last executing test programs: 25.488431026s ago: executing program 0 (id=4318): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000008000000b702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r3 = syz_clone(0x40000100, &(0x7f0000000300)="880b9d67861e0698988c4c16dad5011b67c0b4c46bbb3833538ee5a106dae2200769e08452e6bd8e8b30c37f7082d51b9f87f1f2a4ce0e0eb9cb31cb9eb9933f711f352be768b84bd94660b06015b3a5394a4383309c078ddc836bcdccbe08415393e4ee0e78a41dae2e4c6f58bf10558244bc92c405fed60cb7e8c19ec8d771ab7368d0929ccd26da7868dd77ce", 0x8e, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000500)="688fbf04b6ebcb3f0ed720b0696d147ff53c803b6192b0125491dcfc8d64c4f892891fe1150744e881016f476177bf522639b10aa9ed6365f44fd5375da4bf62bc1405aec658ccb4b5f5a6e06e9a09a00df32ffee8ee1d03e3754f16d7bdf128173640c92c2c22b98a3c184f7d") write$cgroup_pid(r2, &(0x7f0000000580)=r3, 0x12) socket$kcm(0x10, 0x2, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x18}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001f40)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/129, 0x81}, {&(0x7f0000001e80)=""/84, 0x54}], 0x3}, 0x2100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010000000000000c0000000c000000020000000000000000000013040000000000000000"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0700000004000000200000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000cb0000000000000000080000007359d288be9b0a4a0ac95bc3dabd9feea75da7863819a75877d32cf340f8a4e48f5e4ebbab2dd8d6ee341f702711e64959f49ac3cc6d4ecc86295dafe84a98e5a434", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f00000006c0)={r6, 0x0, 0x0}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, 0x80, &(0x7f0000002640)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1}, 0x844) 10.938002273s ago: executing program 0 (id=4364): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x29, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x84002, 0xca, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0xe, 0x0, 0x40008}, 0x0, 0xc, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x31}, 0x81c0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYBLOB=','], 0x9a) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[@ANYBLOB='+pids'], 0x6) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2d, 'io'}, {0x2b, 'memory'}, {0x2d, 'rdma'}]}, 0x4) 10.290628194s ago: executing program 0 (id=4367): r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x9d, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f20e94d079f199b8a1fb521f3756a955ecdf157902f64d1c3c941187f21467c767be90f8829742af2bc17d5721b550573478b6b8282040c5a3747186fdbb5cd07a005be37af4306c2444dad7bc6bee8ca671654ba67b740554a723ad450d2fe05e561efd5b5fd646a06d273ca188f346864bb2a4ba3f2ea1dfb3a21122eae0d8b60fad85a08720d94453f17dff13d4b", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 9.849247654s ago: executing program 0 (id=4368): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4000002a}]}, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit, @alu={0x4, 0x0, 0x4, 0x3, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) 9.427555304s ago: executing program 0 (id=4370): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x4001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 7.890697417s ago: executing program 0 (id=4376): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000200)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) socketpair(0x26, 0x1, 0x10, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002f40)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB], 0x50) r3 = socket$kcm(0xa, 0x3, 0x87) recvmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00b4cc6333c8f18000000073fe1c700000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x20, 0x0, 0x0, 0x3, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x8, 0x7, 0x0, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000b000000181100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000a500f4fffcffffff18000000060000000000000009000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0x100f, &(0x7f0000001cc0)=""/4111, 0x41100, 0x2}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r6, 0x0) socket$kcm(0x10, 0x2, 0x4) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, &(0x7f0000000600), 0x0, 0x9, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000840)=r8, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x18, 0x9, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0, 0x5}, 0x21, 0x0, 0x0, 0x8, 0x3, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 7.742135604s ago: executing program 1 (id=4377): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="aca19e3eddb8aaefa07d3adf71713d8e905e64cf867cf3bed47b0d62f7e5c48093c7eeed9bdb48540a96e21eedfd05361c7047327046eb988b9019c376974f20f4204e8205cb66cef29b435637a88aa7d1032b02255158715a014f7b05805740be6c12d5b6b2d00cca538ed6814202f134e57e45097c7703c2d3a7365fd55143df1289481d752c996d678881c0be1add7d281d33b088688275534f95b8e0eb5db9fac7da559c9e60aebd1d3b9609a09c2c21140f488d6f55a3b8eccc26c4e54aa9b77d6469add8351c25ed743fe1afef", 0xd0}, {&(0x7f0000000180)="610d1e2ee206d93e6afd32ca0e", 0xd}, {&(0x7f00000001c0)="dd90719541acb5c6f5d825", 0xb}], 0x3, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x28}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x80}, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x6, 0x2, 0xfa, 0x0, 0x0, 0x2, 0x8c462, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_config_ext={0x2368, 0xfffffffffffffffb}, 0x850fa6e1f512c416, 0x4, 0x3, 0x5, 0x4, 0xfff, 0x9, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0x9, &(0x7f0000000680)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x7}, @exit, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @exit, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000700)='syzkaller\x00', 0x9, 0xe3, &(0x7f0000000740)=""/227, 0x41100, 0x1, '\x00', r1, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0xd, 0xd, 0xcb60}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000900)=[{0x1, 0x4, 0xa, 0xa}, {0x1, 0x2, 0x9, 0x6}, {0x4, 0x1, 0xd, 0xb}], 0x10, 0x7ff}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xc, 0x7, 0x4, 0x8, 0x40008, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x6, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0xc0}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000000480)='syzkaller\x00', 0x2c0e, 0xe2, &(0x7f00000004c0)=""/226, 0x0, 0x173a990c96b4e7ca, '\x00', r1, 0x0, r3, 0x8, &(0x7f0000000600)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x6, 0xe7, 0x6}, 0x10, 0x21a9d, r4, 0x5, &(0x7f0000000b80)=[r5, r6, r7], &(0x7f0000000bc0)=[{0x4, 0x1, 0xd, 0x8}, {0x2, 0x1, 0x2, 0x3}, {0x3, 0x1, 0xa, 0x5}, {0x2, 0x2, 0x0, 0xb}, {0xac01, 0x4, 0xa, 0x1}], 0x10, 0x40}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0xd, &(0x7f0000000d00)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3274}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}, @jmp={0x5, 0x1, 0xd, 0x1, 0xb, 0x6, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0xc, 0x9, 0x4, 0x1, 0x4}], &(0x7f0000000d80)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000dc0)=""/4096, 0x41100, 0x4, '\x00', r1, 0x25, r3, 0x8, &(0x7f0000001dc0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001e00)={0x2, 0xc, 0x5, 0xca}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001e40)=[r7, r5, r6, r6], &(0x7f0000001e80)=[{0x4, 0x4, 0x9, 0xc}]}, 0x94) r9 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000002340)={&(0x7f0000001f80)=@l2tp={0x2, 0x0, @multicast1, 0x401}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002000)="266192f8bc8d1f90f2750aa8d4039a7f50e00490bf98c3108238fedecdfbfcabf6376ebd52b5de176b3af04b841905ae6e0e1d9d09a33d7d2940ca3f7383845ed65ed3d7f19b072f72b72fa3d7367cada93f25e7938e6170ab58cef1737c8b09d36f46a64309b74c7c53db5afa4fc5421761caa2714dc0f6b1ccd371c2613651921c024b14ee5c25b2a22855ebb8a28c034f64994473a213706891144ca48532a6bb32e3443dd227afc58b2bb97d7bb53a369e9a81928dbdd4f120bde45f126687019aedee903cdda621ccc52afce47af75935c7cc1dea", 0xd7}, {&(0x7f0000002100)="95410b1f82b1b1f8e9e501f0a9da53526662c8a309e0906de9c193147073dd234945bdb9dab22f5ef0b498e8e7", 0x2d}, {&(0x7f0000002140)="ac43568839d0cfb56439964e8981adc245f8dfcb4fbb3d6e195c182756452594f8616f6f05805571f99d61a773da19c6e3bfc40f669851443a66f91812526b06e2a6312c250c596f8edd06f3a6d6988f25971473fd8af8c18340d012d6d59ee1", 0x60}, {&(0x7f00000021c0)="49a3cf398190b15b0e32574f498d279b7f61e1314aca456d8111f5d8d248593ce16f758e3c81e44ec4dc5cc273a488fb420ac5739521c96f0043233580322c95838c", 0x42}, {&(0x7f0000002240)="6ff2756598bbec09956408804655be1ba23b89ffadf41454eaeed07c82fe1ded045e879fd3225a0494cf420ebfd619a0c91014a5c72b5223f78b383a95463163e34c44f121", 0x45}], 0x5}, 0x4000800) (async) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000002380)=r8, 0x4) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000026c0)={&(0x7f00000025c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x6, [@const={0xc, 0x0, 0x0, 0xa, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x1}}, @ptr={0x1, 0x0, 0x0, 0x2, 0x5}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x2b, 0x0, 0xd, 0x1}]}, {0x0, [0x5f, 0x61, 0x2e, 0x30]}}, &(0x7f0000002640)=""/99, 0x5e, 0x63, 0x0, 0x8, 0x10000}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000027c0)={{r6, 0xffffffffffffffff}, &(0x7f0000002740), &(0x7f0000002780)='%pK \x00'}, 0x20) (async, rerun: 32) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002800)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x0, '\x00', 0x0, r3, 0x2, 0x2, 0x2}, 0x50) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002940)={0x6, 0x1b, &(0x7f00000023c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x36}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x33}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x6}]}, &(0x7f00000024c0)='GPL\x00', 0x10001, 0x99, &(0x7f0000002500)=""/153, 0x40f00, 0x4f, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f0000002700)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002880)=[r11, r6, r12], &(0x7f00000028c0)=[{0x5, 0x1, 0x0, 0xb}, {0x1, 0x3, 0x1, 0x4}, {0x0, 0x4, 0x8, 0x5}, {0x0, 0x5, 0x3, 0x9}, {0x5, 0x5, 0x0, 0xc}], 0x10, 0x4}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002a40)={r6, &(0x7f0000002a00)="47f3bfeb8c21568e7289455a72f6df6b312dd53f82bf"}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002c80)={r12, 0x58, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002d40)={0x9, 0x0}, 0x8) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000002d80)=@base={0x2, 0x1, 0x0, 0x0, 0x9000, 0xffffffffffffffff, 0x8001, '\x00', 0x0, r3, 0x4, 0x0, 0x4, 0x0, @value=r10}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002f00)=@bpf_lsm={0x1d, 0x12, &(0x7f0000002a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002b40)='syzkaller\x00', 0x7, 0x57, &(0x7f0000002b80)=""/87, 0x40f00, 0x35, '\x00', r13, 0x1b, r10, 0x8, &(0x7f0000002cc0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000002d00)={0x4, 0x9, 0x5, 0x9c6}, 0x10, r14, 0x0, 0x9, &(0x7f0000002e00)=[r11, r11, r6, r6, r15, r11], &(0x7f0000002e40)=[{0x5, 0x1, 0x1, 0xb}, {0x5, 0x5, 0x3}, {0x4, 0x4, 0x0, 0x1}, {0x0, 0x5, 0x4}, {0x2, 0x2, 0x5}, {0x5, 0x4, 0x8}, {0x3, 0x4, 0xc, 0x4}, {0x2, 0x3, 0x6, 0x8}, {0x2, 0x5, 0x9, 0xb}], 0x10, 0x4}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002fc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xce9d, '\x00', r1, r3, 0x2, 0x5}, 0x50) r16 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003040), 0x2, 0x0) write$cgroup_subtree(r16, &(0x7f0000003080)={[{0x2b, 'freezer'}, {0x2b, 'cpu'}, {0x2d, 'net_cls'}, {0x2d, 'hugetlb'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpu'}, {0x2d, 'rdma'}, {0x2b, 'blkio'}, {0x2b, 'perf_event'}]}, 0x50) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000003100)=r5, 0x4) (async) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000003140)=@base={0x17, 0x8001, 0x6, 0x8, 0x150c0, 0x1, 0x7fffffff, '\x00', r1, r3, 0x2, 0x3, 0x2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003500)={0x1b, 0x0, 0x0, 0x5, 0x0, r17, 0x7, '\x00', 0x0, r10, 0x2, 0x0, 0x3}, 0x50) 7.20535838s ago: executing program 1 (id=4380): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000540)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="312c310a96"], 0x31) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000200)="a2d511e78e5f27fbc93c8090ccb81b8f9c5605ea9b5245865a459b285c5605a7df657e6cff1075174764d419e22fb8ed3d1427cd2d05acf71acc415effe3f8449d7a4c0e59d767eb388fb75a631ba2d379e6335c8b224a8bac9027c997701a7d061a287372393e9e1c53dc6c4b18652921219e5f3a391162d78dcfec4ac819ee0e70c7786c534e589925e240f95319e87d83464357ad39424f1f9b15e1fab8cbf5116cbead185822b174", 0xaa}, {&(0x7f00000003c0)="9b7e6ad9ec43e46646bf5590c548c5f77cce4e710268a4e7c4", 0x19}, {&(0x7f0000000400)="73378f5d1b5f1ca7760bb76a1e6c9a5364956af4d6133a7373d1ec6a7338e6c6fd4c3c19bb38d7032bdcd5256a4f5609df031fdc67efc95c20002b06042e1b87b371816b65a58d2f11d39d6e782ee67f76f80e802b6660923802", 0x5a}, {&(0x7f0000000580)}, {0x0}, {0x0}, {0xfffffffffffffffd}, {0x0}, {&(0x7f0000000900)}], 0x9, &(0x7f0000000ac0)="21ee94dfbda1a01d9f4b1bbc561783036c323c78ee25eb34b8c92f51af30fde8683c6620f017daad1ea5d50a002642be5c4a3a79f809ad7486934ef1e159", 0x3e, 0x8010}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000004b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x80001, 0x1, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x25, &(0x7f0000000540)=r9, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f0000000100)=r9, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801"], 0x128}, 0x4000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 7.044545907s ago: executing program 4 (id=4381): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x3, 0x10}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="d543bd26ce614171080000000800000000000000", @ANYRES32, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="d543bd26ce614171080000000800000000000000", @ANYRES32, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x88, 0x4, 0xff, 0x6, 0x0, 0x1, 0x9, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x2, @perf_bp={&(0x7f0000000a80), 0xa}, 0x100180, 0x800, 0x5, 0x3, 0x4, 0x1, 0xe3, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x1000000000008, r6, 0xa) (async) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x88, 0x4, 0xff, 0x6, 0x0, 0x1, 0x9, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x2, @perf_bp={&(0x7f0000000a80), 0xa}, 0x100180, 0x800, 0x5, 0x3, 0x4, 0x1, 0xe3, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x1000000000008, r6, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r9 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x2e, &(0x7f0000000640)=r8, 0x4) (async) setsockopt$sock_attach_bpf(r9, 0x1, 0x2e, &(0x7f0000000640)=r8, 0x4) recvmsg(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff79}, 0x60) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000380)=r10) (async) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000380)=r10) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) (async) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000008000000852000000400000004bfc0ff080000008500000008000000181b0000", @ANYRES32=r0, @ANYBLOB="000000000000000048eafeff1000000018110000eca06026ef767a8bfe56025c9228a26f4ef1f7318747f67c611f693bec55ff5330c7b0feb95007e28a984cbbf5fc52fb9e77510c00fd9b70a99774849624edf4316c02392c3ce4fbd4a4b8af9fb9f81b557111543eef90da3a9a26b3779a2600741a7d4701a25e65ae75ad9eb8e9ef24015c0228e420fddc4abe000000000000", @ANYRES32=r0, @ANYRES64=r7], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8}, 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff9039058", 0x16}], 0x1}, 0x4000000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff9039058", 0x16}], 0x1}, 0x4000000) r12 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002"], 0x0, 0x26}, 0x28) write$cgroup_subtree(r12, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000071009154090893b3520ba54a07"], 0xfe33) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r11, 0x0, 0xd5, 0xf9, &(0x7f0000000100)="c70af04a381c0f64706afde24bd78bff6f7ed4007f7bf1df191f4df1ea6b5de1520f52c214fbea1d66c0297220dce28ba3d1d8801f0117534408a72bfdab254351d413bdf778fd15bf3b7d886cb898c95a35ce8b06a03529674416cda90ba510bfa3ce4c0950fe6633ea69acae381161722b54080dc1e1b27bfcd470024f3223e589a60db3256f676e4e509c762d2924dc50d7048a946f52708c573426284bff3af72d805b456666898103a4a0df4ec8de609eed8a773b10a90fa85863a47ae626eef03755700525abb1f80148a7fe521700000000", &(0x7f0000000780)=""/249, 0xfffffffd, 0x0, 0xf0, 0x0, &(0x7f00000005c0)="8cf30464cddc759d2b18ecf389b4a6202e662d7c9f55d20de1992cb169046061185663faf399baf89345e87796dea8bf97920137ccefd374c60ff079af08243d1f2dd4541ef9a69c360966edac3d8ac1cdfd03485634d9aac98e4ac9ab9647f15f55a4a133339c1abf9565ce518cd6961762c8285e06fbd86b757d5d3a625f6bb3b0e94ba228f92e95165dafdc79545d2e78ec90e4c425116315127a7be47e815b30e503bf496786c1bd93686f16bd653601168cbf4e101de25185aa5217b4fd6d542b5f50f571341dba84f61ecd1771a02dec16aa9da202cecace56624fdcf04501053d3f58eb9d448cd4cd394c7ef7", &(0x7f00000006c0), 0x0, 0x0, 0x8cb}, 0x50) 5.810725125s ago: executing program 1 (id=4383): perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x1000000000000009, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1001, 0x6ba3b737}, 0x110708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYBLOB="05000000000000000000000000000000000000007ef99ffc6b97e26a4e75a5a5efa73aaced1f2155d7d954e2a690059430d879173ff527dba6a5effe105205864ce5d8cd688a7732b09872b71a9c69539627717a15b2bd37b36dcfcd8970243edf9219b1a4cf6dde66241de76433461a881cbdc6ea586921360b0e36e5c45f3d023352dee32d2eef3048fc5833b274d4c6cd0ecb4a0efd2baa3612a7c4f60c57772071af141a7d9a57d8e5e273052239465d7b2d7e4c6f70deb6f91552f3aff1f4fe7234c73ef22ce04a4363123b303796c239", @ANYRES32=0x0, @ANYRES32], 0x50) (async) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000001c0)=r3, 0x4) openat$cgroup(r2, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)="291216541bce87b9f99ff0979da1219edcf9f44873d28ad727b04762bf02b5f1b71a0e7d794a8905b242b1b7d7d84b16b2c579970c65e6a802037f9fef8b7800f42b872548f477dd1edeaea402814098a28011e888e8869960af14c887f0c82273bda68e087b786e", 0x68}], 0x1}, 0x40) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x4310feed034fc9f2) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) r5 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6c", 0x9}], 0x1}, 0x810) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) (async) recvmsg(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/25, 0x19}, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x71, &(0x7f0000000000), 0x8) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4040) socket$kcm(0x10, 0x2, 0x10) 5.543211008s ago: executing program 2 (id=4385): r0 = perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0xfc, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6b106c6383c1919f}, 0x8b001, 0x0, 0xfffffffd, 0x5, 0x5, 0x0, 0x3, 0x0, 0xffffbffe, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r2}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES32], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b", 0x7}], 0x1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x66, 0xe9, &(0x7f00000000c0)="c3e8f8ccf9440e7d5b7cccaf688b13ccfa6df6309067ac7dcde07909090e90c0833a0e401ec7bf9382a0be0393d6671ac79c19bb26c6dda8ed784fc94958586967ddde12d44070df548897df819e4cd18bfa8bb185ba30b5212bc2dda875c0c393fb316ae537", &(0x7f0000000140)=""/233, 0x6dc8, 0x0, 0xb4, 0x19, &(0x7f0000000240)="3d116bb436c829f4aaea2b673725948970d90570b05736b970a8806de47149031bfc8430210c80aac97d44117d81569be8b01213d7c119a9506721678bc79d4cc4bbd8a09671132a084ef20e8a93c0439105f0245f7c77684e1f3b5c475f4498c69f544485ce480cb532fcb736f14009999f8aa01fa3b776b67d1207d4c927e60b0e9d74eee018f0c4c7603da1c95d10e8ea7b5ddc350c344beec06203655cfe1c092b722227988399294ab3776580294b0bbc6c", &(0x7f0000000300)="0d9bf75025692e64b9cb5acf5b8dcda6ad7a9156caf560971f", 0x2, 0x0, 0x7f}, 0x50) socket$kcm(0x10, 0x400000002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0xc0189436, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000001008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020002010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000020000200000000002000000850000002000000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000002100b70400000000"], 0x0, 0x100}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'], 0x30}, 