last executing test programs:

13m50.576110293s ago: executing program 3 (id=5093):
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg$kcm(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/80, 0x50}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)="b8e9", 0x2}], 0x1}, 0x4000001)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x20048811)
recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/102, 0x66}], 0x1}, 0x40)

13m50.235584312s ago: executing program 3 (id=5085):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.current\x00', 0x26e1, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4)

13m46.566277741s ago: executing program 3 (id=5098):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
r2 = socket$kcm(0x11, 0x3, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042720920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0)

13m46.133061932s ago: executing program 3 (id=5105):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7, 0xfffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r3, &(0x7f00000001c0)=ANY=[], 0xffdd)

13m44.854808302s ago: executing program 3 (id=5112):
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xae, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be3f9cbb2623032, @perf_bp={0x0, 0x6}, 0x40a, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x5f, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002b40)={r2, &(0x7f0000001a80), 0x0}, 0x20)

13m44.609373198s ago: executing program 3 (id=5118):
r0 = getpid()
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x5, 0x0)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x100}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close(0x3)

13m28.979529017s ago: executing program 32 (id=5118):
r0 = getpid()
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x5, 0x0)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x100}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
close(0x3)

3.29002661s ago: executing program 0 (id=10406):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0xf6, 0x200000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

3.138422724s ago: executing program 5 (id=10397):
openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0xc2841, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5b, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x801)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x10022)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

2.701949754s ago: executing program 4 (id=10401):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x2000c884)
socket$kcm(0x2, 0x1, 0x84)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x120)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1c0000005e00", 0x6}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))

2.695982864s ago: executing program 5 (id=10412):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000600)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1f, 0xf, 0x1, 0x21e02597, 0x20428, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f00000002c0), 0x4)

2.47058802s ago: executing program 5 (id=10403):
r0 = socket$kcm(0xa, 0x2, 0x3a)
recvmsg(r0, 0x0, 0x40010002)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xf, 0x3, 0x2)
recvmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xe00, 0x0}, 0x20)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100, 0x1, 0x8001}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
socket$kcm(0x29, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94)

1.599197481s ago: executing program 5 (id=10407):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd8f}, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x80, 0x0, 0x0, 0x80c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xac5d, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)

1.598384471s ago: executing program 0 (id=10418):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x2000c884)
socket$kcm(0x2, 0x1, 0x84)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x120)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1c0000005e00", 0x6}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))

1.597342321s ago: executing program 4 (id=10410):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x2}, 0x10}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x719800, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x2})
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000f80)=0x6)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfe33)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
sendmsg$kcm(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0)

1.424711605s ago: executing program 4 (id=10411):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001300000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)="1400000016001963d25a80648c56915a4eaa2bfe", 0x14}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x7, 0xeffffffc, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

1.423874565s ago: executing program 2 (id=10413):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x10c002, 0xac5d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd28, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000f00000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)

1.338612927s ago: executing program 1 (id=10414):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='A', 0x1}], 0x1}, 0x24008051)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x20, 0x4, 0x7, 0xe}]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20)
ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180))

1.252974219s ago: executing program 2 (id=10415):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000600)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1f, 0xf, 0x1, 0x21e02597, 0x20428, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f00000002c0), 0x4)

1.142597292s ago: executing program 4 (id=10416):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x18089, 0xf, 0x0, 0x9, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, 0x0)

1.115759253s ago: executing program 2 (id=10417):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0xf6, 0x200000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

936.254327ms ago: executing program 4 (id=10419):
r0 = socket$kcm(0xa, 0x2, 0x3a)
recvmsg(r0, 0x0, 0x40010002)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xf, 0x3, 0x2)
recvmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xe00, 0x0}, 0x20)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100, 0x1, 0x8001}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
socket$kcm(0x29, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94)

934.766687ms ago: executing program 1 (id=10420):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0x10001, 0xffffffffffffff08}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x18, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
close(r0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50)
r1 = socket$kcm(0x2b, 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000001d40)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000001c80)=[{&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000001d80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001a00)=""/47, 0x2f}, {&(0x7f0000001c00)=""/94, 0x5e}], 0x5, &(0x7f0000001d00)}, 0x1)
close(r1)

812.62939ms ago: executing program 1 (id=10421):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))

665.164223ms ago: executing program 0 (id=10422):
r0 = socket$kcm(0x21, 0x2, 0xa)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1100, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406040016c008685c400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d50300000000000000e0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c23003f)
write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r4], 0xa)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11}, 0xa)
sendmsg$kcm(r0, 0x0, 0x0)

435.656369ms ago: executing program 0 (id=10423):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8cda, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r1 = socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0)

435.409609ms ago: executing program 1 (id=10424):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000005b000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a140e1e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b619a82c4706531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc80a7a56eeb25ed0adfb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x2}, 0x10}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x719800, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x2})
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000f80)=0x6)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfe33)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
sendmsg$kcm(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0)

435.266579ms ago: executing program 2 (id=10425):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08", 0x9}], 0x1}, 0x50)
r0 = socket$kcm(0x2, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@fwd, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @ptr={0xa, 0x0, 0x0, 0x2, 0x1}]}}, 0x0, 0x5a}, 0x28)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x9c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94)
socketpair(0x1e, 0x3, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000001080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tw'], 0xa)

435.025979ms ago: executing program 5 (id=10426):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb2, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x8e}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_clone(0x3100000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x22, &(0x7f0000000280)=ANY=[], 0x128}, 0x8010)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r0, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
socket$kcm(0xa, 0x2, 0x73)

319.076862ms ago: executing program 2 (id=10427):
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}})
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000004000000"], 0x50)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={<r4=>0x0, <r5=>0x0})
close(r4)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70c03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x200}, 0x0, 0xd, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127)
r6 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044)

318.363452ms ago: executing program 0 (id=10428):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001300000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)="1400000016001963d25a80648c56915a4eaa2bfe", 0x14}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x7, 0xeffffffc, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

250.277743ms ago: executing program 1 (id=10429):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000600)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1f, 0xf, 0x1, 0x21e02597, 0x20428, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f00000002c0), 0x4)

136.815756ms ago: executing program 2 (id=10430):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x30, 0x2, 0x8, 0x4, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000200), 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100), 0x120)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x521}, 0x57)
recvmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000800)}, 0x40012100)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r2=>0xffffffffffffffff})
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0xe}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc3}], 0x1, &(0x7f00000001c0)}, 0x0)

104.750467ms ago: executing program 5 (id=10431):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0x10001, 0xffffffffffffff08}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x18, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
close(r0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50)
r1 = socket$kcm(0x2b, 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000001d40)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000001c80)=[{&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000001d80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001a00)=""/47, 0x2f}, {&(0x7f0000001c00)=""/94, 0x5e}], 0x5, &(0x7f0000001d00)}, 0x1)
close(r1)

20.967759ms ago: executing program 1 (id=10432):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000a00000000000000000000000000000000b7f7295f2fa42ccd4b5c2cfcc07531d5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000e000001000000000400000007010000080700007500fcff0000000095"], &(0x7f0000000740)='GPL\x00', 0x3, 0xfa, &(0x7f0000000840)=""/250}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)

14.780509ms ago: executing program 0 (id=10433):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x21, &(0x7f0000000700)=ANY=[@ANYBLOB="620af0ff7f000001620af4ff7f000001620af8ff30394e20bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000630000001500150000000000bf06000000000000620ad8ff45002800620adcff00000000620ae0ff40060000620ae4ff7f000001620ae8ff7f000001620ac0ff30394e20620ac4ff01000000620ac8ff00000000620accff50020010620ad0ff00000000bf61000000000000bfa200000000000007020000d8ffffffb703000014000000bfa400000000000007040000c0ffffffb705000014000000850000006e000000bf610000000000008500000056000000b7000000000000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)

0s ago: executing program 4 (id=10434):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94)
close(0x3)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
close(0x3)
socket$kcm(0xa, 0x5, 0x0)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x1c)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r7, 0x1c)

kernel console output (not intermixed with test programs):

