last executing test programs: 9.063800788s ago: executing program 2 (id=18418): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20004, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1ff8d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002706870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83984e68a6d80a5f5222ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0007000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1f6428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000a034000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1ebbb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa5210b16eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000}, 0x50) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000240)}, 0x8001) socket$kcm(0x10, 0xa, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0x22, 0x0, &(0x7f00000001c0)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.329854078s ago: executing program 3 (id=18421): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x19c5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x12b020, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x250, 0x0, 0x800000, 0x2, 0x0, 0xd, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x8000, 0x1, 0x7f, 0x20401, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x6}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000200), &(0x7f0000000880)=r0}, 0xff65) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='|\"@]K@{.\"\x02') r3 = socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1a000}], 0x1}, 0x80d1) close(r4) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @loopback}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000000}, 0x0, 0x0, 0xfffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x104056, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 5.878501245s ago: executing program 4 (id=18423): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, 0x0, &(0x7f0000000280)}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000150081054e81f782db44b9040a1d3b020a000000040000a11800020000e9400084150e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6e94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad9561b4a29c828f6a3aa2fcf72baa7ea67e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a753916647f616b762439deec51", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) 5.803394386s ago: executing program 1 (id=18424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 5.802942495s ago: executing program 2 (id=18425): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0x8, 0xb}, 0x50) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x44) socketpair(0x28, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='\x00', 0x0, 0x8}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r5, &(0x7f0000000640), 0x0}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000003f00)='ns/uts\x00') close(r4) recvmsg$unix(r0, 0x0, 0x20) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f91124fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 5.802599935s ago: executing program 3 (id=18426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0xd, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xc18, 0x80000000, 0x0, 0x0, 0x4, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r0, &(0x7f0000000680)="4dcc199d"}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x1, 0x2000002, 0x0, 0x2, 0x0, 0x3ff, 0xfffd}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e00000004000000040000000140000000000000", @ANYRES32=0x1, @ANYRES64], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 5.375800622s ago: executing program 4 (id=18427): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0x8, 0xb}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00000004000000fcffff6e49473a01bdee844e", @ANYRES32=r0, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000005000000030000000500"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x44) socketpair(0x28, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='\x00', 0x0, 0x8}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r5, &(0x7f0000000640), 0x0}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000003f00)='ns/uts\x00') close(r4) recvmsg$unix(r0, 0x0, 0x20) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f91124fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 5.319095873s ago: executing program 2 (id=18428): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$kcm(0x10, 0x2, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) 5.013054547s ago: executing program 3 (id=18429): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440), 0x0, 0x8d, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x28, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = gettid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91b24fc602f020f000a740100053582c137153e37024801", 0x27}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x80000001, 0x7, 0x10000, 0x5aa0, 0x1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0x1, 0x1, 0x6, 0x0, 0x5, 0x20, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xffff, 0x8000}, 0x1018, 0x8, 0x1, 0x1, 0xffffffffffffffff, 0xc8, 0xf1c6, 0x0, 0x0, 0x0, 0x8000000000000001}, r2, 0xd, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) close(0xffffffffffffffff) socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 5.011267817s ago: executing program 4 (id=18430): perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x5, 0x3, 0x100, 0xd, 0x40011, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)=@o_path={&(0x7f0000001140)='./file0\x00', r1, 0x4000, r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffc}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac437", 0x1a}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3b}}, @ip_tos_u8={{0x11, 0x29, 0x4}}], 0x30}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x97ff}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) 4.824653209s ago: executing program 0 (id=18431): r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x31, 0x80, 0x9, 0x0, 0xa695, 0x20, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x43, 0x0, @perf_config_ext={0x7, 0xc}, 0x9100, 0xfffffffffffffff8, 0x0, 0x1, 0x5, 0x8000, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x356}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) 3.064641086s ago: executing program 2 (id=18432): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x22) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, 0x0, 0x101d0) sendmsg$kcm(r0, 0x0, 0x48800) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x8000, 0x160}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0xc29a, 0x7, 0x5, 0x0, 0x2, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10c002, 0xac5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2d}, 0x2410, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 3.064188166s ago: executing program 3 (id=18433): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x2}, 0x222, 0x4, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x888) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x10c002, 0xfffffffffffffffb, 0x0, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071104500000000009500002100000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5c00000012006b009a3fe3d86e17aa31106b870000000000000000050000006504001a0038001d002a31a0e69ee52bd34460bc06000000a705251e6182949a3651f60a84c9f0d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x0, 0x24, 0xc8, &(0x7f0000000340)="27bf9bae1cd416f07fddfd01138ff0323292817b4821100327e3f2c4e1893ee3e72d9d98", &(0x7f0000000500)=""/200, 0x46e, 0x0, 0x71, 0x4d, &(0x7f0000000600)="d3607689f12bf9e13944dbbea685def8bfefcf4a6440c22f8d328d880d60165935e76d0f9366acbdb4709270571e4bc9c86e9671b8c94ba1df066cb4ff7f12c99445e800dbb8179d6186819d713328a4fa81a9a724eb18d58ee97610b56a3baf5fa10bdc158564637107f7a63f4b1ba906", &(0x7f0000000740)="61cfb5cf1f00d4da6fa3d03b92fa34c021b6c98c6c23586091c01e725207792b17f83400efe709c098412ae95e88c8b3d051f7c6d50afa849a89aaa9d6039fd71e0f1e1c23e150225e81e2d6d5", 0x0, 0x0, 0x3}, 0x50) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 3.063919016s ago: executing program 0 (id=18434): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x826, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 3.010046186s ago: executing program 1 (id=18435): socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d001000250002000f2c00000ad34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a62b00d700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) close(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000040300"/28], 0x48) r4 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @private2, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=ANY=[@ANYBLOB="18000000000000002900000039"], 0x18}, 0x0) socket$kcm(0xa, 0x1, 0x106) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_migrate\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb030018000000000000051feb76f6ef888cb3debf1100"/47], 0x0, 0x26}, 0x28) r6 = syz_clone(0x2000, &(0x7f00000005c0)="383c14cd65604a3f07e8102447a63a9821f935aadc1deefd1131ef047ef0f1de60d4a2c69422734371a5c2e80f544c3bd33dfa1732bd0339f92ff8dffefa327be31fb8625deb83fe0866fba59d11d53ce1bf190700e865a44bcebce4361ceb4c73f63b2f36248dd011635e95d61aa2e1aa371549c70468c092eddaa3247484c7ff66fd810aec5fd0f07246567bc99aaa1dc07d95725e5f1ced006adf149d3de76b0991e2e7ce9a5e36c7ea7f4378bde9f01494b33dcb32db96836046ebbcdbc3965ba4c851fc07", 0xc7, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="6f25ca79ba0711ad7e2e3ddb23784ffd87596da5cc3c905461c1fa7cad5bab59293524773a0a6866e5c27ec30e48a28b97efb6e112bb8390ce204e20c00bdecbeb535d9eea5193758411be258d42457e82471b2e9045246442593b7d408c77e9265a5889a0d308f7bc07f398070f612aa93770bf7b56a3e32edc117c") r7 = perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0x5b, 0xb, 0x9, 0x2, 0x0, 0x4, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000007c0), 0x4}, 0x2, 0x352, 0x5, 0x4, 0xfffffffeffffffff, 0xd18e, 0xead3, 0x0, 0xfffffff8, 0x0, 0x5}, 0x0, 0xd, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x9, 0x4, 0x8, 0xc, 0x0, 0x7f, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xffff, 0x9}, 0x1040, 0x1, 0x0, 0x9, 0x9, 0x32, 0xd, 0x0, 0x7, 0x0, 0x7}, r6, 0x8, r7, 0x1) 2.995987336s ago: executing program 4 (id=18436): socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x54, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.818779869s ago: executing program 2 (id=18437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x8, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.692925431s ago: executing program 0 (id=18438): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0x8, 0xb}, 0x50) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x44) socketpair(0x28, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='\x00', 0x0, 0x8}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r5, &(0x7f0000000640), 0x0}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000003f00)='ns/uts\x00') close(r4) recvmsg$unix(r0, 0x0, 0x20) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f91124fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.571423702s ago: executing program 1 (id=18439): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x8}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020705200000000002020207b0ae8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000c80), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1}, 0x48) close(r0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e40)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0xe, &(0x7f00000003c0), 0x0, 0x0, 0x0, &(0x7f0000000540), 0x8, 0x9b, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r4, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x8, 0x8, 0xfff, 0x5, 0x4000, r3, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001100)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0xb, 0x0, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffc}], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x2, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000bc0)) 2.388088245s ago: executing program 0 (id=18440): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00000004000000fcffff6e49473a01bdee844e", @ANYRES32=r0, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000005000000030000000500"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x44) socketpair(0x28, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='\x00', 0x0, 0x8}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r4, &(0x7f0000000640), 0x0}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000003f00)='ns/uts\x00') close(r3) recvmsg$unix(r0, 0x0, 0x20) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f91124fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.347579536s ago: executing program 1 (id=18441): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x2}, 0x222, 0x4, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x888) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x10c002, 0xfffffffffffffffb, 0x0, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071104500000000009500002100000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5c00000012006b009a3fe3d86e17aa31106b870000000000000000050000006504001a0038001d002a31a0e69ee52bd34460bc06000000a705251e6182949a3651f60a84c9f0d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x0, 0x12, 0xc8, &(0x7f0000000340)="27bf9bae1cd416f07fddfd01138ff0323292", &(0x7f0000000500)=""/200, 0x46e, 0x0, 0x71, 0x4d, &(0x7f0000000600)="d3607689f12bf9e13944dbbea685def8bfefcf4a6440c22f8d328d880d60165935e76d0f9366acbdb4709270571e4bc9c86e9671b8c94ba1df066cb4ff7f12c99445e800dbb8179d6186819d713328a4fa81a9a724eb18d58ee97610b56a3baf5fa10bdc158564637107f7a63f4b1ba906", &(0x7f0000000740)="61cfb5cf1f00d4da6fa3d03b92fa34c021b6c98c6c23586091c01e725207792b17f83400efe709c098412ae95e88c8b3d051f7c6d50afa849a89aaa9d6039fd71e0f1e1c23e150225e81e2d6d5", 0x0, 0x0, 0x3}, 0x50) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916200000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 2.05974882s ago: executing program 0 (id=18442): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'geneve1\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000280)=0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000300), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x4, 0x0, 0x16, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100001, 0xca, 0x0, 0x6, 0x1000000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, 0x0, 0x1c0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x200000007ff}, 0x10022, 0xac5f, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x3680, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 1.821428054s ago: executing program 0 (id=18443): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b70400"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21061, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305828, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 1.821123153s ago: executing program 3 (id=18444): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) close(0x3) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x112c0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1805000000000000000000000000a501de5a0000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa10000000007010000f8ffffffbfa400000000000007040000f0ffffffb70000", @ANYRES32=r1, @ANYRESOCT=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x20, 0x0, 0xc2ba, 0x0, 0x5a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x1e, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r4], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) 305.906806ms ago: executing program 1 (id=18445): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80046a, 0x1, @perf_bp={0x0}, 0x8000, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200400c0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 239.789917ms ago: executing program 3 (id=18446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 239.444257ms ago: executing program 4 (id=18447): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x22) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, 0x0, 0x101d0) sendmsg$kcm(r0, 0x0, 0x48800) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x8000, 0x160}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0xc29a, 0x7, 0x5, 0x0, 0x2, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x10c002, 0xac5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2d}, 0x2410, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 217.269727ms ago: executing program 2 (id=18448): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a0003fe0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0xfd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9f1}, 0x100080, 0x0, 0x0, 0x9}, 0x0, 0xfffffffdfffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31070000007ea60864160af36514000cc0080002000700020006", 0x29}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffec3, 0x0}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000cc0)=r0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 174.101218ms ago: executing program 1 (id=18449): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x826, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 0s ago: executing program 4 (id=18450): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0x8, 0xb}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x44) socketpair(0x28, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='\x00', 0x0, 0x8}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r5, &(0x7f0000000640), 0x0}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000003f00)='ns/uts\x00') close(r4) recvmsg$unix(r0, 0x0, 0x20) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f91124fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ink: 1047 bytes leftover after parsing attributes in process `syz.2.16506'. [ 2417.210737][T25070] netlink: 'syz.3.16509': attribute type 10 has an invalid length. [ 2417.240240][T25070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16509'. [ 2417.290278][T25070] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 2417.366088][T25075] netlink: 14 bytes leftover after parsing attributes in process `syz.1.16510'. [ 2417.401808][T25075] device hsr_slave_0 left promiscuous mode [ 2417.427586][T25075] device