0x890) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x49c8, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500000000000000000000000000000000000000d883ea2360d14def1fa85ed6677c5e79608078df7699aa1bcce9a8d91eb0eebf4141bdd18819d724070a3ab02fc707433168e3f4131600074930"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10081, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x42082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xffffffffffffffc1, 0xa5}, 0x0, 0x10, 0x4, 0x8, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000780)={0x5, 0x80, 0x6, 0xf5, 0x5, 0x9, 0x0, 0x1, 0x2, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x8}, 0x1192b, 0x8, 0xa, 0x4, 0x318, 0x8ebc, 0x9, 0x0, 0x93b1, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a1, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700), &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x49, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x0, 0x0, &(0x7f0000000380), 0x8, 0xc4, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.47850879s ago: executing program 1 (id=4392): r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x33a5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xa, 0x0, &(0x7f00000006c0)="b9ff03316844268cf899", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x5, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5c, 0xa, 0x0, 0x9, 0x0, 0x4000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) r2 = socket$kcm(0x10, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r6) setsockopt$sock_attach_bpf(r4, 0x6, 0x1e, &(0x7f0000000500)=r7, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00000009000100053582c137153e3702480180000c0000d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0) syz_clone(0x62384000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.46674522s ago: executing program 4 (id=4393): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002dc0)={0x5, 0xb, &(0x7f0000002d40)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f000000000000000800030018000a000d0013009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xffffffffffffffff) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x59) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) 1.324141857s ago: executing program 3 (id=4394): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="27030200f00f00000600002fb9088965c7297a05a2019e6bafed88a839ffffffffe1053742e0e4650058f700000088641100114408000300b8bf4a31accb", 0x3e}, {&(0x7f0000000500)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78becd1455755985051a9b55a7c5e6cb0a37cd9c92a4b8e06a53af164e81ae37d251ce1818e9e6973374feaab4d2422070084af233d99a2dd7106672e6520a5ab0801d45a30bc7923756426ed6029cea34be70fd52bfbde2bb1171c48961a58bc64c2dafc47263af31c8d405d712a94a8f88b4e74d1e510c60100010000000000b6d31f118703445f42717726b721981296ae4348b0767e6b67335a9da9d3d4936b861ea72bb996e01bb88357f9bed242d7c1bd6b09940e23a2f9903cd9925d22f8112f9741e5658b5e62a4b23a292c858fcb8362e401d3", 0xee}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000880)="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", 0x188}, {&(0x7f0000000400)="e20650bb69f596a001a9396df3e895da88d97ebd178d47b9119f9232ea20b1637429669dc4d0c0cf864240df51aff34230940425976a91424886f7569ab0a0ed75f495341eee79791236e5437400cf79a8e84ed65e993f6897444bb5d86d94215b781ae9918681a67968825e9f5fed8e3cf996d276f78c75101b6e188cc3b29c44b07b85c76fe40f20727d081a440ce84ced2c1d50c6879b422b03412a20f6d2d4b9226a87c0fe4de731da5c6a6edb4972a2f3e7966db1e8ff048f5b61600611bbbc0905a9a9c23fa6db92243e178f7793e83e82ead265afe54086", 0xdb}, {&(0x7f0000001400)="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", 0xbed}], 0x6}, 0x0) 1.156446395s ago: executing program 2 (id=4395): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="1400000010013507d25a806f8c6394f98abc977b", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x1000000, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xe8420, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x210, 0x2, 0x80000, 0x9, 0x0, 0xfffffffd, 0x7, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x3) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) close(r4) openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, r3}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x110821, 0x0, 0xc2ba, 0x2, 0x64317117, 0xc060, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x0, 0x1, 0x8, 0x21, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r7, @ANYBLOB="000000000000000018100000", @ANYRES32=r8, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r9, r10}, 0xc) close(r2) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="61202a3a2a1f776d00"], 0x9) 1.094795108s ago: executing program 3 (id=4396): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) r0 = getpid() r1 = perf_event_open(0x0, r0, 0x200000000000b, 0xffffffffffffffff, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000500)={'gretap0\x00', @multicast}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0x10884, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0xffe0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)='-/\x00') r3 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_tos_u8={{0x11, 0x84}}], 0x30}, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0xfffffffffffffd45) socketpair(0x5, 0x3, 0x9, &(0x7f00000002c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b000000000000000001"], 0xfe1b) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32=r2, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)=r5}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000c00)={&(0x7f0000000580)="62a4d56c06f7f228f241447ea2c83efbec11f2cf980a6aaa8593831ed59ad56c4824804f555f12a8cf2d4dad21d4266f21ed27fcd2a65df4e901147fe227809bad9b793475ed536bdb25e4f597540c36d8d6c63f399ab9024ec2f77a8748bad3f61ac72edd7fd60b3dfe6ed5754c17e00a32e7ed9678ca8cacdad76e2ad5964d79c00e454dae36a3afe66a3190c25ad851cab416de33e313b674ba4cf1ad8b4fb7af6aa45c09c71a72377d24e6c018be9e2db2", &(0x7f0000000640)=""/39, &(0x7f0000000940)="6995d4a53b54505c9e3974951ab9aca368fb1437b11936a6fc54e6d826bf67ae8d0437a485b3f995531fb194952d9e98cd58e866c3529af3151085028ff5ead9f4817be384391ff154ac6d7546549fd4de116b890cc98c665b815852d06acc73fb7676806a6e907cf2e0afba9387fd28da50aa42a7356dd4a4047776b98ef08c706730bac456b5f667b3a88dba94ddf72d12cb037f93fb96349f1f535aa546d9a233b95dcfbbbdb4b8c0c921d583f6d9e6e1877d5ea7c17f5493f3d64b3e11e3cb54184dfcc30c10d3ef0664bf845b6a2409839fdb8012b9488fefcdd46d18f9b9eff127392ab6640b186487", &(0x7f0000000a40)="9bd302db6d3ca3b3f8d559e70cf2eb0bafb27b3e14030d57aaec239ff9eb96ba1dadc28baa44a8d1fba6ce461e8634a52965f3dff9d2be51ad151a0d21c4257d662898cfbf47f2b080085ac902aba47ce4065cc691f3ad1e891c050a9c17ac8090d5f69f79f55008e2908246d400d4086acd71df96d1d23f2953ce95a7a872afc6151a1d531495a3ec9991cc29517452d737c235d64bbd9496336b3dd5efc0f5a66d", 0x7, r6}, 0x38) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x58, &(0x7f0000000680)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0x3fff7ffa}, 0x0, 0x9, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0xfffff, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x40000}, 0x10, 0x0, r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 801.936072ms ago: executing program 2 (id=4397): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000800), 0x0}, 0x20) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc026, 0xac5d, 0xffffffff, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0xfffffffffffffe77) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608463a3f"], 0xfe33) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x33, &(0x7f00000003c0), 0x0, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x494d, 0x5, 0x5, 0x40a00, 0xffffffffffffffff, 0x2, '\x00', r5, r6, 0x4, 0x3, 0x4}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000300"/21], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_lsm={0x1d, 0x22, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000a000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="00000000006f0000b708000073b400007b19c6f0b2700ac3b1a200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000618190000", @ANYRES32, @ANYBLOB, @ANYRES32=0x1, @ANYBLOB="000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000cdb1200000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0xfffffff6, 0xe3, &(0x7f0000000200)=""/227, 0x41100, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0x2, 0x80}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ec0)=[{0x2, 0x3, 0x6, 0x8}, {0x2, 0x2, 0x4, 0x6}, {0x1, 0x1, 0x10, 0x8}, {0x2, 0x4, 0x6, 0xa}, {0x2, 0x2, 0xe}, {0x5, 0x4, 0x3}, {0x0, 0x5, 0x6, 0x1}], 0x10, 0xf2db}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8a"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002ac0), 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r9) close(r1) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r9, r2, 0x4, r8}, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 694.537297ms ago: executing program 4 (id=4398): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x1}, @fwd={0x2}, @ptr={0xc, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000480)=""/115, 0x44, 0x73, 0x0, 0xfffffffd, 0x10000}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000400)=[0x0, 0x0], 0xfffffffffffffffe, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) 598.214952ms ago: executing program 3 (id=4399): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)='%pI4 \x00'}, 0x20) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f00000006c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x8, 0xe5, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}], 0x20}, 0x20040805) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x4d, 0x6, 0x8, 0x2008, r0, 0x6, '\x00', r2, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0x6}, 0x50) 380.856042ms ago: executing program 2 (id=4400): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) (async) socket$kcm(0xa, 0x3, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000280), &(0x7f0000000540)=r0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb2, 0x0, @perf_bp={0x0}, 0x400, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb2, 0x0, @perf_bp={0x0}, 0x400, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000009000000030000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB='\x00\t\x00J~(|LT'], 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0000000400000000000000018000000c000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0000000400000000000000018000000c000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x9) 327.537114ms ago: executing program 1 (id=4401): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r0}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000280)}], 0x2}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xff, 0x89, 0x0, 0x0, 0x3, 0x50063, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}, 0x8400, 0xc764, 0x204, 0x0, 0xfffffffffffffffa, 0xfffffffb, 0x10, 0x0, 0xd, 0x0, 0x100000001}, 0x0, 0x4, 0xffffffffffffffff, 0x2) (async) close(r3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="9a036864e000"}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x2, 0xfffffffc, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240), 0xc) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) (async, rerun: 32) r4 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4a}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @loopback}}}], 0x20}, 0x0) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 319.679515ms ago: executing program 4 (id=4402): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1c4, 0x0, 0x0, 0x8, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x4, 0x0, 0x200, 0x2139, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x40, 0x0, 0xc, 0x0, 0x0, 0x61400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0x1a500, 0xc8, 0x1000003, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x2000000, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63ec33c9e9b986c0f4f24abba1a4", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x6f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0xb0]}}, 0x0, 0x2d}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2d, 'hugetlb'}, {0x2b, 'hugetlb'}, {0x2b, 'net_prio'}, {0x2b, 'net'}, {0x2d, 'freezer'}]}, 0x2a) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x1) 273.776597ms ago: executing program 3 (id=4403): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000080"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) socketpair(0x27, 0x5, 0x10, &(0x7f0000000240)={0x0, 0x0}) socketpair(0x29, 0x80000, 0xffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f0000000680), &(0x7f0000000700)=r3}, 0x20) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000003c0)=0xf79) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 4 (id=4404): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb0028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7fff}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x401, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7fff}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x401, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000008000000000000000000000496ebda490944c2a8f0cc207e88dc5d6ece35c297c24a2be1e2565f655a53ea790d9c685a93b1258d03a82fd96c23541187090c0b5813020c370ff0dff51b8137ef656fb7b76d08fce525268654696f967980c03f213aa38aeeba7925235d8f48abf3bd3364b9d56792e4dd71edd3e90d7848f57c2a843f014a647e7f22bff2c36cd15dea7688ecc5338752453bb2f5a4861f5f0fd6973fdede9fda8e5a7b44c321a9e93913c45939420873382bd5a5d2de056fd69fc6b8cae95a5518087d98b124f575e8e9d5d7d3e26d4564344209a"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000008000000000000000000000496ebda490944c2a8f0cc207e88dc5d6ece35c297c24a2be1e2565f655a53ea790d9c685a93b1258d03a82fd96c23541187090c0b5813020c370ff0dff51b8137ef656fb7b76d08fce525268654696f967980c03f213aa38aeeba7925235d8f48abf3bd3364b9d56792e4dd71edd3e90d7848f57c2a843f014a647e7f22bff2c36cd15dea7688ecc5338752453bb2f5a4861f5f0fd6973fdede9fda8e5a7b44c321a9e93913c45939420873382bd5a5d2de056fd69fc6b8cae95a5518087d98b124f575e8e9d5d7d3e26d4564344209a"], 0x50) socket$kcm(0x10, 0x2, 0x10) (async) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4018, r2}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000002c0)={r2, r3}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000002c0)={r2, r3}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a80", 0xb}], 0x1}, 0x0) close(r2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f0000180059"], 0xfe33) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f0000180059"], 0xfe33) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x0, 0x32}, 0x28) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x0, 0x32}, 0x28) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) socket$kcm(0x21, 0x2, 0x2) (async) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000009c0)={&(0x7f0000000c40)="713a54684b1eda557b0923c8a331fd94798777e0372d19cf130207220ca66c899e2c38e0d9186416c731854bea2ef8ac4ae92809f129426e531f4199d3144d6440e3df16d87b01c9130aa665538372ef6c71f24c080bd8cf49f1bda31f71361ba6b20d1294d9fbe985a507d6161a64dee2486eb20ca94c6f80d2e9460f00b4970eb96b1aad428d29562eed4fe5053c9cc20f47b14790570bf96a00d4b67c49563dccbf47d5756cea0176118752c9ee1b18aa036b246ac663938743565e043974d439f8df499a1baf18c57db9a66350de53de560ea4fcc34985499fbb292f4022", &(0x7f0000000600)=""/221, &(0x7f0000000840)="951df68eaa3f7f1902b6b618a0137f902496dc033226521b3807824e106a411b85e9879988b674d92a6308b9cd0b5bc015d3d22fb39c63d81a923d68f79d4ded142483ff2cd69941f4e06b7a23052d04262e06f7051d5b719c9b62b15d1657bb20f33bb8e06ce48ca066aa9b27e7f46fa1a4c57caea1157209bbb5340f3cbfb63c38d53a06a3405a", &(0x7f0000000900)="77dd5edd9f9bf442edfd2ea92972434fe8f5d8495f2c213c39463b2963c43aa790fb6f62fe10e74081a0736fb5e37864c69f4853edb2ee6f3937e9df40735fd32f7441fbfa0432293c6cc74131a0dd38a398f7045e675a532439a6be272fba83c628602e400797f6d60c14", 0x10004, r8, 0x4}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000009c0)={&(0x7f0000000c40)="713a54684b1eda557b0923c8a331fd94798777e0372d19cf130207220ca66c899e2c38e0d9186416c731854bea2ef8ac4ae92809f129426e531f4199d3144d6440e3df16d87b01c9130aa665538372ef6c71f24c080bd8cf49f1bda31f71361ba6b20d1294d9fbe985a507d6161a64dee2486eb20ca94c6f80d2e9460f00b4970eb96b1aad428d29562eed4fe5053c9cc20f47b14790570bf96a00d4b67c49563dccbf47d5756cea0176118752c9ee1b18aa036b246ac663938743565e043974d439f8df499a1baf18c57db9a66350de53de560ea4fcc34985499fbb292f4022", &(0x7f0000000600)=""/221, &(0x7f0000000840)="951df68eaa3f7f1902b6b618a0137f902496dc033226521b3807824e106a411b85e9879988b674d92a6308b9cd0b5bc015d3d22fb39c63d81a923d68f79d4ded142483ff2cd69941f4e06b7a23052d04262e06f7051d5b719c9b62b15d1657bb20f33bb8e06ce48ca066aa9b27e7f46fa1a4c57caea1157209bbb5340f3cbfb63c38d53a06a3405a", &(0x7f0000000900)="77dd5edd9f9bf442edfd2ea92972434fe8f5d8495f2c213c39463b2963c43aa790fb6f62fe10e74081a0736fb5e37864c69f4853edb2ee6f3937e9df40735fd32f7441fbfa0432293c6cc74131a0dd38a398f7045e675a532439a6be272fba83c628602e400797f6d60c14", 0x10004, r8, 0x4}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000ec0)=ANY=[@ANYRES64=r2, @ANYRESHEX=r3, @ANYRESDEC=r2, @ANYRESOCT=0x0, @ANYBLOB="267fc396e348fa482994253a9d367bbaf328e965456c25ff04951aa83dd85e92255d37243224a97c9b23087432b6d93c8e17afcd8f92e3538b5292ec19d573eb55dc2e0f09e2b30d9bb12e7b614cfa1765907a2e2fd50fdf98d02c7d64af86cf4b4f5672308eb86e916d7994d921c05904cc338e65ce401948b87e9cd390bb92162d8fcdea6ae27a23bf1c1bacc556886bbd4eedb2f96ca69779e7158fea29d9f5af3e364d13cacb4c14316161a0b2829ed4bdfcd45adf4cb13d0a956bbe6966aa99530f887baf5c57982f2758f5330b7e5d372a1f75ad3e085e416caf", @ANYRESDEC=r5, @ANYRES8=r6, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRESOCT=r5], &(0x7f0000000c00)='GPL\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000ec0)=ANY=[@ANYRES64=r2, @ANYRESHEX=r3, @ANYRESDEC=r2, @ANYRESOCT=0x0, @ANYBLOB="267fc396e348fa482994253a9d367bbaf328e965456c25ff04951aa83dd85e92255d37243224a97c9b23087432b6d93c8e17afcd8f92e3538b5292ec19d573eb55dc2e0f09e2b30d9bb12e7b614cfa1765907a2e2fd50fdf98d02c7d64af86cf4b4f5672308eb86e916d7994d921c05904cc338e65ce401948b87e9cd390bb92162d8fcdea6ae27a23bf1c1bacc556886bbd4eedb2f96ca69779e7158fea29d9f5af3e364d13cacb4c14316161a0b2829ed4bdfcd45adf4cb13d0a956bbe6966aa99530f887baf5c57982f2758f5330b7e5d372a1f75ad3e085e416caf", @ANYRESDEC=r5, @ANYRES8=r6, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRESOCT=r5], &(0x7f0000000c00)='GPL\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1000e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0xe, &(0x7f0000001300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10}, 0x94) kernel console output (not intermixed with test programs): 19244] device syzkaller0 entered promiscuous mode [ 887.965081][T12666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 887.995062][T12666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 888.007690][T19261] netlink: 'syz.2.3279': attribute type 3 has an invalid length. [ 888.070438][T19256] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 888.072111][T19261] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.3279'. [ 890.178655][T19257] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 890.212793][T19266] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 890.231778][T19266] syzkaller1: group set to 778 [ 890.236860][T19265] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 890.271730][T19265] syzkaller1: group set to 778 [ 890.436593][T19277] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3206'. [ 890.574271][T19277] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 894.438771][T19327] netlink: 'syz.2.3293': attribute type 10 has an invalid length. [ 894.822625][T19327] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.895005][T19327] bond0: (slave team0): Enslaving as an active interface with an up link [ 896.272275][T19352] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3298'. [ 896.485076][T19352] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 896.542309][T19352] CPU: 1 PID: 19352 Comm: syz.1.3298 Not tainted syzkaller #0 [ 896.549857][T19352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 896.559943][T19352] Call Trace: [ 896.563247][T19352] [ 896.566214][T19352] dump_stack_lvl+0x188/0x24e [ 896.571044][T19352] ? show_regs_print_info+0x12/0x12 [ 896.576381][T19352] ? load_image+0x410/0x410 [ 896.580933][T19352] sysfs_warn_dup+0x8a/0xa0 [ 896.585505][T19352] sysfs_do_create_link_sd+0xc0/0x110 [ 896.591017][T19352] device_add+0x83b/0x1050 [ 896.595474][T19352] wiphy_register+0x1d8b/0x2aa0 [ 896.600389][T19352] ? cfg80211_event_work+0x40/0x40 [ 896.605551][T19352] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 