24889] netlink: 'syz.1.7259': attribute type 19 has an invalid length. [ 852.005014][T24889] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7259'. [ 853.034445][T24932] netlink: 'syz.4.7278': attribute type 10 has an invalid length. [ 853.148865][T24932] bond0: (slave netdevsim0): Releasing backup interface [ 853.242062][T24932] device netdevsim0 entered promiscuous mode [ 853.259376][T24932] team0: Port device netdevsim0 added [ 853.269326][T24938] netlink: 'syz.4.7278': attribute type 10 has an invalid length. [ 853.289485][T24938] device netdevsim0 left promiscuous mode [ 853.305650][T24938] team0: Port device netdevsim0 removed [ 853.313330][T24938] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 855.017624][T25008] device wlan0 left promiscuous mode [ 856.127700][T25057] device wlan0 left promiscuous mode [ 856.602428][T25078] netlink: 'syz.1.7343': attribute type 10 has an invalid length. [ 856.651290][T25078] device netdevsim0 entered promiscuous mode [ 856.688729][T25078] team0: Port device netdevsim0 added [ 856.715003][T25081] netlink: 'syz.1.7343': attribute type 10 has an invalid length. [ 856.747977][T25081] device netdevsim0 left promiscuous mode [ 856.795578][T25081] team0: Port device netdevsim0 removed [ 856.976625][T25091] device wlan0 left promiscuous mode [ 860.387975][T25238] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7417'. [ 861.000111][T25265] netlink: 'syz.1.7429': attribute type 19 has an invalid length. [ 861.070009][T25265] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7429'. [ 861.454791][T25284] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7435'. [ 861.653421][T25285] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7435'. [ 861.662763][T25285] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7435'. [ 861.678429][T25284] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7435'. [ 861.716884][T25274] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7434'. [ 861.745623][T25283] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7435'. [ 862.405718][T25317] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7448'. [ 862.572426][T25321] netlink: 'syz.0.7452': attribute type 19 has an invalid length. [ 862.584972][T25321] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7452'. [ 864.221724][T25384] netlink: 'syz.4.7479': attribute type 19 has an invalid length. [ 865.994253][T25441] __nla_validate_parse: 3 callbacks suppressed [ 865.994298][T25441] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7501'. [ 867.332333][T25491] netlink: 'syz.4.7522': attribute type 3 has an invalid length. [ 867.366312][T25491] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7522'. [ 867.398986][T25492] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7524'. [ 867.995979][T25513] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7533'. [ 868.112305][T25517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7533'. [ 868.186020][T25517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7533'. [ 868.220932][T25513] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7533'. [ 868.412026][T25512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7533'. [ 868.563908][T25523] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7535'. [ 869.177365][T25550] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7546'. [ 870.167338][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.173791][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.338820][T25649] __nla_validate_parse: 2 callbacks suppressed [ 872.338862][T25649] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7585'. [ 873.295916][T25669] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7591'. [ 874.078029][T25693] netlink: 'syz.0.7604': attribute type 28 has an invalid length. [ 874.095904][T25693] netlink: 'syz.0.7604': attribute type 4 has an invalid length. [ 874.158449][T25693] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7604'. [ 874.208781][T25694] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7604'. [ 874.370601][T25703] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7606'. [ 875.256489][T25724] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7616'. [ 876.412939][T25751] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7627'. [ 877.659880][T25779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7636'. [ 878.528129][T25802] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7645'. [ 879.718944][T25832] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7656'. [ 880.224040][T25848] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7662'. [ 881.553883][T25888] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7679'. [ 881.668913][T25890] netlink: 'syz.2.7680': attribute type 28 has an invalid length. [ 881.726440][T25894] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7680'. [ 881.834906][T25890] netlink: 'syz.2.7680': attribute type 4 has an invalid length. [ 881.934860][T25890] netlink: 136 bytes leftover after parsing attributes in process `syz.2.7680'. [ 882.813480][T25913] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7687'. [ 885.138031][T25964] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7706'. [ 885.613992][T25973] netlink: 'syz.2.7721': attribute type 19 has an invalid length. [ 885.633458][T25973] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7721'. [ 887.080932][T26015] netlink: 'syz.1.7726': attribute type 28 has an invalid length. [ 887.123634][T26015] netlink: 'syz.1.7726': attribute type 4 has an invalid length. [ 887.205437][T26015] netlink: 136 bytes leftover after parsing attributes in process `syz.1.7726'. [ 887.263451][T26016] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7726'. [ 887.578223][T26022] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7727'. [ 888.485857][T26037] netlink: 'syz.3.7733': attribute type 19 has an invalid length. [ 888.528199][T26037] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7733'. [ 889.533854][T26061] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7744'. [ 891.551415][T26104] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7761'. [ 891.580964][T26097] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7759'. [ 891.595992][T26100] netlink: 'syz.1.7760': attribute type 19 has an invalid length. [ 891.604955][T26100] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7760'. [ 892.925180][T26137] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7774'. [ 893.741839][T26153] netlink: 'syz.1.7781': attribute type 19 has an invalid length. [ 893.762055][T26153] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7781'. [ 893.859860][T26158] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7782'. [ 894.931730][T26182] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7793'. [ 895.100835][T26188] netlink: 'syz.4.7796': attribute type 10 has an invalid length. [ 895.140942][T26188] bond0: (slave netdevsim0): Releasing backup interface [ 895.175316][T26188] device netdevsim0 entered promiscuous mode [ 895.188018][T26188] team0: Port device netdevsim0 added [ 895.692837][T26202] netlink: 'syz.4.7801': attribute type 19 has an invalid length. [ 895.702093][T26202] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7801'. [ 896.007589][T26212] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7805'. [ 897.083192][T26238] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7814'. [ 897.647728][T26254] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7823'. [ 897.682987][T26253] netlink: 'syz.3.7822': attribute type 10 has an invalid length. [ 897.746554][T26253] bond0: (slave netdevsim0): Releasing backup interface [ 897.792774][T26253] team0: Port device netdevsim0 added [ 897.813083][T26260] netlink: 'syz.0.7825': attribute type 19 has an invalid length. [ 897.866607][T26260] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7825'. [ 899.073253][T26291] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7837'. [ 899.434322][T26303] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7841'. [ 899.649479][T26307] netlink: 'syz.2.7844': attribute type 19 has an invalid length. [ 899.685651][T26307] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7844'. [ 900.838407][T26339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7857'. [ 902.500037][T26395] netlink: 'syz.2.7884': attribute type 10 has an invalid length. [ 902.562566][T26395] device netdevsim0 entered promiscuous mode [ 902.595593][T26395] team0: Port device netdevsim0 added [ 904.123237][T26455] netlink: 'syz.4.7911': attribute type 19 has an invalid length. [ 904.137875][T26455] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7911'. [ 906.041504][T26502] netlink: 'syz.2.7928': attribute type 19 has an invalid length. [ 906.140062][T26502] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7928'. [ 908.099956][T26561] netlink: 'syz.1.7949': attribute type 19 has an invalid length. [ 908.185006][T26561] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7949'. [ 908.860360][T26581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7955'. [ 911.351669][T26632] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7973'. [ 913.403867][T26682] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7991'. [ 916.045752][T26748] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8014'. [ 918.277761][T26812] IPv6: Can't replace route, no match found [ 918.295980][T26812] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 918.327176][T26812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8039'. [ 918.375219][T26815] netlink: 'syz.2.8040': attribute type 19 has an invalid length. [ 918.383284][T26815] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8040'. [ 918.446646][T26812] netlink: 'syz.1.8039': attribute type 10 has an invalid length. [ 918.607434][T26824] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8041'. [ 920.362848][T26868] netlink: 'syz.2.8059': attribute type 19 has an invalid length. [ 920.405691][T26868] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8059'. [ 920.887238][T26876] IPv6: Can't replace route, no match found [ 920.910944][T26876] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 920.990882][T26876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8061'. [ 921.042760][T26882] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8062'. [ 921.112405][T26876] netlink: 'syz.3.8061': attribute type 10 has an invalid length. [ 922.372125][T26918] IPv6: Can't replace route, no match found [ 922.394369][T26918] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 922.432015][T26918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8078'. [ 922.506702][T26917] netlink: 'syz.1.8077': attribute type 19 has an invalid length. [ 922.571444][T26917] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8077'. [ 922.693518][T26918] netlink: 'syz.2.8078': attribute type 10 has an invalid length. [ 923.622600][T26947] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8086'. [ 924.026426][T26957] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8090'. [ 924.172919][T26958] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8090'. [ 924.217917][T26958] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8090'. [ 924.287591][T26957] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8090'. [ 924.456076][T26958] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8090'. [ 924.995896][T26977] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8094'. [ 