hsr_slave_1 left promiscuous mode [ 2417.875811][T25089] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.16513'. [ 2417.916853][T25092] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2417.937755][T25092] dvmrp1: linktype set to 768 [ 2417.994921][T25091] : port 1(ip6gretap0) entered blocking state [ 2418.018043][T25091] : port 1(ip6gretap0) entered disabled state [ 2418.051421][T25091] device ip6gretap0 entered promiscuous mode [ 2418.104204][T25097] device ip6gretap0 left promiscuous mode [ 2418.110649][T25097] : port 1(ip6gretap0) entered disabled state [ 2418.667828][T25106] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.16519'. [ 2418.821065][T25106] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2418.852451][T25106] CPU: 1 PID: 25106 Comm: syz.2.16519 Not tainted syzkaller #0 [ 2418.860081][T25106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2418.870288][T25106] Call Trace: [ 2418.873621][T25106] [ 2418.876592][T25106] dump_stack_lvl+0x188/0x24e [ 2418.881346][T25106] ? show_regs_print_info+0x12/0x12 [ 2418.886598][T25106] ? load_image+0x410/0x410 [ 2418.891158][T25106] sysfs_warn_dup+0x8a/0xa0 [ 2418.895708][T25106] sysfs_do_create_link_sd+0xc0/0x110 [ 2418.901342][T25106] device_add+0x83b/0x1050 [ 2418.905838][T25106] wiphy_register+0x1d8b/0x2aa0 [ 2418.910766][T25106] ? cfg80211_event_work+0x40/0x40 [ 2418.916008][T25106] ? minstrel_ht_alloc+0x894/0xa20 [ 2418.921264][T25106] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2418.927381][T25106] ieee80211_register_hw+0x2d48/0x39f0 [ 2418.932903][T25106] ? ieee80211_register_hw+0xed1/0x39f0 [ 2418.938501][T25106] ? ieee80211_register_hw+0xed1/0x39f0 [ 2418.944099][T25106] ? ieee80211_tasklet_handler+0x20/0x20 [ 2418.949779][T25106] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2418.955723][T25106] ? __debug_object_init+0xed/0x440 [ 2418.961017][T25106] ? memset+0x1e/0x40 [ 2418.965021][T25106] ? __hrtimer_init+0x189/0x270 [ 2418.969904][T25106] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2418.975663][T25106] ? memcpy+0x3c/0x60 [ 2418.979684][T25106] hwsim_new_radio_nl+0xab7/0xc90 [ 2418.984754][T25106] genl_family_rcv_msg_doit+0x22f/0x350 [ 2418.990332][T25106] ? end_current_label_crit_section+0x170/0x170 [ 2418.996696][T25106] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2419.002639][T25106] ? bpf_lsm_capable+0x5/0x10 [ 2419.007354][T25106] ? security_capable+0x85/0xb0 [ 2419.012244][T25106] genl_rcv_msg+0x601/0x790 [ 2419.016782][T25106] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2419.022987][T25106] ? genl_bind+0x360/0x360 [ 2419.027468][T25106] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2419.033840][T25106] ? lock_acquire+0x225/0x4a0 [ 2419.038650][T25106] netlink_rcv_skb+0x1ef/0x440 [ 2419.043449][T25106] ? genl_bind+0x360/0x360 [ 2419.047926][T25106] ? netlink_ack+0x1160/0x1160 [ 2419.052729][T25106] ? down_read+0x1a8/0x2d0 [ 2419.057179][T25106] genl_rcv+0x24/0x40 [ 2419.061275][T25106] netlink_unicast+0x7ad/0x920 [ 2419.066087][T25106] netlink_sendmsg+0x8ad/0xbd0 [ 2419.070883][T25106] ? netlink_getsockopt+0x550/0x550 [ 2419.076105][T25106] ? tomoyo_socket_sendmsg+0x12/0x30 [ 2419.081452][T25106] ? aa_sock_msg_perm+0x94/0x150 [ 2419.086418][T25106] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2419.091723][T25106] ? security_socket_sendmsg+0x7c/0xa0 [ 2419.097213][T25106] ? netlink_getsockopt+0x550/0x550 [ 2419.102466][T25106] ____sys_sendmsg+0x5ed/0x9a0 [ 2419.107278][T25106] ? __sys_sendmsg_sock+0x30/0x30 [ 2419.112344][T25106] ? __import_iovec+0x306/0x510 [ 2419.117259][T25106] ? import_iovec+0x6f/0xa0 [ 2419.121797][T25106] ___sys_sendmsg+0x2a2/0x360 [ 2419.126516][T25106] ? __sys_sendmsg+0x2a0/0x2a0 [ 2419.131336][T25106] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2419.137145][T25106] __se_sys_sendmsg+0x1c3/0x2b0 [ 2419.142039][T25106] ? __x64_sys_sendmsg+0x80/0x80 [ 2419.147036][T25106] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2419.152984][T25106] do_syscall_64+0x4c/0xa0 [ 2419.157439][T25106] ? clear_bhb_loop+0x60/0xb0 [ 2419.162136][T25106] ? clear_bhb_loop+0x60/0xb0 [ 2419.166848][T25106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2419.172796][T25106] RIP: 0033:0x7f459539ce59 [ 2419.177242][T25106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2419.196874][T25106] RSP: 002b:00007f45935d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2419.205343][T25106] RAX: ffffffffffffffda RBX: 00007f4595616090 RCX: 00007f459539ce59 [ 2419.213368][T25106] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2419.221396][T25106] RBP: 00007f4595432e6f R08: 0000000000000000 R09: 0000000000000000 [ 2419.229395][T25106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2419.237395][T25106] R13: 00007f4595616128 R14: 00007f4595616090 R15: 00007ffef59a5c28 [ 2419.245412][T25106] [ 2419.363863][T25120] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16525'. [ 2420.184256][T25147] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2420.345206][T25140] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2420.495896][T25140] CPU: 1 PID: 25140 Comm: syz.2.16530 Not tainted syzkaller #0 [ 2420.503549][T25140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2420.513664][T25140] Call Trace: [ 2420.516996][T25140] [ 2420.519973][T25140] dump_stack_lvl+0x188/0x24e [ 2420.524751][T25140] ? show_regs_print_info+0x12/0x12 [ 2420.530018][T25140] ? load_image+0x410/0x410 [ 2420.534602][T25140] sysfs_warn_dup+0x8a/0xa0 [ 2420.539171][T25140] sysfs_do_create_link_sd+0xc0/0x110 [ 2420.544614][T25140] device_add+0x83b/0x1050 [ 2420.549091][T25140] wiphy_register+0x1d8b/0x2aa0 [ 2420.554028][T25140] ? cfg80211_event_work+0x40/0x40 [ 2420.559194][T25140] ? minstrel_ht_alloc+0x894/0xa20 [ 2420.564370][T25140] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2420.570508][T25140] ieee80211_register_hw+0x2d48/0x39f0 [ 2420.576044][T25140] ? ieee80211_register_hw+0xed1/0x39f0 [ 2420.581649][T25140] ? ieee80211_register_hw+0xed1/0x39f0 [ 2420.587266][T25140] ? ieee80211_tasklet_handler+0x20/0x20 [ 2420.592957][T25140] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2420.598916][T25140] ? __debug_object_init+0xed/0x440 [ 2420.604177][T25140] ? memset+0x1e/0x40 [ 2420.608210][T25140] ? __hrtimer_init+0x189/0x270 [ 2420.613115][T25140] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2420.618906][T25140] ? memcpy+0x3c/0x60 [ 2420.622939][T25140] hwsim_new_radio_nl+0xab7/0xc90 [ 2420.628035][T25140] genl_family_rcv_msg_doit+0x22f/0x350 [ 2420.633646][T25140] ? end_current_label_crit_section+0x170/0x170 [ 2420.639935][T25140] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2420.645891][T25140] ? bpf_lsm_capable+0x5/0x10 [ 2420.650616][T25140] ? security_capable+0x85/0xb0 [ 2420.655518][T25140] genl_rcv_msg+0x601/0x790 [ 2420.660089][T25140] ? genl_bind+0x360/0x360 [ 2420.664559][T25140] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2420.670969][T25140] netlink_rcv_skb+0x1ef/0x440 [ 2420.675815][T25140] ? genl_bind+0x360/0x360 [ 2420.680291][T25140] ? netlink_ack+0x1160/0x1160 [ 2420.685116][T25140] ? down_read+0x1a8/0x2d0 [ 2420.689584][T25140] genl_rcv+0x24/0x40 [ 2420.693637][T25140] netlink_unicast+0x7ad/0x920 [ 2420.698460][T25140] netlink_sendmsg+0x8ad/0xbd0 [ 2420.703286][T25140] ? netlink_getsockopt+0x550/0x550 [ 2420.708538][T25140] ? aa_sock_msg_perm+0x94/0x150 [ 2420.713521][T25140] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2420.718869][T25140] ? security_socket_sendmsg+0x7c/0xa0 [ 2420.724363][T25140] ? netlink_getsockopt+0x550/0x550 [ 2420.729609][T25140] ____sys_sendmsg+0x5ed/0x9a0 [ 2420.734606][T25140] ? __sys_sendmsg_sock+0x30/0x30 [ 2420.739671][T25140] ? __import_iovec+0x306/0x510 [ 2420.744578][T25140] ? import_iovec+0x6f/0xa0 [ 2420.749133][T25140] ___sys_sendmsg+0x2a2/0x360 [ 2420.753867][T25140] ? __sys_sendmsg+0x2a0/0x2a0 [ 2420.758783][T25140] __se_sys_sendmsg+0x1c3/0x2b0 [ 2420.763703][T25140] ? ct_nmi_exit+0x145/0x1c0 [ 2420.768442][T25140] ? __x64_sys_sendmsg+0x80/0x80 [ 2420.773450][T25140] ? lockdep_hardirqs_on+0x94/0x140 [ 2420.778703][T25140] do_syscall_64+0x4c/0xa0 [ 2420.783162][T25140] ? clear_bhb_loop+0x60/0xb0 [ 2420.787881][T25140] ? clear_bhb_loop+0x60/0xb0 [ 2420.792688][T25140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2420.798640][T25140] RIP: 0033:0x7f459539ce59 [ 2420.803090][T25140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2420.822744][T25140] RSP: 002b:00007f45935f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2420.831209][T25140] RAX: ffffffffffffffda RBX: 00007f4595615fa0 RCX: 00007f459539ce59 [ 2420.839224][T25140] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2420.847241][T25140] RBP: 00007f4595432e6f R08: 0000000000000000 R09: 0000000000000000 [ 2420.855248][T25140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2420.863271][T25140] R13: 00007f4595616038 R14: 00007f4595615fa0 R15: 00007ffef59a5c28 [ 2420.871317][T25140] [ 2420.957833][T25153] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2420.964087][T25153] dvmrp1: linktype set to 768 [ 2420.980090][T25146] __nla_validate_parse: 3 callbacks suppressed [ 2420.980155][T25146] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.16531'. [ 2421.021978][T25152] : port 1(ip6gretap0) entered blocking state [ 2421.028881][T25152] : port 1(ip6gretap0) entered disabled state [ 2421.049708][T25152] device ip6gretap0 entered promiscuous mode [ 2421.077643][T25151] device ip6gretap0 left promiscuous mode [ 2421.096735][T25151] : port 1(ip6gretap0) entered disabled state [ 2421.532950][T25169] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2421.666474][T25169] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.16548'. [ 2421.710469][T25169] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2421.739365][T25169] CPU: 1 PID: 25169 Comm: syz.0.16548 Not tainted syzkaller #0 [ 2421.747003][T25169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2421.757115][T25169] Call Trace: [ 2421.760441][T25169] [ 2421.763429][T25169] dump_stack_lvl+0x188/0x24e [ 2421.768173][T25169] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2421.774416][T25169] ? show_regs_print_info+0x12/0x12 [ 2421.779667][T25169] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2421.785936][T25169] sysfs_warn_dup+0x8a/0xa0 [ 2421.790509][T25169] sysfs_do_create_link_sd+0xc0/0x110 [ 2421.795968][T25169] device_add+0x83b/0x1050 [ 2421.800473][T25169] wiphy_register+0x1d8b/0x2aa0 [ 2421.805435][T25169] ? cfg80211_event_work+0x40/0x40 [ 2421.810606][T25169] ? minstrel_ht_alloc+0x894/0xa20 [ 2421.815812][T25169] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2421.821962][T25169] ieee80211_register_hw+0x2d48/0x39f0 [ 2421.827518][T25169] ? ieee80211_register_hw+0xed1/0x39f0 [ 2421.833132][T25169] ? ieee80211_register_hw+0xed1/0x39f0 [ 2421.838806][T25169] ? ieee80211_tasklet_handler+0x20/0x20 [ 2421.844555][T25169] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2421.850522][T25169] ? __debug_object_init+0xed/0x440 [ 2421.855796][T25169] ? memset+0x1e/0x40 [ 2421.859854][T25169] ? __hrtimer_init+0x189/0x270 [ 2421.864781][T25169] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2421.870604][T25169] ? memcpy+0x3c/0x60 [ 2421.874681][T25169] hwsim_new_radio_nl+0xab7/0xc90 [ 2421.879807][T25169] genl_family_rcv_msg_doit+0x22f/0x350 [ 2421.885426][T25169] ? end_current_label_crit_section+0x170/0x170 [ 2421.891748][T25169] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2421.897744][T25169] ? bpf_lsm_capable+0x5/0x10 [ 2421.902670][T25169] ? security_capable+0x85/0xb0 [ 2421.907626][T25169] genl_rcv_msg+0x601/0x790 [ 2421.912220][T25169] ? genl_bind+0x360/0x360 [ 2421.916731][T25169] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2421.923344][T25169] netlink_rcv_skb+0x1ef/0x440 [ 2421.928179][T25169] ? genl_bind+0x360/0x360 [ 2421.932673][T25169] ? netlink_ack+0x1160/0x1160 [ 2421.937533][T25169] ? down_read+0x1a8/0x2d0 [ 2421.942024][T25169] genl_rcv+0x24/0x40 [ 2421.946087][T25169] netlink_unicast+0x7ad/0x920 [ 2421.950954][T25169] netlink_sendmsg+0x8ad/0xbd0 [ 2421.955816][T25169] ? netlink_getsockopt+0x550/0x550 [ 2421.961120][T25169] ? aa_sock_msg_perm+0x94/0x150 [ 2421.966141][T25169] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2421.971494][T25169] ? security_socket_sendmsg+0x7c/0xa0 [ 2421.977009][T25169] ? netlink_getsockopt+0x550/0x550 [ 2421.982275][T25169] ____sys_sendmsg+0x5ed/0x9a0 [ 2421.987135][T25169] ? __sys_sendmsg_sock+0x30/0x30 [ 2421.992199][T25169] ? __import_iovec+0x306/0x510 [ 2421.997129][T25169] ? import_iovec+0x6f/0xa0 [ 2422.001715][T25169] ___sys_sendmsg+0x2a2/0x360 [ 2422.006484][T25169] ? __sys_sendmsg+0x2a0/0x2a0 [ 2422.011442][T25169] __se_sys_sendmsg+0x1c3/0x2b0 [ 2422.016371][T25169] ? __x64_sys_sendmsg+0x80/0x80 [ 2422.021422][T25169] ? lockdep_hardirqs_on+0x94/0x140 [ 2422.026696][T25169] do_syscall_64+0x4c/0xa0 [ 2422.031170][T25169] ? clear_bhb_loop+0x60/0xb0 [ 2422.035919][T25169] ? clear_bhb_loop+0x60/0xb0 [ 2422.040664][T25169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2422.046626][T25169] RIP: 0033:0x7f84e1d9ce59 [ 2422.051102][T25169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2422.070769][T25169] RSP: 002b:00007f84e2c1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2422.079256][T25169] RAX: ffffffffffffffda RBX: 00007f84e2016090 RCX: 00007f84e1d9ce59 [ 2422.087294][T25169] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2422.095325][T25169] RBP: 00007f84e1e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2422.103354][T25169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2422.111380][T25169] R13: 00007f84e2016128 R14: 00007f84e2016090 R15: 00007ffd30b92128 [ 2422.119445][T25169] [ 2422.453359][T25179] validate_nla: 4 callbacks suppressed [ 2422.453380][T25179] netlink: 'syz.2.16539': attribute type 39 has an invalid length. [ 2422.486977][T25190] netlink: 'syz.1.16544': attribute type 9 has an invalid length. [ 2422.512700][T25190] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.16544'. [ 2422.622863][T25190] netlink: 'syz.1.16544': attribute type 10 has an invalid length. [ 2422.680351][T25190] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2422.738329][T25199] netlink: 'syz.0.16545': attribute type 10 has an invalid length. [ 2422.752729][T25199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16545'. [ 2422.774397][T25199] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 2422.865773][T25204] netlink: 14 bytes leftover after parsing attributes in process `syz.2.16546'. [ 2423.161836][T25208] : port 1(ip6gretap0) entered blocking state [ 2423.174763][T25208] : port 1(ip6gretap0) entered disabled state [ 2423.199843][T25208] device ip6gretap0 entered promiscuous mode [ 2423.252243][T25214] netlink: 'syz.2.16551': attribute type 21 has an invalid length. [ 2423.303290][T25215] device ip6gretap0 left promiscuous mode [ 2423.309290][T25215] : port 1(ip6gretap0) entered disabled state [ 2423.466738][T25221] netlink: 'syz.0.16553': attribute type 29 has an invalid length. [ 2424.169627][T25249] netlink: 175 bytes leftover after parsing attributes in process `syz.3.16567'. [ 2424.191970][T25248] netlink: 'syz.4.16565': attribute type 10 has an invalid length. [ 2424.200527][T25248] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16565'. [ 2424.210909][T25248] device dummy0 entered promiscuous mode [ 2424.228143][T25248] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 2424.248303][T25245] netlink: 'syz.2.16564': attribute type 10 has an invalid length. [ 2424.275565][T25249] netlink: 'syz.3.16567': attribute type 10 has an invalid length. [ 2424.568224][T25264] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16573'. [ 2424.704161][T25265] netlink: 'syz.0.16571': attribute type 29 has an invalid length. [ 2425.037304][T25283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16581'. [ 2425.048721][T25283] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 2425.359637][T25292] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.16584'. [ 2425.376001][T25292] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2425.385216][T25292] dvmrp1: linktype set to 768 [ 2425.578650][T25298] : port 1(ip6gretap0) entered blocking state [ 2425.587537][T25298] : port 1(ip6gretap0) entered disabled state [ 2425.600496][T25298] device ip6gretap0 entered promiscuous mode [ 2425.628589][T25298] device ip6gretap0 left promiscuous mode [ 2425.635685][T25298] : port 1(ip6gretap0) entered disabled state [ 2425.704906][T25305] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2425.835341][T25305] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2425.845418][T25305] CPU: 0 PID: 25305 Comm: syz.3.16588 Not tainted syzkaller #0 [ 2425.853063][T25305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2425.863175][T25305] Call Trace: [ 2425.866502][T25305] [ 2425.869472][T25305] dump_stack_lvl+0x188/0x24e [ 2425.874217][T25305] ? show_regs_print_info+0x12/0x12 [ 2425.879504][T25305] ? load_image+0x410/0x410 [ 2425.884131][T25305] sysfs_warn_dup+0x8a/0xa0 [ 2425.888748][T25305] sysfs_do_create_link_sd+0xc0/0x110 [ 2425.894202][T25305] device_add+0x83b/0x1050 [ 2425.898736][T25305] wiphy_register+0x1d8b/0x2aa0 [ 2425.903710][T25305] ? cfg80211_event_work+0x40/0x40 [ 2425.908887][T25305] ? minstrel_ht_alloc+0x894/0xa20 [ 2425.914077][T25305] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2425.920350][T25305] ieee80211_register_hw+0x2d48/0x39f0 [ 2425.925912][T25305] ? ieee80211_register_hw+0xed1/0x39f0 [ 2425.931516][T25305] ? ieee80211_register_hw+0xed1/0x39f0 [ 2425.937145][T25305] ? ieee80211_tasklet_handler+0x20/0x20 [ 2425.942849][T25305] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2425.948824][T25305] ? __debug_object_init+0xed/0x440 [ 2425.954096][T25305] ? memset+0x1e/0x40 [ 2425.958128][T25305] ? __hrtimer_init+0x189/0x270 [ 2425.963024][T25305] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2425.968882][T25305] ? memcpy+0x3c/0x60 [ 2425.972923][T25305] hwsim_new_radio_nl+0xab7/0xc90 [ 2425.978005][T25305] genl_family_rcv_msg_doit+0x22f/0x350 [ 2425.983607][T25305] ? end_current_label_crit_section+0x170/0x170 [ 2425.989883][T25305] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2425.995826][T25305] ? bpf_lsm_capable+0x5/0x10 [ 2426.000555][T25305] ? security_capable+0x85/0xb0 [ 2426.005451][T25305] genl_rcv_msg+0x601/0x790 [ 2426.010004][T25305] ? genl_bind+0x360/0x360 [ 2426.014470][T25305] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2426.020857][T25305] netlink_rcv_skb+0x1ef/0x440 [ 2426.025654][T25305] ? genl_bind+0x360/0x360 [ 2426.030132][T25305] ? netlink_ack+0x1160/0x1160 [ 2426.034961][T25305] ? down_read+0x1a8/0x2d0 [ 2426.039438][T25305] genl_rcv+0x24/0x40 [ 2426.043483][T25305] netlink_unicast+0x7ad/0x920 [ 2426.048334][T25305] netlink_sendmsg+0x8ad/0xbd0 [ 2426.053156][T25305] ? netlink_getsockopt+0x550/0x550 [ 2426.058396][T25305] ? aa_sock_msg_perm+0x94/0x150 [ 2426.063368][T25305] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2426.068683][T25305] ? security_socket_sendmsg+0x7c/0xa0 [ 2426.074166][T25305] ? netlink_getsockopt+0x550/0x550 [ 2426.079389][T25305] ____sys_sendmsg+0x5ed/0x9a0 [ 2426.084202][T25305] ? __sys_sendmsg_sock+0x30/0x30 [ 2426.089262][T25305] ? __import_iovec+0x306/0x510 [ 2426.094153][T25305] ? import_iovec+0x6f/0xa0 [ 2426.098699][T25305] ___sys_sendmsg+0x2a2/0x360 [ 2426.103435][T25305] ? __sys_sendmsg+0x2a0/0x2a0 [ 2426.108333][T25305] __se_sys_sendmsg+0x1c3/0x2b0 [ 2426.113255][T25305] ? __x64_sys_sendmsg+0x80/0x80 [ 2426.118272][T25305] ? lockdep_hardirqs_on+0x94/0x140 [ 2426.123527][T25305] do_syscall_64+0x4c/0xa0 [ 2426.127976][T25305] ? clear_bhb_loop+0x60/0xb0 [ 2426.132765][T25305] ? clear_bhb_loop+0x60/0xb0 [ 2426.137487][T25305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2426.143414][T25305] RIP: 0033:0x7fdd0a59ce59 [ 2426.147860][T25305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2426.167491][T25305] RSP: 002b:00007fdd0b4be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2426.175939][T25305] RAX: ffffffffffffffda RBX: 00007fdd0a816090 RCX: 00007fdd0a59ce59 [ 2426.183936][T25305] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2426.191969][T25305] RBP: 00007fdd0a632e6f R08: 0000000000000000 R09: 0000000000000000 [ 2426.199989][T25305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2426.207986][T25305] R13: 00007fdd0a816128 R14: 00007fdd0a816090 R15: 00007ffe8156de18 [ 2426.216025][T25305] [ 2426.232046][T25309] __nla_validate_parse: 1 callbacks suppressed [ 2426.232062][T25309] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.16590'. [ 2426.252876][T25309] bridge_slave_1: default FDB implementation only supports local addresses [ 2426.521455][T25320] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.16594'. [ 2427.554135][T25361] validate_nla: 5 callbacks suppressed [ 2427.554151][T25361] netlink: 'syz.1.16608': attribute type 10 has an invalid length. [ 2427.572599][T25361] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16608'. [ 2427.581847][T25361] device team0 entered promiscuous mode [ 2427.587997][T25361] device team_slave_0 entered promiscuous mode [ 2427.594850][T25361] device team_slave_1 entered promiscuous mode [ 2427.603458][T25361] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2427.721529][T25363] netlink: 'syz.4.16609': attribute type 7 has an invalid length. [ 2427.730213][T25357] : port 1(ip6gretap0) entered blocking state [ 2427.749197][T25357] : port 1(ip6gretap0) entered disabled state [ 2427.778465][T25357] device ip6gretap0 entered promiscuous mode [ 2427.816797][T25364] device ip6gretap0 left promiscuous mode [ 2427.841002][T25364] : port 1(ip6gretap0) entered disabled state [ 2427.955492][T25374] netlink: 'syz.1.16617': attribute type 10 has an invalid length. [ 2428.032403][T25378] netlink: 'syz.2.16619': attribute type 10 has an invalid length. [ 2428.046788][T25378] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16619'. [ 2428.135950][T25382] netlink: 'syz.1.16620': attribute type 10 has an invalid length. [ 2428.347948][T25391] netlink: 'syz.2.16625': attribute type 10 has an invalid length. [ 2428.363364][T25391] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16625'. [ 2428.545571][T25399] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16628'. [ 2428.605777][T25403] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16629'. [ 2428.832668][T25409] : port 1(ip6gretap0) entered blocking state [ 2428.861037][T25409] : port 1(ip6gretap0) entered disabled state [ 2428.897666][T25409] device ip6gretap0 entered promiscuous mode [ 2428.918690][T25416] device ip6gretap0 left promiscuous mode [ 2428.926909][T25416] : port 1(ip6gretap0) entered disabled state [ 2429.095334][T25424] netlink: 'syz.2.16637': attribute type 39 has an invalid length. [ 2429.143258][T25427] netlink: 'syz.4.16635': attribute type 21 has an invalid length. [ 2429.272001][T25432] netlink: 'syz.0.16640': attribute type 10 has an invalid length. [ 2429.299105][T25435] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16641'. [ 2429.576532][T25444] : port 1(ip6gretap0) entered blocking state [ 2429.603967][T25444] : port 1(ip6gretap0) entered disabled state [ 2429.644854][T25444] device ip6gretap0 entered promiscuous mode [ 2429.688727][T25446] device ip6gretap0 left promiscuous mode [ 2429.715095][T25446] : port 1(ip6gretap0) entered disabled state [ 2429.944669][T25452] netlink: 'syz.2.16651': attribute type 29 has an invalid length. [ 2430.087658][T25456] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16653'. [ 2430.332880][T25465] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.16657'. [ 2430.704073][T25476] : port 1(ip6gretap0) entered blocking state [ 2430.733224][T25476] : port 1(ip6gretap0) entered disabled state [ 2430.749089][T25476] device ip6gretap0 entered promiscuous mode [ 2430.840481][T25486] device ip6gretap0 left promiscuous mode [ 2430.852934][T25486] : port 1(ip6gretap0) entered disabled state [ 2430.944129][T25495] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2430.963448][T25495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2431.337217][T25512] __nla_validate_parse: 3 callbacks suppressed [ 2431.337254][T25512] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16678'. [ 2431.611024][T25528] netlink: 48 bytes leftover after parsing attributes in process `syz.4.16686'. [ 2431.984539][T25546] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16694'. [ 2432.242467][T25556] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.16698'. [ 2432.278233][T25552] : port 1(ip6gretap0) entered blocking state [ 2432.286554][T25552] : port 1(ip6gretap0) entered disabled state [ 2432.311737][T25552] device ip6gretap0 entered promiscuous mode [ 2432.352829][T25561] device ip6gretap0 left promiscuous mode [ 2432.379760][T25561] : port 1(ip6gretap0) entered disabled state [ 2432.776261][T25574] validate_nla: 8 callbacks suppressed [ 2432.776277][T25574] netlink: 'syz.0.16705': attribute type 21 has an invalid length. [ 2432.810221][T25574] netlink: 'syz.0.16705': attribute type 6 has an invalid length. [ 2432.829616][T25574] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16705'. [ 2433.004504][T25581] netlink: 'syz.4.16706': attribute type 29 has an invalid length. [ 2433.043225][T25584] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16708'. [ 2434.364112][T25609] netlink: 'syz.4.16717': attribute type 4 has an invalid length. [ 2434.372260][T25609] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16717'. [ 2434.586214][T25617] netlink: 'syz.4.16722': attribute type 3 has an invalid length. [ 2434.613538][T25617] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.16722'. [ 2434.660476][T25623] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16721'. [ 2435.256130][T25637] netlink: 'syz.4.16729': attribute type 29 has an invalid length. [ 2435.958080][T25648] netlink: 'syz.0.16743': attribute type 10 has an invalid length. [ 2436.153205][T25656] netlink: 'syz.2.16738': attribute type 3 has an invalid length. [ 2436.165058][T25656] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.16738'. [ 2436.543788][T25674] netlink: 'syz.2.16744': attribute type 29 has an invalid length. [ 2436.661146][T25678] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16748'. [ 2436.981666][T25682] netlink: 'syz.3.16750': attribute type 10 has an invalid length. [ 2437.249958][T25692] netlink: 830 bytes leftover after parsing attributes in process `syz.0.16754'. [ 2437.850531][T25714] netlink: 'syz.4.16763': attribute type 29 has an invalid length. [ 2437.875395][T25714] netlink: 'syz.4.16763': attribute type 29 has an invalid length. [ 2437.898718][T25716] netlink: 'syz.4.16763': attribute type 29 has an invalid length. [ 2437.922218][T25714] netlink: 'syz.4.16763': attribute type 29 has an invalid length. [ 2437.950976][T25714] netlink: 'syz.4.16763': attribute type 29 has an invalid length. [ 2438.002647][T25720] netlink: 'syz.2.16764': attribute type 10 has an invalid length. [ 2438.416144][T25732] netlink: 'syz.4.16767': attribute type 29 has an invalid length. [ 2438.969823][T25740] netlink: 'syz.3.16771': attribute type 21 has an invalid length. [ 2438.978500][T25740] netlink: 'syz.3.16771': attribute type 6 has an invalid length. [ 2438.986847][T25740] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16771'. [ 2439.226242][T25749] netlink: 'syz.3.16777': attribute type 21 has an invalid length. [ 2439.387646][T25754] : port 1(ip6gretap0) entered blocking state [ 2439.410498][T25754] : port 1(ip6gretap0) entered disabled state [ 2439.465957][T25754] device ip6gretap0 entered promiscuous mode [ 2439.520898][T25756] device ip6gretap0 left promiscuous mode [ 2439.540102][T25756] : port 1(ip6gretap0) entered disabled state [ 2439.834388][T25762] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16782'. [ 2440.044728][T25775] netlink: 55 bytes leftover after parsing attributes in process `syz.3.16788'. [ 2440.889384][T25800] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.16798'. [ 2441.012796][T25806] netlink: 2 bytes leftover after parsing attributes in process `syz.4.16802'. [ 2441.178805][T25815] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.16805'. [ 2441.879290][T25834] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16815'. [ 2442.601788][T25865] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.16828'. [ 2442.701332][T25865] netlink: zone id is out of range [ 2442.733354][T25865] netlink: zone id is out of range [ 2442.774316][T25865] netlink: zone id is out of range [ 2442.798765][T25865] netlink: zone id is out of range [ 2442.824230][T25865] netlink: zone id is out of range [ 2442.849733][T25865] netlink: zone id is out of range [ 2442.882766][T25865] netlink: zone id is out of range [ 2442.888018][T25865] netlink: zone id is out of range [ 2442.912578][T25865] netlink: zone id is out of range [ 2442.917752][T25865] netlink: zone id is out of range [ 2443.210383][T25882] IPv6: Can't replace route, no match found [ 2443.550496][T25897] netlink: 184 bytes leftover after parsing attributes in process `syz.0.16843'. [ 2443.724597][T25895] validate_nla: 12 callbacks suppressed [ 2443.724615][T25895] netlink: 'syz.3.16842': attribute type 29 has an invalid length. [ 2443.792559][T25908] netlink: 'syz.1.16846': attribute type 15 has an invalid length. [ 2443.800814][T25908] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16846'. [ 2444.763782][T25915] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16849'. [ 2444.969993][T25927] netlink: 1 bytes leftover after parsing attributes in process `syz.0.16855'. [ 2445.273202][T25934] netlink: 'syz.0.16858': attribute type 7 has an invalid length. [ 2445.446062][T25941] netlink: 184 bytes leftover after parsing attributes in process `syz.2.16861'. [ 2445.465652][T25936] : port 1(ip6gretap0) entered blocking state [ 2445.474605][T25936] : port 1(ip6gretap0) entered disabled state [ 2445.509238][T25936] device ip6gretap0 entered promiscuous mode [ 2445.558279][T25942] device ip6gretap0 left promiscuous mode [ 2445.572753][T25942] : port 1(ip6gretap0) entered disabled state [ 2445.678928][T25946] netlink: 'syz.3.16863': attribute type 10 has an invalid length. [ 2445.799349][T25950] IPv6: Can't replace route, no match found [ 2446.740925][T25973] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.16875'. [ 2447.305130][T25987] IPv6: Can't replace route, no match found [ 2447.479900][T25992] netlink: 1 bytes leftover after parsing attributes in process `syz.2.16882'. [ 2447.510841][T25993] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16881'. [ 2449.392044][T26017] IPv6: Can't replace route, no match found [ 2449.717611][T26029] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16901'. [ 2453.762276][T26102] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16927'. [ 2453.920772][T26113] netlink: 1 bytes leftover after parsing attributes in process `syz.3.16934'. [ 2453.951879][T26114] : port 1(ip6gretap0) entered blocking state [ 2453.973233][T26114] : port 1(ip6gretap0) entered disabled state [ 2453.991859][T26114] device ip6gretap0 entered promiscuous mode [ 2454.025478][T26120] device ip6gretap0 left promiscuous mode [ 2454.033776][T26120] : port 1(ip6gretap0) entered disabled state [ 2455.149234][T26158] : port 1(ip6gretap0) entered blocking state [ 2455.156935][T26158] : port 1(ip6gretap0) entered disabled state [ 2455.179226][T26158] device ip6gretap0 entered promiscuous mode [ 2455.237881][T26161] device ip6gretap0 left promiscuous mode [ 2455.244527][T26161] : port 1(ip6gretap0) entered disabled state [ 2455.438462][T26170] netlink: 'syz.0.16964': attribute type 29 has an invalid length. [ 2458.944072][T26201] netlink: 'syz.1.16970': attribute type 29 has an invalid length. [ 2458.967946][T26208] : port 1(ip6gretap0) entered blocking state [ 2458.982914][T26208] : port 1(ip6gretap0) entered disabled state [ 2459.000560][T26208] device ip6gretap0 entered promiscuous mode [ 2459.009719][T26214] device ip6gretap0 left promiscuous mode [ 2459.023061][T26214] : port 1(ip6gretap0) entered disabled state [ 2459.610566][T26248] netlink: 'syz.4.16984': attribute type 1 has an invalid length. [ 2459.618798][T26248] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.16984'. [ 2459.702855][T26246] Q±6ã`Ò˜: renamed from lo [ 2462.916862][T26265] netlink: 'syz.3.16990': attribute type 21 has an invalid length. [ 2462.954151][T26265] netlink: 'syz.3.16990': attribute type 6 has an invalid length. [ 2462.965450][T26265] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16990'. [ 2463.092830][T26273] : port 1(ip6gretap0) entered blocking state [ 2463.101775][T26273] : port 1(ip6gretap0) entered disabled state [ 2463.109775][T26273] device ip6gretap0 entered promiscuous mode [ 2463.164971][T26275] device ip6gretap0 left promiscuous mode [ 2463.210587][T26275] : port 1(ip6gretap0) entered disabled state [ 2464.813245][T26289] : port 1(ip6gretap0) entered blocking state [ 2464.830612][T26289] : port 1(ip6gretap0) entered disabled state [ 2464.865832][T26289] device ip6gretap0 entered promiscuous mode [ 2464.905926][T26291] device ip6gretap0 left promiscuous mode [ 2464.911997][T26291] : port 1(ip6gretap0) entered disabled state [ 2465.374023][T26305] netlink: 'syz.1.17008': attribute type 21 has an invalid length. [ 2465.382091][T26305] netlink: 'syz.1.17008': attribute type 6 has an invalid length. [ 2465.411355][T26305] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17008'. [ 2465.569447][T26312] netlink: 'syz.0.17011': attribute type 15 has an invalid length. [ 2465.578262][T26312] netlink: 'syz.0.17011': attribute type 7 has an invalid length. [ 2465.587871][T26312] netlink: 52 bytes leftover after parsing attributes in process `syz.0.17011'. [ 2467.420612][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.427327][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.838981][T26346] : port 1(ip6gretap0) entered blocking state [ 2467.848791][T26346] : port 1(ip6gretap0) entered disabled state [ 2467.857046][T26346] device ip6gretap0 entered promiscuous mode [ 2467.883721][T26347] device ip6gretap0 left promiscuous mode [ 2467.889713][T26347] : port 1(ip6gretap0) entered disabled state [ 2467.999889][T26349] netlink: 'syz.4.17024': attribute type 21 has an invalid length. [ 2468.014257][T26349] netlink: 'syz.4.17024': attribute type 6 has an invalid length. [ 2468.033195][T26349] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17024'. [ 2470.414201][T26372] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.17034'. [ 2470.424639][T26379] : port 1(ip6gretap0) entered blocking state [ 2470.430926][T26379] : port 1(ip6gretap0) entered disabled state [ 2470.440231][T26379] device ip6gretap0 entered promiscuous mode [ 2470.449130][T26381] device ip6gretap0 left promiscuous mode [ 2470.481699][T26381] : port 1(ip6gretap0) entered disabled state [ 2470.601018][T26389] netlink: 'syz.0.17038': attribute type 21 has an invalid length. [ 2470.643929][T26389] netlink: 'syz.0.17038': attribute type 6 has an invalid length. [ 2470.668150][T26389] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17038'. [ 2471.936267][T26419] device syzkaller0 entered promiscuous mode [ 2472.015052][T26422] : port 1(ip6gretap0) entered blocking state [ 2472.021618][T26422] : port 1(ip6gretap0) entered disabled state [ 2472.034115][T26422] device ip6gretap0 entered promiscuous mode [ 2472.136859][T26415] device ip6gretap0 left promiscuous mode [ 2472.144577][T26415] : port 1(ip6gretap0) entered disabled state [ 2478.289980][T26432] netlink: 'syz.2.17056': attribute type 21 has an invalid length. [ 2478.298674][T26432] netlink: 'syz.2.17056': attribute type 6 has an invalid length. [ 2478.307279][T26432] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17056'. [ 2481.762605][T26483] netlink: 'syz.4.17072': attribute type 29 has an invalid length. [ 2481.876385][T26486] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17073'. [ 2484.347445][T26499] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.17078'. [ 2484.362677][T26500] netlink: 'syz.3.17085': attribute type 29 has an invalid length. [ 2491.599773][T26550] netlink: 'syz.3.17093': attribute type 29 has an invalid length. [ 2491.608087][T26552] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.17094'. [ 2492.493836][T26597] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.17109'. [ 2492.518181][T26598] netlink: 