last executing test programs: 3.130033817s ago: executing program 4 (id=42236): perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x5, 0x90, 0x7, 0xe, 0x0, 0xfffffffffffffff2, 0x28010, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0xe}, 0x508, 0x6, 0x3d, 0x9, 0xffffffff, 0x1, 0x1, 0x0, 0x3d2af391, 0x0, 0xf}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e032800008c71ef288563"], 0xffdd) 2.929284174s ago: executing program 1 (id=42240): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r1, 0x0, 0x1, 0x5, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)}, 0x40) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x24048814) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @random="0100"}) sendmsg$unix(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) close(r4) 2.508959177s ago: executing program 3 (id=42245): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$inet(r0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @random="04394f9a9e63"}) 2.506930107s ago: executing program 4 (id=42255): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 2.493481238s ago: executing program 1 (id=42246): perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000010000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000), 0x6, r0}, 0x38) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000003ff40000fc05873000000000", @ANYRES32, @ANYBLOB='\a\x00'/18, @ANYRES32=0x0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x3, 0x2, 0x1, 0x5, 0x0, 0x2d9e, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, @perf_bp={0x0, 0x4}, 0x9d33eb28b77135d0, 0x0, 0x6, 0x8, 0x7ed1, 0x8, 0x3ac, 0x0, 0x1, 0x0, 0xb}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001280)='\\', 0xffffffe3}], 0x1}, 0x24004044) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) 2.272974875s ago: executing program 4 (id=42249): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x100) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac"], 0xfdef) 2.266147956s ago: executing program 3 (id=42250): r0 = socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80086601, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x29}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) 2.13548854s ago: executing program 1 (id=42252): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)}, 0xfc) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x12000) 2.093817481s ago: executing program 3 (id=42254): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r0, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="800000000000000006000000f80700000e3f96bd0fb31bfa7a907bb694d128f4cd8e71ccc8caf44576143908339952b0c0a8945a3bdc89aa28e659d68bf5dbfdbebe5b5fdcaeed28fb6da03039b6e44b68dcdc7557646d89609bfb7dd3535089695e48ed72f49a5153c7321feaafef1d2a0c534317d1b3738c7df1b080553a5e300000000000000084000000"], 0x4f0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x82101, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x325) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500001208000000000000000000000300000000040000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 1.981600755s ago: executing program 2 (id=42256): perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x5, 0x90, 0x7, 0xe, 0x0, 0xfffffffffffffff2, 0x28010, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0xe}, 0x508, 0x6, 0x3d, 0x9, 0xffffffff, 0x1, 0x1, 0x0, 0x3d2af391, 0x0, 0xf}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e032800008c71ef288563"], 0xffdd) 1.950758316s ago: executing program 1 (id=42257): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x101042, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000800)={&(0x7f00000003c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}], 0x20}, 0x2063) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1d, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x18, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) 1.786753811s ago: executing program 2 (id=42259): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r1, 0x0, 0x1, 0x5, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)}, 0x40) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x24048814) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @random="0100"}) sendmsg$unix(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) close(r4) 1.746883373s ago: executing program 1 (id=42260): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9e}, 0x4c000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x10, 0x2, 0x0, 0xff, 0x0, 0xcbf0, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_config_ext={0xffff8880b8709000, 0x1}, 0x0, 0x2, 0xffffffff, 0x0, 0x4, 0xfffffffc, 0x8000, 0x0, 0x2, 0x0, 0xb0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[], 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x4000) 1.744783343s ago: executing program 0 (id=42261): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 1.464738962s ago: executing program 0 (id=42262): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$inet(r0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @random="04394f9a9e63"}) 1.372892805s ago: executing program 0 (id=42263): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}, 0x100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.372640245s ago: executing program 2 (id=42264): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x3, 0xe2, &(0x7f0000000180)=""/226, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x8, 0x0, 0x18c}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x5, 0x1, 0x5, 0xb}], 0x10, 0xfffff445}, 0x94) r1 = syz_clone(0x1000, &(0x7f0000000500)="4edd8551e7b72898090f0332b5fbae0cccfa953f02b7cd0246d8450b6998f192", 0x20, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xb0, 0x8, 0x0, 0x4, 0x4046d, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x402, 0x80, 0xffffffff, 0x2, 0x2, 0xb, 0x6, 0x0, 0x10e, 0x0, 0x200002}, r1, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1400000022007d283840253ada4785391f890b0f", 0x14}], 0x1}, 0x4000010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) mkdirat$cgroup(r3, &(0x7f00000004c0)='syz0\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r5], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x9a}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 1.172892542s ago: executing program 2 (id=42265): r0 = socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80086601, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x29}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) 1.132941123s ago: executing program 0 (id=42275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x100, 0x6388, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) socket$kcm(0x2, 0x1, 0x84) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040c04) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 1.130237843s ago: executing program 3 (id=42276): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[], 0xb) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[], 0x8) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r3 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) 1.128350013s ago: executing program 4 (id=42277): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x7}, 0x1410, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x1, 0x2, &(0x7f0000001400), 0x4) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e1e, @remote}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000dc0)="0d62bea8", 0x4}], 0x1}, 0x40) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @ptr={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x4, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r6, r5}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r0) 307.15108ms ago: executing program 1 (id=42266): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x27, 0x0, 0xc) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x30}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 306.94808ms ago: executing program 2 (id=42267): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)}, 0xfc) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x12000) 306.75971ms ago: executing program 3 (id=42268): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x114, 0x3, 0x0, 0x10) close(0xffffffffffffffff) write$cgroup_freezer_state(r0, &(0x7f0000000380)='THAWED\x00', 0x7) r2 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x1ff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, 0x0, 0x400c000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x20, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0x0, 0x15, 0x7, 0xffffffffffffffff, 0xffffffffffffffff}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @ldst={0x0, 0x0, 0x0, 0xa, 0x2, 0x40, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) 305.73952ms ago: executing program 0 (id=42279): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x1c1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000020005fb0a0002000a0ada", 0x23}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 117.736276ms ago: executing program 4 (id=42269): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x48) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7fffffff}, 0x48) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r4) 87.315707ms ago: executing program 2 (id=42270): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e6, 0x5, 0x4, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 87.100357ms ago: executing program 3 (id=42271): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe}, 0x8, 0x0, 0xf7fffffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffd, r0, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81018, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xc8, 0x0, 0x0, 0x2, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000c80)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, r4, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000900)=ANY=[@ANYRESDEC=r5], 0x8) 46.216568ms ago: executing program 0 (id=42272): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 0s ago: executing program 4 (id=42273): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r1, 0x0, 0x1, 0x5, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)}, 0x40) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x24048814) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @random="0100"}) sendmsg$unix(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) close(r4) kernel console output (not intermixed with test programs): 489][T23800] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.38961'. [ 2193.087365][T23800] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2193.103417][T23800] CPU: 0 PID: 23800 Comm: syz.2.38961 Not tainted syzkaller #0 [ 2193.111036][T23800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2193.121145][T23800] Call Trace: [ 2193.124464][T23800] [ 2193.127424][T23800] dump_stack_lvl+0x188/0x250 [ 2193.132147][T23800] ? show_regs_print_info+0x20/0x20 [ 2193.137391][T23800] ? load_image+0x400/0x400 [ 2193.141955][T23800] sysfs_warn_dup+0x8a/0xa0 [ 2193.146521][T23800] sysfs_do_create_link_sd+0xc0/0x110 [ 2193.151941][T23800] device_add+0x7f6/0x1000 [ 2193.156433][T23800] wiphy_register+0x1e81/0x2c30 [ 2193.161356][T23800] ? cfg80211_event_work+0x40/0x40 [ 2193.166548][T23800] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2193.172778][T23800] ieee80211_register_hw+0x2aa1/0x3af0 [ 2193.178310][T23800] ? ieee80211_tasklet_handler+0x20/0x20 [ 2193.184002][T23800] ? rcu_is_watching+0x11/0xa0 [ 2193.188805][T23800] ? memset+0x1e/0x40 [ 2193.192821][T23800] ? hrtimer_init+0x10c/0x220 [ 2193.197553][T23800] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2193.203330][T23800] hwsim_new_radio_nl+0xa6f/0xc40 [ 2193.208427][T23800] genl_rcv_msg+0xcea/0xf90 [ 2193.212971][T23800] ? genl_bind+0x380/0x380 [ 2193.217430][T23800] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2193.223447][T23800] ? verify_lock_unused+0x140/0x140 [ 2193.228707][T23800] ? verify_lock_unused+0x140/0x140 [ 2193.233958][T23800] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2193.240150][T23800] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2193.246698][T23800] netlink_rcv_skb+0x1f5/0x440 [ 2193.251488][T23800] ? genl_bind+0x380/0x380 [ 2193.255932][T23800] ? netlink_ack+0xb50/0xb50 [ 2193.260540][T23800] ? lockdep_hardirqs_on+0x94/0x140 [ 2193.265773][T23800] ? down_read+0x1aa/0x2e0 [ 2193.270209][T23800] genl_rcv+0x24/0x40 [ 2193.274218][T23800] netlink_unicast+0x774/0x920 [ 2193.279023][T23800] netlink_sendmsg+0x8ba/0xbe0 [ 2193.283817][T23800] ? netlink_getsockopt+0x570/0x570 [ 2193.289050][T23800] ? aa_sock_msg_perm+0x94/0x150 [ 2193.294015][T23800] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2193.299319][T23800] ? security_socket_sendmsg+0x7c/0xa0 [ 2193.304797][T23800] ? netlink_getsockopt+0x570/0x570 [ 2193.310021][T23800] ____sys_sendmsg+0x5b7/0x8f0 [ 2193.314820][T23800] ? __sys_sendmsg_sock+0x30/0x30 [ 2193.319872][T23800] ? import_iovec+0x6f/0xa0 [ 2193.324403][T23800] ___sys_sendmsg+0x236/0x2e0 [ 2193.329114][T23800] ? __sys_sendmsg+0x2a0/0x2a0 [ 2193.333908][T23800] ? ktime_get_real_ts64+0x440/0x440 [ 2193.339237][T23800] __se_sys_sendmsg+0x1af/0x290 [ 2193.344115][T23800] ? __x64_sys_sendmsg+0x80/0x80 [ 2193.349091][T23800] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2193.355024][T23800] do_syscall_64+0x4c/0xa0 [ 2193.359460][T23800] ? clear_bhb_loop+0x30/0x80 [ 2193.364161][T23800] ? clear_bhb_loop+0x30/0x80 [ 2193.368865][T23800] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2193.374785][T23800] RIP: 0033:0x7ff0efaf8e59 [ 2193.379224][T23800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2193.398851][T23800] RSP: 