925.096504][T26982] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 925.103309][T26982] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 925.913841][T27004] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8103'. [ 926.737743][T27029] netlink: 'syz.2.8113': attribute type 10 has an invalid length. [ 926.775201][T27029] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8113'. [ 928.059327][T27069] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8125'. [ 928.533763][T27081] IPv6: Can't replace route, no match found [ 928.625313][T27085] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 928.687716][T27081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8130'. [ 928.814013][T27081] netlink: 'syz.0.8130': attribute type 10 has an invalid length. [ 928.876144][T27081] wlan1: mtu less than device minimum [ 928.881803][T27081] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 930.216508][T27124] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8146'. [ 931.606912][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.613290][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.007497][T27148] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8155'. [ 932.125103][T27148] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8155'. [ 932.134123][T27148] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8155'. [ 932.306000][T27141] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8155'. [ 932.462374][T27141] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8155'. [ 933.677938][T27182] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8165'. [ 934.768124][T27208] IPv6: Can't replace route, no match found [ 934.802112][T27205] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 934.856947][T27205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8174'. [ 934.892622][T27205] netlink: 'syz.4.8174': attribute type 10 has an invalid length. [ 935.279425][T27224] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8179'. [ 935.430309][T27225] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8179'. [ 935.504236][T27225] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8179'. [ 935.537729][T27224] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8179'. [ 935.668714][T27219] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8179'. [ 935.859996][T27238] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8184'. [ 937.122458][T27265] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8197'. [ 937.179924][T27269] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 937.186689][T27269] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 938.200550][T27306] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8208'. [ 938.717984][T27325] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8215'. [ 938.790209][T27326] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 938.796779][T27326] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 941.784049][T27411] __nla_validate_parse: 1 callbacks suppressed [ 941.784084][T27411] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8251'. [ 942.599767][T27433] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8262'. [ 943.743344][T27470] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8276'. [ 944.229532][T27486] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8283'. [ 944.608521][T27496] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8287'. [ 944.706442][T27498] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8287'. [ 944.738610][T27498] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8287'. [ 944.748434][T27496] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8287'. [ 944.848518][T27492] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8287'. [ 945.521762][T27525] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8298'. [ 947.346578][T27577] __nla_validate_parse: 1 callbacks suppressed [ 947.346621][T27577] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8320'. [ 949.507773][T27631] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8343'. [ 951.891264][T27689] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8364'. [ 953.067722][T27712] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8382'. [ 955.381713][T27762] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8390'. [ 955.915559][T27770] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.8394'. [ 957.756728][T27808] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8407'. [ 958.976907][T27837] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.8420'. [ 959.011173][T27837] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 959.036015][T27837] CPU: 1 PID: 27837 Comm: syz.2.8420 Not tainted 6.1.148-syzkaller #0 [ 959.044318][T27837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 959.054394][T27837] Call Trace: [ 959.057703][T27837] [ 959.060645][T27837] dump_stack_lvl+0x168/0x22e [ 959.065344][T27837] ? show_regs_print_info+0x12/0x12 [ 959.070572][T27837] ? load_image+0x3b0/0x3b0 [ 959.075113][T27837] sysfs_warn_dup+0x8a/0xa0 [ 959.079637][T27837] sysfs_do_create_link_sd+0xc0/0x110 [ 959.085035][T27837] device_add+0x7ed/0xfb0 [ 959.089367][T27837] wiphy_register+0x1e68/0x2bd0 [ 959.094226][T27837] ? cfg80211_event_work+0x40/0x40 [ 959.099338][T27837] ? minstrel_ht_alloc+0x894/0xa20 [ 959.104441][T27837] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 959.110761][T27837] ieee80211_register_hw+0x2c29/0x38c0 [ 959.116216][T27837] ? ieee80211_register_hw+0xe91/0x38c0 [ 959.121749][T27837] ? ieee80211_register_hw+0xe91/0x38c0 [ 959.127285][T27837] ? ieee80211_tasklet_handler+0x20/0x20 [ 959.132912][T27837] ? memset+0x1e/0x40 [ 959.136895][T27837] ? __hrtimer_init+0x186/0x270 [ 959.141738][T27837] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 959.147475][T27837] hwsim_new_radio_nl+0xafa/0xce0 [ 959.152502][T27837] genl_family_rcv_msg_doit+0x22e/0x320 [ 959.158062][T27837] ? end_current_label_crit_section+0x170/0x170 [ 959.164301][T27837] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 959.170190][T27837] ? bpf_lsm_capable+0x5/0x10 [ 959.174855][T27837] ? security_capable+0x85/0xb0 [ 959.179700][T27837] genl_rcv_msg+0x5f2/0x780 [ 959.184200][T27837] ? genl_bind+0x350/0x350 [ 959.188602][T27837] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 959.195109][T27837] netlink_rcv_skb+0x1de/0x420 [ 959.199868][T27837] ? genl_bind+0x350/0x350 [ 959.204274][T27837] ? netlink_ack+0x1100/0x1100 [ 959.209038][T27837] ? down_read+0x1a8/0x2d0 [ 959.213443][T27837] genl_rcv+0x24/0x40 [ 959.217421][T27837] netlink_unicast+0x74d/0x8d0 [ 959.222177][T27837] netlink_sendmsg+0x89e/0xbc0 [ 959.226935][T27837] ? netlink_getsockopt+0x540/0x540 [ 959.232122][T27837] ? lockdep_hardirqs_on+0x94/0x140 [ 959.237308][T27837] ? aa_sock_msg_perm+0x94/0x150 [ 959.242236][T27837] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 959.247534][T27837] ? security_socket_sendmsg+0x7c/0xa0 [ 959.252995][T27837] ? netlink_getsockopt+0x540/0x540 [ 959.258307][T27837] ____sys_sendmsg+0x59b/0x970 [ 959.263068][T27837] ? __sys_sendmsg_sock+0x30/0x30 [ 959.268090][T27837] ? __import_iovec+0x315/0x500 [ 959.272940][T27837] ? import_iovec+0x6f/0xa0 [ 959.277442][T27837] ___sys_sendmsg+0x21c/0x290 [ 959.282112][T27837] ? __sys_sendmsg+0x270/0x270 [ 959.286893][T27837] ? __fdget+0x17c/0x200 [ 959.291126][T27837] __se_sys_sendmsg+0x19e/0x270 [ 959.295971][T27837] ? ct_nmi_exit+0x145/0x1c0 [ 959.300563][T27837] ? __x64_sys_sendmsg+0x80/0x80 [ 959.305499][T27837] ? lockdep_hardirqs_on+0x94/0x140 [ 959.310689][T27837] do_syscall_64+0x4c/0xa0 [ 959.315094][T27837] ? clear_bhb_loop+0x60/0xb0 [ 959.319931][T27837] ? clear_bhb_loop+0x60/0xb0 [ 959.324593][T27837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 959.330477][T27837] RIP: 0033:0x7fabfab8ebe9 [ 959.334879][T27837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.354475][T27837] RSP: 002b:00007fabfba72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 959.362878][T27837] RAX: ffffffffffffffda RBX: 00007fabfadb5fa0 RCX: 00007fabfab8ebe9 [ 959.370836][T27837] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 959.378801][T27837] RBP: 00007fabfac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 959.386845][T27837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 959.394806][T27837] R13: 00007fabfadb6038 R14: 00007fabfadb5fa0 R15: 00007fff187869f8 [ 959.402948][T27837] [ 960.736310][T27867] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8430'. [ 962.003160][T27902] netlink: 'syz.1.8444': attribute type 25 has an invalid length. [ 962.074607][T27909] netlink: 'syz.1.8444': attribute type 16 has an invalid length. [ 962.082643][T27909] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8444'. [ 962.102654][T27909] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.436127][T27921] netlink: 'syz.0.8463': attribute type 19 has an invalid length. [ 962.444124][T27921] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8463'. [ 962.790322][T27932] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8455'. [ 964.008280][T27965] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.8468'. [ 964.231267][T27968] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8469'. [ 964.346478][T27975] netlink: 'syz.0.8473': attribute type 19 has an invalid length. [ 964.381152][T27975] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8473'. [ 964.521905][T27982] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8476'. [ 966.150426][T28021] netlink: 'syz.0.8493': attribute type 19 has an invalid length. [ 966.177764][T28021] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8493'. [ 967.247817][T28035] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8497'. [ 967.610623][T28046] netlink: 'syz.0.8503': attribute type 10 has an invalid length. [ 967.648884][T28046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8503'. [ 967.669723][T28046] device team0 entered promiscuous mode [ 967.683703][T28046] device team_slave_1 entered promiscuous mode [ 967.700460][T28046] device geneve1 entered promiscuous mode [ 967.735350][T28046] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 967.971781][T28049] netlink: 'syz.4.8502': attribute type 16 has an invalid length. [ 967.995784][T28049] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8502'. [ 968.441080][T28071] netlink: 'syz.3.8509': attribute type 19 has an invalid length. [ 968.480774][T28071] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8509'. [ 968.788990][T28085] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8514'. [ 969.976563][T28114] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8534'. [ 970.137892][T28115] netlink: 'syz.3.8524': attribute type 25 has an invalid length. [ 970.177568][T28115] netlink: 'syz.3.8524': attribute type 16 has an invalid length. [ 970.214769][T28115] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8524'. [ 970.240864][T28115] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.483416][T28147] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8539'. [ 971.580980][T28150] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8540'. [ 971.937118][T28161] netlink: 'syz.2.8545': attribute type 16 has an invalid length. [ 971.977588][T28161] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8545'. [ 972.163233][T28168] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8546'. [ 973.201266][T28185] netlink: 'syz.2.8552': attribute type 10 has an invalid length. [ 