last executing test programs: 4.326400007s ago: executing program 3 (id=23730): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70300"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8941, &(0x7f0000000080)) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x0, r1}, 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000001b00)=@nfc_llcp={0xa, 0x0, 0x2000000, 0x0, 0x0, 0x0, "18ea938b1092fe34ca1eeda8daa60a9abde305cbe1656b4d7ab1424dc694f28875f0cede8569287d775dfa00dcddf939cb9b95773506d96096728b8d71cb32"}, 0x80, 0x0}, 0x20000000) 3.864620535s ago: executing program 1 (id=23731): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af365040054", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) 3.412419713s ago: executing program 1 (id=23737): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x94) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x19, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x4, 0x6, &(0x7f0000000000)) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10, 0x2, 0x80000, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x5, &(0x7f0000000040), 0x4) r3 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x1a, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1", 0xa}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x14, 0x4, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000041000000410000000300000002000000000000240500000002000000010000000300000f0100000002000000ff070000ff07000002000000030000000300000003000000810000006da92d0da5ddfffeffffe20000000030000844945229603ec0462b3d538bf65c6f82e0426674ba78c718155eef019880c58e9f2890cd05c667f106fcb6787b41befcdb62d077d16657b06fea73b0e8c941dddf4ccea87aaf19e4effdefe99fd0b4f680621e9ec20f39f64cd69e7897f7e09f71e8ad0e277214b4f9d217a832688d18ef1d0d60aa55bc5531"], &(0x7f00000002c0)=""/149, 0x5f, 0x95, 0x1, 0x5}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000040)=r5, 0x4) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000003c0), 0x8}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 3.411636663s ago: executing program 3 (id=23739): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) 2.94726921s ago: executing program 1 (id=23743): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000060, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.946772611s ago: executing program 3 (id=23744): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r3 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 2.941674621s ago: executing program 0 (id=23753): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x94) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x19, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x4, 0x6, &(0x7f0000000000)) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10, 0x2, 0x80000, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x5, &(0x7f0000000040), 0x4) r3 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x1a, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1", 0xa}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x14, 0x4, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000041000000410000000300000002000000000000240500000002000000010000000300000f0100000002000000ff070000ff07000002000000030000000300000003000000810000006da92d0da5ddfffeffffe20000000030000844945229603ec0462b3d538bf65c6f82e0426674ba78c718155eef019880c58e9f2890cd05c667f106fcb6787b41befcdb62d077d16657b06fea73b0e8c941dddf4ccea87aaf19e4effdefe99fd0b4f680621e9ec20f39f64cd69e7897f7e09f71e8ad0e277214b4f9d217a832688d18ef1d0d60aa55bc5531"], &(0x7f00000002c0)=""/149, 0x5f, 0x95, 0x1, 0x5}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000040)=r5, 0x4) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000003c0), 0x8}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 2.556253587s ago: executing program 0 (id=23745): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000000, 0xc93}, 0x0, 0x0, 0xffffff08}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) r3 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$sock(r3, &(0x7f00000005c0)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, &(0x7f0000000200)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9111a04000a740100053582c137153e3702df0c", 0x23}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2, 0x0, 0x45}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) 2.555640947s ago: executing program 2 (id=23746): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000f6ff0000000000000003000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x6, 0x12, &(0x7f0000000200)=r2, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) close(r0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.numa_stat\x00', 0x26e1, 0x3a0ffffffff) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0xfdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r4, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) close(r0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x8848, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) syz_clone(0x400a080, &(0x7f00000005c0)="5eb1286efa58d1322cf664fdf5e8870ccaa61b85e6432800e1050a1e7e541d190f2a5b6ee9ce919860f5fa283eb2eda54c4f2da18eb3ece08ca3ab11506549038068b83fc6069249bde78c4ea395ca7896898ee6e8fd92ecd6fda1a07a96a541b26367a08da2dfe0edf54dd04e05146a10b41cbd9dd1876f0aa21a46c27846dcd39d4c2d02e48ed07ee04401d57df077dba1c2a857ca880c5e", 0x99, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="3d21648a46ec826208d157959deda1a28eabb608def0713aff26c3d4751e969948213699c44c8b5432c9b0fe2095729abf05d367e72394d3a5829cd49e47f3ef2ca4d068cf7610fe6c493c709b742822bd87b16291efdc0de5af") socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}, {&(0x7f0000000300)="92a469ecbd72d035d2496f7f62affa5257ad1df11400cf1ac3ec0a395c41ca878963fbd3f76a39358c638c1312845fb4833d33ec52a037f350816346275d53346d867efb192c6506b478818da13598095cbe29d1c146e63d13386acece1e9e1621c9886592719d2c6a3265b7c4ff7419ff1dfba56b8dcc08a610f30a0bd950632e55b1ca422800dc02cdd8de18bbb07b13d475f7c5fed66ce4321231d2ecc7d6caf737dde9bd666b0aaedc9af4fe583f", 0xb0}, {&(0x7f00000003c0)="7f1b102e8d4f44d3", 0x8}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4008054) 2.483425059s ago: executing program 1 (id=23748): perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) write$cgroup_devices(r4, &(0x7f0000000540)=ANY=[@ANYBLOB='b *:'], 0x9) 2.101880555s ago: executing program 4 (id=23749): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af365040054", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) 2.077757555s ago: executing program 0 (id=23761): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x4b, 0x0, 0x1300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x10080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xfffffffc, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_freezer_state(r1, &(0x7f0000000200), 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x200080c0) close(r6) ioctl$TUNSETOFFLOAD(r5, 0x40047440, 0xf0ff1f00000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x0, 0x20000000}, {0x0, 0x4}, {}, {0xffffffff}, {0xc}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}]}}, 0x0, 0x96}, 0x28) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000d0181f492e1ac2f4a917c87bd70ca9dda5d3391fca1cce675dd640af9ab78516c3f69d95165d741d806c61d56f4daef0ae8b27e230bb274b15a0fc03fbefef86eac73f3e0661bad2a8046ecd75be"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) socket$kcm(0xa, 0x2, 0x3a) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401040016000a00104006001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791647efc5102cd806742de248fcf790d823a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f4d360000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e18205e4acf30f918e30cacace81ed0bffece0b4", 0xd8}], 0x1}, 0x810) 1.905150668s ago: executing program 2 (id=23750): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000380)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.904497358s ago: executing program 3 (id=23751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r1 = getpid() r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000002c0)={0xffffffffffffffff, r2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x36, 0x0, 0x1, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r5 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x6, 0x6f, 0x2c, 0x6, 0x0, 0x7, 0x20d02, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x20, 0xb, 0x80000000, 0x8, 0x1, 0x4000000, 0xd28, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x908d, 0xe}, 0x7000, 0x2, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r6, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) perf_event_open(0x0, r1, 0xffffffffffffffff, r5, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8482c0000005e14060205cd00000e000a", 0x23}], 0x1}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x95) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x200000000}, 0x101000, 0x7, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe24b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) 1.659405962s ago: executing program 4 (id=23752): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x18, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x10020, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_UPDATE_CONST_STR(0x4, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07000006007c09e8fc55a10a0015000600142603600e120800020081000401a8000180f2ffffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 1.19834062s ago: executing program 4 (id=23755): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xc8}, 0x14002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.19696167s ago: executing program 2 (id=23756): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) 1.19082873s ago: executing program 0 (id=23757): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000f6ff0000000000000003000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x6, 0x12, &(0x7f0000000200)=r2, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) close(r0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.numa_stat\x00', 0x26e1, 0x3a0ffffffff) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0xfdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r4, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) close(r0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x8848, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) syz_clone(0x400a080, &(0x7f00000005c0)="5eb1286efa58d1322cf664fdf5e8870ccaa61b85e6432800e1050a1e7e541d190f2a5b6ee9ce919860f5fa283eb2eda54c4f2da18eb3ece08ca3ab11506549038068b83fc6069249bde78c4ea395ca7896898ee6e8fd92ecd6fda1a07a96a541b26367a08da2dfe0edf54dd04e05146a10b41cbd9dd1876f0aa21a46c27846dcd39d4c2d02e48ed07ee04401d57df077dba1c2a857ca880c5e", 0x99, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="3d21648a46ec826208d157959deda1a28eabb608def0713aff26c3d4751e969948213699c44c8b5432c9b0fe2095729abf05d367e72394d3a5829cd49e47f3ef2ca4d068cf7610fe6c493c709b742822bd87b16291efdc0de5af") socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}, {&(0x7f0000000300)="92a469ecbd72d035d2496f7f62affa5257ad1df11400cf1ac3ec0a395c41ca878963fbd3f76a39358c638c1312845fb4833d33ec52a037f350816346275d53346d867efb192c6506b478818da13598095cbe29d1c146e63d13386acece1e9e1621c9886592719d2c6a3265b7c4ff7419ff1dfba56b8dcc08a610f30a0bd950632e55b1ca422800dc02cdd8de18bbb07b13d475f7c5fed66ce4321231d2ecc7d6caf737dde9bd666b0aae", 0xaa}, {&(0x7f00000003c0)="7f1b102e8d4f44d3", 0x8}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4008054) 1.18766547s ago: executing program 3 (id=23758): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x94) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x19, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x4, 0x6, &(0x7f0000000000)) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10, 0x2, 0x80000, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x5, &(0x7f0000000040), 0x4) r3 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x1a, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1", 0xa}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x14, 0x4, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000041000000410000000300000002000000000000240500000002000000010000000300000f0100000002000000ff070000ff07000002000000030000000300000003000000810000006da92d0da5ddfffeffffe20000000030000844945229603ec0462b3d538bf65c6f82e0426674ba78c718155eef019880c58e9f2890cd05c667f106fcb6787b41befcdb62d077d16657b06fea73b0e8c941dddf4ccea87aaf19e4effdefe99fd0b4f680621e9ec20f39f64cd69e7897f7e09f71e8ad0e277214b4f9d217a832688d18ef1d0d60aa55bc5531"], &(0x7f00000002c0)=""/149, 0x5f, 0x95, 0x1, 0x5}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000040)=r5, 0x4) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000003c0), 0x8}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 1.035009103s ago: executing program 4 (id=23759): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, 0x0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200088c0) close(r3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 800.383066ms ago: executing program 2 (id=23760): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x6edf66a8ccaba64f) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write$cgroup_devices(r1, 0x0, 0x9) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/19, 0x13}, 0x40011013) 796.218127ms ago: executing program 1 (id=23771): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000440)}, 0x200a, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, 0x0, 0x12) syz_clone(0x2810880, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 760.632267ms ago: executing program 4 (id=23762): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000000, 0xc93}, 0x0, 0x0, 0xffffff08}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) r3 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$sock(r3, &(0x7f00000005c0)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, &(0x7f0000000200)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9111a04000a740100053582c137153e3702df0c", 0x23}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2, 0x0, 0x45}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) 614.315489ms ago: executing program 3 (id=23763): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000f6ff0000000000000003000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x6, 0x12, &(0x7f0000000200)=r2, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) close(r0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.numa_stat\x00', 0x26e1, 0x3a0ffffffff) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0xfdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r4, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) close(r0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x8848, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) syz_clone(0x400a080, &(0x7f00000005c0)="5eb1286efa58d1322cf664fdf5e8870ccaa61b85e6432800e1050a1e7e541d190f2a5b6ee9ce919860f5fa283eb2eda54c4f2da18eb3ece08ca3ab11506549038068b83fc6069249bde78c4ea395ca7896898ee6e8fd92ecd6fda1a07a96a541b26367a08da2dfe0edf54dd04e05146a10b41cbd9dd1876f0aa21a46c27846dcd39d4c2d02e48ed07ee04401d57df077dba1c2a857ca880c5e", 0x99, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="3d21648a46ec826208d157959deda1a28eabb608def0713aff26c3d4751e969948213699c44c8b5432c9b0fe2095729abf05d367e72394d3a5829cd49e47f3ef2ca4d068cf7610fe6c493c709b742822bd87b16291efdc0de5af") socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}, {&(0x7f0000000300)="92a469ecbd72d035d2496f7f62affa5257ad1df11400cf1ac3ec0a395c41ca878963fbd3f76a39358c638c1312845fb4833d33ec52a037f350816346275d53346d867efb192c6506b478818da13598095cbe29d1c146e63d13386acece1e9e1621c9886592719d2c6a3265b7c4ff7419ff1dfba56b8dcc08a610f30a0bd950632e55b1ca422800dc02cdd8de18bbb07b13d475f7c5fed66ce4321231d2ecc7d6caf737dde9bd666b0aaedc9af4fe583f", 0xb0}, {&(0x7f00000003c0)="7f1b102e8d4f44d3", 0x8}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4008054) 479.338592ms ago: executing program 1 (id=23764): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r3 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 451.250032ms ago: executing program 0 (id=23775): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x94) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x19, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x4, 0x6, &(0x7f0000000000)) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10, 0x2, 0x80000, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x5, &(0x7f0000000040), 0x4) r3 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x1a, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1", 0xa}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x14, 0x4, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000041000000410000000300000002000000000000240500000002000000010000000300000f0100000002000000ff070000ff07000002000000030000000300000003000000810000006da92d0da5ddfffeffffe20000000030000844945229603ec0462b3d538bf65c6f82e0426674ba78c718155eef019880c58e9f2890cd05c667f106fcb6787b41befcdb62d077d16657b06fea73b0e8c941dddf4ccea87aaf19e4effdefe99fd0b4f680621e9ec20f39f64cd69e7897f7e09f71e8ad0e277214b4f9d217a832688d18ef1d0d60aa55bc5531"], &(0x7f00000002c0)=""/149, 0x5f, 0x95, 0x1, 0x5}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000040)=r5, 0x4) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000003c0), 0x8}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 421.559453ms ago: executing program 4 (id=23776): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000f6ff0000000000000003000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x6, 0x12, &(0x7f0000000200)=r2, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) close(r0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.numa_stat\x00', 0x26e1, 