896.611770][T19352] ieee80211_register_hw+0x2d48/0x39f0 [ 896.617292][T19352] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 896.623528][T19352] ? ieee80211_register_hw+0xee1/0x39f0 [ 896.629121][T19352] ? ieee80211_register_hw+0xee1/0x39f0 [ 896.634804][T19352] ? ieee80211_tasklet_handler+0x20/0x20 [ 896.640478][T19352] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 896.646408][T19352] ? __debug_object_init+0xed/0x440 [ 896.651819][T19352] ? memset+0x1e/0x40 [ 896.655831][T19352] ? __hrtimer_init+0x189/0x270 [ 896.660718][T19352] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 896.666504][T19352] ? memcpy+0x3c/0x60 [ 896.670528][T19352] hwsim_new_radio_nl+0xab7/0xc90 [ 896.675614][T19352] genl_family_rcv_msg_doit+0x22f/0x350 [ 896.681194][T19352] ? end_current_label_crit_section+0x170/0x170 [ 896.687480][T19352] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 896.693426][T19352] ? bpf_lsm_capable+0x5/0x10 [ 896.698141][T19352] ? security_capable+0x85/0xb0 [ 896.703138][T19352] genl_rcv_msg+0x601/0x790 [ 896.707689][T19352] ? genl_bind+0x360/0x360 [ 896.712141][T19352] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 896.718634][T19352] netlink_rcv_skb+0x1ef/0x440 [ 896.723458][T19352] ? genl_bind+0x360/0x360 [ 896.727918][T19352] ? netlink_ack+0x1160/0x1160 [ 896.732734][T19352] ? lockdep_hardirqs_on+0x94/0x140 [ 896.737992][T19352] ? down_read+0x1a8/0x2d0 [ 896.742454][T19352] genl_rcv+0x24/0x40 [ 896.746478][T19352] netlink_unicast+0x7ad/0x920 [ 896.751308][T19352] netlink_sendmsg+0x8ad/0xbd0 [ 896.756138][T19352] ? netlink_getsockopt+0x550/0x550 [ 896.761380][T19352] ? apparmor_socket_sendmsg+0x8a/0x330 [ 896.766970][T19352] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 896.772280][T19352] ? security_socket_sendmsg+0x7c/0xa0 [ 896.777783][T19352] ? netlink_getsockopt+0x550/0x550 [ 896.783018][T19352] ____sys_sendmsg+0x5ed/0x9a0 [ 896.787838][T19352] ? __sys_sendmsg_sock+0x30/0x30 [ 896.792914][T19352] ? __import_iovec+0x306/0x510 [ 896.797827][T19352] ? import_iovec+0x6f/0xa0 [ 896.802393][T19352] ___sys_sendmsg+0x2a2/0x360 [ 896.807135][T19352] ? __sys_sendmsg+0x2a0/0x2a0 [ 896.811994][T19352] ? ktime_get+0x7b/0x270 [ 896.816410][T19352] __se_sys_sendmsg+0x1c3/0x2b0 [ 896.821336][T19352] ? __x64_sys_sendmsg+0x80/0x80 [ 896.826360][T19352] ? lockdep_hardirqs_on+0x94/0x140 [ 896.831614][T19352] do_syscall_64+0x4c/0xa0 [ 896.836078][T19352] ? clear_bhb_loop+0x60/0xb0 [ 896.840801][T19352] ? clear_bhb_loop+0x60/0xb0 [ 896.845526][T19352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 896.851467][T19352] RIP: 0033:0x7fbe8259e159 [ 896.855928][T19352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.875576][T19352] RSP: 002b:00007fbe807f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 896.884044][T19352] RAX: ffffffffffffffda RBX: 00007fbe82826090 RCX: 00007fbe8259e159 [ 896.892062][T19352] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 896.900076][T19352] RBP: 00007fbe8263503b R08: 0000000000000000 R09: 0000000000000000 [ 896.908092][T19352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.916192][T19352] R13: 00007fbe82826128 R14: 00007fbe82826090 R15: 00007ffe977f08b8 [ 896.924231][T19352] [ 897.827331][T19383] tap0: tun_chr_ioctl cmd 1074025677 [ 897.834090][T19383] tap0: linktype set to 774 [ 898.739601][T19405] netlink: 'syz.4.3309': attribute type 10 has an invalid length. [ 899.181607][T19405] bridge0: port 3(team0) entered disabled state [ 899.392543][T19405] bridge0: port 3(team0) entered disabled state [ 899.405307][T19405] device team_slave_0 left promiscuous mode [ 899.452644][T19405] team0 (unregistering): Port device team_slave_0 removed [ 899.461353][T19405] device team_slave_1 left promiscuous mode [ 899.487268][T19405] team0 (unregistering): Port device team_slave_1 removed [ 899.800493][T19431] netlink: 'syz.0.3318': attribute type 2 has an invalid length. [ 903.032540][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 905.260024][T19449] device syzkaller0 left promiscuous mode [ 905.282235][T19456] netlink: 'syz.1.3325': attribute type 4 has an invalid length. [ 905.297346][T19463] netlink: 'syz.1.3325': attribute type 4 has an invalid length. [ 905.319323][T19465] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3324'. [ 905.501338][T19469] netlink: 'syz.4.3326': attribute type 3 has an invalid length. [ 905.548873][T19469] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3326'. [ 905.615359][T19469] netlink: 'syz.4.3326': attribute type 3 has an invalid length. [ 905.658499][T19469] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3326'. [ 905.846588][T19491] netlink: 13875 bytes leftover after parsing attributes in process `syz.3.3330'. [ 908.534888][T19525] netlink: 'syz.3.3337': attribute type 10 has an invalid length. [ 908.794855][T19525] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3337'. [ 908.914340][T19525] device ipvlan1 entered promiscuous mode [ 909.009814][T19525] bridge0: port 4(ipvlan1) entered blocking state [ 909.229305][T19525] bridge0: port 4(ipvlan1) entered disabled state [ 909.429246][T19525] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 909.691464][T19542] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3341'. [ 909.939929][T19542] debugfs: Directory '.! 57>7H' with parent 'ieee80211' already present! [ 910.117654][T19534] device syzkaller0 entered promiscuous mode [ 913.775024][T19560] netlink: 'syz.0.3344': attribute type 21 has an invalid length. [ 913.775620][T19558] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 913.783331][T19560] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3344'. [ 913.807580][T19560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3344'. [ 913.839487][T19558] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 913.852508][T19558] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 914.035733][T19569] netlink: 'syz.1.3345': attribute type 6 has an invalid length. [ 914.068602][T19569] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.3345'. [ 914.095666][ T8560] tipc: Subscription rejected, illegal request [ 914.114195][T19569] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3345'. [ 914.144229][T19579] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3349'. [ 914.172979][T19571] netlink: 'syz.4.3346': attribute type 10 has an invalid length. [ 914.581861][T19580] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3349'. [ 914.643067][T19580] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 914.666911][T19580] CPU: 0 PID: 19580 Comm: syz.3.3349 Not tainted syzkaller #0 [ 914.674549][T19580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 914.684623][T19580] Call Trace: [ 914.687916][T19580] [ 914.690858][T19580] dump_stack_lvl+0x188/0x24e [ 914.695564][T19580] ? show_regs_print_info+0x12/0x12 [ 914.700782][T19580] ? load_image+0x410/0x410 [ 914.705313][T19580] sysfs_warn_dup+0x8a/0xa0 [ 914.709834][T19580] sysfs_do_create_link_sd+0xc0/0x110 [ 914.715240][T19580] device_add+0x83b/0x1050 [ 914.719684][T19580] wiphy_register+0x1d8b/0x2aa0 [ 914.724577][T19580] ? cfg80211_event_work+0x40/0x40 [ 914.729708][T19580] ? minstrel_ht_alloc+0x894/0xa20 [ 914.734938][T19580] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 914.741117][T19580] ieee80211_register_hw+0x2d48/0x39f0 [ 914.746639][T19580] ? ieee80211_register_hw+0xee1/0x39f0 [ 914.752204][T19580] ? ieee80211_register_hw+0xee1/0x39f0 [ 914.757774][T19580] ? ieee80211_tasklet_handler+0x20/0x20 [ 914.763423][T19580] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 914.769336][T19580] ? __debug_object_init+0xed/0x440 [ 914.774549][T19580] ? memset+0x1e/0x40 [ 914.778544][T19580] ? __hrtimer_init+0x189/0x270 [ 914.783414][T19580] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 914.789227][T19580] ? memcpy+0x3c/0x60 [ 914.793256][T19580] hwsim_new_radio_nl+0xab7/0xc90 [ 914.798341][T19580] genl_family_rcv_msg_doit+0x22f/0x350 [ 914.803920][T19580] ? end_current_label_crit_section+0x170/0x170 [ 914.810205][T19580] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 914.816129][T19580] ? bpf_lsm_capable+0x5/0x10 [ 914.820821][T19580] ? security_capable+0x85/0xb0 [ 914.825703][T19580] genl_rcv_msg+0x601/0x790 [ 914.830229][T19580] ? genl_bind+0x360/0x360 [ 914.834666][T19580] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 914.841061][T19580] netlink_rcv_skb+0x1ef/0x440 [ 914.845873][T19580] ? genl_bind+0x360/0x360 [ 914.850329][T19580] ? netlink_ack+0x1160/0x1160 [ 914.855134][T19580] ? down_read+0x1a8/0x2d0 [ 914.859572][T19580] genl_rcv+0x24/0x40 [ 914.863568][T19580] netlink_unicast+0x7ad/0x920 [ 914.868360][T19580] netlink_sendmsg+0x8ad/0xbd0 [ 914.873149][T19580] ? netlink_getsockopt+0x550/0x550 [ 914.878361][T19580] ? apparmor_socket_sendmsg+0x8a/0x330 [ 914.883928][T19580] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 914.889226][T19580] ? security_socket_sendmsg+0x7c/0xa0 [ 914.894699][T19580] ? netlink_getsockopt+0x550/0x550 [ 914.899921][T19580] ____sys_sendmsg+0x5ed/0x9a0 [ 914.904716][T19580] ? __sys_sendmsg_sock+0x30/0x30 [ 914.909761][T19580] ? __import_iovec+0x306/0x510 [ 914.914655][T19580] ? import_iovec+0x6f/0xa0 [ 914.919204][T19580] ___sys_sendmsg+0x2a2/0x360 [ 914.924009][T19580] ? __sys_sendmsg+0x2a0/0x2a0 [ 914.928859][T19580] __se_sys_sendmsg+0x1c3/0x2b0 [ 914.933747][T19580] ? __x64_sys_sendmsg+0x80/0x80 [ 914.938722][T19580] ? lockdep_hardirqs_on+0x94/0x140 [ 914.943936][T19580] do_syscall_64+0x4c/0xa0 [ 914.948375][T19580] ? clear_bhb_loop+0x60/0xb0 [ 914.953092][T19580] ? clear_bhb_loop+0x60/0xb0 [ 914.957825][T19580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 914.963780][T19580] RIP: 0033:0x7f1d3bf9e159 [ 914.968212][T19580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.987838][T19580] RSP: 002b:00007f1d3cdd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.996265][T19580] RAX: ffffffffffffffda RBX: 00007f1d3c226090 RCX: 00007f1d3bf9e159 [ 915.004246][T19580] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 915.012226][T19580] RBP: 00007f1d3c03503b R08: 0000000000000000 R09: 0000000000000000 [ 915.020207][T19580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 915.028190][T19580] R13: 00007f1d3c226128 R14: 00007f1d3c226090 R15: 00007ffe185efd88 [ 915.036199][T19580] [ 915.219449][T19601] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3353'. [ 915.292561][T19601] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 915.341905][T19601] CPU: 1 PID: 19601 Comm: syz.2.3353 Not tainted syzkaller #0 [ 915.349459][T19601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 915.359587][T19601] Call Trace: [ 915.362896][T19601] [ 915.365870][T19601] dump_stack_lvl+0x188/0x24e [ 915.370594][T19601] ? show_regs_print_info+0x12/0x12 [ 915.375838][T19601] ? load_image+0x410/0x410 [ 915.380405][T19601] sysfs_warn_dup+0x8a/0xa0 [ 915.384967][T19601] sysfs_do_create_link_sd+0xc0/0x110 [ 915.390391][T19601] device_add+0x83b/0x1050 [ 915.394864][T19601] wiphy_register+0x1d8b/0x2aa0 [ 915.399778][T19601] ? cfg80211_event_work+0x40/0x40 [ 915.404936][T19601] ? minstrel_ht_alloc+0x894/0xa20 [ 915.410108][T19601] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 915.416232][T19601] ieee80211_register_hw+0x2d48/0x39f0 [ 915.421756][T19601] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 915.428156][T19601] ? ieee80211_register_hw+0xee1/0x39f0 [ 915.433755][T19601] ? ieee80211_register_hw+0xee1/0x39f0 [ 915.439636][T19601] ? ieee80211_tasklet_handler+0x20/0x20 [ 915.445326][T19601] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 915.451284][T19601] ? __debug_object_init+0xed/0x440 [ 915.456541][T19601] ? memset+0x1e/0x40 [ 915.460562][T19601] ? __hrtimer_init+0x189/0x270 [ 915.465611][T19601] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 915.471348][T19601] ? memcpy+0x3c/0x60 [ 915.475337][T19601] hwsim_new_radio_nl+0xab7/0xc90 [ 915.480383][T19601] genl_family_rcv_msg_doit+0x22f/0x350 [ 915.485935][T19601] ? end_current_label_crit_section+0x170/0x170 [ 915.492210][T19601] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 915.498140][T19601] ? bpf_lsm_capable+0x5/0x10 [ 915.502836][T19601] ? security_capable+0x85/0xb0 [ 915.507943][T19601] genl_rcv_msg+0x601/0x790 [ 915.512480][T19601] ? genl_bind+0x360/0x360 [ 915.517013][T19601] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 915.523466][T19601] netlink_rcv_skb+0x1ef/0x440 [ 915.528290][T19601] ? genl_bind+0x360/0x360 [ 915.532841][T19601] ? netlink_ack+0x1160/0x1160 [ 915.537651][T19601] ? down_read+0x1a8/0x2d0 [ 915.542080][T19601] genl_rcv+0x24/0x40 [ 915.546102][T19601] netlink_unicast+0x7ad/0x920 [ 915.550930][T19601] netlink_sendmsg+0x8ad/0xbd0 [ 915.555723][T19601] ? netlink_getsockopt+0x550/0x550 [ 915.560982][T19601] ? apparmor_socket_sendmsg+0x8a/0x330 [ 915.566680][T19601] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 915.572018][T19601] ? security_socket_sendmsg+0x7c/0xa0 [ 915.577536][T19601] ? netlink_getsockopt+0x550/0x550 [ 915.582783][T19601] ____sys_sendmsg+0x5ed/0x9a0 [ 915.587604][T19601] ? __sys_sendmsg_sock+0x30/0x30 [ 915.592657][T19601] ? __import_iovec+0x306/0x510 [ 915.597542][T19601] ? import_iovec+0x6f/0xa0 [ 915.602077][T19601] ___sys_sendmsg+0x2a2/0x360 [ 915.606878][T19601] ? __sys_sendmsg+0x2a0/0x2a0 [ 915.611696][T19601] ? finish_task_switch+0x267/0x8e0 [ 915.616942][T19601] __se_sys_sendmsg+0x1c3/0x2b0 [ 915.621818][T19601] ? __x64_sys_sendmsg+0x80/0x80 [ 915.626809][T19601] ? lockdep_hardirqs_on+0x94/0x140 [ 915.632070][T19601] do_syscall_64+0x4c/0xa0 [ 915.636565][T19601] ? clear_bhb_loop+0x60/0xb0 [ 915.641302][T19601] ? clear_bhb_loop+0x60/0xb0 [ 915.646014][T19601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 915.652013][T19601] RIP: 0033:0x7fbc73b9e159 [ 915.656446][T19601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.676515][T19601] RSP: 002b:00007fbc74a8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 915.684956][T19601] RAX: ffffffffffffffda RBX: 00007fbc73e25fa0 RCX: 00007fbc73b9e159 [ 915.692942][T19601] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 915.700925][T19601] RBP: 00007fbc73c3503b R08: 0000000000000000 R09: 0000000000000000 [ 915.708906][T19601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 915.716891][T19601] R13: 00007fbc73e26038 R14: 00007fbc73e25fa0 R15: 00007ffcaac3ec58 [ 915.724979][T19601] [ 915.823628][T19620] netlink: 'syz.0.3357': attribute type 21 has an invalid length. [ 917.553303][T19641] tap0: tun_chr_ioctl cmd 1074025675 [ 917.558684][T19641] tap0: persist enabled [ 917.597448][T19641] tap0: tun_chr_ioctl cmd 1074025675 [ 917.607257][T19641] tap0: persist disabled [ 917.617599][T19644] netlink: 'syz.4.3364': attribute type 41 has an invalid length. [ 917.658371][T19644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3364'. [ 917.723802][T19644] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 917.958550][T19657] netlink: 'syz.4.3367': attribute type 3 has an invalid length. [ 917.977071][T19657] netlink: 'syz.4.3367': attribute type 1 has an invalid length. [ 917.988674][T19657] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3367'. [ 921.977289][T19686] netlink: 'syz.1.3374': attribute type 39 has an invalid length. [ 922.760225][T19699] netlink: 'syz.2.3375': attribute type 21 has an invalid length. [ 922.768619][T19699] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3375'. [ 923.056362][T19715] netlink: 'syz.2.3380': attribute type 15 has an invalid length. [ 923.163896][T19715] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3380'. [ 923.229279][T19723] netlink: 'syz.4.3382': attribute type 39 has an invalid length. [ 923.528012][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 924.318765][T19726] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3379'. [ 924.603419][T19738] netlink: 'syz.3.3386': attribute type 10 has an invalid length. [ 924.672928][T19738] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3386'. [ 924.677087][T19743] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3384'. [ 925.102365][T19738] device geneve0 entered promiscuous mode [ 925.193726][T19738] team0: Port device geneve0 added [ 925.456254][T19743] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 925.557313][T19743] CPU: 0 PID: 19743 Comm: syz.1.3384 Not tainted syzkaller #0 [ 925.564890][T19743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 925.574995][T19743] Call Trace: [ 925.578296][T19743] [ 925.581259][T19743] dump_stack_lvl+0x188/0x24e [ 925.586037][T19743] ? show_regs_print_info+0x12/0x12 [ 925.591422][T19743] ? load_image+0x410/0x410 [ 925.596068][T19743] sysfs_warn_dup+0x8a/0xa0 [ 925.600668][T19743] sysfs_do_create_link_sd+0xc0/0x110 [ 925.606172][T19743] device_add+0x83b/0x1050 [ 925.610711][T19743] wiphy_register+0x1d8b/0x2aa0 [ 925.615741][T19743] ? cfg80211_event_work+0x40/0x40 [ 925.620929][T19743] ? minstrel_ht_alloc+0x894/0xa20 [ 925.626202][T19743] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 925.632414][T19743] ieee80211_register_hw+0x2d48/0x39f0 [ 925.637953][T19743] ? ieee80211_register_hw+0xee1/0x39f0 [ 925.643534][T19743] ? ieee80211_register_hw+0xee1/0x39f0 [ 925.649141][T19743] ? ieee80211_tasklet_handler+0x20/0x20 [ 925.654806][T19743] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 925.660745][T19743] ? __debug_object_init+0xed/0x440 [ 925.665991][T19743] ? memset+0x1e/0x40 [ 925.670014][T19743] ? __hrtimer_init+0x189/0x270 [ 925.675009][T19743] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 925.680793][T19743] ? memcpy+0x3c/0x60 [ 925.684850][T19743] hwsim_new_radio_nl+0xab7/0xc90 [ 925.690048][T19743] genl_family_rcv_msg_doit+0x22f/0x350 [ 925.695662][T19743] ? end_current_label_crit_section+0x170/0x170 [ 925.701955][T19743] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 925.707910][T19743] ? bpf_lsm_capable+0x5/0x10 [ 925.712619][T19743] ? security_capable+0x85/0xb0 [ 925.717548][T19743] genl_rcv_msg+0x601/0x790 [ 925.722124][T19743] ? genl_bind+0x360/0x360 [ 925.726571][T19743] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 925.733076][T19743] netlink_rcv_skb+0x1ef/0x440 [ 925.737892][T19743] ? genl_bind+0x360/0x360 [ 925.742525][T19743] ? netlink_ack+0x1160/0x1160 [ 925.747326][T19743] ? lockdep_hardirqs_on+0x94/0x140 [ 925.752685][T19743] ? down_read+0x1a8/0x2d0 [ 925.757147][T19743] genl_rcv+0x24/0x40 [ 925.761158][T19743] netlink_unicast+0x7ad/0x920 [ 925.765996][T19743] netlink_sendmsg+0x8ad/0xbd0 [ 925.770856][T19743] ? netlink_getsockopt+0x550/0x550 [ 925.776131][T19743] ? apparmor_socket_sendmsg+0x8a/0x330 [ 925.781750][T19743] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 925.787070][T19743] ? security_socket_sendmsg+0x7c/0xa0 [ 925.792566][T19743] ? netlink_getsockopt+0x550/0x550 [ 925.797813][T19743] ____sys_sendmsg+0x5ed/0x9a0 [ 925.802658][T19743] ? __sys_sendmsg_sock+0x30/0x30 [ 925.807720][T19743] ? __import_iovec+0x306/0x510 [ 925.812642][T19743] ? import_iovec+0x6f/0xa0 [ 925.817197][T19743] ___sys_sendmsg+0x2a2/0x360 [ 925.822349][T19743] ? __sys_sendmsg+0x2a0/0x2a0 [ 925.827345][T19743] __se_sys_sendmsg+0x1c3/0x2b0 [ 925.832250][T19743] ? __x64_sys_sendmsg+0x80/0x80 [ 925.837280][T19743] ? lockdep_hardirqs_on+0x94/0x140 [ 925.842529][T19743] do_syscall_64+0x4c/0xa0 [ 925.846999][T19743] ? clear_bhb_loop+0x60/0xb0 [ 925.851970][T19743] ? clear_bhb_loop+0x60/0xb0 [ 925.856699][T19743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 925.862625][T19743] RIP: 0033:0x7fbe8259e159 [ 925.867077][T19743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.886716][T19743] RSP: 002b:00007fbe807f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.895254][T19743] RAX: ffffffffffffffda RBX: 00007fbe82826090 RCX: 00007fbe8259e159 [ 925.903270][T19743] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 925.911270][T19743] RBP: 00007fbe8263503b R08: 0000000000000000 R09: 0000000000000000 [ 925.919533][T19743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.927619][T19743] R13: 00007fbe82826128 R14: 00007fbe82826090 R15: 00007ffe977f08b8 [ 925.935679][T19743] [ 926.572911][T19768] netlink: 'syz.4.3390': attribute type 39 has an invalid length. [ 927.135822][T19775] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3392'. [ 927.414032][T19785] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3394'. [ 927.506356][T19787] netlink: 'syz.2.3396': attribute type 21 has an invalid length. [ 927.561931][T19787] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3396'. [ 927.571145][T19787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3396'. [ 