973.238954][T28185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8552'. [ 973.306086][T28185] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 973.503730][T28200] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8557'. [ 973.966956][T28206] netlink: 'syz.0.8558': attribute type 16 has an invalid length. [ 973.996752][T28206] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8558'. [ 974.827392][T28227] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8566'. [ 975.812553][T28252] netlink: 'syz.0.8575': attribute type 16 has an invalid length. [ 975.846332][T28252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8575'. [ 976.188199][T28263] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8577'. [ 976.871687][T28282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8584'. [ 977.805938][T28298] netlink: 'syz.1.8591': attribute type 25 has an invalid length. [ 977.846553][T28298] netlink: 'syz.1.8591': attribute type 16 has an invalid length. [ 977.872454][T28298] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8591'. [ 979.131282][T28333] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8602'. [ 979.253507][T28332] netlink: 'syz.1.8601': attribute type 10 has an invalid length. [ 979.309162][T28332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8601'. [ 981.184032][T28372] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8615'. [ 981.461318][T28385] netlink: 'syz.4.8620': attribute type 10 has an invalid length. [ 981.469775][T28385] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8620'. [ 981.490644][T28385] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 981.979322][T28393] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8621'. [ 982.425715][T28397] netlink: 'syz.0.8625': attribute type 10 has an invalid length. [ 982.433800][T28397] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8625'. [ 982.494155][T28397] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 983.454008][T28428] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8636'. [ 984.291484][T28446] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8643'. [ 986.049270][T28484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8655'. [ 986.549357][T28494] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 986.634304][T28494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 986.666956][T28495] netlink: 'syz.1.8661': attribute type 29 has an invalid length. [ 986.877923][T28495] netlink: 'syz.1.8661': attribute type 29 has an invalid length. [ 986.955522][T28499] netlink: 'syz.1.8661': attribute type 29 has an invalid length. [ 986.984962][T28501] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8662'. [ 987.039913][T28503] netlink: 'syz.1.8661': attribute type 29 has an invalid length. [ 987.320853][T28510] netlink: 'syz.4.8665': attribute type 10 has an invalid length. [ 987.351766][T28510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8665'. [ 987.402470][T28510] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 988.135695][T28535] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8675'. [ 989.142887][T28549] netlink: 'syz.3.8679': attribute type 10 has an invalid length. [ 989.155851][T28549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8679'. [ 989.244726][T28549] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 989.456520][T28554] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8681'. [ 990.031931][T28573] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8689'. [ 991.655542][T28614] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8703'. [ 992.652166][T28638] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8712'. [ 992.701007][T28642] IPv6: Can't replace route, no match found [ 992.721125][T28642] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 992.751473][T28642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8715'. [ 992.820774][T28642] netlink: 'syz.3.8715': attribute type 10 has an invalid length. [ 993.047305][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.053702][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.920315][T28665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 993.980640][T28667] netlink: 'syz.0.8722': attribute type 29 has an invalid length. [ 994.065025][T28667] netlink: 'syz.0.8722': attribute type 29 has an invalid length. [ 994.129828][T28667] netlink: 'syz.0.8722': attribute type 29 has an invalid length. [ 994.204901][T28669] netlink: 'syz.0.8722': attribute type 29 has an invalid length. [ 994.363246][T28677] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8723'. [ 995.210583][T28691] netlink: 'syz.1.8728': attribute type 10 has an invalid length. [ 995.252574][T28691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8728'. [ 995.396516][T28691] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 995.925319][T28707] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8732'. [ 996.691753][T28726] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8740'. [ 997.883951][T28760] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8752'. [ 999.358220][T28792] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8762'. [ 999.720409][T28808] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8769'. [ 999.881348][T28812] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 999.923812][T28812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 999.950264][T28813] netlink: 'syz.3.8770': attribute type 29 has an invalid length. [ 999.962027][T28813] netlink: 'syz.3.8770': attribute type 29 has an invalid length. [ 1000.048825][T28813] netlink: 'syz.3.8770': attribute type 29 has an invalid length. [ 1000.065892][T28813] netlink: 'syz.3.8770': attribute type 29 has an invalid length. [ 1001.340941][T28850] IPv6: Can't replace route, no match found [ 1001.358473][T28850] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1001.407029][T28850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8783'. [ 1001.467356][T28850] netlink: 'syz.0.8783': attribute type 10 has an invalid length. [ 1001.489944][T28850] wlan1: mtu less than device minimum [ 1001.501298][T28850] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 1001.677333][T28862] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8787'. [ 1001.955762][T28872] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1002.002589][T28872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1002.024442][T28873] netlink: 'syz.4.8789': attribute type 29 has an invalid length. [ 1002.076403][T28873] netlink: 'syz.4.8789': attribute type 29 has an invalid length. [ 1002.122452][T28873] netlink: 'syz.4.8789': attribute type 29 has an invalid length. [ 1002.210784][T28876] netlink: 'syz.4.8789': attribute type 29 has an invalid length. [ 1002.658791][T28889] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8806'. [ 1003.289165][T28904] IPv6: Can't replace route, no match found [ 1003.329646][T28904] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1003.415579][T28911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8802'. [ 1003.556653][T28904] netlink: 'syz.4.8802': attribute type 10 has an invalid length. [ 1004.252422][T28933] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1004.322300][T28933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1005.300270][T28966] IPv6: Can't replace route, no match found [ 1005.319204][T28966] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1005.355812][T28966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8825'. [ 1005.402134][T28966] validate_nla: 4 callbacks suppressed [ 1005.402177][T28966] netlink: 'syz.2.8825': attribute type 10 has an invalid length. [ 1009.986921][T29086] netlink: 'syz.4.8875': attribute type 10 has an invalid length. [ 1010.007301][T29086] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8875'. [ 1012.446237][T29135] IPv6: Can't replace route, no match found [ 1012.518014][T29135] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1012.591812][T29135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8892'. [ 1012.713371][T29135] netlink: 'syz.1.8892': attribute type 10 has an invalid length. [ 1014.466544][T29184] IPv6: Can't replace route, no match found [ 1014.486946][T29184] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1014.537011][T29184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8910'. [ 1014.670307][T29184] netlink: 'syz.1.8910': attribute type 10 has an invalid length. [ 1016.185425][T29225] IPv6: Can't replace route, no match found [ 1016.332602][T29225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8927'. [ 1016.487631][T29225] netlink: 'syz.0.8927': attribute type 10 has an invalid length. [ 1016.517080][T29225] wlan1: mtu less than device minimum [ 1016.526397][T29225] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 1017.626991][T29262] IPv6: Can't replace route, no match found [ 1017.641906][T29262] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1017.728456][T29264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8941'. [ 1017.777995][T29262] netlink: 'syz.3.8941': attribute type 10 has an invalid length. [ 1019.069830][T29300] IPv6: Can't replace route, no match found [ 1019.088545][T29300] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1019.127953][T29300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8955'. [ 1019.153869][T29300] netlink: 'syz.1.8955': attribute type 10 has an invalid length. [ 1020.631876][T29340] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8969'. [ 1025.892624][T29464] IPv6: Can't replace route, no match found [ 1026.049672][T29464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9011'. [ 1026.263627][T29472] netlink: 'syz.1.9011': attribute type 10 has an invalid length. [ 1028.497843][T29525] netlink: 830 bytes leftover after parsing attributes in process `syz.4.9032'. [ 1030.403673][T29568] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.9048'. [ 1030.496869][T29569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9048'. [ 1030.585286][T29568] netlink: zone id is out of range [ 1030.587804][T29569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9048'. [ 1030.590989][T29568] netlink: get zone limit has 8 unknown bytes [ 1030.698537][T29575] delete_channel: no stack [ 1030.787714][T29572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9048'. [ 1031.274440][T29587] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9049'. [ 1031.471604][T29565] delete_channel: no stack [ 1035.253613][T29668] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9081'. [ 1038.296421][T29722] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.9099'. [ 1038.385158][T29722] netlink: zone id is out of range [ 1038.390538][T29722] netlink: get zone limit has 8 unknown bytes [ 1038.511480][T29728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9099'. [ 1038.557669][T29728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9099'. [ 1038.647350][T29722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9099'. [ 1038.709386][T29724] delete_channel: no stack [ 1039.185911][T29718] delete_channel: no stack [ 1045.517427][T29858] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.9144'. [ 1045.564718][T29858] netlink: zone id is out of range [ 1045.586081][T29858] netlink: get zone limit has 8 unknown bytes [ 1045.625105][T29860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9144'. [ 1045.634307][T29860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9144'. [ 