0x3a0ffffffff) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0xfdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r4, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) close(r0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x8848, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) syz_clone(0x400a080, &(0x7f00000005c0)="5eb1286efa58d1322cf664fdf5e8870ccaa61b85e6432800e1050a1e7e541d190f2a5b6ee9ce919860f5fa283eb2eda54c4f2da18eb3ece08ca3ab11506549038068b83fc6069249bde78c4ea395ca7896898ee6e8fd92ecd6fda1a07a96a541b26367a08da2dfe0edf54dd04e05146a10b41cbd9dd1876f0aa21a46c27846dcd39d4c2d02e48ed07ee04401d57df077dba1c2a857ca880c5e", 0x99, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="3d21648a46ec826208d157959deda1a28eabb608def0713aff26c3d4751e969948213699c44c8b5432c9b0fe2095729abf05d367e72394d3a5829cd49e47f3ef2ca4d068cf7610fe6c493c709b742822bd87b16291efdc0de5af") socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}, {&(0x7f0000000300)="92a469ecbd72d035d2496f7f62affa5257ad1df11400cf1ac3ec0a395c41ca878963fbd3f76a39358c638c1312845fb4833d33ec52a037f350816346275d53346d867efb192c6506b478818da13598095cbe29d1c146e63d13386acece1e9e1621c9886592719d2c6a3265b7c4ff7419ff1dfba56b8dcc08a610f30a0bd950632e55b1ca422800dc02cdd8de18bbb07b13d475f7c5fed66ce4321231d2ecc7d6caf737dde9bd666b0aae", 0xaa}, {&(0x7f00000003c0)="7f1b102e8d4f44d3", 0x8}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4008054) 419.800943ms ago: executing program 2 (id=23765): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0xef, &(0x7f0000000580)=""/239, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x6001, 0x8000000000, 0x4, 0x6, 0x0, 0x3000000a, 0xfffc, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0xd) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000300)=ANY=[], 0x18}, 0x41) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x3c, r2}, 0x18) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@fallback=r1, 0x0, 0x0, 0xfffff0d6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@fallback=r0, r0, 0x37, 0x8, 0x0, @void, @value=r0, @void, @void, r5}, 0x20) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 75.124979ms ago: executing program 0 (id=23766): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x2a80, 0x0) ioctl$TUNATTACHFILTER(r0, 0x894c, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 0s ago: executing program 2 (id=23767): socket$kcm(0x29, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32, @ANYBLOB="0e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000bcce000300"/24], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x4008001) kernel console output (not intermixed with test programs): ad_image+0x400/0x400 [ 3051.449610][ T5308] sysfs_warn_dup+0x8a/0xa0 [ 3051.454138][ T5308] sysfs_do_create_link_sd+0xc0/0x110 [ 3051.459798][ T5308] device_add+0x7ed/0xfb0 [ 3051.464345][ T5308] wiphy_register+0x1e81/0x2c30 [ 3051.469735][ T5308] ? cfg80211_event_work+0x40/0x40 [ 3051.475039][ T5308] ? minstrel_ht_alloc+0x808/0x980 [ 3051.480275][ T5308] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3051.486919][ T5308] ieee80211_register_hw+0x2aa1/0x3af0 [ 3051.492898][ T5308] ? ieee80211_tasklet_handler+0x20/0x20 [ 3051.498908][ T5308] ? rcu_is_watching+0x11/0xa0 [ 3051.504260][ T5308] ? memset+0x1e/0x40 [ 3051.508688][ T5308] ? hrtimer_init+0x10c/0x220 [ 3051.513801][ T5308] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3051.520302][ T5308] hwsim_new_radio_nl+0xa6f/0xc40 [ 3051.525990][ T5308] genl_rcv_msg+0xcea/0xf90 [ 3051.530630][ T5308] ? genl_bind+0x380/0x380 [ 3051.535627][ T5308] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 3051.541369][ T5308] ? verify_lock_unused+0x140/0x140 [ 3051.547284][ T5308] ? perf_trace_lock+0xe4/0x390 [ 3051.552701][ T5308] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3051.559599][ T5308] netlink_rcv_skb+0x1f5/0x440 [ 3051.564740][ T5308] ? genl_bind+0x380/0x380 [ 3051.569629][ T5308] ? netlink_ack+0xb50/0xb50 [ 3051.574333][ T5308] ? __lock_acquire+0x7d10/0x7d10 [ 3051.579582][ T5308] ? down_read+0x1aa/0x2e0 [ 3051.584295][ T5308] genl_rcv+0x24/0x40 [ 3051.588326][ T5308] netlink_unicast+0x774/0x920 [ 3051.593713][ T5308] netlink_sendmsg+0x8ba/0xbe0 [ 3051.598937][ T5308] ? netlink_getsockopt+0x570/0x570 [ 3051.605838][ T5308] ? aa_sock_msg_perm+0x94/0x150 [ 3051.611789][ T5308] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3051.617630][ T5308] ? security_socket_sendmsg+0x7c/0xa0 [ 3051.624606][ T5308] ? netlink_getsockopt+0x570/0x570 [ 3051.630383][ T5308] ____sys_sendmsg+0x5b7/0x8f0 [ 3051.636086][ T5308] ? __sys_sendmsg_sock+0x30/0x30 [ 3051.641598][ T5308] ? import_iovec+0x6f/0xa0 [ 3051.646996][ T5308] ___sys_sendmsg+0x236/0x2e0 [ 3051.652049][ T5308] ? __sys_sendmsg+0x2a0/0x2a0 [ 3051.656922][ T5308] ? trace_event_raw_event_lock+0x270/0x270 [ 3051.663949][ T5308] __se_sys_sendmsg+0x1af/0x290 [ 3051.669477][ T5308] ? __x64_sys_sendmsg+0x80/0x80 [ 3051.674782][ T5308] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3051.681087][ T5308] ? lockdep_hardirqs_on+0x94/0x140 [ 3051.686807][ T5308] do_syscall_64+0x4c/0xa0 [ 3051.691429][ T5308] ? clear_bhb_loop+0x30/0x80 [ 3051.696399][ T5308] ? clear_bhb_loop+0x30/0x80 [ 3051.701270][ T5308] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3051.707448][ T5308] RIP: 0033:0x7fa821befdd9 [ 3051.712495][ T5308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3051.734976][ T5308] RSP: 002b:00007fa81fe49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3051.744160][ T5308] RAX: ffffffffffffffda RBX: 00007fa821e68fa0 RCX: 00007fa821befdd9 [ 3051.752162][ T5308] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 3051.760415][ T5308] RBP: 00007fa821c85d69 R08: 0000000000000000 R09: 0000000000000000 [ 3051.769154][ T5308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3051.777419][ T5308] R13: 00007fa821e69038 R14: 00007fa821e68fa0 R15: 00007ffe1c02a588 [ 3051.786049][ T5308] [ 3052.066594][T14193] syzkaller: port 1(erspan0) entered disabled state [ 3052.121744][T14193] device erspan0 left promiscuous mode [ 3052.170426][T14193] syzkaller: port 1(erspan0) entered disabled state [ 3052.380010][ T5338] device syzkaller0 entered promiscuous mode [ 3052.391265][ T5341] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.22678'. [ 3052.418127][ T5343] netlink: 'syz.0.22676': attribute type 10 has an invalid length. [ 3052.439628][ T5343] team0: Device xfrm0 is of different type [ 3052.837290][ T5347] netlink: 'syz.3.22679': attribute type 16 has an invalid length. [ 3052.924316][ T5347] netlink: 152 bytes leftover after parsing attributes in process `syz.3.22679'. [ 3053.222011][ T5369] netlink: 'syz.3.22697': attribute type 1 has an invalid length. [ 3053.312234][ T5369] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.22697'. [ 3053.544126][ T5376] netlink: 'syz.2.22698': attribute type 16 has an invalid length. [ 3053.606973][ T5376] netlink: 152 bytes leftover after parsing attributes in process `syz.2.22698'. [ 3053.821536][ T5379] netlink: 'syz.4.22690': attribute type 10 has an invalid length. [ 3053.992239][ T5378] netlink: 144452 bytes leftover after parsing attributes in process `syz.0.22689'. [ 3054.061123][ T5378] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3054.084093][ T5378] CPU: 1 PID: 5378 Comm: syz.0.22689 Not tainted syzkaller #0 [ 3054.092155][ T5378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3054.103056][ T5378] Call Trace: [ 3054.106558][ T5378] [ 3054.109787][ T5378] dump_stack_lvl+0x188/0x250 [ 3054.114749][ T5378] ? show_regs_print_info+0x20/0x20 [ 3054.120464][ T5378] ? load_image+0x400/0x400 [ 3054.125363][ T5378] sysfs_warn_dup+0x8a/0xa0 [ 3054.130340][ T5378] sysfs_do_create_link_sd+0xc0/0x110 [ 3054.136661][ T5378] device_add+0x7ed/0xfb0 [ 3054.142767][ T5378] wiphy_register+0x1e81/0x2c30 [ 3054.147908][ T5378] ? cfg80211_event_work+0x40/0x40 [ 3054.154027][ T5378] ? minstrel_ht_alloc+0x808/0x980 [ 3054.159697][ T5378] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3054.166750][ T5378] ieee80211_register_hw+0x2aa1/0x3af0 [ 3054.172555][ T5378] ? ieee80211_tasklet_handler+0x20/0x20 [ 3054.178897][ T5378] ? rcu_is_watching+0x11/0xa0 [ 3054.184504][ T5378] ? memset+0x1e/0x40 [ 3054.188782][ T5378] ? hrtimer_init+0x10c/0x220 [ 3054.193818][ T5378] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3054.200136][ T5378] hwsim_new_radio_nl+0xa6f/0xc40 [ 3054.205986][ T5378] genl_rcv_msg+0xcea/0xf90 [ 3054.210914][ T5378] ? genl_bind+0x380/0x380 [ 3054.215683][ T5378] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 3054.222359][ T5378] ? verify_lock_unused+0x140/0x140 [ 3054.229316][ T5378] ? dev_queue_xmit+0x20/0x20 [ 3054.234531][ T5378] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3054.242320][ T5378] netlink_rcv_skb+0x1f5/0x440 [ 3054.248323][ T5378] ? genl_bind+0x380/0x380 [ 3054.253423][ T5378] ? netlink_ack+0xb50/0xb50 [ 3054.258569][ T5378] ? __lock_acquire+0x7d10/0x7d10 [ 3054.264349][ T5378] ? down_read+0x1aa/0x2e0 [ 3054.269404][ T5378] genl_rcv+0x24/0x40 [ 3054.274217][ T5378] netlink_unicast+0x774/0x920 [ 3054.279323][ T5378] netlink_sendmsg+0x8ba/0xbe0 [ 3054.284723][ T5378] ? netlink_getsockopt+0x570/0x570 [ 3054.290593][ T5378] ? aa_sock_msg_perm+0x94/0x150 [ 3054.296127][ T5378] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3054.302309][ T5378] ? security_socket_sendmsg+0x7c/0xa0 [ 3054.308421][ T5378] ? netlink_getsockopt+0x570/0x570 [ 3054.314621][ T5378] ____sys_sendmsg+0x5b7/0x8f0 [ 3054.319776][ T5378] ? __sys_sendmsg_sock+0x30/0x30 [ 3054.325277][ T5378] ? import_iovec+0x6f/0xa0 [ 3054.331051][ T5378] ___sys_sendmsg+0x236/0x2e0 [ 3054.336355][ T5378] ? __sys_sendmsg+0x2a0/0x2a0 [ 3054.341644][ T5378] ? percpu_counter_add_batch+0x13b/0x160 [ 3054.347581][ T5378] __se_sys_sendmsg+0x1af/0x290 [ 3054.353489][ T5378] ? __x64_sys_sendmsg+0x80/0x80 [ 3054.358728][ T5378] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3054.366163][ T5378] ? lockdep_hardirqs_on+0x94/0x140 [ 3054.372023][ T5378] do_syscall_64+0x4c/0xa0 [ 3054.377177][ T5378] ? clear_bhb_loop+0x30/0x80 [ 3054.382698][ T5378] ? clear_bhb_loop+0x30/0x80 [ 3054.387788][ T5378] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3054.394516][ T5378] RIP: 0033:0x7f124b2f6dd9 [ 3054.399432][ T5378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3054.420476][ T5378] RSP: 002b:00007f1249550028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3054.429810][ T5378] RAX: ffffffffffffffda RBX: 00007f124b56ffa0 RCX: 00007f124b2f6dd9 [ 3054.438547][ T5378] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 3054.447309][ T5378] RBP: 00007f124b38cd69 R08: 0000000000000000 R09: 0000000000000000 [ 3054.455831][ T5378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3054.464223][ T5378] R13: 00007f124b570038 R14: 00007f124b56ffa0 R15: 00007ffd1f4b1df8 [ 3054.472410][ T5378] [ 3054.745929][ T5400] device syzkaller0 entered promiscuous mode [ 3056.005033][ T5420] netlink: 'syz.3.22705': attribute type 10 has an invalid length. [ 3056.506603][ T5434] netlink: 'syz.4.22713': attribute type 27 has an invalid length. [ 3056.541829][ T5434] netlink: 'syz.4.22713': attribute type 4 has an invalid length. [ 3056.618079][ T5434] netlink: 152 bytes leftover after parsing attributes in process `syz.4.22713'. [ 3056.628811][ T5436] netlink: 144452 bytes leftover after parsing attributes in process `syz.1.22710'. [ 3056.689938][ T5443] netlink: 'syz.3.22714': attribute type 10 has an invalid length. [ 3056.911368][ T5436] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 3057.220438][ T5454] netlink: 'syz.3.22719': attribute type 10 has an invalid length. [ 3057.248066][ T5454] netlink: 40 bytes leftover after parsing attributes in process `syz.3.22719'. [ 3057.560606][ T5469] netlink: 'syz.3.22724': attribute type 10 has an invalid length. [ 3057.785485][ T5475] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.22727'. [ 3058.093688][ T5486] netlink: 'syz.0.22731': attribute type 27 has an invalid length. [ 3058.117951][ T5486] netlink: 'syz.0.22731': attribute type 4 has an invalid length. [ 3058.127339][ T5486] netlink: 152 bytes leftover after parsing attributes in process `syz.0.22731'. [ 3058.188246][ T5484] netlink: 'syz.3.22729': attribute type 10 has an invalid length. [ 3058.421081][ T5506] IPv6: NLM_F_CREATE should be specified when creating new route [ 3058.460864][ T5506] netlink: 1 bytes leftover after parsing attributes in process `syz.0.22740'. [ 3058.486591][ T5501] netlink: 144452 bytes leftover after parsing attributes in process `syz.1.22737'. [ 3058.525774][ T5510] device syzkaller0 left promiscuous mode [ 3058.602543][ T5501] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3058.616557][ T5501] CPU: 0 PID: 5501 Comm: syz.1.22737 Not tainted syzkaller #0 [ 3058.624859][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3058.635979][ T5501] Call Trace: [ 3058.639712][ T5501] [ 3058.643347][ T5501] dump_stack_lvl+0x188/0x250 [ 3058.648546][ T5501] ? show_regs_print_info+0x20/0x20 [ 3058.653844][ T5501] ? load_image+0x400/0x400 [ 3058.658715][ T5501] sysfs_warn_dup+0x8a/0xa0 [ 3058.663509][ T5501] sysfs_do_create_link_sd+0xc0/0x110 [ 3058.669250][ T5501] device_add+0x7ed/0xfb0 [ 3058.673951][ T5501] wiphy_register+0x1e81/0x2c30 [ 3058.678940][ T5501] ? cfg80211_event_work+0x40/0x40 [ 3058.684491][ T5501] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3058.690857][ T5501] ieee80211_register_hw+0x2aa1/0x3af0 [ 3058.696837][ T5501] ? ieee80211_tasklet_handler+0x20/0x20 [ 3058.702828][ T5501] ? lockdep_hardirqs_on+0x94/0x140 [ 3058.708501][ T5501] ? rcu_is_watching+0x11/0xa0 [ 3058.713665][ T5501] ? memset+0x1e/0x40 [ 3058.718018][ T5501] ? hrtimer_init+0x10c/0x220 [ 3058.722797][ T5501] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3058.728757][ T5501] hwsim_new_radio_nl+0xa6f/0xc40 [ 3058.734063][ T5501] genl_rcv_msg+0xcea/0xf90 [ 3058.739026][ T5501] ? genl_bind+0x380/0x380 [ 3058.743906][ T5501] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3058.750438][ T5501] ? lock_chain_count+0x20/0x20 [ 3058.755395][ T5501] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3058.761742][ T5501] ? lockdep_hardirqs_on+0x94/0x140 [ 3058.767133][ T5501] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3058.773733][ T5501] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3058.780338][ T5501] ? lock_acquire+0x208/0x400 [ 3058.785206][ T5501] netlink_rcv_skb+0x1f5/0x440 [ 3058.790352][ T5501] ? genl_bind+0x380/0x380 [ 3058.794952][ T5501] ? netlink_ack+0xb50/0xb50 [ 3058.799819][ T5501] ? lockdep_hardirqs_on+0x94/0x140 [ 3058.805305][ T5501] ? down_read+0x1aa/0x2e0 [ 3058.809837][ T5501] genl_rcv+0x24/0x40 [ 3058.813914][ T5501] netlink_unicast+0x774/0x920 [ 3058.818880][ T5501] netlink_sendmsg+0x8ba/0xbe0 [ 3058.824116][ T5501] ? lockdep_hardirqs_on+0x94/0x140 [ 3058.829408][ T5501] ? netlink_getsockopt+0x570/0x570 [ 3058.834721][ T5501] ? netlink_getsockopt+0x570/0x570 [ 3058.840496][ T5501] ? netlink_getsockopt+0x570/0x570 [ 3058.845929][ T5501] ____sys_sendmsg+0x5b7/0x8f0 [ 3058.850743][ T5501] ? __sys_sendmsg_sock+0x30/0x30 [ 3058.856142][ T5501] ? import_iovec+0x6f/0xa0 [ 3058.860919][ T5501] ___sys_sendmsg+0x236/0x2e0 [ 3058.866044][ T5501] ? __sys_sendmsg+0x2a0/0x2a0 [ 3058.871120][ T5501] ? ktime_get_real_ts64+0x440/0x440 [ 3058.876457][ T5501] __se_sys_sendmsg+0x1af/0x290 [ 3058.882245][ T5501] ? __x64_sys_sendmsg+0x80/0x80 [ 3058.887560][ T5501] ? lockdep_hardirqs_on+0x94/0x140 [ 3058.892794][ T5501] do_syscall_64+0x4c/0xa0 [ 3058.897568][ T5501] ? clear_bhb_loop+0x30/0x80 [ 3058.902343][ T5501] ? clear_bhb_loop+0x30/0x80 [ 3058.907335][ T5501] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3058.913551][ T5501] RIP: 0033:0x7fb40b099dd9 [ 3058.918337][ T5501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3058.938973][ T5501] RSP: 002b:00007fb4092f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3058.948119][ T5501] RAX: ffffffffffffffda RBX: 00007fb40b312fa0 RCX: 00007fb40b099dd9 [ 3058.956550][ T5501] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 3058.964973][ T5501] RBP: 00007fb40b12fd69 R08: 0000000000000000 R09: 0000000000000000 [ 3058.973308][ T5501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3058.981713][ T5501] R13: 00007fb40b313038 R14: 00007fb40b312fa0 R15: 00007ffff9f88048 [ 3058.990316][ T5501] [ 3059.121699][ T5516] netlink: 'syz.0.22755': attribute type 10 has an invalid length. [ 3059.174088][ T5516] bond0: (slave bond_slave_0): Releasing backup interface [ 3059.468581][T14193] nr0: port 1(hsr0) entered disabled state [ 3059.506274][T14193] device hsr_slave_0 left promiscuous mode [ 3061.041841][ T5527] netlink: 'syz.4.22747': attribute type 27 has an invalid length. [ 3061.051820][ T5527] netlink: 'syz.4.22747': attribute type 4 has an invalid length. [ 3061.060480][ T5527] netlink: 152 bytes leftover after parsing attributes in process `syz.4.22747'. [ 3061.078137][ T5535] netlink: 'syz.0.22750': attribute type 27 has an invalid length. [ 3061.095983][ T5535] netlink: 'syz.0.22750': attribute type 4 has an invalid length. [ 3061.105223][ T5535] netlink: 152 bytes leftover after parsing attributes in process `syz.0.22750'. [ 3061.156544][ T5555] device syzkaller0 left promiscuous mode [ 3061.485918][ T5572] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.22763'. [ 3061.531582][ T5564] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3061.550882][ T5564] CPU: 1 PID: 5564 Comm: syz.4.22761 Not tainted syzkaller #0 [ 3061.559151][ T5564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3061.569512][ T5564] Call Trace: [ 3061.573022][ T5564] [ 3061.576327][ T5564] dump_stack_lvl+0x188/0x250 [ 3061.581381][ T5564] ? show_regs_print_info+0x20/0x20 [ 3061.586962][ T5564] ? load_image+0x400/0x400 [ 3061.591604][ T5564] sysfs_warn_dup+0x8a/0xa0 [ 3061.596309][ T5564] sysfs_do_create_link_sd+0xc0/0x110 [ 3061.602409][ T5564] device_add+0x7ed/0xfb0 [ 3061.607412][ T5564] wiphy_register+0x1e81/0x2c30 [ 3061.612385][ T5564] ? cfg80211_event_work+0x40/0x40 [ 3061.618232][ T5564] ? minstrel_ht_alloc+0x808/0x980 [ 3061.623867][ T5564] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3061.630223][ T5564] ieee80211_register_hw+0x2aa1/0x3af0 [ 3061.636308][ T5564] ? ieee80211_tasklet_handler+0x20/0x20 [ 3061.642941][ T5564] ? rcu_is_watching+0x11/0xa0 [ 3061.648016][ T5564] ? memset+0x1e/0x40 [ 3061.652170][ T5564] ? hrtimer_init+0x10c/0x220 [ 3061.657826][ T5564] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3061.663708][ T5564] hwsim_new_radio_nl+0xa6f/0xc40 [ 3061.668974][ T5564] genl_rcv_msg+0xcea/0xf90 [ 3061.673696][ T5564] ? lock_chain_count+0x20/0x20 [ 3061.678700][ T5564] ? genl_bind+0x380/0x380 [ 3061.683387][ T5564] ? verify_lock_unused+0x140/0x140 [ 3061.689036][ T5564] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 3061.695747][ T5564] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3061.702469][ T5564] netlink_rcv_skb+0x1f5/0x440 [ 3061.707943][ T5564] ? genl_bind+0x380/0x380 [ 3061.712429][ T5564] ? netlink_ack+0xb50/0xb50 [ 3061.717132][ T5564] ? __lock_acquire+0x7d10/0x7d10 [ 3061.722616][ T5564] ? down_read+0x1aa/0x2e0 [ 3061.727388][ T5564] genl_rcv+0x24/0x40 [ 3061.731724][ T5564] netlink_unicast+0x774/0x920 [ 3061.736799][ T5564] netlink_sendmsg+0x8ba/0xbe0 [ 3061.741671][ T5564] ? netlink_getsockopt+0x570/0x570 [ 3061.747322][ T5564] ? aa_sock_msg_perm+0x94/0x150 [ 3061.752270][ T5564] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3061.757839][ T5564] ? security_socket_sendmsg+0x7c/0xa0 [ 3061.763478][ T5564] ? netlink_getsockopt+0x570/0x570 [ 3061.768706][ T5564] ____sys_sendmsg+0x5b7/0x8f0 [ 3061.773762][ T5564] ? __sys_sendmsg_sock+0x30/0x30 [ 3061.778891][ T5564] ? import_iovec+0x6f/0xa0 [ 3061.783418][ T5564] ___sys_sendmsg+0x236/0x2e0 [ 3061.788298][ T5564] ? __sys_sendmsg+0x2a0/0x2a0 [ 3061.793104][ T5564] __se_sys_sendmsg+0x1af/0x290 [ 3061.798181][ T5564] ? __x64_sys_sendmsg+0x80/0x80 [ 3061.803412][ T5564] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3061.810300][ T5564] ? lockdep_hardirqs_on+0x94/0x140 [ 3061.815768][ T5564] do_syscall_64+0x4c/0xa0 [ 3061.820577][ T5564] ? clear_bhb_loop+0x30/0x80 [ 3061.825474][ T5564] ? clear_bhb_loop+0x30/0x80 [ 3061.830436][ T5564] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3061.836519][ T5564] RIP: 0033:0x7fe9b1b06dd9 [ 3061.841119][ T5564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3061.861939][ T5564] RSP: 002b:00007fe9afd60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3061.871700][ T5564] RAX: ffffffffffffffda RBX: 00007fe9b1d7ffa0 RCX: 00007fe9b1b06dd9 [ 3061.880527][ T5564] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 3061.889251][ T5564] RBP: 00007fe9b1b9cd69 R08: 0000000000000000 R09: 0000000000000000 [ 3061.898218][ T5564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3061.906742][ T5564] R13: 00007fe9b1d80038 R14: 00007fe9b1d7ffa0 R15: 00007ffed6487828 [ 3061.915308][ T5564] [ 3061.990398][ T5567] netlink: 'syz.0.22762': attribute type 27 has an invalid length. [ 3062.012922][ T5567] netlink: 'syz.0.22762': attribute type 4 has an invalid length. [ 3062.043034][ T5567] __nla_validate_parse: 1 callbacks suppressed [ 3062.043075][ T5567] netlink: 152 bytes leftover after parsing attributes in process `syz.0.22762'. [ 3062.153897][ T5581] netlink: 'syz.2.22766': attribute type 27 has an invalid length. [ 3062.164612][ T5581] netlink: 'syz.2.22766': attribute type 4 has an invalid length. [ 3062.202424][ T5581] netlink: 152 bytes leftover after parsing attributes in process `syz.2.22766'. [ 3062.684937][ T5599] netlink: 'syz.4.22772': attribute type 16 has an invalid length. [ 3062.727869][ T5599] netlink: 152 bytes leftover after parsing attributes in process `syz.4.22772'. [ 3062.768642][ T5600] IPv6: NLM_F_CREATE should be specified when creating new route [ 3062.805790][ T5600] netlink: 1 bytes leftover after parsing attributes in process `syz.3.22773'. [ 3063.026653][ T5607] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.22776'. [ 3063.144790][ T5614] netlink: 'syz.0.22779': attribute type 13 has an invalid length. [ 3063.174020][ T5614] netlink: 172 bytes leftover after parsing attributes in process `syz.0.22779'. [ 3063.403806][ T5614] erspan0: refused to change device tx_queue_len [ 3063.420359][ T5611] netlink: 152 bytes leftover after parsing attributes in process `syz.3.22777'. [ 3063.462652][ T5618] netlink: 144452 bytes leftover after parsing attributes in process `syz.2.22781'. [ 3063.488670][ T5618] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3063.497958][ T5618] CPU: 1 PID: 5618 Comm: syz.2.22781 Not tainted syzkaller #0 [ 3063.505552][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3063.516679][ T5618] Call Trace: [ 3063.520235][ T5618] [ 3063.523383][ T5618] dump_stack_lvl+0x188/0x250 [ 3063.528293][ T5618] ? show_regs_print_info+0x20/0x20 [ 3063.534470][ T5618] ? load_image+0x400/0x400 [ 3063.539196][ T5618] sysfs_warn_dup+0x8a/0xa0 [ 3063.544232][ T5618] sysfs_do_create_link_sd+0xc0/0x110 [ 3063.550668][ T5618] device_add+0x7ed/0xfb0 [ 3063.555770][ T5618] wiphy_register+0x1e81/0x2c30 [ 3063.561297][ T5618] ? cfg80211_event_work+0x40/0x40 [ 3063.567173][ T5618] ? minstrel_ht_alloc+0x808/0x980 [ 3063.572517][ T5618] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3063.578731][ T5618] ieee80211_register_hw+0x2aa1/0x3af0 [ 3063.584502][ T5618] ? ieee80211_tasklet_handler+0x20/0x20 [ 3063.590619][ T5618] ? rcu_is_watching+0x11/0xa0 [ 3063.595711][ T5618] ? memset+0x1e/0x40 [ 3063.600072][ T5618] ? hrtimer_init+0x10c/0x220 [ 3063.605307][ T5618] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3063.611493][ T5618] hwsim_new_radio_nl+0xa6f/0xc40 [ 3063.616687][ T5618] genl_rcv_msg+0xcea/0xf90 [ 3063.621337][ T5618] ? lock_chain_count+0x20/0x20 [ 3063.626704][ T5618] ? genl_bind+0x380/0x380 [ 3063.631361][ T5618] ? verify_lock_unused+0x140/0x140 [ 3063.637393][ T5618] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 3063.644895][ T5618] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3063.652500][ T5618] netlink_rcv_skb+0x1f5/0x440 [ 3063.657665][ T5618] ? genl_bind+0x380/0x380 [ 3063.662655][ T5618] ? netlink_ack+0xb50/0xb50 [ 3063.667615][ T5618] ? __lock_acquire+0x7d10/0x7d10 [ 3063.672679][ T5618] ? down_read+0x1aa/0x2e0 [ 3063.677153][ T5618] genl_rcv+0x24/0x40 [ 3063.681448][ T5618] netlink_unicast+0x774/0x920 [ 3063.686449][ T5618] netlink_sendmsg+0x8ba/0xbe0 [ 3063.691979][ T5618] ? netlink_getsockopt+0x570/0x570 [ 3063.697665][ T5618] ? aa_sock_msg_perm+0x94/0x150 [ 3063.702895][ T5618] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3063.708531][ T5618] ? security_socket_sendmsg+0x7c/0xa0 [ 3063.714153][ T5618] ? netlink_getsockopt+0x570/0x570 [ 3063.719749][ T5618] ____sys_sendmsg+0x5b7/0x8f0 [ 3063.724572][ T5618] ? __sys_sendmsg_sock+0x30/0x30 [ 3063.730007][ T5618] ? import_iovec+0x6f/0xa0 [ 3063.734916][ T5618] ___sys_sendmsg+0x236/0x2e0 [ 3063.739944][ T5618] ? __sys_sendmsg+0x2a0/0x2a0 [ 3063.745172][ T5618] ? ktime_get_real_ts64+0x440/0x440 [ 3063.751029][ T5618] __se_sys_sendmsg+0x1af/0x290 [ 3063.756050][ T5618] ? __x64_sys_sendmsg+0x80/0x80 [ 3063.761031][ T5618] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3063.768225][ T5618] ? lockdep_hardirqs_on+0x94/0x140 [ 3063.773803][ T5618] do_syscall_64+0x4c/0xa0 [ 3063.778688][ T5618] ? clear_bhb_loop+0x30/0x80 [ 3063.783568][ T5618] ? clear_bhb_loop+0x30/0x80 [ 3063.788505][ T5618] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3063.794421][ T5618] RIP: 0033:0x7fc113a7bdd9 [ 3063.799025][ T5618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3063.819381][ T5618] RSP: 002b:00007fc111cd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3063.828137][ T5618] RAX: ffffffffffffffda RBX: 00007fc113cf4fa0 RCX: 00007fc113a7bdd9 [ 3063.836563][ T5618] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 3063.844822][ T5618] RBP: 00007fc113b11d69 R08: 0000000000000000 R09: 0000000000000000 [ 3063.853582][ T5618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3063.862007][ T5618] R13: 00007fc113cf5038 R14: 00007fc113cf4fa0 R15: 00007ffc37c9a628 [ 3063.870532][ T5618] [ 3063.951298][ T5627] netlink: 152 bytes leftover after parsing attributes in process `syz.4.22784'. [ 3064.374874][ T5651] netlink: 152 bytes leftover after parsing attributes in process `syz.4.22790'. [ 3065.762089][ T5682] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3065.778348][ T5682] CPU: 0 PID: 5682 Comm: syz.4.22801 Not tainted syzkaller #0 [ 3065.786274][ T5682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3065.796717][ T5682] Call Trace: [ 3065.800199][ T5682] [ 3065.803280][ T5682] dump_stack_lvl+0x188/0x250 [ 3065.808179][ T5682] ? show_regs_print_info+0x20/0x20 [ 3065.813587][ T5682] ? load_image+0x400/0x400 [ 3065.818591][ T5682] sysfs_warn_dup+0x8a/0xa0 [ 3065.823398][ T5682] sysfs_do_create_link_sd+0xc0/0x110 [ 3065.829000][ T5682] device_add+0x7ed/0xfb0 [ 3065.833641][ T5682] wiphy_register+0x1e81/0x2c30 [ 3065.838883][ T5682] ? cfg80211_event_work+0x40/0x40 [ 3065.844110][ T5682] ? minstrel_ht_alloc+0x808/0x980 [ 3065.850217][ T5682] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3065.858199][ T5682] ieee80211_register_hw+0x2aa1/0x3af0 [ 3065.864184][ T5682] ? ieee80211_tasklet_handler+0x20/0x20 [ 3065.870881][ T5682] ? rcu_is_watching+0x11/0xa0 [ 3065.875964][ T5682] ? memset+0x1e/0x40 [ 3065.880246][ T5682] ? hrtimer_init+0x10c/0x220 [ 3065.885297][ T5682] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3065.891512][ T5682] hwsim_new_radio_nl+0xa6f/0xc40 [ 3065.897017][ T5682] genl_rcv_msg+0xcea/0xf90 [ 3065.901905][ T5682] ? genl_bind+0x380/0x380 [ 3065.906446][ T5682] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 3065.912044][ T5682] ? verify_lock_unused+0x140/0x140 [ 3065.917463][ T5682] ? dev_queue_xmit+0x20/0x20 [ 3065.922380][ T5682] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3065.929299][ T5682] netlink_rcv_skb+0x1f5/0x440 [ 3065.934540][ T5682] ? genl_bind+0x380/0x380 [ 3065.939424][ T5682] ? netlink_ack+0xb50/0xb50 [ 3065.944635][ T5682] ? __lock_acquire+0x7d10/0x7d10 [ 3065.949949][ T5682] ? down_read+0x1aa/0x2e0 [ 3065.954560][ T5682] genl_rcv+0x24/0x40 [ 3065.959185][ T5682] netlink_unicast+0x774/0x920 [ 3065.964367][ T5682] netlink_sendmsg+0x8ba/0xbe0 [ 3065.969400][ T5682] ? netlink_getsockopt+0x570/0x570 [ 3065.974893][ T5682] ? aa_sock_msg_perm+0x94/0x150 [ 3065.979937][ T5682] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3065.985773][ T5682] ? security_socket_sendmsg+0x7c/0xa0 [ 3065.991551][ T5682] ? netlink_getsockopt+0x570/0x570 [ 3065.997062][ T5682] ____sys_sendmsg+0x5b7/0x8f0 [ 3066.002272][ T5682] ? __sys_sendmsg_sock+0x30/0x30 [ 3066.007779][ T5682] ? import_iovec+0x6f/0xa0 [ 3066.012496][ T5682] ___sys_sendmsg+0x236/0x2e0 [ 3066.017478][ T5682] ? __sys_sendmsg+0x2a0/0x2a0 [ 3066.022845][ T5682] __se_sys_sendmsg+0x1af/0x290 [ 3066.027969][ T5682] ? __x64_sys_sendmsg+0x80/0x80 [ 3066.033019][ T5682] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3066.039409][ T5682] ? lockdep_hardirqs_on+0x94/0x140 [ 3066.045000][ T5682] do_syscall_64+0x4c/0xa0 [ 3066.049784][ T5682] ? clear_bhb_loop+0x30/0x80 [ 3066.054742][ T5682] ? clear_bhb_loop+0x30/0x80 [ 3066.059540][ T5682] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3066.065453][ T5682] RIP: 0033:0x7fe9b1b06dd9 [ 3066.070429][ T5682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3066.091903][ T5682] RSP: 002b:00007fe9afd60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3066.100879][ T5682] RAX: ffffffffffffffda RBX: 00007fe9b1d7ffa0 RCX: 00007fe9b1b06dd9 [ 3066.109848][ T5682] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 3066.119992][ T5682] RBP: 00007fe9b1b9cd69 R08: 0000000000000000 R09: 0000000000000000 [ 3066.128259][ T5682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3066.136612][ T5682] R13: 00007fe9b1d80038 R14: 00007fe9b1d7ffa0 R15: 00007ffed6487828 [ 3066.145327][ T5682] [ 3066.240153][ T5693] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 3066.896053][ T5708] validate_nla: 7 callbacks suppressed [ 3066.896077][ T5708] netlink: 'syz.2.22807': attribute type 16 has an invalid length. [ 3067.419263][ T5708] __nla_validate_parse: 3 callbacks suppressed [ 3067.419286][ T5708] netlink: 152 bytes leftover after parsing attributes in process `syz.2.22807'. [ 3068.205306][ T5730] netlink: 'syz.1.22814': attribute type 16 has an invalid length. [ 3068.253628][ T5730] netlink: 152 bytes leftover after parsing attributes in process `syz.1.22814'. [ 3068.570211][ T5735] netlink: 'syz.2.22817': attribute type 1 has an invalid length. [ 3068.628145][ T5735] netlink: 'syz.2.22817': attribute type 4 has an invalid length. [ 3068.677828][ T5735] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.22817'. [ 3068.807018][ T5745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22822'. [ 3068.827632][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22822'. [ 3068.870937][ T5745] netlink: 2 bytes leftover after parsing attributes in process `syz.2.22822'. [ 3068.894946][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22822'. [ 3068.925187][ T5745] netlink: 2 bytes leftover after parsing attributes in process `syz.2.22822'. [ 3069.000694][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22822'. [ 3069.076127][ T5745] netlink: 2 bytes leftover after parsing attributes in process `syz.2.22822'. [ 3069.226518][ T5756] netlink: 'syz.1.22827': attribute type 27 has an invalid length. [ 3069.251344][ T5756] netlink: 'syz.1.22827': attribute type 4 has an invalid length. [ 3069.886385][ T5760] netlink: 'syz.0.22828': attribute type 27 has an invalid length. [ 3069.916365][ T5760] netlink: 'syz.0.22828': attribute type 4 has an invalid length. [ 3070.923652][ T5787] netlink: 'syz.1.22834': attribute type 16 has an invalid length. [ 3072.157426][ T5799] netlink: 'syz.0.22839': attribute type 10 has an invalid length. [ 3072.390788][ T5811] netlink: 'syz.1.22842': attribute type 27 has an invalid length. [ 3072.410464][ T5811] netlink: 'syz.1.22842': attribute type 4 has an invalid length. [ 3072.428222][ T5811] __nla_validate_parse: 4 callbacks suppressed [ 3072.428243][ T5811] netlink: 152 bytes leftover after parsing attributes in process `syz.1.22842'. [ 3072.533560][ T5814] netlink: 'syz.4.22845': attribute type 27 has an invalid length. [ 3072.555933][ T5814] netlink: 'syz.4.22845': attribute type 4 has an invalid length. [ 3072.580365][ T5814] netlink: 152 bytes leftover after parsing attributes in process `syz.4.22845'. [ 3073.694292][ T5837] netlink: 'syz.4.22852': attribute type 1 has an invalid length. [ 3073.726285][ T5837] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.22852'. [ 3073.990996][ T5841] netlink: 'syz.3.22853': attribute type 16 has an invalid length. [ 3074.074425][ T5841] netlink: 152 bytes leftover after parsing attributes in process `syz.3.22853'. [ 3074.219229][ T5844] netlink: 'syz.1.22854': attribute type 16 has an invalid length. [ 3074.320890][ T5844] netlink: 152 bytes leftover after parsing attributes in process `syz.1.22854'. [ 3074.620995][ T5855] netlink: 'syz.1.22858': attribute type 10 has an invalid length. [ 3074.743993][ T5855] bond0: (slave bond_slave_0): Releasing backup interface [ 3075.437754][ T5872] netlink: 'syz.4.22862': attribute type 27 has an invalid length. [ 3075.479549][ T5872] netlink: 152 bytes leftover after parsing attributes in process `syz.4.22862'. [ 3075.593539][ T5870] device syzkaller0 entered promiscuous mode [ 3075.821596][ T5881] netlink: 152 bytes leftover after parsing attributes in process `syz.1.22863'. [ 3075.865372][ T5894] netlink: 152 bytes leftover after parsing attributes in process `syz.4.22865'. [ 3076.414413][ T5902] netlink: 152 bytes leftover after parsing attributes in process `syz.3.22869'. [ 3076.671805][ T5905] netlink: 152 bytes leftover after parsing attributes in process `syz.1.22870'. [ 3077.314435][ T5927] validate_nla: 7 callbacks suppressed [ 3077.314473][ T5927] netlink: 'syz.0.22879': attribute type 10 has an invalid length. [ 3077.346482][ T5922] netlink: 'syz.4.22878': attribute type 27 has an invalid length. [ 3077.377306][ T5922] netlink: 'syz.4.22878': attribute type 4 has an invalid length. [ 3077.628982][ T5934] netlink: 'syz.2.22881': attribute type 27 has an invalid length. [ 3077.642061][ T5934] netlink: 'syz.2.22881': attribute type 4 has an invalid length. [ 3077.651922][ T5934] __nla_validate_parse: 1 callbacks suppressed [ 3077.651940][ T5934] netlink: 152 bytes leftover after parsing attributes in process `syz.2.22881'. [ 3078.366887][ T5957] netlink: 'syz.4.22886': attribute type 16 has an invalid length. [ 3078.479241][ T5957] netlink: 152 bytes leftover after parsing attributes in process `syz.4.22886'. [ 3079.244812][ T5971] netlink: 'syz.3.22887': attribute type 16 has an invalid length. [ 3079.383304][ T5971] netlink: 152 bytes leftover after parsing attributes in process `syz.3.22887'. [ 3079.637332][ T5978] netlink: 'syz.0.22894': attribute type 10 has an invalid length. [ 3079.666771][ T5980] netlink: 'syz.4.22893': attribute type 27 has an invalid length. [ 3079.698768][ T5980] netlink: 'syz.4.22893': attribute type 4 has an invalid length. [ 3079.712993][ T5980] netlink: 152 bytes leftover after parsing attributes in process `syz.4.22893'. [ 3079.777876][ T5982] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.22895'. [ 3080.035475][ T5991] netlink: 152 bytes leftover after parsing attributes in process `syz.2.22896'. [ 3080.921005][ T6000] device syzkaller0 entered promiscuous mode [ 3080.986307][ T5994] netlink: 152 bytes leftover after parsing attributes in process `syz.4.22899'. [ 3081.674893][ T6025] netlink: 152 bytes leftover after parsing attributes in process `syz.4.22907'. [ 3081.760848][ T6024] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.22908'. [ 3082.428798][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.435523][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.557076][ T6030] validate_nla: 5 callbacks suppressed [ 3082.557149][ T6030] netlink: 'syz.3.22910': attribute type 10 has