'syz.0.17108': attribute type 29 has an invalid length. [ 2496.727718][T26642] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.17130'. [ 2496.849619][T26649] device syzkaller0 entered promiscuous mode [ 2497.802173][T26661] netlink: 'syz.4.17135': attribute type 29 has an invalid length. [ 2501.114694][T26694] netlink: 'syz.0.17150': attribute type 29 has an invalid length. [ 2501.135888][T26700] netlink: 'syz.1.17146': attribute type 7 has an invalid length. [ 2501.364231][T26702] netlink: 'syz.2.17147': attribute type 10 has an invalid length. [ 2505.163021][T26741] netlink: 'syz.3.17162': attribute type 29 has an invalid length. [ 2505.331084][T26746] netlink: 'syz.0.17164': attribute type 7 has an invalid length. [ 2505.397081][T26748] IPv6: pim6reg1: Disabled Multicast RS [ 2506.195477][T26780] netlink: 'syz.3.17177': attribute type 29 has an invalid length. [ 2507.140074][T26789] netlink: 'syz.4.17181': attribute type 7 has an invalid length. [ 2510.977251][T26815] netlink: 'syz.4.17190': attribute type 29 has an invalid length. [ 2511.460958][T26837] netlink: 'syz.3.17198': attribute type 7 has an invalid length. [ 2514.658536][T26848] netlink: 3291 bytes leftover after parsing attributes in process `syz.4.17203'. [ 2515.887914][T26888] netlink: 'syz.2.17218': attribute type 7 has an invalid length. [ 2516.094237][T26886] netlink: 'syz.0.17215': attribute type 29 has an invalid length. [ 2516.210974][T26894] netlink: 'syz.3.17219': attribute type 29 has an invalid length. [ 2517.592023][T26919] device syzkaller0 entered promiscuous mode [ 2520.327471][T26947] netlink: 'syz.4.17238': attribute type 29 has an invalid length. [ 2520.335868][T26949] netlink: 'syz.1.17239': attribute type 29 has an invalid length. [ 2522.620637][T26978] netlink: 'syz.1.17258': attribute type 29 has an invalid length. [ 2523.051711][T26985] device syzkaller0 entered promiscuous mode [ 2528.005401][T27007] netlink: 'syz.1.17257': attribute type 29 has an invalid length. [ 2528.348082][T27019] device syzkaller0 entered promiscuous mode [ 2528.887071][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.893588][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2531.434088][T27046] netlink: 'syz.1.17265': attribute type 29 has an invalid length. [ 2531.560473][T27062] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.17269'. [ 2531.799498][T27064] device syzkaller0 entered promiscuous mode [ 2533.929538][T27077] netlink: 'syz.4.17274': attribute type 29 has an invalid length. [ 2534.279604][T27102] device syzkaller0 entered promiscuous mode [ 2534.333117][T27103] netlink: 'syz.3.17281': attribute type 29 has an invalid length. [ 2534.693408][T27114] netlink: 'syz.0.17293': attribute type 29 has an invalid length. [ 2535.531588][T17410] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 2535.608641][T27133] netlink: 'syz.4.17288': attribute type 2 has an invalid length. [ 2535.631435][T27133] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17288'. [ 2538.164280][T27123] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.17286'. [ 2538.227117][T27119] device syzkaller0 entered promiscuous mode [ 2540.420321][T27153] netlink: 'syz.1.17296': attribute type 29 has an invalid length. [ 2540.428577][T27165] netlink: 'syz.0.17298': attribute type 29 has an invalid length. [ 2540.974338][T27183] device syzkaller0 entered promiscuous mode [ 2540.992219][T27181] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.17304'. [ 2543.093419][T27198] device syzkaller0 entered promiscuous mode [ 2543.394585][T27223] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.17313'. [ 2545.240481][T27215] netlink: 'syz.3.17311': attribute type 29 has an invalid length. [ 2545.248653][T27221] netlink: 'syz.1.17312': attribute type 29 has an invalid length. [ 2545.556423][T27237] device syzkaller0 entered promiscuous mode [ 2545.592968][T27245] netlink: 'syz.0.17329': attribute type 29 has an invalid length. [ 2545.634274][T27247] netlink: 'syz.4.17332': attribute type 29 has an invalid length. [ 2550.830836][T27285] device syzkaller0 entered promiscuous mode [ 2554.110711][T27322] netlink: 'syz.2.17338': attribute type 29 has an invalid length. [ 2554.119125][T27330] netlink: 'syz.1.17341': attribute type 29 has an invalid length. [ 2554.146213][T27335] netlink: 'syz.0.17344': attribute type 2 has an invalid length. [ 2554.162670][T27335] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17344'. [ 2554.416880][T27339] device syzkaller0 entered promiscuous mode [ 2556.906082][T27346] device syzkaller0 entered promiscuous mode [ 2556.914079][T27364] : port 1(ip6gretap0) entered blocking state [ 2556.920306][T27364] : port 1(ip6gretap0) entered disabled state [ 2556.927954][T27364] device ip6gretap0 entered promiscuous mode [ 2558.721115][T27373] netlink: 'syz.4.17356': attribute type 29 has an invalid length. [ 2558.729446][T27365] device ip6gretap0 left promiscuous mode [ 2558.735783][T27365] : port 1(ip6gretap0) entered disabled state [ 2558.748500][T27381] netlink: 'syz.1.17358': attribute type 29 has an invalid length. [ 2559.080186][T27399] netlink: 'syz.1.17371': attribute type 29 has an invalid length. [ 2559.528162][T27409] device syzkaller0 entered promiscuous mode [ 2559.732721][T27417] : port 1(ip6gretap0) entered blocking state [ 2559.741399][T27417] : port 1(ip6gretap0) entered disabled state [ 2559.765771][T27417] device ip6gretap0 entered promiscuous mode [ 2561.637426][T27414] device ip6gretap0 left promiscuous mode [ 2561.643406][T27414] : port 1(ip6gretap0) entered disabled state [ 2561.660635][T27428] netlink: 'syz.2.17373': attribute type 29 has an invalid length. [ 2561.767584][T27426] device syzkaller0 entered promiscuous mode [ 2562.143198][T27442] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.17377'. [ 2563.993819][T27446] netlink: 'syz.2.17380': attribute type 39 has an invalid length. [ 2564.006110][T27454] netlink: 'syz.3.17382': attribute type 29 has an invalid length. [ 2564.177865][T27462] netlink: 'syz.3.17385': attribute type 29 has an invalid length. [ 2564.227997][T27462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17385'. [ 2564.269887][T27462] netlink: 'syz.3.17385': attribute type 29 has an invalid length. [ 2564.356610][T27462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17385'. [ 2564.474353][T27458] : port 1(ip6gretap0) entered blocking state [ 2564.491484][T27458] : port 1(ip6gretap0) entered disabled state [ 2564.575105][T27458] device ip6gretap0 entered promiscuous mode [ 2564.690492][T27466] device ip6gretap0 left promiscuous mode [ 2564.733764][T27466] : port 1(ip6gretap0) entered disabled state [ 2564.918503][T27482] netlink: 'syz.2.17402': attribute type 29 has an invalid length. [ 2564.926919][T27482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17402'. [ 2564.937625][T27482] netlink: 'syz.2.17402': attribute type 29 has an invalid length. [ 2564.946200][T27482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17402'. [ 2565.298925][T27492] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.17394'. [ 2565.737826][T27501] netlink: 'syz.1.17398': attribute type 39 has an invalid length. [ 2566.186205][T27516] netlink: 'syz.4.17407': attribute type 29 has an invalid length. [ 2566.194432][T27516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17407'. [ 2566.213303][T27516] netlink: 'syz.4.17407': attribute type 29 has an invalid length. [ 2566.222534][T27516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17407'. [ 2566.584507][T27528] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.17409'. [ 2567.183910][T27548] netlink: 'syz.0.17413': attribute type 39 has an invalid length. [ 2568.011646][T27562] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.17420'. [ 2568.136912][T27562] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2568.163352][T27562] CPU: 1 PID: 27562 Comm: syz.3.17420 Not tainted syzkaller #0 [ 2568.170986][T27562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2568.181084][T27562] Call Trace: [ 2568.184409][T27562] [ 2568.187390][T27562] dump_stack_lvl+0x188/0x24e [ 2568.192471][T27562] ? show_regs_print_info+0x12/0x12 [ 2568.197718][T27562] ? load_image+0x410/0x410 [ 2568.202296][T27562] sysfs_warn_dup+0x8a/0xa0 [ 2568.206843][T27562] sysfs_do_create_link_sd+0xc0/0x110 [ 2568.212233][T27562] device_add+0x83b/0x1050 [ 2568.216704][T27562] wiphy_register+0x1d8b/0x2aa0 [ 2568.222062][T27562] ? cfg80211_event_work+0x40/0x40 [ 2568.227226][T27562] ? minstrel_ht_alloc+0x894/0xa20 [ 2568.232401][T27562] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2568.238541][T27562] ieee80211_register_hw+0x2d48/0x39f0 [ 2568.244081][T27562] ? ieee80211_register_hw+0xed1/0x39f0 [ 2568.249685][T27562] ? ieee80211_register_hw+0xed1/0x39f0 [ 2568.255293][T27562] ? ieee80211_tasklet_handler+0x20/0x20 [ 2568.260977][T27562] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2568.266930][T27562] ? __debug_object_init+0xed/0x440 [ 2568.272190][T27562] ? memset+0x1e/0x40 [ 2568.276221][T27562] ? __hrtimer_init+0x189/0x270 [ 2568.281128][T27562] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2568.286910][T27562] ? memcpy+0x3c/0x60 [ 2568.290955][T27562] hwsim_new_radio_nl+0xab7/0xc90 [ 2568.296181][T27562] genl_family_rcv_msg_doit+0x22f/0x350 [ 2568.301799][T27562] ? end_current_label_crit_section+0x170/0x170 [ 2568.308099][T27562] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2568.314060][T27562] ? bpf_lsm_capable+0x5/0x10 [ 2568.318883][T27562] ? security_capable+0x85/0xb0 [ 2568.323801][T27562] genl_rcv_msg+0x601/0x790 [ 2568.328383][T27562] ? genl_bind+0x360/0x360 [ 2568.332843][T27562] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2568.339244][T27562] netlink_rcv_skb+0x1ef/0x440 [ 2568.344059][T27562] ? genl_bind+0x360/0x360 [ 2568.348565][T27562] ? netlink_ack+0x1160/0x1160 [ 2568.353388][T27562] ? down_read+0x1a8/0x2d0 [ 2568.357863][T27562] genl_rcv+0x24/0x40 [ 2568.361889][T27562] netlink_unicast+0x7ad/0x920 [ 2568.366712][T27562] netlink_sendmsg+0x8ad/0xbd0 [ 2568.371547][T27562] ? netlink_getsockopt+0x550/0x550 [ 2568.376801][T27562] ? aa_sock_msg_perm+0x94/0x150 [ 2568.381791][T27562] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2568.387138][T27562] ? security_socket_sendmsg+0x7c/0xa0 [ 2568.392640][T27562] ? netlink_getsockopt+0x550/0x550 [ 2568.397867][T27562] ____sys_sendmsg+0x5ed/0x9a0 [ 2568.402666][T27562] ? __sys_sendmsg_sock+0x30/0x30 [ 2568.407712][T27562] ? __import_iovec+0x306/0x510 [ 2568.412594][T27562] ? import_iovec+0x6f/0xa0 [ 2568.417131][T27562] ___sys_sendmsg+0x2a2/0x360 [ 2568.421930][T27562] ? __sys_sendmsg+0x2a0/0x2a0 [ 2568.426770][T27562] __se_sys_sendmsg+0x1c3/0x2b0 [ 2568.431647][T27562] ? __x64_sys_sendmsg+0x80/0x80 [ 2568.436621][T27562] ? lockdep_hardirqs_on+0x94/0x140 [ 2568.441853][T27562] do_syscall_64+0x4c/0xa0 [ 2568.446291][T27562] ? clear_bhb_loop+0x60/0xb0 [ 2568.450984][T27562] ? clear_bhb_loop+0x60/0xb0 [ 2568.455683][T27562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2568.461605][T27562] RIP: 0033:0x7fdd0a59ce59 [ 2568.466042][T27562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2568.485755][T27562] RSP: 002b:00007fdd0b45b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2568.494197][T27562] RAX: ffffffffffffffda RBX: 00007fdd0a816360 RCX: 00007fdd0a59ce59 [ 2568.502195][T27562] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2568.510183][T27562] RBP: 00007fdd0a632e6f R08: 0000000000000000 R09: 0000000000000000 [ 2568.518174][T27562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2568.526252][T27562] R13: 00007fdd0a8163f8 R14: 00007fdd0a816360 R15: 00007ffe8156de18 [ 2568.534284][T27562] [ 2568.837794][T27572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2568.853874][T27578] netlink: 'syz.0.17424': attribute type 29 has an invalid length. [ 2568.892790][T27578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17424'. [ 2568.920819][T27578] netlink: 'syz.0.17424': attribute type 29 has an invalid length. [ 2568.962762][T27578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17424'. [ 2569.048712][T27580] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.17426'. [ 2569.688329][T27594] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.17440'. [ 2569.784179][T27594] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2569.804306][T27594] CPU: 1 PID: 27594 Comm: syz.0.17440 Not tainted syzkaller #0 [ 2569.811917][T27594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2569.822011][T27594] Call Trace: [ 2569.825330][T27594] [ 2569.828302][T27594] dump_stack_lvl+0x188/0x24e [ 2569.833034][T27594] ? show_regs_print_info+0x12/0x12 [ 2569.838272][T27594] ? load_image+0x410/0x410 [ 2569.842879][T27594] sysfs_warn_dup+0x8a/0xa0 [ 2569.847437][T27594] sysfs_do_create_link_sd+0xc0/0x110 [ 2569.852878][T27594] device_add+0x83b/0x1050 [ 2569.857349][T27594] wiphy_register+0x1d8b/0x2aa0 [ 2569.862258][T27594] ? cfg80211_event_work+0x40/0x40 [ 2569.867403][T27594] ? minstrel_ht_alloc+0x894/0xa20 [ 2569.872559][T27594] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2569.878670][T27594] ieee80211_register_hw+0x2d48/0x39f0 [ 2569.884191][T27594] ? ieee80211_register_hw+0xed1/0x39f0 [ 2569.889774][T27594] ? ieee80211_register_hw+0xed1/0x39f0 [ 2569.895353][T27594] ? ieee80211_tasklet_handler+0x20/0x20 [ 2569.901025][T27594] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2569.906976][T27594] ? __debug_object_init+0xed/0x440 [ 2569.912225][T27594] ? memset+0x1e/0x40 [ 2569.916250][T27594] ? __hrtimer_init+0x189/0x270 [ 2569.921142][T27594] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2569.926907][T27594] ? memcpy+0x3c/0x60 [ 2569.930945][T27594] hwsim_new_radio_nl+0xab7/0xc90 [ 2569.936030][T27594] genl_family_rcv_msg_doit+0x22f/0x350 [ 2569.941612][T27594] ? end_current_label_crit_section+0x170/0x170 [ 2569.947901][T27594] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2569.953906][T27594] ? bpf_lsm_capable+0x5/0x10 [ 2569.958631][T27594] ? security_capable+0x85/0xb0 [ 2569.963528][T27594] genl_rcv_msg+0x601/0x790 [ 2569.968088][T27594] ? genl_bind+0x360/0x360 [ 2569.972549][T27594] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2569.978941][T27594] netlink_rcv_skb+0x1ef/0x440 [ 2569.983748][T27594] ? genl_bind+0x360/0x360 [ 2569.988209][T27594] ? netlink_ack+0x1160/0x1160 [ 2569.993014][T27594] ? down_read+0x1a8/0x2d0 [ 2569.997466][T27594] genl_rcv+0x24/0x40 [ 2570.001483][T27594] netlink_unicast+0x7ad/0x920 [ 2570.006288][T27594] netlink_sendmsg+0x8ad/0xbd0 [ 2570.011091][T27594] ? netlink_getsockopt+0x550/0x550 [ 2570.016324][T27594] ? aa_sock_msg_perm+0x94/0x150 [ 2570.021725][T27594] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2570.027036][T27594] ? security_socket_sendmsg+0x7c/0xa0 [ 2570.032532][T27594] ? netlink_getsockopt+0x550/0x550 [ 2570.037773][T27594] ____sys_sendmsg+0x5ed/0x9a0 [ 2570.042595][T27594] ? __sys_sendmsg_sock+0x30/0x30 [ 2570.047655][T27594] ? __import_iovec+0x306/0x510 [ 2570.052552][T27594] ? import_iovec+0x6f/0xa0 [ 2570.057105][T27594] ___sys_sendmsg+0x2a2/0x360 [ 2570.061828][T27594] ? __sys_sendmsg+0x2a0/0x2a0 [ 2570.066696][T27594] __se_sys_sendmsg+0x1c3/0x2b0 [ 2570.071594][T27594] ? __x64_sys_sendmsg+0x80/0x80 [ 2570.076610][T27594] ? lockdep_hardirqs_on+0x94/0x140 [ 2570.081851][T27594] do_syscall_64+0x4c/0xa0 [ 2570.086301][T27594] ? clear_bhb_loop+0x60/0xb0 [ 2570.091007][T27594] ? clear_bhb_loop+0x60/0xb0 [ 2570.095717][T27594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2570.101659][T27594] RIP: 0033:0x7f84e1d9ce59 [ 2570.106116][T27594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2570.125849][T27594] RSP: 002b:00007f84e2c3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2570.134297][T27594] RAX: ffffffffffffffda RBX: 00007f84e2015fa0 RCX: 00007f84e1d9ce59 [ 2570.142295][T27594] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2570.150309][T27594] RBP: 00007f84e1e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2570.158313][T27594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2570.166324][T27594] R13: 00007f84e2016038 R14: 00007f84e2015fa0 R15: 00007ffd30b92128 [ 2570.174371][T27594] [ 2570.192044][T27595] netlink: 'syz.3.17431': attribute type 39 has an invalid length. [ 2571.862386][T27621] : port 1(ip6gretap0) entered blocking state [ 2571.883666][T27621] : port 1(ip6gretap0) entered disabled state [ 2571.901894][T27621] device ip6gretap0 entered promiscuous mode [ 2571.952920][T27622] device ip6gretap0 left promiscuous mode [ 2571.962883][T27622] : port 1(ip6gretap0) entered disabled state [ 2573.724754][T27626] netlink: 'syz.1.17442': attribute type 29 has an invalid length. [ 2573.735702][T27626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17442'. [ 2573.748207][T27626] netlink: 'syz.1.17442': attribute type 29 has an invalid length. [ 2573.756479][T27626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17442'. [ 2573.891079][T27633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2574.101707][T27639] netlink: 'syz.4.17446': attribute type 39 has an invalid length. [ 2574.200018][T27646] netlink: 'syz.0.17458': attribute type 29 has an invalid length. [ 2574.232574][T27646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17458'. [ 2574.274420][T27646] netlink: 'syz.0.17458': attribute type 29 has an invalid length. [ 2574.311032][T27646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17458'. [ 2574.393990][T27653] netlink: 'syz.3.17450': attribute type 29 has an invalid length. [ 2574.550217][T27654] delete_channel: no stack [ 2574.779575][T27661] delete_channel: no stack [ 2575.167125][T27674] : port 1(ip6gretap0) entered blocking state [ 2575.184594][T27674] : port 1(ip6gretap0) entered disabled state [ 2575.221963][T27674] device ip6gretap0 entered promiscuous mode [ 2575.381708][T27680] device ip6gretap0 left promiscuous mode [ 2575.399070][T27680] : port 1(ip6gretap0) entered disabled state [ 2575.416919][T27683] : port 1(ip6gretap0) entered blocking state [ 2575.428409][T27683] : port 1(ip6gretap0) entered disabled state [ 2575.441300][T27683] device ip6gretap0 entered promiscuous mode [ 2575.750681][T27690] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2576.103477][T27698] delete_channel: no stack [ 