][T22951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1511.104402][T22951] Workqueue: hci5 hci_rx_work
[ 1511.109082][T22951] Call Trace:
[ 1511.112371][T22951]  <TASK>
[ 1511.115297][T22951]  dump_stack_lvl+0x188/0x24e
[ 1511.119978][T22951]  ? show_regs_print_info+0x12/0x12
[ 1511.125174][T22951]  ? load_image+0x410/0x410
[ 1511.129685][T22951]  sysfs_create_dir_ns+0x26a/0x290
[ 1511.134826][T22951]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1511.139854][T22951]  ? sysfs_warn_dup+0xa0/0xa0
[ 1511.144533][T22951]  ? do_raw_spin_unlock+0x11d/0x230
[ 1511.149727][T22951]  kobject_add_internal+0x617/0xca0
[ 1511.154930][T22951]  kobject_add+0x160/0x230
[ 1511.159353][T22951]  ? kobject_init+0x1c0/0x1c0
[ 1511.164034][T22951]  ? __raw_spin_lock_init+0x41/0x100
[ 1511.169310][T22951]  ? klist_children_get+0x50/0x50
[ 1511.174328][T22951]  ? get_device_parent+0x121/0x3e0
[ 1511.179438][T22951]  device_add+0x470/0x1050
[ 1511.183855][T22951]  hci_conn_add_sysfs+0xd1/0x1e0
[ 1511.188791][T22951]  le_conn_complete_evt+0xf93/0x15c0
[ 1511.194080][T22951]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[ 1511.200319][T22951]  ? bt_info+0x180/0x180
[ 1511.204553][T22951]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[ 1511.210185][T22951]  ? mutex_unlock+0x10/0x10
[ 1511.214685][T22951]  ? skb_pull_data+0xec/0x1f0
[ 1511.219355][T22951]  hci_le_enh_conn_complete_evt+0x185/0x460
[ 1511.225247][T22951]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[ 1511.231652][T22951]  ? hci_remote_host_features_evt+0x230/0x230
[ 1511.237715][T22951]  hci_event_packet+0x7b3/0x1290
[ 1511.242653][T22951]  ? lock_chain_count+0x20/0x20
[ 1511.247519][T22951]  ? bis_list+0x280/0x280
[ 1511.251854][T22951]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1511.257740][T22951]  ? kcov_remote_start+0x50f/0x810
[ 1511.262846][T22951]  ? lockdep_hardirqs_on+0x94/0x140
[ 1511.268047][T22951]  ? hci_send_to_monitor+0x9c/0x4a0
[ 1511.273253][T22951]  hci_rx_work+0x3eb/0xd40
[ 1511.277681][T22951]  ? _raw_spin_unlock+0x40/0x40
[ 1511.282527][T22951]  ? process_one_work+0x7b4/0x1160
[ 1511.287633][T22951]  process_one_work+0x8ab/0x1160
[ 1511.292576][T22951]  ? worker_detach_from_pool+0x240/0x240
[ 1511.298218][T22951]  ? _raw_spin_lock_irq+0x86/0xf0
[ 1511.303236][T22951]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1511.308248][T22951]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1511.313789][T22951]  ? wq_worker_running+0x97/0x190
[ 1511.318824][T22951]  worker_thread+0xaf5/0x12a0
[ 1511.323508][T22951]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1511.329401][T22951]  kthread+0x29d/0x330
[ 1511.333456][T22951]  ? worker_clr_flags+0x1a0/0x1a0
[ 1511.338471][T22951]  ? kthread_blkcg+0xd0/0xd0
[ 1511.343050][T22951]  ret_from_fork+0x1f/0x30
[ 1511.347472][T22951]  </TASK>
[ 1511.356704][T22951] kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1511.369914][T22951] Bluetooth: hci5: failed to register connection device
[ 1511.619921][T22951] Bluetooth: hci3: Unknown advertising packet type: 0x2e70
[ 1511.619956][T22951] Bluetooth: hci3: Malformed LE Event: 0x0d
[ 1511.862938][    C0] syz_tun: tun_net_xmit 42
[ 1512.155511][T27697] netlink: 'syz.2.9288': attribute type 2 has an invalid length.
[ 1512.163623][T27697] netlink: 'syz.2.9288': attribute type 8 has an invalid length.
[ 1512.177663][T27697] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9288'.
[ 1512.915365][    C0] syz_tun: tun_net_xmit 42
[ 1514.298674][T22951] Bluetooth: hci0: Unknown advertising packet type: 0x2e70
[ 1514.298712][T22951] Bluetooth: hci0: Malformed LE Event: 0x0d
[ 1515.068446][ T4376] tipc: Subscription rejected, illegal request
[ 1515.097787][T27743] netlink: 'syz.2.9307': attribute type 2 has an invalid length.
[ 1515.135150][T27743] netlink: 'syz.2.9307': attribute type 8 has an invalid length.
[ 1515.191202][T27743] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9307'.
[ 1515.336572][T27748] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.9310'.
[ 1515.654144][T27755] : port 1(ip6gretap0) entered blocking state
[ 1515.687799][T27755] : port 1(ip6gretap0) entered disabled state
[ 1515.719689][T27755] device ip6gretap0 entered promiscuous mode
[ 1515.748265][T22951] Bluetooth: hci2: Unknown advertising packet type: 0x2e70
[ 1515.748299][T22951] Bluetooth: hci2: Malformed LE Event: 0x0d
[ 1515.888879][T27758] device ip6gretap0 left promiscuous mode
[ 1515.903255][T27758] : port 1(ip6gretap0) entered disabled state
[ 1516.981867][    C1] bridge0: port 3(team0) entered forwarding state
[ 1516.989648][    C1] bridge0: topology change detected, propagating
[ 1520.415335][T27805] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9336'.
[ 1520.748343][T27805] rxe_eth0 speed is unknown, defaulting to 1000
[ 1521.472690][T27815] syz_tun: tun_net_xmit 42
[ 1522.046937][T27821] netlink: 'syz.5.9344': attribute type 20 has an invalid length.
[ 1522.501248][    C0] syz_tun: tun_net_xmit 42
[ 1523.542291][    C0] syz_tun: tun_net_xmit 42
[ 1523.744577][T27856] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9356'.
[ 1523.785923][T27853] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.9367'.
[ 1524.105845][T27856] rxe_eth0 speed is unknown, defaulting to 1000
[ 1524.754508][T22951] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1524.763410][T22951] Bluetooth: hci2: Injecting HCI hardware error event
[ 1524.770437][T22951] Bluetooth: hci2: hardware error 0x00
[ 1525.337634][T27881] netlink: 'syz.1.9365': attribute type 2 has an invalid length.
[ 1525.367600][T27881] netlink: 'syz.1.9365': attribute type 8 has an invalid length.
[ 1525.419550][T27881] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9365'.
[ 1526.837171][T22951] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1526.924075][T22951] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1526.932768][T22951] Bluetooth: hci1: Injecting HCI hardware error event
[ 1526.941479][T22951] Bluetooth: hci1: hardware error 0x00
[ 1527.549485][T27897] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9371'.
[ 1527.571538][T27898] netlink: 'syz.2.9373': attribute type 2 has an invalid length.
[ 1527.606530][T27898] netlink: 'syz.2.9373': attribute type 8 has an invalid length.
[ 1527.665556][T27898] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9373'.
[ 1527.785171][T27902] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9376'.
[ 1528.208019][T27902] rxe_eth0 speed is unknown, defaulting to 1000
[ 1528.657482][T27920] netlink: 'syz.4.9382': attribute type 2 has an invalid length.
[ 1528.700408][T27920] netlink: 'syz.4.9382': attribute type 8 has an invalid length.
[ 1528.751425][T27920] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9382'.
[ 1529.382648][T22951] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1531.073341][T27939] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.9388'.
[ 1535.583266][T27983] device syzkaller0 left promiscuous mode
[ 1538.107408][T28027] device syzkaller0 left promiscuous mode
[ 1539.938616][T28029] device syzkaller0 entered promiscuous mode
[ 1540.283662][T28035] delete_channel: no stack
[ 1541.613776][T28064] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9430'.
[ 1541.689806][T28064] bond0: (slave bond_slave_0): Releasing backup interface
[ 1541.747840][T28064] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1541.917671][T28071] delete_channel: no stack
[ 1545.793560][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.799963][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.621720][T28128] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.9450'.
[ 1546.648369][T28132] netlink: 'syz.2.9449': attribute type 12 has an invalid length.
[ 1546.648369][T28128] openvswitch: netlink: Key type 386 is out of range max 32
[ 1546.676594][T28132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9449'.
[ 1546.994366][T28134] rxe_eth0 speed is unknown, defaulting to 1000
[ 1547.148219][T28147] delete_channel: no stack
[ 1547.493923][T28152] : port 1(ip6gretap0) entered blocking state
[ 1547.496520][T22951] Bluetooth: hci5: unexpected event 0x33 length: 15 > 10
[ 1547.501832][T28152] : port 1(ip6gretap0) entered disabled state
[ 1547.562021][T28152] device ip6gretap0 entered promiscuous mode
[ 1547.598411][T28155] device ip6gretap0 left promiscuous mode
[ 1547.619006][T28155] : port 1(ip6gretap0) entered disabled state
[ 1548.055816][T28171] syz_tun: tun_net_xmit 62
[ 1548.212754][T28175] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.9472'.
[ 1548.231762][T28175] openvswitch: netlink: Key type 386 is out of range max 32
[ 1548.355680][T28178] delete_channel: no stack
[ 1548.943432][T28197] : port 1(ip6gretap0) entered blocking state
[ 1548.971660][T28197] : port 1(ip6gretap0) entered disabled state
[ 1548.982280][T28197] device ip6gretap0 entered promiscuous mode
[ 1549.009370][T28200] device ip6gretap0 left promiscuous mode
[ 1549.021182][T28200] : port 1(ip6gretap0) entered disabled state
[ 1549.094646][T28196] rxe_eth0 speed is unknown, defaulting to 1000
[ 1549.687042][T28204] rxe_eth0 speed is unknown, defaulting to 1000
[ 1550.246141][T28225] netlink: 'syz.4.9490': attribute type 4 has an invalid length.
[ 1550.284809][T28225] netlink: 'syz.4.9490': attribute type 1 has an invalid length.
[ 1550.321016][T28225] netlink: 'syz.4.9490': attribute type 26 has an invalid length.
[ 1550.359378][T28225] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.9490'.
[ 1550.644987][T28233] : port 1(ip6gretap0) entered blocking state
[ 1550.671756][T28233] : port 1(ip6gretap0) entered disabled state
[ 1550.694529][T28233] device ip6gretap0 entered promiscuous mode
[ 1550.779896][T28241] device ip6gretap0 left promiscuous mode
[ 1550.796169][T28241] : port 1(ip6gretap0) entered disabled state
[ 1551.244396][T28245] delete_channel: no stack
[ 1551.973486][T28257] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9503'.
[ 1553.231399][T28257] bond0: (slave bond_slave_0): Releasing backup interface
[ 1553.259249][T28257] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1553.860420][T28277] delete_channel: no stack
[ 1553.904523][T28282] netlink: 'syz.4.9511': attribute type 12 has an invalid length.
[ 1553.977313][T28282] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9511'.
[ 1554.205466][T28287] rxe_eth0 speed is unknown, defaulting to 1000
[ 1554.246219][T28294] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9518'.
[ 1554.565717][T28293] rxe_eth0 speed is unknown, defaulting to 1000
[ 1555.548037][T28320] delete_channel: no stack
[ 1555.949939][T28336] syz_tun: tun_net_xmit 42
[ 1556.096023][T28341] netlink: 'syz.0.9533': attribute type 4 has an invalid length.
[ 1556.145221][T28341] netlink: 'syz.0.9533': attribute type 1 has an invalid length.
[ 1556.180618][T28341] netlink: 'syz.0.9533': attribute type 26 has an invalid length.
[ 1556.204648][T28341] netlink: 60519 bytes leftover after parsing attributes in process `syz.0.9533'.
[ 1556.258813][T28346] rxe_eth0 speed is unknown, defaulting to 1000
[ 1556.336242][T28350] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9539'.
[ 1556.417040][T28352] device syzkaller0 left promiscuous mode
[ 1556.568626][T28355] netlink: 'syz.2.9541': attribute type 10 has an invalid length.
[ 1556.597766][T28355] virt_wifi0: mtu greater than device maximum
[ 1556.981041][    C1] syz_tun: tun_net_xmit 42
[ 1556.992652][T28356] delete_channel: no stack
[ 1557.132537][T28365] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9547'.
[ 1557.174587][T28365] bond0: (slave bond_slave_0): Releasing backup interface
[ 1557.253636][T28365] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1558.021103][    C1] syz_tun: tun_net_xmit 42
[ 1558.040512][T28394] device bridge0 entered promiscuous mode
[ 1558.194206][T28396] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1558.229069][T28396] syzkaller1: linktype set to 825
[ 1558.244076][T28398] rxe_eth0 speed is unknown, defaulting to 1000
[ 1558.271131][T28399] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1558.285559][T28399] syzkaller1: linktype set to 24
[ 1558.415070][T28401] netlink: 'syz.0.9567': attribute type 10 has an invalid length.
[ 1558.447573][T28401] virt_wifi0: mtu greater than device maximum
[ 1558.567167][T28405] tun0: tun_chr_ioctl cmd 1074812118
[ 1558.839717][T28412] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9562'.
[ 1558.931479][T28412] bond0: (slave bond_slave_0): Releasing backup interface
[ 1559.018884][T28418] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9575'.
[ 1559.035304][T28412] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1560.319293][T28420] netlink: 'syz.4.9566': attribute type 10 has an invalid length.
[ 1560.556013][T28420] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1560.920866][T28439] netlink: 'syz.4.9576': attribute type 10 has an invalid length.
[ 1560.981418][T28439] virt_wifi0: mtu greater than device maximum
[ 1563.301599][T28466] netlink: 'syz.5.9583': attribute type 10 has an invalid length.
[ 1563.333764][T28466] bond0: (slave wlan1): Opening slave failed
[ 1563.373471][T28471] tun0: tun_chr_ioctl cmd 1074812118
[ 1563.436748][T28467] rxe_eth0 speed is unknown, defaulting to 1000
[ 1563.751052][T28484] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9593'.
[ 1563.908569][T28484] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1563.942306][T28484] CPU: 0 PID: 28484 Comm: syz.1.9593 Not tainted syzkaller #0
[ 1563.949812][T28484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1563.959880][T28484] Call Trace:
[ 1563.963174][T28484]  <TASK>
[ 1563.966113][T28484]  dump_stack_lvl+0x188/0x24e
[ 1563.970825][T28484]  ? show_regs_print_info+0x12/0x12
[ 1563.976039][T28484]  ? load_image+0x410/0x410
[ 1563.980571][T28484]  sysfs_warn_dup+0x8a/0xa0
[ 1563.985093][T28484]  sysfs_do_create_link_sd+0xc0/0x110
[ 1563.990532][T28484]  device_add+0x83b/0x1050
[ 1563.994977][T28484]  wiphy_register+0x1d8b/0x2aa0
[ 1563.999866][T28484]  ? cfg80211_event_work+0x40/0x40
[ 1564.004993][T28484]  ? minstrel_ht_alloc+0x894/0xa20
[ 1564.010109][T28484]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1564.016182][T28484]  ieee80211_register_hw+0x2e33/0x3b00
[ 1564.021644][T28484]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1564.027182][T28484]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1564.032725][T28484]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1564.038346][T28484]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1564.044231][T28484]  ? __debug_object_init+0xed/0x440
[ 1564.049426][T28484]  ? memset+0x1e/0x40
[ 1564.053402][T28484]  ? __hrtimer_init+0x189/0x270
[ 1564.058249][T28484]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1564.063972][T28484]  ? memcpy+0x3c/0x60
[ 1564.067952][T28484]  hwsim_new_radio_nl+0xab7/0xc90
[ 1564.072982][T28484]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1564.078523][T28484]  ? end_current_label_crit_section+0x170/0x170
[ 1564.084765][T28484]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1564.090661][T28484]  ? bpf_lsm_capable+0x5/0x10
[ 1564.095330][T28484]  ? security_capable+0x85/0xb0
[ 1564.100183][T28484]  genl_rcv_msg+0x601/0x790
[ 1564.104693][T28484]  ? genl_bind+0x360/0x360
[ 1564.109100][T28484]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1564.115435][T28484]  netlink_rcv_skb+0x1ef/0x440
[ 1564.120194][T28484]  ? genl_bind+0x360/0x360
[ 1564.124606][T28484]  ? netlink_ack+0x1160/0x1160
[ 1564.129371][T28484]  ? down_read+0x1a8/0x2d0
[ 1564.133784][T28484]  genl_rcv+0x24/0x40
[ 1564.137756][T28484]  netlink_unicast+0x7ad/0x920
[ 1564.142519][T28484]  netlink_sendmsg+0x8ad/0xbd0
[ 1564.147282][T28484]  ? netlink_getsockopt+0x550/0x550
[ 1564.152474][T28484]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1564.158023][T28484]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1564.163301][T28484]  ? security_socket_sendmsg+0x7c/0xa0
[ 1564.168782][T28484]  ? netlink_getsockopt+0x550/0x550
[ 1564.173973][T28484]  ____sys_sendmsg+0x5ed/0x9a0
[ 1564.178738][T28484]  ? __sys_sendmsg_sock+0x30/0x30
[ 1564.183752][T28484]  ? __import_iovec+0x306/0x510
[ 1564.188607][T28484]  ? import_iovec+0x6f/0xa0
[ 1564.193112][T28484]  ___sys_sendmsg+0x2a2/0x360
[ 1564.197790][T28484]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1564.202591][T28484]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1564.207438][T28484]  ? __x64_sys_sendmsg+0x80/0x80
[ 1564.212380][T28484]  ? lockdep_hardirqs_on+0x94/0x140
[ 1564.217579][T28484]  do_syscall_64+0x4c/0xa0
[ 1564.221991][T28484]  ? clear_bhb_loop+0x60/0xb0
[ 1564.226659][T28484]  ? clear_bhb_loop+0x60/0xb0
[ 1564.231330][T28484]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1564.237212][T28484] RIP: 0033:0x7f54ad59e559
[ 1564.241619][T28484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1564.261225][T28484] RSP: 002b:00007f54ae494028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1564.269635][T28484] RAX: ffffffffffffffda RBX: 00007f54ad825fa0 RCX: 00007f54ad59e559
[ 1564.277606][T28484] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1564.285570][T28484] RBP: 00007f54ad6358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1564.293548][T28484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1564.301513][T28484] R13: 00007f54ad826038 R14: 00007f54ad825fa0 R15: 00007fff09ea8228
[ 1564.309493][T28484]  </TASK>
[ 1565.758282][T28509] netlink: 'syz.0.9602': attribute type 10 has an invalid length.
[ 1565.932203][T28509] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1565.956926][T28511] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9600'.
[ 1566.033238][T28511] bond0: (slave bond_slave_0): Releasing backup interface
[ 1566.148175][T28511] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[ 1567.267274][T28518] rxe_eth0 speed is unknown, defaulting to 1000
[ 1568.657180][T28552] netlink: 'syz.1.9619': attribute type 10 has an invalid length.
[ 1568.718314][T28552] bond0: (slave wlan1): Opening slave failed
[ 1568.820127][T22951] Bluetooth: hci3: Malformed LE Event: 0x0d
[ 1569.136312][T28571] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9628'.
[ 1570.003376][T28577] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.9632'.
[ 1570.050601][T28577] netlink: zone id is out of range
[ 1570.067377][T28577] netlink: zone id is out of range
[ 1570.123978][T28577] netlink: zone id is out of range
[ 1570.137436][T28587] netlink: 'syz.5.9633': attribute type 2 has an invalid length.
[ 1570.153101][T28577] netlink: zone id is out of range
[ 1570.169050][T28577] netlink: zone id is out of range
[ 1570.208193][T28577] netlink: zone id is out of range
[ 1570.249594][T28577] netlink: zone id is out of range
[ 1570.271256][T28577] netlink: zone id is out of range
[ 1570.282835][T28577] netlink: zone id is out of range
[ 1570.300553][T28587] device 0 entered promiscuous mode