002b:00007ff0edd52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2193.407299][T23800] RAX: ffffffffffffffda RBX: 00007ff0efd71fa0 RCX: 00007ff0efaf8e59 [ 2193.415301][T23800] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2193.423291][T23800] RBP: 00007ff0efb8ed6f R08: 0000000000000000 R09: 0000000000000000 [ 2193.431277][T23800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2193.439266][T23800] R13: 00007ff0efd72038 R14: 00007ff0efd71fa0 R15: 00007ffe4fa23468 [ 2193.447278][T23800] [ 2193.485849][T23805] netlink: 'syz.4.38963': attribute type 10 has an invalid length. [ 2193.503411][T23805] device vxcan0 entered promiscuous mode [ 2193.509200][T23805] team0: Device vxcan0 is of different type [ 2193.535390][T23807] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.38964'. [ 2193.686258][T23811] mac80211_hwsim hwsim97 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2193.720431][T23813] netlink: 'syz.0.38966': attribute type 10 has an invalid length. [ 2193.728503][T23813] netlink: 'syz.0.38966': attribute type 16 has an invalid length. [ 2193.739995][T23813] netlink: 156 bytes leftover after parsing attributes in process `syz.0.38966'. [ 2193.854816][T23827] netlink: 'syz.0.38973': attribute type 3 has an invalid length. [ 2193.863575][T23827] netlink: 'syz.0.38973': attribute type 1 has an invalid length. [ 2193.879151][T23827] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.38973'. [ 2193.888959][T21158] wlan1: Trigger new scan to find an IBSS to join [ 2193.922127][T21158] wlan1: Creating new IBSS network, BSSID c6:00:2a:e3:03:39 [ 2193.941172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2194.051461][T23834] netlink: 156 bytes leftover after parsing attributes in process `syz.4.38985'. [ 2194.466425][T23849] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2194.476364][T23849] CPU: 1 PID: 23849 Comm: syz.4.38981 Not tainted syzkaller #0 [ 2194.483971][T23849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2194.494066][T23849] Call Trace: [ 2194.497388][T23849] [ 2194.500363][T23849] dump_stack_lvl+0x188/0x250 [ 2194.505092][T23849] ? show_regs_print_info+0x20/0x20 [ 2194.510325][T23849] ? load_image+0x400/0x400 [ 2194.514881][T23849] sysfs_warn_dup+0x8a/0xa0 [ 2194.519412][T23849] sysfs_do_create_link_sd+0xc0/0x110 [ 2194.524801][T23849] device_add+0x7f6/0x1000 [ 2194.529246][T23849] wiphy_register+0x1e81/0x2c30 [ 2194.534157][T23849] ? cfg80211_event_work+0x40/0x40 [ 2194.539326][T23849] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2194.545436][T23849] ieee80211_register_hw+0x2aa1/0x3af0 [ 2194.550976][T23849] ? ieee80211_tasklet_handler+0x20/0x20 [ 2194.556661][T23849] ? rcu_is_watching+0x11/0xa0 [ 2194.561461][T23849] ? memset+0x1e/0x40 [ 2194.565461][T23849] ? hrtimer_init+0x10c/0x220 [ 2194.570178][T23849] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2194.575953][T23849] hwsim_new_radio_nl+0xa6f/0xc40 [ 2194.581033][T23849] genl_rcv_msg+0xcea/0xf90 [ 2194.585591][T23849] ? genl_bind+0x380/0x380 [ 2194.590052][T23849] ? rcu_nmi_exit+0x6f/0xf0 [ 2194.594572][T23849] ? verify_lock_unused+0x140/0x140 [ 2194.599819][T23849] ? verify_lock_unused+0x140/0x140 [ 2194.605091][T23849] ? rcu_nmi_exit+0x6f/0xf0 [ 2194.609643][T23849] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2194.615672][T23849] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2194.622200][T23849] netlink_rcv_skb+0x1f5/0x440 [ 2194.627076][T23849] ? genl_bind+0x380/0x380 [ 2194.631546][T23849] ? netlink_ack+0xb50/0xb50 [ 2194.636175][T23849] ? __lock_acquire+0x7d10/0x7d10 [ 2194.641234][T23849] ? down_read+0x1aa/0x2e0 [ 2194.645702][T23849] genl_rcv+0x24/0x40 [ 2194.649723][T23849] netlink_unicast+0x774/0x920 [ 2194.654540][T23849] netlink_sendmsg+0x8ba/0xbe0 [ 2194.659362][T23849] ? netlink_getsockopt+0x570/0x570 [ 2194.664609][T23849] ? aa_sock_msg_perm+0x94/0x150 [ 2194.669592][T23849] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2194.674919][T23849] ? security_socket_sendmsg+0x7c/0xa0 [ 2194.680430][T23849] ? netlink_getsockopt+0x570/0x570 [ 2194.685676][T23849] ____sys_sendmsg+0x5b7/0x8f0 [ 2194.690513][T23849] ? __sys_sendmsg_sock+0x30/0x30 [ 2194.695601][T23849] ? import_iovec+0x6f/0xa0 [ 2194.700152][T23849] ___sys_sendmsg+0x236/0x2e0 [ 2194.704893][T23849] ? __sys_sendmsg+0x2a0/0x2a0 [ 2194.709724][T23849] ? ktime_get_real_ts64+0x440/0x440 [ 2194.715090][T23849] __se_sys_sendmsg+0x1af/0x290 [ 2194.720079][T23849] ? __x64_sys_sendmsg+0x80/0x80 [ 2194.725062][T23849] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2194.731110][T23849] ? lockdep_hardirqs_on+0x94/0x140 [ 2194.736363][T23849] do_syscall_64+0x4c/0xa0 [ 2194.740825][T23849] ? clear_bhb_loop+0x30/0x80 [ 2194.745546][T23849] ? clear_bhb_loop+0x30/0x80 [ 2194.750270][T23849] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2194.756205][T23849] RIP: 0033:0x7fb45c344e59 [ 2194.760661][T23849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2194.780302][T23849] RSP: 002b:00007fb45a59e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2194.788859][T23849] RAX: ffffffffffffffda RBX: 00007fb45c5bdfa0 RCX: 00007fb45c344e59 [ 2194.796882][T23849] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2194.804911][T23849] RBP: 00007fb45c3dad6f R08: 0000000000000000 R09: 0000000000000000 [ 2194.813011][T23849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2194.821031][T23849] R13: 00007fb45c5be038 R14: 00007fb45c5bdfa0 R15: 00007ffc71b17f78 [ 2194.829067][T23849] [ 2194.860296][T21158] wlan1: Trigger new scan to find an IBSS to join [ 2194.866987][T21158] wlan1: Trigger new scan to find an IBSS to join [ 2195.002966][T23855] mac80211_hwsim hwsim93 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2195.679312][T23881] __nla_validate_parse: 4 callbacks suppressed [ 2195.679415][T23881] netlink: 156 bytes leftover after parsing attributes in process `syz.4.39005'. [ 2195.879979][ T144] wlan1: Trigger new scan to find an IBSS to join [ 2195.951636][T23897] validate_nla: 3 callbacks suppressed [ 2195.951677][T23897] netlink: 'syz.3.39000': attribute type 21 has an invalid length. [ 2195.969504][T23896] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.38998'. [ 2195.983242][T23897] netlink: 132 bytes leftover after parsing attributes in process `syz.3.39000'. [ 2196.003488][T23892] mac80211_hwsim hwsim97 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2196.084989][T23896] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2196.093755][T23896] CPU: 1 PID: 23896 Comm: syz.1.38998 Not tainted syzkaller #0 [ 2196.101354][T23896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2196.111455][T23896] Call Trace: [ 2196.114772][T23896] [ 2196.117741][T23896] dump_stack_lvl+0x188/0x250 [ 2196.122471][T23896] ? show_regs_print_info+0x20/0x20 [ 2196.127723][T23896] ? load_image+0x400/0x400 [ 2196.132306][T23896] sysfs_warn_dup+0x8a/0xa0 [ 2196.136851][T23896] sysfs_do_create_link_sd+0xc0/0x110 [ 2196.142277][T23896] device_add+0x7f6/0x1000 [ 2196.146753][T23896] wiphy_register+0x1e81/0x2c30 [ 2196.151682][T23896] ? cfg80211_event_work+0x40/0x40 [ 2196.156844][T23896] ? minstrel_ht_alloc+0x808/0x980 [ 2196.162013][T23896] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2196.168140][T23896] ieee80211_register_hw+0x2aa1/0x3af0 [ 2196.173815][T23896] ? ieee80211_tasklet_handler+0x20/0x20 [ 2196.179514][T23896] ? hrtimer_init+0x9f/0x220 [ 2196.184158][T23896] ? __sanitizer_cov_trace_pc+0x37/0x60 [ 2196.189770][T23896] ? hrtimer_init+0x10c/0x220 [ 2196.194646][T23896] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2196.200478][T23896] hwsim_new_radio_nl+0xa6f/0xc40 [ 2196.205568][T23896] genl_rcv_msg+0xcea/0xf90 [ 2196.210132][T23896] ? genl_bind+0x380/0x380 [ 2196.214742][T23896] ? verify_lock_unused+0x140/0x140 [ 2196.220000][T23896] ? rcu_nmi_exit+0x6f/0xf0 [ 2196.224557][T23896] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2196.230591][T23896] ? lock_chain_count+0x20/0x20 [ 2196.235499][T23896] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2196.242079][T23896] netlink_rcv_skb+0x1f5/0x440 [ 2196.246891][T23896] ? genl_bind+0x380/0x380 [ 2196.251357][T23896] ? netlink_ack+0xb50/0xb50 [ 2196.256010][T23896] ? __lock_acquire+0x7d10/0x7d10 [ 2196.261089][T23896] ? down_read+0x1aa/0x2e0 [ 2196.265649][T23896] genl_rcv+0x24/0x40 [ 2196.269677][T23896] netlink_unicast+0x774/0x920 [ 2196.274506][T23896] netlink_sendmsg+0x8ba/0xbe0 [ 2196.279343][T23896] ? netlink_getsockopt+0x570/0x570 [ 2196.284593][T23896] ? aa_sock_msg_perm+0x94/0x150 [ 2196.289626][T23896] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2196.294960][T23896] ? security_socket_sendmsg+0x7c/0xa0 [ 2196.300486][T23896] ? netlink_getsockopt+0x570/0x570 [ 2196.305737][T23896] ____sys_sendmsg+0x5b7/0x8f0 [ 2196.310571][T23896] ? __sys_sendmsg_sock+0x30/0x30 [ 2196.315652][T23896] ? import_iovec+0x6f/0xa0 [ 2196.320216][T23896] ___sys_sendmsg+0x236/0x2e0 [ 2196.324946][T23896] ? __sys_sendmsg+0x2a0/0x2a0 [ 2196.329786][T23896] __se_sys_sendmsg+0x1af/0x290 [ 2196.334666][T23896] ? __x64_sys_sendmsg+0x80/0x80 [ 2196.339665][T23896] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2196.345597][T23896] do_syscall_64+0x4c/0xa0 [ 2196.350038][T23896] ? clear_bhb_loop+0x30/0x80 [ 2196.354766][T23896] ? clear_bhb_loop+0x30/0x80 [ 2196.359645][T23896] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2196.365571][T23896] RIP: 0033:0x7f7abc0a4e59 [ 2196.370008][T23896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2196.389640][T23896] RSP: 002b:00007f7aba2fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2196.398092][T23896] RAX: ffffffffffffffda RBX: 00007f7abc31dfa0 RCX: 00007f7abc0a4e59 [ 2196.406094][T23896] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2196.414095][T23896] RBP: 00007f7abc13ad6f R08: 0000000000000000 R09: 0000000000000000 [ 2196.422096][T23896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2196.430112][T23896] R13: 00007f7abc31e038 R14: 00007f7abc31dfa0 R15: 00007ffc4c3c01b8 [ 2196.438144][T23896] [ 2197.473198][T23916] delete_channel: no stack [ 2197.837505][T23937] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2198.923287][T21158] wlan1: Trigger new scan to find an IBSS to join [ 2198.923806][ T144] wlan1: Trigger new scan to find an IBSS to join [ 2198.933471][T21158] wlan1: Trigger new scan to find an IBSS to join [ 2199.186982][T21158] wlan1: Creating new IBSS network, BSSID ba:93:7e:63:03:4b [ 2199.192402][T23975] mac80211_hwsim hwsim97 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2199.271440][T23961] delete_channel: no stack [ 2199.334661][T23979] netlink: 'syz.4.39032': attribute type 3 has an invalid length. [ 2199.420033][T23979] netlink: 'syz.4.39032': attribute type 1 has an invalid length. [ 2199.454310][T23982] netlink: 156 bytes leftover after parsing attributes in process `syz.0.39041'. [ 2199.469822][T23979] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.39032'. [ 2199.555891][T23989] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.39034'. [ 2199.579123][T23989] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2199.587656][T23989] CPU: 1 PID: 23989 Comm: syz.2.39034 Not tainted syzkaller #0 [ 2199.595248][T23989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2199.605346][T23989] Call Trace: [ 2199.608665][T23989] [ 2199.611619][T23989] dump_stack_lvl+0x188/0x250 [ 2199.616345][T23989] ? show_regs_print_info+0x20/0x20 [ 2199.621577][T23989] ? load_image+0x400/0x400 [ 2199.626137][T23989] sysfs_warn_dup+0x8a/0xa0 [ 2199.630685][T23989] sysfs_do_create_link_sd+0xc0/0x110 [ 2199.636247][T23989] device_add+0x7f6/0x1000 [ 2199.640804][T23989] wiphy_register+0x1e81/0x2c30 [ 2199.645813][T23989] ? cfg80211_event_work+0x40/0x40 [ 2199.650975][T23989] ? ieee80211_register_hw+0x24a1/0x3af0 [ 2199.656664][T23989] ? ieee80211_register_hw+0x27cd/0x3af0 [ 2199.662346][T23989] ? kasan_check_range+0x13/0x290 [ 2199.667425][T23989] ieee80211_register_hw+0x2aa1/0x3af0 [ 2199.672955][T23989] ? ieee80211_tasklet_handler+0x20/0x20 [ 2199.678647][T23989] ? rcu_is_watching+0x11/0xa0 [ 2199.683459][T23989] ? memset+0x1e/0x40 [ 2199.687482][T23989] ? hrtimer_init+0x10c/0x220 [ 2199.692211][T23989] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2199.698003][T23989] hwsim_new_radio_nl+0xa6f/0xc40 [ 2199.703101][T23989] genl_rcv_msg+0xcea/0xf90 [ 2199.707663][T23989] ? genl_bind+0x380/0x380 [ 2199.712142][T23989] ? verify_lock_unused+0x140/0x140 [ 2199.717387][T23989] ? verify_lock_unused+0x140/0x140 [ 2199.722634][T23989] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2199.728832][T23989] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2199.735395][T23989] netlink_rcv_skb+0x1f5/0x440 [ 2199.740208][T23989] ? genl_bind+0x380/0x380 [ 2199.744670][T23989] ? netlink_ack+0xb50/0xb50 [ 2199.749299][T23989] ? __lock_acquire+0x7d10/0x7d10 [ 2199.754352][T23989] ? down_read+0x1aa/0x2e0 [ 2199.758792][T23989] genl_rcv+0x24/0x40 [ 2199.762797][T23989] netlink_unicast+0x774/0x920 [ 2199.767590][T23989] netlink_sendmsg+0x8ba/0xbe0 [ 2199.772380][T23989] ? netlink_getsockopt+0x570/0x570 [ 2199.777598][T23989] ? aa_sock_msg_perm+0x94/0x150 [ 2199.782562][T23989] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2199.787866][T23989] ? security_socket_sendmsg+0x7c/0xa0 [ 2199.793351][T23989] ? netlink_getsockopt+0x570/0x570 [ 2199.798569][T23989] ____sys_sendmsg+0x5b7/0x8f0 [ 2199.803364][T23989] ? __sys_sendmsg_sock+0x30/0x30 [ 2199.808419][T23989] ? import_iovec+0x6f/0xa0 [ 2199.812948][T23989] ___sys_sendmsg+0x236/0x2e0 [ 2199.817657][T23989] ? __sys_sendmsg+0x2a0/0x2a0 [ 2199.822481][T23989] __se_sys_sendmsg+0x1af/0x290 [ 2199.827385][T23989] ? __x64_sys_sendmsg+0x80/0x80 [ 