927.657373][T19788] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3394'. [ 928.291175][T19817] device syzkaller0 entered promiscuous mode [ 928.599873][T19813] netlink: 'syz.1.3399': attribute type 10 has an invalid length. [ 928.678001][T19813] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.733763][T19813] bond0: (slave team0): Enslaving as an active interface with an up link [ 928.760043][T19825] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3405'. [ 929.029433][T16986] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 929.361186][T19844] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3411'. [ 929.743583][T19853] netlink: 'syz.3.3413': attribute type 10 has an invalid length. [ 929.828627][T19853] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3413'. [ 930.898522][T19872] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.3418'. [ 931.185699][T19875] netlink: 'syz.3.3419': attribute type 21 has an invalid length. [ 931.198531][T19875] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3419'. [ 931.209089][T19875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3419'. [ 931.669224][T19892] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3421'. [ 931.686174][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.686307][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.838379][T19892] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 931.904472][T19892] CPU: 1 PID: 19892 Comm: syz.3.3421 Not tainted syzkaller #0 [ 931.912026][T19892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 931.922497][T19892] Call Trace: [ 931.925823][T19892] [ 931.928792][T19892] dump_stack_lvl+0x188/0x24e [ 931.933538][T19892] ? show_regs_print_info+0x12/0x12 [ 931.938791][T19892] ? load_image+0x410/0x410 [ 931.943353][T19892] sysfs_warn_dup+0x8a/0xa0 [ 931.947892][T19892] sysfs_do_create_link_sd+0xc0/0x110 [ 931.953289][T19892] device_add+0x83b/0x1050 [ 931.957732][T19892] wiphy_register+0x1d8b/0x2aa0 [ 931.962707][T19892] ? cfg80211_event_work+0x40/0x40 [ 931.967858][T19892] ? minstrel_ht_alloc+0x894/0xa20 [ 931.972996][T19892] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 931.979100][T19892] ieee80211_register_hw+0x2d48/0x39f0 [ 931.984590][T19892] ? ieee80211_register_hw+0xee1/0x39f0 [ 931.990154][T19892] ? ieee80211_register_hw+0xee1/0x39f0 [ 931.995723][T19892] ? ieee80211_tasklet_handler+0x20/0x20 [ 932.001373][T19892] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 932.007376][T19892] ? __debug_object_init+0xed/0x440 [ 932.012603][T19892] ? memset+0x1e/0x40 [ 932.016593][T19892] ? __hrtimer_init+0x189/0x270 [ 932.021481][T19892] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 932.027244][T19892] ? memcpy+0x3c/0x60 [ 932.031543][T19892] hwsim_new_radio_nl+0xab7/0xc90 [ 932.036609][T19892] genl_family_rcv_msg_doit+0x22f/0x350 [ 932.042171][T19892] ? end_current_label_crit_section+0x170/0x170 [ 932.048434][T19892] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 932.054351][T19892] ? bpf_lsm_capable+0x5/0x10 [ 932.059055][T19892] ? security_capable+0x85/0xb0 [ 932.064020][T19892] genl_rcv_msg+0x601/0x790 [ 932.068545][T19892] ? genl_bind+0x360/0x360 [ 932.072976][T19892] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 932.079343][T19892] netlink_rcv_skb+0x1ef/0x440 [ 932.084126][T19892] ? genl_bind+0x360/0x360 [ 932.088632][T19892] ? netlink_ack+0x1160/0x1160 [ 932.093559][T19892] ? down_read+0x1a8/0x2d0 [ 932.097989][T19892] genl_rcv+0x24/0x40 [ 932.101999][T19892] netlink_unicast+0x7ad/0x920 [ 932.106791][T19892] netlink_sendmsg+0x8ad/0xbd0 [ 932.111577][T19892] ? lockdep_hardirqs_on+0x94/0x140 [ 932.116806][T19892] ? netlink_getsockopt+0x550/0x550 [ 932.122024][T19892] ? __sanitizer_cov_trace_pc+0x50/0x60 [ 932.127586][T19892] ? security_socket_sendmsg+0x7c/0xa0 [ 932.133079][T19892] ? netlink_getsockopt+0x550/0x550 [ 932.138307][T19892] ____sys_sendmsg+0x5ed/0x9a0 [ 932.143187][T19892] ? __sys_sendmsg_sock+0x30/0x30 [ 932.148224][T19892] ? __import_iovec+0x306/0x510 [ 932.153106][T19892] ? import_iovec+0x6f/0xa0 [ 932.157629][T19892] ___sys_sendmsg+0x2a2/0x360 [ 932.162333][T19892] ? __sys_sendmsg+0x2a0/0x2a0 [ 932.167223][T19892] ? ktime_get+0x7b/0x270 [ 932.171595][T19892] __se_sys_sendmsg+0x1c3/0x2b0 [ 932.176489][T19892] ? __x64_sys_sendmsg+0x80/0x80 [ 932.181481][T19892] do_syscall_64+0x4c/0xa0 [ 932.185925][T19892] ? clear_bhb_loop+0x60/0xb0 [ 932.190624][T19892] ? clear_bhb_loop+0x60/0xb0 [ 932.195318][T19892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 932.201227][T19892] RIP: 0033:0x7f1d3bf9e159 [ 932.205659][T19892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.225276][T19892] RSP: 002b:00007f1d3cdd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.233709][T19892] RAX: ffffffffffffffda RBX: 00007f1d3c226090 RCX: 00007f1d3bf9e159 [ 932.241693][T19892] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 932.249691][T19892] RBP: 00007f1d3c03503b R08: 0000000000000000 R09: 0000000000000000 [ 932.257670][T19892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 932.265737][T19892] R13: 00007f1d3c226128 R14: 00007f1d3c226090 R15: 00007ffe185efd88 [ 932.273739][T19892] [ 933.029305][T19917] netlink: 'syz.3.3427': attribute type 2 has an invalid length. [ 934.341015][T19938] netlink: 'syz.2.3432': attribute type 3 has an invalid length. [ 934.388828][T19938] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3432'. [ 935.118191][T19961] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.3440'. [ 936.132973][T19969] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.3442'. [ 936.240542][T19973] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3445'. [ 936.435278][T19980] netlink: 'syz.4.3448': attribute type 10 has an invalid length. [ 936.475354][T19980] device hsr0 entered promiscuous mode [ 936.515720][T19984] netlink: 'syz.1.3450': attribute type 29 has an invalid length. [ 936.524205][T19980] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 936.568097][T19980] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 936.580680][T19980] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 936.593821][T19980] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 936.604833][T19984] netlink: 'syz.1.3450': attribute type 29 has an invalid length. [ 936.613274][T19986] netlink: 'syz.1.3450': attribute type 29 has an invalid length. [ 936.702830][T19984] netlink: 'syz.1.3450': attribute type 29 has an invalid length. [ 937.431784][T20002] netlink: 'syz.1.3455': attribute type 21 has an invalid length. [ 937.492413][T20002] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3455'. [ 937.539438][T20002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3455'. [ 938.425821][T20012] netlink: 'syz.2.3456': attribute type 3 has an invalid length. [ 938.446423][T20012] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3456'. [ 939.815177][T20015] netlink: 'syz.2.3459': attribute type 21 has an invalid length. [ 939.860067][T20015] netlink: 'syz.2.3459': attribute type 13 has an invalid length. [ 939.883088][T20015] netlink: 6188 bytes leftover after parsing attributes in process `syz.2.3459'. [ 939.913583][T20016] netlink: 'syz.2.3459': attribute type 21 has an invalid length. [ 939.921706][T20016] netlink: 'syz.2.3459': attribute type 13 has an invalid length. [ 939.929749][T20016] netlink: 6188 bytes leftover after parsing attributes in process `syz.2.3459'. [ 940.210073][T20034] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3464'. [ 943.181784][T20040] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3466'. [ 943.197600][T20041] netlink: 'syz.2.3466': attribute type 10 has an invalid length. [ 943.214123][T20041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3466'. [ 943.261715][T20041] device team0 entered promiscuous mode [ 943.267350][T20041] device team_slave_0 entered promiscuous mode [ 943.291824][T20041] device team_slave_1 entered promiscuous mode [ 943.304069][T20041] bond0: (slave team0): Releasing backup interface [ 943.336262][T20041] bridge0: port 3(team0) entered blocking state [ 943.344293][T20041] bridge0: port 3(team0) entered disabled state [ 943.693543][T20059] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3469'. [ 943.727015][T20059] netlink: 6328 bytes leftover after parsing attributes in process `syz.0.3469'. [ 943.759028][T20059] tc_dump_action: action bad kind [ 943.775056][T20064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3472'. [ 944.003097][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 946.715738][T20081] netlink: 'syz.0.3473': attribute type 39 has an invalid length. [ 946.757540][T20081] device macvlan0 entered promiscuous mode [ 946.791801][T20095] netlink: 'syz.1.3476': attribute type 10 has an invalid length. [ 946.839500][T20095] team0: Device nlmon0 is of different type [ 947.206024][T20110] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3481'. [ 947.830223][T20121] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3485'. [ 948.262380][T20134] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3487'. [ 949.309178][T20161] delete_channel: no stack [ 951.302415][T20196] netlink: 'syz.2.3503': attribute type 3 has an invalid length. [ 951.332556][T20196] netlink: 'syz.2.3503': attribute type 1 has an invalid length. [ 951.340471][T20196] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3503'. [ 953.914662][T20228] netlink: 'syz.0.3514': attribute type 10 has an invalid length. [ 954.353730][T20239] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3516'. [ 954.476891][T20228] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.486507][T20228] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.545799][T20228] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.553587][T20228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.564192][T20228] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.571807][T20228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.657874][T20228] team0: Port device bridge0 added [ 954.689970][T20229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3513'. [ 954.702075][T20229] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3513'. [ 954.716588][T20231] netlink: 'syz.0.3514': attribute type 39 has an invalid length. [ 956.576417][T20231] device hsr_slave_0 left promiscuous mode [ 956.587113][T20234] netlink: 'syz.4.3513': attribute type 10 has an invalid length. [ 956.596284][T20234] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3513'. [ 956.813879][T20239] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 956.830299][T20239] CPU: 1 PID: 20239 Comm: syz.1.3516 Not tainted syzkaller #0 [ 956.837850][T20239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 956.847954][T20239] Call Trace: [ 956.851275][T20239] [ 956.854244][T20239] dump_stack_lvl+0x188/0x24e [ 956.859024][T20239] ? show_regs_print_info+0x12/0x12 [ 956.864271][T20239] ? load_image+0x410/0x410 [ 956.868836][T20239] sysfs_warn_dup+0x8a/0xa0 [ 956.873387][T20239] sysfs_do_create_link_sd+0xc0/0x110 [ 956.878809][T20239] device_add+0x83b/0x1050 [ 956.883365][T20239] wiphy_register+0x1d8b/0x2aa0 [ 956.888288][T20239] ? cfg80211_event_work+0x40/0x40 [ 956.893459][T20239] ? minstrel_ht_alloc+0x894/0xa20 [ 956.898672][T20239] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 956.904802][T20239] ieee80211_register_hw+0x2d48/0x39f0 [ 956.910333][T20239] ? ieee80211_register_hw+0xee1/0x39f0 [ 956.915941][T20239] ? ieee80211_register_hw+0xee1/0x39f0 [ 956.921550][T20239] ? ieee80211_tasklet_handler+0x20/0x20 [ 956.927243][T20239] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 956.933283][T20239] ? __debug_object_init+0xed/0x440 [ 956.938527][T20239] ? memset+0x1e/0x40 [ 956.942559][T20239] ? __hrtimer_init+0x189/0x270 [ 956.947459][T20239] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 956.953250][T20239] ? memcpy+0x3c/0x60 [ 956.957285][T20239] hwsim_new_radio_nl+0xab7/0xc90 [ 956.962384][T20239] genl_family_rcv_msg_doit+0x22f/0x350 [ 956.967983][T20239] ? end_current_label_crit_section+0x170/0x170 [ 956.974279][T20239] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 956.980233][T20239] ? bpf_lsm_capable+0x5/0x10 [ 956.985050][T20239] ? security_capable+0x85/0xb0 [ 956.989961][T20239] genl_rcv_msg+0x601/0x790 [ 956.994522][T20239] ? genl_bind+0x360/0x360 [ 956.998981][T20239] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 957.005474][T20239] netlink_rcv_skb+0x1ef/0x440 [ 957.010296][T20239] ? genl_bind+0x360/0x360 [ 957.014762][T20239] ? netlink_ack+0x1160/0x1160 [ 957.019629][T20239] ? down_read+0x1a8/0x2d0 [ 957.024095][T20239] genl_rcv+0x24/0x40 [ 957.028123][T20239] netlink_unicast+0x7ad/0x920 [ 957.032968][T20239] netlink_sendmsg+0x8ad/0xbd0 [ 957.037796][T20239] ? netlink_getsockopt+0x550/0x550 [ 957.043062][T20239] ? apparmor_socket_sendmsg+0x8a/0x330 [ 957.048682][T20239] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 957.054019][T20239] ? security_socket_sendmsg+0x7c/0xa0 [ 957.059540][T20239] ? netlink_getsockopt+0x550/0x550 [ 957.064793][T20239] ____sys_sendmsg+0x5ed/0x9a0 [ 957.069621][T20239] ? __sys_sendmsg_sock+0x30/0x30 [ 957.074694][T20239] ? __import_iovec+0x306/0x510 [ 957.079610][T20239] ? import_iovec+0x6f/0xa0 [ 957.084166][T20239] ___sys_sendmsg+0x2a2/0x360 [ 957.088901][T20239] ? __sys_sendmsg+0x2a0/0x2a0 [ 957.093865][T20239] __se_sys_sendmsg+0x1c3/0x2b0 [ 957.098772][T20239] ? __x64_sys_sendmsg+0x80/0x80 [ 957.103809][T20239] ? lockdep_hardirqs_on+0x94/0x140 [ 957.109055][T20239] do_syscall_64+0x4c/0xa0 [ 957.113529][T20239] ? clear_bhb_loop+0x60/0xb0 [ 957.118251][T20239] ? clear_bhb_loop+0x60/0xb0 [ 957.122976][T20239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 957.128918][T20239] RIP: 0033:0x7fbe8259e159 [ 957.133374][T20239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.153025][T20239] RSP: 002b:00007fbe807d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 957.161500][T20239] RAX: ffffffffffffffda RBX: 00007fbe82826180 RCX: 00007fbe8259e159 [ 957.169516][T20239] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 957.177533][T20239] RBP: 00007fbe8263503b R08: 0000000000000000 R09: 0000000000000000 [ 957.185639][T20239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.193651][T20239] R13: 00007fbe82826218 R14: 00007fbe82826180 R15: 00007ffe977f08b8 [ 957.201785][T20239] [ 957.245936][T20252] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3519'. [ 957.837202][T20271] netlink: 'syz.4.3523': attribute type 9 has an invalid length. [ 957.917197][T20271] netlink: 387 bytes leftover after parsing attributes in process `syz.4.3523'. [ 958.819896][T20290] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3527'. [ 958.871251][T20290] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3527'. [ 958.936290][T20290] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3527'. [ 959.011427][T20290] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3527'. [ 961.061642][T20295] device lo entered promiscuous mode [ 961.067216][T20295] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 961.123884][T20292] device lo left promiscuous mode [ 961.393942][T20324] netlink: 'syz.4.3533': attribute type 21 has an invalid length. [ 961.461631][T20325] netlink: 'syz.4.3533': attribute type 21 has an invalid length. [ 961.532187][T20329] netlink: 'syz.1.3534': attribute type 22 has an invalid length. [ 961.564333][T20329] __nla_validate_parse: 61 callbacks suppressed [ 961.564371][T20329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3534'. [ 962.338939][T20333] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3536'. [ 962.356011][T20342] netlink: 'syz.0.3539': attribute type 4 has an invalid length. [ 962.470265][T20344] netlink: 'syz.4.3540': attribute type 21 has an invalid length. [ 962.631754][T20344] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3540'. [ 962.654551][T20344] netlink: 'syz.4.3540': attribute type 5 has an invalid length. [ 962.725987][T20344] netlink: 'syz.4.3540': attribute type 6 has an invalid length. [ 962.800940][T20344] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3540'. [ 963.230707][T20365] netlink: 'syz.1.3544': attribute type 4 has an invalid length. [ 963.454174][T20374] netlink: 'syz.2.3537': attribute type 10 has an invalid length. [ 963.478219][T20374] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3537'. [ 963.923056][T20394] netlink: 'syz.3.3553': attribute type 1 has an invalid length. [ 964.472002][T16986] Bluetooth: hci1: command 0x0406 tx timeout [ 966.888897][T20419] netlink: 111 bytes leftover after parsing attributes in process `syz.4.3557'. [ 967.259002][T20447] : port 1(ip6gretap0) entered blocking state [ 967.343809][T20447] : port 1(ip6gretap0) entered disabled state [ 967.420800][T20447] device ip6gretap0 entered promiscuous mode [ 968.926354][T20494] validate_nla: 1 callbacks suppressed [ 968.926377][T20494] netlink: 'syz.4.3565': attribute type 25 has an invalid length. [ 969.177248][T20494] netlink: 'syz.4.3565': attribute type 29 has an invalid length. [ 969.268633][T20506] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3565'. [ 969.297767][T20503] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3572'. [ 969.333670][T20503] device hsr_slave_0 left promiscuous mode [ 969.343806][T20503] device hsr_slave_1 left promiscuous mode [ 969.898122][T20534] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3576'. [ 970.457957][T20532] device syzkaller0 entered promiscuous mode [ 971.360559][T20561] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3584'. [ 974.029443][T20534] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 974.051607][T20534] CPU: 1 PID: 20534 Comm: syz.0.3576 Not tainted syzkaller #0 [ 974.059159][T20534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 974.069279][T20534] Call Trace: [ 974.072596][T20534] [ 974.075577][T20534] dump_stack_lvl+0x188/0x24e [ 974.080582][T20534] ? show_regs_print_info+0x12/0x12 [ 974.085930][T20534] ? load_image+0x410/0x410 [ 974.090497][T20534] sysfs_warn_dup+0x8a/0xa0 [ 974.095061][T20534] sysfs_do_create_link_sd+0xc0/0x110 [ 974.100517][T20534] device_add+0x83b/0x1050 [ 974.104997][T20534] wiphy_register+0x1d8b/0x2aa0 [ 974.109964][T20534] ? cfg80211_event_work+0x40/0x40 [ 974.115129][T20534] ? minstrel_ht_alloc+0x894/0xa20 [ 974.120312][T20534] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 974.126454][T20534] ieee80211_register_hw+0x2d48/0x39f0 [ 974.131991][T20534] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 974.138217][T20534] ? ieee80211_register_hw+0xee1/0x39f0 [ 974.143914][T20534] ? ieee80211_register_hw+0xee1/0x39f0 [ 974.149522][T20534] ? ieee80211_tasklet_handler+0x20/0x20 [ 974.155197][T20534] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 974.161125][T20534] ? __debug_object_init+0xed/0x440 [ 974.166390][T20534] ? memset+0x1e/0x40 [ 974.170404][T20534] ? __hrtimer_init+0x189/0x270 [ 974.175305][T20534] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 974.181082][T20534] ? memcpy+0x3c/0x60 [ 974.185092][T20534] hwsim_new_radio_nl+0xab7/0xc90 [ 974.190152][T20534] genl_family_rcv_msg_doit+0x22f/0x350 [ 974.195737][T20534] ? end_current_label_crit_section+0x170/0x170 [ 974.202046][T20534] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 974.208011][T20534] ? bpf_lsm_capable+0x5/0x10 [ 974.212721][T20534] ? security_capable+0x85/0xb0 [ 974.217638][T20534] genl_rcv_msg+0x601/0x790 [ 974.222263][T20534] ? genl_bind+0x360/0x360 [ 974.226702][T20534] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 974.233183][T20534] netlink_rcv_skb+0x1ef/0x440 [ 974.237988][T20534] ? genl_bind+0x360/0x360 [ 974.242426][T20534] ? netlink_ack+0x1160/0x1160 [ 974.247223][T20534] ? down_read+0x1a8/0x2d0 [ 974.251682][T20534] genl_rcv+0x24/0x40 [ 974.255676][T20534] netlink_unicast+0x7ad/0x920 [ 974.260471][T20534] netlink_sendmsg+0x8ad/0xbd0 [ 974.265254][T20534] ? lockdep_hardirqs_on+0x94/0x140 [ 974.270467][T20534] ? netlink_getsockopt+0x550/0x550 [ 974.275685][T20534] ? netlink_getsockopt+0x550/0x550 [ 974.280891][T20534] ____sys_sendmsg+0x5ed/0x9a0 [ 974.285681][T20534] ? __sys_sendmsg_sock+0x30/0x30 [ 974.290741][T20534] ___sys_sendmsg+0x2a2/0x360 [ 974.295441][T20534] ? __sys_sendmsg+0x2a0/0x2a0 [ 974.300238][T20534] ? do_futex+0x248/0x320 [ 974.304663][T20534] __se_sys_sendmsg+0x1c3/0x2b0 [ 974.309548][T20534] ? __x64_sys_sendmsg+0x80/0x80 [ 974.314518][T20534] ? syscall_enter_from_user_mode+0x2a/0x80 [ 974.320451][T20534] do_syscall_64+0x4c/0xa0 [ 