[ 1570.365215][T28590] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9634'.
[ 1570.408587][T28590] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1570.437803][T28590] CPU: 0 PID: 28590 Comm: syz.4.9634 Not tainted syzkaller #0
[ 1570.445306][T28590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1570.455378][T28590] Call Trace:
[ 1570.458670][T28590]  <TASK>
[ 1570.461612][T28590]  dump_stack_lvl+0x188/0x24e
[ 1570.466317][T28590]  ? show_regs_print_info+0x12/0x12
[ 1570.471535][T28590]  ? load_image+0x410/0x410
[ 1570.476052][T28590]  sysfs_warn_dup+0x8a/0xa0
[ 1570.480561][T28590]  sysfs_do_create_link_sd+0xc0/0x110
[ 1570.485937][T28590]  device_add+0x83b/0x1050
[ 1570.490367][T28590]  wiphy_register+0x1d8b/0x2aa0
[ 1570.495229][T28590]  ? cfg80211_event_work+0x40/0x40
[ 1570.500337][T28590]  ? minstrel_ht_alloc+0x894/0xa20
[ 1570.505450][T28590]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1570.511532][T28590]  ieee80211_register_hw+0x2e33/0x3b00
[ 1570.516993][T28590]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1570.522533][T28590]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1570.528077][T28590]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1570.533701][T28590]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1570.539592][T28590]  ? __debug_object_init+0xed/0x440
[ 1570.544788][T28590]  ? memset+0x1e/0x40
[ 1570.548761][T28590]  ? __hrtimer_init+0x189/0x270
[ 1570.553606][T28590]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1570.559327][T28590]  ? memcpy+0x3c/0x60
[ 1570.563304][T28590]  hwsim_new_radio_nl+0xab7/0xc90
[ 1570.568329][T28590]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1570.573869][T28590]  ? end_current_label_crit_section+0x170/0x170
[ 1570.580109][T28590]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1570.586001][T28590]  ? bpf_lsm_capable+0x5/0x10
[ 1570.590670][T28590]  ? security_capable+0x85/0xb0
[ 1570.595520][T28590]  genl_rcv_msg+0x601/0x790
[ 1570.600023][T28590]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1570.606177][T28590]  ? genl_bind+0x360/0x360
[ 1570.610596][T28590]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1570.616919][T28590]  ? lock_acquire+0x226/0x4a0
[ 1570.621599][T28590]  netlink_rcv_skb+0x1ef/0x440
[ 1570.626355][T28590]  ? genl_bind+0x360/0x360
[ 1570.630766][T28590]  ? netlink_ack+0x1160/0x1160
[ 1570.635531][T28590]  ? down_read+0x1a8/0x2d0
[ 1570.639944][T28590]  genl_rcv+0x24/0x40
[ 1570.643921][T28590]  netlink_unicast+0x7ad/0x920
[ 1570.648685][T28590]  netlink_sendmsg+0x8ad/0xbd0
[ 1570.653447][T28590]  ? netlink_getsockopt+0x550/0x550
[ 1570.658640][T28590]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1570.664183][T28590]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1570.669458][T28590]  ? security_socket_sendmsg+0x7c/0xa0
[ 1570.674913][T28590]  ? netlink_getsockopt+0x550/0x550
[ 1570.680108][T28590]  ____sys_sendmsg+0x5ed/0x9a0
[ 1570.684872][T28590]  ? __sys_sendmsg_sock+0x30/0x30
[ 1570.689888][T28590]  ? __import_iovec+0x306/0x510
[ 1570.694743][T28590]  ? import_iovec+0x6f/0xa0
[ 1570.699246][T28590]  ___sys_sendmsg+0x2a2/0x360
[ 1570.703920][T28590]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1570.708715][T28590]  ? ktime_get+0x7b/0x270
[ 1570.713075][T28590]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1570.717929][T28590]  ? __x64_sys_sendmsg+0x80/0x80
[ 1570.722879][T28590]  ? lockdep_hardirqs_on+0x94/0x140
[ 1570.728086][T28590]  do_syscall_64+0x4c/0xa0
[ 1570.732500][T28590]  ? clear_bhb_loop+0x60/0xb0
[ 1570.737175][T28590]  ? clear_bhb_loop+0x60/0xb0
[ 1570.741853][T28590]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1570.747741][T28590] RIP: 0033:0x7f544bd9e559
[ 1570.752149][T28590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1570.771752][T28590] RSP: 002b:00007f544ccc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1570.780162][T28590] RAX: ffffffffffffffda RBX: 00007f544c025fa0 RCX: 00007f544bd9e559
[ 1570.788128][T28590] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1570.796095][T28590] RBP: 00007f544be358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1570.804060][T28590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1570.812022][T28590] R13: 00007f544c026038 R14: 00007f544c025fa0 R15: 00007ffebfff5458
[ 1570.820000][T28590]  </TASK>
[ 1570.873223][T28599] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9637'.
[ 1571.113465][T28608] netlink: 'syz.5.9639': attribute type 15 has an invalid length.
[ 1571.124761][T28608] netlink: 156 bytes leftover after parsing attributes in process `syz.5.9639'.
[ 1571.182060][T28610] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9641'.
[ 1571.192070][T28606] netlink: 'syz.2.9638': attribute type 10 has an invalid length.
[ 1571.214182][T28606] bond0: (slave wlan1): Opening slave failed
[ 1571.408869][T28615] netlink: 'syz.5.9642': attribute type 10 has an invalid length.
[ 1571.443855][T28615] net_ratelimit: 4 callbacks suppressed
[ 1571.443886][T28615] virt_wifi0: mtu greater than device maximum
[ 1571.446210][T28623] netlink: 'syz.1.9644': attribute type 30 has an invalid length.
[ 1571.506708][T28623] netlink: 'syz.1.9644': attribute type 10 has an invalid length.
[ 1571.587665][T28626] netlink: 'syz.2.9647': attribute type 2 has an invalid length.
[ 1571.729963][T28626] device 0 entered promiscuous mode
[ 1571.869293][T28632] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9651'.
[ 1571.886054][T28629] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.9650'.
[ 1572.004357][T28629] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1572.058179][T28629] CPU: 1 PID: 28629 Comm: syz.5.9650 Not tainted syzkaller #0
[ 1572.065689][T28629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1572.075760][T28629] Call Trace:
[ 1572.079035][T28629]  <TASK>
[ 1572.081960][T28629]  dump_stack_lvl+0x188/0x24e
[ 1572.086645][T28629]  ? show_regs_print_info+0x12/0x12
[ 1572.091846][T28629]  ? load_image+0x410/0x410
[ 1572.096350][T28629]  sysfs_warn_dup+0x8a/0xa0
[ 1572.100860][T28629]  sysfs_do_create_link_sd+0xc0/0x110
[ 1572.106236][T28629]  device_add+0x83b/0x1050
[ 1572.110684][T28629]  wiphy_register+0x1d8b/0x2aa0
[ 1572.115548][T28629]  ? cfg80211_event_work+0x40/0x40
[ 1572.120656][T28629]  ? minstrel_ht_alloc+0x894/0xa20
[ 1572.125771][T28629]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1572.131848][T28629]  ieee80211_register_hw+0x2e33/0x3b00
[ 1572.137312][T28629]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1572.142854][T28629]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1572.148401][T28629]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1572.154033][T28629]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1572.160197][T28629]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1572.165924][T28629]  ? memcpy+0x3c/0x60
[ 1572.169925][T28629]  hwsim_new_radio_nl+0xab7/0xc90
[ 1572.174955][T28629]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1572.180496][T28629]  ? end_current_label_crit_section+0x170/0x170
[ 1572.186738][T28629]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1572.192639][T28629]  ? bpf_lsm_capable+0x5/0x10
[ 1572.197310][T28629]  ? security_capable+0x85/0xb0
[ 1572.202163][T28629]  genl_rcv_msg+0x601/0x790
[ 1572.206676][T28629]  ? genl_bind+0x360/0x360
[ 1572.211090][T28629]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1572.217425][T28629]  netlink_rcv_skb+0x1ef/0x440
[ 1572.222190][T28629]  ? genl_bind+0x360/0x360
[ 1572.226608][T28629]  ? netlink_ack+0x1160/0x1160
[ 1572.231393][T28629]  ? down_read+0x1a8/0x2d0
[ 1572.235810][T28629]  genl_rcv+0x24/0x40
[ 1572.239789][T28629]  netlink_unicast+0x7ad/0x920
[ 1572.244558][T28629]  netlink_sendmsg+0x8ad/0xbd0
[ 1572.249321][T28629]  ? netlink_getsockopt+0x550/0x550
[ 1572.254517][T28629]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1572.260062][T28629]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1572.265343][T28629]  ? security_socket_sendmsg+0x7c/0xa0
[ 1572.270800][T28629]  ? netlink_getsockopt+0x550/0x550
[ 1572.275999][T28629]  ____sys_sendmsg+0x5ed/0x9a0
[ 1572.280766][T28629]  ? __sys_sendmsg_sock+0x30/0x30
[ 1572.285781][T28629]  ? __import_iovec+0x306/0x510
[ 1572.290643][T28629]  ? import_iovec+0x6f/0xa0
[ 1572.295151][T28629]  ___sys_sendmsg+0x2a2/0x360
[ 1572.299833][T28629]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1572.304604][T28629]  ? ktime_get+0x7b/0x270
[ 1572.308948][T28629]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1572.313791][T28629]  ? ct_nmi_exit+0x145/0x1c0
[ 1572.318389][T28629]  ? __x64_sys_sendmsg+0x80/0x80
[ 1572.323334][T28629]  ? lockdep_hardirqs_on+0x94/0x140
[ 1572.328539][T28629]  do_syscall_64+0x4c/0xa0
[ 1572.332956][T28629]  ? clear_bhb_loop+0x60/0xb0
[ 1572.337624][T28629]  ? clear_bhb_loop+0x60/0xb0
[ 1572.342294][T28629]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1572.348178][T28629] RIP: 0033:0x7f7c5799e559
[ 1572.352585][T28629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1572.372193][T28629] RSP: 002b:00007f7c587bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1572.380617][T28629] RAX: ffffffffffffffda RBX: 00007f7c57c25fa0 RCX: 00007f7c5799e559
[ 1572.388584][T28629] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1572.396552][T28629] RBP: 00007f7c57a358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1572.404521][T28629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1572.412486][T28629] R13: 00007f7c57c26038 R14: 00007f7c57c25fa0 R15: 00007fff7361c5b8
[ 1572.420464][T28629]  </TASK>
[ 1573.185335][T28647] netlink: 'syz.4.9654': attribute type 15 has an invalid length.
[ 1573.196709][T28647] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9654'.
[ 1573.405419][T28651] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9656'.
[ 1573.474844][T28653] netlink: 'syz.1.9657': attribute type 10 has an invalid length.
[ 1573.498926][T28653] bond0: (slave wlan1): Opening slave failed
[ 1573.577510][T28660] netlink: 'syz.0.9660': attribute type 2 has an invalid length.
[ 1573.697733][T28660] device 0 entered promiscuous mode
[ 1573.866294][T28671] netlink: 'syz.2.9662': attribute type 30 has an invalid length.
[ 1573.876959][T28668] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[ 1574.466504][T28687] __nla_validate_parse: 2 callbacks suppressed
[ 1574.466520][T28687] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.9677'.
[ 1574.491234][T28687] netlink: zone id is out of range
[ 1574.537372][T28687] netlink: zone id is out of range
[ 1574.551849][T28687] netlink: zone id is out of range
[ 1574.645516][T28687] netlink: zone id is out of range
[ 1574.650684][T28687] netlink: zone id is out of range
[ 1574.666177][T28687] netlink: zone id is out of range
[ 1574.671670][T28687] netlink: zone id is out of range
[ 1574.681243][T28687] netlink: zone id is out of range
[ 1574.701992][T28694] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9670'.
[ 1576.135116][T28714] device 0 entered promiscuous mode
[ 1576.243937][T22951] Bluetooth: hci5: Malformed LE Event: 0x0d
[ 1576.609356][T28721] validate_nla: 4 callbacks suppressed
[ 1576.609387][T28721] netlink: 'syz.2.9678': attribute type 10 has an invalid length.
[ 1576.674331][T28721] device wg1 entered promiscuous mode
[ 1576.680061][T28721] team0: Device wg1 is of different type
[ 1576.752130][T28725] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1576.758138][T28725] syzkaller1: linktype set to 825
[ 1576.792031][T28723] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1576.799821][T28723] syzkaller1: linktype set to 24
[ 1576.826114][T28729] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9680'.
[ 1576.862359][T28729] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1576.872203][T28729] CPU: 0 PID: 28729 Comm: syz.2.9680 Not tainted syzkaller #0
[ 1576.879699][T28729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1576.889792][T28729] Call Trace:
[ 1576.893070][T28729]  <TASK>
[ 1576.895999][T28729]  dump_stack_lvl+0x188/0x24e
[ 1576.900680][T28729]  ? show_regs_print_info+0x12/0x12
[ 1576.905878][T28729]  ? load_image+0x410/0x410
[ 1576.910387][T28729]  sysfs_warn_dup+0x8a/0xa0
[ 1576.914892][T28729]  sysfs_do_create_link_sd+0xc0/0x110
[ 1576.920266][T28729]  device_add+0x83b/0x1050
[ 1576.924687][T28729]  wiphy_register+0x1d8b/0x2aa0
[ 1576.929550][T28729]  ? cfg80211_event_work+0x40/0x40
[ 1576.934660][T28729]  ? minstrel_ht_alloc+0x894/0xa20
[ 1576.939775][T28729]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1576.945849][T28729]  ieee80211_register_hw+0x2e33/0x3b00
[ 1576.951315][T28729]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1576.956861][T28729]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1576.962404][T28729]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1576.968029][T28729]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1576.973917][T28729]  ? __debug_object_init+0xed/0x440
[ 1576.979111][T28729]  ? memset+0x1e/0x40
[ 1576.983086][T28729]  ? __hrtimer_init+0x189/0x270
[ 1576.987941][T28729]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1576.993665][T28729]  ? memcpy+0x3c/0x60
[ 1576.997648][T28729]  hwsim_new_radio_nl+0xab7/0xc90
[ 1577.002677][T28729]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1577.008225][T28729]  ? end_current_label_crit_section+0x170/0x170
[ 1577.014472][T28729]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1577.020370][T28729]  ? bpf_lsm_capable+0x5/0x10
[ 1577.025041][T28729]  ? security_capable+0x85/0xb0
[ 1577.029894][T28729]  genl_rcv_msg+0x601/0x790
[ 1577.034392][T28729]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1577.040549][T28729]  ? genl_bind+0x360/0x360
[ 1577.044957][T28729]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1577.051291][T28729]  netlink_rcv_skb+0x1ef/0x440
[ 1577.056063][T28729]  ? genl_bind+0x360/0x360
[ 1577.060478][T28729]  ? netlink_ack+0x1160/0x1160
[ 1577.065242][T28729]  ? down_read+0x1a8/0x2d0
[ 1577.069655][T28729]  genl_rcv+0x24/0x40
[ 1577.073630][T28729]  netlink_unicast+0x7ad/0x920
[ 1577.078399][T28729]  netlink_sendmsg+0x8ad/0xbd0
[ 1577.083165][T28729]  ? netlink_getsockopt+0x550/0x550
[ 1577.088359][T28729]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1577.093908][T28729]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1577.099185][T28729]  ? security_socket_sendmsg+0x7c/0xa0
[ 1577.104638][T28729]  ? netlink_getsockopt+0x550/0x550
[ 1577.109835][T28729]  ____sys_sendmsg+0x5ed/0x9a0
[ 1577.114607][T28729]  ? __sys_sendmsg_sock+0x30/0x30
[ 1577.119623][T28729]  ? __import_iovec+0x306/0x510
[ 1577.124483][T28729]  ? import_iovec+0x6f/0xa0
[ 1577.128986][T28729]  ___sys_sendmsg+0x2a2/0x360
[ 1577.133663][T28729]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1577.138472][T28729]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1577.143324][T28729]  ? __x64_sys_sendmsg+0x80/0x80
[ 1577.148271][T28729]  ? lockdep_hardirqs_on+0x94/0x140
[ 1577.153482][T28729]  do_syscall_64+0x4c/0xa0
[ 1577.157894][T28729]  ? clear_bhb_loop+0x60/0xb0
[ 1577.162566][T28729]  ? clear_bhb_loop+0x60/0xb0
[ 1577.167245][T28729]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1577.173133][T28729] RIP: 0033:0x7fb009f9e559
[ 1577.177543][T28729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1577.197139][T28729] RSP: 002b:00007fb00aedd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1577.205557][T28729] RAX: ffffffffffffffda RBX: 00007fb00a225fa0 RCX: 00007fb009f9e559
[ 1577.213520][T28729] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1577.221486][T28729] RBP: 00007fb00a0358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1577.229448][T28729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1577.237422][T28729] R13: 00007fb00a226038 R14: 00007fb00a225fa0 R15: 00007ffdacc96f98
[ 1577.245406][T28729]  </TASK>
[ 1577.421432][T28739] netlink: 154020 bytes leftover after parsing attributes in process `syz.5.9695'.
[ 1577.437034][T28739] net_ratelimit: 5 callbacks suppressed
[ 1577.437049][T28739] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[ 1577.488700][T28742] netlink: 'syz.0.9684': attribute type 15 has an invalid length.
[ 1577.497558][T28742] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9684'.
[ 1577.670965][T28743] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9685'.
[ 1577.726716][T28743] netlink: zone id is out of range
[ 1577.739292][T28751] syz_tun: tun_net_xmit 42
[ 1577.748605][T28743] netlink: zone id is out of range
[ 1577.774763][T28743] netlink: zone id is out of range
[ 1577.794483][T28743] netlink: zone id is out of range
[ 1577.812042][T28743] netlink: zone id is out of range
[ 1577.825301][T28743] netlink: zone id is out of range
[ 1577.843559][T28743] netlink: zone id is out of range
[ 1577.854141][T28743] netlink: zone id is out of range
[ 1577.868777][T28743] netlink: zone id is out of range
[ 1578.089145][T28765] device syzkaller0 entered promiscuous mode
[ 1578.103347][T28763] netlink: 'syz.4.9691': attribute type 2 has an invalid length.
[ 1578.299423][T28763] device 0 entered promiscuous mode
[ 1578.544208][T28781] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.9699'.
[ 1578.741038][    C0] syz_tun: tun_net_xmit 42
[ 1578.819219][T28788] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1578.861204][T28788] syzkaller1: linktype set to 825
[ 1579.092128][T28790] syz_tun: tun_net_xmit 42
[ 1579.187996][T28800] syz_tun: tun_net_xmit 42
[ 1579.196051][T28803] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.9704'.
[ 1579.398854][T28807] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1579.406859][T28807] syzkaller1: linktype set to 825
[ 1579.425446][T28807] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1579.436798][T28807] syzkaller1: linktype set to 24
[ 1579.653531][T28816] netlink: 'syz.0.9712': attribute type 2 has an invalid length.
[ 1579.782579][    C0] syz_tun: tun_net_xmit 42
[ 1580.017685][T28816] device 1 entered promiscuous mode
[ 1580.103298][    C1] syz_tun: tun_net_xmit 42
[ 1580.174385][T28826] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.9715'.
[ 1580.263601][    C1] syz_tun: tun_net_xmit 42
[ 1580.524963][T28835] syz_tun: tun_net_xmit 42
[ 1580.744434][T28834] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.9719'.
[ 1581.173956][    C1] syz_tun: tun_net_xmit 42
[ 1581.253606][T28864] netlink: 'syz.0.9730': attribute type 2 has an invalid length.
[ 1581.317028][    C1] syz_tun: tun_net_xmit 42
[ 1581.470505][T28864] device 2 entered promiscuous mode
[ 1581.551075][    C1] syz_tun: tun_net_xmit 42
[ 1582.214073][T28873] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.9731'.
[ 1582.581103][    C1] syz_tun: tun_net_xmit 42
[ 1583.892167][T28887] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.9739'.
[ 1583.924704][T28887] net_ratelimit: 33 callbacks suppressed
[ 1583.924721][T28887] netlink: zone id is out of range