2576.662142][T27718] : port 1(ip6gretap0) entered blocking state [ 2576.679084][T27718] : port 1(ip6gretap0) entered disabled state [ 2576.761329][T27718] device ip6gretap0 entered promiscuous mode [ 2576.845093][T27717] netlink: 'syz.4.17472': attribute type 29 has an invalid length. [ 2576.866812][T27721] device ip6gretap0 left promiscuous mode [ 2576.874031][T27721] : port 1(ip6gretap0) entered disabled state [ 2577.233371][T27724] : port 1(ip6gretap0) entered blocking state [ 2577.249174][T27724] : port 1(ip6gretap0) entered disabled state [ 2577.299575][T27724] device ip6gretap0 entered promiscuous mode [ 2577.315259][T27727] device ip6gretap0 left promiscuous mode [ 2577.324140][T27727] : port 1(ip6gretap0) entered disabled state [ 2577.407960][T27732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2577.774642][T27743] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.17484'. [ 2577.791976][T27743] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2577.801150][T27743] CPU: 0 PID: 27743 Comm: syz.4.17484 Not tainted syzkaller #0 [ 2577.808768][T27743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2577.818870][T27743] Call Trace: [ 2577.822196][T27743] [ 2577.825174][T27743] dump_stack_lvl+0x188/0x24e [ 2577.829920][T27743] ? show_regs_print_info+0x12/0x12 [ 2577.835164][T27743] ? load_image+0x410/0x410 [ 2577.839743][T27743] sysfs_warn_dup+0x8a/0xa0 [ 2577.844296][T27743] sysfs_do_create_link_sd+0xc0/0x110 [ 2577.849703][T27743] device_add+0x83b/0x1050 [ 2577.854146][T27743] wiphy_register+0x1d8b/0x2aa0 [ 2577.859043][T27743] ? cfg80211_event_work+0x40/0x40 [ 2577.864186][T27743] ? minstrel_ht_alloc+0x894/0xa20 [ 2577.869332][T27743] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2577.875444][T27743] ieee80211_register_hw+0x2d48/0x39f0 [ 2577.880943][T27743] ? ieee80211_register_hw+0xed1/0x39f0 [ 2577.886518][T27743] ? ieee80211_register_hw+0xed1/0x39f0 [ 2577.892090][T27743] ? ieee80211_tasklet_handler+0x20/0x20 [ 2577.897744][T27743] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2577.903675][T27743] ? __debug_object_init+0xed/0x440 [ 2577.908991][T27743] ? memset+0x1e/0x40 [ 2577.912997][T27743] ? __hrtimer_init+0x189/0x270 [ 2577.918490][T27743] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2577.924246][T27743] ? memcpy+0x3c/0x60 [ 2577.928251][T27743] hwsim_new_radio_nl+0xab7/0xc90 [ 2577.933314][T27743] genl_family_rcv_msg_doit+0x22f/0x350 [ 2577.938889][T27743] ? end_current_label_crit_section+0x170/0x170 [ 2577.945160][T27743] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2577.951085][T27743] ? bpf_lsm_capable+0x5/0x10 [ 2577.955785][T27743] ? security_capable+0x85/0xb0 [ 2577.960766][T27743] genl_rcv_msg+0x601/0x790 [ 2577.965299][T27743] ? genl_bind+0x360/0x360 [ 2577.969735][T27743] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2577.976100][T27743] netlink_rcv_skb+0x1ef/0x440 [ 2577.980893][T27743] ? genl_bind+0x360/0x360 [ 2577.985336][T27743] ? netlink_ack+0x1160/0x1160 [ 2577.990139][T27743] ? down_read+0x1a8/0x2d0 [ 2577.994590][T27743] genl_rcv+0x24/0x40 [ 2577.998593][T27743] netlink_unicast+0x7ad/0x920 [ 2578.003386][T27743] netlink_sendmsg+0x8ad/0xbd0 [ 2578.008187][T27743] ? netlink_getsockopt+0x550/0x550 [ 2578.013406][T27743] ? aa_sock_msg_perm+0x94/0x150 [ 2578.018811][T27743] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2578.024118][T27743] ? security_socket_sendmsg+0x7c/0xa0 [ 2578.029593][T27743] ? netlink_getsockopt+0x550/0x550 [ 2578.034806][T27743] ____sys_sendmsg+0x5ed/0x9a0 [ 2578.039595][T27743] ? __sys_sendmsg_sock+0x30/0x30 [ 2578.044641][T27743] ? __import_iovec+0x306/0x510 [ 2578.049513][T27743] ? import_iovec+0x6f/0xa0 [ 2578.054036][T27743] ___sys_sendmsg+0x2a2/0x360 [ 2578.058732][T27743] ? __sys_sendmsg+0x2a0/0x2a0 [ 2578.063560][T27743] __se_sys_sendmsg+0x1c3/0x2b0 [ 2578.068465][T27743] ? __x64_sys_sendmsg+0x80/0x80 [ 2578.073442][T27743] ? lockdep_hardirqs_on+0x94/0x140 [ 2578.078670][T27743] do_syscall_64+0x4c/0xa0 [ 2578.083104][T27743] ? clear_bhb_loop+0x60/0xb0 [ 2578.087813][T27743] ? clear_bhb_loop+0x60/0xb0 [ 2578.092554][T27743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2578.098486][T27743] RIP: 0033:0x7f2bd9d9ce59 [ 2578.102929][T27743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2578.122561][T27743] RSP: 002b:00007f2bd7ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2578.130995][T27743] RAX: ffffffffffffffda RBX: 00007f2bda015fa0 RCX: 00007f2bd9d9ce59 [ 2578.138987][T27743] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2578.146974][T27743] RBP: 00007f2bd9e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2578.154970][T27743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2578.162959][T27743] R13: 00007f2bda016038 R14: 00007f2bda015fa0 R15: 00007ffc1f7ad878 [ 2578.170970][T27743] [ 2578.213222][T27744] delete_channel: no stack [ 2578.821388][T27761] device ip6gretap0 left promiscuous mode [ 2578.830056][T27761] : port 1(ip6gretap0) entered disabled state [ 2579.023166][T27765] netlink: 'syz.3.17489': attribute type 29 has an invalid length. [ 2579.199289][T27771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2579.206923][T27771] IPv6: NLM_F_CREATE should be set when creating new route [ 2579.214791][T27771] IPv6: NLM_F_CREATE should be set when creating new route [ 2579.222572][T27771] IPv6: NLM_F_CREATE should be set when creating new route [ 2579.278839][T27770] : port 1(ip6gretap0) entered blocking state [ 2579.313229][T27770] : port 1(ip6gretap0) entered disabled state [ 2579.332102][T27770] device ip6gretap0 entered promiscuous mode [ 2579.369622][T27772] device ip6gretap0 left promiscuous mode [ 2579.388616][T27772] : port 1(ip6gretap0) entered disabled state [ 2580.439205][T27788] : port 1(ip6gretap0) entered blocking state [ 2580.452390][T27788] : port 1(ip6gretap0) entered disabled state [ 2580.491672][T27788] device ip6gretap0 entered promiscuous mode [ 2580.596796][T27792] device ip6gretap0 left promiscuous mode [ 2580.607610][T27792] : port 1(ip6gretap0) entered disabled state [ 2581.032732][T27793] netlink: 'syz.1.17510': attribute type 29 has an invalid length. [ 2581.349032][T27803] delete_channel: no stack [ 2581.504874][T27808] netlink: 'syz.4.17512': attribute type 29 has an invalid length. [ 2581.891862][T27820] netlink: 'syz.0.17518': attribute type 10 has an invalid length. [ 2582.312154][T27824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2582.942716][T27134] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 2583.698942][T27848] netlink: 'syz.0.17519': attribute type 10 has an invalid length. [ 2583.724748][T27848] netlink: 2 bytes leftover after parsing attributes in process `syz.0.17519'. [ 2583.735735][T27846] : port 1(ip6gretap0) entered blocking state [ 2583.755158][T27846] : port 1(ip6gretap0) entered disabled state [ 2583.793371][T27846] device ip6gretap0 entered promiscuous mode [ 2583.851223][T27851] device ip6gretap0 left promiscuous mode [ 2583.870510][T27851] : port 1(ip6gretap0) entered disabled state [ 2584.086468][T27861] netlink: 'syz.0.17522': attribute type 29 has an invalid length. [ 2584.173852][T27856] delete_channel: no stack [ 2585.005921][T27876] netlink: 'syz.2.17528': attribute type 10 has an invalid length. [ 2585.014364][T27876] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17528'. [ 2585.131364][T27883] device wlan1 entered promiscuous mode [ 2585.230266][T27883] netlink: 'syz.3.17531': attribute type 3 has an invalid length. [ 2585.239192][T27883] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.17531'. [ 2586.356871][T27899] : port 1(ip6gretap0) entered blocking state [ 2586.364406][T27899] : port 1(ip6gretap0) entered disabled state [ 2586.395227][T27899] device ip6gretap0 entered promiscuous mode [ 2586.437104][T27902] device ip6gretap0 left promiscuous mode [ 2586.451342][T27902] : port 1(ip6gretap0) entered disabled state [ 2586.662125][T27903] delete_channel: no stack [ 2587.018336][T27919] netlink: 'syz.1.17539': attribute type 29 has an invalid length. [ 2587.229571][T27927] netlink: 'syz.0.17546': attribute type 29 has an invalid length. [ 2587.248042][T27925] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.17544'. [ 2587.308110][T27927] netlink: 'syz.0.17546': attribute type 29 has an invalid length. [ 2587.634638][T27934] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17547'. [ 2587.796631][T27937] netlink: 'syz.0.17548': attribute type 10 has an invalid length. [ 2588.277800][T27941] netlink: 'syz.3.17549': attribute type 4 has an invalid length. [ 2588.290464][T27941] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.17549'. [ 2588.338229][T27943] netlink: 'syz.1.17559': attribute type 29 has an invalid length. [ 2588.444101][T27947] : port 1(ip6gretap0) entered blocking state [ 2588.486417][T27947] : port 1(ip6gretap0) entered disabled state [ 2588.559037][T27947] device ip6gretap0 entered promiscuous mode [ 2588.664423][T27951] delete_channel: no stack [ 2588.689757][T27949] device ip6gretap0 left promiscuous mode [ 2588.723009][T27949] : port 1(ip6gretap0) entered disabled state [ 2588.969383][T15184] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2588.992998][T27962] netlink: 'syz.3.17554': attribute type 10 has an invalid length. [ 2589.001252][T27962] netlink: 2 bytes leftover after parsing attributes in process `syz.3.17554'. [ 2589.033346][T27963] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.17553'. [ 2590.294531][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.300953][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.620407][T27134] Bluetooth: hci1: unexpected event 0x18 length: 151 > 23 [ 2591.467498][T28000] delete_channel: no stack [ 2591.556685][T28002] validate_nla: 1 callbacks suppressed [ 2591.556703][T28002] netlink: 'syz.4.17566': attribute type 29 has an invalid length. [ 2591.665334][T28009] device wlan1 entered promiscuous mode [ 2591.753865][T28009] netlink: 'syz.0.17569': attribute type 3 has an invalid length. [ 2591.773230][T28009] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.17569'. [ 2591.805531][T28015] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17571'. [ 2591.842099][T15184] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2591.986547][T28022] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17572'. [ 2592.128979][T28024] : port 1(ip6gretap0) entered blocking state [ 2592.145213][T28024] : port 1(ip6gretap0) entered disabled state [ 2592.218537][T28024] device ip6gretap0 entered promiscuous mode [ 2592.272589][T28027] device ip6gretap0 left promiscuous mode [ 2592.278532][T28027] : port 1(ip6gretap0) entered disabled state [ 2593.185337][T28050] delete_channel: no stack [ 2593.202735][T28049] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.17581'. [ 2593.367277][T28063] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17584'. [ 2593.498571][T28068] device wlan1 entered promiscuous mode [ 2593.529589][ T844] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2593.631389][T28068] netlink: 'syz.2.17583': attribute type 3 has an invalid length. [ 2593.686218][T28075] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.17585'. [ 2593.698933][T28068] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.17583'. [ 2593.712230][T28075] netlink: 43 bytes leftover after parsing attributes in process `syz.1.17585'. [ 2593.725054][T28077] netlink: 'syz.3.17586': attribute type 29 has an invalid length. [ 2593.778932][T28079] netlink: 'syz.4.17587': attribute type 2 has an invalid length. [ 2593.835709][T28079] device 6 entered promiscuous mode [ 2594.134631][T28086] netlink: 'syz.4.17589': attribute type 29 has an invalid length. [ 2594.169871][T28086] netlink: 'syz.4.17589': attribute type 29 has an invalid length. [ 2594.752784][T28095] netlink: 'syz.1.17593': attribute type 10 has an invalid length. [ 2594.779897][T28095] __nla_validate_parse: 1 callbacks suppressed [ 2594.779914][T28095] netlink: 2 bytes leftover after parsing attributes in process `syz.1.17593'. [ 2595.024428][T28104] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.17597'. [ 2595.234046][T28114] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17599'. [ 2595.319749][T28118] netlink: 'syz.4.17600': attribute type 21 has an invalid length. [ 2595.406744][T28118] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17600'. [ 2595.511818][T28116] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.17600'. [ 2595.555497][T28120] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17601'. [ 2595.602132][T28124] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17602'. [ 2595.751725][T28128] netlink: 'syz.2.17604': attribute type 29 has an invalid length. [ 2595.968259][T28131] Ÿë: port 1(gretap0) entered blocking state [ 2596.046542][T28131] Ÿë: port 1(gretap0) entered disabled state [ 2596.088349][T28131] device gretap0 entered promiscuous mode [ 2597.673101][T28160] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.17611'. [ 2597.762866][T28160] netlink: 43 bytes leftover after parsing attributes in process `syz.0.17611'. [ 2598.033625][T28171] validate_nla: 2 callbacks suppressed [ 2598.033658][T28171] netlink: 'syz.3.17614': attribute type 21 has an invalid length. [ 2598.189214][T28171] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17614'. [ 2599.853903][T28202] device wlan1 entered promiscuous mode [ 2599.899339][T28204] netlink: 'syz.1.17621': attribute type 3 has an invalid length. [ 2599.934820][T28204] __nla_validate_parse: 5 callbacks suppressed [ 2599.934842][T28204] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.17621'. [ 2599.989861][T28203] netlink: 'syz.3.17624': attribute type 2 has an invalid length. [ 2600.286955][T28212] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.17627'. [ 2600.304153][T28212] netlink: 43 bytes leftover after parsing attributes in process `syz.2.17627'. [ 2600.427458][T28214] netlink: 'syz.1.17638': attribute type 3 has an invalid length. [ 2600.462749][T28214] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.17638'. [ 2600.817325][T28221] net_ratelimit: 124 callbacks suppressed [ 2600.817369][T28221] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2600.881036][T28225] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.17630'. [ 2601.253441][T28232] netlink: 'syz.3.17634': attribute type 27 has an invalid length. [ 2601.319483][T28232] netlink: 164 bytes leftover after parsing attributes in process `syz.3.17634'. [ 2602.501615][T28229] delete_channel: no stack [ 2602.826560][T28236] netlink: 'syz.0.17635': attribute type 11 has an invalid length. [ 2604.173584][T28260] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.17640'. [ 2605.011756][T28260] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2605.022563][T28260] CPU: 0 PID: 28260 Comm: syz.0.17640 Not tainted syzkaller #0 [ 2605.030173][T28260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2605.040259][T28260] Call Trace: [ 2605.043574][T28260] [ 2605.046541][T28260] dump_stack_lvl+0x188/0x24e [ 2605.051262][T28260] ? show_regs_print_info+0x12/0x12 [ 2605.056497][T28260] ? load_image+0x410/0x410 [ 2605.061066][T28260] sysfs_warn_dup+0x8a/0xa0 [ 2605.065610][T28260] sysfs_do_create_link_sd+0xc0/0x110 [ 2605.071028][T28260] device_add+0x83b/0x1050 [ 2605.075511][T28260] wiphy_register+0x1d8b/0x2aa0 [ 2605.080423][T28260] ? cfg80211_event_work+0x40/0x40 [ 2605.085582][T28260] ? minstrel_ht_alloc+0x894/0xa20 [ 2605.090755][T28260] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2605.096882][T28260] ieee80211_register_hw+0x2d48/0x39f0 [ 2605.102399][T28260] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2605.108635][T28260] ? ieee80211_register_hw+0xed1/0x39f0 [ 2605.114222][T28260] ? ieee80211_register_hw+0xed1/0x39f0 [ 2605.119823][T28260] ? ieee80211_tasklet_handler+0x20/0x20 [ 2605.125504][T28260] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2605.131435][T28260] ? __debug_object_init+0xed/0x440 [ 2605.136684][T28260] ? memset+0x1e/0x40 [ 2605.140721][T28260] ? __hrtimer_init+0x189/0x270 [ 2605.145619][T28260] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2605.151375][T28260] ? memcpy+0x3c/0x60 [ 2605.155394][T28260] hwsim_new_radio_nl+0xab7/0xc90 [ 2605.160488][T28260] genl_family_rcv_msg_doit+0x22f/0x350 [ 2605.166087][T28260] ? end_current_label_crit_section+0x170/0x170 [ 2605.172365][T28260] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2605.178305][T28260] ? bpf_lsm_capable+0x5/0x10 [ 2605.183017][T28260] ? security_capable+0x85/0xb0 [ 2605.187917][T28260] genl_rcv_msg+0x601/0x790 [ 2605.192481][T28260] ? genl_bind+0x360/0x360 [ 2605.196956][T28260] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2605.203354][T28260] netlink_rcv_skb+0x1ef/0x440 [ 2605.208170][T28260] ? genl_bind+0x360/0x360 [ 2605.212650][T28260] ? netlink_ack+0x1160/0x1160 [ 2605.217471][T28260] ? down_read+0x1a8/0x2d0 [ 2605.221934][T28260] genl_rcv+0x24/0x40 [ 2605.225949][T28260] netlink_unicast+0x7ad/0x920 [ 2605.230767][T28260] netlink_sendmsg+0x8ad/0xbd0 [ 2605.235579][T28260] ? netlink_getsockopt+0x550/0x550 [ 2605.240812][T28260] ? aa_sock_msg_perm+0x94/0x150 [ 2605.245787][T28260] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2605.251108][T28260] ? security_socket_sendmsg+0x7c/0xa0 [ 2605.256623][T28260] ? netlink_getsockopt+0x550/0x550 [ 2605.261880][T28260] ____sys_sendmsg+0x5ed/0x9a0 [ 2605.266685][T28260] ? __sys_sendmsg_sock+0x30/0x30 [ 2605.271748][T28260] ? __import_iovec+0x306/0x510 [ 2605.276641][T28260] ? import_iovec+0x6f/0xa0 [ 2605.281190][T28260] ___sys_sendmsg+0x2a2/0x360 [ 2605.285912][T28260] ? __sys_sendmsg+0x2a0/0x2a0 [ 2605.290747][T28260] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2605.296554][T28260] __se_sys_sendmsg+0x1c3/0x2b0 [ 2605.301445][T28260] ? __x64_sys_sendmsg+0x80/0x80 [ 2605.306435][T28260] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2605.312364][T28260] do_syscall_64+0x4c/0xa0 [ 2605.316815][T28260] ? clear_bhb_loop+0x60/0xb0 [ 2605.321527][T28260] ? clear_bhb_loop+0x60/0xb0 [ 2605.326238][T28260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2605.332180][T28260] RIP: 0033:0x7f84e1d9ce59 [ 2605.336630][T28260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2605.356287][T28260] RSP: 