1045.668959][T29858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9144'. [ 1045.715805][T29858] delete_channel: no stack [ 1046.266289][T29855] delete_channel: no stack [ 1052.417558][T29996] netlink: 'syz.0.9191': attribute type 10 has an invalid length. [ 1052.476054][T29996] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9191'. [ 1052.527902][T29996] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1054.512131][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.518638][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.700213][T30078] netlink: 'syz.2.9215': attribute type 3 has an invalid length. [ 1056.913584][T30078] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9215'. [ 1059.946860][T30141] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9235'. [ 1062.418144][T30185] netlink: 'syz.1.9250': attribute type 10 has an invalid length. [ 1062.444005][T30185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9250'. [ 1062.488777][T30184] netlink: 'syz.4.9247': attribute type 10 has an invalid length. [ 1062.549358][T30184] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9247'. [ 1062.670522][T30184] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1068.174836][T30283] netlink: 'syz.3.9281': attribute type 1 has an invalid length. [ 1068.182616][T30283] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.9281'. [ 1068.288367][T30283] netlink: 'syz.3.9281': attribute type 10 has an invalid length. [ 1068.456606][T30283] team0: Port device dummy0 added [ 1069.580271][T30312] netlink: 'syz.0.9290': attribute type 3 has an invalid length. [ 1069.674941][T30312] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9290'. [ 1069.790294][T30316] netlink: 'syz.4.9289': attribute type 10 has an invalid length. [ 1069.804938][T30316] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9289'. [ 1072.326116][T30376] netlink: 'syz.2.9307': attribute type 10 has an invalid length. [ 1072.404957][T30376] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9307'. [ 1078.825941][T30522] netlink: 'syz.4.9361': attribute type 1 has an invalid length. [ 1078.848805][T30522] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.9361'. [ 1078.926314][T30522] netlink: 'syz.4.9361': attribute type 10 has an invalid length. [ 1079.030647][T30522] device dummy0 entered promiscuous mode [ 1079.068586][T30522] team0: Port device dummy0 added [ 1084.236031][T30593] IPv6: Can't replace route, no match found [ 1084.244404][T30593] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1084.327251][T30593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9384'. [ 1087.362901][T30654] IPv6: Can't replace route, no match found [ 1087.393002][T30654] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1087.468900][T30654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9404'. [ 1087.713331][T30658] netlink: 'syz.0.9406': attribute type 1 has an invalid length. [ 1087.742682][T30658] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.9406'. [ 1087.921702][T30662] netlink: 'syz.0.9406': attribute type 10 has an invalid length. [ 1087.976375][T30662] device dummy0 entered promiscuous mode [ 1087.998433][T30662] team0: Port device dummy0 added [ 1088.216132][T30664] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1095.114755][T30770] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1095.208754][T30776] netlink: 'syz.4.9446': attribute type 2 has an invalid length. [ 1097.101567][T30817] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1100.350863][T30869] device syzkaller0 entered promiscuous mode [ 1103.687589][T30916] netlink: 'syz.3.9492': attribute type 2 has an invalid length. [ 1104.617915][T30941] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9501'. [ 1105.683231][T30968] netlink: 'syz.0.9510': attribute type 2 has an invalid length. [ 1106.084299][T30979] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9515'. [ 1106.105094][T30979] device hsr_slave_1 left promiscuous mode [ 1109.765921][T31026] netlink: 'syz.2.9531': attribute type 2 has an invalid length. [ 1112.609010][T31084] IPv6: Can't replace route, no match found [ 1112.654748][T31085] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1112.764980][T31082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9547'. [ 1115.496684][T31148] IPv6: Can't replace route, no match found [ 1115.545536][T31148] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1115.615523][T31148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9568'. [ 1115.941207][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.947599][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.786111][T31320] netlink: 'syz.3.9626': attribute type 25 has an invalid length. [ 1125.807117][T31320] netlink: 'syz.3.9626': attribute type 16 has an invalid length. [ 1125.820176][T31320] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9626'. [ 1126.228035][T31346] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9632'. [ 1126.327408][T31346] device hsr_slave_1 left promiscuous mode [ 1126.649429][T31355] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9639'. [ 1128.378613][T31398] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9654'. [ 1130.351657][T31456] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9669'. [ 1131.164271][T31463] netlink: 'syz.0.9672': attribute type 3 has an invalid length. [ 1131.173897][T31463] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9672'. [ 1131.248086][T31470] netlink: 'syz.0.9672': attribute type 10 has an invalid length. [ 1131.339042][T31464] netlink: 'syz.4.9671': attribute type 16 has an invalid length. [ 1131.372056][T31464] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9671'. [ 1133.499150][T31514] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9685'. [ 1134.103207][ T3637] udevd[3637]: worker [7377] terminated by signal 33 (Unknown signal 33) [ 1134.120720][ T3637] udevd[3637]: worker [7377] failed while handling '/devices/virtual/block/loop2' [ 1134.673484][T31535] netlink: 'syz.2.9690': attribute type 16 has an invalid length. [ 1134.761784][T31535] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9690'. [ 1136.891034][T31591] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9709'. [ 1139.042873][T31638] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9725'. [ 1139.284631][T31645] netlink: 'syz.3.9728': attribute type 10 has an invalid length. [ 1139.307710][T31642] netlink: 'syz.3.9728': attribute type 3 has an invalid length. [ 1139.327080][T31642] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9728'. [ 1142.696336][T31699] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9745'. [ 1144.266913][T31715] netlink: 'syz.1.9748': attribute type 25 has an invalid length. [ 1144.346243][T31717] netlink: 'syz.1.9748': attribute type 16 has an invalid length. [ 1144.415457][T31717] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9748'. [ 1146.267960][T31731] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9754'. [ 1146.406123][T31736] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9754'. [ 1146.449408][T31736] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9754'. [ 1146.477967][T31731] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9754'. [ 1147.781224][T31762] netlink: 'syz.1.9759': attribute type 3 has an invalid length. [ 1147.812801][T31763] netlink: 'syz.1.9759': attribute type 10 has an invalid length. [ 1147.835445][T31762] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9759'. [ 1148.167359][T31765] netlink: 'syz.3.9764': attribute type 25 has an invalid length. [ 1148.197365][T31765] netlink: 'syz.3.9764': attribute type 16 has an invalid length. [ 1148.215678][T31765] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9764'. [ 1149.578174][T31801] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9775'. [ 1149.665801][T31800] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9772'. [ 1149.820248][T31800] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9772'. [ 1150.278532][T31800] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9772'. [ 1150.353174][T31803] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9772'. [ 1151.117626][T31822] netlink: 'syz.4.9776': attribute type 3 has an invalid length. [ 1151.180042][T31822] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9776'. [ 1151.214306][T31821] netlink: 'syz.4.9776': attribute type 10 has an invalid length. [ 1151.410891][T31829] netlink: 'syz.2.9781': attribute type 16 has an invalid length. [ 1151.434806][T31829] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9781'. [ 1151.523397][T31834] netlink: 'syz.0.9783': attribute type 16 has an invalid length. [ 1151.925156][T31846] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9785'. [ 1151.966047][T31849] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1151.972483][T31849] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1155.062825][T31921] __nla_validate_parse: 1 callbacks suppressed [ 1155.062861][T31921] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9810'. [ 1155.365453][T31921] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9810'. [ 1155.455322][T31921] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9810'. [ 1155.570699][T31924] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9810'. [ 1157.641509][T31945] netlink: 'syz.0.9818': attribute type 16 has an invalid length. [ 1157.683775][T31945] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9818'. [ 1158.012715][T31957] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9824'. [ 1158.278077][T31967] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9825'. [ 1158.459809][T31967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9825'. [ 1158.515123][T31967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9825'. [ 1158.535271][T31966] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9825'. [ 1161.134049][T32022] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9843'. [ 1161.160329][T32022] netlink: zone id is out of range [ 1161.170702][T32022] netlink: get zone limit has 8 unknown bytes [ 1161.323039][T32029] syz.2.9848[32029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1161.323159][T32029] syz.2.9848[32029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1166.306817][T32150] netlink: 'syz.4.9893': attribute type 16 has an invalid length. [ 1166.354789][T32150] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9893'. [ 1168.671415][T32200] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9910'. [ 1168.806118][T32200] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1168.874906][T32200] CPU: 0 PID: 32200 Comm: syz.3.9910 Not tainted 6.1.148-syzkaller #0 [ 1168.883221][T32200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1168.893313][T32200] Call Trace: [ 1168.896606][T32200] [ 1168.899553][T32200] dump_stack_lvl+0x168/0x22e [ 1168.904256][T32200] ? show_regs_print_info+0x12/0x12 [ 1168.909504][T32200] ? load_image+0x3b0/0x3b0 [ 1168.914059][T32200] sysfs_warn_dup+0x8a/0xa0 [ 1168.918639][T32200] sysfs_do_create_link_sd+0xc0/0x110 [ 1168.924040][T32200] device_add+0x7ed/0xfb0 [ 1168.928408][T32200] wiphy_register+0x1e68/0x2bd0 [ 1168.933272][T32200] ? cfg80211_event_work+0x40/0x40 [ 1168.938376][T32200] ? minstrel_ht_alloc+0x894/0xa20 [ 1168.943480][T32200] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1168.949638][T32200] ieee80211_register_hw+0x2c29/0x38c0 [ 1168.955100][T32200] ? ieee80211_register_hw+0xe91/0x38c0 [ 