an invalid length. [ 3082.691507][ T6027] netlink: 'syz.1.22909': attribute type 27 has an invalid length. [ 3082.747976][ T6027] netlink: 'syz.1.22909': attribute type 4 has an invalid length. [ 3082.758065][ T6027] netlink: 152 bytes leftover after parsing attributes in process `syz.1.22909'. [ 3083.650064][ T6052] netlink: 'syz.0.22915': attribute type 27 has an invalid length. [ 3083.700789][ T6052] netlink: 'syz.0.22915': attribute type 4 has an invalid length. [ 3083.748000][ T6052] netlink: 152 bytes leftover after parsing attributes in process `syz.0.22915'. [ 3083.788899][ T6045] netlink: 'syz.3.22914': attribute type 27 has an invalid length. [ 3083.816384][ T6045] netlink: 'syz.3.22914': attribute type 4 has an invalid length. [ 3083.827164][ T6045] netlink: 152 bytes leftover after parsing attributes in process `syz.3.22914'. [ 3084.042127][ T6064] device syzkaller0 entered promiscuous mode [ 3084.142491][ T6078] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.22921'. [ 3084.443123][ T6080] netlink: 'syz.3.22923': attribute type 16 has an invalid length. [ 3084.570969][ T6080] netlink: 152 bytes leftover after parsing attributes in process `syz.3.22923'. [ 3084.601683][ T6085] netlink: 'syz.0.22924': attribute type 10 has an invalid length. [ 3084.956496][ T6096] netlink: 'syz.0.22928': attribute type 16 has an invalid length. [ 3084.977983][ T6096] netlink: 152 bytes leftover after parsing attributes in process `syz.0.22928'. [ 3085.143793][ T6106] netlink: 152 bytes leftover after parsing attributes in process `syz.4.22929'. [ 3085.206049][ T6107] netlink: 152 bytes leftover after parsing attributes in process `syz.1.22930'. [ 3085.598891][ T6117] netlink: 152 bytes leftover after parsing attributes in process `syz.0.22942'. [ 3085.861516][ T6124] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.22934'. [ 3087.778965][ T6158] validate_nla: 11 callbacks suppressed [ 3087.778987][ T6158] netlink: 'syz.0.22947': attribute type 27 has an invalid length. [ 3087.841101][ T6158] netlink: 'syz.0.22947': attribute type 4 has an invalid length. [ 3087.854514][ T6158] __nla_validate_parse: 4 callbacks suppressed [ 3087.854535][ T6158] netlink: 152 bytes leftover after parsing attributes in process `syz.0.22947'. [ 3088.013472][ T6166] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22950'. [ 3088.209448][ T6173] netlink: 'syz.2.22952': attribute type 10 has an invalid length. [ 3088.562522][ T6182] netlink: 'syz.0.22956': attribute type 16 has an invalid length. [ 3088.678896][ T6182] netlink: 152 bytes leftover after parsing attributes in process `syz.0.22956'. [ 3089.204052][ T6184] netlink: 'syz.3.22957': attribute type 27 has an invalid length. [ 3089.373381][ T6184] netlink: 'syz.3.22957': attribute type 4 has an invalid length. [ 3089.398991][ T6184] netlink: 152 bytes leftover after parsing attributes in process `syz.3.22957'. [ 3089.797283][ T6204] netlink: 'syz.4.22963': attribute type 27 has an invalid length. [ 3089.813451][ T6204] netlink: 'syz.4.22963': attribute type 4 has an invalid length. [ 3089.845385][ T6204] netlink: 152 bytes leftover after parsing attributes in process `syz.4.22963'. [ 3090.465724][ T6222] netlink: 'syz.0.22968': attribute type 10 has an invalid length. [ 3090.509603][ T6219] netlink: 147988 bytes leftover after parsing attributes in process `syz.4.22967'. [ 3090.582109][ T6219] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3090.615808][ T6219] CPU: 1 PID: 6219 Comm: syz.4.22967 Not tainted syzkaller #0 [ 3090.624436][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3090.637028][ T6219] Call Trace: [ 3090.640526][ T6219] [ 3090.643891][ T6219] dump_stack_lvl+0x188/0x250 [ 3090.649285][ T6219] ? show_regs_print_info+0x20/0x20 [ 3090.655134][ T6219] ? load_image+0x400/0x400 [ 3090.660018][ T6219] sysfs_warn_dup+0x8a/0xa0 [ 3090.665030][ T6219] sysfs_do_create_link_sd+0xc0/0x110 [ 3090.670594][ T6219] device_add+0x7ed/0xfb0 [ 3090.675131][ T6219] wiphy_register+0x1e81/0x2c30 [ 3090.680515][ T6219] ? cfg80211_event_work+0x40/0x40 [ 3090.686002][ T6219] ? minstrel_ht_alloc+0x808/0x980 [ 3090.691513][ T6219] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3090.698173][ T6219] ieee80211_register_hw+0x2aa1/0x3af0 [ 3090.704104][ T6219] ? ieee80211_tasklet_handler+0x20/0x20 [ 3090.710128][ T6219] ? rcu_is_watching+0x11/0xa0 [ 3090.715358][ T6219] ? memset+0x1e/0x40 [ 3090.719783][ T6219] ? hrtimer_init+0x10c/0x220 [ 3090.725337][ T6219] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3090.731091][ T6219] hwsim_new_radio_nl+0xa6f/0xc40 [ 3090.736400][ T6219] genl_rcv_msg+0xcea/0xf90 [ 3090.741245][ T6219] ? genl_bind+0x380/0x380 [ 3090.746224][ T6219] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 3090.751874][ T6219] ? verify_lock_unused+0x140/0x140 [ 3090.757627][ T6219] ? dev_queue_xmit+0x20/0x20 [ 3090.763105][ T6219] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3090.769976][ T6219] netlink_rcv_skb+0x1f5/0x440 [ 3090.775189][ T6219] ? genl_bind+0x380/0x380 [ 3090.779784][ T6219] ? netlink_ack+0xb50/0xb50 [ 3090.784678][ T6219] ? __lock_acquire+0x7d10/0x7d10 [ 3090.790456][ T6219] ? down_read+0x1aa/0x2e0 [ 3090.795012][ T6219] genl_rcv+0x24/0x40 [ 3090.799336][ T6219] netlink_unicast+0x774/0x920 [ 3090.804575][ T6219] netlink_sendmsg+0x8ba/0xbe0 [ 3090.809455][ T6219] ? netlink_getsockopt+0x570/0x570 [ 3090.815421][ T6219] ? aa_sock_msg_perm+0x94/0x150 [ 3090.820699][ T6219] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3090.827100][ T6219] ? security_socket_sendmsg+0x7c/0xa0 [ 3090.832945][ T6219] ? netlink_getsockopt+0x570/0x570 [ 3090.838715][ T6219] ____sys_sendmsg+0x5b7/0x8f0 [ 3090.844220][ T6219] ? __sys_sendmsg_sock+0x30/0x30 [ 3090.850447][ T6219] ? import_iovec+0x6f/0xa0 [ 3090.856087][ T6219] ___sys_sendmsg+0x236/0x2e0 [ 3090.861689][ T6219] ? __sys_sendmsg+0x2a0/0x2a0 [ 3090.866945][ T6219] ? percpu_counter_add_batch+0x13b/0x160 [ 3090.873097][ T6219] __se_sys_sendmsg+0x1af/0x290 [ 3090.878253][ T6219] ? __x64_sys_sendmsg+0x80/0x80 [ 3090.883653][ T6219] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3090.890441][ T6219] ? lockdep_hardirqs_on+0x94/0x140 [ 3090.895838][ T6219] do_syscall_64+0x4c/0xa0 [ 3090.900575][ T6219] ? clear_bhb_loop+0x30/0x80 [ 3090.905605][ T6219] ? clear_bhb_loop+0x30/0x80 [ 3090.911055][ T6219] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3090.917430][ T6219] RIP: 0033:0x7fe9b1b06dd9 [ 3090.922149][ T6219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3090.943670][ T6219] RSP: 002b:00007fe9afd60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3090.953468][ T6219] RAX: ffffffffffffffda RBX: 00007fe9b1d7ffa0 RCX: 00007fe9b1b06dd9 [ 3090.962459][ T6219] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 3090.970986][ T6219] RBP: 00007fe9b1b9cd69 R08: 0000000000000000 R09: 0000000000000000 [ 3090.979685][ T6219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3090.989506][ T6219] R13: 00007fe9b1d80038 R14: 00007fe9b1d7ffa0 R15: 00007ffed6487828 [ 3090.998570][ T6219] [ 3091.149915][ T6230] netlink: 'syz.1.22971': attribute type 27 has an invalid length. [ 3091.182077][ T6230] netlink: 152 bytes leftover after parsing attributes in process `syz.1.22971'. [ 3091.287035][ T6234] netlink: 152 bytes leftover after parsing attributes in process `syz.0.22973'. [ 3091.408174][ T6245] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.22975'. [ 3091.431910][ T6247] device syzkaller0 entered promiscuous mode [ 3092.757116][ T6284] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.22989'. [ 3092.836600][ T6280] validate_nla: 7 callbacks suppressed [ 3092.836664][ T6280] netlink: 'syz.3.22988': attribute type 27 has an invalid length. [ 3092.864826][ T6280] netlink: 'syz.3.22988': attribute type 4 has an invalid length. [ 3092.976092][ T6280] __nla_validate_parse: 1 callbacks suppressed [ 3092.976154][ T6280] netlink: 152 bytes leftover after parsing attributes in process `syz.3.22988'. [ 3093.302408][ T6287] netlink: 'syz.2.22989': attribute type 9 has an invalid length. [ 3093.340712][ T6287] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.22989'. [ 3093.456367][ T6297] device syzkaller0 entered promiscuous mode [ 3093.547180][ T6300] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.22991'. [ 3093.573057][ T6300] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.22991'. [ 3093.645943][ T6305] netlink: 'syz.3.22995': attribute type 10 has an invalid length. [ 3093.839504][ T6308] netlink: 147988 bytes leftover after parsing attributes in process `syz.0.22996'. [ 3093.873892][ T6308] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3093.886733][ T6308] CPU: 1 PID: 6308 Comm: syz.0.22996 Not tainted syzkaller #0 [ 3093.895199][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3093.906440][ T6308] Call Trace: [ 3093.910222][ T6308] [ 3093.913366][ T6308] dump_stack_lvl+0x188/0x250 [ 3093.918513][ T6308] ? show_regs_print_info+0x20/0x20 [ 3093.923930][ T6308] ? load_image+0x400/0x400 [ 3093.928913][ T6308] sysfs_warn_dup+0x8a/0xa0 [ 3093.934053][ T6308] sysfs_do_create_link_sd+0xc0/0x110 [ 3093.939734][ T6308] device_add+0x7ed/0xfb0 [ 3093.944358][ T6308] wiphy_register+0x1e81/0x2c30 [ 3093.949745][ T6308] ? cfg80211_event_work+0x40/0x40 [ 3093.955688][ T6308] ? minstrel_ht_alloc+0x808/0x980 [ 3093.961177][ T6308] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3093.967367][ T6308] ieee80211_register_hw+0x2aa1/0x3af0 [ 3093.973020][ T6308] ? ieee80211_tasklet_handler+0x20/0x20 [ 3093.979131][ T6308] ? rcu_is_watching+0x11/0xa0 [ 3093.984004][ T6308] ? memset+0x1e/0x40 [ 3093.988480][ T6308] ? hrtimer_init+0x10c/0x220 [ 3093.993537][ T6308] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3094.000080][ T6308] hwsim_new_radio_nl+0xa6f/0xc40 [ 3094.006476][ T6308] genl_rcv_msg+0xcea/0xf90 [ 3094.012851][ T6308] ? genl_bind+0x380/0x380 [ 3094.017607][ T6308] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 3094.024397][ T6308] ? verify_lock_unused+0x140/0x140 [ 3094.030357][ T6308] ? dev_queue_xmit+0x20/0x20 [ 3094.035579][ T6308] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3094.042907][ T6308] netlink_rcv_skb+0x1f5/0x440 [ 3094.049066][ T6308] ? genl_bind+0x380/0x380 [ 3094.054507][ T6308] ? netlink_ack+0xb50/0xb50 [ 3094.059877][ T6308] ? __lock_acquire+0x7d10/0x7d10 [ 3094.066096][ T6308] ? down_read+0x1aa/0x2e0 [ 3094.071510][ T6308] genl_rcv+0x24/0x40 [ 3094.076386][ T6308] netlink_unicast+0x774/0x920 [ 3094.081472][ T6308] netlink_sendmsg+0x8ba/0xbe0 [ 3094.087263][ T6308] ? netlink_getsockopt+0x570/0x570 [ 3094.092673][ T6308] ? aa_sock_msg_perm+0x94/0x150 [ 3094.098762][ T6308] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3094.104254][ T6308] ? security_socket_sendmsg+0x7c/0xa0 [ 3094.111120][ T6308] ? netlink_getsockopt+0x570/0x570 [ 3094.116831][ T6308] ____sys_sendmsg+0x5b7/0x8f0 [ 3094.122648][ T6308] ? __sys_sendmsg_sock+0x30/0x30 [ 3094.128707][ T6308] ? import_iovec+0x6f/0xa0 [ 3094.133626][ T6308] ___sys_sendmsg+0x236/0x2e0 [ 3094.138748][ T6308] ? __sys_sendmsg+0x2a0/0x2a0 [ 3094.143908][ T6308] __se_sys_sendmsg+0x1af/0x290 [ 3094.149376][ T6308] ? __x64_sys_sendmsg+0x80/0x80 [ 3094.155301][ T6308] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3094.161758][ T6308] ? lockdep_hardirqs_on+0x94/0x140 [ 3094.167592][ T6308] do_syscall_64+0x4c/0xa0 [ 3094.173449][ T6308] ? clear_bhb_loop+0x30/0x80 [ 3094.179036][ T6308] ? clear_bhb_loop+0x30/0x80 [ 3094.184107][ T6308] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3094.190641][ T6308] RIP: 0033:0x7f124b2f6dd9 [ 3094.195238][ T6308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3094.216683][ T6308] RSP: 002b:00007f1249550028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3094.225414][ T6308] RAX: ffffffffffffffda RBX: 00007f124b56ffa0 RCX: 00007f124b2f6dd9 [ 3094.234242][ T6308] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 3094.245343][ T6308] RBP: 00007f124b38cd69 R08: 0000000000000000 R09: 0000000000000000 [ 3094.254865][ T6308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3094.264761][ T6308] R13: 00007f124b570038 R14: 00007f124b56ffa0 R15: 00007ffd1f4b1df8 [ 3094.276191][ T6308] [ 3094.723785][ T6327] netlink: 'syz.4.23002': attribute type 27 has an invalid length. [ 3094.936458][ T6327] netlink: 'syz.4.23002': attribute type 4 has an invalid length. [ 3095.090797][ T6327] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23002'. [ 3095.562389][ T6337] netlink: 'syz.2.23005': attribute type 27 has an invalid length. [ 3095.574377][ T6337] netlink: 'syz.2.23005': attribute type 4 has an invalid length. [ 3095.584256][ T6337] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23005'. [ 3095.951356][ T6349] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.23007'. [ 3096.352537][ T6361] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.23013'. [ 3096.470063][ T6368] syzkaller0: refused to change device tx_queue_len [ 3096.543522][ T6376] netlink: 'syz.1.23020': attribute type 9 has an invalid length. [ 3096.560468][ T6376] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.23020'. [ 3096.844301][ T6381] netlink: 'syz.2.23019': attribute type 27 has an invalid length. [ 3097.442702][ T6396] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3097.457392][ T6396] CPU: 0 PID: 6396 Comm: syz.4.23025 Not tainted syzkaller #0 [ 3097.466260][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3097.477318][ T6396] Call Trace: [ 3097.480946][ T6396] [ 3097.484212][ T6396] dump_stack_lvl+0x188/0x250 [ 3097.489034][ T6396] ? show_regs_print_info+0x20/0x20 [ 3097.494508][ T6396] ? load_image+0x400/0x400 [ 3097.499519][ T6396] sysfs_warn_dup+0x8a/0xa0 [ 3097.504872][ T6396] sysfs_do_create_link_sd+0xc0/0x110 [ 3097.510703][ T6396] device_add+0x7ed/0xfb0 [ 3097.515701][ T6396] wiphy_register+0x1e81/0x2c30 [ 3097.521532][ T6396] ? cfg80211_event_work+0x40/0x40 [ 3097.527132][ T6396] ? minstrel_ht_alloc+0x808/0x980 [ 3097.532463][ T6396] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3097.538633][ T6396] ieee80211_register_hw+0x2aa1/0x3af0 [ 3097.544454][ T6396] ? ieee80211_tasklet_handler+0x20/0x20 [ 3097.550491][ T6396] ? rcu_is_watching+0x11/0xa0 [ 3097.555378][ T6396] ? memset+0x1e/0x40 [ 3097.559901][ T6396] ? hrtimer_init+0x10c/0x220 [ 3097.565510][ T6396] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3097.571733][ T6396] hwsim_new_radio_nl+0xa6f/0xc40 [ 3097.577159][ T6396] genl_rcv_msg+0xcea/0xf90 [ 3097.581720][ T6396] ? genl_bind+0x380/0x380 [ 3097.586888][ T6396] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 3097.592579][ T6396] ? verify_lock_unused+0x140/0x140 [ 3097.598372][ T6396] ? dev_queue_xmit+0x20/0x20 [ 3097.604740][ T6396] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3097.611976][ T6396] netlink_rcv_skb+0x1f5/0x440 [ 3097.617462][ T6396] ? genl_bind+0x380/0x380 [ 3097.622744][ T6396] ? netlink_ack+0xb50/0xb50 [ 3097.627804][ T6396] ? __lock_acquire+0x7d10/0x7d10 [ 3097.633695][ T6396] ? down_read+0x1aa/0x2e0 [ 3097.638557][ T6396] genl_rcv+0x24/0x40 [ 3097.643302][ T6396] netlink_unicast+0x774/0x920 [ 3097.648724][ T6396] netlink_sendmsg+0x8ba/0xbe0 [ 3097.655173][ T6396] ? netlink_getsockopt+0x570/0x570 [ 3097.661429][ T6396] ? aa_sock_msg_perm+0x94/0x150 [ 3097.667001][ T6396] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3097.672785][ T6396] ? security_socket_sendmsg+0x7c/0xa0 [ 3097.678948][ T6396] ? netlink_getsockopt+0x570/0x570 [ 3097.684795][ T6396] ____sys_sendmsg+0x5b7/0x8f0 [ 3097.690203][ T6396] ? __sys_sendmsg_sock+0x30/0x30 [ 3097.695369][ T6396] ? import_iovec+0x6f/0xa0 [ 3097.700852][ T6396] ___sys_sendmsg+0x236/0x2e0 [ 3097.705753][ T6396] ? __sys_sendmsg+0x2a0/0x2a0 [ 3097.710813][ T6396] ? percpu_counter_add_batch+0x13b/0x160 [ 3097.716926][ T6396] __se_sys_sendmsg+0x1af/0x290 [ 3097.722000][ T6396] ? __x64_sys_sendmsg+0x80/0x80 [ 3097.727992][ T6396] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3097.734677][ T6396] ? lockdep_hardirqs_on+0x94/0x140 [ 3097.740263][ T6396] do_syscall_64+0x4c/0xa0 [ 3097.744796][ T6396] ? clear_bhb_loop+0x30/0x80 [ 3097.749848][ T6396] ? clear_bhb_loop+0x30/0x80 [ 3097.755415][ T6396] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3097.762191][ T6396] RIP: 0033:0x7fe9b1b06dd9 [ 3097.766998][ T6396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3097.788266][ T6396] RSP: 002b:00007fe9afd60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3097.797912][ T6396] RAX: ffffffffffffffda RBX: 00007fe9b1d7ffa0 RCX: 00007fe9b1b06dd9 [ 3097.806212][ T6396] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 3097.814526][ T6396] RBP: 00007fe9b1b9cd69 R08: 0000000000000000 R09: 0000000000000000 [ 3097.822779][ T6396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3097.830932][ T6396] R13: 00007fe9b1d80038 R14: 00007fe9b1d7ffa0 R15: 00007ffed6487828 [ 3097.839711][ T6396] [ 3098.254688][ T6414] validate_nla: 3 callbacks suppressed [ 3098.254730][ T6414] netlink: 'syz.4.23033': attribute type 27 has an invalid length. [ 3098.296190][ T6414] netlink: 'syz.4.23033': attribute type 4 has an invalid length. [ 3098.318657][ T6414] __nla_validate_parse: 5 callbacks suppressed [ 3098.319342][ T6414] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23033'. [ 3098.569049][ T6432] netlink: 'syz.2.23035': attribute type 10 has an invalid length. [ 3098.670179][ T6437] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.23038'. [ 3098.720101][ T6436] netlink: 'syz.1.23037': attribute type 27 has an invalid length. [ 3098.764586][ T6436] netlink: 'syz.1.23037': attribute type 4 has an invalid length. [ 3098.819142][ T6436] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23037'. [ 3098.938171][ T6439] device syzkaller0 left promiscuous mode [ 3099.109542][ T6448] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.23041'. [ 3099.175528][ T6443] netlink: 'syz.3.23040': attribute type 3 has an invalid length. [ 3099.228313][ T6443] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.23040'. [ 3099.399322][ T6458] netlink: 'syz.3.23042': attribute type 9 has an invalid length. [ 3099.423773][ T6458] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.23042'. [ 3099.607072][ T6453] netlink: 'syz.1.23053': attribute type 16 has an invalid length. [ 3099.618866][ T6453] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23053'. [ 3099.653995][ T6469] netlink: 'syz.4.23047': attribute type 27 has an invalid length. [ 3099.701486][ T6469] netlink: 'syz.4.23047': attribute type 4 has an invalid length. [ 3099.855369][ T6469] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23047'. [ 3099.965199][ T6464] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.23042'. [ 3100.276942][ T6490] netlink: 56537 bytes leftover after parsing attributes in process `syz.4.23055'. [ 3102.238590][ T6544] syz.4.23072[6544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3102.238837][ T6544] syz.4.23072[6544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3102.293583][ T6542] team0: Device hsr_slave_0 failed to register rx_handler [ 3103.340298][ T6561] validate_nla: 11 callbacks suppressed [ 3103.340494][ T6561] netlink: 'syz.3.23081': attribute type 1 has an invalid length. [ 3103.409042][ T6561] __nla_validate_parse: 8 callbacks suppressed [ 3103.409224][ T6561] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.23081'. [ 3103.472865][ T6577] netlink: 'syz.0.23086': attribute type 9 has an invalid length. [ 3103.484891][ T6577] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.23086'. [ 3103.551325][ T6580] netlink: 'syz.0.23086': attribute type 9 has an invalid length. [ 3103.585411][ T6580] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.23086'. [ 3103.704137][ T6588] netlink: 'syz.3.23089': attribute type 10 has an invalid length. [ 3104.068515][ T6597] netlink: 'syz.1.23092': attribute type 16 has an invalid length. [ 3104.196136][ T6597] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23092'. [ 3104.255706][ T6601] netlink: 'syz.0.23096': attribute type 3 has an invalid length. [ 3104.276793][ T6601] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.23096'. [ 3104.331987][ T6603] netlink: 'syz.3.23094': attribute type 10 has an invalid length. [ 3104.397246][ T6603] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.23094'. [ 3104.475501][ T6609] netlink: 'syz.4.23097': attribute type 27 has an invalid length. [ 3104.509258][ T6609] netlink: 'syz.4.23097': attribute type 4 has an invalid length. [ 3104.534057][ T6609] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23097'. [ 3104.736005][ T6611] netlink: 'syz.0.23109': attribute type 16 has an invalid length. [ 3104.832454][ T6611] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23109'. [ 3105.605573][ T6629] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.23102'. [ 3105.883809][ T6650] netlink: 152 bytes leftover after parsing attributes in process `syz.3.23111'. [ 3106.799359][ T6678] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 3106.854785][ T6682] 8021q: adding VLAN 0 to HW filter on device team0 [ 3106.881035][ T6682] bond0: (slave team0): Enslaving as an active interface with an up link [ 3108.439959][ T6742] validate_nla: 18 callbacks suppressed [ 3108.439981][ T6742] netlink: 'syz.1.23137': attribute type 10 has an invalid length. [ 3108.626136][ T6742] 8021q: adding VLAN 0 to HW filter on device team0 [ 3108.707129][ T6742] bond0: (slave team0): Enslaving as an active interface with an up link [ 3108.867243][ T6753] netlink: 'syz.4.23139': attribute type 27 has an invalid length. [ 3108.930276][ T6753] netlink: 'syz.4.23139': attribute type 4 has an invalid length. [ 3109.031231][ T6753] __nla_validate_parse: 8 callbacks suppressed [ 3109.031253][ T6753] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23139'. [ 3109.421507][ T6775] netlink: 'syz.3.23148': attribute type 4 has an invalid length. [ 3109.452753][ T6779] netlink: 'syz.2.23149': attribute type 10 has an invalid length. [ 3109.482133][ T6775] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.23148'. [ 3109.614542][ T6784] IPv6: pim6reg1: Disabled Multicast RS [ 3110.002022][ T6790] netlink: 'syz.2.23152': attribute type 27 has an invalid length. [ 3110.037945][ T6790] netlink: 'syz.2.23152': attribute type 4 has an invalid length. [ 3110.072328][ T6790] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23152'. [ 3110.377508][ T6793] netlink: 'syz.1.23153': attribute type 27 has an invalid length. [ 3110.411101][ T6793] netlink: 'syz.1.23153': attribute type 4 has an invalid length. [ 3110.535513][ T6793] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23153'. [ 3110.566094][ T6805] netlink: 'syz.2.23154': attribute type 10 has an invalid length. [ 3110.616939][ T6798] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23156'. [ 3111.562656][ T6826] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23165'. [ 3111.979852][ T6843] netlink: 152 bytes leftover after parsing attributes in process `syz.3.23170'. [ 3112.221601][ T6851] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23172'. [ 3112.782155][ T6876] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.23178'. [ 3113.026650][ T6869] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.23176'. [ 3113.455138][ T6888] validate_nla: 15 callbacks suppressed [ 3113.455220][ T6888] netlink: 'syz.3.23183': attribute type 27 has an invalid length. [ 3113.584018][ T6888] netlink: 'syz.3.23183': attribute type 4 has an invalid length. [ 3114.516569][ T6925] netlink: 'syz.0.23188': attribute type 27 has an invalid length. [ 3114.557815][ T6925] netlink: 'syz.0.23188': attribute type 4 has an invalid length. [ 3114.643968][ T6925] __nla_validate_parse: 2 callbacks suppressed [ 3114.643990][ T6925] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23188'. [ 3114.798459][ T6928] netlink: 'syz.2.23192': attribute type 10 has an invalid length. [ 3116.565043][ T6951] netlink: 'syz.1.23202': attribute type 27 has an invalid length. [ 3116.589038][ T6951] netlink: 'syz.1.23202': attribute type 4 has an invalid length. [ 3116.627336][ T6951] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23202'. [ 3116.668185][ T6972] netlink: 'syz.3.23207': attribute type 27 has an invalid length. [ 3116.676868][ T6972] netlink: 'syz.3.23207': attribute type 4 has an invalid length. [ 3116.721604][ T6972] netlink: 152 bytes leftover after parsing attributes in process `syz.3.23207'. [ 3116.792012][ T6978] netlink: 'syz.0.23209': attribute type 1 has an invalid length. [ 3116.832429][ T6978] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.23209'. [ 3117.694292][ T6994] delete_channel: no stack [ 3118.424168][ T7021] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.23223'. [ 3119.247609][ T7026] validate_nla: 4 callbacks suppressed [ 3119.247633][ T7026] netlink: 'syz.3.23224': attribute type 10 has an invalid length. [ 3119.340728][ T7023] netlink: 'syz.2.23222': attribute type 27 has an invalid length. [ 3119.521544][ T7023] netlink: 'syz.2.23222': attribute type 4 has an invalid length. [ 3119.578727][ T7023] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23222'. [ 3119.811999][ T7045] device syzkaller0 entered promiscuous mode [ 3120.486925][ T7052] netlink: 'syz.2.23231': attribute type 27 has an invalid length. [ 3120.496161][ T7052] netlink: 'syz.2.23231': attribute type 4 has an invalid length. [ 3120.514617][ T7052] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23231'. [ 3121.448849][ T7066] netlink: 'syz.0.23242': attribute type 16 has an invalid length. [ 3121.476529][ T7066] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23242'. [ 3121.825428][ T7079] netlink: 'syz.4.23238': attribute type 10 has an invalid length. [ 3121.968939][ T7085] netlink: 144452 bytes leftover after parsing attributes in process `syz.2.23240'. [ 3122.063525][ T7090] netlink: 'syz.3.23241': attribute type 27 has an invalid length. [ 3122.200488][ T7090] netlink: 'syz.3.23241': attribute type 4 has an invalid length. [ 3122.347945][ T7090] netlink: 152 bytes leftover after parsing attributes in process `syz.3.23241'. [ 3122.417198][ T7099] netlink: 'syz.0.23243': attribute type 27 has an invalid length. [ 3122.447752][ T7099] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23243'. [ 3122.473461][ T7085] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3122.497144][ T7085] CPU: 1 PID: 7085 Comm: syz.2.23240 Not tainted syzkaller #0 [ 3122.505470][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3122.516436][ T7085] Call Trace: [ 3122.520103][ T7085] [ 3122.523506][ T7085] dump_stack_lvl+0x188/0x250 [ 3122.528604][ T7085] ? show_regs_print_info+0x20/0x20 [ 3122.533924][ T7085] ? load_image+0x400/0x400 [ 3122.538647][ T7085] sysfs_warn_dup+0x8a/0xa0 [ 3122.543510][ T7085] sysfs_do_create_link_sd+0xc0/0x110 [ 3122.549075][ T7085] device_add+0x7ed/0xfb0 [ 3122.553866][ T7085] wiphy_register+0x1e81/0x2c30 [ 3122.559416][ T7085] ? cfg80211_event_work+0x40/0x40 [ 3122.565458][ T7085] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3122.572017][ T7085] ieee80211_register_hw+0x2aa1/0x3af0 [ 3122.578352][ T7085] ? ieee80211_tasklet_handler+0x20/0x20 [ 3122.584485][ T7085] ? rcu_is_watching+0x11/0xa0 [ 3122.589390][ T7085] ? memset+0x1e/0x40 [ 3122.593689][ T7085] ? hrtimer_init+0x10c/0x220 [ 3122.599606][ T7085] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3122.605759][ T7085] hwsim_new_radio_nl+0xa6f/0xc40 [ 3122.611056][ T7085] genl_rcv_msg+0xcea/0xf90 [ 3122.616481][ T7085] ? genl_bind+0x380/0x380 [ 3122.621230][ T7085] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 3122.627219][ T7085] ? verify_lock_unused+0x140/0x140 [ 3122.632971][ T7085] ? dev_queue_xmit+0x20/0x20 [ 3122.637710][ T7085] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3122.644306][ T7085] netlink_rcv_skb+0x1f5/0x440 [ 3122.649111][ T7085] ? genl_bind+0x380/0x380 [ 3122.653751][ T7085] ? netlink_ack+0xb50/0xb50 [ 3122.658661][ T7085] ? __lock_acquire+0x7d10/0x7d10 [ 3122.664230][ T7085] ? down_read+0x1aa/0x2e0 [ 3122.669041][ T7085] genl_rcv+0x24/0x40 [ 3122.673241][ T7085] netlink_unicast+0x774/0x920 [ 3122.678237][ T7085] netlink_sendmsg+0x8ba/0xbe0 [ 3122.683428][ T7085] ? netlink_getsockopt+0x570/0x570 [ 3122.688845][ T7085] ? aa_sock_msg_perm+0x94/0x150 [ 3122.694468][ T7085] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3122.700230][ T7085] ? security_socket_sendmsg+0x7c/0xa0 [ 3122.705905][ T7085] ? netlink_getsockopt+0x570/0x570 [ 3122.711480][ T7085] ____sys_sendmsg+0x5b7/0x8f0 [ 3122.716311][ T7085] ? __sys_sendmsg_sock+0x30/0x30 [ 3122.721485][ T7085] ? import_iovec+0x6f/0xa0 [ 3122.726314][ T7085] ___sys_sendmsg+0x236/0x2e0 [ 3122.731321][ T7085] ? __sys_sendmsg+0x2a0/0x2a0 [ 3122.736328][ T7085] ? percpu_counter_add_batch+0x13b/0x160 [ 3122.742575][ T7085] __se_sys_sendmsg+0x1af/0x290 [ 3122.747934][ T7085] ? __x64_sys_sendmsg+0x80/0x80 [ 3122.753087][ T7085] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3122.759543][ T7085] ? lockdep_hardirqs_on+0x94/0x140 [ 3122.765377][ T7085] do_syscall_64+0x4c/0xa0 [ 3122.769943][ T7085] ? clear_bhb_loop+0x30/0x80 [ 3122.775261][ T7085] ? clear_bhb_loop+0x30/0x80 [ 3122.780221][ T7085] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3122.786478][ T7085] RIP: 0033:0x7fc113a7bdd9 [ 3122.791204][ T7085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3122.811713][ T7085] RSP: 002b:00007fc111cd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3122.821451][ T7085] RAX: ffffffffffffffda RBX: 00007fc113cf4fa0 RCX: 00007fc113a7bdd9 [ 3122.830039][ T7085] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 3122.838365][ T7085] RBP: 00007fc113b11d69 R08: 0000000000000000 R09: 0000000000000000 [ 3122.846955][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3122.855128][ T7085] R13: 00007fc113cf5038 R14: 00007fc113cf4fa0 R15: 00007ffc37c9a628 [ 3122.863558][ T7085] [ 3123.189532][ T7126] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23250'. [ 3123.486255][ T7131] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23252'. [ 3123.742714][ T7134] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23253'. [ 3124.563453][ T7158] validate_nla: 6 callbacks suppressed [ 3124.563477][ T7158] netlink: 'syz.1.23258': attribute type 10 has an invalid length. [ 3124.658432][ T7158] team0: Device vxcan1 is of different type [ 3124.851457][ T7168] netlink: 'syz.0.23260': attribute type 27 has an invalid length. [ 3124.923751][ T7164] netlink: 'syz.2.23259': attribute type 29 has an invalid length. [ 3124.934230][ T7168] netlink: 'syz.0.23260': attribute type 4 has an invalid length. [ 3124.950757][ T7168] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23260'. [ 3125.063377][ T7177] netlink: 'syz.2.23259': attribute type 1 has an invalid length. [ 3125.132553][ T7164] netlink: 'syz.2.23259': attribute type 29 has an invalid length. [ 3125.203610][ T7177] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.23259'. [ 3125.767769][ T7167] netlink: 'syz.2.23259': attribute type 29 has an invalid length. [ 3125.921296][ T7186] netlink: 'syz.3.23265': attribute type 16 has an invalid length. [ 3126.019113][ T7186] netlink: 152 bytes leftover after parsing attributes in process `syz.3.23265'. [ 3126.729425][ T7206] netlink: 'syz.0.23271': attribute type 27 has an invalid length. [ 3126.768491][ T7206] netlink: 'syz.0.23271': attribute type 4 has an invalid length. [ 3126.781618][ T7206] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23271'. [ 3126.792207][ T7205] netlink: 703 bytes leftover after parsing attributes in process `syz.2.23269'. [ 3127.051436][ T7222] netlink: 152 bytes leftover after parsing attributes in process `syz.3.23273'. [ 3128.181756][ T7235] netlink: 144452 bytes leftover after parsing attributes in process `syz.0.23280'. [ 3128.686449][ T7244] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23282'. [ 3128.865567][ T7235] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3128.888212][ T7235] CPU: 1 PID: 7235 Comm: syz.0.23280 Not tainted syzkaller #0 [ 3128.896618][ T7235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3128.907336][ T7235] Call Trace: [ 3128.910780][ T7235] [ 3128.914004][ T7235] dump_stack_lvl+0x188/0x250 [ 3128.918858][ T7235] ? show_regs_print_info+0x20/0x20 [ 3128.924133][ T7235] ? load_image+0x400/0x400 [ 3128.928944][ T7235] sysfs_warn_dup+0x8a/0xa0 [ 3128.933520][ T7235] sysfs_do_create_link_sd+0xc0/0x110 [ 3128.939762][ T7235] device_add+0x7ed/0xfb0 [ 3128.944567][ T7235] wiphy_register+0x1e81/0x2c30 [ 3128.949819][ T7235] ? cfg80211_event_work+0x40/0x40 [ 3128.955298][ T7235] ? minstrel_ht_alloc+0x808/0x980 [ 3128.960710][ T7235] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3128.967214][ T7235] ieee80211_register_hw+0x2aa1/0x3af0 [ 3128.972905][ T7235] ? ieee80211_tasklet_handler+0x20/0x20 [ 3128.978714][ T7235] ? rcu_is_watching+0x11/0xa0 [ 3128.983744][ T7235] ? memset+0x1e/0x40 [ 3128.988334][ T7235] ? hrtimer_init+0x10c/0x220 [ 3128.993444][ T7235] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3129.000443][ T7235] hwsim_new_radio_nl+0xa6f/0xc40 [ 3129.005695][ T7235] genl_rcv_msg+0xcea/0xf90 [ 3129.010894][ T7235] ? genl_bind+0x380/0x380 [ 3129.015584][ T7235] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 3129.021881][ T7235] ? swake_up_one+0x6d/0x130 [ 3129.027033][ T7235] ? verify_lock_unused+0x140/0x140 [ 3129.032607][ T7235] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 3129.039114][ T7235] ? perf_trace_lock+0x301/0x390 [ 3129.044852][ T7235] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3129.052538][ T7235] netlink_rcv_skb+0x1f5/0x440 [ 3129.058344][ T7235] ? genl_bind+0x380/0x380 [ 3129.063212][ T7235] ? netlink_ack+0xb50/0xb50 [ 3129.067964][ T7235] ? __lock_acquire+0x7d10/0x7d10 [ 3129.074207][ T7235] ? down_read+0x1aa/0x2e0 [ 3129.079317][ T7235] genl_rcv+0x24/0x40 [ 3129.083585][ T7235] netlink_unicast+0x774/0x920 [ 3129.089281][ T7235] netlink_sendmsg+0x8ba/0xbe0 [ 3129.094584][ T7235] ? netlink_getsockopt+0x570/0x570 [ 3129.100245][ T7235] ? netlink_getsockopt+0x570/0x570 [ 3129.105523][ T7235] ____sys_sendmsg+0x5b7/0x8f0 [ 3129.110484][ T7235] ? __sys_sendmsg_sock+0x30/0x30 [ 3129.115791][ T7235] ? import_iovec+0x6f/0xa0 [ 3129.120883][ T7235] ___sys_sendmsg+0x236/0x2e0 [ 3129.126110][ T7235] ? __sys_sendmsg+0x2a0/0x2a0 [ 3129.131185][ T7235] __se_sys_sendmsg+0x1af/0x290 [ 3129.136804][ T7235] ? __x64_sys_sendmsg+0x80/0x80 [ 3129.142066][ T7235] ? lockdep_hardirqs_on+0x94/0x140 [ 3129.148431][ T7235] do_syscall_64+0x4c/0xa0 [ 3129.153531][ T7235] ? clear_bhb_loop+0x30/0x80 [ 3129.158622][ T7235] ? clear_bhb_loop+0x30/0x80 [ 3129.164167][ T7235] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3129.170925][ T7235] RIP: 0033:0x7f124b2f6dd9 [ 3129.176104][ T7235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3129.199200][ T7235] RSP: 002b:00007f1249550028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3129.208421][ T7235] RAX: ffffffffffffffda RBX: 00007f124b56ffa0 RCX: 00007f124b2f6dd9 [ 3129.217052][ T7235] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 3129.225872][ T7235] RBP: 00007f124b38cd69 R08: 0000000000000000 R09: 0000000000000000 [ 3129.234411][ T7235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3129.243503][ T7235] R13: 00007f124b570038 R14: 00007f124b56ffa0 R15: 00007ffd1f4b1df8 [ 3129.252642][ T7235] [ 3129.799780][ T7258] validate_nla: 4 callbacks suppressed [ 3129.799800][ T7258] netlink: 'syz.4.23286': attribute type 16 has an invalid length. [ 3129.909305][ T7258] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23286'. [ 3130.143106][ T7261] netlink: 703 bytes leftover after parsing attributes in process `syz.0.23288'. [ 3130.187377][ T7263] netlink: 'syz.2.23287': attribute type 27 has an invalid length. [ 3130.260033][ T7263] netlink: 'syz.2.23287': attribute type 4 has an invalid length. [ 3130.294232][ T7263] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23287'. [ 