002b:00007f84e2c1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2605.364745][T28260] RAX: ffffffffffffffda RBX: 00007f84e2016090 RCX: 00007f84e1d9ce59 [ 2605.372769][T28260] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2605.380806][T28260] RBP: 00007f84e1e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2605.388817][T28260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2605.396840][T28260] R13: 00007f84e2016128 R14: 00007f84e2016090 R15: 00007ffd30b92128 [ 2605.404873][T28260] [ 2607.289722][T28287] netlink: 'syz.0.17646': attribute type 2 has an invalid length. [ 2607.359986][T28287] device 3 entered promiscuous mode [ 2607.954359][T28287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17646'. [ 2608.191694][T28298] device syzkaller0 entered promiscuous mode [ 2608.226822][T28290] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17649'. [ 2608.517021][T28309] delete_channel: no stack [ 2608.658030][T28316] netlink: 'syz.0.17654': attribute type 3 has an invalid length. [ 2608.672509][T28316] netlink: 'syz.0.17654': attribute type 1 has an invalid length. [ 2608.680721][T28316] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17654'. [ 2609.340846][T28306] delete_channel: no stack [ 2610.602225][T28331] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.17657'. [ 2610.619700][T28337] sock: sock_set_timeout: `syz.0.17661' (pid 28337) tries to set negative timeout [ 2610.629450][T28331] netlink: 43 bytes leftover after parsing attributes in process `syz.4.17657'. [ 2610.887920][T28337] netlink: 'syz.0.17661': attribute type 13 has an invalid length. [ 2610.921621][T28337] netlink: 152 bytes leftover after parsing attributes in process `syz.0.17661'. [ 2610.994367][T28339] netlink: 'syz.0.17661': attribute type 13 has an invalid length. [ 2611.012657][T28339] netlink: 152 bytes leftover after parsing attributes in process `syz.0.17661'. [ 2611.027052][T28340] netlink: 'syz.0.17661': attribute type 10 has an invalid length. [ 2611.333629][T28358] netlink: 'syz.2.17665': attribute type 2 has an invalid length. [ 2611.753546][T28358] device 5 entered promiscuous mode [ 2612.106075][T28366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17665'. [ 2612.136182][T28365] device virt_wifi0 entered promiscuous mode [ 2612.160004][T28363] netlink: 184 bytes leftover after parsing attributes in process `syz.3.17666'. [ 2612.842383][T28395] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.17676'. [ 2612.940286][T28401] netlink: 'syz.2.17675': attribute type 29 has an invalid length. [ 2613.310404][T28407] netlink: 'syz.1.17681': attribute type 27 has an invalid length. [ 2613.350389][T28407] __nla_validate_parse: 1 callbacks suppressed [ 2613.350429][T28407] netlink: 164 bytes leftover after parsing attributes in process `syz.1.17681'. [ 2613.381366][T28409] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.17680'. [ 2614.280009][T28419] netlink: 'syz.0.17683': attribute type 1 has an invalid length. [ 2614.290830][T28419] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.17683'. [ 2614.350123][T28419] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.17683'. [ 2614.509288][T28431] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17686'. [ 2614.604759][T28433] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.17688'. [ 2614.635192][T28433] netlink: 43 bytes leftover after parsing attributes in process `syz.3.17688'. [ 2615.141449][T28441] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17690'. [ 2615.401686][T28450] netlink: 'syz.4.17693': attribute type 2 has an invalid length. [ 2615.451452][T28450] netlink: 'syz.4.17693': attribute type 1 has an invalid length. [ 2618.767113][T28470] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.17699'. [ 2618.803038][T28470] netlink: 43 bytes leftover after parsing attributes in process `syz.2.17699'. [ 2618.891533][T28475] delete_channel: no stack [ 2619.474831][T28500] netlink: 'syz.1.17713': attribute type 2 has an invalid length. [ 2619.501670][T28500] netlink: 'syz.1.17713': attribute type 1 has an invalid length. [ 2620.450361][T28522] delete_channel: no stack [ 2620.855725][T28544] netlink: 'syz.2.17730': attribute type 2 has an invalid length. [ 2620.926278][T28544] netlink: 'syz.2.17730': attribute type 1 has an invalid length. [ 2621.991091][T28563] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.17737'. [ 2622.287633][T28575] netlink: 140 bytes leftover after parsing attributes in process `syz.2.17739'. [ 2622.606886][T28589] netlink: 'syz.3.17746': attribute type 2 has an invalid length. [ 2622.615520][T28589] netlink: 'syz.3.17746': attribute type 1 has an invalid length. [ 2623.256153][T28606] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.17752'. [ 2623.273078][T28606] bridge_slave_1: default FDB implementation only supports local addresses [ 2623.606915][T28610] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.17763'. [ 2623.625125][T28610] netlink: 43 bytes leftover after parsing attributes in process `syz.0.17763'. [ 2624.151620][T28628] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.17757'. [ 2624.493720][T28637] netlink: 'syz.4.17761': attribute type 1 has an invalid length. [ 2624.502698][T28637] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.17761'. [ 2624.565064][T28640] : port 1(ip6gretap0) entered blocking state [ 2624.571541][T28640] : port 1(ip6gretap0) entered disabled state [ 2624.580045][T28640] device ip6gretap0 entered promiscuous mode [ 2624.589388][T28643] device ip6gretap0 left promiscuous mode [ 2624.602780][T28643] : port 1(ip6gretap0) entered disabled state [ 2624.625161][T28642] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.17767'. [ 2624.639092][T28637] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.17761'. [ 2624.643232][T28642] netlink: 43 bytes leftover after parsing attributes in process `syz.3.17767'. [ 2624.851978][T28648] netlink: 'syz.0.17768': attribute type 12 has an invalid length. [ 2624.872506][T28648] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17768'. [ 2624.891248][T28652] netlink: 'syz.2.17770': attribute type 27 has an invalid length. [ 2624.900566][T28652] netlink: 164 bytes leftover after parsing attributes in process `syz.2.17770'. [ 2624.910527][T28651] netlink: 'syz.3.17771': attribute type 10 has an invalid length. [ 2624.920857][T28651] device wlan1 left promiscuous mode [ 2625.556179][T28671] netlink: 'syz.1.17777': attribute type 10 has an invalid length. [ 2625.596215][T28671] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17777'. [ 2625.615246][T28671] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2625.812850][T28679] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.17779'. [ 2625.958612][T28681] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.17780'. [ 2626.180931][T28685] : port 1(ip6gretap0) entered blocking state [ 2626.189406][T28685] : port 1(ip6gretap0) entered disabled state [ 2626.247010][T28685] device ip6gretap0 entered promiscuous mode [ 2626.278857][T28691] device ip6gretap0 left promiscuous mode [ 2626.315232][T28690] netlink: 'syz.3.17783': attribute type 1 has an invalid length. [ 2626.319577][T28691] : port 1(ip6gretap0) entered disabled state [ 2626.687492][T28703] netlink: 'syz.4.17787': attribute type 27 has an invalid length. [ 2626.886942][T28707] : port 1(ip6gretap0) entered blocking state [ 2626.905449][T28707] : port 1(ip6gretap0) entered disabled state [ 2626.935542][T28707] device ip6gretap0 entered promiscuous mode [ 2626.987666][T28710] device ip6gretap0 left promiscuous mode [ 2627.001024][T28710] : port 1(ip6gretap0) entered disabled state [ 2627.436644][T28726] netlink: 'syz.3.17797': attribute type 10 has an invalid length. [ 2627.786181][T28738] netlink: 'syz.1.17802': attribute type 1 has an invalid length. [ 2627.949318][T28744] netlink: 'syz.0.17803': attribute type 2 has an invalid length. [ 2628.178385][T28746] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2628.198924][T28746] CPU: 0 PID: 28746 Comm: syz.3.17804 Not tainted syzkaller #0 [ 2628.206604][T28746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2628.217268][T28746] Call Trace: [ 2628.220615][T28746] [ 2628.223623][T28746] dump_stack_lvl+0x188/0x24e [ 2628.228410][T28746] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2628.234684][T28746] ? show_regs_print_info+0x12/0x12 [ 2628.239965][T28746] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2628.246281][T28746] sysfs_warn_dup+0x8a/0xa0 [ 2628.250877][T28746] sysfs_do_create_link_sd+0xc0/0x110 [ 2628.256342][T28746] device_add+0x83b/0x1050 [ 2628.260858][T28746] wiphy_register+0x1d8b/0x2aa0 [ 2628.265857][T28746] ? cfg80211_event_work+0x40/0x40 [ 2628.271069][T28746] ? minstrel_ht_alloc+0x894/0xa20 [ 2628.276317][T28746] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2628.282528][T28746] ieee80211_register_hw+0x2d48/0x39f0 [ 2628.288102][T28746] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2628.294437][T28746] ? ieee80211_register_hw+0xed1/0x39f0 [ 2628.300064][T28746] ? ieee80211_register_hw+0xed1/0x39f0 [ 2628.305747][T28746] ? ieee80211_tasklet_handler+0x20/0x20 [ 2628.311495][T28746] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2628.317513][T28746] ? __debug_object_init+0xed/0x440 [ 2628.322817][T28746] ? memset+0x1e/0x40 [ 2628.326872][T28746] ? __hrtimer_init+0x189/0x270 [ 2628.331820][T28746] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2628.337656][T28746] ? memcpy+0x3c/0x60 [ 2628.341737][T28746] hwsim_new_radio_nl+0xab7/0xc90 [ 2628.346869][T28746] genl_family_rcv_msg_doit+0x22f/0x350 [ 2628.352504][T28746] ? end_current_label_crit_section+0x170/0x170 [ 2628.358819][T28746] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2628.365041][T28746] ? bpf_lsm_capable+0x5/0x10 [ 2628.369752][T28746] ? security_capable+0x85/0xb0 [ 2628.374658][T28746] genl_rcv_msg+0x601/0x790 [ 2628.379221][T28746] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2628.385456][T28746] ? genl_bind+0x360/0x360 [ 2628.389915][T28746] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2628.396302][T28746] ? lock_acquire+0x225/0x4a0 [ 2628.401062][T28746] netlink_rcv_skb+0x1ef/0x440 [ 2628.405875][T28746] ? genl_bind+0x360/0x360 [ 2628.410333][T28746] ? netlink_ack+0x1160/0x1160 [ 2628.415864][T28746] ? down_read+0x1a8/0x2d0 [ 2628.420327][T28746] genl_rcv+0x24/0x40 [ 2628.424364][T28746] netlink_unicast+0x7ad/0x920 [ 2628.429196][T28746] netlink_sendmsg+0x8ad/0xbd0 [ 2628.434031][T28746] ? netlink_getsockopt+0x550/0x550 [ 2628.439325][T28746] ? aa_sock_msg_perm+0x94/0x150 [ 2628.444313][T28746] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2628.449650][T28746] ? security_socket_sendmsg+0x7c/0xa0 [ 2628.455152][T28746] ? netlink_getsockopt+0x550/0x550 [ 2628.460402][T28746] ____sys_sendmsg+0x5ed/0x9a0 [ 2628.465258][T28746] ? __sys_sendmsg_sock+0x30/0x30 [ 2628.470460][T28746] ___sys_sendmsg+0x2a2/0x360 [ 2628.475207][T28746] ? __sys_sendmsg+0x2a0/0x2a0 [ 2628.480077][T28746] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2628.485933][T28746] __se_sys_sendmsg+0x1c3/0x2b0 [ 2628.490842][T28746] ? __x64_sys_sendmsg+0x80/0x80 [ 2628.495869][T28746] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2628.501823][T28746] do_syscall_64+0x4c/0xa0 [ 2628.506278][T28746] ? clear_bhb_loop+0x60/0xb0 [ 2628.511018][T28746] ? clear_bhb_loop+0x60/0xb0 [ 2628.516352][T28746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2628.522291][T28746] RIP: 0033:0x7fdd0a59ce59 [ 2628.526747][T28746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2628.546386][T28746] RSP: 002b:00007fdd0b4be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2628.554843][T28746] RAX: ffffffffffffffda RBX: 00007fdd0a816090 RCX: 00007fdd0a59ce59 [ 2628.562869][T28746] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2628.570879][T28746] RBP: 00007fdd0a632e6f R08: 0000000000000000 R09: 0000000000000000 [ 2628.578886][T28746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2628.586894][T28746] R13: 00007fdd0a816128 R14: 00007fdd0a816090 R15: 00007ffe8156de18 [ 2628.594960][T28746] [ 2630.146518][T28780] validate_nla: 2 callbacks suppressed [ 2630.146543][T28780] netlink: 'syz.1.17815': attribute type 10 has an invalid length. [ 2630.291883][T28780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2630.322340][T28780] device bond0 entered promiscuous mode [ 2630.347324][T28780] device bond_slave_0 entered promiscuous mode [ 2630.366387][T28780] device bond_slave_1 entered promiscuous mode [ 2630.386947][T28780] device dummy0 entered promiscuous mode [ 2630.403402][T28780] device batadv_slave_0 entered promiscuous mode [ 2630.424959][T28780] team0: Port device bond0 added [ 2630.596973][T28794] : port 1(ip6gretap0) entered blocking state [ 2630.623231][T28794] : port 1(ip6gretap0) entered disabled state [ 2630.684845][T28794] device ip6gretap0 entered promiscuous mode [ 2630.738788][T28797] device ip6gretap0 left promiscuous mode [ 2630.745943][T28797] : port 1(ip6gretap0) entered disabled state [ 2630.758398][T28804] __nla_validate_parse: 12 callbacks suppressed [ 2630.758415][T28804] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17824'. [ 2630.834893][T28805] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.17825'. [ 2630.920643][T28805] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2630.948022][T28805] CPU: 1 PID: 28805 Comm: syz.2.17825 Not tainted syzkaller #0 [ 2630.955684][T28805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2630.965772][T28805] Call Trace: [ 2630.969080][T28805] [ 2630.972030][T28805] dump_stack_lvl+0x188/0x24e [ 2630.976742][T28805] ? show_regs_print_info+0x12/0x12 [ 2630.981961][T28805] ? load_image+0x410/0x410 [ 2630.986515][T28805] sysfs_warn_dup+0x8a/0xa0 [ 2630.991055][T28805] sysfs_do_create_link_sd+0xc0/0x110 [ 2630.996466][T28805] device_add+0x83b/0x1050 [ 2631.000906][T28805] wiphy_register+0x1d8b/0x2aa0 [ 2631.005794][T28805] ? cfg80211_event_work+0x40/0x40 [ 2631.010935][T28805] ? minstrel_ht_alloc+0x894/0xa20 [ 2631.016270][T28805] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2631.022377][T28805] ieee80211_register_hw+0x2d48/0x39f0 [ 2631.027874][T28805] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2631.034072][T28805] ? ieee80211_register_hw+0xed1/0x39f0 [ 2631.039636][T28805] ? ieee80211_register_hw+0xed1/0x39f0 [ 2631.045220][T28805] ? ieee80211_tasklet_handler+0x20/0x20 [ 2631.050869][T28805] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2631.056791][T28805] ? __debug_object_init+0xed/0x440 [ 2631.062024][T28805] ? memset+0x1e/0x40 [ 2631.066027][T28805] ? __hrtimer_init+0x189/0x270 [ 2631.070908][T28805] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2631.076660][T28805] ? memcpy+0x3c/0x60 [ 2631.080669][T28805] hwsim_new_radio_nl+0xab7/0xc90 [ 2631.085737][T28805] genl_family_rcv_msg_doit+0x22f/0x350 [ 2631.091309][T28805] ? end_current_label_crit_section+0x170/0x170 [ 2631.097577][T28805] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2631.103509][T28805] ? bpf_lsm_capable+0x5/0x10 [ 2631.108214][T28805] ? security_capable+0x85/0xb0 [ 2631.113482][T28805] genl_rcv_msg+0x601/0x790 [ 2631.118017][T28805] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2631.124221][T28805] ? genl_bind+0x360/0x360 [ 2631.128658][T28805] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2631.135013][T28805] ? lock_acquire+0x225/0x4a0 [ 2631.139732][T28805] netlink_rcv_skb+0x1ef/0x440 [ 2631.144521][T28805] ? genl_bind+0x360/0x360 [ 2631.148968][T28805] ? netlink_ack+0x1160/0x1160 [ 2631.153769][T28805] ? down_read+0x1a8/0x2d0 [ 2631.158217][T28805] genl_rcv+0x24/0x40 [ 2631.162228][T28805] netlink_unicast+0x7ad/0x920 [ 2631.167033][T28805] netlink_sendmsg+0x8ad/0xbd0 [ 2631.171828][T28805] ? netlink_getsockopt+0x550/0x550 [ 2631.177050][T28805] ? aa_sock_msg_perm+0x94/0x150 [ 2631.182016][T28805] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2631.187328][T28805] ? security_socket_sendmsg+0x7c/0xa0 [ 2631.192812][T28805] ? netlink_getsockopt+0x550/0x550 [ 2631.198040][T28805] ____sys_sendmsg+0x5ed/0x9a0 [ 2631.202851][T28805] ? __sys_sendmsg_sock+0x30/0x30 [ 2631.207900][T28805] ? __import_iovec+0x306/0x510 [ 2631.212792][T28805] ? import_iovec+0x6f/0xa0 [ 2631.217322][T28805] ___sys_sendmsg+0x2a2/0x360 [ 2631.222029][T28805] ? __sys_sendmsg+0x2a0/0x2a0 [ 2631.226847][T28805] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2631.233063][T28805] __se_sys_sendmsg+0x1c3/0x2b0 [ 2631.237938][T28805] ? ct_nmi_exit+0x145/0x1c0 [ 2631.242571][T28805] ? __x64_sys_sendmsg+0x80/0x80 [ 2631.247550][T28805] ? lockdep_hardirqs_on+0x94/0x140 [ 2631.252877][T28805] do_syscall_64+0x4c/0xa0 [ 2631.257320][T28805] ? clear_bhb_loop+0x60/0xb0 [ 2631.262022][T28805] ? clear_bhb_loop+0x60/0xb0 [ 2631.266720][T28805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2631.272649][T28805] RIP: 0033:0x7f459539ce59 [ 2631.277114][T28805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2631.296760][T28805] RSP: 002b:00007f45935d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2631.305207][T28805] RAX: ffffffffffffffda RBX: 00007f4595616090 RCX: 00007f459539ce59 [ 2631.313325][T28805] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2631.321322][T28805] RBP: 00007f4595432e6f R08: 0000000000000000 R09: 0000000000000000 [ 2631.329337][T28805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2631.337333][T28805] R13: 00007f4595616128 R14: 00007f4595616090 R15: 00007ffef59a5c28 [ 2631.345356][T28805] [ 2633.774649][T28818] netlink: 'syz.0.17838': attribute type 10 has an invalid length. [ 2633.787624][T28820] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.17831'. [ 2633.792829][T28818] netlink: 152 bytes leftover after parsing attributes in process `syz.0.17838'. [ 2634.085824][T28825] netlink: 'syz.4.17833': attribute type 10 has an invalid length. [ 2634.427139][T28835] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.17836'. [ 2634.449497][T28835] netlink: 43 bytes leftover after parsing attributes in process `syz.0.17836'. [ 2634.849625][T28847] : port 1(ip6gretap0) entered blocking state [ 2634.877981][T28847] : port 1(ip6gretap0) entered disabled state [ 2634.922302][T28847] device ip6gretap0 entered promiscuous mode [ 2634.953521][T28851] device ip6gretap0 left promiscuous mode [ 2634.959500][T28851] : port 1(ip6gretap0) entered disabled state [ 2635.176571][T28858] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.17842'. [ 2635.198555][T28861] netlink: 'syz.3.17845': attribute type 10 has an invalid length. [ 2635.207703][T28861] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17845'. [ 2635.251489][T28858] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2635.292619][T28858] CPU: 1 PID: 28858 Comm: syz.4.17842 Not tainted syzkaller #0 [ 2635.300263][T28858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2635.310533][T28858] Call Trace: [ 2635.313860][T28858] [ 2635.316839][T28858] dump_stack_lvl+0x188/0x24e [ 2635.321571][T28858] ? show_regs_print_info+0x12/0x12 [ 2635.326811][T28858] ? load_image+0x410/0x410 [ 2635.331380][T28858] sysfs_warn_dup+0x8a/0xa0 [ 2635.335930][T28858] sysfs_do_create_link_sd+0xc0/0x110 [ 2635.341360][T28858] device_add+0x83b/0x1050 [ 2635.345839][T28858] wiphy_register+0x1d8b/0x2aa0 [ 2635.350754][T28858] ? cfg80211_event_work+0x40/0x40 [ 2635.355928][T28858] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2635.362146][T28858] ? ieee80211_register_hw+0x2981/0x39f0 [ 2635.367852][T28858] ieee80211_register_hw+0x2d48/0x39f0 [ 2635.373380][T28858] ? ieee80211_register_hw+0xed1/0x39f0 [ 2635.378983][T28858] ? ieee80211_register_hw+0xed1/0x39f0 [ 2635.384602][T28858] ? ieee80211_tasklet_handler+0x20/0x20 [ 2635.390300][T28858] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2635.396256][T28858] ? __debug_object_init+0xed/0x440 [ 2635.401512][T28858] ? memset+0x1e/0x40 [ 2635.405541][T28858] ? __hrtimer_init+0x189/0x270 [ 2635.410473][T28858] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2635.416344][T28858] ? memcpy+0x3c/0x60 [ 2635.420393][T28858] hwsim_new_radio_nl+0xab7/0xc90 [ 2635.425494][T28858] genl_family_rcv_msg_doit+0x22f/0x350 [ 2635.431097][T28858] ? end_current_label_crit_section+0x170/0x170 [ 2635.437467][T28858] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2635.443708][T28858] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2635.449680][T28858] ? bpf_lsm_capable+0x5/0x10 [ 2635.454411][T28858] ? security_capable+0x85/0xb0 [ 2635.459336][T28858] genl_rcv_msg+0x601/0x790 [ 2635.463917][T28858] ? genl_bind+0x360/0x360 [ 2635.468405][T28858] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2635.474795][T28858] netlink_rcv_skb+0x1ef/0x440 [ 2635.479608][T28858] ? genl_bind+0x360/0x360 [ 2635.484077][T28858] ? netlink_ack+0x1160/0x1160 [ 2635.488894][T28858] ? down_read+0x1a8/0x2d0 [ 2635.493364][T28858] genl_rcv+0x24/0x40 [ 2635.497397][T28858] netlink_unicast+0x7ad/0x920 [ 2635.502225][T28858] netlink_sendmsg+0x8ad/0xbd0 [ 2635.507052][T28858] ? netlink_getsockopt+0x550/0x550 [ 2635.512317][T28858] ? aa_sock_msg_perm+0x94/0x150 [ 2635.517311][T28858] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2635.522652][T28858] ? security_socket_sendmsg+0x7c/0xa0 [ 2635.528153][T28858] ? netlink_getsockopt+0x550/0x550 [ 2635.533407][T28858] ____sys_sendmsg+0x5ed/0x9a0 [ 2635.538242][T28858] ? __sys_sendmsg_sock+0x30/0x30 [ 2635.543322][T28858] ? __import_iovec+0x306/0x510 [ 2635.548255][T28858] ? import_iovec+0x6f/0xa0 [ 2635.552818][T28858] ___sys_sendmsg+0x2a2/0x360 [ 2635.557558][T28858] ? __sys_sendmsg+0x2a0/0x2a0 [ 2635.562397][T28858] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2635.568238][T28858] __se_sys_sendmsg+0x1c3/0x2b0 [ 2635.573150][T28858] ? __x64_sys_sendmsg+0x80/0x80 [ 2635.578160][T28858] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2635.584125][T28858] do_syscall_64+0x4c/0xa0 [ 2635.588600][T28858] ? clear_bhb_loop+0x60/0xb0 [ 2635.593328][T28858] ? clear_bhb_loop+0x60/0xb0 [ 2635.598060][T28858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2635.604007][T28858] RIP: 0033:0x7f2bd9d9ce59 [ 2635.608472][T28858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2635.628205][T28858] RSP: 002b:00007f2bd7fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2635.636676][T28858] RAX: ffffffffffffffda RBX: 00007f2bda016090 RCX: 00007f2bd9d9ce59 [ 2635.644693][T28858] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2635.652697][T28858] RBP: 00007f2bd9e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2635.660698][T28858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2635.668693][T28858] R13: 00007f2bda016128 R14: 00007f2bda016090 R15: 00007ffc1f7ad878 [ 2635.676706][T28858] [ 2635.825422][T28862] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.17846'. [ 2635.853942][T28862] netlink: 43 bytes leftover after parsing attributes in process `syz.2.17846'. [ 2635.891766][T28877] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.17851'. [ 2635.933040][T28877] netlink: 43 bytes leftover after parsing attributes in process `syz.1.17851'. [ 2638.130842][T28897] netlink: 'syz.2.17861': attribute type 10 has an invalid length. [ 2638.170644][T28897] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17861'. [ 2638.290286][T28901] : port 1(ip6gretap0) entered blocking state [ 2638.309452][T28901] : port 1(ip6gretap0) entered disabled state [ 2638.335104][T28901] device ip6gretap0 entered promiscuous mode [ 2638.384903][T28907] netlink: 'syz.1.17865': attribute type 21 has an invalid length. [ 2638.403045][T28907] IPv6: NLM_F_CREATE should be specified when creating new route [ 2638.421355][T28907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2638.428781][T28907] IPv6: NLM_F_CREATE should be set when creating new route [ 2638.436312][T28907] IPv6: NLM_F_CREATE should be set when creating new route [ 2638.443708][T28907] IPv6: NLM_F_CREATE should be set when creating new route [ 2638.545842][T28912] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.17867'. [ 2638.556072][T28903] device ip6gretap0 left promiscuous mode [ 2638.562176][T28912] netlink: 43 bytes leftover after parsing attributes in process `syz.2.17867'. [ 2638.575240][T28903] : port 1(ip6gretap0) entered disabled state [ 2638.766491][T28918] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.17870'. [ 2638.824536][T28918] netlink: 43 bytes leftover after parsing attributes in process `syz.2.17870'. [ 2639.112744][T28934] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 2639.733180][T28949] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.17880'. [ 2639.895436][T28954] : port 1(ip6gretap0) entered blocking state [ 2639.923625][T28954] : port 1(ip6gretap0) entered disabled state [ 2639.967350][T28954] device ip6gretap0 entered promiscuous mode [ 2640.022615][T28963] netlink: 'syz.3.17889': attribute type 10 has an invalid length. [ 2640.035648][T28961] device ip6gretap0 left promiscuous mode [ 2640.074124][T28961] : port 1(ip6gretap0) entered disabled state [ 2640.570684][T28983] netlink: 'syz.2.17898': attribute type 29 has an invalid length. [ 2640.602099][T28983] netlink: 'syz.2.17898': attribute type 29 has an invalid length. [ 2640.630113][T28986] netlink: 'syz.2.17898': attribute type 29 has an invalid length. [ 2640.670744][T28983] netlink: 'syz.2.17898': attribute type 29 has an invalid length. [ 2640.688508][T28983] netlink: 'syz.2.17898': attribute type 29 has an invalid length. [ 2640.720681][T28992] netlink: 'syz.4.17902': attribute type 10 has an invalid length. [ 2641.208961][T29008] netlink: 'syz.4.17908': attribute type 21 has an invalid length. [ 2641.217359][T29008] netlink: 'syz.4.17908': attribute type 6 has an invalid length. [ 2641.226018][T29008] __nla_validate_parse: 4 callbacks suppressed [ 2641.226032][T29008] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17908'. [ 2641.468889][T29011] netlink: 'syz.0.17909': attribute type 21 has an invalid length. [ 2641.929696][T29016] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.17911'. [ 2641.951572][T29016] netlink: 43 bytes leftover after parsing attributes in process `syz.3.17911'. [ 2642.199796][T29027] netlink: 'syz.1.17915': attribute type 10 has an invalid length. [ 2642.227320][T29027] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17915'. [ 2642.256751][T29027] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2642.817899][T29044] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.17924'. [ 2643.374214][T29054] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.17927'. [ 2643.401244][T29054] netlink: 43 bytes leftover after parsing attributes in process `syz.1.17927'. [ 2644.238199][T29088] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.17940'. [ 2644.248568][T29088] netlink: zone id is out of range [ 2644.255621][T29088] netlink: zone id is out of range [ 2644.262882][T29088] netlink: zone id is out of range [ 2644.268204][T29088] netlink: zone id is out of range [ 2644.274375][T29088] netlink: zone id is out of range [ 2644.279664][T29088] netlink: zone id is out of range [ 2644.285452][T29088] netlink: zone id is out of range [ 2644.290867][T29088] netlink: zone id is out of range [ 2644.296693][T29088] netlink: zone id is out of range [ 2644.302787][T29086] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17941'. [ 2645.016110][T29117] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.17952'. [ 2645.499602][T29132] : port 1(ip6gretap0) entered blocking state [ 2645.513439][T29132] : port 1(ip6gretap0) entered disabled state [ 2645.540740][T29132] device ip6gretap0 entered promiscuous mode [ 2645.590163][T29133] device ip6gretap0 left promiscuous mode [ 2645.642653][T29133] : port 1(ip6gretap0) entered disabled state [ 2645.713197][T27134] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2646.288337][T29162] __nla_validate_parse: 3 callbacks suppressed [ 2646.288378][T29162] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.17971'. [ 2646.349432][T29162] netlink: 43 bytes leftover after parsing attributes in process `syz.2.17971'. [ 2646.624313][T29178] netlink: 14 bytes leftover after parsing attributes in process `syz.2.17978'. [ 2646.643024][T29176] bond0: (slave dummy0): Error: Slave device does not support XDP [ 2646.663744][T29176] validate_nla: 3 callbacks suppressed [ 2646.663760][T29176] netlink: 'syz.1.17977': attribute type 10 has an invalid length. [ 2646.726729][T29180] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.17979'. [ 2646.752671][T29180] netlink: 43 bytes leftover after parsing attributes in process `syz.4.17979'. [ 2646.936760][T29185] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.17981'. [ 2646.972514][T29185] netlink: 43 bytes leftover after parsing attributes in process `syz.2.17981'. [ 2647.184845][T29179] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 2647.451877][T29208] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.17989'. [ 2647.495686][T29208] netlink: 43 bytes leftover after parsing attributes in process `syz.1.17989'. [ 2647.636395][T29213] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.17993'. [ 2647.733426][T29179] Bluetooth: hci0: command 0x2016 tx timeout [ 2648.290185][T27134] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 2648.444087][T27134] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 2648.564110][T29237] device pim6reg1 entered promiscuous mode [ 2648.901546][T29251] netlink: 'syz.0.18010': attribute type 10 has an invalid length. [ 2651.735196][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.741559][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.082661][T29269] device pim6reg1 entered promiscuous mode [ 2652.342006][T29179] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2652.350183][T29179] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 2652.361686][T29179] CPU: 0 PID: 29179 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 2652.369396][T29179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2652.379492][T29179] Workqueue: hci3 hci_rx_work [ 2652.384315][T29179] Call Trace: [ 2652.387672][T29179] [ 2652.390649][T29179] dump_stack_lvl+0x188/0x24e [ 2652.395382][T29179] ? show_regs_print_info+0x12/0x12 [ 2652.400649][T29179] ? load_image+0x410/0x410 [ 2652.405239][T29179] sysfs_create_dir_ns+0x26a/0x290 [ 2652.410593][T29179] ? __lock_acquire+0x7bd0/0x7bd0 [ 2652.415688][T29179] ? sysfs_warn_dup+0xa0/0xa0 [ 2652.420434][T29179] ? do_raw_spin_unlock+0x11d/0x230 [ 2652.425687][T29179] kobject_add_internal+0x617/0xca0 [ 2652.430978][T29179] kobject_add+0x160/0x230 [ 2652.435475][T29179] ? kobject_init+0x1c0/0x1c0 [ 2652.440237][T29179] ? __raw_spin_lock_init+0x41/0x100 [ 2652.445578][T29179] ? klist_children_get+0x50/0x50 [ 2652.450667][T29179] ? get_device_parent+0x121/0x3e0 [ 2652.455839][T29179] device_add+0x470/0x1050 [ 2652.460320][T29179] hci_conn_add_sysfs+0xd1/0x1e0 [ 2652.465379][T29179] le_conn_complete_evt+0xf69/0x1560 [ 2652.470779][T29179] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 2652.477103][T29179] ? bt_info+0x180/0x180 [ 2652.481398][T29179] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2652.487123][T29179] ? mutex_unlock+0x10/0x10 [ 2652.491672][T29179] ? skb_pull_data+0xec/0x1f0 [ 2652.496409][T29179] hci_le_conn_complete_evt+0x183/0x440 [ 2652.502066][T29179] ? hci_remote_host_features_evt+0x230/0x230 [ 2652.508270][T29179] hci_event_packet+0x7b3/0x1290 [ 2652.514056][T29179] ? __lock_acquire+0x7bd0/0x7bd0 [ 2652.519148][T29179] ? bis_list+0x280/0x280 [ 2652.523525][T29179] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2652.529498][T29179] ? kcov_remote_start+0x4b0/0x7e0 [ 2652.535061][T29179] ? nf_ct_resolve_clash+0x572/0x68f [ 2652.540407][T29179] ? hci_send_to_monitor+0x9c/0x4a0 [ 2652.545665][T29179] hci_rx_work+0x3eb/0xd40 [ 2652.550162][T29179] ? _raw_spin_unlock+0x40/0x40 [ 2652.555105][T29179] ? process_one_work+0x7b4/0x1160 [ 2652.560274][T29179] process_one_work+0x8ab/0x1160 [ 2652.565289][T29179] ? worker_detach_from_pool+0x240/0x240 [ 2652.570978][T29179] ? _raw_spin_lock_irq+0x86/0xf0 [ 2652.576063][T29179] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2652.581145][T29179] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2652.586740][T29179] ? wq_worker_running+0x97/0x190 [ 2652.591802][T29179] worker_thread+0xaf5/0x12a0 [ 2652.596574][T29179] kthread+0x29d/0x330 [ 2652.600692][T29179] ? worker_clr_flags+0x1a0/0x1a0 [ 2652.605799][T29179] ? kthread_blkcg+0xd0/0xd0 [ 2652.610533][T29179] ret_from_fork+0x1f/0x30 [ 2652.615082][T29179] [ 2652.619515][T27134] Bluetooth: hci0: command 0x0406 tx timeout [ 2652.629822][T29179] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2652.643113][T29179] Bluetooth: hci3: failed to register connection device [ 2652.687843][T29283] __nla_validate_parse: 7 callbacks suppressed [ 2652.687885][T29283] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.18024'. [ 2652.711527][T29283] netlink: 43 bytes leftover after parsing attributes in process `syz.1.18024'. [ 2652.746031][T29282] : port 1(ip6gretap0) entered blocking state [ 2652.753274][T29282] : port 1(ip6gretap0) entered disabled state [ 2652.769323][T29282] device ip6gretap0 entered promiscuous mode [ 2652.795866][T29285] device ip6gretap0 left promiscuous mode [ 2652.801897][T29285] : port 1(ip6gretap0) entered disabled state [ 2653.124951][T29298] netlink: 'syz.4.18031': attribute type 10 has an invalid length. [ 2653.150076][T29297] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.18030'. [ 2653.160522][T29300] netlink: 164 bytes leftover after parsing attributes in process `syz.0.18042'. [ 2653.170306][T29297] netlink: 43 bytes leftover after parsing attributes in process `syz.3.18030'. [ 2653.223885][T29302] device pim6reg1 entered promiscuous mode [ 2653.899360][T29326] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.18044'. [ 2653.899538][T29327] device syzkaller0 entered promiscuous mode [ 2653.942867][T29326] netlink: 43 bytes leftover after parsing attributes in process `syz.3.18044'. [ 2653.967148][T29333] netlink: 'syz.2.18046': attribute type 10 has an invalid length. [ 2653.981733][T29332] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18047'. [ 2653.993494][T29332] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18047'. [ 2654.693906][T29179] Bluetooth: hci3: command 0x2016 tx timeout [ 2655.883297][T29343] : port 1(ip6gretap0) entered blocking state [ 2655.889866][T29343] : port 1(ip6gretap0) entered disabled state [ 2655.900033][T29343] device ip6gretap0 entered promiscuous mode [ 2655.908572][T29342] device pim6reg1 entered promiscuous mode [ 2655.916266][T29344] device ip6gretap0 left promiscuous mode [ 2655.922194][T29344] : port 1(ip6gretap0) entered disabled state [ 2656.496046][T29365] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.18059'. [ 2656.774209][T29377] netlink: 'syz.3.18062': attribute type 10 has an invalid length. [ 2656.860097][T29373] : port 1(ip6gretap0) entered blocking state [ 2656.872333][T29373] : port 1(ip6gretap0) entered disabled state [ 2656.917284][T29373] device ip6gretap0 entered promiscuous mode [ 2656.946980][T29382] device ip6gretap0 left promiscuous mode [ 2656.965368][T29382] : port 1(ip6gretap0) entered disabled state [ 2657.817846][T29399] __nla_validate_parse: 5 callbacks suppressed [ 2657.817885][T29399] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.18073'. [ 2657.857727][T29399] netlink: 43 bytes leftover after parsing attributes in process `syz.2.18073'. [ 2661.062006][T29432] : port 1(ip6gretap0) entered blocking state [ 2661.068463][T29432] : port 1(ip6gretap0) entered disabled state [ 2661.075738][T29432] device ip6gretap0 entered promiscuous mode [ 2661.083955][T29437] device ip6gretap0 left promiscuous mode [ 2661.089967][T29437] : port 1(ip6gretap0) entered disabled state [ 2661.270260][T29449] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.18092'. [ 2661.301738][T29449] netlink: 43 bytes leftover after parsing attributes in process `syz.2.18092'. [ 2665.095311][T29500] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18106'. [ 2665.105374][T29500] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18106'. [ 2666.651175][T29486] : port 1(ip6gretap0) entered blocking state [ 2666.657772][T29486] : port 1(ip6gretap0) entered disabled state [ 2666.665124][T29486] device ip6gretap0 entered promiscuous mode [ 2666.672491][T29487] device ip6gretap0 left promiscuous mode [ 2666.678436][T29487] : port 1(ip6gretap0) entered disabled state [ 2666.816977][T29504] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.18108'. [ 