1168.960638][T32200] ? ieee80211_register_hw+0xe91/0x38c0 [ 1168.966192][T32200] ? ieee80211_tasklet_handler+0x20/0x20 [ 1168.971822][T32200] ? memset+0x1e/0x40 [ 1168.975798][T32200] ? __hrtimer_init+0x186/0x270 [ 1168.980640][T32200] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1168.986368][T32200] hwsim_new_radio_nl+0xafa/0xce0 [ 1168.991403][T32200] genl_family_rcv_msg_doit+0x22e/0x320 [ 1168.996944][T32200] ? end_current_label_crit_section+0x170/0x170 [ 1169.003284][T32200] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1169.009267][T32200] ? bpf_lsm_capable+0x5/0x10 [ 1169.013934][T32200] ? security_capable+0x85/0xb0 [ 1169.018811][T32200] genl_rcv_msg+0x5f2/0x780 [ 1169.023316][T32200] ? genl_bind+0x350/0x350 [ 1169.027728][T32200] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1169.034067][T32200] netlink_rcv_skb+0x1de/0x420 [ 1169.038912][T32200] ? genl_bind+0x350/0x350 [ 1169.043324][T32200] ? netlink_ack+0x1100/0x1100 [ 1169.048088][T32200] ? down_read+0x1a8/0x2d0 [ 1169.052498][T32200] genl_rcv+0x24/0x40 [ 1169.056474][T32200] netlink_unicast+0x74d/0x8d0 [ 1169.061235][T32200] netlink_sendmsg+0x89e/0xbc0 [ 1169.065992][T32200] ? netlink_getsockopt+0x540/0x540 [ 1169.071189][T32200] ? aa_sock_msg_perm+0x94/0x150 [ 1169.076134][T32200] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1169.081420][T32200] ? security_socket_sendmsg+0x7c/0xa0 [ 1169.086961][T32200] ? netlink_getsockopt+0x540/0x540 [ 1169.092225][T32200] ____sys_sendmsg+0x59b/0x970 [ 1169.097001][T32200] ? __sys_sendmsg_sock+0x30/0x30 [ 1169.102105][T32200] ? __import_iovec+0x315/0x500 [ 1169.106991][T32200] ? import_iovec+0x6f/0xa0 [ 1169.111575][T32200] ___sys_sendmsg+0x21c/0x290 [ 1169.116248][T32200] ? __sys_sendmsg+0x270/0x270 [ 1169.121041][T32200] ? __fdget+0x17c/0x200 [ 1169.125286][T32200] __se_sys_sendmsg+0x19e/0x270 [ 1169.130303][T32200] ? __x64_sys_sendmsg+0x80/0x80 [ 1169.135242][T32200] ? lockdep_hardirqs_on+0x94/0x140 [ 1169.140433][T32200] do_syscall_64+0x4c/0xa0 [ 1169.144839][T32200] ? clear_bhb_loop+0x60/0xb0 [ 1169.149510][T32200] ? clear_bhb_loop+0x60/0xb0 [ 1169.154180][T32200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1169.160152][T32200] RIP: 0033:0x7fab11b8ebe9 [ 1169.164562][T32200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1169.184347][T32200] RSP: 002b:00007fab129cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1169.192751][T32200] RAX: ffffffffffffffda RBX: 00007fab11db5fa0 RCX: 00007fab11b8ebe9 [ 1169.200711][T32200] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1169.208672][T32200] RBP: 00007fab11c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1169.216632][T32200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1169.224608][T32200] R13: 00007fab11db6038 R14: 00007fab11db5fa0 R15: 00007ffc5afe4b48 [ 1169.232592][T32200] [ 1171.165649][T32239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1172.075332][T32268] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9936'. [ 1172.371672][T32279] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9941'. [ 1172.671428][T32287] netlink: 'syz.4.9943': attribute type 10 has an invalid length. [ 1172.725575][T32287] device syz_tun entered promiscuous mode [ 1172.781357][T32287] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1173.236821][T32303] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9951'. [ 1174.333928][T32330] netlink: 'syz.1.9961': attribute type 10 has an invalid length. [ 1174.404192][T32330] device syz_tun entered promiscuous mode [ 1174.426028][T32330] team0: Port device syz_tun added [ 1175.159760][T32360] netlink: 'syz.1.9976': attribute type 10 has an invalid length. [ 1175.813863][T32382] netlink: 1022 bytes leftover after parsing attributes in process `syz.3.9982'. [ 1177.367083][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.373537][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.404815][T32450] netlink: 'syz.3.10008': attribute type 10 has an invalid length. [ 1182.557477][T32550] netlink: 'syz.4.10046': attribute type 2 has an invalid length. [ 1182.585197][T32550] netlink: 'syz.4.10046': attribute type 8 has an invalid length. [ 1182.607509][T32550] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10046'. [ 1182.907754][T32558] netlink: 'syz.2.10048': attribute type 10 has an invalid length. [ 1182.976810][T32558] device syz_tun entered promiscuous mode [ 1183.007976][T32558] team0: Port device syz_tun added [ 1188.155608][T32665] netlink: 'syz.0.10086': attribute type 10 has an invalid length. [ 1188.179459][T32665] wlan1: mtu less than device minimum [ 1188.228299][T32665] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 1188.810908][T32683] netlink: 'syz.3.10093': attribute type 10 has an invalid length. [ 1189.089825][T32693] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.10098'. [ 1190.210317][T32722] netlink: 'syz.4.10107': attribute type 10 has an invalid length. [ 1190.274768][T32722] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10107'. [ 1190.420765][T32722] team0: Port device dummy0 removed [ 1190.443539][T32722] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1191.714770][T32761] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1192.064735][ T302] netlink: 'syz.1.10124': attribute type 10 has an invalid length. [ 1192.104279][ T302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10124'. [ 1192.139072][ T302] device dummy0 entered promiscuous mode [ 1192.162707][ T302] bridge0: port 4(dummy0) entered blocking state [ 1192.196664][ T302] bridge0: port 4(dummy0) entered disabled state [ 1192.235764][ T302] bridge0: port 4(dummy0) entered blocking state [ 1192.242418][ T302] bridge0: port 4(dummy0) entered forwarding state [ 1196.482549][ T396] netlink: 'syz.1.10163': attribute type 12 has an invalid length. [ 1196.525631][ T396] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10163'. [ 1198.180002][ T436] netlink: 'syz.1.10190': attribute type 1 has an invalid length. [ 1198.244713][ T436] netlink: 'syz.1.10190': attribute type 1 has an invalid length. [ 1198.294663][ T436] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.10190'. [ 1199.898464][ T463] netlink: 'syz.2.10191': attribute type 29 has an invalid length. [ 1199.956624][ T463] netlink: 'syz.2.10191': attribute type 29 has an invalid length. [ 1200.017598][ T466] netlink: 'syz.2.10191': attribute type 29 has an invalid length. [ 1201.791549][ T503] netlink: 'syz.1.10206': attribute type 10 has an invalid length. [ 1201.905614][ T507] netlink: 'syz.0.10207': attribute type 29 has an invalid length. [ 1202.326901][ T507] netlink: 'syz.0.10207': attribute type 29 has an invalid length. [ 1202.377090][ T508] netlink: 'syz.0.10207': attribute type 29 has an invalid length. [ 1203.463459][ T542] netlink: 'syz.3.10219': attribute type 29 has an invalid length. [ 1203.515249][ T542] netlink: 'syz.3.10219': attribute type 29 has an invalid length. [ 1203.558602][ T545] netlink: 'syz.4.10218': attribute type 1 has an invalid length. [ 1203.575805][ T544] netlink: 'syz.3.10219': attribute type 29 has an invalid length. [ 1203.629297][ T545] netlink: 'syz.4.10218': attribute type 1 has an invalid length. [ 1203.637557][ T547] netlink: 'syz.2.10221': attribute type 10 has an invalid length. [ 1203.685899][ T545] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.10218'. [ 1204.978344][ T590] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.10237'. [ 1207.139438][ T649] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10258'. [ 1207.194824][ T649] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10258'. [ 1207.248153][ T647] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10258'. [ 1209.152826][ T696] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.10274'. [ 1209.835850][ T706] validate_nla: 12 callbacks suppressed [ 1209.835868][ T706] netlink: 'syz.4.10276': attribute type 10 has an invalid length. [ 1212.216063][ T741] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10289'. [ 1212.281502][ T741] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10289'. [ 1212.324863][ T738] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10289'. [ 1213.094259][ T766] netlink: 'syz.2.10299': attribute type 29 has an invalid length. [ 1213.147392][ T766] netlink: 'syz.2.10299': attribute type 29 has an invalid length. [ 1213.205548][ T767] netlink: 'syz.2.10299': attribute type 29 has an invalid length. [ 1213.524500][ T778] netlink: 'syz.2.10303': attribute type 29 has an invalid length. [ 1213.532724][ T778] netlink: 'syz.2.10303': attribute type 29 has an invalid length. [ 1213.616177][ T780] netlink: 'syz.2.10303': attribute type 29 has an invalid length. [ 1216.698366][ T855] netlink: 'syz.3.10333': attribute type 29 has an invalid length. [ 1216.764490][ T855] netlink: 'syz.3.10333': attribute type 29 has an invalid length. [ 1216.793140][ T859] netlink: 'syz.3.10333': attribute type 29 has an invalid length. [ 1218.994095][ T920] netlink: 'syz.4.10350': attribute type 29 has an invalid length. [ 1219.086090][ T920] netlink: 'syz.4.10350': attribute type 29 has an invalid length. [ 1219.155040][ T925] netlink: 'syz.4.10350': attribute type 29 has an invalid length. [ 1220.919523][ T964] netlink: 'syz.0.10367': attribute type 29 has an invalid length. [ 1220.993881][ T964] netlink: 'syz.0.10367': attribute type 29 has an invalid length. [ 1221.056930][ T966] netlink: 'syz.0.10367': attribute type 29 has an invalid length. [ 1223.008242][ T1031] netlink: 'syz.1.10384': attribute type 29 has an invalid length. [ 1223.025016][ T1031] netlink: 'syz.1.10384': attribute type 29 has an invalid length. [ 1223.061793][ T1037] netlink: 'syz.1.10384': attribute type 29 has an invalid length. [ 1223.130575][ T1038] netlink: 'syz.4.10387': attribute type 5 has an invalid length. [ 1225.185712][ T1098] netlink: 'syz.0.10408': attribute type 5 has an invalid length. [ 1230.512133][ T1218] netlink: 'syz.2.10455': attribute type 29 has an invalid length. [ 1230.606131][ T1218] netlink: 'syz.2.10455': attribute type 29 has an invalid length. [ 1230.614971][ T1222] netlink: 'syz.2.10455': attribute type 29 has an invalid length. [ 1232.070951][ T1264] netlink: 'syz.1.10472': attribute type 29 has an invalid length. [ 1232.098210][ T1264] netlink: 'syz.1.10472': attribute type 29 has an invalid length. [ 1232.138805][ T1269] netlink: 'syz.1.10472': attribute type 29 has an invalid length. [ 1232.336655][ T1280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10474'. [ 1232.468678][ T1280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10474'. [ 1232.502983][ T1274] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10474'. [ 1233.802634][ T1327] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10492'. [ 1233.852135][ T1327] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10492'. [ 1233.902344][ T1323] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10492'. [ 1234.046494][ T1329] netlink: 830 bytes leftover after parsing attributes in process `syz.4.10494'. [ 1234.104354][ T1329] device bond_slave_0 entered promiscuous mode [ 1234.111187][ T1329] device bond_slave_1 entered promiscuous mode [ 1237.468190][ T1403] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10521'. [ 1238.807023][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.813393][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.819369][ T1459] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10544'. [ 