974.324883][T20534] ? clear_bhb_loop+0x60/0xb0 [ 974.329578][T20534] ? clear_bhb_loop+0x60/0xb0 [ 974.334280][T20534] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 974.340259][T20534] RIP: 0033:0x7fa3e279e159 [ 974.344689][T20534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.364312][T20534] RSP: 002b:00007fa3e3692028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.372747][T20534] RAX: ffffffffffffffda RBX: 00007fa3e2a26090 RCX: 00007fa3e279e159 [ 974.380779][T20534] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 974.388774][T20534] RBP: 00007fa3e283503b R08: 0000000000000000 R09: 0000000000000000 [ 974.396761][T20534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 974.404836][T20534] R13: 00007fa3e2a26128 R14: 00007fa3e2a26090 R15: 00007fffaabcfdc8 [ 974.412841][T20534] [ 974.455902][T20565] netlink: 'syz.2.3585': attribute type 11 has an invalid length. [ 974.502173][T20565] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3585'. [ 974.812696][T20570] device syzkaller0 entered promiscuous mode [ 981.143245][T20579] netlink: 'syz.2.3589': attribute type 22 has an invalid length. [ 981.185797][T20587] netlink: 'syz.2.3589': attribute type 21 has an invalid length. [ 981.216228][T20587] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3589'. [ 981.260053][T20601] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3592'. [ 982.379400][T20613] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3596'. [ 982.835481][T20632] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3599'. [ 982.866531][T20637] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3600'. [ 983.137367][T20632] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 983.153768][T20632] CPU: 1 PID: 20632 Comm: syz.2.3599 Not tainted syzkaller #0 [ 983.161312][T20632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 983.171417][T20632] Call Trace: [ 983.174738][T20632] [ 983.177708][T20632] dump_stack_lvl+0x188/0x24e [ 983.182467][T20632] ? show_regs_print_info+0x12/0x12 [ 983.187761][T20632] ? load_image+0x410/0x410 [ 983.192349][T20632] sysfs_warn_dup+0x8a/0xa0 [ 983.196876][T20632] sysfs_do_create_link_sd+0xc0/0x110 [ 983.202272][T20632] device_add+0x83b/0x1050 [ 983.206722][T20632] wiphy_register+0x1d8b/0x2aa0 [ 983.211709][T20632] ? cfg80211_event_work+0x40/0x40 [ 983.216926][T20632] ? minstrel_ht_alloc+0x894/0xa20 [ 983.222069][T20632] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 983.228166][T20632] ieee80211_register_hw+0x2d48/0x39f0 [ 983.233662][T20632] ? ieee80211_register_hw+0xee1/0x39f0 [ 983.239227][T20632] ? ieee80211_register_hw+0xee1/0x39f0 [ 983.244816][T20632] ? ieee80211_tasklet_handler+0x20/0x20 [ 983.250486][T20632] ? __hrtimer_init+0xa7/0x270 [ 983.255268][T20632] ? __sanitizer_cov_trace_pc+0x45/0x60 [ 983.260839][T20632] ? __hrtimer_init+0x189/0x270 [ 983.265808][T20632] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 983.272264][T20632] ? memcpy+0x3c/0x60 [ 983.276281][T20632] hwsim_new_radio_nl+0xab7/0xc90 [ 983.281353][T20632] genl_family_rcv_msg_doit+0x22f/0x350 [ 983.286929][T20632] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 983.292847][T20632] ? security_capable+0x85/0xb0 [ 983.297739][T20632] genl_rcv_msg+0x601/0x790 [ 983.302277][T20632] ? genl_bind+0x360/0x360 [ 983.306796][T20632] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 983.313179][T20632] ? lock_chain_count+0x20/0x20 [ 983.318059][T20632] netlink_rcv_skb+0x1ef/0x440 [ 983.322933][T20632] ? genl_bind+0x360/0x360 [ 983.327366][T20632] ? netlink_ack+0x1160/0x1160 [ 983.332163][T20632] ? down_read+0x1a8/0x2d0 [ 983.336594][T20632] genl_rcv+0x24/0x40 [ 983.340586][T20632] netlink_unicast+0x7ad/0x920 [ 983.345386][T20632] netlink_sendmsg+0x8ad/0xbd0 [ 983.350180][T20632] ? lockdep_hardirqs_on+0x94/0x140 [ 983.355404][T20632] ? netlink_getsockopt+0x550/0x550 [ 983.360624][T20632] ? bpf_lsm_socket_accept+0x10/0x10 [ 983.365922][T20632] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 983.371219][T20632] ? security_socket_sendmsg+0x7c/0xa0 [ 983.376705][T20632] ? netlink_getsockopt+0x550/0x550 [ 983.381920][T20632] ____sys_sendmsg+0x5ed/0x9a0 [ 983.386712][T20632] ? __sys_sendmsg_sock+0x30/0x30 [ 983.391756][T20632] ? __import_iovec+0x306/0x510 [ 983.396632][T20632] ? import_iovec+0x6f/0xa0 [ 983.401271][T20632] ___sys_sendmsg+0x2a2/0x360 [ 983.406088][T20632] ? __sys_sendmsg+0x2a0/0x2a0 [ 983.410917][T20632] ? lock_chain_count+0x20/0x20 [ 983.415848][T20632] __se_sys_sendmsg+0x1c3/0x2b0 [ 983.420730][T20632] ? __x64_sys_sendmsg+0x80/0x80 [ 983.425706][T20632] ? lockdep_hardirqs_on+0x94/0x140 [ 983.430926][T20632] do_syscall_64+0x4c/0xa0 [ 983.435378][T20632] ? clear_bhb_loop+0x60/0xb0 [ 983.440087][T20632] ? clear_bhb_loop+0x60/0xb0 [ 983.444784][T20632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 983.450699][T20632] RIP: 0033:0x7fbc73b9e159 [ 983.455129][T20632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.474926][T20632] RSP: 002b:00007fbc74a6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 983.483356][T20632] RAX: ffffffffffffffda RBX: 00007fbc73e26090 RCX: 00007fbc73b9e159 [ 983.491346][T20632] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 983.499332][T20632] RBP: 00007fbc73c3503b R08: 0000000000000000 R09: 0000000000000000 [ 983.507342][T20632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.515331][T20632] R13: 00007fbc73e26128 R14: 00007fbc73e26090 R15: 00007ffcaac3ec58 [ 983.523338][T20632] [ 983.730488][T20651] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3603'. [ 983.964782][T20651] bond0: (slave bond_slave_0): Releasing backup interface [ 984.505423][T20651] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 984.524351][T20656] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3604'. [ 985.412703][T20695] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3611'. [ 985.535862][T20695] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 985.648317][T20695] CPU: 0 PID: 20695 Comm: syz.2.3611 Not tainted syzkaller #0 [ 985.656307][T20695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 985.666412][T20695] Call Trace: [ 985.669956][T20695] [ 985.672928][T20695] dump_stack_lvl+0x188/0x24e [ 985.677661][T20695] ? show_regs_print_info+0x12/0x12 [ 985.682923][T20695] ? load_image+0x410/0x410 [ 985.687493][T20695] sysfs_warn_dup+0x8a/0xa0 [ 985.692047][T20695] sysfs_do_create_link_sd+0xc0/0x110 [ 985.697506][T20695] device_add+0x83b/0x1050 [ 985.701986][T20695] wiphy_register+0x1d8b/0x2aa0 [ 985.706923][T20695] ? cfg80211_event_work+0x40/0x40 [ 985.712091][T20695] ? minstrel_ht_alloc+0x894/0xa20 [ 985.717271][T20695] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 985.723386][T20695] ieee80211_register_hw+0x2d48/0x39f0 [ 985.728927][T20695] ? ieee80211_register_hw+0xee1/0x39f0 [ 985.734536][T20695] ? ieee80211_register_hw+0xee1/0x39f0 [ 985.740172][T20695] ? ieee80211_tasklet_handler+0x20/0x20 [ 985.745852][T20695] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 985.751897][T20695] ? __debug_object_init+0xed/0x440 [ 985.757151][T20695] ? memset+0x1e/0x40 [ 985.761180][T20695] ? __hrtimer_init+0x189/0x270 [ 985.766079][T20695] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 985.771869][T20695] ? memcpy+0x3c/0x60 [ 985.775910][T20695] hwsim_new_radio_nl+0xab7/0xc90 [ 985.781011][T20695] genl_family_rcv_msg_doit+0x22f/0x350 [ 985.786608][T20695] ? end_current_label_crit_section+0x170/0x170 [ 985.792961][T20695] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 985.798931][T20695] ? bpf_lsm_capable+0x5/0x10 [ 985.803668][T20695] ? security_capable+0x85/0xb0 [ 985.808586][T20695] genl_rcv_msg+0x601/0x790 [ 985.813160][T20695] ? genl_bind+0x360/0x360 [ 985.817631][T20695] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 985.824123][T20695] netlink_rcv_skb+0x1ef/0x440 [ 985.828948][T20695] ? genl_bind+0x360/0x360 [ 985.833416][T20695] ? netlink_ack+0x1160/0x1160 [ 985.838251][T20695] ? down_read+0x1a8/0x2d0 [ 985.842727][T20695] genl_rcv+0x24/0x40 [ 985.846756][T20695] netlink_unicast+0x7ad/0x920 [ 985.851584][T20695] netlink_sendmsg+0x8ad/0xbd0 [ 985.856403][T20695] ? netlink_getsockopt+0x550/0x550 [ 985.861657][T20695] ? apparmor_socket_sendmsg+0x8a/0x330 [ 985.867268][T20695] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 985.872601][T20695] ? security_socket_sendmsg+0x7c/0xa0 [ 985.878107][T20695] ? netlink_getsockopt+0x550/0x550 [ 985.883356][T20695] ____sys_sendmsg+0x5ed/0x9a0 [ 985.888193][T20695] ? __sys_sendmsg_sock+0x30/0x30 [ 985.893271][T20695] ? __import_iovec+0x306/0x510 [ 985.898182][T20695] ? import_iovec+0x6f/0xa0 [ 985.902744][T20695] ___sys_sendmsg+0x2a2/0x360 [ 985.907488][T20695] ? __sys_sendmsg+0x2a0/0x2a0 [ 985.912384][T20695] __se_sys_sendmsg+0x1c3/0x2b0 [ 985.917377][T20695] ? ct_nmi_exit+0x145/0x1c0 [ 985.922021][T20695] ? __x64_sys_sendmsg+0x80/0x80 [ 985.927037][T20695] ? lockdep_hardirqs_on+0x94/0x140 [ 985.932293][T20695] do_syscall_64+0x4c/0xa0 [ 985.936764][T20695] ? clear_bhb_loop+0x60/0xb0 [ 985.941523][T20695] ? clear_bhb_loop+0x60/0xb0 [ 985.946261][T20695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 985.952204][T20695] RIP: 0033:0x7fbc73b9e159 [ 985.956666][T20695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.976319][T20695] RSP: 002b:00007fbc74a4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 985.984795][T20695] RAX: ffffffffffffffda RBX: 00007fbc73e26180 RCX: 00007fbc73b9e159 [ 985.992818][T20695] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 986.000843][T20695] RBP: 00007fbc73c3503b R08: 0000000000000000 R09: 0000000000000000 [ 986.008966][T20695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 986.016998][T20695] R13: 00007fbc73e26218 R14: 00007fbc73e26180 R15: 00007ffcaac3ec58 [ 986.025038][T20695] [ 986.497410][T20711] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3616'. [ 986.649324][T20711] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 986.677033][T20711] CPU: 0 PID: 20711 Comm: syz.4.3616 Not tainted syzkaller #0 [ 986.684597][T20711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 986.694700][T20711] Call Trace: [ 986.698020][T20711] [ 986.701246][T20711] dump_stack_lvl+0x188/0x24e [ 986.705990][T20711] ? show_regs_print_info+0x12/0x12 [ 986.711247][T20711] ? load_image+0x410/0x410 [ 986.715916][T20711] sysfs_warn_dup+0x8a/0xa0 [ 986.720495][T20711] sysfs_do_create_link_sd+0xc0/0x110 [ 986.725957][T20711] device_add+0x83b/0x1050 [ 986.730437][T20711] wiphy_register+0x1d8b/0x2aa0 [ 986.735458][T20711] ? cfg80211_event_work+0x40/0x40 [ 986.740623][T20711] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 986.746845][T20711] ieee80211_register_hw+0x2d48/0x39f0 [ 986.752352][T20711] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 986.758569][T20711] ? ieee80211_register_hw+0xee1/0x39f0 [ 986.764168][T20711] ? ieee80211_register_hw+0xee1/0x39f0 [ 986.769768][T20711] ? ieee80211_tasklet_handler+0x20/0x20 [ 986.775463][T20711] ? rcu_is_watching+0x11/0xa0 [ 986.780374][T20711] ? memset+0x1e/0x40 [ 986.784392][T20711] ? __hrtimer_init+0x189/0x270 [ 986.789271][T20711] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 986.795032][T20711] hwsim_new_radio_nl+0xab7/0xc90 [ 986.800103][T20711] genl_family_rcv_msg_doit+0x22f/0x350 [ 986.805667][T20711] ? end_current_label_crit_section+0x170/0x170 [ 986.811950][T20711] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 986.817884][T20711] ? bpf_lsm_capable+0x5/0x10 [ 986.822583][T20711] ? security_capable+0x85/0xb0 [ 986.827471][T20711] genl_rcv_msg+0x601/0x790 [ 986.831994][T20711] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 986.838180][T20711] ? genl_bind+0x360/0x360 [ 986.842608][T20711] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 986.848964][T20711] ? lock_acquire+0x225/0x4a0 [ 986.853668][T20711] netlink_rcv_skb+0x1ef/0x440 [ 986.858452][T20711] ? genl_bind+0x360/0x360 [ 986.862887][T20711] ? netlink_ack+0x1160/0x1160 [ 986.867697][T20711] ? down_read+0x1a8/0x2d0 [ 986.872220][T20711] genl_rcv+0x24/0x40 [ 986.876217][T20711] netlink_unicast+0x7ad/0x920 [ 986.881021][T20711] netlink_sendmsg+0x8ad/0xbd0 [ 986.885903][T20711] ? netlink_getsockopt+0x550/0x550 [ 986.891213][T20711] ? apparmor_socket_sendmsg+0x8a/0x330 [ 986.896782][T20711] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 986.902090][T20711] ? security_socket_sendmsg+0x7c/0xa0 [ 986.907652][T20711] ? netlink_getsockopt+0x550/0x550 [ 986.912870][T20711] ____sys_sendmsg+0x5ed/0x9a0 [ 986.917666][T20711] ? __sys_sendmsg_sock+0x30/0x30 [ 986.923492][T20711] ? __import_iovec+0x306/0x510 [ 986.928377][T20711] ? import_iovec+0x6f/0xa0 [ 986.932905][T20711] ___sys_sendmsg+0x2a2/0x360 [ 986.937770][T20711] ? __sys_sendmsg+0x2a0/0x2a0 [ 986.942622][T20711] __se_sys_sendmsg+0x1c3/0x2b0 [ 986.947514][T20711] ? __x64_sys_sendmsg+0x80/0x80 [ 986.952500][T20711] ? syscall_enter_from_user_mode+0x2a/0x80 [ 986.958420][T20711] do_syscall_64+0x4c/0xa0 [ 986.963032][T20711] ? clear_bhb_loop+0x60/0xb0 [ 986.967733][T20711] ? clear_bhb_loop+0x60/0xb0 [ 986.972434][T20711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.978519][T20711] RIP: 0033:0x7fadb5d9e159 [ 986.983062][T20711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.002978][T20711] RSP: 002b:00007fadb3fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.011602][T20711] RAX: ffffffffffffffda RBX: 00007fadb6026090 RCX: 00007fadb5d9e159 [ 987.019593][T20711] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 987.027584][T20711] RBP: 00007fadb5e3503b R08: 0000000000000000 R09: 0000000000000000 [ 987.035568][T20711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.043557][T20711] R13: 00007fadb6026128 R14: 00007fadb6026090 R15: 00007fffb0ca81c8 [ 987.051578][T20711] [ 987.768179][T20737] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3620'. [ 987.838910][T20737] bond0: (slave bond_slave_0): Releasing backup interface [ 987.960974][T20737] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 988.157098][ T4291] Bluetooth: hci4: ISO packet for unknown connection handle 4095 [ 989.447507][T20761] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3625'. [ 989.451292][T20763] netlink: 'syz.4.3627': attribute type 29 has an invalid length. [ 989.573197][T20757] netlink: 'syz.2.3626': attribute type 39 has an invalid length. [ 989.760732][T20757] bond0: (slave syz_tun): Releasing backup interface [ 989.839047][T20763] netlink: 'syz.4.3627': attribute type 29 has an invalid length. [ 989.893341][T20761] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 989.923773][T20761] CPU: 0 PID: 20761 Comm: syz.1.3625 Not tainted syzkaller #0 [ 989.931314][T20761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 989.941388][T20761] Call Trace: [ 989.944689][T20761] [ 989.947646][T20761] dump_stack_lvl+0x188/0x24e [ 989.952355][T20761] ? show_regs_print_info+0x12/0x12 [ 989.957607][T20761] ? load_image+0x410/0x410 [ 989.962142][T20761] sysfs_warn_dup+0x8a/0xa0 [ 989.966666][T20761] sysfs_do_create_link_sd+0xc0/0x110 [ 989.972069][T20761] device_add+0x83b/0x1050 [ 989.976534][T20761] wiphy_register+0x1d8b/0x2aa0 [ 989.981430][T20761] ? cfg80211_event_work+0x40/0x40 [ 989.986575][T20761] ? minstrel_ht_alloc+0x894/0xa20 [ 989.991714][T20761] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 989.997805][T20761] ieee80211_register_hw+0x2d48/0x39f0 [ 990.003304][T20761] ? ieee80211_register_hw+0xee1/0x39f0 [ 990.008963][T20761] ? ieee80211_register_hw+0xee1/0x39f0 [ 990.014534][T20761] ? ieee80211_tasklet_handler+0x20/0x20 [ 990.020200][T20761] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 990.026117][T20761] ? __debug_object_init+0xed/0x440 [ 990.031332][T20761] ? memset+0x1e/0x40 [ 990.035329][T20761] ? __hrtimer_init+0x189/0x270 [ 990.040203][T20761] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 990.046043][T20761] ? memcpy+0x3c/0x60 [ 990.050045][T20761] hwsim_new_radio_nl+0xab7/0xc90 [ 990.055194][T20761] genl_family_rcv_msg_doit+0x22f/0x350 [ 990.060758][T20761] ? end_current_label_crit_section+0x170/0x170 [ 990.067044][T20761] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 990.074171][T20761] ? lockdep_hardirqs_on+0x94/0x140 [ 990.079396][T20761] ? bpf_lsm_capable+0x5/0x10 [ 990.084096][T20761] ? security_capable+0x85/0xb0 [ 990.088975][T20761] genl_rcv_msg+0x601/0x790 [ 990.093507][T20761] ? genl_bind+0x360/0x360 [ 990.097935][T20761] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 990.104293][T20761] ? netlink_rcv_skb+0x194/0x440 [ 990.109257][T20761] netlink_rcv_skb+0x1ef/0x440 [ 990.114046][T20761] ? genl_bind+0x360/0x360 [ 990.118478][T20761] ? netlink_ack+0x1160/0x1160 [ 990.123273][T20761] ? down_read+0x1a8/0x2d0 [ 990.127706][T20761] genl_rcv+0x24/0x40 [ 990.131703][T20761] netlink_unicast+0x7ad/0x920 [ 990.136501][T20761] netlink_sendmsg+0x8ad/0xbd0 [ 990.141284][T20761] ? netlink_getsockopt+0x550/0x550 [ 990.146496][T20761] ? apparmor_socket_sendmsg+0x8a/0x330 [ 990.152182][T20761] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 990.157483][T20761] ? security_socket_sendmsg+0x7c/0xa0 [ 990.163045][T20761] ? netlink_getsockopt+0x550/0x550 [ 990.168281][T20761] ____sys_sendmsg+0x5ed/0x9a0 [ 990.173074][T20761] ? __import_iovec+0x419/0x510 [ 990.177943][T20761] ? __sys_sendmsg_sock+0x30/0x30 [ 990.182997][T20761] ? import_iovec+0x6f/0xa0 [ 990.187521][T20761] ___sys_sendmsg+0x2a2/0x360 [ 990.192224][T20761] ? __sys_sendmsg+0x2a0/0x2a0 [ 990.197031][T20761] ? ktime_get+0x7b/0x270 [ 990.201404][T20761] __se_sys_sendmsg+0x1c3/0x2b0 [ 990.206285][T20761] ? __x64_sys_sendmsg+0x80/0x80 [ 990.211260][T20761] ? lockdep_hardirqs_on+0x94/0x140 [ 990.216476][T20761] do_syscall_64+0x4c/0xa0 [ 990.220908][T20761] ? clear_bhb_loop+0x60/0xb0 [ 990.225691][T20761] ? clear_bhb_loop+0x60/0xb0 [ 990.230391][T20761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 990.236307][T20761] RIP: 0033:0x7fbe8259e159 [ 990.240739][T20761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.260363][T20761] RSP: 002b:00007fbe807f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.268800][T20761] RAX: ffffffffffffffda RBX: 00007fbe82826090 RCX: 00007fbe8259e159 [ 990.276795][T20761] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 990.284789][T20761] RBP: 00007fbe8263503b R08: 0000000000000000 R09: 0000000000000000 [ 990.293043][T20761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.301026][T20761] R13: 00007fbe82826128 R14: 00007fbe82826090 R15: 00007ffe977f08b8 [ 990.309033][T20761] [ 990.325749][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 990.357647][T20767] netlink: 'syz.4.3627': attribute type 29 has an invalid length. [ 990.430243][T20769] netlink: 'syz.4.3627': attribute type 29 has an invalid length. [ 990.497477][T20771] netlink: 'syz.4.3627': attribute type 29 has an invalid length. [ 990.535965][T20763] netlink: 'syz.4.3627': attribute type 29 has an invalid length. [ 990.990684][T20790] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.3632'. [ 990.997356][T20789] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3633'. [ 991.210343][T20789] bond0: (slave bond_slave_0): Releasing backup interface [ 991.313984][T20789] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 991.392937][T20800] netlink: 212908 bytes leftover after parsing attributes in process `syz.2.3636'. [ 991.411733][T20800] netlink: zone id is out of range [ 991.421906][T20807] netlink: 'syz.1.3634': attribute type 1 has an invalid length. [ 991.507644][T20807] netlink: 'syz.1.3634': attribute type 1 has an invalid length. [ 991.616675][T20814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3639'. [ 991.623722][T20807] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.3634'. [ 991.901835][T20828] IPv6: Can't replace route, no match found [ 992.023924][T20835] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3641'. [ 992.101062][T20835] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 992.163092][T20835] CPU: 1 PID: 20835 Comm: syz.3.3641 Not tainted syzkaller #0 [ 992.170738][T20835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 992.180983][T20835] Call Trace: [ 992.184345][T20835] [ 992.187317][T20835] dump_stack_lvl+0x188/0x24e [ 992.192056][T20835] ? show_regs_print_info+0x12/0x12 [ 992.197311][T20835] ? load_image+0x410/0x410 [ 992.201947][T20835] ? sysfs_warn_dup+0x61/0xa0 [ 992.206676][T20835] ? kernfs_path_from_node+0x1/0xd60 [ 992.212066][T20835] sysfs_warn_dup+0x8a/0xa0 [ 992.216641][T20835] sysfs_do_create_link_sd+0xc0/0x110 [ 992.222158][T20835] device_add+0x83b/0x1050 [ 992.226636][T20835] wiphy_register+0x1d8b/0x2aa0 [ 