[ 1583.966327][T28887] netlink: zone id is out of range
[ 1583.985896][T28887] netlink: zone id is out of range
[ 1583.997217][T28887] netlink: zone id is out of range
[ 1584.009203][T28887] netlink: zone id is out of range
[ 1584.027480][T28887] netlink: zone id is out of range
[ 1584.035973][T28887] netlink: zone id is out of range
[ 1584.043312][T28887] netlink: zone id is out of range
[ 1584.050419][T28887] netlink: zone id is out of range
[ 1584.081115][T28887] netlink: zone id is out of range
[ 1584.101725][T28905] netlink: 'syz.5.9747': attribute type 2 has an invalid length.
[ 1584.259478][T28905] device 1 entered promiscuous mode
[ 1584.644836][T28920] netlink: 'syz.1.9754': attribute type 2 has an invalid length.
[ 1584.691193][T28920] netlink: 'syz.1.9754': attribute type 8 has an invalid length.
[ 1584.719961][T28920] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9754'.
[ 1585.406032][T28930] netlink: 'syz.2.9756': attribute type 15 has an invalid length.
[ 1585.415066][T28930] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9756'.
[ 1586.198164][T28955] netlink: 'syz.5.9763': attribute type 10 has an invalid length.
[ 1586.284045][T28955] device wg1 entered promiscuous mode
[ 1586.289659][T28955] team0: Device wg1 is of different type
[ 1586.404900][T28959] netlink: 'syz.0.9765': attribute type 2 has an invalid length.
[ 1586.634044][T28959] device 3 entered promiscuous mode
[ 1586.902864][T28970] netlink: 'syz.0.9772': attribute type 15 has an invalid length.
[ 1586.920592][T28970] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9772'.
[ 1587.016471][T28975] netlink: 'syz.2.9774': attribute type 10 has an invalid length.
[ 1587.036362][T28975] bond0: (slave wlan1): Opening slave failed
[ 1587.434421][T28988] netlink: 'syz.2.9791': attribute type 10 has an invalid length.
[ 1587.458718][T28988] bond0: (slave wlan1): Opening slave failed
[ 1587.573416][T28993] netlink: 'syz.1.9783': attribute type 10 has an invalid length.
[ 1588.013032][T28993] device wg1 entered promiscuous mode
[ 1588.020238][T28993] team0: Device wg1 is of different type
[ 1588.108598][T28996] device 1 entered promiscuous mode
[ 1588.121373][T29005] netlink: 156 bytes leftover after parsing attributes in process `syz.5.9787'.
[ 1589.434449][T29039] validate_nla: 3 callbacks suppressed
[ 1589.434494][T29039] netlink: 'syz.4.9801': attribute type 15 has an invalid length.
[ 1589.458944][T29039] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9801'.
[ 1589.641229][T29050] netlink: 'syz.4.9804': attribute type 10 has an invalid length.
[ 1589.681692][T22951] Bluetooth: hci3: adv larger than maximum supported
[ 1589.681723][T22951] Bluetooth: hci3: Malformed LE Event: 0x0d
[ 1592.714791][T29050] device wg1 entered promiscuous mode
[ 1592.728366][T29050] team0: Device wg1 is of different type
[ 1593.064601][T29078] netlink: 'syz.2.9816': attribute type 15 has an invalid length.
[ 1593.074697][T29078] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9816'.
[ 1593.927119][T29090] netlink: 'syz.2.9822': attribute type 2 has an invalid length.
[ 1593.977213][T29090] netlink: 'syz.2.9822': attribute type 8 has an invalid length.
[ 1594.011186][T29090] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9822'.
[ 1594.052801][T29092] netlink: 'syz.0.9821': attribute type 10 has an invalid length.
[ 1597.057736][T29092] device wg1 entered promiscuous mode
[ 1597.071100][T29092] team0: Device wg1 is of different type
[ 1597.105866][T29108] netlink: 'syz.2.9827': attribute type 10 has an invalid length.
[ 1597.143107][T29108] netlink: 'syz.2.9827': attribute type 10 has an invalid length.
[ 1597.164498][T29110] netlink: 'syz.1.9828': attribute type 15 has an invalid length.
[ 1597.191519][T29110] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9828'.
[ 1597.464934][T29126] netlink: 'syz.1.9834': attribute type 10 has an invalid length.
[ 1597.473207][T29126] device vlan0 entered promiscuous mode
[ 1597.872297][T29143] netlink: 'syz.0.9843': attribute type 10 has an invalid length.
[ 1597.892126][T29143] team0: Device wg1 is of different type
[ 1598.713692][T29171] syz_tun: tun_net_xmit 42
[ 1599.642138][T29222] delete_channel: no stack
[ 1599.781040][    C0] syz_tun: tun_net_xmit 42
[ 1600.821026][    C0] syz_tun: tun_net_xmit 42
[ 1602.755716][T22951] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5
[ 1602.885602][T29237] netlink: 'syz.0.9894': attribute type 10 has an invalid length.
[ 1602.900811][T29237] device vlan0 entered promiscuous mode
[ 1603.257164][T29250] netlink: 'syz.2.9901': attribute type 10 has an invalid length.
[ 1606.210821][T29250] team0: Device wg1 is of different type
[ 1606.388485][T29269] netlink: 'syz.5.9899': attribute type 10 has an invalid length.
[ 1606.413211][T29269] device ªªªªªª entered promiscuous mode
[ 1606.762820][T29281] netlink: 'syz.5.9905': attribute type 10 has an invalid length.
[ 1606.790570][T29281] netlink: 'syz.5.9905': attribute type 10 has an invalid length.
[ 1606.952468][T29292] netlink: 'syz.1.9908': attribute type 21 has an invalid length.
[ 1606.969590][T29290] netlink: 'syz.2.9907': attribute type 10 has an invalid length.
[ 1607.026151][T29290] team0: Device wg1 is of different type
[ 1607.247606][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.254357][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[ 1608.625530][T29340] netlink: 'syz.4.9926': attribute type 10 has an invalid length.
[ 1608.656016][T29340] team0: Device wg1 is of different type
[ 1608.733143][T29339] netlink: 'syz.5.9921': attribute type 10 has an invalid length.
[ 1610.800764][T29389] netlink: 'syz.1.9942': attribute type 10 has an invalid length.
[ 1610.906770][T29389] team0: Device wg1 is of different type
[ 1611.466036][T29408] netlink: 'syz.0.9961': attribute type 10 has an invalid length.
[ 1611.632719][T29408] team0: Device wg1 is of different type
[ 1612.620100][T29425] syz_tun: tun_net_xmit 86
[ 1612.979255][T29432] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9960'.
[ 1613.013510][T29432] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1613.038891][T29432] CPU: 0 PID: 29432 Comm: syz.0.9960 Not tainted syzkaller #0
[ 1613.046404][T29432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1613.056477][T29432] Call Trace:
[ 1613.059766][T29432]  <TASK>
[ 1613.062712][T29432]  dump_stack_lvl+0x188/0x24e
[ 1613.067409][T29432]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1613.073588][T29432]  ? show_regs_print_info+0x12/0x12
[ 1613.078819][T29432]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1613.085011][T29432]  sysfs_warn_dup+0x8a/0xa0
[ 1613.089544][T29432]  sysfs_do_create_link_sd+0xc0/0x110
[ 1613.094953][T29432]  device_add+0x83b/0x1050
[ 1613.099411][T29432]  wiphy_register+0x1d8b/0x2aa0
[ 1613.104308][T29432]  ? cfg80211_event_work+0x40/0x40
[ 1613.109441][T29432]  ? minstrel_ht_alloc+0x894/0xa20
[ 1613.114590][T29432]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1613.120700][T29432]  ieee80211_register_hw+0x2e33/0x3b00
[ 1613.126192][T29432]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1613.131740][T29432]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1613.137291][T29432]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1613.142919][T29432]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1613.148811][T29432]  ? __debug_object_init+0xed/0x440
[ 1613.154016][T29432]  ? memset+0x1e/0x40
[ 1613.157990][T29432]  ? __hrtimer_init+0x189/0x270
[ 1613.162849][T29432]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1613.168571][T29432]  ? memcpy+0x3c/0x60
[ 1613.172560][T29432]  hwsim_new_radio_nl+0xab7/0xc90
[ 1613.177605][T29432]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1613.183157][T29432]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1613.189053][T29432]  ? security_capable+0x75/0xb0
[ 1613.193898][T29432]  ? bpf_lsm_capable+0x5/0x10
[ 1613.198585][T29432]  ? security_capable+0x85/0xb0
[ 1613.203449][T29432]  genl_rcv_msg+0x601/0x790
[ 1613.207980][T29432]  ? genl_bind+0x360/0x360
[ 1613.212406][T29432]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1613.218746][T29432]  netlink_rcv_skb+0x1ef/0x440
[ 1613.223516][T29432]  ? genl_bind+0x360/0x360
[ 1613.227933][T29432]  ? netlink_ack+0x1160/0x1160
[ 1613.232706][T29432]  ? down_read+0x1a8/0x2d0
[ 1613.237123][T29432]  genl_rcv+0x24/0x40
[ 1613.241104][T29432]  netlink_unicast+0x7ad/0x920
[ 1613.245874][T29432]  netlink_sendmsg+0x8ad/0xbd0
[ 1613.250634][T29432]  ? lockdep_hardirqs_on+0x94/0x140
[ 1613.255839][T29432]  ? netlink_getsockopt+0x550/0x550
[ 1613.261042][T29432]  ? security_socket_sendmsg+0x56/0xa0
[ 1613.266501][T29432]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1613.271779][T29432]  ? security_socket_sendmsg+0x7c/0xa0
[ 1613.277236][T29432]  ? netlink_getsockopt+0x550/0x550
[ 1613.282434][T29432]  ____sys_sendmsg+0x5ed/0x9a0
[ 1613.287199][T29432]  ? __sys_sendmsg_sock+0x30/0x30
[ 1613.292222][T29432]  ? __import_iovec+0x306/0x510
[ 1613.297086][T29432]  ? import_iovec+0x6f/0xa0
[ 1613.301589][T29432]  ___sys_sendmsg+0x2a2/0x360
[ 1613.306271][T29432]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1613.311044][T29432]  ? ktime_get+0x7b/0x270
[ 1613.315393][T29432]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1613.320239][T29432]  ? perf_trace_preemptirq_template+0x268/0x320
[ 1613.326606][T29432]  ? __x64_sys_sendmsg+0x80/0x80
[ 1613.331571][T29432]  ? lockdep_hardirqs_on+0x94/0x140
[ 1613.336784][T29432]  do_syscall_64+0x4c/0xa0
[ 1613.341207][T29432]  ? clear_bhb_loop+0x60/0xb0
[ 1613.345890][T29432]  ? clear_bhb_loop+0x60/0xb0
[ 1613.350569][T29432]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1613.356460][T29432] RIP: 0033:0x7f4e74f9e559
[ 1613.360889][T29432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1613.380504][T29432] RSP: 002b:00007f4e75dd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1613.388933][T29432] RAX: ffffffffffffffda RBX: 00007f4e75225fa0 RCX: 00007f4e74f9e559
[ 1613.396909][T29432] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1613.404886][T29432] RBP: 00007f4e750358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1613.412857][T29432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1613.420828][T29432] R13: 00007f4e75226038 R14: 00007f4e75225fa0 R15: 00007fff71dd7be8
[ 1613.428816][T29432]  </TASK>
[ 1613.556571][T22951] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5
[ 1613.631124][    C0] syz_tun: tun_net_xmit 86
[ 1613.936646][T29459] netlink: 'syz.1.9968': attribute type 10 has an invalid length.
[ 1613.950371][T29459] team0: Device wg1 is of different type
[ 1614.235969][T29470] netlink: 'syz.0.9974': attribute type 21 has an invalid length.
[ 1614.661188][    C0] syz_tun: tun_net_xmit 86
[ 1614.839275][T29492] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9983'.
[ 1614.894403][T29492] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1614.918532][T29492] CPU: 1 PID: 29492 Comm: syz.2.9983 Not tainted syzkaller #0
[ 1614.926031][T29492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1614.936099][T29492] Call Trace:
[ 1614.939378][T29492]  <TASK>
[ 1614.942312][T29492]  dump_stack_lvl+0x188/0x24e
[ 1614.947022][T29492]  ? show_regs_print_info+0x12/0x12
[ 1614.952238][T29492]  ? load_image+0x410/0x410
[ 1614.956737][T29492]  sysfs_warn_dup+0x8a/0xa0
[ 1614.961230][T29492]  sysfs_do_create_link_sd+0xc0/0x110
[ 1614.966596][T29492]  device_add+0x83b/0x1050
[ 1614.971022][T29492]  wiphy_register+0x1d8b/0x2aa0
[ 1614.975916][T29492]  ? cfg80211_event_work+0x40/0x40
[ 1614.981054][T29492]  ? ieee80211_register_hw+0x2d31/0x3b00
[ 1614.986705][T29492]  ? ieee80211_register_hw+0x2b97/0x3b00
[ 1614.992361][T29492]  ? kasan_check_range+0x8a/0x290
[ 1614.997431][T29492]  ieee80211_register_hw+0x2e33/0x3b00
[ 1615.002905][T29492]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1615.009056][T29492]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1615.014589][T29492]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1615.020131][T29492]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1615.025761][T29492]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1615.031655][T29492]  ? __debug_object_init+0xed/0x440
[ 1615.036850][T29492]  ? memset+0x1e/0x40
[ 1615.040821][T29492]  ? __hrtimer_init+0x189/0x270
[ 1615.045667][T29492]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1615.051387][T29492]  ? memcpy+0x3c/0x60
[ 1615.055370][T29492]  hwsim_new_radio_nl+0xab7/0xc90
[ 1615.060399][T29492]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1615.065945][T29492]  ? end_current_label_crit_section+0x170/0x170
[ 1615.072188][T29492]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1615.078079][T29492]  ? bpf_lsm_capable+0x5/0x10
[ 1615.082748][T29492]  ? security_capable+0x85/0xb0
[ 1615.087596][T29492]  genl_rcv_msg+0x601/0x790
[ 1615.092101][T29492]  ? genl_bind+0x360/0x360
[ 1615.096509][T29492]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1615.102841][T29492]  netlink_rcv_skb+0x1ef/0x440
[ 1615.107598][T29492]  ? genl_bind+0x360/0x360
[ 1615.112014][T29492]  ? netlink_ack+0x1160/0x1160
[ 1615.116776][T29492]  ? down_read+0x1a8/0x2d0
[ 1615.121189][T29492]  genl_rcv+0x24/0x40
[ 1615.125165][T29492]  netlink_unicast+0x7ad/0x920
[ 1615.129934][T29492]  netlink_sendmsg+0x8ad/0xbd0
[ 1615.134706][T29492]  ? netlink_getsockopt+0x550/0x550
[ 1615.139900][T29492]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1615.145449][T29492]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1615.150726][T29492]  ? security_socket_sendmsg+0x7c/0xa0
[ 1615.156179][T29492]  ? netlink_getsockopt+0x550/0x550
[ 1615.161372][T29492]  ____sys_sendmsg+0x5ed/0x9a0
[ 1615.166138][T29492]  ? __sys_sendmsg_sock+0x30/0x30
[ 1615.171152][T29492]  ? __import_iovec+0x306/0x510
[ 1615.176019][T29492]  ? import_iovec+0x6f/0xa0
[ 1615.180522][T29492]  ___sys_sendmsg+0x2a2/0x360
[ 1615.185203][T29492]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1615.189999][T29492]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1615.194839][T29492]  ? ct_nmi_exit+0x145/0x1c0
[ 1615.199430][T29492]  ? __x64_sys_sendmsg+0x80/0x80
[ 1615.204376][T29492]  ? lockdep_hardirqs_on+0x94/0x140
[ 1615.209581][T29492]  do_syscall_64+0x4c/0xa0
[ 1615.213991][T29492]  ? clear_bhb_loop+0x60/0xb0
[ 1615.218661][T29492]  ? clear_bhb_loop+0x60/0xb0
[ 1615.223334][T29492]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1615.229220][T29492] RIP: 0033:0x7fb009f9e559
[ 1615.233628][T29492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1615.253233][T29492] RSP: 002b:00007fb00aedd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1615.261648][T29492] RAX: ffffffffffffffda RBX: 00007fb00a225fa0 RCX: 00007fb009f9e559
[ 1615.269617][T29492] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1615.277586][T29492] RBP: 00007fb00a0358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1615.285549][T29492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1615.293515][T29492] R13: 00007fb00a226038 R14: 00007fb00a225fa0 R15: 00007ffdacc96f98
[ 1615.301502][T29492]  </TASK>
[ 1615.323492][T29501] netlink: 'syz.1.9986': attribute type 10 has an invalid length.
[ 1615.338483][T29501] team0: Device wg1 is of different type
[ 1615.359494][T29494] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.9984'.
[ 1616.591898][T29535] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.10000'.
[ 1616.643085][T29535] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1616.660310][T29535] CPU: 1 PID: 29535 Comm: syz.5.10000 Not tainted syzkaller #0
[ 1616.667899][T29535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1616.677969][T29535] Call Trace:
[ 1616.681264][T29535]  <TASK>
[ 1616.684204][T29535]  dump_stack_lvl+0x188/0x24e
[ 1616.688911][T29535]  ? show_regs_print_info+0x12/0x12
[ 1616.694132][T29535]  ? load_image+0x410/0x410
[ 1616.698666][T29535]  sysfs_warn_dup+0x8a/0xa0
[ 1616.703193][T29535]  sysfs_do_create_link_sd+0xc0/0x110
[ 1616.708601][T29535]  device_add+0x83b/0x1050
[ 1616.713065][T29535]  wiphy_register+0x1d8b/0x2aa0
[ 1616.717954][T29535]  ? cfg80211_event_work+0x40/0x40
[ 1616.723081][T29535]  ? minstrel_ht_alloc+0x894/0xa20
[ 1616.728216][T29535]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1616.734349][T29535]  ieee80211_register_hw+0x2e33/0x3b00
[ 1616.739842][T29535]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1616.745406][T29535]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1616.750979][T29535]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1616.756631][T29535]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1616.762821][T29535]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1616.768576][T29535]  ? memcpy+0x3c/0x60
[ 1616.772579][T29535]  hwsim_new_radio_nl+0xab7/0xc90
[ 1616.777638][T29535]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1616.783206][T29535]  ? end_current_label_crit_section+0x170/0x170
[ 1616.792336][T29535]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1616.798267][T29535]  ? bpf_lsm_capable+0x5/0x10
[ 1616.802971][T29535]  ? security_capable+0x85/0xb0
[ 1616.807854][T29535]  genl_rcv_msg+0x601/0x790
[ 1616.812391][T29535]  ? genl_bind+0x360/0x360
[ 1616.816828][T29535]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1616.823203][T29535]  netlink_rcv_skb+0x1ef/0x440
[ 1616.827988][T29535]  ? genl_bind+0x360/0x360
[ 1616.832423][T29535]  ? netlink_ack+0x1160/0x1160
[ 1616.837223][T29535]  ? down_read+0x1a8/0x2d0
[ 1616.841661][T29535]  genl_rcv+0x24/0x40
[ 1616.845668][T29535]  netlink_unicast+0x7ad/0x920
[ 1616.850467][T29535]  netlink_sendmsg+0x8ad/0xbd0
[ 1616.855264][T29535]  ? netlink_getsockopt+0x550/0x550
[ 1616.860488][T29535]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1616.866064][T29535]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1616.871369][T29535]  ? security_socket_sendmsg+0x7c/0xa0
[ 1616.876848][T29535]  ? netlink_getsockopt+0x550/0x550
[ 1616.882070][T29535]  ____sys_sendmsg+0x5ed/0x9a0
[ 1616.886860][T29535]  ? __sys_sendmsg_sock+0x30/0x30
[ 1616.891899][T29535]  ? __import_iovec+0x306/0x510
[ 1616.896784][T29535]  ? import_iovec+0x6f/0xa0
[ 1616.901318][T29535]  ___sys_sendmsg+0x2a2/0x360
[ 1616.906021][T29535]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1616.910822][T29535]  ? ktime_get+0x7b/0x270
[ 1616.915201][T29535]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1616.920068][T29535]  ? ct_nmi_exit+0x145/0x1c0
[ 1616.924690][T29535]  ? __x64_sys_sendmsg+0x80/0x80
[ 1616.929669][T29535]  ? lockdep_hardirqs_on+0x94/0x140
[ 1616.934902][T29535]  do_syscall_64+0x4c/0xa0
[ 1616.939343][T29535]  ? clear_bhb_loop+0x60/0xb0
[ 1616.944033][T29535]  ? clear_bhb_loop+0x60/0xb0
[ 1616.948738][T29535]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1616.954645][T29535] RIP: 0033:0x7f7c5799e559