2199.832363][T23989] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2199.838288][T23989] do_syscall_64+0x4c/0xa0 [ 2199.842726][T23989] ? clear_bhb_loop+0x30/0x80 [ 2199.847419][T23989] ? clear_bhb_loop+0x30/0x80 [ 2199.852112][T23989] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2199.858041][T23989] RIP: 0033:0x7ff0efaf8e59 [ 2199.862474][T23989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2199.882105][T23989] RSP: 002b:00007ff0edd52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2199.890548][T23989] RAX: ffffffffffffffda RBX: 00007ff0efd71fa0 RCX: 00007ff0efaf8e59 [ 2199.898542][T23989] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2199.906529][T23989] RBP: 00007ff0efb8ed6f R08: 0000000000000000 R09: 0000000000000000 [ 2199.914520][T23989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2199.922507][T23989] R13: 00007ff0efd72038 R14: 00007ff0efd71fa0 R15: 00007ffe4fa23468 [ 2199.930522][T23989] [ 2199.941663][ T6048] wlan1: Trigger new scan to find an IBSS to join [ 2200.305272][T24007] netlink: 'syz.2.39040': attribute type 1 has an invalid length. [ 2200.315218][T24007] netlink: 'syz.2.39040': attribute type 4 has an invalid length. [ 2200.324362][T24007] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.39040'. [ 2200.626013][T24018] netlink: 'syz.2.39047': attribute type 3 has an invalid length. [ 2200.638973][T24018] netlink: 'syz.2.39047': attribute type 1 has an invalid length. [ 2200.647490][T24018] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.39047'. [ 2200.753925][T24026] netlink: 156 bytes leftover after parsing attributes in process `syz.4.39051'. [ 2201.389442][T24015] delete_channel: no stack [ 2201.879848][ T6048] wlan1: Trigger new scan to find an IBSS to join [ 2201.886684][ T144] wlan1: Trigger new scan to find an IBSS to join [ 2201.886717][T21158] wlan1: Trigger new scan to find an IBSS to join [ 2201.942042][ T6048] wlan1: Creating new IBSS network, BSSID 7a:f4:ca:24:f2:a5 [ 2202.498537][T24063] netlink: 'syz.1.39062': attribute type 3 has an invalid length. [ 2202.519991][T24063] netlink: 'syz.1.39062': attribute type 1 has an invalid length. [ 2202.528031][T24063] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.39062'. [ 2202.916644][T24072] device syzkaller0 entered promiscuous mode [ 2203.302265][T24082] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.39071'. [ 2203.360365][T24082] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2203.387684][T24082] CPU: 0 PID: 24082 Comm: syz.4.39071 Not tainted syzkaller #0 [ 2203.395312][T24082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2203.405408][T24082] Call Trace: [ 2203.408727][T24082] [ 2203.411685][T24082] dump_stack_lvl+0x188/0x250 [ 2203.416410][T24082] ? show_regs_print_info+0x20/0x20 [ 2203.421745][T24082] ? load_image+0x400/0x400 [ 2203.426306][T24082] sysfs_warn_dup+0x8a/0xa0 [ 2203.430867][T24082] sysfs_do_create_link_sd+0xc0/0x110 [ 2203.436307][T24082] device_add+0x7f6/0x1000 [ 2203.441241][T24082] wiphy_register+0x1e81/0x2c30 [ 2203.446165][T24082] ? cfg80211_event_work+0x40/0x40 [ 2203.451320][T24082] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2203.457523][T24082] ? ieee80211_register_hw+0x29f1/0x3af0 [ 2203.463223][T24082] ieee80211_register_hw+0x2aa1/0x3af0 [ 2203.468757][T24082] ? ieee80211_tasklet_handler+0x20/0x20 [ 2203.474439][T24082] ? rcu_is_watching+0x11/0xa0 [ 2203.479254][T24082] ? memset+0x1e/0x40 [ 2203.483281][T24082] ? hrtimer_init+0x10c/0x220 [ 2203.488019][T24082] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2203.493811][T24082] hwsim_new_radio_nl+0xa6f/0xc40 [ 2203.498908][T24082] genl_rcv_msg+0xcea/0xf90 [ 2203.503475][T24082] ? genl_bind+0x380/0x380 [ 2203.507946][T24082] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2203.513978][T24082] ? verify_lock_unused+0x140/0x140 [ 2203.519231][T24082] ? lock_chain_count+0x20/0x20 [ 2203.524143][T24082] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2203.530346][T24082] ? lockdep_hardirqs_on+0x94/0x140 [ 2203.535599][T24082] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2203.541797][T24082] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2203.548367][T24082] netlink_rcv_skb+0x1f5/0x440 [ 2203.553182][T24082] ? genl_bind+0x380/0x380 [ 2203.557660][T24082] ? netlink_ack+0xb50/0xb50 [ 2203.562295][T24082] ? __lock_acquire+0x7d10/0x7d10 [ 2203.567376][T24082] ? down_read+0x1aa/0x2e0 [ 2203.571841][T24082] genl_rcv+0x24/0x40 [ 2203.575861][T24082] netlink_unicast+0x774/0x920 [ 2203.580679][T24082] netlink_sendmsg+0x8ba/0xbe0 [ 2203.585500][T24082] ? netlink_getsockopt+0x570/0x570 [ 2203.590751][T24082] ? aa_sock_msg_perm+0x94/0x150 [ 2203.595757][T24082] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2203.601090][T24082] ? security_socket_sendmsg+0x7c/0xa0 [ 2203.606617][T24082] ? netlink_getsockopt+0x570/0x570 [ 2203.611863][T24082] ____sys_sendmsg+0x5b7/0x8f0 [ 2203.616691][T24082] ? __sys_sendmsg_sock+0x30/0x30 [ 2203.621774][T24082] ? import_iovec+0x6f/0xa0 [ 2203.626323][T24082] ___sys_sendmsg+0x236/0x2e0 [ 2203.631053][T24082] ? __sys_sendmsg+0x2a0/0x2a0 [ 2203.635879][T24082] ? lock_chain_count+0x20/0x20 [ 2203.640805][T24082] __se_sys_sendmsg+0x1af/0x290 [ 2203.645708][T24082] ? __x64_sys_sendmsg+0x80/0x80 [ 2203.650711][T24082] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2203.656662][T24082] do_syscall_64+0x4c/0xa0 [ 2203.661120][T24082] ? clear_bhb_loop+0x30/0x80 [ 2203.665842][T24082] ? clear_bhb_loop+0x30/0x80 [ 2203.670586][T24082] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2203.676536][T24082] RIP: 0033:0x7fb45c344e59 [ 2203.680998][T24082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2203.700646][T24082] RSP: 002b:00007fb45a59e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2203.709114][T24082] RAX: ffffffffffffffda RBX: 00007fb45c5bdfa0 RCX: 00007fb45c344e59 [ 2203.717128][T24082] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2203.725144][T24082] RBP: 00007fb45c3dad6f R08: 0000000000000000 R09: 0000000000000000 [ 2203.733162][T24082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2203.741173][T24082] R13: 00007fb45c5be038 R14: 00007fb45c5bdfa0 R15: 00007ffc71b17f78 [ 2203.749212][T24082] [ 2203.877814][T24077] delete_channel: no stack [ 2203.882349][ T6048] wlan1: Creating new IBSS network, BSSID ea:a2:5d:c3:15:81 [ 2203.882542][ T6048] wlan1: Trigger new scan to find an IBSS to join [ 2205.382480][T24111] netlink: 'syz.4.39085': attribute type 10 has an invalid length. [ 2205.405129][T24111] device team0 left promiscuous mode [ 2205.416339][T24111] device team_slave_1 left promiscuous mode [ 2205.423769][T24111] device bridge0 left promiscuous mode [ 2205.430790][T24111] device wlan1 left promiscuous mode [ 2205.438000][T24111] device geneve1 left promiscuous mode [ 2205.455723][T24111] team0: Cannot