992.231537][T20835] ? __rtnl_unlock+0x14/0xe0 [ 992.236193][T20835] ? cfg80211_event_work+0x40/0x40 [ 992.241368][T20835] ? minstrel_ht_alloc+0x894/0xa20 [ 992.246672][T20835] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 992.252788][T20835] ieee80211_register_hw+0x2d48/0x39f0 [ 992.258318][T20835] ? ieee80211_register_hw+0xee1/0x39f0 [ 992.263909][T20835] ? ieee80211_register_hw+0xee1/0x39f0 [ 992.269491][T20835] ? ieee80211_tasklet_handler+0x20/0x20 [ 992.275140][T20835] ? lockdep_hardirqs_on+0x94/0x140 [ 992.280353][T20835] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 992.286533][T20835] ? ieee80211_register_hw+0x1/0x39f0 [ 992.291930][T20835] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 992.297682][T20835] ? memcpy+0x3c/0x60 [ 992.301686][T20835] hwsim_new_radio_nl+0xab7/0xc90 [ 992.306742][T20835] genl_family_rcv_msg_doit+0x22f/0x350 [ 992.312303][T20835] ? end_current_label_crit_section+0x170/0x170 [ 992.318742][T20835] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 992.324698][T20835] ? bpf_lsm_capable+0x5/0x10 [ 992.329390][T20835] ? security_capable+0x85/0xb0 [ 992.334274][T20835] genl_rcv_msg+0x601/0x790 [ 992.338799][T20835] ? genl_bind+0x360/0x360 [ 992.343230][T20835] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 992.349636][T20835] ? lock_chain_count+0x20/0x20 [ 992.354512][T20835] netlink_rcv_skb+0x1ef/0x440 [ 992.359314][T20835] ? genl_bind+0x360/0x360 [ 992.363753][T20835] ? netlink_ack+0x1160/0x1160 [ 992.368549][T20835] ? down_read+0x50/0x2d0 [ 992.372896][T20835] ? down_read+0x1a8/0x2d0 [ 992.377335][T20835] genl_rcv+0x24/0x40 [ 992.381508][T20835] netlink_unicast+0x7ad/0x920 [ 992.386305][T20835] netlink_sendmsg+0x8ad/0xbd0 [ 992.391086][T20835] ? __sanitizer_cov_trace_pc+0x2c/0x60 [ 992.396733][T20835] ? netlink_getsockopt+0x550/0x550 [ 992.401963][T20835] ? apparmor_socket_sendmsg+0x8a/0x330 [ 992.407535][T20835] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 992.412919][T20835] ? security_socket_sendmsg+0x7c/0xa0 [ 992.418492][T20835] ? netlink_getsockopt+0x550/0x550 [ 992.423721][T20835] ____sys_sendmsg+0x5ed/0x9a0 [ 992.428533][T20835] ? __sys_sendmsg_sock+0x30/0x30 [ 992.433746][T20835] ? __import_iovec+0x306/0x510 [ 992.438625][T20835] ? import_iovec+0x6f/0xa0 [ 992.443152][T20835] ___sys_sendmsg+0x2a2/0x360 [ 992.447855][T20835] ? __sys_sendmsg+0x2a0/0x2a0 [ 992.452660][T20835] ? check_preemption_disabled+0x46/0x110 [ 992.458509][T20835] __se_sys_sendmsg+0x1c3/0x2b0 [ 992.463384][T20835] ? __x64_sys_sendmsg+0x80/0x80 [ 992.468351][T20835] ? lockdep_hardirqs_on+0x94/0x140 [ 992.473565][T20835] do_syscall_64+0x4c/0xa0 [ 992.477997][T20835] ? clear_bhb_loop+0x60/0xb0 [ 992.482713][T20835] ? clear_bhb_loop+0x60/0xb0 [ 992.487497][T20835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 992.493592][T20835] RIP: 0033:0x7f1d3bf9e159 [ 992.498045][T20835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.517703][T20835] RSP: 002b:00007f1d3cdd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 992.526220][T20835] RAX: ffffffffffffffda RBX: 00007f1d3c226090 RCX: 00007f1d3bf9e159 [ 992.534299][T20835] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 992.542463][T20835] RBP: 00007f1d3c03503b R08: 0000000000000000 R09: 0000000000000000 [ 992.550617][T20835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.558624][T20835] R13: 00007f1d3c226128 R14: 00007f1d3c226090 R15: 00007ffe185efd88 [ 992.566690][T20835] [ 993.126578][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.133098][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.189905][T20863] netlink: 'syz.1.3647': attribute type 2 has an invalid length. [ 993.238637][T20863] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3647'. [ 993.323632][T20858] delete_channel: no stack [ 993.764156][T20882] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.772000][T20882] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.804738][T20881] delete_channel: no stack [ 993.811037][T20881] delete_channel: no stack [ 993.943136][T20882] netlink: 151960 bytes leftover after parsing attributes in process `syz.1.3652'. [ 994.003523][T20881] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3654'. [ 994.112498][T20882] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 994.144554][T20892] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3657'. [ 994.203179][T20892] device hsr_slave_0 left promiscuous mode [ 994.320706][T20892] device hsr_slave_1 left promiscuous mode [ 994.586197][T20883] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.593450][T20883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.601831][T20883] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.609136][T20883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.632920][T20883] device bridge0 entered promiscuous mode [ 994.639451][T20894] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3657'. [ 994.938112][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 995.104094][T20925] validate_nla: 3 callbacks suppressed [ 995.104114][T20925] netlink: 'syz.0.3661': attribute type 2 has an invalid length. [ 995.223447][T20924] netlink: 'syz.0.3661': attribute type 3 has an invalid length. [ 995.314328][T20924] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3661'. [ 996.743412][T20969] netlink: 'syz.4.3674': attribute type 2 has an invalid length. [ 996.787291][T20969] netlink: 'syz.4.3674': attribute type 8 has an invalid length. [ 996.887205][T20969] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3674'. [ 997.246128][T20982] netlink: 'syz.3.3678': attribute type 10 has an invalid length. [ 997.406917][T20982] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 998.132758][T21005] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.481281][T21005] device bridge_slave_0 left promiscuous mode [ 998.490729][T21005] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.168799][T21015] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3685'. [ 999.296503][T21015] device hsr_slave_0 left promiscuous mode [ 999.351145][T21015] device hsr_slave_1 left promiscuous mode [ 1000.352199][T21020] Q6\bY4: renamed from lo [ 1001.212656][T21077] device syzkaller0 entered promiscuous mode [ 1007.486974][T21142] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3711'. [ 1008.804402][T21155] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3713'. [ 1010.480588][T21200] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3724'. [ 1010.561070][T21200] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1010.587808][T21200] CPU: 0 PID: 21200 Comm: syz.1.3724 Not tainted syzkaller #0 [ 1010.595357][T21200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1010.605465][T21200] Call Trace: [ 1010.608779][T21200] [ 1010.611750][T21200] dump_stack_lvl+0x188/0x24e [ 1010.616492][T21200] ? show_regs_print_info+0x12/0x12 [ 1010.621745][T21200] ? load_image+0x410/0x410 [ 1010.626304][T21200] sysfs_warn_dup+0x8a/0xa0 [ 1010.630853][T21200] sysfs_do_create_link_sd+0xc0/0x110 [ 1010.636265][T21200] device_add+0x83b/0x1050 [ 1010.640734][T21200] wiphy_register+0x1d8b/0x2aa0 [ 1010.645912][T21200] ? cfg80211_event_work+0x40/0x40 [ 1010.651072][T21200] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1010.657282][T21200] ? ieee80211_register_hw+0x2b89/0x39f0 [ 1010.663002][T21200] ieee80211_register_hw+0x2d48/0x39f0 [ 1010.668530][T21200] ? ieee80211_register_hw+0xee1/0x39f0 [ 1010.674120][T21200] ? ieee80211_register_hw+0xee1/0x39f0 [ 1010.679726][T21200] ? ieee80211_tasklet_handler+0x20/0x20 [ 1010.685400][T21200] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1010.691339][T21200] ? __debug_object_init+0xed/0x440 [ 1010.696584][T21200] ? memset+0x1e/0x40 [ 1010.700609][T21200] ? __hrtimer_init+0x189/0x270 [ 1010.705508][T21200] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1010.711288][T21200] ? memcpy+0x3c/0x60 [ 1010.715322][T21200] hwsim_new_radio_nl+0xab7/0xc90 [ 1010.720410][T21200] genl_family_rcv_msg_doit+0x22f/0x350 [ 1010.726003][T21200] ? end_current_label_crit_section+0x170/0x170 [ 1010.732301][T21200] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1010.738332][T21200] ? bpf_lsm_capable+0x5/0x10 [ 1010.743064][T21200] ? security_capable+0x85/0xb0 [ 1010.747985][T21200] genl_rcv_msg+0x601/0x790 [ 1010.752542][T21200] ? lockdep_hardirqs_on+0x94/0x140 [ 1010.757880][T21200] ? genl_bind+0x360/0x360 [ 1010.762335][T21200] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1010.768736][T21200] netlink_rcv_skb+0x1ef/0x440 [ 1010.773554][T21200] ? genl_bind+0x360/0x360 [ 1010.778021][T21200] ? netlink_ack+0x1160/0x1160 [ 1010.782854][T21200] ? down_read+0x1a8/0x2d0 [ 1010.787312][T21200] genl_rcv+0x24/0x40 [ 1010.791507][T21200] netlink_unicast+0x7ad/0x920 [ 1010.796345][T21200] netlink_sendmsg+0x8ad/0xbd0 [ 1010.801349][T21200] ? netlink_getsockopt+0x550/0x550 [ 1010.806608][T21200] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1010.812211][T21200] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1010.817550][T21200] ? security_socket_sendmsg+0x7c/0xa0 [ 1010.823056][T21200] ? netlink_getsockopt+0x550/0x550 [ 1010.828297][T21200] ____sys_sendmsg+0x5ed/0x9a0 [ 1010.833123][T21200] ? __sys_sendmsg_sock+0x30/0x30 [ 1010.838188][T21200] ? __import_iovec+0x306/0x510 [ 1010.843104][T21200] ? import_iovec+0x6f/0xa0 [ 1010.847672][T21200] ___sys_sendmsg+0x2a2/0x360 [ 1010.852431][T21200] ? __sys_sendmsg+0x2a0/0x2a0 [ 1010.857278][T21200] ? ktime_get+0x7b/0x270 [ 1010.861695][T21200] __se_sys_sendmsg+0x1c3/0x2b0 [ 1010.866603][T21200] ? __x64_sys_sendmsg+0x80/0x80 [ 1010.871612][T21200] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1010.877558][T21200] do_syscall_64+0x4c/0xa0 [ 1010.882031][T21200] ? clear_bhb_loop+0x60/0xb0 [ 1010.886755][T21200] ? clear_bhb_loop+0x60/0xb0 [ 1010.891483][T21200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1010.897420][T21200] RIP: 0033:0x7fbe8259e159 [ 1010.901870][T21200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.921697][T21200] RSP: 002b:00007fbe83382028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1010.930172][T21200] RAX: ffffffffffffffda RBX: 00007fbe82825fa0 RCX: 00007fbe8259e159 [ 1010.938194][T21200] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1010.946215][T21200] RBP: 00007fbe8263503b R08: 0000000000000000 R09: 0000000000000000 [ 1010.954250][T21200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.962272][T21200] R13: 00007fbe82826038 R14: 00007fbe82825fa0 R15: 00007ffe977f08b8 [ 1010.970314][T21200] [ 1011.184261][T21205] netlink: 'syz.3.3725': attribute type 2 has an invalid length. [ 1011.202015][T21205] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.3725'. [ 1012.283080][T21241] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3729'. [ 1013.665651][T21269] netlink: 'syz.0.3737': attribute type 3 has an invalid length. [ 1013.847479][T21269] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3737'. [ 1017.894351][T21331] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3749'. [ 1018.970435][T21354] netlink: 'syz.1.3755': attribute type 21 has an invalid length. [ 1019.035398][T21354] netlink: 'syz.1.3755': attribute type 1 has an invalid length. [ 1019.071933][T21354] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3755'. [ 1019.391002][T21357] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3756'. [ 1019.425050][T21357] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3756'. [ 1019.498054][T21360] netlink: 'syz.2.3757': attribute type 1 has an invalid length. [ 1019.550486][T21367] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3756'. [ 1019.551770][T21357] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3756'. [ 1019.630527][T21371] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3757'. [ 1021.496559][T21401] netlink: 'syz.4.3764': attribute type 13 has an invalid length. [ 1021.750897][T21401] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3764'. [ 1024.535931][T21442] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3774'. [ 1025.697894][T21454] delete_channel: no stack [ 1025.703066][T21461] pimreg: tun_chr_ioctl cmd 1074025677 [ 1025.708707][T21461] pimreg: linktype set to 270 [ 1025.773468][T21460] pimreg: tun_chr_ioctl cmd 1074025673 [ 1025.808424][T21453] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3778'. [ 1025.843611][T21453] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 1025.914835][T21462] netlink: 14469 bytes leftover after parsing attributes in process `syz.0.3779'. [ 1027.056028][T21491] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3787'. [ 1027.734989][T21497] netlink: 'syz.0.3789': attribute type 9 has an invalid length. [ 1027.852268][T21497] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.3789'. [ 1028.734324][T21512] device pim6reg1 entered promiscuous mode [ 1028.778310][T21512] netlink: 'syz.0.3793': attribute type 1 has an invalid length. [ 1028.852246][T21512] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3793'. [ 1029.084279][T21514] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3791'. [ 1029.187459][T21515] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1031.950374][T21521] netlink: 'syz.0.3796': attribute type 11 has an invalid length. [ 1031.959358][T21521] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.3796'. [ 1032.921828][T21530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1033.542276][T21542] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3800'. [ 1035.778413][T21605] netlink: 'syz.2.3810': attribute type 2 has an invalid length. [ 1035.789906][T21605] netlink: 'syz.2.3810': attribute type 8 has an invalid length. [ 1035.840038][T21605] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3810'. [ 1035.916098][T21609] netlink: 'syz.1.3812': attribute type 2 has an invalid length. [ 1035.948705][T21609] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.3812'. [ 1036.784119][T16986] Bluetooth: hci0: ISO packet for unknown connection handle 62 [ 1039.688125][T21701] netlink: 'syz.3.3835': attribute type 2 has an invalid length. [ 1039.713541][T21701] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3835'. [ 1041.432451][T21720] device syzkaller0 entered promiscuous mode [ 1046.783257][T21762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3842'. [ 1047.030904][T21782] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3849'. [ 1047.416368][T21801] netlink: 'syz.2.3853': attribute type 3 has an invalid length. [ 1047.475286][T21801] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3853'. [ 1047.524787][T21806] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.3853'. [ 1047.842494][T21818] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3857'. [ 1047.867129][T21817] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3857'. [ 1047.907434][T21815] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3856'. [ 1047.916110][T21818] netlink: 'syz.4.3857': attribute type 11 has an invalid length. [ 1047.941651][T21818] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3857'. [ 1047.973534][T21816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1048.180236][T21828] netlink: 'syz.3.3858': attribute type 10 has an invalid length. [ 1048.211642][T21828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3858'. [ 1048.290773][T21826] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3859'. [ 1048.347786][T21828] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1048.374729][T21828] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.541226][T21828] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1048.608254][T21836] netlink: 'syz.0.3861': attribute type 41 has an invalid length. [ 1050.597328][T21888] team0: Port device team_slave_0 removed [ 1050.703779][T21888] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1051.451363][T21901] delete_channel: no stack [ 1053.345912][T21942] netlink: 'syz.3.3892': attribute type 4 has an invalid length. [ 1053.477812][T21948] netlink: 'syz.3.3892': attribute type 4 has an invalid length. [ 1054.558616][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.565038][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.803550][T21973] netlink: 'syz.0.3898': attribute type 3 has an invalid length. [ 1056.830437][T21973] __nla_validate_parse: 1 callbacks suppressed [ 1056.830459][T21973] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3898'. [ 1057.265626][T21992] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 1057.284011][T21992] syzkaller1: group set to 778 [ 1058.096183][T22012] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3905'. [ 1058.570616][T22026] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3909'. [ 1058.691360][T22031] netlink: 'syz.1.3909': attribute type 10 has an invalid length. [ 1058.732344][T22031] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3909'. [ 1058.844548][T22030] netlink: 'syz.2.3910': attribute type 5 has an invalid length. [ 1059.062364][T22038] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1059.121588][T22040] netlink: 'syz.3.3912': attribute type 10 has an invalid length. [ 1059.247662][T22040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.280602][T22040] device bridge_slave_1 left promiscuous mode [ 1059.362007][T22040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.640263][T22040] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1059.753704][T22055] netlink: 'syz.1.3917': attribute type 7 has an invalid length. [ 1059.764398][T22051] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3915'. [ 1059.830645][T22055] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.3917'. [ 1060.575934][T22071] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 1060.646742][T22071] syzkaller1: group set to 778 [ 1061.501346][T22079] netlink: 'syz.4.3921': attribute type 2 has an invalid length. [ 1062.110248][T22099] netlink: 'syz.2.3924': attribute type 2 has an invalid length. [ 1063.079147][T22121] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1063.712393][T22130] netlink: 'syz.0.3932': attribute type 3 has an invalid length. [ 1063.731200][T22130] netlink: 'syz.0.3932': attribute type 4 has an invalid length. [ 1063.771339][T22130] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.3932'. [ 1064.035383][T22136] netlink: 'syz.2.3933': attribute type 9 has an invalid length. [ 1064.088434][T22136] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3933'. [ 1067.465353][T22157] netlink: 'syz.2.3935': attribute type 21 has an invalid length. [ 1073.880248][T22323] netlink: 'syz.3.3966': attribute type 29 has an invalid length. [ 1073.955294][T22323] netlink: 'syz.3.3966': attribute type 29 has an invalid length. [ 1073.997279][T22328] netlink: 'syz.3.3966': attribute type 21 has an invalid length. [ 1074.019330][T22326] netlink: 'syz.3.3966': attribute type 29 has an invalid length. [ 1075.692531][T22360] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3972'. [ 1076.094438][T22360] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1076.174176][T22360] CPU: 0 PID: 22360 Comm: syz.2.3972 Not tainted syzkaller #0 [ 1076.181726][T22360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1076.191820][T22360] Call Trace: [ 1076.195134][T22360] [ 1076.198095][T22360] dump_stack_lvl+0x188/0x24e [ 1076.202822][T22360] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1076.209041][T22360] ? show_regs_print_info+0x12/0x12 [ 1076.214422][T22360] ? load_image+0x410/0x410 [ 1076.219000][T22360] ? sysfs_warn_dup+0x61/0xa0 [ 1076.223739][T22360] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1076.229888][T22360] sysfs_warn_dup+0x8a/0xa0 [ 1076.234434][T22360] sysfs_do_create_link_sd+0xc0/0x110 [ 1076.239940][T22360] device_add+0x83b/0x1050 [ 1076.244416][T22360] wiphy_register+0x1d8b/0x2aa0 [ 1076.249331][T22360] ? cfg80211_event_work+0x40/0x40 [ 1076.254508][T22360] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1076.260652][T22360] ieee80211_register_hw+0x2d48/0x39f0 [ 1076.266169][T22360] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1076.272397][T22360] ? ieee80211_register_hw+0xee1/0x39f0 [ 1076.277996][T22360] ? ieee80211_register_hw+0xee1/0x39f0 [ 1076.283603][T22360] ? ieee80211_tasklet_handler+0x20/0x20 [ 1076.289287][T22360] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1076.295222][T22360] ? __debug_object_init+0xed/0x440 [ 1076.300455][T22360] ? memset+0x1e/0x40 [ 1076.304464][T22360] ? __hrtimer_init+0x189/0x270 [ 1076.309357][T22360] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1076.315124][T22360] ? memcpy+0x3c/0x60 [ 1076.319142][T22360] hwsim_new_radio_nl+0xab7/0xc90 [ 1076.324218][T22360] genl_family_rcv_msg_doit+0x22f/0x350 [ 1076.329795][T22360] ? end_current_label_crit_section+0x170/0x170 [ 1076.336078][T22360] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1076.342013][T22360] ? bpf_lsm_capable+0x5/0x10 [ 1076.346722][T22360] ? security_capable+0x85/0xb0 [ 1076.351623][T22360] genl_rcv_msg+0x601/0x790 [ 1076.356157][T22360] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1076.362341][T22360] ? genl_bind+0x360/0x360 [ 1076.366754][T22360] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1076.373087][T22360] ? lock_acquire+0x225/0x4a0 [ 1076.377765][T22360] netlink_rcv_skb+0x1ef/0x440 [ 1076.382547][T22360] ? genl_bind+0x360/0x360 [ 1076.387010][T22360] ? netlink_ack+0x1160/0x1160 [ 1076.391837][T22360] ? down_read+0x1a8/0x2d0 [ 1076.396292][T22360] genl_rcv+0x24/0x40 [ 1076.400325][T22360] netlink_unicast+0x7ad/0x920 [ 1076.405153][T22360] netlink_sendmsg+0x8ad/0xbd0 [ 1076.409968][T22360] ? netlink_getsockopt+0x550/0x550 [ 1076.415216][T22360] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1076.420812][T22360] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1076.426143][T22360] ? security_socket_sendmsg+0x7c/0xa0 [ 1076.431747][T22360] ? netlink_getsockopt+0x550/0x550 [ 1076.437000][T22360] ____sys_sendmsg+0x5ed/0x9a0 [ 1076.441831][T22360] ? __sys_sendmsg_sock+0x30/0x30 [ 1076.446958][T22360] ? __import_iovec+0x306/0x510 [ 1076.451879][T22360] ? import_iovec+0x6f/0xa0 [ 1076.456434][T22360] ___sys_sendmsg+0x2a2/0x360 [ 1076.461172][T22360] ? __sys_sendmsg+0x2a0/0x2a0 [ 1076.465992][T22360] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1076.472219][T22360] ? irqentry_enter+0x33/0x50 [ 1076.476992][T22360] __se_sys_sendmsg+0x1c3/0x2b0 [ 1076.481902][T22360] ? __x64_sys_sendmsg+0x80/0x80 [ 1076.486923][T22360] do_syscall_64+0x4c/0xa0 [ 1076.491389][T22360] ? clear_bhb_loop+0x60/0xb0 [ 1076.496111][T22360] ? clear_bhb_loop+0x60/0xb0 [ 1076.500843][T22360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1076.506878][T22360] RIP: 0033:0x7fbc73b9e159 [ 1076.511337][T22360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.531340][T22360] RSP: 002b:00007fbc74a6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1076.539814][T22360] RAX: ffffffffffffffda RBX: 00007fbc73e26090 RCX: 00007fbc73b9e159 [ 1076.547835][T22360] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1076.555856][T22360] RBP: 00007fbc73c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1076.563885][T22360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1076.571908][T22360] R13: 00007fbc73e26128 R14: 00007fbc73e26090 R15: 00007ffcaac3ec58 [ 1076.579949][T22360] [ 1077.060403][T22371] netlink: 'syz.4.3974': attribute type 15 has an invalid length. [ 1077.099041][T22371] netlink: 'syz.4.3974': attribute type 16 has an invalid length. [ 1077.154773][T22371] netlink: 'syz.4.3974': attribute type 6 has an invalid length. [ 1077.194335][T22371] netlink: 'syz.4.3974': attribute type 15 has an invalid length. [ 1077.236374][T22371] netlink: 'syz.4.3974': attribute type 16 has an invalid length. [ 1077.287555][T22371] netlink: 'syz.4.3974': attribute type 20 has an invalid length. [ 1077.345688][T22371] netlink: 13226 bytes leftover after parsing attributes in process `syz.4.3974'. [ 1077.536432][T22388] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.275010][T22420] validate_nla: 6 callbacks suppressed [ 1079.275054][T22420] netlink: 'syz.0.3985': attribute type 13 has an invalid length. [ 1079.411963][T22420] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.3985'. [ 1082.298933][T22456] netlink: 'syz.3.3992': attribute type 21 has an invalid length. [ 1082.328156][T22456] netlink: 'syz.3.3992': attribute type 7 has an invalid length. [ 1082.414053][T22468] tipc: Started in network mode [ 1082.419005][T22468] tipc: Node identity 9215a268, cluster identity 4711 [ 1082.431680][T22468] tipc: Node number set to 2450891368 [ 1082.442272][T22483] netlink: 'syz.2.3993': attribute type 46 has an invalid length. [ 1082.937531][T22509] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.4002'. [ 1083.277824][T22523] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4006'. [ 1083.330495][T22525] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4006'. [ 1083.388295][T22525] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1084.790176][T22555] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.4011'. [ 1085.187351][T22564] netlink: 'syz.2.4014': attribute type 21 has an invalid length. [ 1085.779662][T22572] netlink: 103 bytes leftover after parsing attributes in process `syz.4.4018'. [ 1087.070234][T22612] netlink: 'syz.2.4023': attribute type 2 has an invalid length. [ 1087.165820][T22612] device 0 entered promiscuous mode [ 1087.383938][T22616] netlink: 'syz.4.4025': attribute type 39 has an invalid length. [ 1087.459996][T22616] device macvlan0 entered promiscuous mode [ 1087.993274][T22636] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4032'. [ 1088.017588][T22635] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.4031'. [ 1088.077659][T22638] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.4031'. [ 1088.415933][T22642] netlink: 'syz.2.4033': attribute type 2 has an invalid length. [ 1088.458345][T22643] netlink: 'syz.2.4033': attribute type 2 has an invalid length. [ 1088.533564][T22642] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.4033'. [ 1088.584228][T22643] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.4033'. [ 1088.834724][T22651] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4035'. [ 1088.984218][T22654] netlink: 'syz.3.4037': attribute type 8 has an invalid length. [ 1089.071605][T22654] netlink: 'syz.3.4037': attribute type 1 has an invalid length. [ 1089.158465][T22654] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.4037'. [ 1090.224246][T22678] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.4042'. [ 1090.573061][T22681] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1090.721983][T22681] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4040'. [ 1090.857048][T22681] : renamed from caif0 [ 1093.186377][T22681] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1093.560671][T22708] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4050'. [ 1095.621870][T22750] netlink: 'syz.4.4061': attribute type 10 has an invalid length. [ 1095.942806][T22750] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1096.713086][T22774] netlink: 'syz.4.4065': attribute type 21 has an invalid length. [ 1096.777329][T22774] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4065'. [ 1096.852295][T22774] netlink: 'syz.4.4065': attribute type 5 has an invalid length. [ 1096.873573][T22774] netlink: 'syz.4.4065': attribute type 6 has an invalid length. [ 1096.901858][T22774] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4065'. [ 1096.918664][T22777] netlink: 'syz.2.4066': attribute type 10 has an invalid length. [ 1097.014826][T22777] bridge0: port 3(team0) entered disabled state [ 1097.068415][T22777] device team_slave_0 left promiscuous mode [ 1097.159011][T22777] team0 (unregistering): Port device team_slave_0 removed [ 1097.176880][T22777] device team_slave_1 left promiscuous mode [ 1097.204625][T22777] team0 (unregistering): Port device team_slave_1 removed [ 1098.189087][T22798] netlink: 'syz.3.4071': attribute type 2 has an invalid length. [ 1098.210591][T22799] netlink: 'syz.3.4071': attribute type 2 has an invalid length. [ 1098.248705][T22798] netlink: 'syz.3.4071': attribute type 9 has an invalid length. [ 1098.278275][T22799] netlink: 'syz.3.4071': attribute type 9 has an invalid length. [ 1098.963031][T16986] Bluetooth: hci1: ISO packet for unknown connection handle 255 [ 1099.674193][T22826] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4077'. [ 1101.403431][T22846] netlink: 'syz.1.4083': attribute type 9 has an invalid length. [ 1101.461315][T22846] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4083'. [ 1102.178751][T22874] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4091'. [ 1103.794440][T22897] netlink: 'syz.0.4098': attribute type 22 has an invalid length. [ 1103.816718][T22897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4098'. [ 1105.301713][T22924] netlink: 'syz.3.4104': attribute type 29 has an invalid length. [ 1105.404068][T22913] delete_channel: no stack [ 1105.766809][T22924] netlink: 'syz.3.4104': attribute type 29 has an invalid length. [ 1105.802877][T22925] netlink: 'syz.3.4104': attribute type 29 has an invalid length. [ 1105.833292][T22929] netlink: 'syz.3.4104': attribute type 29 has an invalid length. [ 1105.901933][T22931] device veth1_macvtap left promiscuous mode [ 1106.315890][T22945] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4107'. [ 1106.574246][T22945] netlink: 'syz.2.4107': attribute type 3 has an invalid length. [ 1107.665276][T22968] netlink: 'syz.2.4112': attribute type 10 has an invalid length. [ 1107.746175][T22968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4112'. [ 1107.776341][T22968] netlink: 'syz.2.4112': attribute type 10 has an invalid length. [ 1107.797028][T22968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4112'. [ 1107.828099][T22973] netlink: 'syz.1.4114': attribute type 3 has an invalid length. [ 1107.865878][T22973] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4114'. [ 1108.987851][T22981] delete_channel: no stack [ 1109.502098][T22992] netlink: 'syz.0.4118': attribute type 29 has an invalid length. [ 1109.567527][T22992] netlink: 'syz.0.4118': attribute type 29 has an invalid length. [ 1109.604204][T22990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1109.631708][T22990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.653708][T22992] sctp: [Deprecated]: syz.0.4118 (pid 22992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1109.653708][T22992] Use struct sctp_sack_info instead [ 1109.695565][T22990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.714385][T22990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.759365][T22990] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1109.784547][T22990] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1110.228427][T22994] netlink: 'syz.0.4118': attribute type 29 has an invalid length. [ 1114.959228][T23066] netlink: 'syz.4.4138': attribute type 1 has an invalid length. [ 1115.037473][T23066] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.4138'. [ 1115.126181][T23068] netlink: 'syz.4.4138': attribute type 29 has an invalid length. [ 1115.137986][T23072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4138'. [ 1115.252272][T23068] netlink: 'syz.4.4138': attribute type 29 has an invalid length. [ 1115.454506][T23068] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4138'. [ 1116.001817][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.008630][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.327586][T23102] netlink: 'syz.1.4145': attribute type 39 has an invalid length. [ 1117.691077][T23102] device macvlan0 entered promiscuous mode [ 1118.249394][T23128] netlink: 'syz.4.4152': attribute type 10 has an invalid length. [ 1118.967848][T23145] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4153'. [ 1119.377581][T23145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.477581][T23145] bond0 (unregistering): (slave team0): Releasing backup interface [ 1119.603329][T23145] bond0 (unregistering): Released all slaves [ 1119.807311][T23181] netlink: 65023 bytes leftover after parsing attributes in process `syz.0.4161'. [ 1119.811995][T23180] netlink: 65023 bytes leftover after parsing attributes in process `syz.0.4161'. [ 1119.855534][T23173] netlink: 'syz.3.4159': attribute type 21 has an invalid length. [ 1120.851778][T23194] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4163'. [ 1122.040734][T23212] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4169'. [ 1123.789518][T23253] netlink: 'syz.3.4180': attribute type 3 has an invalid length. [ 1123.832991][T23253] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4180'. [ 1123.912527][T23253] device syzkaller0 entered promiscuous mode [ 1124.069161][T23258] netlink: 'syz.3.4180': attribute type 3 has an invalid length. [ 1124.101282][T23258] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4180'. [ 1125.126040][T23271] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4183'. [ 1125.360670][T23284] netlink: 'syz.3.4184': attribute type 39 has an invalid length. [ 1125.913282][T23293] netlink: 'syz.0.4187': attribute type 10 has an invalid length. [ 1125.942792][T23293] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1125.990795][T23284] netlink: 'syz.3.4184': attribute type 39 has an invalid length. [ 1126.008030][T23284] netlink: 'syz.3.4184': attribute type 39 has an invalid length. [ 1126.082334][T23284] netlink: 'syz.3.4184': attribute type 39 has an invalid length. [ 1126.142974][T23284] netlink: 'syz.3.4184': attribute type 39 has an invalid length. [ 1126.183539][T23284] netlink: 'syz.3.4184': attribute type 39 has an invalid length. [ 1126.203371][T23284] netlink: 'syz.3.4184': attribute type 39 has an invalid length. [ 1126.610028][T23306] delete_channel: no stack [ 1126.808674][T23318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.816121][T23318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.910248][T23324] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4194'. [ 1128.829520][T23345] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4200'. [ 1128.927460][T23346] validate_nla: 47 callbacks suppressed [ 1128.927482][T23346] netlink: 'syz.2.4201': attribute type 2 has an invalid length. [ 1128.989052][T23346] netlink: 'syz.2.4201': attribute type 8 has an invalid length. [ 1129.107726][T23346] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4201'. [ 1129.167295][T23353] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4203'. [ 1129.260638][T23354] netlink: 'syz.0.4204': attribute type 10 has an invalid length. [ 1130.356630][T23354] team0 (unregistering): Port device team_slave_0 removed [ 1130.378995][T23354] team0 (unregistering): Port device team_slave_1 removed [ 1130.397549][T23354] team0 (unregistering): Port device bond0 removed [ 1130.409605][T23354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.417133][T23354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.438068][T23354] team0 (unregistering): Port device bridge0 removed [ 1130.455608][T23364] netlink: 'syz.4.4206': attribute type 10 has an invalid length. [ 1130.463807][T23367] netlink: 'syz.4.4206': attribute type 10 has an invalid length. [ 1130.666906][T23381] netlink: 'syz.1.4208': attribute type 27 has an invalid length. [ 1131.246625][T23412] netlink: 3291 bytes leftover after parsing attributes in process `syz.1.4217'. [ 1131.338828][T23416] netlink: 'syz.2.4219': attribute type 17 has an invalid length. [ 1131.371550][T23416] netlink: 'syz.2.4219': attribute type 16 has an invalid length. [ 1131.394818][T23416] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4219'. [ 1131.741889][T23426] netlink: 'syz.4.4221': attribute type 5 has an invalid length. [ 1132.576928][T23442] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4224'. [ 1132.628987][T23442] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1132.717580][T23442] CPU: 0 PID: 23442 Comm: syz.2.4224 Not tainted syzkaller #0 [ 1132.725136][T23442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1132.735329][T23442] Call Trace: [ 1132.738646][T23442] [ 1132.741636][T23442] dump_stack_lvl+0x188/0x24e [ 1132.746373][T23442] ? show_regs_print_info+0x12/0x12 [ 1132.751625][T23442] ? load_image+0x410/0x410 [ 1132.756197][T23442] sysfs_warn_dup+0x8a/0xa0 [ 1132.760747][T23442] sysfs_do_create_link_sd+0xc0/0x110 [ 1132.766145][T23442] device_add+0x83b/0x1050 [ 1132.770695][T23442] wiphy_register+0x1d8b/0x2aa0 [ 1132.775613][T23442] ? cfg80211_event_work+0x40/0x40 [ 1132.780769][T23442] ? minstrel_ht_alloc+0x894/0xa20 [ 1132.785938][T23442] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1132.792126][T23442] ieee80211_register_hw+0x2d48/0x39f0 [ 1132.797972][T23442] ? ieee80211_register_hw+0xee1/0x39f0 [ 1132.803536][T23442] ? ieee80211_register_hw+0xee1/0x39f0 [ 1132.809106][T23442] ? ieee80211_tasklet_handler+0x20/0x20 [ 1132.814753][T23442] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1132.820672][T23442] ? __debug_object_init+0xed/0x440 [ 1132.825891][T23442] ? memset+0x1e/0x40 [ 1132.829887][T23442] ? __hrtimer_init+0x189/0x270 [ 1132.834754][T23442] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1132.840513][T23442] ? memcpy+0x3c/0x60 [ 1132.844515][T23442] hwsim_new_radio_nl+0xab7/0xc90 [ 1132.849569][T23442] genl_family_rcv_msg_doit+0x22f/0x350 [ 1132.855217][T23442] ? end_current_label_crit_section+0x170/0x170 [ 1132.861479][T23442] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1132.867399][T23442] ? bpf_lsm_capable+0x5/0x10 [ 1132.872094][T23442] ? security_capable+0x85/0xb0 [ 1132.876970][T23442] genl_rcv_msg+0x601/0x790 [ 1132.881500][T23442] ? genl_bind+0x360/0x360 [ 1132.885935][T23442] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1132.892298][T23442] netlink_rcv_skb+0x1ef/0x440 [ 1132.897088][T23442] ? genl_bind+0x360/0x360 [ 1132.901522][T23442] ? netlink_ack+0x1160/0x1160 [ 1132.906342][T23442] ? down_read+0x1a8/0x2d0 [ 1132.910792][T23442] genl_rcv+0x24/0x40 [ 1132.914787][T23442] netlink_unicast+0x7ad/0x920 [ 1132.919579][T23442] netlink_sendmsg+0x8ad/0xbd0 [ 1132.924368][T23442] ? netlink_getsockopt+0x550/0x550 [ 1132.929592][T23442] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1132.935160][T23442] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1132.940455][T23442] ? security_socket_sendmsg+0x7c/0xa0 [ 1132.945946][T23442] ? netlink_getsockopt+0x550/0x550 [ 1132.951163][T23442] ____sys_sendmsg+0x5ed/0x9a0 [ 1132.955957][T23442] ? __sys_sendmsg_sock+0x30/0x30 [ 1132.960994][T23442] ? __import_iovec+0x306/0x510 [ 1132.965958][T23442] ? import_iovec+0x6f/0xa0 [ 1132.970480][T23442] ___sys_sendmsg+0x2a2/0x360 [ 1132.975182][T23442] ? __sys_sendmsg+0x2a0/0x2a0 [ 1132.980014][T23442] __se_sys_sendmsg+0x1c3/0x2b0 [ 1132.984887][T23442] ? ct_nmi_exit+0x145/0x1c0 [ 1132.989493][T23442] ? __x64_sys_sendmsg+0x80/0x80 [ 1132.994464][T23442] ? lockdep_hardirqs_on+0x94/0x140 [ 1132.999698][T23442] do_syscall_64+0x4c/0xa0 [ 1133.004129][T23442] ? clear_bhb_loop+0x60/0xb0 [ 1133.008825][T23442] ? clear_bhb_loop+0x60/0xb0 [ 1133.013524][T23442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.019432][T23442] RIP: 0033:0x7fbc73b9e159 [ 1133.023862][T23442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.043569][T23442] RSP: 002b:00007fbc74a8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1133.052280][T23442] RAX: ffffffffffffffda RBX: 00007fbc73e25fa0 RCX: 00007fbc73b9e159 [ 1133.060265][T23442] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1133.068250][T23442] RBP: 00007fbc73c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1133.076252][T23442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1133.084326][T23442] R13: 00007fbc73e26038 R14: 00007fbc73e25fa0 R15: 00007ffcaac3ec58 [ 1133.092334][T23442] [ 1133.116168][T23445] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4226'. [ 1133.150432][T23450] netlink: 'syz.1.4226': attribute type 6 has an invalid length. [ 1133.201200][T23450] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4226'. [ 1135.221100][T23497] netlink: 'syz.3.4233': attribute type 11 has an invalid length. [ 1135.324542][T23497] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.4233'. [ 1135.705331][T23509] netlink: 'syz.0.4236': attribute type 10 has an invalid length. [ 1135.950878][T23509] device bridge_slave_1 left promiscuous mode [ 1136.094110][T23509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.328065][T23512] netlink: 'syz.3.4238': attribute type 21 has an invalid length. [ 1136.350072][T23512] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4238'. [ 1137.174343][T23517] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4237'. [ 1137.198360][T23517] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 1137.237402][T23529] netlink: 'syz.0.4239': attribute type 29 has an invalid length. [ 1137.580837][T23529] netlink: 'syz.0.4239': attribute type 29 has an invalid length. [ 1139.061395][T23580] netlink: 'syz.4.4252': attribute type 6 has an invalid length. [ 