[ 1616.959075][T29535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1616.979219][T29535] RSP: 002b:00007f7c587bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1616.987649][T29535] RAX: ffffffffffffffda RBX: 00007f7c57c25fa0 RCX: 00007f7c5799e559
[ 1616.995634][T29535] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1617.003625][T29535] RBP: 00007f7c57a358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1617.011609][T29535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1617.019595][T29535] R13: 00007f7c57c26038 R14: 00007f7c57c25fa0 R15: 00007fff7361c5b8
[ 1617.027605][T29535]  </TASK>
[ 1619.418944][T29538] netlink: 'syz.4.10004': attribute type 27 has an invalid length.
[ 1619.469672][T29540] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10006'.
[ 1620.317856][T29543] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.10005'.
[ 1620.332503][T29543] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1620.349549][T29543] CPU: 1 PID: 29543 Comm: syz.0.10005 Not tainted syzkaller #0
[ 1620.357137][T29543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1620.367211][T29543] Call Trace:
[ 1620.370502][T29543]  <TASK>
[ 1620.373448][T29543]  dump_stack_lvl+0x188/0x24e
[ 1620.378148][T29543]  ? show_regs_print_info+0x12/0x12
[ 1620.383398][T29543]  ? load_image+0x410/0x410
[ 1620.387930][T29543]  sysfs_warn_dup+0x8a/0xa0
[ 1620.392460][T29543]  sysfs_do_create_link_sd+0xc0/0x110
[ 1620.397865][T29543]  device_add+0x83b/0x1050
[ 1620.402322][T29543]  wiphy_register+0x1d8b/0x2aa0
[ 1620.407218][T29543]  ? cfg80211_event_work+0x40/0x40
[ 1620.412346][T29543]  ? minstrel_ht_alloc+0x894/0xa20
[ 1620.417481][T29543]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1620.423575][T29543]  ieee80211_register_hw+0x2e33/0x3b00
[ 1620.429071][T29543]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1620.434636][T29543]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1620.440207][T29543]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1620.445860][T29543]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1620.451778][T29543]  ? __debug_object_init+0xed/0x440
[ 1620.457004][T29543]  ? memset+0x1e/0x40
[ 1620.461003][T29543]  ? __hrtimer_init+0x189/0x270
[ 1620.465896][T29543]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1620.471642][T29543]  ? memcpy+0x3c/0x60
[ 1620.475645][T29543]  hwsim_new_radio_nl+0xab7/0xc90
[ 1620.480698][T29543]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1620.486260][T29543]  ? end_current_label_crit_section+0x170/0x170
[ 1620.492525][T29543]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1620.498446][T29543]  ? bpf_lsm_capable+0x5/0x10
[ 1620.503138][T29543]  ? security_capable+0x85/0xb0
[ 1620.508023][T29543]  genl_rcv_msg+0x601/0x790
[ 1620.512547][T29543]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1620.518730][T29543]  ? genl_bind+0x360/0x360
[ 1620.523162][T29543]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1620.529521][T29543]  netlink_rcv_skb+0x1ef/0x440
[ 1620.534309][T29543]  ? genl_bind+0x360/0x360
[ 1620.538720][T29543]  ? netlink_ack+0x1160/0x1160
[ 1620.543489][T29543]  ? down_read+0x1a8/0x2d0
[ 1620.547928][T29543]  genl_rcv+0x24/0x40
[ 1620.551912][T29543]  netlink_unicast+0x7ad/0x920
[ 1620.556685][T29543]  netlink_sendmsg+0x8ad/0xbd0
[ 1620.561455][T29543]  ? netlink_getsockopt+0x550/0x550
[ 1620.566651][T29543]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1620.572201][T29543]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1620.577482][T29543]  ? security_socket_sendmsg+0x7c/0xa0
[ 1620.582950][T29543]  ? netlink_getsockopt+0x550/0x550
[ 1620.588163][T29543]  ____sys_sendmsg+0x5ed/0x9a0
[ 1620.592930][T29543]  ? __sys_sendmsg_sock+0x30/0x30
[ 1620.597948][T29543]  ? __import_iovec+0x306/0x510
[ 1620.602806][T29543]  ? import_iovec+0x6f/0xa0
[ 1620.607319][T29543]  ___sys_sendmsg+0x2a2/0x360
[ 1620.612006][T29543]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1620.616783][T29543]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1620.622528][T29543]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1620.627375][T29543]  ? __x64_sys_sendmsg+0x80/0x80
[ 1620.632351][T29543]  ? syscall_enter_from_user_mode+0x2a/0x80
[ 1620.638255][T29543]  do_syscall_64+0x4c/0xa0
[ 1620.642666][T29543]  ? clear_bhb_loop+0x60/0xb0
[ 1620.647340][T29543]  ? clear_bhb_loop+0x60/0xb0
[ 1620.652014][T29543]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1620.657900][T29543] RIP: 0033:0x7f4e74f9e559
[ 1620.662319][T29543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1620.681918][T29543] RSP: 002b:00007f4e75dd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1620.690325][T29543] RAX: ffffffffffffffda RBX: 00007f4e75225fa0 RCX: 00007f4e74f9e559
[ 1620.698290][T29543] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[ 1620.706263][T29543] RBP: 00007f4e750358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1620.714232][T29543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1620.722196][T29543] R13: 00007f4e75226038 R14: 00007f4e75225fa0 R15: 00007fff71dd7be8
[ 1620.730176][T29543]  </TASK>
[ 1621.011188][T29560] syz_tun: tun_net_xmit 86
[ 1621.818575][T29574] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10018'.
[ 1621.879112][T29574] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1621.887651][T29574] CPU: 0 PID: 29574 Comm: syz.4.10018 Not tainted syzkaller #0
[ 1621.895230][T29574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1621.905295][T29574] Call Trace:
[ 1621.908569][T29574]  <TASK>
[ 1621.911492][T29574]  dump_stack_lvl+0x188/0x24e
[ 1621.916178][T29574]  ? show_regs_print_info+0x12/0x12
[ 1621.921390][T29574]  ? load_image+0x410/0x410
[ 1621.925978][T29574]  sysfs_warn_dup+0x8a/0xa0
[ 1621.930480][T29574]  sysfs_do_create_link_sd+0xc0/0x110
[ 1621.935849][T29574]  device_add+0x83b/0x1050
[ 1621.940376][T29574]  wiphy_register+0x1d8b/0x2aa0
[ 1621.945237][T29574]  ? cfg80211_event_work+0x40/0x40
[ 1621.950344][T29574]  ? minstrel_ht_alloc+0x894/0xa20
[ 1621.955449][T29574]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1621.961531][T29574]  ieee80211_register_hw+0x2e33/0x3b00
[ 1621.967010][T29574]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1621.972562][T29574]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1621.978103][T29574]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1621.983739][T29574]  ? debug_init+0x39/0x260
[ 1621.988203][T29574]  ? memset+0x1e/0x40
[ 1621.992191][T29574]  ? __hrtimer_init+0x189/0x270
[ 1621.997043][T29574]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1622.002761][T29574]  ? memcpy+0x3c/0x60
[ 1622.006758][T29574]  hwsim_new_radio_nl+0xab7/0xc90
[ 1622.011782][T29574]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1622.017320][T29574]  ? end_current_label_crit_section+0x170/0x170
[ 1622.021114][    C1] syz_tun: tun_net_xmit 86
[ 1622.023553][T29574]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1622.023592][T29574]  ? bpf_lsm_capable+0x5/0x10
[ 1622.038570][T29574]  ? security_capable+0x85/0xb0
[ 1622.043434][T29574]  genl_rcv_msg+0x601/0x790
[ 1622.047933][T29574]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1622.053650][T29574]  ? genl_bind+0x360/0x360
[ 1622.058061][T29574]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1622.064390][T29574]  netlink_rcv_skb+0x1ef/0x440
[ 1622.069150][T29574]  ? genl_bind+0x360/0x360
[ 1622.073564][T29574]  ? netlink_ack+0x1160/0x1160
[ 1622.078320][T29574]  ? down_read+0x1a8/0x2d0
[ 1622.082729][T29574]  genl_rcv+0x24/0x40
[ 1622.086700][T29574]  netlink_unicast+0x7ad/0x920
[ 1622.091476][T29574]  netlink_sendmsg+0x8ad/0xbd0
[ 1622.096233][T29574]  ? netlink_getsockopt+0x550/0x550
[ 1622.101432][T29574]  ? netlink_getsockopt+0x550/0x550
[ 1622.106641][T29574]  ____sys_sendmsg+0x5ed/0x9a0
[ 1622.111403][T29574]  ? __sys_sendmsg_sock+0x30/0x30
[ 1622.116417][T29574]  ? __import_iovec+0x306/0x510
[ 1622.121283][T29574]  ? import_iovec+0x6f/0xa0
[ 1622.125782][T29574]  ___sys_sendmsg+0x2a2/0x360
[ 1622.130449][T29574]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1622.135213][T29574]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1622.140956][T29574]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1622.145808][T29574]  ? __x64_sys_sendmsg+0x80/0x80
[ 1622.150749][T29574]  ? lockdep_hardirqs_on+0x94/0x140
[ 1622.155947][T29574]  ? __x64_sys_sendmsg+0x44/0x80
[ 1622.160898][T29574]  do_syscall_64+0x4c/0xa0
[ 1622.165338][T29574]  ? clear_bhb_loop+0x60/0xb0
[ 1622.170016][T29574]  ? clear_bhb_loop+0x60/0xb0
[ 1622.174688][T29574]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1622.180569][T29574] RIP: 0033:0x7f544bd9e559
[ 1622.184968][T29574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1622.204561][T29574] RSP: 002b:00007f544ccc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1622.212963][T29574] RAX: ffffffffffffffda RBX: 00007f544c025fa0 RCX: 00007f544bd9e559
[ 1622.220928][T29574] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1622.228905][T29574] RBP: 00007f544be358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1622.236867][T29574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1622.244830][T29574] R13: 00007f544c026038 R14: 00007f544c025fa0 R15: 00007ffebfff5458
[ 1622.252808][T29574]  </TASK>
[ 1623.061601][    C1] syz_tun: tun_net_xmit 86
[ 1623.826945][T29621] netlink: 'syz.4.10036': attribute type 10 has an invalid length.
[ 1624.767478][T29624] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.10039'.
[ 1624.867230][T29624] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1624.875246][T29624] CPU: 1 PID: 29624 Comm: syz.1.10039 Not tainted syzkaller #0
[ 1624.882811][T29624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1624.892853][T29624] Call Trace:
[ 1624.896121][T29624]  <TASK>
[ 1624.899043][T29624]  dump_stack_lvl+0x188/0x24e
[ 1624.903719][T29624]  ? show_regs_print_info+0x12/0x12
[ 1624.908916][T29624]  ? load_image+0x410/0x410
[ 1624.913447][T29624]  sysfs_warn_dup+0x8a/0xa0
[ 1624.917973][T29624]  sysfs_do_create_link_sd+0xc0/0x110
[ 1624.923355][T29624]  device_add+0x83b/0x1050
[ 1624.927803][T29624]  wiphy_register+0x1d8b/0x2aa0
[ 1624.932693][T29624]  ? cfg80211_event_work+0x40/0x40
[ 1624.937817][T29624]  ? minstrel_ht_alloc+0x894/0xa20
[ 1624.942935][T29624]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1624.948999][T29624]  ieee80211_register_hw+0x2e33/0x3b00
[ 1624.954455][T29624]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1624.959997][T29624]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1624.965551][T29624]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1624.971188][T29624]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1624.977083][T29624]  ? __debug_object_init+0xed/0x440
[ 1624.982298][T29624]  ? memset+0x1e/0x40
[ 1624.986280][T29624]  ? __hrtimer_init+0x189/0x270
[ 1624.991133][T29624]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1624.996861][T29624]  ? memcpy+0x3c/0x60
[ 1625.000843][T29624]  hwsim_new_radio_nl+0xab7/0xc90
[ 1625.005873][T29624]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1625.011417][T29624]  ? end_current_label_crit_section+0x170/0x170
[ 1625.017659][T29624]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1625.023381][T29624]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1625.029277][T29624]  ? bpf_lsm_capable+0x5/0x10
[ 1625.033951][T29624]  ? security_capable+0x85/0xb0
[ 1625.038803][T29624]  genl_rcv_msg+0x601/0x790
[ 1625.043302][T29624]  ? rcu_is_watching+0x11/0xa0
[ 1625.048173][T29624]  ? genl_bind+0x360/0x360
[ 1625.052585][T29624]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1625.058911][T29624]  ? netlink_rcv_skb+0x1ce/0x440
[ 1625.063850][T29624]  netlink_rcv_skb+0x1ef/0x440
[ 1625.068607][T29624]  ? genl_bind+0x360/0x360
[ 1625.073019][T29624]  ? netlink_ack+0x1160/0x1160
[ 1625.077784][T29624]  ? down_read+0x1a8/0x2d0
[ 1625.082205][T29624]  genl_rcv+0x24/0x40
[ 1625.086189][T29624]  netlink_unicast+0x7ad/0x920
[ 1625.090955][T29624]  netlink_sendmsg+0x8ad/0xbd0
[ 1625.095718][T29624]  ? __sanitizer_cov_trace_pc+0x37/0x60
[ 1625.101261][T29624]  ? netlink_getsockopt+0x550/0x550
[ 1625.106454][T29624]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1625.112006][T29624]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1625.117284][T29624]  ? security_socket_sendmsg+0x7c/0xa0
[ 1625.122738][T29624]  ? netlink_getsockopt+0x550/0x550
[ 1625.127932][T29624]  ____sys_sendmsg+0x5ed/0x9a0
[ 1625.132698][T29624]  ? __sys_sendmsg_sock+0x30/0x30
[ 1625.137720][T29624]  ? __import_iovec+0x306/0x510
[ 1625.142577][T29624]  ? import_iovec+0x6f/0xa0
[ 1625.147080][T29624]  ___sys_sendmsg+0x2a2/0x360
[ 1625.151757][T29624]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1625.156529][T29624]  ? ktime_get+0x7b/0x270
[ 1625.160888][T29624]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1625.165766][T29624]  ? perf_trace_preemptirq_template+0x268/0x320
[ 1625.172021][T29624]  ? __x64_sys_sendmsg+0x80/0x80
[ 1625.176992][T29624]  ? lockdep_hardirqs_on+0x94/0x140
[ 1625.182199][T29624]  do_syscall_64+0x4c/0xa0
[ 1625.186619][T29624]  ? clear_bhb_loop+0x60/0xb0
[ 1625.191297][T29624]  ? clear_bhb_loop+0x60/0xb0
[ 1625.195980][T29624]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1625.201872][T29624] RIP: 0033:0x7f54ad59e559
[ 1625.206281][T29624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1625.225894][T29624] RSP: 002b:00007f54ae494028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1625.234305][T29624] RAX: ffffffffffffffda RBX: 00007f54ad825fa0 RCX: 00007f54ad59e559
[ 1625.242272][T29624] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1625.250238][T29624] RBP: 00007f54ad6358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1625.258202][T29624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1625.266168][T29624] R13: 00007f54ad826038 R14: 00007f54ad825fa0 R15: 00007fff09ea8228
[ 1625.274148][T29624]  </TASK>
[ 1625.864413][T29643] : port 1(ip6gretap0) entered blocking state
[ 1625.881049][T29643] : port 1(ip6gretap0) entered disabled state
[ 1625.893685][T29643] device ip6gretap0 entered promiscuous mode
[ 1626.012384][T29649] IPv6: Can't replace route, no match found
[ 1629.218264][T29668] IPv6: Can't replace route, no match found
[ 1629.395252][T29667] netlink: 'syz.2.10054': attribute type 10 has an invalid length.
[ 1629.432901][T29671] netlink: 'syz.5.10055': attribute type 27 has an invalid length.
[ 1629.755469][T29679] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.10059'.
[ 1629.837693][T29679] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1629.853496][T29679] CPU: 1 PID: 29679 Comm: syz.1.10059 Not tainted syzkaller #0
[ 1629.861112][T29679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1629.871202][T29679] Call Trace:
[ 1629.874509][T29679]  <TASK>
[ 1629.877471][T29679]  dump_stack_lvl+0x188/0x24e
[ 1629.882202][T29679]  ? show_regs_print_info+0x12/0x12
[ 1629.887446][T29679]  ? load_image+0x410/0x410
[ 1629.892028][T29679]  sysfs_warn_dup+0x8a/0xa0
[ 1629.896579][T29679]  sysfs_do_create_link_sd+0xc0/0x110
[ 1629.902008][T29679]  device_add+0x83b/0x1050
[ 1629.906499][T29679]  wiphy_register+0x1d8b/0x2aa0
[ 1629.911449][T29679]  ? cfg80211_event_work+0x40/0x40
[ 1629.916598][T29679]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1629.922842][T29679]  ieee80211_register_hw+0x2e33/0x3b00
[ 1629.928403][T29679]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1629.933998][T29679]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1629.939607][T29679]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1629.945276][T29679]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1629.951211][T29679]  ? __debug_object_init+0xed/0x440
[ 1629.956435][T29679]  ? memset+0x1e/0x40
[ 1629.960432][T29679]  ? __hrtimer_init+0x189/0x270
[ 1629.965308][T29679]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1629.971059][T29679]  ? memcpy+0x3c/0x60
[ 1629.975062][T29679]  hwsim_new_radio_nl+0xab7/0xc90
[ 1629.980144][T29679]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1629.985706][T29679]  ? end_current_label_crit_section+0x170/0x170
[ 1629.991973][T29679]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1629.997906][T29679]  ? bpf_lsm_capable+0x5/0x10
[ 1630.002605][T29679]  ? security_capable+0x85/0xb0
[ 1630.007487][T29679]  genl_rcv_msg+0x601/0x790
[ 1630.012029][T29679]  ? genl_bind+0x360/0x360
[ 1630.016454][T29679]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1630.022829][T29679]  netlink_rcv_skb+0x1ef/0x440
[ 1630.027611][T29679]  ? genl_bind+0x360/0x360
[ 1630.032045][T29679]  ? netlink_ack+0x1160/0x1160
[ 1630.036851][T29679]  ? down_read+0x1a8/0x2d0
[ 1630.041299][T29679]  genl_rcv+0x24/0x40
[ 1630.045292][T29679]  netlink_unicast+0x7ad/0x920
[ 1630.050092][T29679]  netlink_sendmsg+0x8ad/0xbd0
[ 1630.054896][T29679]  ? netlink_getsockopt+0x550/0x550
[ 1630.060122][T29679]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1630.065718][T29679]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1630.071016][T29679]  ? security_socket_sendmsg+0x7c/0xa0
[ 1630.076484][T29679]  ? netlink_getsockopt+0x550/0x550
[ 1630.081698][T29679]  ____sys_sendmsg+0x5ed/0x9a0
[ 1630.086494][T29679]  ? __sys_sendmsg_sock+0x30/0x30
[ 1630.091551][T29679]  ? __import_iovec+0x306/0x510
[ 1630.096456][T29679]  ? import_iovec+0x6f/0xa0
[ 1630.101002][T29679]  ___sys_sendmsg+0x2a2/0x360
[ 1630.105718][T29679]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1630.110569][T29679]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1630.116383][T29679]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1630.121259][T29679]  ? __x64_sys_sendmsg+0x80/0x80
[ 1630.126265][T29679]  ? syscall_enter_from_user_mode+0x2a/0x80
[ 1630.132189][T29679]  do_syscall_64+0x4c/0xa0
[ 1630.136619][T29679]  ? clear_bhb_loop+0x60/0xb0
[ 1630.141306][T29679]  ? clear_bhb_loop+0x60/0xb0
[ 1630.146011][T29679]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1630.151918][T29679] RIP: 0033:0x7f54ad59e559
[ 1630.156352][T29679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1630.175968][T29679] RSP: 002b:00007f54ae494028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1630.184392][T29679] RAX: ffffffffffffffda RBX: 00007f54ad825fa0 RCX: 00007f54ad59e559
[ 1630.192372][T29679] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1630.200354][T29679] RBP: 00007f54ad6358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1630.208340][T29679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1630.216316][T29679] R13: 00007f54ad826038 R14: 00007f54ad825fa0 R15: 00007fff09ea8228
[ 1630.224356][T29679]  </TASK>
[ 1632.754113][T29720] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.10069'.
[ 1632.796955][T29720] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1632.816888][T29720] CPU: 1 PID: 29720 Comm: syz.2.10069 Not tainted syzkaller #0
[ 1632.824480][T29720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1632.834554][T29720] Call Trace:
[ 1632.837849][T29720]  <TASK>