enslave team device to itself [ 2205.881811][ T6048] wlan1: Creating new IBSS network, BSSID da:ed:7d:aa:79:f5 [ 2205.889388][ T6048] wlan1: Trigger new scan to find an IBSS to join [ 2205.891479][T21158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2206.156974][T24135] netlink: 156 bytes leftover after parsing attributes in process `syz.0.39093'. [ 2206.850912][T24149] netlink: 'syz.0.39099': attribute type 10 has an invalid length. [ 2207.007957][T24157] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.39103'. [ 2207.028595][T24157] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2207.048767][T24157] CPU: 1 PID: 24157 Comm: syz.0.39103 Not tainted syzkaller #0 [ 2207.056394][T24157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2207.066490][T24157] Call Trace: [ 2207.069806][T24157] [ 2207.072773][T24157] dump_stack_lvl+0x188/0x250 [ 2207.077505][T24157] ? show_regs_print_info+0x20/0x20 [ 2207.082841][T24157] ? load_image+0x400/0x400 [ 2207.087409][T24157] sysfs_warn_dup+0x8a/0xa0 [ 2207.091955][T24157] sysfs_do_create_link_sd+0xc0/0x110 [ 2207.097376][T24157] device_add+0x7f6/0x1000 [ 2207.101853][T24157] wiphy_register+0x1e81/0x2c30 [ 2207.106772][T24157] ? cfg80211_event_work+0x40/0x40 [ 2207.111926][T24157] ? minstrel_ht_alloc+0x808/0x980 [ 2207.117090][T24157] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2207.123215][T24157] ieee80211_register_hw+0x2aa1/0x3af0 [ 2207.128748][T24157] ? ieee80211_tasklet_handler+0x20/0x20 [ 2207.134439][T24157] ? rcu_is_watching+0x11/0xa0 [ 2207.139243][T24157] ? memset+0x1e/0x40 [ 2207.143269][T24157] ? hrtimer_init+0x10c/0x220 [ 2207.148001][T24157] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2207.153787][T24157] hwsim_new_radio_nl+0xa6f/0xc40 [ 2207.158880][T24157] genl_rcv_msg+0xcea/0xf90 [ 2207.163451][T24157] ? genl_bind+0x380/0x380 [ 2207.167923][T24157] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2207.173953][T24157] ? lock_chain_count+0x20/0x20 [ 2207.178862][T24157] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2207.185068][T24157] ? lockdep_hardirqs_on+0x94/0x140 [ 2207.190315][T24157] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2207.196527][T24157] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2207.203097][T24157] ? lock_acquire+0x208/0x400 [ 2207.207834][T24157] netlink_rcv_skb+0x1f5/0x440 [ 2207.212639][T24157] ? genl_bind+0x380/0x380 [ 2207.217102][T24157] ? netlink_ack+0xb50/0xb50 [ 2207.221738][T24157] ? __lock_acquire+0x7d10/0x7d10 [ 2207.227348][T24157] ? down_read+0x1aa/0x2e0 [ 2207.231817][T24157] genl_rcv+0x24/0x40 [ 2207.235836][T24157] netlink_unicast+0x774/0x920 [ 2207.240646][T24157] netlink_sendmsg+0x8ba/0xbe0 [ 2207.245453][T24157] ? netlink_getsockopt+0x570/0x570 [ 2207.250692][T24157] ? __might_fault+0x4c/0x110 [ 2207.255510][T24157] ? aa_sock_msg_perm+0x94/0x150 [ 2207.260492][T24157] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2207.265829][T24157] ? security_socket_sendmsg+0x7c/0xa0 [ 2207.271336][T24157] ? netlink_getsockopt+0x570/0x570 [ 2207.276580][T24157] ____sys_sendmsg+0x5b7/0x8f0 [ 2207.281402][T24157] ? __sys_sendmsg_sock+0x30/0x30 [ 2207.286480][T24157] ? import_iovec+0x6f/0xa0 [ 2207.291029][T24157] ___sys_sendmsg+0x236/0x2e0 [ 2207.295769][T24157] ? __sys_sendmsg+0x2a0/0x2a0 [ 2207.300589][T24157] ? ktime_get_real_ts64+0x440/0x440 [ 2207.305957][T24157] __se_sys_sendmsg+0x1af/0x290 [ 2207.310866][T24157] ? __x64_sys_sendmsg+0x80/0x80 [ 2207.315870][T24157] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2207.321819][T24157] do_syscall_64+0x4c/0xa0 [ 2207.326283][T24157] ? clear_bhb_loop+0x30/0x80 [ 2207.331004][T24157] ? clear_bhb_loop+0x30/0x80 [ 2207.335727][T24157] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2207.341668][T24157] RIP: 0033:0x7f346e88be59 [ 2207.346127][T24157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2207.365782][T24157] RSP: 002b:00007f346cae5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2207.374331][T24157] RAX: ffffffffffffffda RBX: 00007f346eb04fa0 RCX: 00007f346e88be59 [ 2207.382435][T24157] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2207.390451][T24157] RBP: 00007f346e921d6f R08: 0000000000000000 R09: 0000000000000000 [ 2207.398467][T24157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2207.406517][T24157] R13: 00007f346eb05038 R14: 00007f346eb04fa0 R15: 00007ffd31facfa8 [ 2207.414539][T24157] [ 2207.579264][T24166] netlink: 156 bytes leftover after parsing attributes in process `syz.1.39106'. [ 2207.881000][ T6048] wlan1: Creating new IBSS network, BSSID 62:d8:40:e4:20:3e [ 2209.268180][T24217] netlink: 156 bytes leftover after parsing attributes in process `syz.2.39121'. [ 2209.445059][T24225] netlink: 156 bytes leftover after parsing attributes in process `syz.3.39136'. [ 2209.673714][T24235] netlink: 132 bytes leftover after parsing attributes in process `syz.2.39129'. [ 2209.701244][T24232] netlink: 'syz.3.39130': attribute type 10 has an invalid length. [ 2209.830407][T24232] bond0: (slave team0): Releasing backup interface [ 2209.858524][T24232] team0: Cannot enslave team device to itself [ 2211.675641][T24297] netlink: 'syz.1.39150': attribute type 10 has an invalid length. [ 2212.079148][T24297] bond0: (slave team0): Releasing backup interface [ 2212.091476][T24297] team0: Cannot enslave team device to itself [ 2212.429878][T24315] netlink: 'syz.4.39161': attribute type 10 has an invalid length. [ 2212.480894][T24315] team0: Port device veth1_to_bond added [ 2212.503365][T24313] delete_channel: no stack [ 2213.774955][T24353] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.39175'. [ 2215.284263][T24389] netlink: 'syz.4.39191': attribute type 3 has an invalid length. [ 2215.306942][T24389] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.39191'. [ 2215.483031][T24395] device syzkaller0 entered promiscuous mode [ 2215.500091][T24395] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2215.508852][T24397] bridge0: port 2(dummy0) entered disabled state [ 2215.537212][T24397] device ÿÿÿÿÿÿ left promiscuous mode [ 2215.545645][T24397] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 2215.682476][T24397] team0: Port device bridge0 removed [ 2217.353890][T24442] device syzkaller0 entered promiscuous mode [ 2217.901927][T24453] netlink: 'syz.3.39217': attribute type 3 has an invalid length. [ 2217.936304][T24453] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.39217'. [ 2219.342444][T24482] netlink: 'syz.2.39228': attribute type 2 has an invalid length. [ 2219.420014][T24482] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.39228'. [ 2219.600270][T24490] netlink: 'syz.3.39230': attribute type 10 has an invalid length. [ 2219.701473][T24490] team0: Device wg1 is of different type [ 