2668.471240][T29533] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.18118'. [ 2668.483680][T29533] netlink: 43 bytes leftover after parsing attributes in process `syz.1.18118'. [ 2669.242747][T29537] device syzkaller0 entered promiscuous mode [ 2671.015392][T29544] netlink: 'syz.2.18121': attribute type 15 has an invalid length. [ 2671.023461][T29544] netlink: 'syz.2.18121': attribute type 7 has an invalid length. [ 2671.031355][T29544] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18121'. [ 2671.529750][T29569] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2671.887352][T29579] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18135'. [ 2671.898093][T29579] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18135'. [ 2675.946715][T29587] netlink: 'syz.0.18138': attribute type 15 has an invalid length. [ 2675.955105][T29587] netlink: 'syz.0.18138': attribute type 7 has an invalid length. [ 2675.963358][T29587] netlink: 52 bytes leftover after parsing attributes in process `syz.0.18138'. [ 2676.200690][T29614] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.18148'. [ 2676.230357][T29614] netlink: 43 bytes leftover after parsing attributes in process `syz.2.18148'. [ 2676.441831][T29618] device syzkaller0 entered promiscuous mode [ 2676.494089][T29623] device syzkaller0 entered promiscuous mode [ 2678.672723][T29633] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.18155'. [ 2680.550827][T29654] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.18172'. [ 2682.403247][T29664] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.18174'. [ 2682.659218][T29683] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.18163'. [ 2682.672855][T29683] netlink: 43 bytes leftover after parsing attributes in process `syz.1.18163'. [ 2684.378942][T29682] netlink: 'syz.2.18166': attribute type 22 has an invalid length. [ 2684.387217][T29682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18166'. [ 2684.930634][T29701] device syzkaller0 entered promiscuous mode [ 2684.952760][T29704] device syzkaller0 entered promiscuous mode [ 2687.126634][T29709] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.18180'. [ 2689.038959][T29725] netlink: 'syz.3.18185': attribute type 22 has an invalid length. [ 2689.047206][T29725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18185'. [ 2689.210166][T29732] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.18186'. [ 2689.517725][T29741] device syzkaller0 entered promiscuous mode [ 2690.508219][T27134] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 2694.791641][T29772] netlink: 'syz.4.18200': attribute type 22 has an invalid length. [ 2694.806799][T29772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18200'. [ 2694.818272][T29783] netlink: 'syz.0.18206': attribute type 10 has an invalid length. [ 2694.833283][T29783] device wlan1 left promiscuous mode [ 2696.525007][T29810] netlink: 'syz.0.18218': attribute type 22 has an invalid length. [ 2696.543005][T29810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18218'. [ 2696.834513][T29818] device syzkaller0 entered promiscuous mode [ 2696.970619][T29828] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18222'. [ 2696.995157][T29828] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18222'. [ 2703.902818][T29846] netlink: 'syz.1.18230': attribute type 22 has an invalid length. [ 2703.910805][T29846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18230'. [ 2704.369486][T29859] netlink: 'syz.1.18234': attribute type 29 has an invalid length. [ 2707.518963][T29868] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.18238'. [ 2708.007869][T29898] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.18249'. [ 2708.048036][T29898] netlink: 43 bytes leftover after parsing attributes in process `syz.3.18249'. [ 2708.126436][T29900] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.18250'. [ 2708.152774][T29900] netlink: 43 bytes leftover after parsing attributes in process `syz.0.18250'. [ 2708.318015][T29910] netlink: 'syz.1.18251': attribute type 29 has an invalid length. [ 2708.880701][T29928] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18260'. [ 2708.939240][T29928] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18260'. [ 2709.524055][T29940] netlink: 'syz.1.18272': attribute type 29 has an invalid length. [ 2709.547839][T29938] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.18264'. [ 2709.581109][T29938] netlink: 43 bytes leftover after parsing attributes in process `syz.2.18264'. [ 2709.816020][T29948] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.18267'. [ 2709.829367][T29948] netlink: 43 bytes leftover after parsing attributes in process `syz.0.18267'. [ 2710.101326][T29958] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18273'. [ 2710.111944][T29958] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18273'. [ 2710.926047][T29981] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.18280'. [ 2710.943764][T29981] netlink: 43 bytes leftover after parsing attributes in process `syz.3.18280'. [ 2711.191634][T29987] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.18282'. [ 2711.346574][T29993] netlink: 'syz.3.18285': attribute type 29 has an invalid length. [ 2713.185381][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.192517][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.107084][T30016] netlink: 'syz.3.18293': attribute type 29 has an invalid length. [ 2714.470279][T30026] netlink: 'syz.0.18306': attribute type 29 has an invalid length. [ 2717.517835][T30038] __nla_validate_parse: 5 callbacks suppressed [ 2717.517874][T30038] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18299'. [ 2717.562919][T30038] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18299'. [ 2717.766933][T30047] netlink: 'syz.0.18309': attribute type 29 has an invalid length. [ 2718.007408][T30055] netlink: 'syz.1.18303': attribute type 29 has an invalid length. [ 2719.037698][T30066] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18310'. [ 2719.047839][T30066] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18310'. [ 2719.422275][T30076] device syzkaller0 entered promiscuous mode [ 2721.119417][T30094] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.18320'. [ 2721.133272][T30094] netlink: 43 bytes leftover after parsing attributes in process `syz.3.18320'. [ 2723.221571][T30110] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.18325'. [ 2723.231747][T30110] netlink: 43 bytes leftover after parsing attributes in process `syz.1.18325'. [ 2723.447083][T30097] netlink: 'syz.2.18319': attribute type 29 has an invalid length. [ 2723.455163][T30096] netlink: 'syz.4.18321': attribute type 29 has an invalid length. [ 2723.846383][T30122] netlink: 'syz.2.18336': attribute type 29 has an invalid length. [ 2724.069538][T30130] netlink: 'syz.4.18329': attribute type 10 has an invalid length. [ 2724.100952][T30132] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.18332'. [ 2724.256466][T30136] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.18333'. [ 2724.267218][T30136] netlink: 43 bytes leftover after parsing attributes in process `syz.0.18333'. [ 2724.666547][T30148] netlink: 'syz.3.18337': attribute type 29 has an invalid length. [ 2727.989381][T30164] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.18343'. [ 2728.032763][T30164] netlink: 43 bytes leftover after parsing attributes in process `syz.3.18343'. [ 2728.121958][T30172] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18346'. [ 2728.170297][T30170] netlink: 'syz.2.18347': attribute type 3 has an invalid length. [ 2728.192593][T30170] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.18347'. [ 2728.324069][T30179] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.18348'. [ 2728.340898][T30179] netlink: 43 bytes leftover after parsing attributes in process `syz.1.18348'. [ 2728.475171][T30181] netlink: 'syz.0.18351': attribute type 29 has an invalid length. [ 2729.151728][T30191] device macsec0 entered promiscuous mode [ 2729.228252][T30193] netlink: 'syz.4.18353': attribute type 29 has an invalid length. [ 2729.596027][T30203] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.18360'. [ 2729.618586][T30203] netlink: 43 bytes leftover after parsing attributes in process `syz.2.18360'. [ 2729.960282][T30215] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.18365'. [ 2729.970517][T30215] netlink: 43 bytes leftover after parsing attributes in process `syz.2.18365'. [ 2730.331979][T30230] netlink: 'syz.1.18367': attribute type 29 has an invalid length. [ 2730.617433][T30237] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18372'. [ 2730.638852][T30237] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18372'. [ 2731.383764][T30250] netlink: 'syz.1.18376': attribute type 29 has an invalid length. [ 2734.370275][T30256] device syzkaller0 entered promiscuous mode [ 2734.470615][T30260] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.18379'. [ 2734.492158][T30260] netlink: 43 bytes leftover after parsing attributes in process `syz.2.18379'. [ 2734.781506][T30272] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.18383'. [ 2734.801520][T30272] netlink: 43 bytes leftover after parsing attributes in process `syz.2.18383'. [ 2734.902730][T30278] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18384'. [ 2734.934925][T30278] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18384'. [ 2737.188845][T30286] netlink: 'syz.2.18389': attribute type 2 has an invalid length. [ 2737.197164][T30286] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18389'. [ 2737.207179][T30290] netlink: 'syz.3.18387': attribute type 29 has an invalid length. [ 2737.219810][T30303] netlink: 'syz.1.18393': attribute type 29 has an invalid length. [ 2737.465073][T30312] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.18395'. [ 2737.482803][T30312] netlink: 43 bytes leftover after parsing attributes in process `syz.3.18395'. [ 2737.716947][T30318] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.18399'. [ 2737.744736][T30316] device syzkaller0 entered promiscuous mode [ 2737.760736][T30314] netlink: 'syz.0.18404': attribute type 29 has an invalid length. [ 2740.161113][T30346] netlink: 'syz.3.18405': attribute type 29 has an invalid length. [ 2740.500720][T30367] __nla_validate_parse: 3 callbacks suppressed [ 2740.500755][T30367] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.18412'. [ 2740.522418][T30372] netlink: 'syz.1.18410': attribute type 2 has an invalid length. [ 2740.544171][T30367] netlink: 43 bytes leftover after parsing attributes in process `syz.3.18412'. [ 2740.553834][T30372] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18410'. [ 2740.564668][T30370] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18414'. [ 2740.575997][T30370] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18414'. [ 2741.019531][T30385] netlink: 'syz.4.18417': attribute type 29 has an invalid length. [ 2744.278355][T30407] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18423'. [ 2744.457135][T30410] device syzkaller0 entered promiscuous mode [ 2744.516267][T30414] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.18425'. [ 2744.553426][T30416] netlink: 'syz.0.18422': attribute type 29 has an invalid length. [ 2744.572607][T30414] netlink: 43 bytes leftover after parsing attributes in process `syz.2.18425'. [ 2744.798509][T30424] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18427'. [ 2744.833406][T30424] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18427'. [ 2745.088498][T27134] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 2747.437390][T30450] device syzkaller0 entered promiscuous mode [ 2747.464791][T30448] netlink: 'syz.3.18433': attribute type 29 has an invalid length. [ 2747.534411][T30457] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.18438'. [ 2747.558904][T30457] netlink: 43 bytes leftover after parsing attributes in process `syz.0.18438'. [ 2747.810592][T30465] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.18440'. [ 2747.820767][T30465] netlink: 43 bytes leftover after parsing attributes in process `syz.0.18440'. [ 2748.052696][T27134] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 2749.672138][T30467] netlink: 'syz.1.18441': attribute type 29 has an invalid length. [ 2749.870698][T30482] device syzkaller0 entered promiscuous mode [ 2749.922650][T30485] netlink: 'syz.2.18448': attribute type 4 has an invalid length. [ 2749.946209][T30485] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18448'. [ 2749.994239][T30488] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 2750.002085][T30488] #PF: supervisor instruction fetch in kernel mode [ 2750.008597][T30488] #PF: error_code(0x0010) - not-present page [ 2750.014613][T30488] PGD 7da6c067 P4D 7da6c067 PUD 0 [ 2750.019770][T30488] Oops: 0010 [#1] PREEMPT SMP KASAN [ 2750.025012][T30488] CPU: 0 PID: 30488 Comm: syz.1.18449 Not tainted syzkaller #0 [ 2750.032593][T30488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2750.042688][T30488] RIP: 0010:0x0 [ 2750.046197][T30488] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2750.053598][T30488] RSP: 0018:ffffc90004047498 EFLAGS: 00010246 [ 2750.059707][T30488] RAX: 1ffffffff1628cdf RBX: 1ffff92000808ea4 RCX: 0000000000000001 [ 2750.067717][T30488] RDX: ffffc90004047540 RSI: 0000000000000001 RDI: ffff88804025c000 [ 2750.075728][T30488] RBP: ffffc900040475b0 R08: ffff88804025c03f R09: 1ffff1100804b807 [ 2750.083759][T30488] R10: dffffc0000000000 R11: ffffed100804b808 R12: ffffe8ffffcccc10 [ 2750.091758][T30488] R13: ffffffff8b1466f8 R14: 0000000000000000 R15: ffff88804025c000 [ 2750.099782][T30488] FS: 00007f8dd67de6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2750.108745][T30488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2750.115369][T30488] CR2: ffffffffffffffd6 CR3: 0000000057ade000 CR4: 00000000003506f0 [ 2750.123387][T30488] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2750.131385][T30488] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2750.139369][T30488] Call Trace: [ 2750.142684][T30488] [ 2750.145649][T30488] bond_xdp_xmit+0x31e/0x550 [ 2750.150387][T30488] ? bond_xdp_xmit+0x94/0x550 [ 2750.155115][T30488] ? bond_xdp+0x8c0/0x8c0 [ 2750.159460][T30488] bq_xmit_all+0xca9/0x1120 [ 2750.163988][T30488] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2750.169761][T30488] ? zone_statistics+0x170/0x170 [ 2750.174736][T30488] ? __dev_flush+0x1b0/0x1b0 [ 2750.179336][T30488] ? __alloc_pages_bulk+0x491/0x910 [ 2750.184660][T30488] ? xdp_test_run_init_page+0x330/0x430 [ 2750.190216][T30488] ? memcpy+0x3c/0x60 [ 2750.194199][T30488] ? rcu_is_watching+0x11/0xa0 [ 2750.198973][T30488] ? bq_enqueue+0x2ef/0x3d0 [ 2750.203516][T30488] ? rcu_is_watching+0x11/0xa0 [ 2750.208338][T30488] ? trace_xdp_redirect+0xb3/0x2b0 [ 2750.213531][T30488] __dev_flush+0xbf/0x1b0 [ 2750.217912][T30488] xdp_do_flush+0xa/0x20 [ 2750.222190][T30488] bpf_test_run_xdp_live+0x1549/0x1a90 [ 2750.227701][T30488] ? 0xffffffffa0004440 [ 2750.231889][T30488] ? irqentry_enter+0x33/0x50 [ 2750.236605][T30488] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 2750.242197][T30488] ? xdp_convert_md_to_buff+0x330/0x330 [ 2750.247813][T30488] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2750.254100][T30488] ? bpf_test_init+0x119/0x140 [ 2750.258897][T30488] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2750.264399][T30488] bpf_prog_test_run_xdp+0x757/0xf80 [ 2750.269729][T30488] ? __lock_acquire+0x7bd0/0x7bd0 [ 2750.274803][T30488] ? dev_put+0x80/0x80 [ 2750.278928][T30488] ? dev_put+0x80/0x80 [ 2750.283039][T30488] bpf_prog_test_run+0x31c/0x390 [ 2750.288022][T30488] __sys_bpf+0x62b/0x780 [ 2750.292320][T30488] ? bpf_link_show_fdinfo+0x380/0x380 [ 2750.297758][T30488] ? lock_chain_count+0x20/0x20 [ 2750.302664][T30488] __x64_sys_bpf+0x78/0x90 [ 2750.307134][T30488] do_syscall_64+0x4c/0xa0 [ 2750.311596][T30488] ? clear_bhb_loop+0x60/0xb0 [ 2750.316328][T30488] ? clear_bhb_loop+0x60/0xb0 [ 2750.318936][T30490] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18450'. [ 2750.321042][T30488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2750.321081][T30488] RIP: 0033:0x7f8dd599ce59 [ 2750.321101][T30488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2750.331569][T30490] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18450'. [ 2750.336396][T30488] RSP: 002b:00007f8dd67de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2750.336424][T30488] RAX: ffffffffffffffda RBX: 00007f8dd5c15fa0 RCX: 00007f8dd599ce59 [ 2750.336442][T30488] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 2750.336457][T30488] RBP: 00007f8dd5a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2750.336473][T30488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2750.336487][T30488] R13: 00007f8dd5c16038 R14: 00007f8dd5c15fa0 R15: 00007fff9b264978 [ 2750.336514][T30488] [ 2750.336537][T30488] Modules linked in: [ 2750.336562][T30488] CR2: 0000000000000000 [ 2750.336622][T30488] ---[ end trace 0000000000000000 ]--- [ 2750.434740][T30488] RIP: 0010:0x0 [ 2750.438231][T30488] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 2750.445614][T30488] RSP: 0018:ffffc90004047498 EFLAGS: 00010246 [ 2750.451724][T30488] RAX: 1ffffffff1628cdf RBX: 1ffff92000808ea4 RCX: 0000000000000001 [ 2750.459761][T30488] RDX: ffffc90004047540 RSI: 0000000000000001 RDI: ffff88804025c000 [ 2750.467776][T30488] RBP: ffffc900040475b0 R08: ffff88804025c03f R09: 1ffff1100804b807 [ 2750.475777][T30488] R10: dffffc0000000000 R11: ffffed100804b808 R12: ffffe8ffffcccc10 [ 2750.483759][T30488] R13: ffffffff8b1466f8 R14: 0000000000000000 R15: ffff88804025c000 [ 2750.491739][T30488] FS: 00007f8dd67de6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2750.500838][T30488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2750.507441][T30488] CR2: ffffffffffffffd6 CR3: 0000000057ade000 CR4: 00000000003506f0 [ 2750.515436][T30488] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2750.523409][T30488] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2750.531385][T30488] Kernel panic - not syncing: Fatal exception in interrupt [ 2750.539155][T30488] Kernel Offset: disabled [ 2750.543490][T30488] Rebooting in 86400 seconds..