[ 1632.840787][T29720]  dump_stack_lvl+0x188/0x24e
[ 1632.845486][T29720]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1632.851674][T29720]  ? show_regs_print_info+0x12/0x12
[ 1632.856896][T29720]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1632.863077][T29720]  ? dump_stack+0x5/0x12
[ 1632.867350][T29720]  sysfs_warn_dup+0x8a/0xa0
[ 1632.871883][T29720]  sysfs_do_create_link_sd+0xc0/0x110
[ 1632.877283][T29720]  device_add+0x83b/0x1050
[ 1632.881737][T29720]  wiphy_register+0x1d8b/0x2aa0
[ 1632.886636][T29720]  ? cfg80211_event_work+0x40/0x40
[ 1632.891769][T29720]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1632.897964][T29720]  ieee80211_register_hw+0x2e33/0x3b00
[ 1632.903444][T29720]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1632.909615][T29720]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1632.915166][T29720]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1632.920716][T29720]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1632.926345][T29720]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1632.932237][T29720]  ? __debug_object_init+0xed/0x440
[ 1632.937435][T29720]  ? memset+0x1e/0x40
[ 1632.941415][T29720]  ? __hrtimer_init+0x189/0x270
[ 1632.946267][T29720]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1632.951992][T29720]  ? memcpy+0x3c/0x60
[ 1632.955976][T29720]  hwsim_new_radio_nl+0xab7/0xc90
[ 1632.961007][T29720]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1632.966552][T29720]  ? end_current_label_crit_section+0x170/0x170
[ 1632.972806][T29720]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1632.978702][T29720]  ? bpf_lsm_capable+0x5/0x10
[ 1632.983374][T29720]  ? security_capable+0x85/0xb0
[ 1632.988222][T29720]  genl_rcv_msg+0x601/0x790
[ 1632.992732][T29720]  ? genl_bind+0x360/0x360
[ 1632.997144][T29720]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1633.003481][T29720]  netlink_rcv_skb+0x1ef/0x440
[ 1633.008241][T29720]  ? genl_bind+0x360/0x360
[ 1633.012656][T29720]  ? netlink_ack+0x1160/0x1160
[ 1633.017431][T29720]  ? down_read+0x1a8/0x2d0
[ 1633.021867][T29720]  genl_rcv+0x24/0x40
[ 1633.025847][T29720]  netlink_unicast+0x7ad/0x920
[ 1633.030612][T29720]  netlink_sendmsg+0x8ad/0xbd0
[ 1633.035380][T29720]  ? netlink_getsockopt+0x550/0x550
[ 1633.040586][T29720]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1633.046136][T29720]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1633.051417][T29720]  ? security_socket_sendmsg+0x7c/0xa0
[ 1633.056876][T29720]  ? netlink_getsockopt+0x550/0x550
[ 1633.062075][T29720]  ____sys_sendmsg+0x5ed/0x9a0
[ 1633.066842][T29720]  ? __sys_sendmsg_sock+0x30/0x30
[ 1633.071864][T29720]  ? __import_iovec+0x306/0x510
[ 1633.076723][T29720]  ? import_iovec+0x6f/0xa0
[ 1633.081227][T29720]  ___sys_sendmsg+0x2a2/0x360
[ 1633.085906][T29720]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1633.090681][T29720]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1633.096424][T29720]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1633.101275][T29720]  ? __x64_sys_sendmsg+0x80/0x80
[ 1633.106205][T29720]  ? lockdep_hardirqs_on+0x94/0x140
[ 1633.111411][T29720]  ? __x64_sys_sendmsg+0x30/0x80
[ 1633.116345][T29720]  do_syscall_64+0x4c/0xa0
[ 1633.120758][T29720]  ? clear_bhb_loop+0x60/0xb0
[ 1633.125429][T29720]  ? clear_bhb_loop+0x60/0xb0
[ 1633.130103][T29720]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1633.135992][T29720] RIP: 0033:0x7fb009f9e559
[ 1633.140402][T29720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1633.160001][T29720] RSP: 002b:00007fb00aedd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1633.168409][T29720] RAX: ffffffffffffffda RBX: 00007fb00a225fa0 RCX: 00007fb009f9e559
[ 1633.176375][T29720] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[ 1633.184342][T29720] RBP: 00007fb00a0358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1633.192310][T29720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1633.200273][T29720] R13: 00007fb00a226038 R14: 00007fb00a225fa0 R15: 00007ffdacc96f98
[ 1633.208337][T29720]  </TASK>
[ 1633.282864][T29728] IPv6: Can't replace route, no match found
[ 1633.706782][T29731] netlink: 'syz.0.10072': attribute type 10 has an invalid length.
[ 1636.178825][T29741] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.10077'.
[ 1636.204622][T29741] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1636.213605][T29741] CPU: 1 PID: 29741 Comm: syz.2.10077 Not tainted syzkaller #0
[ 1636.221152][T29741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1636.231197][T29741] Call Trace:
[ 1636.234488][T29741]  <TASK>
[ 1636.237403][T29741]  dump_stack_lvl+0x188/0x24e
[ 1636.242073][T29741]  ? show_regs_print_info+0x12/0x12
[ 1636.247260][T29741]  ? load_image+0x410/0x410
[ 1636.251753][T29741]  sysfs_warn_dup+0x8a/0xa0
[ 1636.256253][T29741]  sysfs_do_create_link_sd+0xc0/0x110
[ 1636.261614][T29741]  device_add+0x83b/0x1050
[ 1636.266027][T29741]  wiphy_register+0x1d8b/0x2aa0
[ 1636.270879][T29741]  ? cfg80211_event_work+0x40/0x40
[ 1636.275986][T29741]  ? minstrel_ht_alloc+0x894/0xa20
[ 1636.281092][T29741]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1636.287154][T29741]  ieee80211_register_hw+0x2e33/0x3b00
[ 1636.292621][T29741]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1636.298788][T29741]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1636.304321][T29741]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1636.309861][T29741]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1636.315481][T29741]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1636.321370][T29741]  ? __debug_object_init+0xed/0x440
[ 1636.326572][T29741]  ? memset+0x1e/0x40
[ 1636.330554][T29741]  ? __hrtimer_init+0x189/0x270
[ 1636.335403][T29741]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1636.341127][T29741]  ? memcpy+0x3c/0x60
[ 1636.345109][T29741]  hwsim_new_radio_nl+0xab7/0xc90
[ 1636.350137][T29741]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1636.355686][T29741]  ? end_current_label_crit_section+0x170/0x170
[ 1636.361932][T29741]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1636.367842][T29741]  ? bpf_lsm_capable+0x5/0x10
[ 1636.372524][T29741]  ? security_capable+0x85/0xb0
[ 1636.377411][T29741]  genl_rcv_msg+0x601/0x790
[ 1636.381919][T29741]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1636.388088][T29741]  ? genl_bind+0x360/0x360
[ 1636.392508][T29741]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1636.398840][T29741]  ? genl_rcv_msg+0xd/0x790
[ 1636.403348][T29741]  netlink_rcv_skb+0x1ef/0x440
[ 1636.408110][T29741]  ? genl_bind+0x360/0x360
[ 1636.412522][T29741]  ? netlink_ack+0x1160/0x1160
[ 1636.417288][T29741]  ? down_read+0x1a8/0x2d0
[ 1636.421709][T29741]  genl_rcv+0x24/0x40
[ 1636.425691][T29741]  netlink_unicast+0x7ad/0x920
[ 1636.430461][T29741]  netlink_sendmsg+0x8ad/0xbd0
[ 1636.435229][T29741]  ? netlink_getsockopt+0x550/0x550
[ 1636.440425][T29741]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1636.445970][T29741]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1636.451248][T29741]  ? security_socket_sendmsg+0x7c/0xa0
[ 1636.456706][T29741]  ? netlink_getsockopt+0x550/0x550
[ 1636.461902][T29741]  ____sys_sendmsg+0x5ed/0x9a0
[ 1636.466703][T29741]  ? __sys_sendmsg_sock+0x30/0x30
[ 1636.471723][T29741]  ? __import_iovec+0x306/0x510
[ 1636.476615][T29741]  ? import_iovec+0x6f/0xa0
[ 1636.481121][T29741]  ___sys_sendmsg+0x2a2/0x360
[ 1636.485792][T29741]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[ 1636.491618][T29741]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1636.496398][T29741]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1636.502403][T29741]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1636.508571][T29741]  ? ___sys_sendmsg+0xd/0x360
[ 1636.513254][T29741]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1636.518105][T29741]  ? perf_trace_preemptirq_template+0x268/0x320
[ 1636.524352][T29741]  ? __x64_sys_sendmsg+0x80/0x80
[ 1636.529301][T29741]  ? lockdep_hardirqs_on+0x94/0x140
[ 1636.534503][T29741]  do_syscall_64+0x4c/0xa0
[ 1636.538915][T29741]  ? clear_bhb_loop+0x60/0xb0
[ 1636.543586][T29741]  ? clear_bhb_loop+0x60/0xb0
[ 1636.548259][T29741]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1636.554148][T29741] RIP: 0033:0x7fb009f9e559
[ 1636.558564][T29741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1636.578171][T29741] RSP: 002b:00007fb00aedd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1636.586579][T29741] RAX: ffffffffffffffda RBX: 00007fb00a225fa0 RCX: 00007fb009f9e559
[ 1636.594545][T29741] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1636.602506][T29741] RBP: 00007fb00a0358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1636.610465][T29741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1636.618426][T29741] R13: 00007fb00a226038 R14: 00007fb00a225fa0 R15: 00007ffdacc96f98
[ 1636.626408][T29741]  </TASK>
[ 1636.727394][T29748] netlink: 'syz.0.10081': attribute type 27 has an invalid length.
[ 1639.074055][T29749] netlink: 'syz.5.10082': attribute type 4 has an invalid length.
[ 1639.091221][T29749] netlink: 'syz.5.10082': attribute type 1 has an invalid length.
[ 1639.101875][T29749] netlink: 'syz.5.10082': attribute type 1 has an invalid length.
[ 1639.109874][T29749] netlink: 'syz.5.10082': attribute type 4 has an invalid length.
[ 1639.125513][T29749] netlink: 'syz.5.10082': attribute type 26 has an invalid length.
[ 1639.141420][T29749] netlink: 60519 bytes leftover after parsing attributes in process `syz.5.10082'.
[ 1639.627844][T29777] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10094'.
[ 1639.650557][T29779] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.10095'.
[ 1639.777958][T29780] syz_tun: tun_net_xmit 42
[ 1639.820865][T29777] netlink: 'syz.1.10094': attribute type 10 has an invalid length.
[ 1639.831941][T29777] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[ 1640.821984][    C1] syz_tun: tun_net_xmit 42
[ 1640.856901][T29791] netlink: 'syz.4.10097': attribute type 4 has an invalid length.
[ 1640.901921][T29791] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10097'.
[ 1641.087188][T29798] netlink: 'syz.5.10099': attribute type 10 has an invalid length.
[ 1641.104689][T29798] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10099'.
[ 1641.126818][T29798] bridge0: port 4(bond0) entered blocking state
[ 1641.136328][T29798] bridge0: port 4(bond0) entered disabled state
[ 1641.165196][T29798] device bond0 entered promiscuous mode
[ 1641.179070][T29798] device bond_slave_1 entered promiscuous mode
[ 1641.200325][T29798] bridge0: port 4(bond0) entered blocking state
[ 1641.207148][T29798] bridge0: port 4(bond0) entered listening state
[ 1641.278626][T29803] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.10101'.
[ 1641.313159][T29803] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1641.341246][T29803] CPU: 0 PID: 29803 Comm: syz.1.10101 Not tainted syzkaller #0
[ 1641.348837][T29803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1641.359418][T29803] Call Trace:
[ 1641.362711][T29803]  <TASK>
[ 1641.365657][T29803]  dump_stack_lvl+0x188/0x24e
[ 1641.370377][T29803]  ? show_regs_print_info+0x12/0x12
[ 1641.375604][T29803]  ? load_image+0x410/0x410
[ 1641.380153][T29803]  sysfs_warn_dup+0x8a/0xa0
[ 1641.384691][T29803]  sysfs_do_create_link_sd+0xc0/0x110
[ 1641.390269][T29803]  device_add+0x83b/0x1050
[ 1641.394723][T29803]  wiphy_register+0x1d8b/0x2aa0
[ 1641.399630][T29803]  ? cfg80211_event_work+0x40/0x40
[ 1641.404754][T29803]  ? minstrel_ht_alloc+0x894/0xa20
[ 1641.409860][T29803]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1641.415929][T29803]  ieee80211_register_hw+0x2e33/0x3b00
[ 1641.421400][T29803]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1641.427573][T29803]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1641.433129][T29803]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1641.438685][T29803]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1641.444318][T29803]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1641.450217][T29803]  ? __debug_object_init+0xed/0x440
[ 1641.455418][T29803]  ? memset+0x1e/0x40
[ 1641.459396][T29803]  ? __hrtimer_init+0x189/0x270
[ 1641.464283][T29803]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1641.470003][T29803]  ? memcpy+0x3c/0x60
[ 1641.473982][T29803]  hwsim_new_radio_nl+0xab7/0xc90
[ 1641.479015][T29803]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1641.484559][T29803]  ? end_current_label_crit_section+0x170/0x170
[ 1641.490820][T29803]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1641.496716][T29803]  ? bpf_lsm_capable+0x5/0x10
[ 1641.501390][T29803]  ? security_capable+0x85/0xb0
[ 1641.506247][T29803]  genl_rcv_msg+0x601/0x790
[ 1641.510750][T29803]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1641.516910][T29803]  ? genl_bind+0x360/0x360
[ 1641.521331][T29803]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1641.527660][T29803]  ? lock_acquire+0x226/0x4a0
[ 1641.532344][T29803]  netlink_rcv_skb+0x1ef/0x440
[ 1641.537105][T29803]  ? genl_bind+0x360/0x360
[ 1641.541521][T29803]  ? netlink_ack+0x1160/0x1160
[ 1641.546308][T29803]  ? down_read+0x1a8/0x2d0
[ 1641.550722][T29803]  genl_rcv+0x24/0x40
[ 1641.554698][T29803]  netlink_unicast+0x7ad/0x920
[ 1641.559470][T29803]  netlink_sendmsg+0x8ad/0xbd0
[ 1641.564238][T29803]  ? netlink_getsockopt+0x550/0x550
[ 1641.569434][T29803]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1641.574981][T29803]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1641.580260][T29803]  ? security_socket_sendmsg+0x7c/0xa0
[ 1641.585738][T29803]  ? netlink_getsockopt+0x550/0x550
[ 1641.590943][T29803]  ____sys_sendmsg+0x5ed/0x9a0
[ 1641.595729][T29803]  ? __import_iovec+0x3bb/0x510
[ 1641.600581][T29803]  ? __sys_sendmsg_sock+0x30/0x30
[ 1641.605609][T29803]  ? import_iovec+0x6f/0xa0
[ 1641.610117][T29803]  ___sys_sendmsg+0x2a2/0x360
[ 1641.614796][T29803]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1641.619588][T29803]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1641.625329][T29803]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1641.630182][T29803]  ? __x64_sys_sendmsg+0x80/0x80
[ 1641.635127][T29803]  ? syscall_enter_from_user_mode+0x2a/0x80
[ 1641.641029][T29803]  do_syscall_64+0x4c/0xa0
[ 1641.645439][T29803]  ? clear_bhb_loop+0x60/0xb0
[ 1641.650107][T29803]  ? clear_bhb_loop+0x60/0xb0
[ 1641.654777][T29803]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1641.660662][T29803] RIP: 0033:0x7f54ad59e559
[ 1641.665074][T29803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1641.684675][T29803] RSP: 002b:00007f54ae494028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1641.693092][T29803] RAX: ffffffffffffffda RBX: 00007f54ad825fa0 RCX: 00007f54ad59e559
[ 1641.701075][T29803] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[ 1641.709039][T29803] RBP: 00007f54ad6358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1641.717000][T29803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1641.724963][T29803] R13: 00007f54ad826038 R14: 00007f54ad825fa0 R15: 00007fff09ea8228
[ 1641.732941][T29803]  </TASK>
[ 1641.861001][    C1] syz_tun: tun_net_xmit 42
[ 1641.917770][T29811] netlink: 'syz.1.10102': attribute type 27 has an invalid length.
[ 1642.626528][T29817] netlink: 'syz.0.10113': attribute type 10 has an invalid length.
[ 1643.108558][T29827] netlink: 'syz.1.10109': attribute type 13 has an invalid length.
[ 1643.126598][T29827] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.10109'.
[ 1643.325313][T29837] device syzkaller0 entered promiscuous mode
[ 1643.636057][T29842] netlink: 'syz.0.10124': attribute type 10 has an invalid length.
[ 1644.216785][T29844] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.10116'.
[ 1644.247689][T29844] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1644.284793][T29844] CPU: 0 PID: 29844 Comm: syz.5.10116 Not tainted syzkaller #0
[ 1644.292391][T29844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1644.302470][T29844] Call Trace:
[ 1644.305760][T29844]  <TASK>
[ 1644.308709][T29844]  dump_stack_lvl+0x188/0x24e
[ 1644.313412][T29844]  ? show_regs_print_info+0x12/0x12
[ 1644.318649][T29844]  ? load_image+0x410/0x410
[ 1644.323181][T29844]  sysfs_warn_dup+0x8a/0xa0
[ 1644.327710][T29844]  sysfs_do_create_link_sd+0xc0/0x110
[ 1644.333110][T29844]  device_add+0x83b/0x1050
[ 1644.337558][T29844]  wiphy_register+0x1d8b/0x2aa0
[ 1644.342453][T29844]  ? cfg80211_event_work+0x40/0x40
[ 1644.347588][T29844]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1644.353774][T29844]  ? ieee80211_register_hw+0x2c56/0x3b00
[ 1644.359445][T29844]  ieee80211_register_hw+0x2e33/0x3b00
[ 1644.364950][T29844]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1644.370522][T29844]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1644.376104][T29844]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1644.381755][T29844]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1644.387679][T29844]  ? __debug_object_init+0xed/0x440
[ 1644.392906][T29844]  ? memset+0x1e/0x40
[ 1644.396914][T29844]  ? __hrtimer_init+0x189/0x270
[ 1644.401801][T29844]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1644.407554][T29844]  ? memcpy+0x3c/0x60
[ 1644.411564][T29844]  hwsim_new_radio_nl+0xab7/0xc90
[ 1644.416625][T29844]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1644.422199][T29844]  ? end_current_label_crit_section+0x170/0x170
[ 1644.428476][T29844]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1644.434233][T29844]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1644.440161][T29844]  ? bpf_lsm_capable+0x5/0x10
[ 1644.444868][T29844]  ? security_capable+0x85/0xb0
[ 1644.449746][T29844]  genl_rcv_msg+0x601/0x790
[ 1644.454287][T29844]  ? genl_bind+0x360/0x360
[ 1644.458727][T29844]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1644.465092][T29844]  netlink_rcv_skb+0x1ef/0x440
[ 1644.469889][T29844]  ? genl_bind+0x360/0x360
[ 1644.474333][T29844]  ? netlink_ack+0x1160/0x1160
[ 1644.479136][T29844]  ? down_read+0x1a8/0x2d0
[ 1644.483585][T29844]  genl_rcv+0x24/0x40
[ 1644.487588][T29844]  netlink_unicast+0x7ad/0x920
[ 1644.492388][T29844]  netlink_sendmsg+0x8ad/0xbd0
[ 1644.497188][T29844]  ? netlink_getsockopt+0x550/0x550
[ 1644.502413][T29844]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1644.507989][T29844]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1644.513294][T29844]  ? security_socket_sendmsg+0x7c/0xa0
[ 1644.518779][T29844]  ? netlink_getsockopt+0x550/0x550
[ 1644.524010][T29844]  ____sys_sendmsg+0x5ed/0x9a0
[ 1644.528807][T29844]  ? __sys_sendmsg_sock+0x30/0x30
[ 1644.533860][T29844]  ? __import_iovec+0x306/0x510
[ 1644.538745][T29844]  ? import_iovec+0x6f/0xa0
[ 1644.543280][T29844]  ___sys_sendmsg+0x2a2/0x360