1239.869426][ T1459] netlink: 'syz.3.10544': attribute type 3 has an invalid length. [ 1239.912532][ T1459] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10544'. [ 1240.315724][ T1474] netlink: 830 bytes leftover after parsing attributes in process `syz.0.10551'. [ 1240.367615][ T1474] device bond_slave_0 entered promiscuous mode [ 1240.373878][ T1474] device bond_slave_1 entered promiscuous mode [ 1240.380209][ T1474] device netdevsim0 entered promiscuous mode [ 1240.919191][ T1489] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10555'. [ 1240.968903][ T1489] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10555'. [ 1241.021938][ T1486] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10555'. [ 1241.073380][ T1492] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10555'. [ 1242.116297][ T1516] netlink: 830 bytes leftover after parsing attributes in process `syz.3.10565'. [ 1242.164697][ T1516] device bond_slave_0 entered promiscuous mode [ 1242.170984][ T1516] device bond_slave_1 entered promiscuous mode [ 1242.847019][ T1536] netlink: 'syz.3.10574': attribute type 27 has an invalid length. [ 1242.880880][ T1536] netlink: 'syz.3.10574': attribute type 1 has an invalid length. [ 1242.906212][ T1539] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10569'. [ 1243.033900][ T1539] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10569'. [ 1243.156897][ T1544] netlink: 2 bytes leftover after parsing attributes in process `syz.3.10576'. [ 1243.178492][ T1533] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10569'. [ 1243.260683][ T1541] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10569'. [ 1243.777866][ T1561] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10580'. [ 1243.844837][ T1561] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10580'. [ 1243.855690][ T1560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10580'. [ 1243.914997][ T1562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10580'. [ 1244.078057][ T1571] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10585'. [ 1250.817351][ T1685] __nla_validate_parse: 12 callbacks suppressed [ 1250.817368][ T1685] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10628'. [ 1250.913667][ T1685] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10628'. [ 1251.035885][ T1689] netlink: 'syz.0.10629': attribute type 19 has an invalid length. [ 1251.082367][ T1689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10629'. [ 1251.122621][ T1687] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10628'. [ 1252.052686][ T1719] netlink: 'syz.3.10639': attribute type 25 has an invalid length. [ 1252.081693][ T1719] netlink: 'syz.3.10639': attribute type 1 has an invalid length. [ 1252.242258][ T1724] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10641'. [ 1252.267658][ T1724] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10641'. [ 1252.315555][ T1727] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10641'. [ 1252.356926][ T1724] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10641'. [ 1252.666349][ T1734] netlink: 'syz.4.10643': attribute type 19 has an invalid length. [ 1252.727838][ T1734] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10643'. [ 1254.173074][ T1784] netlink: 'syz.2.10662': attribute type 19 has an invalid length. [ 1254.190175][ T1784] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10662'. [ 1255.012930][ T1804] netlink: 'syz.1.10671': attribute type 25 has an invalid length. [ 1255.077637][ T1804] netlink: 'syz.1.10671': attribute type 1 has an invalid length. [ 1256.020128][ T1827] netlink: 'syz.4.10680': attribute type 5 has an invalid length. [ 1256.080956][ T1827] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10680'. [ 1257.413286][ T1871] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10698'. [ 1258.320399][ T1900] netlink: 'syz.3.10709': attribute type 16 has an invalid length. [ 1258.335026][ T1900] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10709'. [ 1258.344408][ T1900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.351639][ T1900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1258.407060][ T1903] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10710'. [ 1261.047739][ T1977] netlink: 'syz.1.10740': attribute type 5 has an invalid length. [ 1261.079654][ T1977] netlink: 168 bytes leftover after parsing attributes in process `syz.1.10740'. [ 1262.326625][ T2008] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10748'. [ 1262.495096][ T2013] netlink: 'syz.2.10752': attribute type 16 has an invalid length. [ 1262.554833][ T2013] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10752'. [ 1262.751497][ T2023] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10756'. [ 1263.475078][ T2045] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10764'. [ 1263.895681][ T2057] netlink: 'syz.1.10770': attribute type 16 has an invalid length. [ 1263.903635][ T2057] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10770'. [ 1263.943034][ T2057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.950435][ T2057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.011381][ T2062] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10772'. [ 1264.075066][ T2062] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10772'. [ 1264.140185][ T2064] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10772'. [ 1264.165039][ T2062] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10772'. [ 1264.889147][ T2100] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10787'. [ 1265.236197][ T2108] netlink: 'syz.2.10791': attribute type 10 has an invalid length. [ 1268.343875][ T2212] __nla_validate_parse: 12 callbacks suppressed [ 1268.343892][ T2212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10828'. [ 1268.410274][ T2212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10828'. [ 1268.435920][ T2217] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10828'. [ 1268.462820][ T2212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10828'. [ 1268.826217][ T2234] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10834'. [ 1268.892613][ T2234] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10834'. [ 1268.939619][ T2229] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10834'. [ 1268.985316][ T2237] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10834'. [ 1269.731396][ T2261] netlink: 'syz.3.10847': attribute type 29 has an invalid length. [ 1269.784076][ T2261] netlink: 'syz.3.10847': attribute type 29 has an invalid length. [ 1269.805253][ T2262] netlink: 'syz.3.10847': attribute type 29 has an invalid length. [ 1269.853066][ T2266] netlink: 'syz.3.10847': attribute type 29 has an invalid length. [ 1271.429025][ T2309] netlink: 'syz.4.10863': attribute type 10 has an invalid length. [ 1271.474644][ T2309] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.10863'. [ 1274.334100][ T2396] netlink: 'syz.3.10897': attribute type 29 has an invalid length. [ 1274.357587][ T2396] netlink: 'syz.3.10897': attribute type 29 has an invalid length. [ 1274.377539][ T2396] netlink: 'syz.3.10897': attribute type 29 has an invalid length. [ 1274.398625][ T2396] netlink: 'syz.3.10897': attribute type 29 has an invalid length. [ 1274.408858][ T2398] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10895'. [ 1274.466352][ T2398] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10895'. [ 1274.519833][ T2395] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10895'. [ 1274.538029][ T2399] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10895'. [ 1274.570545][ T2402] netlink: 'syz.3.10898': attribute type 29 has an invalid length. [ 1275.089103][ T2426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10904'. [ 1275.104709][ T2426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10904'. [ 1275.134821][ T2419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10904'. [ 1275.608951][ T2447] validate_nla: 1 callbacks suppressed [ 1275.608970][ T2447] netlink: 'syz.0.10911': attribute type 21 has an invalid length. [ 1275.653383][ T2447] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10911'. [ 1275.713553][ T2447] netlink: 'syz.0.10911': attribute type 21 has an invalid length. [ 1278.001236][ T2517] netlink: 'syz.0.10929': attribute type 1 has an invalid length. [ 1278.077942][ T2517] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.10929'. [ 1278.635996][ T2544] netlink: 'syz.3.10938': attribute type 21 has an invalid length. [ 1278.654329][ T2544] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10938'. [ 1278.678946][ T2545] netlink: 'syz.4.10937': attribute type 12 has an invalid length. [ 1279.202424][ T2563] netlink: 'syz.4.10943': attribute type 29 has an invalid length. [ 1279.224902][ T2563] netlink: 'syz.4.10943': attribute type 29 has an invalid length. [ 1279.256481][ T2565] netlink: 'syz.4.10943': attribute type 29 has an invalid length. [ 1279.294939][ T2563] netlink: 'syz.4.10943': attribute type 29 has an invalid length. [ 1279.461915][ T2567] netlink: 'syz.1.10944': attribute type 29 has an invalid length. [ 1280.258043][ T2593] __nla_validate_parse: 1 callbacks suppressed [ 1280.258061][ T2593] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10954'. [ 1281.096906][ T2628] syzkaller0: tun_chr_ioctl cmd 35111 [ 1283.370869][ T2694] validate_nla: 7 callbacks suppressed [ 1283.370888][ T2694] netlink: 'syz.2.10981': attribute type 12 has an invalid length. [ 1283.453849][ T2694] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10981'. [ 1284.531673][ T2725] netlink: 'syz.3.10991': attribute type 10 has an invalid length. [ 1284.554594][ T2725] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.10991'. [ 1284.853861][ T2738] netlink: 'syz.3.10996': attribute type 12 has an invalid length. [ 1284.917736][ T2738] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10996'. [ 1288.155060][ T2845] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11028'. [ 1289.129526][ T2876] netlink: 'syz.4.11039': attribute type 21 has an invalid length. [ 1289.167431][ T2876] IPv6: NLM_F_CREATE should be specified when creating new route [ 1294.246155][ T2986] netlink: 176 bytes leftover after parsing attributes in process `syz.3.11078'. [ 1295.781523][ T3019] netlink: 'syz.2.11089': attribute type 3 has an invalid length. [ 1295.830481][ T3019] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11089'. [ 1296.450547][ T3029] netlink: 176 bytes leftover after parsing attributes in process `syz.2.11093'. [ 1297.076007][ T3045] netlink: 'syz.4.11098': attribute type 7 has an invalid length. [ 1297.345944][ T3052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11102'. [ 1297.405214][ T3052] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11102'. [ 1297.542296][ T3055] netlink: 'syz.4.11104': attribute type 3 has an invalid length. [ 1297.625050][ T3055] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.11104'. [ 1298.153970][ T3070] netlink: 176 bytes leftover after parsing attributes in process `syz.1.11108'. [ 1300.246867][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.253278][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.533286][ T3134] netlink: 'syz.0.11133': attribute type 7 has an invalid length. [ 1301.889941][ T3166] netlink: 'syz.1.11144': attribute type 3 has an invalid length. [ 1301.973997][ T3166] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11144'. [ 