3131.300912][ T7288] netlink: 'syz.0.23295': attribute type 27 has an invalid length. [ 3131.320690][ T7288] netlink: 'syz.0.23295': attribute type 4 has an invalid length. [ 3131.330479][ T7288] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23295'. [ 3131.699773][ T7305] netlink: 144452 bytes leftover after parsing attributes in process `syz.0.23297'. [ 3131.714357][ T7299] IPv6: pim6reg1: Disabled Multicast RS [ 3131.739616][ T7303] netlink: 'syz.4.23300': attribute type 10 has an invalid length. [ 3131.854219][ T7305] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3131.867140][ T7305] CPU: 0 PID: 7305 Comm: syz.0.23297 Not tainted syzkaller #0 [ 3131.875620][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3131.886235][ T7305] Call Trace: [ 3131.890110][ T7305] [ 3131.893283][ T7305] dump_stack_lvl+0x188/0x250 [ 3131.898360][ T7305] ? show_regs_print_info+0x20/0x20 [ 3131.903597][ T7305] ? load_image+0x400/0x400 [ 3131.908398][ T7305] sysfs_warn_dup+0x8a/0xa0 [ 3131.913012][ T7305] sysfs_do_create_link_sd+0xc0/0x110 [ 3131.918765][ T7305] device_add+0x7ed/0xfb0 [ 3131.923432][ T7305] wiphy_register+0x1e81/0x2c30 [ 3131.928643][ T7305] ? cfg80211_event_work+0x40/0x40 [ 3131.933946][ T7305] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3131.940318][ T7305] ieee80211_register_hw+0x2aa1/0x3af0 [ 3131.946223][ T7305] ? ieee80211_tasklet_handler+0x20/0x20 [ 3131.952859][ T7305] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3131.959524][ T7305] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3131.965646][ T7305] hwsim_new_radio_nl+0xa6f/0xc40 [ 3131.970912][ T7305] genl_rcv_msg+0xcea/0xf90 [ 3131.975615][ T7305] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3131.982361][ T7305] ? genl_bind+0x380/0x380 [ 3131.986859][ T7305] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3131.993137][ T7305] ? lock_chain_count+0x20/0x20 [ 3131.998375][ T7305] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3132.004898][ T7305] ? lockdep_hardirqs_on+0x94/0x140 [ 3132.011238][ T7305] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3132.017853][ T7305] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3132.025066][ T7305] ? lock_acquire+0x208/0x400 [ 3132.029858][ T7305] netlink_rcv_skb+0x1f5/0x440 [ 3132.034853][ T7305] ? genl_bind+0x380/0x380 [ 3132.039731][ T7305] ? netlink_ack+0xb50/0xb50 [ 3132.044340][ T7305] ? lockdep_hardirqs_on+0x94/0x140 [ 3132.049767][ T7305] ? down_read+0x1aa/0x2e0 [ 3132.054436][ T7305] genl_rcv+0x24/0x40 [ 3132.058776][ T7305] netlink_unicast+0x774/0x920 [ 3132.063853][ T7305] netlink_sendmsg+0x8ba/0xbe0 [ 3132.068912][ T7305] ? netlink_getsockopt+0x570/0x570 [ 3132.074353][ T7305] ? aa_sock_msg_perm+0x94/0x150 [ 3132.079923][ T7305] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3132.085316][ T7305] ? security_socket_sendmsg+0x7c/0xa0 [ 3132.090806][ T7305] ? netlink_getsockopt+0x570/0x570 [ 3132.096489][ T7305] ____sys_sendmsg+0x5b7/0x8f0 [ 3132.102591][ T7305] ? __sys_sendmsg_sock+0x30/0x30 [ 3132.108442][ T7305] ? import_iovec+0x6f/0xa0 [ 3132.113327][ T7305] ___sys_sendmsg+0x236/0x2e0 [ 3132.118171][ T7305] ? __sys_sendmsg+0x2a0/0x2a0 [ 3132.123145][ T7305] ? ktime_get_real_ts64+0x440/0x440 [ 3132.128634][ T7305] __se_sys_sendmsg+0x1af/0x290 [ 3132.133713][ T7305] ? __x64_sys_sendmsg+0x80/0x80 [ 3132.139073][ T7305] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3132.145380][ T7305] ? lockdep_hardirqs_on+0x94/0x140 [ 3132.150787][ T7305] do_syscall_64+0x4c/0xa0 [ 3132.155550][ T7305] ? clear_bhb_loop+0x30/0x80 [ 3132.161301][ T7305] ? clear_bhb_loop+0x30/0x80 [ 3132.166199][ T7305] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3132.172291][ T7305] RIP: 0033:0x7f124b2f6dd9 [ 3132.176819][ T7305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3132.198270][ T7305] RSP: 002b:00007f124950e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3132.207817][ T7305] RAX: ffffffffffffffda RBX: 00007f124b570180 RCX: 00007f124b2f6dd9 [ 3132.216368][ T7305] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 3132.224464][ T7305] RBP: 00007f124b38cd69 R08: 0000000000000000 R09: 0000000000000000 [ 3132.232635][ T7305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3132.241115][ T7305] R13: 00007f124b570218 R14: 00007f124b570180 R15: 00007ffd1f4b1df8 [ 3132.249145][ T7305] [ 3132.634298][ T7317] device syzkaller0 entered promiscuous mode [ 3132.750633][ T7320] netlink: 'syz.2.23306': attribute type 27 has an invalid length. [ 3132.842229][ T7320] netlink: 'syz.2.23306': attribute type 4 has an invalid length. [ 3132.924302][ T7320] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23306'. [ 3132.986210][ T7316] netlink: 703 bytes leftover after parsing attributes in process `syz.4.23304'. [ 3133.003815][ T7328] netlink: 'syz.3.23308': attribute type 10 has an invalid length. [ 3133.327500][ T7333] netlink: 'syz.4.23309': attribute type 27 has an invalid length. [ 3133.395293][ T7333] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23309'. [ 3135.477132][ T7376] validate_nla: 1 callbacks suppressed [ 3135.477158][ T7376] netlink: 'syz.2.23321': attribute type 27 has an invalid length. [ 3135.620337][ T7376] netlink: 'syz.2.23321': attribute type 4 has an invalid length. [ 3135.689129][ T7376] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23321'. [ 3136.064687][ T7398] netlink: 'syz.0.23325': attribute type 10 has an invalid length. [ 3136.139543][ T7398] team0: Device wg1 is of different type [ 3136.249127][ T7399] netlink: 'syz.4.23324': attribute type 10 has an invalid length. [ 3136.363613][ T7404] netlink: 'syz.2.23326': attribute type 10 has an invalid length. [ 3137.897012][ T7421] device syzkaller0 entered promiscuous mode [ 3138.030527][ T7422] netlink: 'syz.3.23337': attribute type 16 has an invalid length. [ 3138.040654][ T7422] netlink: 152 bytes leftover after parsing attributes in process `syz.3.23337'. [ 3138.309366][ T7434] netlink: 'syz.4.23338': attribute type 27 has an invalid length. [ 3138.321015][ T7434] netlink: 'syz.4.23338': attribute type 4 has an invalid length. [ 3138.360844][ T7434] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23338'. [ 3138.575749][ T7443] netlink: 144452 bytes leftover after parsing attributes in process `syz.0.23339'. [ 3139.074703][ T7443] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3139.116461][ T7443] CPU: 0 PID: 7443 Comm: syz.0.23339 Not tainted syzkaller #0 [ 3139.124471][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3139.135196][ T7443] Call Trace: [ 3139.138623][ T7443] [ 3139.141749][ T7443] dump_stack_lvl+0x188/0x250 [ 3139.146914][ T7443] ? show_regs_print_info+0x20/0x20 [ 3139.152789][ T7443] ? load_image+0x400/0x400 [ 3139.157851][ T7443] sysfs_warn_dup+0x8a/0xa0 [ 3139.162608][ T7443] sysfs_do_create_link_sd+0xc0/0x110 [ 3139.168267][ T7443] device_add+0x7ed/0xfb0 [ 3139.172846][ T7443] wiphy_register+0x1e81/0x2c30 [ 3139.178070][ T7443] ? cfg80211_event_work+0x40/0x40 [ 3139.183601][ T7443] ? minstrel_ht_alloc+0x808/0x980 [ 3139.189232][ T7443] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3139.195858][ T7443] ieee80211_register_hw+0x2aa1/0x3af0 [ 3139.201855][ T7443] ? ieee80211_tasklet_handler+0x20/0x20 [ 3139.208330][ T7443] ? rcu_is_watching+0x11/0xa0 [ 3139.213395][ T7443] ? memset+0x1e/0x40 [ 3139.217502][ T7443] ? hrtimer_init+0x10c/0x220 [ 3139.222829][ T7443] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3139.228895][ T7443] hwsim_new_radio_nl+0xa6f/0xc40 [ 3139.234431][ T7443] genl_rcv_msg+0xcea/0xf90 [ 3139.239951][ T7443] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3139.246727][ T7443] ? genl_bind+0x380/0x380 [ 3139.251492][ T7443] ? mark_lock+0x94/0x320 [ 3139.256209][ T7443] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3139.262483][ T7443] ? lock_chain_count+0x20/0x20 [ 3139.267670][ T7443] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3139.274071][ T7443] ? lockdep_hardirqs_on+0x94/0x140 [ 3139.279630][ T7443] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3139.286913][ T7443] netlink_rcv_skb+0x1f5/0x440 [ 3139.292041][ T7443] ? genl_bind+0x380/0x380 [ 3139.296809][ T7443] ? netlink_ack+0xb50/0xb50 [ 3139.301975][ T7443] ? __lock_acquire+0x7d10/0x7d10 [ 3139.307413][ T7443] ? down_read+0x1aa/0x2e0 [ 3139.312183][ T7443] genl_rcv+0x24/0x40 [ 3139.316294][ T7443] netlink_unicast+0x774/0x920 [ 3139.321576][ T7443] netlink_sendmsg+0x8ba/0xbe0 [ 3139.326480][ T7443] ? netlink_getsockopt+0x570/0x570 [ 3139.332227][ T7443] ? netlink_getsockopt+0x570/0x570 [ 3139.338026][ T7443] ____sys_sendmsg+0x5b7/0x8f0 [ 3139.343274][ T7443] ? __sys_sendmsg_sock+0x30/0x30 [ 3139.348532][ T7443] ? import_iovec+0x6f/0xa0 [ 3139.353607][ T7443] ___sys_sendmsg+0x236/0x2e0 [ 3139.359581][ T7443] ? __sys_sendmsg+0x2a0/0x2a0 [ 3139.364754][ T7443] ? ktime_get_real_ts64+0x440/0x440 [ 3139.370756][ T7443] __se_sys_sendmsg+0x1af/0x290 [ 3139.376103][ T7443] ? __x64_sys_sendmsg+0x80/0x80 [ 3139.381339][ T7443] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3139.388222][ T7443] ? lockdep_hardirqs_on+0x94/0x140 [ 3139.393629][ T7443] do_syscall_64+0x4c/0xa0 [ 3139.398226][ T7443] ? clear_bhb_loop+0x30/0x80 [ 3139.402926][ T7443] ? clear_bhb_loop+0x30/0x80 [ 3139.408084][ T7443] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3139.414384][ T7443] RIP: 0033:0x7f124b2f6dd9 [ 3139.419317][ T7443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3139.441262][ T7443] RSP: 002b:00007f124950e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3139.451126][ T7443] RAX: ffffffffffffffda RBX: 00007f124b570180 RCX: 00007f124b2f6dd9 [ 3139.459732][ T7443] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 3139.468080][ T7443] RBP: 00007f124b38cd69 R08: 0000000000000000 R09: 0000000000000000 [ 3139.476512][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3139.485306][ T7443] R13: 00007f124b570218 R14: 00007f124b570180 R15: 00007ffd1f4b1df8 [ 3139.493702][ T7443] [ 3139.518607][ T7449] netlink: 'syz.2.23341': attribute type 17 has an invalid length. [ 3139.527349][ T7449] netlink: 148 bytes leftover after parsing attributes in process `syz.2.23341'. [ 3139.601033][ T7447] netlink: 'syz.2.23341': attribute type 4 has an invalid length. [ 3139.610756][ T7447] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.23341'. [ 3139.775714][ T7464] netlink: 60 bytes leftover after parsing attributes in process `syz.1.23348'. [ 3142.993327][ T7492] validate_nla: 2 callbacks suppressed [ 3142.993348][ T7492] netlink: 'syz.0.23355': attribute type 27 has an invalid length. [ 3143.088276][ T7492] netlink: 'syz.0.23355': attribute type 4 has an invalid length. [ 3143.099499][ T7492] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23355'. [ 3143.506297][ T7496] netlink: 'syz.3.23357': attribute type 16 has an invalid length. [ 3143.577256][ T7496] netlink: 152 bytes leftover after parsing attributes in process `syz.3.23357'. [ 3143.782530][ T7504] netlink: 'syz.1.23359': attribute type 10 has an invalid length. [ 3143.793031][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.800049][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.985424][ T7506] netlink: 'syz.0.23370': attribute type 27 has an invalid length. [ 3144.009333][ T7506] netlink: 'syz.0.23370': attribute type 4 has an invalid length. [ 3144.038739][ T7506] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23370'. [ 3144.064000][ T7509] netlink: 'syz.3.23360': attribute type 10 has an invalid length. [ 3144.436771][ T7523] netlink: 'syz.1.23363': attribute type 10 has an invalid length. [ 3144.634334][ T7523] team0: Device veth1_macvtap failed to register rx_handler [ 3144.908089][ T7532] netlink: 'syz.0.23366': attribute type 27 has an invalid length. [ 3144.916736][ T7532] netlink: 'syz.0.23366': attribute type 4 has an invalid length. [ 3144.928493][ T7532] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23366'. [ 3144.942182][ T7529] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23365'. [ 3145.135445][ T7551] netlink: 152 bytes leftover after parsing attributes in process `syz.3.23369'. [ 3145.339139][ T7554] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23371'. [ 3146.099090][ T7564] device veth0_macvtap left promiscuous mode [ 3146.758355][ T7572] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23378'. [ 3147.395728][ T7593] team0: Device xfrm0 is of different type [ 3147.921275][ T7595] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23386'. [ 3148.083254][ T7605] validate_nla: 12 callbacks suppressed [ 3148.083340][ T7605] netlink: 'syz.1.23388': attribute type 10 has an invalid length. [ 3148.250001][ T7619] netlink: 'syz.4.23393': attribute type 28 has an invalid length. [ 3148.564002][ T7623] netlink: 'syz.0.23394': attribute type 27 has an invalid length. [ 3148.599000][ T7623] netlink: 'syz.0.23394': attribute type 4 has an invalid length. [ 3148.616940][ T7623] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23394'. [ 3149.040481][ T7646] netlink: 'syz.2.23400': attribute type 10 has an invalid length. [ 3149.077310][ T7647] netlink: 'syz.0.23401': attribute type 10 has an invalid length. [ 3149.125544][ T7647] team0: Device veth1_macvtap failed to register rx_handler [ 3149.231123][ T7650] netlink: 'syz.4.23402': attribute type 16 has an invalid length. [ 3149.251681][ T7650] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23402'. [ 3149.605398][ T7668] netlink: 'syz.0.23408': attribute type 10 has an invalid length. [ 3149.720575][ T7672] netlink: 'syz.1.23409': attribute type 10 has an invalid length. [ 3149.773126][ T7672] batman_adv: batadv0: Adding interface: netdevsim0 [ 3149.782077][ T7672] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 3149.956985][ T7683] netlink: 'syz.4.23411': attribute type 27 has an invalid length. [ 3150.008361][ T7683] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23411'. [ 3150.507584][ T7699] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23417'. [ 3150.686719][ T7700] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23418'. [ 3150.968167][ T4558] Bluetooth: hci1: command 0x0406 tx timeout [ 3151.052299][ T7714] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23429'. [ 3151.312097][ T7729] netlink: 132 bytes leftover after parsing attributes in process `syz.2.23425'. [ 3151.710493][ T7745] device syzkaller0 entered promiscuous mode [ 3151.731535][ T7739] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23428'. [ 3152.078576][ T7754] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23433'. [ 3152.232731][ T7758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23435'. [ 3152.733852][ T7771] device syzkaller0 entered promiscuous mode [ 3152.955732][ T7785] team0: Device xfrm0 is of different type [ 3154.124572][ T7809] validate_nla: 16 callbacks suppressed [ 3154.124597][ T7809] netlink: 'syz.2.23447': attribute type 28 has an invalid length. [ 3154.361340][ T7805] netlink: 'syz.4.23449': attribute type 16 has an invalid length. [ 3154.379564][ T7805] __nla_validate_parse: 1 callbacks suppressed [ 3154.379587][ T7805] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23449'. [ 3154.819586][ T7806] bond0: (slave team0): Error: Slave device does not support XDP [ 3155.203875][ T7825] netlink: 'syz.1.23455': attribute type 10 has an invalid length. [ 3156.040663][ T7851] netlink: 'syz.0.23463': attribute type 27 has an invalid length. [ 3156.100308][ T7851] netlink: 'syz.0.23463': attribute type 4 has an invalid length. [ 3156.127679][ T7851] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23463'. [ 3156.298482][ T7854] netlink: 'syz.3.23462': attribute type 27 has an invalid length. [ 3156.306835][ T7854] netlink: 'syz.3.23462': attribute type 4 has an invalid length. [ 3156.641605][ T7854] netlink: 152 bytes leftover after parsing attributes in process `syz.3.23462'. [ 3156.660142][ T7853] netlink: 'syz.1.23464': attribute type 10 has an invalid length. [ 3156.718411][ T7853] netlink: 40 bytes leftover after parsing attributes in process `syz.1.23464'. [ 3156.746380][ T7853] device team0 entered promiscuous mode [ 3156.756127][ T7853] device team_slave_0 entered promiscuous mode [ 3156.850475][ T7853] device team_slave_1 entered promiscuous mode [ 3156.932039][ T7853] bond0: (slave team0): Releasing backup interface [ 3156.984180][ T7853] bridge0: port 3(team0) entered blocking state [ 3157.006969][ T7853] bridge0: port 3(team0) entered disabled state [ 3157.018501][ T7850] netlink: 'syz.4.23465': attribute type 16 has an invalid length. [ 3157.028429][ T7850] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23465'. [ 3157.492369][ T7869] netlink: 144452 bytes leftover after parsing attributes in process `syz.0.23469'. [ 3157.675106][ T7869] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3157.701473][ T7869] CPU: 1 PID: 7869 Comm: syz.0.23469 Not tainted syzkaller #0 [ 3157.709179][ T7869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3157.719851][ T7869] Call Trace: [ 3157.723443][ T7869] [ 3157.726595][ T7869] dump_stack_lvl+0x188/0x250 [ 3157.731666][ T7869] ? show_regs_print_info+0x20/0x20 [ 3157.736990][ T7869] ? load_image+0x400/0x400 [ 3157.741886][ T7869] sysfs_warn_dup+0x8a/0xa0 [ 3157.746549][ T7869] sysfs_do_create_link_sd+0xc0/0x110 [ 3157.752396][ T7869] device_add+0x7ed/0xfb0 [ 3157.756926][ T7869] wiphy_register+0x1e81/0x2c30 [ 3157.762082][ T7869] ? cfg80211_event_work+0x40/0x40 [ 3157.767767][ T7869] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3157.774153][ T7869] ? ieee80211_register_hw+0x28b6/0x3af0 [ 3157.780052][ T7869] ieee80211_register_hw+0x2aa1/0x3af0 [ 3157.785949][ T7869] ? ieee80211_tasklet_handler+0x20/0x20 [ 3157.791893][ T7869] ? rcu_is_watching+0x11/0xa0 [ 3157.797041][ T7869] ? memset+0x1e/0x40 [ 3157.801124][ T7869] ? hrtimer_init+0x10c/0x220 [ 3157.806251][ T7869] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3157.812295][ T7869] hwsim_new_radio_nl+0xa6f/0xc40 [ 3157.817550][ T7869] genl_rcv_msg+0xcea/0xf90 [ 3157.822861][ T7869] ? asm_common_interrupt+0x22/0x40 [ 3157.828624][ T7869] ? genl_bind+0x380/0x380 [ 3157.833066][ T7869] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3157.839245][ T7869] ? lock_chain_count+0x20/0x20 [ 3157.844211][ T7869] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3157.850808][ T7869] ? lockdep_hardirqs_on+0x94/0x140 [ 3157.856518][ T7869] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3157.863338][ T7869] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3157.871537][ T7869] ? lock_acquire+0x208/0x400 [ 3157.876461][ T7869] netlink_rcv_skb+0x1f5/0x440 [ 3157.881669][ T7869] ? genl_bind+0x380/0x380 [ 3157.886277][ T7869] ? netlink_ack+0xb50/0xb50 [ 3157.890893][ T7869] ? down_read+0x1aa/0x2e0 [ 3157.895865][ T7869] genl_rcv+0x24/0x40 [ 3157.899956][ T7869] netlink_unicast+0x774/0x920 [ 3157.905010][ T7869] netlink_sendmsg+0x8ba/0xbe0 [ 3157.909867][ T7869] ? lockdep_hardirqs_on+0x94/0x140 [ 3157.915188][ T7869] ? netlink_getsockopt+0x570/0x570 [ 3157.920772][ T7869] ? __sanitizer_cov_trace_pc+0xc/0x60 [ 3157.926499][ T7869] ? security_socket_sendmsg+0x7c/0xa0 [ 3157.932372][ T7869] ? netlink_getsockopt+0x570/0x570 [ 3157.938224][ T7869] ____sys_sendmsg+0x5b7/0x8f0 [ 3157.943190][ T7869] ? __sys_sendmsg_sock+0x30/0x30 [ 3157.948684][ T7869] ? ___sys_sendmsg+0x21b/0x2e0 [ 3157.953742][ T7869] ___sys_sendmsg+0x236/0x2e0 [ 3157.958956][ T7869] ? __sys_sendmsg+0x2a0/0x2a0 [ 3157.963726][ T7869] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3157.970072][ T7869] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3157.976517][ T7869] ? lockdep_hardirqs_on+0x94/0x140 [ 3157.981940][ T7869] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 3157.987861][ T7869] __se_sys_sendmsg+0x1af/0x290 [ 3157.992911][ T7869] ? __x64_sys_sendmsg+0x80/0x80 [ 3157.997963][ T7869] ? syscall_enter_from_user_mode+0x2a/0x70 [ 3158.004055][ T7869] do_syscall_64+0x4c/0xa0 [ 3158.009189][ T7869] ? clear_bhb_loop+0x30/0x80 [ 3158.014063][ T7869] ? clear_bhb_loop+0x30/0x80 [ 3158.018961][ T7869] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3158.025930][ T7869] RIP: 0033:0x7f124b2f6dd9 [ 3158.030625][ T7869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3158.051193][ T7869] RSP: 002b:00007f1249550028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3158.060375][ T7869] RAX: ffffffffffffffda RBX: 00007f124b56ffa0 RCX: 00007f124b2f6dd9 [ 3158.068910][ T7869] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 3158.077556][ T7869] RBP: 00007f124b38cd69 R08: 0000000000000000 R09: 0000000000000000 [ 3158.086114][ T7869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3158.094456][ T7869] R13: 00007f124b570038 R14: 00007f124b56ffa0 R15: 00007ffd1f4b1df8 [ 3158.102467][ T7869] [ 3158.127132][ T7886] netlink: 'syz.4.23474': attribute type 10 has an invalid length. [ 3158.472684][ T7901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23478'. [ 3158.487330][ T7901] device team0 entered promiscuous mode [ 3158.534802][ T7901] device team_slave_0 entered promiscuous mode [ 3158.558801][ T7901] device team_slave_1 entered promiscuous mode [ 3159.269107][ T7901] bond0: (slave team0): Releasing backup interface [ 3159.295983][ T7901] bridge0: port 3(team0) entered blocking state [ 3159.336655][ T7901] bridge0: port 3(team0) entered disabled state [ 3159.458727][ T7909] validate_nla: 2 callbacks suppressed [ 3159.458746][ T7909] netlink: 'syz.2.23480': attribute type 27 has an invalid length. [ 3159.641758][ T7909] netlink: 'syz.2.23480': attribute type 4 has an invalid length. [ 3160.112636][ T7909] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23480'. [ 3161.168196][ T7927] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3161.175255][ T7927] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3161.207764][T18427] Bluetooth: hci0: command 0x0406 tx timeout [ 3162.349650][ T7951] netlink: 'syz.1.23490': attribute type 16 has an invalid length. [ 3162.387884][ T7951] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23490'. [ 3162.478951][ T7953] netlink: 'syz.0.23493': attribute type 10 has an invalid length. [ 3162.952002][ T7965] netlink: 'syz.3.23495': attribute type 10 has an invalid length. [ 3163.031669][ T7965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23495'. [ 3163.185359][ T7971] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.23498'. [ 3164.180027][ T7981] netlink: 'syz.1.23501': attribute type 2 has an invalid length. [ 3164.299440][ T7974] netlink: 'syz.3.23499': attribute type 27 has an invalid length. [ 3164.339330][ T7974] netlink: 'syz.3.23499': attribute type 4 has an invalid length. [ 3164.384934][ T7974] netlink: 152 bytes leftover after parsing attributes in process `syz.3.23499'. [ 3164.672755][ T8000] netlink: 'syz.1.23507': attribute type 16 has an invalid length. [ 3164.697730][ T8000] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23507'. [ 3165.715936][ T8016] netlink: 'syz.0.23511': attribute type 21 has an invalid length. [ 3165.747023][ T8016] netlink: 128 bytes leftover after parsing attributes in process `syz.0.23511'. [ 3165.774483][ T8016] netlink: 'syz.0.23511': attribute type 4 has an invalid length. [ 3165.819786][ T8016] netlink: 'syz.0.23511': attribute type 3 has an invalid length. [ 3165.833437][ T8016] netlink: 3 bytes leftover after parsing attributes in process `syz.0.23511'. [ 3165.985889][ T8024] device sit0 entered promiscuous mode [ 3167.089799][ T8022] netlink: 'syz.2.23514': attribute type 27 has an invalid length. [ 3167.117584][ T8022] netlink: 'syz.2.23514': attribute type 4 has an invalid length. [ 3167.126205][ T8022] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23514'. [ 3167.206154][ T8041] netlink: 'syz.0.23518': attribute type 10 has an invalid length. [ 3167.286724][ T8042] netlink: 'syz.1.23519': attribute type 2 has an invalid length. [ 3167.306426][ T8042] netlink: 119 bytes leftover after parsing attributes in process `syz.1.23519'. [ 3167.445808][ T8051] netlink: 'syz.4.23520': attribute type 27 has an invalid length. [ 3167.463168][ T8051] netlink: 'syz.4.23520': attribute type 4 has an invalid length. [ 3167.493425][ T8051] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23520'. [ 3167.819620][ T8058] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23523'. [ 3168.464227][ T8069] netlink: 144452 bytes leftover after parsing attributes in process `syz.4.23524'. [ 3168.640546][ T8069] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3168.683668][ T8069] CPU: 1 PID: 8069 Comm: syz.4.23524 Not tainted syzkaller #0 [ 3168.691678][ T8069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3168.702792][ T8069] Call Trace: [ 3168.706340][ T8069] [ 3168.709673][ T8069] dump_stack_lvl+0x188/0x250 [ 3168.714593][ T8069] ? show_regs_print_info+0x20/0x20 [ 3168.720881][ T8069] ? load_image+0x400/0x400 [ 3168.725941][ T8069] sysfs_warn_dup+0x8a/0xa0 [ 3168.730703][ T8069] sysfs_do_create_link_sd+0xc0/0x110 [ 3168.736678][ T8069] device_add+0x7ed/0xfb0 [ 3168.741561][ T8069] wiphy_register+0x1e81/0x2c30 [ 3168.746792][ T8069] ? cfg80211_event_work+0x40/0x40 [ 3168.752238][ T8069] ? minstrel_ht_alloc+0x808/0x980 [ 3168.757495][ T8069] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3168.764074][ T8069] ieee80211_register_hw+0x2aa1/0x3af0 [ 3168.769871][ T8069] ? ieee80211_tasklet_handler+0x20/0x20 [ 3168.775894][ T8069] ? rcu_is_watching+0x11/0xa0 [ 3168.780834][ T8069] ? memset+0x1e/0x40 [ 3168.785147][ T8069] ? hrtimer_init+0x10c/0x220 [ 3168.790414][ T8069] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3168.796770][ T8069] hwsim_new_radio_nl+0xa6f/0xc40 [ 3168.801901][ T8069] genl_rcv_msg+0xcea/0xf90 [ 3168.806593][ T8069] ? genl_bind+0x380/0x380 [ 3168.811344][ T8069] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 3168.817482][ T8069] ? verify_lock_unused+0x140/0x140 [ 3168.822835][ T8069] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 3168.829492][ T8069] ? perf_trace_lock+0x301/0x390 [ 3168.834746][ T8069] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3168.841696][ T8069] netlink_rcv_skb+0x1f5/0x440 [ 3168.846777][ T8069] ? genl_bind+0x380/0x380 [ 3168.851765][ T8069] ? netlink_ack+0xb50/0xb50 [ 3168.856714][ T8069] ? __lock_acquire+0x7d10/0x7d10 [ 3168.861998][ T8069] ? down_read+0x1aa/0x2e0 [ 3168.866595][ T8069] genl_rcv+0x24/0x40 [ 3168.870710][ T8069] netlink_unicast+0x774/0x920 [ 3168.875971][ T8069] netlink_sendmsg+0x8ba/0xbe0 [ 3168.881157][ T8069] ? netlink_getsockopt+0x570/0x570 [ 3168.886591][ T8069] ? aa_sock_msg_perm+0x94/0x150 [ 3168.891674][ T8069] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3168.897324][ T8069] ? security_socket_sendmsg+0x7c/0xa0 [ 3168.903476][ T8069] ? netlink_getsockopt+0x570/0x570 [ 3168.909176][ T8069] ____sys_sendmsg+0x5b7/0x8f0 [ 3168.914542][ T8069] ? __sys_sendmsg_sock+0x30/0x30 [ 3168.920752][ T8069] ? import_iovec+0x6f/0xa0 [ 3168.926136][ T8069] ___sys_sendmsg+0x236/0x2e0 [ 3168.931176][ T8069] ? __sys_sendmsg+0x2a0/0x2a0 [ 3168.936571][ T8069] __se_sys_sendmsg+0x1af/0x290 [ 3168.942206][ T8069] ? __x64_sys_sendmsg+0x80/0x80 [ 3168.947703][ T8069] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3168.954956][ T8069] ? lockdep_hardirqs_on+0x94/0x140 [ 3168.960560][ T8069] do_syscall_64+0x4c/0xa0 [ 3168.965250][ T8069] ? clear_bhb_loop+0x30/0x80 [ 3168.970247][ T8069] ? clear_bhb_loop+0x30/0x80 [ 3168.975058][ T8069] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3168.981599][ T8069] RIP: 0033:0x7fe9b1b06dd9 [ 3168.986444][ T8069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3169.007306][ T8069] RSP: 002b:00007fe9afd1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3169.015950][ T8069] RAX: ffffffffffffffda RBX: 00007fe9b1d80180 RCX: 00007fe9b1b06dd9 [ 3169.024609][ T8069] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 3169.033112][ T8069] RBP: 00007fe9b1b9cd69 R08: 0000000000000000 R09: 0000000000000000 [ 3169.041615][ T8069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3169.050151][ T8069] R13: 00007fe9b1d80218 R14: 00007fe9b1d80180 R15: 00007ffed6487828 [ 3169.059076][ T8069] [ 3169.685645][ T8092] validate_nla: 1 callbacks suppressed [ 3169.685708][ T8092] netlink: 'syz.0.23534': attribute type 27 has an invalid length. [ 3169.900102][ T8092] netlink: 'syz.0.23534': attribute type 4 has an invalid length. [ 3169.951683][ T8092] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23534'. [ 3170.315077][ T8110] netlink: 'syz.4.23538': attribute type 21 has an invalid length. [ 3170.342001][ T8110] netlink: 128 bytes leftover after parsing attributes in process `syz.4.23538'. [ 3170.353411][ T8110] netlink: 'syz.4.23538': attribute type 4 has an invalid length. [ 3170.392905][ T8110] netlink: 'syz.4.23538': attribute type 3 has an invalid length. [ 3170.420831][ T8110] netlink: 3 bytes leftover after parsing attributes in process `syz.4.23538'. [ 3170.686746][ T8120] netlink: 'syz.0.23548': attribute type 27 has an invalid length. [ 3170.743165][ T8120] netlink: 'syz.0.23548': attribute type 4 has an invalid length. [ 3170.860411][ T8120] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23548'. [ 3171.164460][ T8121] netlink: 'syz.1.23539': attribute type 10 has an invalid length. [ 3171.298153][ T8123] netlink: 'syz.3.23540': attribute type 16 has an invalid length. [ 3171.383445][ T8123] netlink: 152 bytes leftover after parsing attributes in process `syz.3.23540'. [ 3171.637823][ T8130] netlink: 144452 bytes leftover after parsing attributes in process `syz.2.23542'. [ 3171.756472][ T8130] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3171.818356][ T8130] CPU: 1 PID: 8130 Comm: syz.2.23542 Not tainted syzkaller #0 [ 3171.826261][ T8130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3171.836869][ T8130] Call Trace: [ 3171.840544][ T8130] [ 3171.843614][ T8130] dump_stack_lvl+0x188/0x250 [ 3171.848783][ T8130] ? show_regs_print_info+0x20/0x20 [ 3171.854453][ T8130] ? load_image+0x400/0x400 [ 3171.859777][ T8130] sysfs_warn_dup+0x8a/0xa0 [ 3171.864797][ T8130] sysfs_do_create_link_sd+0xc0/0x110 [ 3171.870814][ T8130] device_add+0x7ed/0xfb0 [ 3171.875726][ T8130] wiphy_register+0x1e81/0x2c30 [ 3171.881058][ T8130] ? cfg80211_event_work+0x40/0x40 [ 3171.886484][ T8130] ? minstrel_ht_alloc+0x808/0x980 [ 3171.892180][ T8130] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3171.898765][ T8130] ieee80211_register_hw+0x2aa1/0x3af0 [ 3171.904725][ T8130] ? ieee80211_tasklet_handler+0x20/0x20 [ 3171.910473][ T8130] ? rcu_is_watching+0x11/0xa0 [ 3171.915739][ T8130] ? memset+0x1e/0x40 [ 3171.920276][ T8130] ? hrtimer_init+0x10c/0x220 [ 3171.925153][ T8130] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3171.931196][ T8130] hwsim_new_radio_nl+0xa6f/0xc40 [ 3171.936454][ T8130] genl_rcv_msg+0xcea/0xf90 [ 3171.940985][ T8130] ? lock_chain_count+0x20/0x20 [ 3171.945960][ T8130] ? genl_bind+0x380/0x380 [ 3171.950489][ T8130] ? verify_lock_unused+0x140/0x140 [ 3171.955709][ T8130] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 3171.962421][ T8130] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3171.969049][ T8130] netlink_rcv_skb+0x1f5/0x440 [ 3171.974154][ T8130] ? genl_bind+0x380/0x380 [ 3171.978619][ T8130] ? netlink_ack+0xb50/0xb50 [ 3171.983242][ T8130] ? __lock_acquire+0x7d10/0x7d10 [ 3171.988829][ T8130] ? down_read+0x1aa/0x2e0 [ 3171.993393][ T8130] genl_rcv+0x24/0x40 [ 3171.997895][ T8130] netlink_unicast+0x774/0x920 [ 3172.003271][ T8130] netlink_sendmsg+0x8ba/0xbe0 [ 3172.008455][ T8130] ? netlink_getsockopt+0x570/0x570 [ 3172.013991][ T8130] ? aa_sock_msg_perm+0x94/0x150 [ 3172.019860][ T8130] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3172.025954][ T8130] ? security_socket_sendmsg+0x7c/0xa0 [ 3172.031710][ T8130] ? netlink_getsockopt+0x570/0x570 [ 3172.037312][ T8130] ____sys_sendmsg+0x5b7/0x8f0 [ 3172.042741][ T8130] ? __sys_sendmsg_sock+0x30/0x30 [ 3172.048189][ T8130] ? import_iovec+0x6f/0xa0 [ 3172.053271][ T8130] ___sys_sendmsg+0x236/0x2e0 [ 3172.058258][ T8130] ? __sys_sendmsg+0x2a0/0x2a0 [ 3172.063502][ T8130] ? percpu_counter_add_batch+0x13b/0x160 [ 3172.069700][ T8130] __se_sys_sendmsg+0x1af/0x290 [ 3172.075030][ T8130] ? __x64_sys_sendmsg+0x80/0x80 [ 3172.080187][ T8130] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3172.086504][ T8130] ? lockdep_hardirqs_on+0x94/0x140 [ 3172.092237][ T8130] do_syscall_64+0x4c/0xa0 [ 3172.096914][ T8130] ? clear_bhb_loop+0x30/0x80 [ 3172.102671][ T8130] ? clear_bhb_loop+0x30/0x80 [ 3172.108125][ T8130] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3172.114310][ T8130] RIP: 0033:0x7fc113a7bdd9 [ 3172.119405][ T8130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3172.141421][ T8130] RSP: 002b:00007fc111cd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3172.150330][ T8130] RAX: ffffffffffffffda RBX: 00007fc113cf4fa0 RCX: 00007fc113a7bdd9 [ 3172.159150][ T8130] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 3172.167736][ T8130] RBP: 00007fc113b11d69 R08: 0000000000000000 R09: 0000000000000000 [ 3172.176074][ T8130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3172.184677][ T8130] R13: 00007fc113cf5038 R14: 00007fc113cf4fa0 R15: 00007ffc37c9a628 [ 3172.193218][ T8130] [ 3172.436146][ T8156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3172.572173][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3172.593972][ T8158] netlink: 'syz.0.23552': attribute type 10 has an invalid length. [ 3172.741173][ T8163] .