[ 1644.547990][T29844]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1644.552801][T29844]  ? ktime_get+0x7b/0x270
[ 1644.557191][T29844]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1644.562060][T29844]  ? perf_trace_preemptirq_template+0x268/0x320
[ 1644.568332][T29844]  ? __x64_sys_sendmsg+0x80/0x80
[ 1644.573312][T29844]  ? lockdep_hardirqs_on+0x94/0x140
[ 1644.578540][T29844]  do_syscall_64+0x4c/0xa0
[ 1644.582990][T29844]  ? clear_bhb_loop+0x60/0xb0
[ 1644.587690][T29844]  ? clear_bhb_loop+0x60/0xb0
[ 1644.592390][T29844]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1644.598303][T29844] RIP: 0033:0x7f7c5799e559
[ 1644.602735][T29844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1644.622357][T29844] RSP: 002b:00007f7c587bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1644.630826][T29844] RAX: ffffffffffffffda RBX: 00007f7c57c25fa0 RCX: 00007f7c5799e559
[ 1644.638819][T29844] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[ 1644.646813][T29844] RBP: 00007f7c57a358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1644.654806][T29844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1644.662798][T29844] R13: 00007f7c57c26038 R14: 00007f7c57c25fa0 R15: 00007fff7361c5b8
[ 1644.670817][T29844]  </TASK>
[ 1644.854994][T29856] netlink: 'syz.0.10127': attribute type 10 has an invalid length.
[ 1647.186361][T29867] netlink: 'syz.1.10123': attribute type 15 has an invalid length.
[ 1647.204978][T29867] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.10123'.
[ 1647.271368][T29871] netlink: 'syz.2.10121': attribute type 27 has an invalid length.
[ 1647.489665][T29872] netlink: 'syz.0.10133': attribute type 10 has an invalid length.
[ 1647.797338][T29878] netlink: 'syz.4.10139': attribute type 15 has an invalid length.
[ 1647.806407][T29878] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.10139'.
[ 1648.104002][T29888] netlink: 'syz.5.10130': attribute type 4 has an invalid length.
[ 1648.155180][T29888] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.10130'.
[ 1648.192526][T29892] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10132'.
[ 1648.230141][T29892] netlink: 'syz.2.10132': attribute type 10 has an invalid length.
[ 1648.244155][T29892] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[ 1648.485071][T29903] netlink: 'syz.1.10147': attribute type 4 has an invalid length.
[ 1648.511048][T29903] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10147'.
[ 1648.569840][T29900] netlink: 'syz.4.10136': attribute type 13 has an invalid length.
[ 1648.579036][T29900] netlink: 14581 bytes leftover after parsing attributes in process `syz.4.10136'.
[ 1650.482872][T29912] netlink: 'syz.5.10142': attribute type 27 has an invalid length.
[ 1650.522422][T29908] syz_tun: tun_net_xmit 42
[ 1651.007384][T29922] netlink: 'syz.1.10144': attribute type 10 has an invalid length.
[ 1651.541529][    C0] syz_tun: tun_net_xmit 42
[ 1652.581102][    C0] syz_tun: tun_net_xmit 42
[ 1653.227869][T29937] netlink: 'syz.2.10151': attribute type 10 has an invalid length.
[ 1653.247866][T29935] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10150'.
[ 1653.259870][T29937] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10151'.
[ 1653.306250][T29937] net_ratelimit: 3 callbacks suppressed
[ 1653.306284][T29937] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1653.389034][T29935] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1653.429110][T29935] CPU: 0 PID: 29935 Comm: syz.4.10150 Not tainted syzkaller #0
[ 1653.436714][T29935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1653.446789][T29935] Call Trace:
[ 1653.450091][T29935]  <TASK>
[ 1653.453043][T29935]  dump_stack_lvl+0x188/0x24e
[ 1653.457749][T29935]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1653.463951][T29935]  ? show_regs_print_info+0x12/0x12
[ 1653.469170][T29935]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1653.475359][T29935]  ? dump_stack+0x5/0x12
[ 1653.479632][T29935]  sysfs_warn_dup+0x8a/0xa0
[ 1653.484165][T29935]  sysfs_do_create_link_sd+0xc0/0x110
[ 1653.489571][T29935]  device_add+0x83b/0x1050
[ 1653.494021][T29935]  wiphy_register+0x1d8b/0x2aa0
[ 1653.498917][T29935]  ? cfg80211_event_work+0x40/0x40
[ 1653.504062][T29935]  ? minstrel_ht_alloc+0x894/0xa20
[ 1653.509203][T29935]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1653.515300][T29935]  ieee80211_register_hw+0x2e33/0x3b00
[ 1653.520789][T29935]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1653.526981][T29935]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1653.532552][T29935]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1653.538132][T29935]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1653.543793][T29935]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1653.549717][T29935]  ? __debug_object_init+0xed/0x440
[ 1653.554948][T29935]  ? memset+0x1e/0x40
[ 1653.558958][T29935]  ? __hrtimer_init+0x189/0x270
[ 1653.563837][T29935]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1653.569585][T29935]  ? memcpy+0x3c/0x60
[ 1653.573594][T29935]  hwsim_new_radio_nl+0xab7/0xc90
[ 1653.578656][T29935]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1653.584236][T29935]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1653.590428][T29935]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1653.596358][T29935]  ? ns_capable+0x85/0xe0
[ 1653.600835][T29935]  ? __sanitizer_cov_trace_pc+0x41/0x60
[ 1653.606423][T29935]  genl_rcv_msg+0x601/0x790
[ 1653.610974][T29935]  ? genl_bind+0x360/0x360
[ 1653.615419][T29935]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1653.621776][T29935]  netlink_rcv_skb+0x1ef/0x440
[ 1653.626556][T29935]  ? genl_bind+0x360/0x360
[ 1653.631001][T29935]  ? netlink_ack+0x1160/0x1160
[ 1653.635799][T29935]  ? down_read+0x1a8/0x2d0
[ 1653.640250][T29935]  genl_rcv+0x24/0x40
[ 1653.644257][T29935]  netlink_unicast+0x7ad/0x920
[ 1653.649058][T29935]  netlink_sendmsg+0x8ad/0xbd0
[ 1653.653857][T29935]  ? netlink_getsockopt+0x550/0x550
[ 1653.659085][T29935]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1653.664663][T29935]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1653.669977][T29935]  ? security_socket_sendmsg+0x7c/0xa0
[ 1653.675462][T29935]  ? netlink_getsockopt+0x550/0x550
[ 1653.680690][T29935]  ____sys_sendmsg+0x5ed/0x9a0
[ 1653.685472][T29935]  ? __sys_sendmsg_sock+0x30/0x30
[ 1653.690497][T29935]  ? __import_iovec+0x306/0x510
[ 1653.695370][T29935]  ? import_iovec+0x6f/0xa0
[ 1653.699877][T29935]  ___sys_sendmsg+0x2a2/0x360
[ 1653.704571][T29935]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1653.708268][T29950] netlink: 'syz.0.10155': attribute type 4 has an invalid length.
[ 1653.709356][T29935]  ? ktime_get+0x7b/0x270
[ 1653.709409][T29935]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1653.717566][T29950] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10155'.
[ 1653.721509][T29935]  ? perf_trace_preemptirq_template+0x268/0x320
[ 1653.721541][T29935]  ? __x64_sys_sendmsg+0x80/0x80
[ 1653.721576][T29935]  ? lockdep_hardirqs_on+0x94/0x140
[ 1653.721606][T29935]  do_syscall_64+0x4c/0xa0
[ 1653.756548][T29935]  ? clear_bhb_loop+0x60/0xb0
[ 1653.761241][T29935]  ? clear_bhb_loop+0x60/0xb0
[ 1653.765911][T29935]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1653.771798][T29935] RIP: 0033:0x7f544bd9e559
[ 1653.776202][T29935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1653.795807][T29935] RSP: 002b:00007f544ccc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1653.804224][T29935] RAX: ffffffffffffffda RBX: 00007f544c025fa0 RCX: 00007f544bd9e559
[ 1653.812189][T29935] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1653.820168][T29935] RBP: 00007f544be358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1653.828134][T29935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1653.836165][T29935] R13: 00007f544c026038 R14: 00007f544c025fa0 R15: 00007ffebfff5458
[ 1653.844157][T29935]  </TASK>
[ 1653.865456][T29941] netlink: 'syz.5.10153': attribute type 13 has an invalid length.
[ 1653.896070][T29941] netlink: 14581 bytes leftover after parsing attributes in process `syz.5.10153'.
[ 1654.625520][T29963] IPv6: Can't replace route, no match found
[ 1655.375138][T29974] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.10165'.
[ 1655.869635][T29981] netlink: 'syz.0.10166': attribute type 10 has an invalid length.
[ 1655.929324][T29983] netlink: 'syz.4.10167': attribute type 10 has an invalid length.
[ 1656.365796][T29983] device gre0 entered promiscuous mode
[ 1656.373105][T29983] team0: Device gre0 is of different type
[ 1656.421269][T29987] netlink: 'syz.2.10169': attribute type 13 has an invalid length.
[ 1656.450040][T29987] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.10169'.
[ 1656.499027][T29985] rxe_eth0 speed is unknown, defaulting to 1000
[ 1656.510986][    C1] bridge0: port 4(bond0) entered learning state
[ 1656.701004][T29996] IPv6: Can't replace route, no match found
[ 1657.377714][T30015] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10181'.
[ 1657.434379][T30015] netlink: 'syz.5.10181': attribute type 10 has an invalid length.
[ 1657.445304][T30015] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[ 1657.775134][T30019] netlink: 'syz.5.10184': attribute type 10 has an invalid length.
[ 1657.905810][T30028] IPv6: Can't replace route, no match found
[ 1657.918746][T30026] netlink: 'syz.0.10186': attribute type 13 has an invalid length.
[ 1657.928295][T30026] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.10186'.
[ 1658.199185][T30043] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10196'.
[ 1658.315592][T30043] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1658.323707][T30043] CPU: 1 PID: 30043 Comm: syz.4.10196 Not tainted syzkaller #0
[ 1658.331273][T30043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1658.341323][T30043] Call Trace:
[ 1658.344608][T30043]  <TASK>
[ 1658.347533][T30043]  dump_stack_lvl+0x188/0x24e
[ 1658.352208][T30043]  ? show_regs_print_info+0x12/0x12
[ 1658.357414][T30043]  ? load_image+0x410/0x410
[ 1658.361920][T30043]  sysfs_warn_dup+0x8a/0xa0
[ 1658.366419][T30043]  sysfs_do_create_link_sd+0xc0/0x110
[ 1658.371811][T30043]  device_add+0x83b/0x1050
[ 1658.376274][T30043]  wiphy_register+0x1d8b/0x2aa0
[ 1658.381168][T30043]  ? cfg80211_event_work+0x40/0x40
[ 1658.386287][T30043]  ? minstrel_ht_alloc+0x894/0xa20
[ 1658.391415][T30043]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1658.397486][T30043]  ieee80211_register_hw+0x2e33/0x3b00
[ 1658.402950][T30043]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1658.409118][T30043]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1658.414652][T30043]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1658.420207][T30043]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1658.425841][T30043]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1658.431766][T30043]  ? __debug_object_init+0xed/0x440
[ 1658.436956][T30043]  ? memset+0x1e/0x40
[ 1658.440934][T30043]  ? __hrtimer_init+0x189/0x270
[ 1658.445797][T30043]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1658.451508][T30043]  ? memcpy+0x3c/0x60
[ 1658.455479][T30043]  hwsim_new_radio_nl+0xab7/0xc90
[ 1658.460501][T30043]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1658.466043][T30043]  ? rcu_is_watching+0x11/0xa0
[ 1658.470809][T30043]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1658.476692][T30043]  ? lockdep_hardirqs_on+0x94/0x140
[ 1658.481892][T30043]  ? genl_rcv_msg+0x5d9/0x790
[ 1658.486560][T30043]  genl_rcv_msg+0x601/0x790
[ 1658.491057][T30043]  ? genl_bind+0x360/0x360
[ 1658.495459][T30043]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1658.501783][T30043]  netlink_rcv_skb+0x1ef/0x440
[ 1658.506544][T30043]  ? genl_bind+0x360/0x360
[ 1658.510976][T30043]  ? netlink_ack+0x1160/0x1160
[ 1658.515757][T30043]  ? down_read+0x1a8/0x2d0
[ 1658.520173][T30043]  genl_rcv+0x24/0x40
[ 1658.524146][T30043]  netlink_unicast+0x7ad/0x920
[ 1658.528917][T30043]  netlink_sendmsg+0x8ad/0xbd0
[ 1658.533675][T30043]  ? netlink_getsockopt+0x550/0x550
[ 1658.538880][T30043]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1658.544437][T30043]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1658.549712][T30043]  ? security_socket_sendmsg+0x7c/0xa0
[ 1658.555161][T30043]  ? netlink_getsockopt+0x550/0x550
[ 1658.560352][T30043]  ____sys_sendmsg+0x5ed/0x9a0
[ 1658.565133][T30043]  ? __sys_sendmsg_sock+0x30/0x30
[ 1658.570165][T30043]  ? __import_iovec+0x306/0x510
[ 1658.575021][T30043]  ? import_iovec+0x6f/0xa0
[ 1658.579538][T30043]  ___sys_sendmsg+0x2a2/0x360
[ 1658.584220][T30043]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1658.589007][T30043]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1658.593850][T30043]  ? perf_trace_preemptirq_template+0x268/0x320
[ 1658.600109][T30043]  ? __x64_sys_sendmsg+0x80/0x80
[ 1658.605065][T30043]  ? lockdep_hardirqs_on+0x94/0x140
[ 1658.610264][T30043]  do_syscall_64+0x4c/0xa0
[ 1658.614672][T30043]  ? clear_bhb_loop+0x60/0xb0
[ 1658.619336][T30043]  ? clear_bhb_loop+0x60/0xb0
[ 1658.624013][T30043]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1658.629920][T30043] RIP: 0033:0x7f544bd9e559
[ 1658.634330][T30043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1658.653935][T30043] RSP: 002b:00007f544ccc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1658.662384][T30043] RAX: ffffffffffffffda RBX: 00007f544c025fa0 RCX: 00007f544bd9e559
[ 1658.670345][T30043] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1658.678303][T30043] RBP: 00007f544be358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1658.686270][T30043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1658.694242][T30043] R13: 00007f544c026038 R14: 00007f544c025fa0 R15: 00007ffebfff5458
[ 1658.702227][T30043]  </TASK>
[ 1658.934487][T30051] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.10209'.
[ 1659.010094][T30051] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1659.020651][T30051] CPU: 1 PID: 30051 Comm: syz.2.10209 Not tainted syzkaller #0
[ 1659.028234][T30051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1659.038289][T30051] Call Trace:
[ 1659.041596][T30051]  <TASK>
[ 1659.044536][T30051]  dump_stack_lvl+0x188/0x24e
[ 1659.049219][T30051]  ? show_regs_print_info+0x12/0x12
[ 1659.054413][T30051]  ? load_image+0x410/0x410
[ 1659.058926][T30051]  sysfs_warn_dup+0x8a/0xa0
[ 1659.063433][T30051]  sysfs_do_create_link_sd+0xc0/0x110
[ 1659.068805][T30051]  device_add+0x83b/0x1050
[ 1659.073229][T30051]  wiphy_register+0x1d8b/0x2aa0
[ 1659.078113][T30051]  ? cfg80211_event_work+0x40/0x40
[ 1659.083225][T30051]  ? minstrel_ht_alloc+0x894/0xa20
[ 1659.088335][T30051]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1659.094406][T30051]  ieee80211_register_hw+0x2e33/0x3b00
[ 1659.099867][T30051]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1659.106027][T30051]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1659.111566][T30051]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1659.117122][T30051]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1659.122748][T30051]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1659.128636][T30051]  ? __debug_object_init+0xed/0x440
[ 1659.133831][T30051]  ? memset+0x1e/0x40
[ 1659.137806][T30051]  ? __hrtimer_init+0x189/0x270
[ 1659.142654][T30051]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1659.148378][T30051]  ? memcpy+0x3c/0x60
[ 1659.152358][T30051]  hwsim_new_radio_nl+0xab7/0xc90
[ 1659.157388][T30051]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1659.162933][T30051]  ? end_current_label_crit_section+0x170/0x170
[ 1659.169176][T30051]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1659.175073][T30051]  ? bpf_lsm_capable+0x5/0x10
[ 1659.179744][T30051]  ? security_capable+0x85/0xb0
[ 1659.184615][T30051]  genl_rcv_msg+0x601/0x790
[ 1659.189127][T30051]  ? genl_bind+0x360/0x360
[ 1659.193544][T30051]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1659.199886][T30051]  netlink_rcv_skb+0x1ef/0x440
[ 1659.204650][T30051]  ? genl_bind+0x360/0x360
[ 1659.209081][T30051]  ? netlink_ack+0x1160/0x1160
[ 1659.213865][T30051]  ? down_read+0x1a8/0x2d0
[ 1659.218310][T30051]  genl_rcv+0x24/0x40
[ 1659.222304][T30051]  netlink_unicast+0x7ad/0x920
[ 1659.227092][T30051]  netlink_sendmsg+0x8ad/0xbd0
[ 1659.231866][T30051]  ? netlink_getsockopt+0x550/0x550
[ 1659.237088][T30051]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1659.242646][T30051]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1659.247935][T30051]  ? security_socket_sendmsg+0x7c/0xa0
[ 1659.253401][T30051]  ? netlink_getsockopt+0x550/0x550
[ 1659.258599][T30051]  ____sys_sendmsg+0x5ed/0x9a0
[ 1659.263371][T30051]  ? __sys_sendmsg_sock+0x30/0x30
[ 1659.268406][T30051]  ? __import_iovec+0x306/0x510
[ 1659.273278][T30051]  ? import_iovec+0x6f/0xa0
[ 1659.277804][T30051]  ___sys_sendmsg+0x2a2/0x360
[ 1659.282488][T30051]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1659.287270][T30051]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1659.293018][T30051]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1659.297874][T30051]  ? __x64_sys_sendmsg+0x80/0x80
[ 1659.302824][T30051]  ? syscall_enter_from_user_mode+0x2a/0x80
[ 1659.308723][T30051]  do_syscall_64+0x4c/0xa0
[ 1659.313136][T30051]  ? clear_bhb_loop+0x60/0xb0
[ 1659.317807][T30051]  ? clear_bhb_loop+0x60/0xb0
[ 1659.322478][T30051]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1659.328373][T30051] RIP: 0033:0x7fb009f9e559
[ 1659.332782][T30051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1659.352405][T30051] RSP: 002b:00007fb00aedd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1659.360829][T30051] RAX: ffffffffffffffda RBX: 00007fb00a225fa0 RCX: 00007fb009f9e559
[ 1659.368796][T30051] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1659.376757][T30051] RBP: 00007fb00a0358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1659.384717][T30051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1659.392680][T30051] R13: 00007fb00a226038 R14: 00007fb00a225fa0 R15: 00007ffdacc96f98
[ 1659.400674][T30051]  </TASK>
[ 1659.444398][T30054] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10198'.
[ 1659.485979][T30054] netlink: 'syz.4.10198': attribute type 10 has an invalid length.
[ 1659.507097][T30054] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[ 1659.704089][T30067] device syzkaller0 left promiscuous mode
[ 1660.011725][T30070] IPv6: Can't replace route, no match found
[ 1660.086473][T30074] netlink: 'syz.2.10204': attribute type 13 has an invalid length.
[ 1660.113514][T30074] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.10204'.
[ 1660.666020][T30091] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10213'.
[ 1660.723305][T30091] netlink: 'syz.0.10213': attribute type 10 has an invalid length.
[ 1660.752755][T30091] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[ 1660.829719][T30093] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.10216'.