1302.780752][ T3183] netlink: 830 bytes leftover after parsing attributes in process `syz.0.11150'. [ 1303.165073][ T3188] netlink: 'syz.0.11155': attribute type 1 has an invalid length. [ 1304.641529][ T3224] netlink: 'syz.2.11168': attribute type 1 has an invalid length. [ 1306.522859][ T3266] netlink: 6 bytes leftover after parsing attributes in process `syz.1.11186'. [ 1307.684969][ T3293] netlink: 'syz.3.11198': attribute type 3 has an invalid length. [ 1307.692864][ T3293] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11198'. [ 1308.152953][ T3302] netlink: 6 bytes leftover after parsing attributes in process `syz.3.11202'. [ 1308.360654][ T3309] Â: renamed from pim6reg1 [ 1309.380201][ T3331] netlink: 'syz.1.11212': attribute type 3 has an invalid length. [ 1309.436266][ T3331] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11212'. [ 1309.504764][ T3332] netlink: 'syz.2.11213': attribute type 29 has an invalid length. [ 1309.685150][ T3332] netlink: 'syz.2.11213': attribute type 29 has an invalid length. [ 1309.693753][ T3339] netlink: 'syz.2.11213': attribute type 29 has an invalid length. [ 1309.738450][ T3332] netlink: 'syz.2.11213': attribute type 29 has an invalid length. [ 1309.835023][ T3339] netlink: 'syz.2.11213': attribute type 29 has an invalid length. [ 1310.401744][ T3362] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.11220'. [ 1311.842398][ T3394] netlink: 'syz.0.11234': attribute type 29 has an invalid length. [ 1311.894931][ T3394] netlink: 'syz.0.11234': attribute type 29 has an invalid length. [ 1311.903300][ T3395] netlink: 'syz.0.11234': attribute type 29 has an invalid length. [ 1312.226693][ T3403] syz.2.11236[3403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1312.226821][ T3403] syz.2.11236[3403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1312.786070][ T3416] Â: renamed from pim6reg1 [ 1313.906595][ T3444] validate_nla: 2 callbacks suppressed [ 1313.906614][ T3444] netlink: 'syz.2.11251': attribute type 3 has an invalid length. [ 1314.046915][ T3444] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11251'. [ 1314.892784][ T3459] netlink: 'syz.2.11257': attribute type 29 has an invalid length. [ 1314.956048][ T3459] netlink: 'syz.2.11257': attribute type 29 has an invalid length. [ 1315.132540][ T3460] netlink: 'syz.2.11257': attribute type 29 has an invalid length. [ 1315.188599][ T3461] netlink: 'syz.2.11257': attribute type 29 has an invalid length. [ 1315.354643][ T3465] netlink: 'syz.2.11257': attribute type 29 has an invalid length. [ 1315.586311][ T3472] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.11261'. [ 1320.276927][ T3556] netlink: 'syz.3.11292': attribute type 3 has an invalid length. [ 1320.354710][ T3556] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.11292'. [ 1323.177504][ T3616] pimreg: tun_chr_ioctl cmd 1074812117 [ 1330.157933][ T3766] pimreg: tun_chr_ioctl cmd 1074812117 [ 1333.245031][ T3857] netlink: 'syz.1.11404': attribute type 21 has an invalid length. [ 1333.273603][ T3857] netlink: 'syz.1.11404': attribute type 1 has an invalid length. [ 1333.281919][ T3857] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11404'. [ 1341.035341][ T4022] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 1341.443932][ T4039] netlink: 'syz.4.11472': attribute type 21 has an invalid length. [ 1342.297628][ T4076] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11484'. [ 1343.321293][ T4116] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11500'. [ 1343.533196][ T4277] Bluetooth: hci2: Malformed Event: 0x02 [ 1344.567564][ T4155] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11515'. [ 1348.423959][ T4277] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 1349.186688][ T4277] Bluetooth: hci1: Malformed Event: 0x02 [ 1349.786154][ T4272] device syz_tun left promiscuous mode [ 1349.794419][ T4272] team0: Port device syz_tun removed [ 1350.377415][ T9414] device netdevsim0 left promiscuous mode [ 1350.416844][ T9414] team0: Port device netdevsim0 removed [ 1350.597234][ T4359] netlink: 'syz.4.11575': attribute type 10 has an invalid length. [ 1350.624709][ T4359] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.11575'. [ 1350.875782][ T4366] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1350.886323][ T4366] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1350.895027][ T4366] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1350.908615][ T4366] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1350.918380][ T4366] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1350.927991][ T4366] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1351.251101][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1351.261963][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1351.278031][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1351.288129][ T4277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1351.296026][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1351.303507][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1351.527509][ T4366] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 1351.655272][ T4363] chnl_net:caif_netlink_parms(): no params data found [ 1352.026403][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.033761][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.065702][ T4363] device bridge_slave_0 entered promiscuous mode [ 1352.121181][ T4377] chnl_net:caif_netlink_parms(): no params data found [ 1352.137544][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.156294][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.166476][ T4363] device bridge_slave_1 entered promiscuous mode [ 1352.304117][ T4363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1352.386369][ T4363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.462159][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.470315][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.489148][ T4377] device bridge_slave_0 entered promiscuous mode [ 1352.548092][ T4363] team0: Port device team_slave_0 added [ 1352.567670][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.578423][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.599304][ T4377] device bridge_slave_1 entered promiscuous mode [ 1352.632741][ T4363] team0: Port device team_slave_1 added [ 1352.732166][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1352.754658][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.820054][ T4363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1352.841754][ T4377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1352.879998][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.889826][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.918145][ T4363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.959297][ T4377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.968552][ T4366] Bluetooth: hci1: command 0x0409 tx timeout [ 1353.209249][ T4377] team0: Port device team_slave_0 added [ 1353.257391][ T4363] device hsr_slave_0 entered promiscuous mode [ 1353.277127][ T4363] device hsr_slave_1 entered promiscuous mode [ 1353.287324][ T4377] team0: Port device team_slave_1 added [ 1353.365049][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 1353.482617][ T4277] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 1353.512414][ T4377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1353.522112][ T4377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1353.624571][ T4377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1353.865468][ T9414] device geneve1 left promiscuous mode [ 1353.887740][ T9414] team0 (unregistering): Port device geneve1 removed [ 1354.420867][ T9414] device team_slave_1 left promiscuous mode [ 1354.431071][ T9414] team0 (unregistering): Port device team_slave_1 removed [ 1355.046572][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 1355.412866][ T4377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1355.420511][ T4377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1355.447846][ T4377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1355.454808][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 1355.657585][ T4377] device hsr_slave_0 entered promiscuous mode [ 1355.738350][ T4377] device hsr_slave_1 entered promiscuous mode [ 1355.755740][ T4377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1355.767898][ T4377] Cannot create hsr debugfs directory [ 1355.890865][ T4363] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1355.931772][ T4363] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1355.946664][ T4363] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1355.958748][ T4363] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1356.105127][ T4363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.122496][ T4363] 8021q: adding VLAN 0 to HW filter on device team0 [ 1356.159480][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1356.189096][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1356.242184][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1356.262338][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1356.286226][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.293593][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.347548][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1356.358196][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1356.368050][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.375348][ T4338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.383574][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1356.470063][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1356.489210][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1356.502509][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1356.512042][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1356.522437][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1356.532035][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1356.543294][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1356.570282][ T4377] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1356.592085][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1356.605357][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1356.656812][ T4377] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1356.666914][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1356.685303][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1356.694949][ T4377] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1356.729455][ T4377] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1356.782676][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1357.128074][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 1357.205609][ T9414] bond0: (slave netdevsim0): Releasing backup interface [ 1357.391066][ T4377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1357.444888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1357.476990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1357.508615][ T4377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1357.524664][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 