2219.844771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2219.870827][T24493] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2220.765996][T24492] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2221.645306][T24529] netlink: 'syz.2.39248': attribute type 10 has an invalid length. [ 2221.812764][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.819184][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.410294][T24527] delete_channel: no stack [ 2224.382978][T24544] netlink: 'syz.4.39265': attribute type 28 has an invalid length. [ 2224.502230][T24551] netlink: 'syz.2.39267': attribute type 28 has an invalid length. [ 2224.610018][T24553] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.39254'. [ 2225.840612][T24591] netlink: 'syz.1.39272': attribute type 2 has an invalid length. [ 2225.848510][T24591] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.39272'. [ 2225.908765][T24593] netlink: 'syz.3.39273': attribute type 28 has an invalid length. [ 2226.408197][T24608] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.39279'. [ 2227.413389][T24631] netlink: 'syz.0.39287': attribute type 2 has an invalid length. [ 2227.429271][T24631] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.39287'. [ 2227.683692][T24648] netlink: 'syz.2.39294': attribute type 26 has an invalid length. [ 2227.729737][T24648] netlink: 54695 bytes leftover after parsing attributes in process `syz.2.39294'. [ 2227.856964][T24651] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.39298'. [ 2228.879508][T24683] device syzkaller0 left promiscuous mode [ 2228.885798][T24683] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2228.992035][T24686] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.39320'. [ 2229.435232][T24695] netlink: 63763 bytes leftover after parsing attributes in process `syz.3.39312'. [ 2229.468990][T24688] netlink: 'syz.4.39309': attribute type 2 has an invalid length. [ 2229.478554][T24688] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.39309'. [ 2229.864309][T24704] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.39326'. [ 2230.265473][T24718] netlink: 'syz.1.39323': attribute type 4 has an invalid length. [ 2230.288931][T24718] netlink: 152 bytes leftover after parsing attributes in process `syz.1.39323'. [ 2230.386505][T24718] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2230.736015][T24728] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.39336'. [ 2231.173035][T24741] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.39327'. [ 2231.731574][T24747] netlink: 'syz.3.39330': attribute type 2 has an invalid length. [ 2231.742014][T24747] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.39330'. [ 2232.516975][T24776] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.39346'. [ 2234.311103][T24818] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.39363'. [ 2235.122828][T24827] netlink: 'syz.2.39366': attribute type 4 has an invalid length. [ 2235.132121][T24827] netlink: 152 bytes leftover after parsing attributes in process `syz.2.39366'. [ 2235.256379][T24827] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2236.954746][T24865] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.39381'. [ 2236.976719][T24872] netlink: 'syz.3.39382': attribute type 4 has an invalid length. [ 2237.074375][T24872] netlink: 152 bytes leftover after parsing attributes in process `syz.3.39382'. [ 2237.112090][T24872] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2238.435254][T24899] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 2238.583744][T24901] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 2238.749699][T24905] sock: sock_timestamping_bind_phc: sock not bind to device [ 2238.974399][T24912] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.39398'. [ 2239.051203][T24916] netlink: 'syz.0.39397': attribute type 4 has an invalid length. [ 2239.089896][T24916] netlink: 152 bytes leftover after parsing attributes in process `syz.0.39397'. [ 2239.140769][T24916] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2239.432338][T24929] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 2239.696670][T24943] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 2240.576582][T24955] netlink: 'syz.4.39416': attribute type 4 has an invalid length. [ 2240.620602][T24955] netlink: 152 bytes leftover after parsing attributes in process `syz.4.39416'. [ 2240.977802][T24955] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2241.907268][T25009] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.39437'. [ 2244.583899][T25078] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.39461'. [ 2245.413008][T25105] netlink: 'syz.2.39472': attribute type 4 has an invalid length. [ 2245.440003][T25105] netlink: 152 bytes leftover after parsing attributes in process `syz.2.39472'. [ 2245.470000][T25105] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2245.851823][T25133] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.39485'. [ 2246.631256][T25178] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.39501'. [ 2246.785163][T25185] netlink: 703 bytes leftover after parsing attributes in process `syz.1.39505'. [ 2247.732778][T25223] device syzkaller0 entered promiscuous mode [ 2248.145177][T25237] bridge0: port 2(dummy0) entered disabled state [ 2248.151773][T25237] bridge0: port 1(bridge_slave_0) entered disabled state [ 2248.252530][T25234] netlink: 703 bytes leftover after parsing attributes in process `syz.0.39537'. [ 2251.447426][T25266] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.39540'. [ 2251.501127][T25266] netlink: 'syz.3.39540': attribute type 16 has an invalid length. [ 2251.540832][T25266] netlink: 'syz.3.39540': attribute type 21 has an invalid length. [ 2251.548895][T25266] netlink: 'syz.3.39540': attribute type 25 has an invalid length. [ 2251.589166][T25266] netlink: 'syz.3.39540': attribute type 27 has an invalid length. [ 2251.610438][T25266] netlink: 'syz.3.39540': attribute type 28 has an invalid length. [ 2251.630060][T25266] netlink: 'syz.3.39540': attribute type 29 has an invalid length. [ 2251.639377][T25266] netlink: 'syz.3.39540': attribute type 30 has an invalid length. [ 2251.674702][T25277] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.39543'. [ 2251.689802][T25277] netlink: 20624 bytes leftover after parsing attributes in process `syz.0.39543'. [ 2251.712740][T25274] delete_channel: no stack [ 2251.833934][T25281] netlink: 703 bytes leftover after parsing attributes in process `syz.2.39545'. [ 2252.021491][T25293] netlink: 132 bytes leftover after parsing attributes in process `syz.2.39549'. [ 2252.323869][T25307] netlink: 44 bytes leftover after parsing attributes in process `syz.4.39564'. [ 2252.651572][T25324] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.39556'. [ 2252.999642][T25333] netlink: 703 bytes leftover after parsing attributes in process `syz.4.39561'. [ 