1139.101577][T23580] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4252'. [ 1139.692063][T23594] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4257'. [ 1139.701178][T23594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1139.831264][ T4291] Bluetooth: hci0: ISO packet for unknown connection handle 48 [ 1139.837046][T23612] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.4260'. [ 1140.929569][T23641] netlink: 'syz.3.4267': attribute type 3 has an invalid length. [ 1141.011056][T23641] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4267'. [ 1141.135637][T23653] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4267'. [ 1141.309260][T23654] delete_channel: no stack [ 1141.341687][T23654] delete_channel: no stack [ 1141.449210][ T4291] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 1141.609739][ T4291] Bluetooth: hci1: ISO packet for unknown connection handle 48 [ 1141.618796][T23669] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.4275'. [ 1142.973915][T23702] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4282'. [ 1143.016027][T23702] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1143.081536][T23702] CPU: 0 PID: 23702 Comm: syz.1.4282 Not tainted syzkaller #0 [ 1143.089093][T23702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1143.099210][T23702] Call Trace: [ 1143.102612][T23702] [ 1143.105572][T23702] dump_stack_lvl+0x188/0x24e [ 1143.110298][T23702] ? show_regs_print_info+0x12/0x12 [ 1143.115548][T23702] ? load_image+0x410/0x410 [ 1143.120105][T23702] sysfs_warn_dup+0x8a/0xa0 [ 1143.124671][T23702] sysfs_do_create_link_sd+0xc0/0x110 [ 1143.130189][T23702] device_add+0x83b/0x1050 [ 1143.134660][T23702] wiphy_register+0x1d8b/0x2aa0 [ 1143.139579][T23702] ? cfg80211_event_work+0x40/0x40 [ 1143.144740][T23702] ? minstrel_ht_alloc+0x894/0xa20 [ 1143.149950][T23702] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1143.156066][T23702] ieee80211_register_hw+0x2d48/0x39f0 [ 1143.161604][T23702] ? ieee80211_register_hw+0xee1/0x39f0 [ 1143.167213][T23702] ? ieee80211_register_hw+0xee1/0x39f0 [ 1143.172811][T23702] ? ieee80211_tasklet_handler+0x20/0x20 [ 1143.178484][T23702] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1143.184422][T23702] ? __debug_object_init+0xed/0x440 [ 1143.189661][T23702] ? memset+0x1e/0x40 [ 1143.193684][T23702] ? __hrtimer_init+0x189/0x270 [ 1143.198577][T23702] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1143.204441][T23702] ? memcpy+0x3c/0x60 [ 1143.208466][T23702] hwsim_new_radio_nl+0xab7/0xc90 [ 1143.213553][T23702] genl_family_rcv_msg_doit+0x22f/0x350 [ 1143.219223][T23702] ? end_current_label_crit_section+0x170/0x170 [ 1143.225521][T23702] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1143.231467][T23702] ? bpf_lsm_capable+0x5/0x10 [ 1143.236193][T23702] ? security_capable+0x85/0xb0 [ 1143.241094][T23702] genl_rcv_msg+0x601/0x790 [ 1143.245656][T23702] ? lock_chain_count+0x20/0x20 [ 1143.250558][T23702] ? genl_bind+0x360/0x360 [ 1143.255016][T23702] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1143.261423][T23702] netlink_rcv_skb+0x1ef/0x440 [ 1143.266233][T23702] ? genl_bind+0x360/0x360 [ 1143.270696][T23702] ? netlink_ack+0x1160/0x1160 [ 1143.275523][T23702] ? down_read+0x1a8/0x2d0 [ 1143.279982][T23702] genl_rcv+0x24/0x40 [ 1143.284000][T23702] netlink_unicast+0x7ad/0x920 [ 1143.288821][T23702] netlink_sendmsg+0x8ad/0xbd0 [ 1143.293636][T23702] ? netlink_getsockopt+0x550/0x550 [ 1143.298873][T23702] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1143.304467][T23702] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1143.309798][T23702] ? security_socket_sendmsg+0x7c/0xa0 [ 1143.315300][T23702] ? netlink_getsockopt+0x550/0x550 [ 1143.320541][T23702] ____sys_sendmsg+0x5ed/0x9a0 [ 1143.325372][T23702] ? __sys_sendmsg_sock+0x30/0x30 [ 1143.330441][T23702] ? __import_iovec+0x306/0x510 [ 1143.335353][T23702] ? import_iovec+0x6f/0xa0 [ 1143.339901][T23702] ___sys_sendmsg+0x2a2/0x360 [ 1143.344623][T23702] ? handle_mm_fault+0x33f5/0x3d40 [ 1143.349842][T23702] ? __sys_sendmsg+0x2a0/0x2a0 [ 1143.354716][T23702] __se_sys_sendmsg+0x1c3/0x2b0 [ 1143.359608][T23702] ? ct_nmi_exit+0x145/0x1c0 [ 1143.364259][T23702] ? __x64_sys_sendmsg+0x80/0x80 [ 1143.369264][T23702] ? lockdep_hardirqs_on+0x94/0x140 [ 1143.374505][T23702] do_syscall_64+0x4c/0xa0 [ 1143.378965][T23702] ? clear_bhb_loop+0x60/0xb0 [ 1143.383682][T23702] ? clear_bhb_loop+0x60/0xb0 [ 1143.388412][T23702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1143.394344][T23702] RIP: 0033:0x7fbe8259e159 [ 1143.398796][T23702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.418444][T23702] RSP: 002b:00007fbe807f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1143.427006][T23702] RAX: ffffffffffffffda RBX: 00007fbe82826090 RCX: 00007fbe8259e159 [ 1143.435126][T23702] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1143.443146][T23702] RBP: 00007fbe8263503b R08: 0000000000000000 R09: 0000000000000000 [ 1143.451163][T23702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1143.459339][T23702] R13: 00007fbe82826128 R14: 00007fbe82826090 R15: 00007ffe977f08b8 [ 1143.467368][T23702] [ 1143.907790][T23709] netlink: 'syz.0.4285': attribute type 10 has an invalid length. [ 1143.921882][T23709] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4285'. [ 1144.003904][T23710] netlink: 'syz.0.4285': attribute type 10 has an invalid length. [ 1144.195533][T23716] netlink: 'syz.1.4287': attribute type 5 has an invalid length. [ 1144.284268][T23719] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4288'. [ 1144.884985][T23724] tun0: tun_chr_ioctl cmd 1074812117 [ 1145.130582][T23727] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4289'. [ 1145.151880][T23727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1145.719176][ T4291] Bluetooth: hci4: ISO packet for unknown connection handle 48 [ 1145.843499][T23740] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.4292'. [ 1147.060178][T23789] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.4300'. [ 1147.077826][T23789] netlink: zone id is out of range [ 1147.085364][T23789] netlink: zone id is out of range [ 1147.090639][T23789] netlink: zone id is out of range [ 1147.107217][T23789] netlink: zone id is out of range [ 1147.115704][T23789] netlink: zone id is out of range [ 1147.121042][T23789] netlink: zone id is out of range [ 1147.133853][T23789] netlink: zone id is out of range [ 1147.139255][T23789] netlink: zone id is out of range [ 1147.149765][T23788] ref_ctr_offset mismatch. inode: 0x463 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1147.168699][T23789] netlink: zone id is out of range [ 1147.781340][ T4291] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 1147.906781][T23808] netlink: 'syz.2.4305': attribute type 3 has an invalid length. [ 1147.944315][T23808] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4305'. [ 1148.649952][T23819] netlink: 'syz.0.4310': attribute type 29 has an invalid length. [ 1148.664581][T23819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4310'. [ 1148.685130][T23819] netlink: 'syz.0.4310': attribute type 29 has an invalid length. [ 1148.707710][T23819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4310'. [ 1149.733754][T23859] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4321'. [ 1150.022004][T23859] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1150.056402][T23859] CPU: 1 PID: 23859 Comm: syz.2.4321 Not tainted syzkaller #0 [ 1150.063948][T23859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1150.074123][T23859] Call Trace: [ 1150.077437][T23859] [ 1150.080481][T23859] dump_stack_lvl+0x188/0x24e [ 1150.085215][T23859] ? show_regs_print_info+0x12/0x12 [ 1150.090562][T23859] ? load_image+0x410/0x410 [ 1150.095132][T23859] sysfs_warn_dup+0x8a/0xa0 [ 1150.099690][T23859] sysfs_do_create_link_sd+0xc0/0x110 [ 1150.105121][T23859] device_add+0x83b/0x1050 [ 1150.109600][T23859] wiphy_register+0x1d8b/0x2aa0 [ 1150.114616][T23859] ? cfg80211_event_work+0x40/0x40 [ 1150.119783][T23859] ? minstrel_ht_alloc+0x894/0xa20 [ 1150.124976][T23859] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1150.131099][T23859] ieee80211_register_hw+0x2d48/0x39f0 [ 1150.136674][T23859] ? ieee80211_register_hw+0xee1/0x39f0 [ 1150.142279][T23859] ? ieee80211_register_hw+0xee1/0x39f0 [ 1150.147883][T23859] ? ieee80211_tasklet_handler+0x20/0x20 [ 1150.153573][T23859] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1150.159522][T23859] ? __debug_object_init+0xed/0x440 [ 1150.164764][T23859] ? memset+0x1e/0x40 [ 1150.168785][T23859] ? __hrtimer_init+0x189/0x270 [ 1150.173679][T23859] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1150.179462][T23859] ? memcpy+0x3c/0x60 [ 1150.183508][T23859] hwsim_new_radio_nl+0xab7/0xc90 [ 1150.188673][T23859] genl_family_rcv_msg_doit+0x22f/0x350 [ 1150.194266][T23859] ? end_current_label_crit_section+0x170/0x170 [ 1150.200564][T23859] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1150.206521][T23859] ? bpf_lsm_capable+0x5/0x10 [ 1150.211246][T23859] ? security_capable+0x85/0xb0 [ 1150.216163][T23859] genl_rcv_msg+0x601/0x790 [ 1150.220716][T23859] ? genl_bind+0x360/0x360 [ 1150.225170][T23859] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1150.231562][T23859] netlink_rcv_skb+0x1ef/0x440 [ 1150.236384][T23859] ? genl_bind+0x360/0x360 [ 1150.240854][T23859] ? netlink_ack+0x1160/0x1160 [ 1150.245681][T23859] ? down_read+0x1a8/0x2d0 [ 1150.250137][T23859] genl_rcv+0x24/0x40 [ 1150.254157][T23859] netlink_unicast+0x7ad/0x920 [ 1150.259078][T23859] netlink_sendmsg+0x8ad/0xbd0 [ 1150.263900][T23859] ? netlink_getsockopt+0x550/0x550 [ 1150.269305][T23859] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1150.274990][T23859] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1150.280402][T23859] ? security_socket_sendmsg+0x7c/0xa0 [ 1150.285911][T23859] ? netlink_getsockopt+0x550/0x550 [ 1150.291151][T23859] ____sys_sendmsg+0x5ed/0x9a0 [ 1150.295975][T23859] ? __sys_sendmsg_sock+0x30/0x30 [ 1150.301041][T23859] ? __import_iovec+0x306/0x510 [ 1150.306038][T23859] ? import_iovec+0x6f/0xa0 [ 1150.310588][T23859] ___sys_sendmsg+0x2a2/0x360 [ 1150.315376][T23859] ? __sys_sendmsg+0x2a0/0x2a0 [ 1150.320217][T23859] ? bpf_prog_free_id+0x1d0/0x1d0 [ 1150.325558][T23859] __se_sys_sendmsg+0x1c3/0x2b0 [ 1150.330456][T23859] ? ct_nmi_exit+0x145/0x1c0 [ 1150.335100][T23859] ? __x64_sys_sendmsg+0x80/0x80 [ 1150.340109][T23859] ? lockdep_hardirqs_on+0x94/0x140 [ 1150.345350][T23859] do_syscall_64+0x4c/0xa0 [ 1150.349810][T23859] ? clear_bhb_loop+0x60/0xb0 [ 1150.354533][T23859] ? clear_bhb_loop+0x60/0xb0 [ 1150.359259][T23859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1150.365202][T23859] RIP: 0033:0x7fbc73b9e159 [ 1150.369661][T23859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.389410][T23859] RSP: 002b:00007fbc74a6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1150.397883][T23859] RAX: ffffffffffffffda RBX: 00007fbc73e26090 RCX: 00007fbc73b9e159 [ 1150.405903][T23859] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1150.413914][T23859] RBP: 00007fbc73c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1150.421924][T23859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.429937][T23859] R13: 00007fbc73e26128 R14: 00007fbc73e26090 R15: 00007ffcaac3ec58 [ 1150.438149][T23859] [ 1158.164680][T23928] netlink: 'syz.1.4337': attribute type 2 has an invalid length. [ 1158.191622][T23928] netlink: 'syz.1.4337': attribute type 8 has an invalid length. [ 1158.220325][T23928] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4337'. [ 1158.372802][T23933] netlink: 'syz.4.4339': attribute type 1 has an invalid length. [ 1158.380920][T23933] netlink: 126196 bytes leftover after parsing attributes in process `syz.4.4339'. [ 1158.392590][T23933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4339'. [ 1158.407553][T23926] mac80211_hwsim hwsim181 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1160.382079][T23966] netlink: 'syz.2.4348': attribute type 21 has an invalid length. [ 1160.390034][T23966] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.4348'. [ 1160.440221][T23970] netlink: 'syz.1.4349': attribute type 9 has an invalid length. [ 1160.504602][T23970] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4349'. [ 1160.567366][T23963] netlink: 'syz.3.4347': attribute type 3 has an invalid length. [ 1160.647131][T23963] netlink: 194724 bytes leftover after parsing attributes in process `syz.3.4347'. [ 1160.953002][T12599] wlan1: Trigger new scan to find an IBSS to join [ 1161.784766][T23989] netlink: 'syz.3.4352': attribute type 2 has an invalid length. [ 1162.089551][T23979] netlink: 'syz.3.4352': attribute type 16 has an invalid length. [ 1162.110042][T23979] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4352'. [ 1162.135689][T23979] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1162.176265][T23988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4353'. [ 1163.540904][T24019] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4362'. [ 1165.054226][T12599] wlan1: Trigger new scan to find an IBSS to join [ 1165.229275][T24045] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4369'. [ 1165.942755][T24062] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4371'. [ 1166.035749][T24062] net_ratelimit: 3560 callbacks suppressed [ 1166.035770][T24062] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1166.343173][T12599] wlan1: Creating new IBSS network, BSSID 2a:2a:28:81:a9:0d [ 1168.130086][T24098] device syzkaller0 entered promiscuous mode [ 1169.235532][T24111] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4384'. [ 1172.666743][T24109] device wlan1 entered promiscuous mode [ 1172.821804][T24128] netlink: 'syz.2.4387': attribute type 14 has an invalid length. [ 1172.934791][T24133] netlink: 'syz.4.4388': attribute type 21 has an invalid length. [ 1173.010829][T24132] netlink: 'syz.1.4389': attribute type 27 has an invalid length. [ 1173.037478][T24132] netlink: 'syz.1.4389': attribute type 4 has an invalid length. [ 1173.051777][T24132] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4389'. [ 1173.140232][T24142] netlink: 'syz.4.4388': attribute type 21 has an invalid length. [ 1173.151721][T24144] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.4390'. [ 1173.161110][T24143] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.4390'. [ 1173.959143][T24151] netlink: 'syz.1.4392': attribute type 1 has an invalid length. [ 1174.002182][T24151] netlink: 'syz.1.4392': attribute type 1 has an invalid length. [ 1174.069590][T24151] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.4392'. [ 1174.816826][T24190] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1174.824729][T24190] #PF: supervisor instruction fetch in kernel mode [ 1174.831358][T24190] #PF: error_code(0x0010) - not-present page [ 1174.837639][T24190] PGD 1fa76067 P4D 1fa76067 PUD 0 [ 1174.842805][T24190] Oops: 0010 [#1] PREEMPT SMP KASAN [ 1174.848321][T24190] CPU: 1 PID: 24190 Comm: syz.3.4403 Not tainted syzkaller #0 [ 1174.855804][T24190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1174.865976][T24190] RIP: 0010:0x0 [ 1174.869740][T24190] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1174.877345][T24190] RSP: 0018:ffffc90003af7298 EFLAGS: 00010246 [ 1174.883627][T24190] RAX: 1ffffffff1658a77 RBX: 1ffff9200075ee64 RCX: 0000000000000000 [ 1174.891617][T24190] RDX: ffffc90003af7340 RSI: 0000000000000001 RDI: ffff888057210000 [ 1174.899698][T24190] RBP: ffffc90003af73b0 R08: ffff88805721003f R09: 1ffff1100ae42007 [ 1174.907945][T24190] R10: dffffc0000000000 R11: ffffed100ae42008 R12: ffffe8ffffd6bce0 [ 1174.915934][T24190] R13: ffffffff8b2c53b8 R14: 0000000000000000 R15: ffff888057210000 [ 1174.924109][T24190] FS: 00007f1d3cdfa6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1174.933068][T24190] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1174.939661][T24190] CR2: ffffffffffffffd6 CR3: 000000007e5da000 CR4: 00000000003506e0 [ 1174.947646][T24190] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1174.955748][T24190] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1174.963737][T24190] Call Trace: [ 1174.967021][T24190] [ 1174.969964][T24190] bond_xdp_xmit+0x31e/0x550 [ 1174.974628][T24190] ? bond_xdp_xmit+0x94/0x550 [ 1174.979406][T24190] ? bond_xdp+0x8c0/0x8c0 [ 1174.983744][T24190] ? perf_tp_event+0xa8e/0xc10 [ 1174.988544][T24190] bq_xmit_all+0xca9/0x1120 [ 1174.993370][T24190] ? perf_trace_preemptirq_template+0x268/0x320 [ 1174.999630][T24190] ? __dev_flush+0x1b0/0x1b0 [ 1175.004350][T24190] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1175.010544][T24190] ? lock_chain_count+0x20/0x20 [ 1175.015439][T24190] ? rcu_is_watching+0x11/0xa0 [ 1175.020231][T24190] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1175.026495][T24190] ? lockdep_hardirqs_on+0x94/0x140 [ 1175.031801][T24190] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1175.037983][T24190] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 1175.044159][T24190] ? rcu_read_lock_bh_held+0x76/0xf0 [ 1175.049453][T24190] ? rcu_read_lock_held+0x40/0x40 [ 1175.054576][T24190] bq_enqueue+0x338/0x3d0 [ 1175.058939][T24190] dev_map_enqueue_multi+0xf89/0x10f0 [ 1175.064420][T24190] ? dev_map_enqueue+0x330/0x330 [ 1175.069370][T24190] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 1175.075544][T24190] ? rcu_read_lock_held+0x40/0x40 [ 1175.080586][T24190] ? rcu_is_watching+0x11/0xa0 [ 1175.085457][T24190] xdp_do_redirect_frame+0x477/0x650 [ 1175.090820][T24190] bpf_test_run_xdp_live+0xa8b/0x1a90 [ 1175.096212][T24190] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 1175.101773][T24190] ? xdp_convert_md_to_buff+0x330/0x330 [ 1175.107370][T24190] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1175.113665][T24190] ? bpf_prog_test_run_xdp+0x6bd/0xf80 [ 1175.119245][T24190] bpf_prog_test_run_xdp+0x757/0xf80 [ 1175.124673][T24190] ? __lock_acquire+0x7c40/0x7c40 [ 1175.129840][T24190] ? dev_put+0x80/0x80 [ 1175.134186][T24190] ? dev_put+0x80/0x80 [ 1175.138438][T24190] bpf_prog_test_run+0x31c/0x390 [ 1175.143426][T24190] __sys_bpf+0x62b/0x780 [ 1175.147809][T24190] ? bpf_link_show_fdinfo+0x380/0x380 [ 1175.153239][T24190] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1175.159530][T24190] __x64_sys_bpf+0x78/0x90 [ 1175.164170][T24190] do_syscall_64+0x4c/0xa0 [ 1175.168873][T24190] ? clear_bhb_loop+0x60/0xb0 [ 1175.173749][T24190] ? clear_bhb_loop+0x60/0xb0 [ 1175.178441][T24190] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1175.184353][T24190] RIP: 0033:0x7f1d3bf9e159 [ 1175.188863][T24190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.208654][T24190] RSP: 002b:00007f1d3cdfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1175.217101][T24190] RAX: ffffffffffffffda RBX: 00007f1d3c225fa0 RCX: 00007f1d3bf9e159 [ 1175.225256][T24190] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1175.233416][T24190] RBP: 00007f1d3c03503b R08: 0000000000000000 R09: 0000000000000000 [ 1175.241483][T24190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1175.249462][T24190] R13: 00007f1d3c226038 R14: 00007f1d3c225fa0 R15: 00007ffe185efd88 [ 1175.257546][T24190] [ 1175.260662][T24190] Modules linked in: [ 1175.264562][T24190] CR2: 0000000000000000 [ 1175.268720][T24190] ---[ end trace 0000000000000000 ]--- [ 1175.274371][T24190] RIP: 0010:0x0 [ 1175.277853][T24190] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1175.285225][T24190] RSP: 0018:ffffc90003af7298 EFLAGS: 00010246 [ 1175.291298][T24190] RAX: 1ffffffff1658a77 RBX: 1ffff9200075ee64 RCX: 0000000000000000 [ 1175.299279][T24190] RDX: ffffc90003af7340 RSI: 0000000000000001 RDI: ffff888057210000 [ 1175.307261][T24190] RBP: ffffc90003af73b0 R08: ffff88805721003f R09: 1ffff1100ae42007 [ 1175.315242][T24190] R10: dffffc0000000000 R11: ffffed100ae42008 R12: ffffe8ffffd6bce0 [ 1175.323223][T24190] R13: ffffffff8b2c53b8 R14: 0000000000000000 R15: ffff888057210000 [ 1175.331204][T24190] FS: 00007f1d3cdfa6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1175.340228][T24190] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1175.346817][T24190] CR2: ffffffffffffffd6 CR3: 000000007e5da000 CR4: 00000000003506e0 [ 1175.354978][T24190] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1175.363130][T24190] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1175.371197][T24190] Kernel panic - not syncing: Fatal exception in interrupt [ 1175.378512][T24190] Kernel Offset: disabled [ 1175.382839][T24190] Rebooting in 86400 seconds..