1357.578502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1357.588798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1357.598328][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.605480][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1357.617722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1357.627315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1357.639406][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.646669][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.681549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1357.692048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1357.706020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1357.734219][ T4363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1357.743013][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1357.778727][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1357.809455][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1357.817504][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1357.833345][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1357.842036][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1357.859898][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1357.869454][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1357.878676][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1357.909400][ T4377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1357.927668][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1358.000109][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1358.011217][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1358.561233][ T9414] GPL: port 1(erspan0) entered disabled state [ 1358.729345][ T9414] device erspan0 left promiscuous mode [ 1358.747057][ T9414] GPL: port 1(erspan0) entered disabled state [ 1358.781167][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1358.791133][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1358.847031][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1358.855853][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1358.863656][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1358.875020][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1358.883713][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1358.897879][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1358.909953][ T4377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1358.956988][ T4363] device veth0_vlan entered promiscuous mode [ 1358.981106][ T4363] device veth1_vlan entered promiscuous mode [ 1359.079837][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1359.091439][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1359.100210][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1359.116827][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1359.130906][ T4363] device veth0_macvtap entered promiscuous mode [ 1359.164390][ T4363] device veth1_macvtap entered promiscuous mode [ 1359.205127][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 1359.209236][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1359.219207][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1359.232939][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1359.241913][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1359.253427][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1359.280157][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1359.307991][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1359.317538][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1359.342771][ T4363] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.352431][ T4363] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.361574][ T4363] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.374070][ T4363] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.568328][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.582072][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.604694][ T4366] Bluetooth: hci4: command 0x0419 tx timeout [ 1359.617154][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1359.629888][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1359.639787][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1359.746291][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.754402][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.769846][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1359.785938][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1359.806074][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1359.814233][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1359.826171][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1359.835776][ T4377] device veth0_vlan entered promiscuous mode [ 1359.885778][ T9414] device hsr_slave_0 left promiscuous mode [ 1359.892140][ T9414] device hsr_slave_1 left promiscuous mode [ 1359.935874][ T9414] device veth1_vlan left promiscuous mode [ 1360.186055][ T9414] device geneve1 left promiscuous mode [ 1360.194002][ T9414] team0 (unregistering): Port device geneve1 removed [ 1360.502771][ T9414] device team_slave_1 left promiscuous mode [ 1360.509581][ T9414] team0 (unregistering): Port device team_slave_1 removed [ 1360.588063][ T9414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1360.632202][ T9414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1360.800422][ T9414] device dummy0 left promiscuous mode [ 1360.808038][ T9414] team0 (unregistering): Port device dummy0 removed [ 1361.062874][ T9414] bond0 (unregistering): Released all slaves [ 1361.096279][ T4377] device veth1_vlan entered promiscuous mode [ 1361.238453][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1361.249748][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1361.268473][ T4377] device veth0_macvtap entered promiscuous mode [ 1361.280214][ T4377] device veth1_macvtap entered promiscuous mode [ 1361.306414][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1361.317174][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.330207][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1361.338917][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1361.360315][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1361.371477][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1361.380834][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1361.392974][ T4377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1361.408007][ T4377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.428276][ T4377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1361.447479][ T7353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1361.478999][ T7353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1361.506977][ T4377] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.526620][ T4377] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.554566][ T4377] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.563391][ T4377] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.687787][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.694409][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.335096][ T4520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.398736][ T4520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.408494][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.427475][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.440646][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1364.467216][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1365.076159][ T4617] device syzkaller0 entered promiscuous mode [ 1365.668217][ T4644] device syzkaller0 entered promiscuous mode [ 1367.991969][ T4664] device syzkaller0 left promiscuous mode [ 1368.999286][ T4700] device syzkaller0 entered promiscuous mode [ 1369.006484][ T4702] netlink: 'syz.5.11694': attribute type 7 has an invalid length. [ 1371.866050][ T4737] device syzkaller0 entered promiscuous mode [ 1371.886463][ T4737] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 1372.347144][ T4757] netlink: 'syz.3.11717': attribute type 7 has an invalid length. [ 1373.533837][ T4791] netlink: 'syz.4.11730': attribute type 7 has an invalid length. [ 1374.422201][ T4823] bond_slave_1: mtu less than device minimum [ 1379.472000][ T4866] device syzkaller0 entered promiscuous mode [ 1380.588580][ T4907] device syzkaller0 entered promiscuous mode [ 1380.612228][ T4909] syz.3.11782[4909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1380.612366][ T4909] syz.3.11782[4909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1382.649422][ T4953] netlink: 'syz.6.11797': attribute type 19 has an invalid length. [ 1382.703131][ T4953] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11797'. [ 1382.778415][ T4955] netlink: 'syz.3.11798': attribute type 25 has an invalid length. [ 1384.170523][ T4994] netlink: 'syz.4.11814': attribute type 19 has an invalid length. [ 1384.178903][ T4994] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11814'. [ 1384.245591][ T4997] netlink: 'syz.5.11815': attribute type 25 has an invalid length. [ 1386.204016][ T5031] netlink: 'syz.1.11830': attribute type 19 has an invalid length. [ 1386.233610][ T5031] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11830'. [ 1388.527161][ T5093] syz.1.11855[5093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1388.527304][ T5093] syz.1.11855[5093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1391.592625][ T5137] syz.6.11871[5137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1391.662643][ T5137] syz.6.11871[5137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1394.847404][ T5196] syz.4.11893[5196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1394.897475][ T5196] syz.4.11893[5196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1398.631196][ T5264] netlink: 'syz.3.11918': attribute type 10 has an invalid length. [ 1400.046605][ T5302] netlink: 'syz.5.11933': attribute type 10 has an invalid length. [ 1400.096613][ T5302] device macvlan0 entered promiscuous mode [ 1400.222904][ T5302] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1401.032449][ T5320] device syzkaller0 entered promiscuous mode [ 1406.474812][ T5344] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.11946'. [ 1408.758420][ T5414] device syzkaller0 entered promiscuous mode [ 1414.441664][ T5465] syz.3.11990[5465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1414.441807][ T5465] syz.3.11990[5465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1414.575276][ T5467] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11989'. [ 1414.650551][ T5472] -1: renamed from syzkaller0 [ 1421.245506][ T5524] device syzkaller0 entered promiscuous mode [ 1423.130526][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.137717][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.818383][ T4277] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1425.844650][ T4277] Bluetooth: hci0: command 0x2016 tx timeout [ 1476.404581][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 1476.410672][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 1484.566794][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.573227][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.006385][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.012754][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.446814][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.453271][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.886389][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.892737][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.326521][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.332858][ T1277] ieee802154 phy1 wpan1: encryption failed: -22