`: (slave geneve0): Error: Slave device does not support XDP [ 3173.157778][ T8177] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23556'. [ 3173.585949][ T8176] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23559'. [ 3173.853069][ T8191] netlink: 144452 bytes leftover after parsing attributes in process `syz.3.23564'. [ 3173.899528][ T8191] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3173.911952][ T8191] CPU: 0 PID: 8191 Comm: syz.3.23564 Not tainted syzkaller #0 [ 3173.919979][ T8191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3173.930325][ T8191] Call Trace: [ 3173.933902][ T8191] [ 3173.937244][ T8191] dump_stack_lvl+0x188/0x250 [ 3173.942559][ T8191] ? show_regs_print_info+0x20/0x20 [ 3173.948235][ T8191] ? load_image+0x400/0x400 [ 3173.952964][ T8191] sysfs_warn_dup+0x8a/0xa0 [ 3173.958164][ T8191] sysfs_do_create_link_sd+0xc0/0x110 [ 3173.964685][ T8191] device_add+0x7ed/0xfb0 [ 3173.969430][ T8191] wiphy_register+0x1e81/0x2c30 [ 3173.974753][ T8191] ? cfg80211_event_work+0x40/0x40 [ 3173.980100][ T8191] ? minstrel_ht_alloc+0x808/0x980 [ 3173.985746][ T8191] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3173.992603][ T8191] ieee80211_register_hw+0x2aa1/0x3af0 [ 3173.998478][ T8191] ? ieee80211_tasklet_handler+0x20/0x20 [ 3174.004428][ T8191] ? rcu_is_watching+0x11/0xa0 [ 3174.010054][ T8191] ? memset+0x1e/0x40 [ 3174.014491][ T8191] ? hrtimer_init+0x10c/0x220 [ 3174.019836][ T8191] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3174.026318][ T8191] hwsim_new_radio_nl+0xa6f/0xc40 [ 3174.031644][ T8191] genl_rcv_msg+0xcea/0xf90 [ 3174.036348][ T8191] ? lock_chain_count+0x20/0x20 [ 3174.041401][ T8191] ? genl_bind+0x380/0x380 [ 3174.046220][ T8191] ? verify_lock_unused+0x140/0x140 [ 3174.052247][ T8191] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 3174.059826][ T8191] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3174.066577][ T8191] netlink_rcv_skb+0x1f5/0x440 [ 3174.071537][ T8191] ? genl_bind+0x380/0x380 [ 3174.076313][ T8191] ? netlink_ack+0xb50/0xb50 [ 3174.080937][ T8191] ? __lock_acquire+0x7d10/0x7d10 [ 3174.086252][ T8191] ? down_read+0x1aa/0x2e0 [ 3174.090776][ T8191] genl_rcv+0x24/0x40 [ 3174.094781][ T8191] netlink_unicast+0x774/0x920 [ 3174.099995][ T8191] netlink_sendmsg+0x8ba/0xbe0 [ 3174.105277][ T8191] ? netlink_getsockopt+0x570/0x570 [ 3174.111179][ T8191] ? aa_sock_msg_perm+0x94/0x150 [ 3174.116505][ T8191] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3174.122345][ T8191] ? security_socket_sendmsg+0x7c/0xa0 [ 3174.128229][ T8191] ? netlink_getsockopt+0x570/0x570 [ 3174.133794][ T8191] ____sys_sendmsg+0x5b7/0x8f0 [ 3174.138725][ T8191] ? __sys_sendmsg_sock+0x30/0x30 [ 3174.143968][ T8191] ? import_iovec+0x6f/0xa0 [ 3174.148847][ T8191] ___sys_sendmsg+0x236/0x2e0 [ 3174.153640][ T8191] ? __sys_sendmsg+0x2a0/0x2a0 [ 3174.158679][ T8191] ? percpu_counter_add_batch+0x13b/0x160 [ 3174.164752][ T8191] __se_sys_sendmsg+0x1af/0x290 [ 3174.169655][ T8191] ? __x64_sys_sendmsg+0x80/0x80 [ 3174.174882][ T8191] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3174.181433][ T8191] ? lockdep_hardirqs_on+0x94/0x140 [ 3174.187618][ T8191] do_syscall_64+0x4c/0xa0 [ 3174.193876][ T8191] ? clear_bhb_loop+0x30/0x80 [ 3174.199020][ T8191] ? clear_bhb_loop+0x30/0x80 [ 3174.204066][ T8191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3174.210202][ T8191] RIP: 0033:0x7fa821befdd9 [ 3174.215270][ T8191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3174.235598][ T8191] RSP: 002b:00007fa81fe49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3174.245284][ T8191] RAX: ffffffffffffffda RBX: 00007fa821e68fa0 RCX: 00007fa821befdd9 [ 3174.253796][ T8191] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 3174.262578][ T8191] RBP: 00007fa821c85d69 R08: 0000000000000000 R09: 0000000000000000 [ 3174.271214][ T8191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3174.279832][ T8191] R13: 00007fa821e69038 R14: 00007fa821e68fa0 R15: 00007ffe1c02a588 [ 3174.288657][ T8191] [ 3174.451317][ T8198] device sit0 entered promiscuous mode [ 3175.460477][ T8216] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.23571'. [ 3175.629125][ T8222] validate_nla: 4 callbacks suppressed [ 3175.629148][ T8222] netlink: 'syz.2.23572': attribute type 16 has an invalid length. [ 3175.757721][ T8222] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23572'. [ 3176.002561][ T8227] syz.3.23574[8227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3176.002712][ T8227] syz.3.23574[8227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3177.160341][ T8256] netlink: 'syz.0.23583': attribute type 16 has an invalid length. [ 3177.183478][ T8255] netlink: 'syz.1.23581': attribute type 3 has an invalid length. [ 3177.217744][ T8256] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23583'. [ 3177.300161][ T8255] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.23581'. [ 3177.513494][ T8263] netlink: 'syz.3.23586': attribute type 10 has an invalid length. [ 3177.633347][ T8262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3177.769764][ T8266] netlink: 'syz.0.23587': attribute type 27 has an invalid length. [ 3177.786222][ T8266] netlink: 'syz.0.23587': attribute type 4 has an invalid length. [ 3177.798048][ T8266] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23587'. [ 3177.949709][ T8275] netlink: 'syz.4.23589': attribute type 16 has an invalid length. [ 3178.110426][ T8275] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23589'. [ 3178.610267][ T8279] netlink: 'syz.3.23590': attribute type 10 has an invalid length. [ 3178.623624][ T8279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23590'. [ 3178.691415][ T8281] netlink: 'syz.2.23591': attribute type 9 has an invalid length. [ 3178.839197][ T8281] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.23591'. [ 3179.140215][ T8286] netlink: 'syz.1.23602': attribute type 16 has an invalid length. [ 3179.165047][ T8286] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23602'. [ 3179.477640][ T8300] netlink: 119 bytes leftover after parsing attributes in process `syz.0.23595'. [ 3179.697237][ T8306] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23597'. [ 3180.118470][ T8318] netlink: 144452 bytes leftover after parsing attributes in process `syz.0.23601'. [ 3180.163669][ T8318] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3180.176235][ T8318] CPU: 1 PID: 8318 Comm: syz.0.23601 Not tainted syzkaller #0 [ 3180.184672][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3180.195844][ T8318] Call Trace: [ 3180.199327][ T8318] [ 3180.202559][ T8318] dump_stack_lvl+0x188/0x250 [ 3180.207838][ T8318] ? show_regs_print_info+0x20/0x20 [ 3180.214064][ T8318] ? load_image+0x400/0x400 [ 3180.218971][ T8318] sysfs_warn_dup+0x8a/0xa0 [ 3180.224062][ T8318] sysfs_do_create_link_sd+0xc0/0x110 [ 3180.230527][ T8318] device_add+0x7ed/0xfb0 [ 3180.235237][ T8318] wiphy_register+0x1e81/0x2c30 [ 3180.240362][ T8318] ? cfg80211_event_work+0x40/0x40 [ 3180.246608][ T8318] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3180.253409][ T8318] ieee80211_register_hw+0x2aa1/0x3af0 [ 3180.260048][ T8318] ? ieee80211_tasklet_handler+0x20/0x20 [ 3180.266179][ T8318] ? rcu_is_watching+0x11/0xa0 [ 3180.271864][ T8318] ? memset+0x1e/0x40 [ 3180.276721][ T8318] ? hrtimer_init+0x10c/0x220 [ 3180.281721][ T8318] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3180.287766][ T8318] hwsim_new_radio_nl+0xa6f/0xc40 [ 3180.293834][ T8318] genl_rcv_msg+0xcea/0xf90 [ 3180.298391][ T8318] ? genl_bind+0x380/0x380 [ 3180.303629][ T8318] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3180.310225][ T8318] ? lock_chain_count+0x20/0x20 [ 3180.316000][ T8318] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3180.322268][ T8318] ? lockdep_hardirqs_on+0x94/0x140 [ 3180.328356][ T8318] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3180.335381][ T8318] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3180.342995][ T8318] ? lock_acquire+0x208/0x400 [ 3180.348044][ T8318] netlink_rcv_skb+0x1f5/0x440 [ 3180.353637][ T8318] ? genl_bind+0x380/0x380 [ 3180.358591][ T8318] ? netlink_ack+0xb50/0xb50 [ 3180.363731][ T8318] ? __lock_acquire+0x7d10/0x7d10 [ 3180.369146][ T8318] ? down_read+0x1aa/0x2e0 [ 3180.373804][ T8318] genl_rcv+0x24/0x40 [ 3180.378265][ T8318] netlink_unicast+0x774/0x920 [ 3180.383261][ T8318] netlink_sendmsg+0x8ba/0xbe0 [ 3180.388348][ T8318] ? netlink_getsockopt+0x570/0x570 [ 3180.394590][ T8318] ? aa_sock_msg_perm+0x94/0x150 [ 3180.399840][ T8318] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3180.405738][ T8318] ? security_socket_sendmsg+0x7c/0xa0 [ 3180.412880][ T8318] ? netlink_getsockopt+0x570/0x570 [ 3180.419677][ T8318] ____sys_sendmsg+0x5b7/0x8f0 [ 3180.424968][ T8318] ? __sys_sendmsg_sock+0x30/0x30 [ 3180.430676][ T8318] ? import_iovec+0x6f/0xa0 [ 3180.435407][ T8318] ___sys_sendmsg+0x236/0x2e0 [ 3180.440550][ T8318] ? __sys_sendmsg+0x2a0/0x2a0 [ 3180.445677][ T8318] ? ktime_get_real_ts64+0x440/0x440 [ 3180.451713][ T8318] __se_sys_sendmsg+0x1af/0x290 [ 3180.457333][ T8318] ? __x64_sys_sendmsg+0x80/0x80 [ 3180.462857][ T8318] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3180.469532][ T8318] ? lockdep_hardirqs_on+0x94/0x140 [ 3180.474889][ T8318] do_syscall_64+0x4c/0xa0 [ 3180.479938][ T8318] ? clear_bhb_loop+0x30/0x80 [ 3180.485276][ T8318] ? clear_bhb_loop+0x30/0x80 [ 3180.490358][ T8318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3180.496899][ T8318] RIP: 0033:0x7f124b2f6dd9 [ 3180.501521][ T8318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3180.522555][ T8318] RSP: 002b:00007f124952f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3180.532090][ T8318] RAX: ffffffffffffffda RBX: 00007f124b570090 RCX: 00007f124b2f6dd9 [ 3180.541489][ T8318] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 3180.550820][ T8318] RBP: 00007f124b38cd69 R08: 0000000000000000 R09: 0000000000000000 [ 3180.559949][ T8318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3180.568854][ T8318] R13: 00007f124b570128 R14: 00007f124b570090 R15: 00007ffd1f4b1df8 [ 3180.577484][ T8318] [ 3180.729086][ T8326] validate_nla: 2 callbacks suppressed [ 3180.729106][ T8326] netlink: 'syz.2.23604': attribute type 10 has an invalid length. [ 3180.865599][ T8320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3181.535814][ T8348] netlink: 'syz.4.23611': attribute type 9 has an invalid length. [ 3181.874910][ T8345] netlink: 'syz.1.23610': attribute type 16 has an invalid length. [ 3182.113297][ T8357] netlink: 'syz.2.23613': attribute type 3 has an invalid length. [ 3182.352704][ T8365] netlink: 'syz.1.23614': attribute type 16 has an invalid length. [ 3182.383957][ T8365] __nla_validate_parse: 3 callbacks suppressed [ 3182.383982][ T8365] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23614'. [ 3183.068662][ T8378] netlink: 'syz.1.23620': attribute type 10 has an invalid length. [ 3183.423343][ T8378] device wlan1 entered promiscuous mode [ 3183.450393][ T8378] team0: Port device wlan1 added [ 3183.559973][ T8376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.680327][ T8395] device sit0 entered promiscuous mode [ 3184.505761][ T8412] netlink: 'syz.0.23629': attribute type 3 has an invalid length. [ 3184.626630][ T8412] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.23629'. [ 3184.870582][ T8408] netlink: 'syz.2.23630': attribute type 27 has an invalid length. [ 3185.014297][ T8420] netlink: 'syz.1.23631': attribute type 9 has an invalid length. [ 3185.028555][ T8408] netlink: 'syz.2.23630': attribute type 4 has an invalid length. [ 3185.047908][ T8420] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.23631'. [ 3185.051629][ T8408] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23630'. [ 3185.144286][ T8416] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23632'. [ 3185.827753][ T8443] validate_nla: 1 callbacks suppressed [ 3185.827776][ T8443] netlink: 'syz.0.23641': attribute type 10 has an invalid length. [ 3185.946396][ T8443] device wlan1 entered promiscuous mode [ 3186.013349][ T8443] team0: Port device wlan1 added [ 3186.029079][ T8448] netlink: 'syz.1.23640': attribute type 16 has an invalid length. [ 3186.068472][ T8442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3186.080869][ T8448] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23640'. [ 3186.094116][ T8449] device sit0 entered promiscuous mode [ 3186.616103][ T8462] netlink: 'syz.4.23645': attribute type 3 has an invalid length. [ 3186.687696][ T8462] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.23645'. [ 3188.788619][ T8479] netlink: 'syz.1.23663': attribute type 27 has an invalid length. [ 3188.829023][ T8479] netlink: 'syz.1.23663': attribute type 4 has an invalid length. [ 3188.877100][ T8479] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23663'. [ 3188.900699][ T8482] netlink: 'syz.4.23652': attribute type 10 has an invalid length. [ 3188.910932][ T8482] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23652'. [ 3188.921743][ T8484] device wlan0 left promiscuous mode [ 3188.931451][ T8487] netlink: 'syz.3.23651': attribute type 9 has an invalid length. [ 3188.944512][ T8487] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.23651'. [ 3189.133797][ T8491] netlink: 'syz.4.23654': attribute type 10 has an invalid length. [ 3189.193377][ T8494] netlink: 'syz.0.23668': attribute type 27 has an invalid length. [ 3189.210666][ T8494] netlink: 'syz.0.23668': attribute type 4 has an invalid length. [ 3189.211909][ T8489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3189.270263][ T8494] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23668'. [ 3189.674371][ T8510] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23657'. [ 3189.785800][ T8517] netlink: 830 bytes leftover after parsing attributes in process `syz.0.23662'. [ 3190.239851][ T8527] netlink: 152 bytes leftover after parsing attributes in process `syz.3.23677'. [ 3190.836187][ T8536] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23672'. [ 3190.924050][ T8534] validate_nla: 4 callbacks suppressed [ 3190.924111][ T8534] netlink: 'syz.2.23669': attribute type 10 has an invalid length. [ 3190.990098][ T8534] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23669'. [ 3191.104887][ T8544] netlink: 'syz.0.23673': attribute type 9 has an invalid length. [ 3191.121886][ T8544] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.23673'. [ 3192.391025][ T8577] netlink: 'syz.4.23682': attribute type 16 has an invalid length. [ 3193.015786][ T8601] netlink: 'syz.1.23692': attribute type 10 has an invalid length. [ 3193.132121][ T8601] device wg1 entered promiscuous mode [ 3193.184613][ T8601] team0: Device wg1 is of different type [ 3193.453219][ T8607] netlink: 'syz.0.23693': attribute type 9 has an invalid length. [ 3193.614460][ T8597] delete_channel: no stack [ 3193.839136][ T8612] netlink: 'syz.4.23696': attribute type 10 has an invalid length. [ 3194.058262][ T8623] device syzkaller0 left promiscuous mode [ 3194.623088][ T8628] netlink: 'syz.1.23699': attribute type 16 has an invalid length. [ 3194.649182][ T8628] __nla_validate_parse: 3 callbacks suppressed [ 3194.649206][ T8628] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23699'. [ 3194.853814][ T8632] netlink: 'syz.3.23704': attribute type 10 has an invalid length. [ 3194.875525][ T8632] netlink: 2 bytes leftover after parsing attributes in process `syz.3.23704'. [ 3194.926234][ T8636] device syzkaller0 entered promiscuous mode [ 3194.944160][ T8638] netlink: 'syz.4.23707': attribute type 10 has an invalid length. [ 3195.355730][ T8652] netlink: 'syz.1.23712': attribute type 10 has an invalid length. [ 3195.425738][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 3195.498253][ T8652] device bridge_slave_1 left promiscuous mode [ 3195.510262][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 3195.557418][ T8652] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 3195.583201][ T8655] device wg1 entered promiscuous mode [ 3195.614292][ T8655] team0: Device wg1 is of different type [ 3195.674070][ T8654] delete_channel: no stack [ 3195.893056][ T8664] netlink: 40 bytes leftover after parsing attributes in process `syz.1.23715'. [ 3195.952464][ T8664] device ipvlan1 entered promiscuous mode [ 3196.110451][ T8664] bridge0: port 2(ipvlan1) entered blocking state [ 3196.177830][ T8664] bridge0: port 2(ipvlan1) entered disabled state [ 3196.192099][ T8664] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 3196.242986][ T8672] validate_nla: 2 callbacks suppressed [ 3196.243008][ T8672] netlink: 'syz.4.23718': attribute type 16 has an invalid length. [ 3196.296720][ T8672] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23718'. [ 3196.352039][ T8675] netlink: 'syz.2.23719': attribute type 10 has an invalid length. [ 3196.651660][ T8686] netlink: 'syz.4.23723': attribute type 10 has an invalid length. [ 3196.784528][ T8690] netlink: 'syz.1.23724': attribute type 3 has an invalid length. [ 3196.801637][ T8690] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.23724'. [ 3197.057216][ T8703] netlink: 'syz.2.23727': attribute type 10 has an invalid length. [ 3197.162702][ T8701] delete_channel: no stack [ 3197.196376][ T8711] netlink: 'syz.0.23728': attribute type 10 has an invalid length. [ 3197.273428][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 3197.316465][ T8711] device bridge_slave_1 left promiscuous mode [ 3197.344139][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 3197.432923][ T8711] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 3197.501632][ T8709] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3198.130750][ T8717] netlink: 'syz.0.23733': attribute type 16 has an invalid length. [ 3198.140074][ T8717] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23733'. [ 3198.372041][ T8732] netlink: 'syz.1.23737': attribute type 10 has an invalid length. [ 3198.446299][ T8731] netlink: 'syz.0.23735': attribute type 10 has an invalid length. [ 3198.462238][ T8731] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23735'. [ 3198.500742][ T8731] device ipvlan1 entered promiscuous mode [ 3198.591328][ T8731] bridge0: port 2(ipvlan1) entered blocking state [ 3198.616490][ T8731] bridge0: port 2(ipvlan1) entered disabled state [ 3198.630361][ T8731] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 3198.744995][ T8736] netlink: 'syz.2.23742': attribute type 27 has an invalid length. [ 3198.805401][ T8736] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23742'. [ 3198.953801][ T8741] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23754'. [ 3199.325134][ T8754] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23747'. [ 3199.946460][ T8771] __nla_validate_parse: 1 callbacks suppressed [ 3199.946526][ T8771] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23761'. [ 3200.297493][ T8782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3200.308114][ T8782] IPv6: NLM_F_CREATE should be set when creating new route [ 3200.317613][ T8782] IPv6: NLM_F_CREATE should be set when creating new route [ 3200.804464][ T8795] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23759'. [ 3200.882512][ T8787] netlink: 152 bytes leftover after parsing attributes in process `syz.0.23757'. [ 3200.917026][ T8797] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.23760'. [ 3201.042215][ T8799] netlink: 132 bytes leftover after parsing attributes in process `syz.1.23771'. [ 3201.296399][ T8816] validate_nla: 13 callbacks suppressed [ 3201.296877][ T8816] netlink: 'syz.2.23765': attribute type 10 has an invalid length. [ 3201.420097][ T8809] netlink: 'syz.0.23775': attribute type 10 has an invalid length. [ 3201.541162][ T8806] netlink: 'syz.3.23763': attribute type 27 has an invalid length. [ 3201.630473][ T8806] netlink: 'syz.3.23763': attribute type 4 has an invalid length. [ 3201.654161][ T8806] netlink: 152 bytes leftover after parsing attributes in process `syz.3.23763'. [ 3201.685452][ T8819] netlink: 'syz.4.23776': attribute type 27 has an invalid length. [ 3201.710380][ T8819] netlink: 'syz.4.23776': attribute type 4 has an invalid length. [ 3201.719098][T14193] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 3201.792691][ T8819] netlink: 152 bytes leftover after parsing attributes in process `syz.4.23776'. [ 3205.218992][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 3205.225421][ T1431] ieee802154 phy1 wpan1: encryption failed: -22