[ 1660.903994][T30093] debugfs: Directory '.!
 5‚Á7>7H
€' with parent 'ieee80211' already present!
[ 1661.116778][T30103] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.10222'.
[ 1661.518115][T30114] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.10235'.
[ 1661.579183][T30114] debugfs: Directory '.!
 5‚Á7>7H
€' with parent 'ieee80211' already present!
[ 1662.100513][T30129] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10231'.
[ 1663.348821][T30129] netlink: 'syz.1.10231': attribute type 10 has an invalid length.
[ 1663.420231][T30129] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[ 1664.026168][T30157] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.10242'.
[ 1664.066920][T30157] debugfs: Directory '.!
 5‚Á7>7H
€' with parent 'ieee80211' already present!
[ 1664.444974][T30174] netlink: 'syz.5.10250': attribute type 2 has an invalid length.
[ 1664.559825][T30179] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1664.739022][T30174] device .*! entered promiscuous mode
[ 1665.908344][T30214] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10263'.
[ 1665.959062][T30219] netlink: 'syz.5.10265': attribute type 3 has an invalid length.
[ 1665.977979][T30219] netlink: 'syz.5.10265': attribute type 1 has an invalid length.
[ 1665.980095][T30214] debugfs: Directory '.!
 5‚Á7>7H
€' with parent 'ieee80211' already present!
[ 1665.998660][T30219] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.10265'.
[ 1667.446811][T22951] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5
[ 1667.464709][T30256] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.10285'.
[ 1667.528903][T30256] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1667.569163][T30256] CPU: 0 PID: 30256 Comm: syz.5.10285 Not tainted syzkaller #0
[ 1667.576769][T30256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1667.586845][T30256] Call Trace:
[ 1667.590139][T30256]  <TASK>
[ 1667.593088][T30256]  dump_stack_lvl+0x188/0x24e
[ 1667.597796][T30256]  ? show_regs_print_info+0x12/0x12
[ 1667.603022][T30256]  ? load_image+0x410/0x410
[ 1667.607560][T30256]  sysfs_warn_dup+0x8a/0xa0
[ 1667.612094][T30256]  sysfs_do_create_link_sd+0xc0/0x110
[ 1667.617500][T30256]  device_add+0x83b/0x1050
[ 1667.621995][T30256]  wiphy_register+0x1d8b/0x2aa0
[ 1667.626895][T30256]  ? cfg80211_event_work+0x40/0x40
[ 1667.632057][T30256]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1667.638155][T30256]  ieee80211_register_hw+0x2e33/0x3b00
[ 1667.643653][T30256]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1667.649217][T30256]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1667.654791][T30256]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1667.660446][T30256]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1667.666360][T30256]  ? __debug_object_init+0xed/0x440
[ 1667.671586][T30256]  ? memset+0x1e/0x40
[ 1667.675591][T30256]  ? __hrtimer_init+0x189/0x270
[ 1667.680466][T30256]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1667.686214][T30256]  ? memcpy+0x3c/0x60
[ 1667.690219][T30256]  hwsim_new_radio_nl+0xab7/0xc90
[ 1667.695281][T30256]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1667.700850][T30256]  ? end_current_label_crit_section+0x170/0x170
[ 1667.707124][T30256]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1667.713047][T30256]  ? bpf_lsm_capable+0x5/0x10
[ 1667.717744][T30256]  ? security_capable+0x85/0xb0
[ 1667.722621][T30256]  genl_rcv_msg+0x601/0x790
[ 1667.727156][T30256]  ? genl_bind+0x360/0x360
[ 1667.731592][T30256]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1667.737953][T30256]  netlink_rcv_skb+0x1ef/0x440
[ 1667.742747][T30256]  ? genl_bind+0x360/0x360
[ 1667.747185][T30256]  ? netlink_ack+0x1160/0x1160
[ 1667.751988][T30256]  ? down_read+0x1a8/0x2d0
[ 1667.756432][T30256]  genl_rcv+0x24/0x40
[ 1667.760435][T30256]  netlink_unicast+0x7ad/0x920
[ 1667.765230][T30256]  netlink_sendmsg+0x8ad/0xbd0
[ 1667.770025][T30256]  ? netlink_getsockopt+0x550/0x550
[ 1667.775249][T30256]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1667.780824][T30256]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1667.786126][T30256]  ? security_socket_sendmsg+0x7c/0xa0
[ 1667.791607][T30256]  ? netlink_getsockopt+0x550/0x550
[ 1667.796827][T30256]  ____sys_sendmsg+0x5ed/0x9a0
[ 1667.801621][T30256]  ? __sys_sendmsg_sock+0x30/0x30
[ 1667.806662][T30256]  ? __import_iovec+0x306/0x510
[ 1667.811547][T30256]  ? import_iovec+0x6f/0xa0
[ 1667.816078][T30256]  ___sys_sendmsg+0x2a2/0x360
[ 1667.820779][T30256]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1667.825618][T30256]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1667.830491][T30256]  ? __x64_sys_sendmsg+0x80/0x80
[ 1667.835465][T30256]  ? lockdep_hardirqs_on+0x94/0x140
[ 1667.840692][T30256]  do_syscall_64+0x4c/0xa0
[ 1667.845131][T30256]  ? clear_bhb_loop+0x60/0xb0
[ 1667.849813][T30256]  ? clear_bhb_loop+0x60/0xb0
[ 1667.854477][T30256]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1667.860355][T30256] RIP: 0033:0x7f7c5799e559
[ 1667.864759][T30256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1667.884351][T30256] RSP: 002b:00007f7c587bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1667.892748][T30256] RAX: ffffffffffffffda RBX: 00007f7c57c25fa0 RCX: 00007f7c5799e559
[ 1667.900704][T30256] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1667.908657][T30256] RBP: 00007f7c57a358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1667.916611][T30256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1667.924578][T30256] R13: 00007f7c57c26038 R14: 00007f7c57c25fa0 R15: 00007fff7361c5b8
[ 1667.932580][T30256]  </TASK>
[ 1667.972659][T30258] device syzkaller0 left promiscuous mode
[ 1668.671909][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.678279][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.002398][T30290] netlink: 'syz.1.10300': attribute type 10 has an invalid length.
[ 1669.178147][T30296] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.10303'.
[ 1669.352191][T30290] device gre0 entered promiscuous mode
[ 1669.358924][T30290] team0: Device gre0 is of different type
[ 1670.833843][T30296] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[ 1670.861167][T30296] CPU: 0 PID: 30296 Comm: syz.0.10303 Not tainted syzkaller #0
[ 1670.868765][T30296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1670.878834][T30296] Call Trace:
[ 1670.882125][T30296]  <TASK>
[ 1670.885069][T30296]  dump_stack_lvl+0x188/0x24e
[ 1670.889772][T30296]  ? show_regs_print_info+0x12/0x12
[ 1670.894992][T30296]  ? load_image+0x410/0x410
[ 1670.899530][T30296]  sysfs_warn_dup+0x8a/0xa0
[ 1670.904056][T30296]  sysfs_do_create_link_sd+0xc0/0x110
[ 1670.909451][T30296]  device_add+0x83b/0x1050
[ 1670.913896][T30296]  wiphy_register+0x1d8b/0x2aa0
[ 1670.918768][T30296]  ? cfg80211_event_work+0x40/0x40
[ 1670.923880][T30296]  ? minstrel_ht_alloc+0x894/0xa20
[ 1670.929005][T30296]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[ 1670.935064][T30296]  ieee80211_register_hw+0x2e33/0x3b00
[ 1670.940516][T30296]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1670.946048][T30296]  ? ieee80211_register_hw+0xf31/0x3b00
[ 1670.951586][T30296]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1670.957201][T30296]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1670.963080][T30296]  ? __debug_object_init+0xed/0x440
[ 1670.968270][T30296]  ? memset+0x1e/0x40
[ 1670.972248][T30296]  ? __hrtimer_init+0x189/0x270
[ 1670.977107][T30296]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1670.982829][T30296]  ? memcpy+0x3c/0x60
[ 1670.986807][T30296]  hwsim_new_radio_nl+0xab7/0xc90
[ 1670.991832][T30296]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1670.997371][T30296]  ? end_current_label_crit_section+0x170/0x170
[ 1671.003615][T30296]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1671.009512][T30296]  ? bpf_lsm_capable+0x5/0x10
[ 1671.014180][T30296]  ? security_capable+0x85/0xb0
[ 1671.019026][T30296]  genl_rcv_msg+0x601/0x790
[ 1671.023533][T30296]  ? genl_bind+0x360/0x360
[ 1671.027944][T30296]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1671.034272][T30296]  netlink_rcv_skb+0x1ef/0x440
[ 1671.039031][T30296]  ? genl_bind+0x360/0x360
[ 1671.043442][T30296]  ? netlink_ack+0x1160/0x1160
[ 1671.048223][T30296]  ? down_read+0x1a8/0x2d0
[ 1671.052651][T30296]  genl_rcv+0x24/0x40
[ 1671.056657][T30296]  netlink_unicast+0x7ad/0x920
[ 1671.061426][T30296]  netlink_sendmsg+0x8ad/0xbd0
[ 1671.066196][T30296]  ? netlink_getsockopt+0x550/0x550
[ 1671.071396][T30296]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1671.076955][T30296]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1671.082236][T30296]  ? security_socket_sendmsg+0x7c/0xa0
[ 1671.087690][T30296]  ? netlink_getsockopt+0x550/0x550
[ 1671.092890][T30296]  ____sys_sendmsg+0x5ed/0x9a0
[ 1671.097655][T30296]  ? __sys_sendmsg_sock+0x30/0x30
[ 1671.102671][T30296]  ? __import_iovec+0x306/0x510
[ 1671.107533][T30296]  ? import_iovec+0x6f/0xa0
[ 1671.112040][T30296]  ___sys_sendmsg+0x2a2/0x360
[ 1671.116718][T30296]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1671.121514][T30296]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1671.126365][T30296]  ? __x64_sys_sendmsg+0x80/0x80
[ 1671.131308][T30296]  ? lockdep_hardirqs_on+0x94/0x140
[ 1671.136505][T30296]  do_syscall_64+0x4c/0xa0
[ 1671.140917][T30296]  ? clear_bhb_loop+0x60/0xb0
[ 1671.145590][T30296]  ? clear_bhb_loop+0x60/0xb0
[ 1671.150282][T30296]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1671.156177][T30296] RIP: 0033:0x7f4e74f9e559
[ 1671.160584][T30296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1671.180181][T30296] RSP: 002b:00007f4e75dd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1671.188588][T30296] RAX: ffffffffffffffda RBX: 00007f4e75225fa0 RCX: 00007f4e74f9e559
[ 1671.196551][T30296] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1671.204510][T30296] RBP: 00007f4e750358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1671.212472][T30296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1671.220435][T30296] R13: 00007f4e75226038 R14: 00007f4e75225fa0 R15: 00007fff71dd7be8
[ 1671.228413][T30296]  </TASK>
[ 1671.250806][T30294] rxe_eth0 speed is unknown, defaulting to 1000
[ 1671.504320][T30308] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.10308'.
[ 1671.633551][T30315] device syzkaller0 left promiscuous mode
[ 1671.860976][    C1] bridge0: port 4(bond0) entered forwarding state
[ 1671.867506][    C1] bridge0: topology change detected, propagating
[ 1672.220581][T30338] netlink: 'syz.0.10320': attribute type 3 has an invalid length.
[ 1672.234081][T30338] netlink: 'syz.0.10320': attribute type 1 has an invalid length.
[ 1672.242408][T30338] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.10320'.
[ 1672.446861][T30346] syz_tun: tun_net_xmit 42
[ 1673.460997][    C1] syz_tun: tun_net_xmit 42
[ 1674.369870][T30357] device syzkaller0 left promiscuous mode
[ 1674.500983][    C1] syz_tun: tun_net_xmit 42
[ 1674.563652][T30353] netlink: 'syz.2.10324': attribute type 2 has an invalid length.
[ 1674.663691][T30364] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1675.091670][T30368] netlink: 'syz.0.10329': attribute type 10 has an invalid length.
[ 1675.466972][T30368] device gre0 entered promiscuous mode
[ 1675.495569][T30368] team0: Device gre0 is of different type
[ 1675.734451][T30371] rxe_eth0 speed is unknown, defaulting to 1000
[ 1675.741296][T30380] netlink: 'syz.5.10332': attribute type 16 has an invalid length.
[ 1675.749614][T30380] netlink: 156 bytes leftover after parsing attributes in process `syz.5.10332'.
[ 1675.916504][T30393] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10334'.
[ 1678.994558][T30440] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.10353'.
[ 1679.046516][T30444] device syzkaller0 left promiscuous mode
[ 1681.188770][T30490] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.10367'.
[ 1681.678545][T30502] netlink: 'syz.2.10370': attribute type 3 has an invalid length.
[ 1681.716289][T30502] netlink: 'syz.2.10370': attribute type 1 has an invalid length.
[ 1681.749815][T30502] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.10370'.
[ 1682.812873][T30533] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.10398'.
[ 1682.953605][T30536] netlink: 'syz.2.10389': attribute type 21 has an invalid length.
[ 1682.961924][T30536] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10389'.
[ 1685.812002][T30589] netlink: 'syz.4.10410': attribute type 10 has an invalid length.
[ 1686.692469][T30618] netlink: 'syz.0.10422': attribute type 21 has an invalid length.
[ 1686.700474][T30618] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10422'.
[ 1686.944171][T30622] netlink: 'syz.1.10424': attribute type 10 has an invalid length.
[ 1687.163966][T30636] netlink: 'syz.2.10430': attribute type 29 has an invalid length.
[ 1687.178678][T30636] netlink: 'syz.2.10430': attribute type 29 has an invalid length.
[ 1687.195862][T30636] netlink: 'syz.2.10430': attribute type 29 has an invalid length.
[ 1687.413198][T30642] BUG: kernel NULL pointer dereference, address: 0000000000000000
[ 1687.421056][T30642] #PF: supervisor instruction fetch in kernel mode
[ 1687.427567][T30642] #PF: error_code(0x0010) - not-present page
[ 1687.433561][T30642] PGD 38945067 P4D 38945067 PUD 0 
[ 1687.438698][T30642] Oops: 0010 [#1] PREEMPT SMP KASAN
[ 1687.443903][T30642] CPU: 0 PID: 30642 Comm: syz.0.10433 Not tainted syzkaller #0
[ 1687.451454][T30642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1687.461519][T30642] RIP: 0010:0x0
[ 1687.464990][T30642] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[ 1687.472364][T30642] RSP: 0018:ffffc90003e87498 EFLAGS: 00010246
[ 1687.478449][T30642] RAX: 1ffffffff162e09b RBX: 1ffff920007d0ea4 RCX: 0000000000000001
[ 1687.486429][T30642] RDX: ffffc90003e87540 RSI: 0000000000000001 RDI: ffff888056538000
[ 1687.494430][T30642] RBP: ffffc90003e875b0 R08: ffff88805653803f R09: 1ffff1100aca7007
[ 1687.502423][T30642] R10: dffffc0000000000 R11: ffffed100aca7008 R12: ffffe8ffffc4e270
[ 1687.510413][T30642] R13: ffffffff8b1704d8 R14: 0000000000000000 R15: ffff888056538000
[ 1687.518396][T30642] FS:  00007f4e75dd66c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[ 1687.527346][T30642] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1687.533938][T30642] CR2: ffffffffffffffd6 CR3: 000000007d273000 CR4: 00000000003506f0
[ 1687.541928][T30642] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1687.549905][T30642] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1687.557885][T30642] Call Trace:
[ 1687.561173][T30642]  <TASK>
[ 1687.564106][T30642]  bond_xdp_xmit+0x31e/0x550
[ 1687.568830][T30642]  ? bond_xdp_xmit+0x94/0x550
[ 1687.573532][T30642]  ? bond_xdp+0x8c0/0x8c0
[ 1687.577885][T30642]  bq_xmit_all+0xca9/0x1120
[ 1687.582486][T30642]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1687.588224][T30642]  ? perf_trace_preemptirq_template+0x268/0x320
[ 1687.594487][T30642]  ? irqentry_enter+0x33/0x50
[ 1687.599185][T30642]  ? __dev_flush+0x1b0/0x1b0
[ 1687.603794][T30642]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1687.609797][T30642]  ? lock_chain_count+0x20/0x20
[ 1687.614663][T30642]  ? rcu_is_watching+0x11/0xa0
[ 1687.619455][T30642]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1687.625621][T30642]  ? lockdep_hardirqs_on+0x94/0x140
[ 1687.630854][T30642]  ? bq_enqueue+0x2ef/0x3d0
[ 1687.635364][T30642]  ? rcu_is_watching+0x11/0xa0
[ 1687.640141][T30642]  ? trace_xdp_redirect+0xb3/0x2b0
[ 1687.645377][T30642]  __dev_flush+0xbf/0x1b0
[ 1687.649724][T30642]  xdp_do_flush+0xa/0x20
[ 1687.653979][T30642]  bpf_test_run_xdp_live+0x1549/0x1a90
[ 1687.659526][T30642]  ? 0xffffffffa0004b40
[ 1687.663686][T30642]  ? text_poke_copy+0x7b/0x90
[ 1687.668436][T30642]  ? bpf_test_run_xdp_live+0x515/0x1a90
[ 1687.673997][T30642]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1687.679572][T30642]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1687.685834][T30642]  ? bpf_prog_test_run_xdp+0x6bd/0xf80
[ 1687.691315][T30642]  bpf_prog_test_run_xdp+0x757/0xf80
[ 1687.696613][T30642]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1687.701655][T30642]  ? dev_put+0x80/0x80
[ 1687.705738][T30642]  ? dev_put+0x80/0x80
[ 1687.709816][T30642]  bpf_prog_test_run+0x31c/0x390
[ 1687.714904][T30642]  __sys_bpf+0x62b/0x780
[ 1687.719170][T30642]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1687.724563][T30642]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1687.730735][T30642]  __x64_sys_bpf+0x78/0x90
[ 1687.735152][T30642]  do_syscall_64+0x4c/0xa0
[ 1687.739565][T30642]  ? clear_bhb_loop+0x60/0xb0
[ 1687.744237][T30642]  ? clear_bhb_loop+0x60/0xb0
[ 1687.748908][T30642]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1687.754805][T30642] RIP: 0033:0x7f4e74f9e559
[ 1687.759209][T30642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1687.778808][T30642] RSP: 002b:00007f4e75dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1687.787216][T30642] RAX: ffffffffffffffda RBX: 00007f4e75225fa0 RCX: 00007f4e74f9e559
[ 1687.795176][T30642] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a
[ 1687.803136][T30642] RBP: 00007f4e750358b0 R08: 0000000000000000 R09: 0000000000000000
[ 1687.811092][T30642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1687.819060][T30642] R13: 00007f4e75226038 R14: 00007f4e75225fa0 R15: 00007fff71dd7be8
[ 1687.827035][T30642]  </TASK>
[ 1687.830060][T30642] Modules linked in:
[ 1687.833963][T30642] CR2: 0000000000000000
[ 1687.838123][T30642] ---[ end trace 0000000000000000 ]---
[ 1687.843572][T30642] RIP: 0010:0x0
[ 1687.847029][T30642] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[ 1687.854387][T30642] RSP: 0018:ffffc90003e87498 EFLAGS: 00010246
[ 1687.860444][T30642] RAX: 1ffffffff162e09b RBX: 1ffff920007d0ea4 RCX: 0000000000000001
[ 1687.868406][T30642] RDX: ffffc90003e87540 RSI: 0000000000000001 RDI: ffff888056538000
[ 1687.876374][T30642] RBP: ffffc90003e875b0 R08: ffff88805653803f R09: 1ffff1100aca7007
[ 1687.884346][T30642] R10: dffffc0000000000 R11: ffffed100aca7008 R12: ffffe8ffffc4e270
[ 1687.892313][T30642] R13: ffffffff8b1704d8 R14: 0000000000000000 R15: ffff888056538000
[ 1687.900282][T30642] FS:  00007f4e75dd66c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[ 1687.909206][T30642] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1687.915776][T30642] CR2: ffffffffffffffd6 CR3: 000000007d273000 CR4: 00000000003506f0
[ 1687.923736][T30642] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1687.931712][T30642] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1687.939675][T30642] Kernel panic - not syncing: Fatal exception in interrupt
[ 1687.947092][T30642] Kernel Offset: disabled
[ 1687.951422][T30642] Rebooting in 86400 seconds..