2253.700805][T25361] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.39574'. [ 2256.714886][T25373] device syzkaller0 entered promiscuous mode [ 2256.994172][T25383] netlink: 703 bytes leftover after parsing attributes in process `syz.3.39580'. [ 2257.661711][T25414] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.39593'. [ 2258.214191][T25424] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.39606'. [ 2258.220126][T25422] netlink: 703 bytes leftover after parsing attributes in process `syz.3.39599'. [ 2258.593005][T25434] netlink: 703 bytes leftover after parsing attributes in process `syz.0.39612'. [ 2260.284412][T25504] netlink: 132 bytes leftover after parsing attributes in process `syz.0.39642'. [ 2261.121379][T25543] netlink: 'syz.0.39647': attribute type 10 has an invalid length. [ 2261.143322][T25543] netlink: 40 bytes leftover after parsing attributes in process `syz.0.39647'. [ 2263.827213][T25549] netlink: 763 bytes leftover after parsing attributes in process `syz.2.39649'. [ 2264.443760][T25572] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.39659'. [ 2264.463217][T25572] netlink: 'syz.0.39659': attribute type 16 has an invalid length. [ 2264.472135][T25572] netlink: 'syz.0.39659': attribute type 21 has an invalid length. [ 2264.481125][T25572] netlink: 'syz.0.39659': attribute type 25 has an invalid length. [ 2264.490127][T25572] netlink: 'syz.0.39659': attribute type 27 has an invalid length. [ 2264.498513][T25572] netlink: 'syz.0.39659': attribute type 28 has an invalid length. [ 2264.510357][T25572] netlink: 'syz.0.39659': attribute type 29 has an invalid length. [ 2264.518893][T25572] netlink: 'syz.0.39659': attribute type 30 has an invalid length. [ 2267.571374][T25583] netlink: 44 bytes leftover after parsing attributes in process `syz.3.39662'. [ 2267.585276][T25581] device ipvlan1 entered promiscuous mode [ 2267.681919][T25585] device syzkaller0 entered promiscuous mode [ 2268.138708][T25620] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.39677'. [ 2268.168398][T25620] netlink: 'syz.4.39677': attribute type 16 has an invalid length. [ 2268.196413][T25625] netlink: 44 bytes leftover after parsing attributes in process `syz.1.39679'. [ 2268.207156][T25620] netlink: 'syz.4.39677': attribute type 21 has an invalid length. [ 2268.232646][T25620] netlink: 'syz.4.39677': attribute type 25 has an invalid length. [ 2268.252779][T25620] netlink: 'syz.4.39677': attribute type 27 has an invalid length. [ 2268.273636][T25620] netlink: 'syz.4.39677': attribute type 28 has an invalid length. [ 2268.295633][T25620] netlink: 'syz.4.39677': attribute type 29 has an invalid length. [ 2268.324419][T25620] netlink: 'syz.4.39677': attribute type 30 has an invalid length. [ 2269.153429][T25668] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.39697'. [ 2269.179515][T25672] netlink: 44 bytes leftover after parsing attributes in process `syz.0.39696'. [ 2269.203282][T25673] netlink: 'syz.1.39697': attribute type 16 has an invalid length. [ 2269.238014][T25673] netlink: 'syz.1.39697': attribute type 21 has an invalid length. [ 2269.260230][T25673] netlink: 'syz.1.39697': attribute type 25 has an invalid length. [ 2270.535603][T25719] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.39715'. [ 2270.850103][T25737] netlink: 11834 bytes leftover after parsing attributes in process `syz.1.39735'. [ 2271.160251][T25745] À: port 1(vlan0) entered blocking state [ 2271.167366][T25745] À: port 1(vlan0) entered disabled state [ 2271.184396][T25745] device vlan0 entered promiscuous mode [ 2271.491357][T25761] netlink: 14 bytes leftover after parsing attributes in process `syz.4.39733'. [ 2271.674110][T25767] netlink: 763 bytes leftover after parsing attributes in process `syz.3.39736'. [ 2272.232209][T25795] À: port 1(vlan0) entered blocking state [ 2272.238687][T25795] À: port 1(vlan0) entered disabled state [ 2272.246146][T25795] device vlan0 entered promiscuous mode [ 2272.374243][T25799] netlink: 40 bytes leftover after parsing attributes in process `syz.4.39749'. [ 2272.418265][T25799] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2272.454144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2272.927541][T25833] À: port 1(vlan0) entered blocking state [ 2272.947088][T25833] À: port 1(vlan0) entered disabled state [ 2272.965365][T25833] device vlan0 entered promiscuous mode [ 2273.172927][T25846] netlink: 763 bytes leftover after parsing attributes in process `syz.4.39766'. [ 2273.667114][T25861] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.39772'. [ 2273.703383][T25861] validate_nla: 20 callbacks suppressed [ 2273.703418][T25861] netlink: 'syz.2.39772': attribute type 16 has an invalid length. [ 2273.739763][T25861] netlink: 'syz.2.39772': attribute type 21 has an invalid length. [ 2273.747850][T25861] netlink: 'syz.2.39772': attribute type 25 has an invalid length. [ 2273.794350][T25861] netlink: 'syz.2.39772': attribute type 27 has an invalid length. [ 2273.819835][T25861] netlink: 'syz.2.39772': attribute type 28 has an invalid length. [ 2273.828459][T25861] netlink: 'syz.2.39772': attribute type 29 has an invalid length. [ 2273.840847][T25861] netlink: 'syz.2.39772': attribute type 30 has an invalid length. [ 2273.991410][T25870] netlink: 'syz.0.39776': attribute type 15 has an invalid length. [ 2274.087918][T25876] netlink: 132 bytes leftover after parsing attributes in process `syz.3.39780'. [ 2274.133841][T25878] À: port 1(vlan0) entered blocking state [ 2274.140299][T25878] À: port 1(vlan0) entered disabled state [ 2274.154625][T25878] device vlan0 entered promiscuous mode [ 2274.295733][T25884] netlink: 14 bytes leftover after parsing attributes in process `syz.2.39783'. [ 2274.430421][T25886] netlink: 'syz.3.39784': attribute type 10 has an invalid length. [ 2274.765009][T25895] netlink: 763 bytes leftover after parsing attributes in process `syz.0.39789'. [ 2275.431331][T25916] netlink: 132 bytes leftover after parsing attributes in process `syz.4.39796'. [ 2275.485651][T25918] netlink: 'syz.3.39795': attribute type 10 has an invalid length. [ 2275.599808][T25918] netlink: 40 bytes leftover after parsing attributes in process `syz.3.39795'. [ 2275.631548][T25918] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2275.663625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2275.775179][T25924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.39810'. [ 2275.894428][T25928] netlink: 14 bytes leftover after parsing attributes in process `syz.3.39799'. [ 2276.539050][T25950] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.39812'. [ 2276.574171][T25950] netlink: 16770 bytes leftover after parsing attributes in process `syz.2.39812'. [ 2276.681156][T25958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.39814'. [ 2276.707703][T25958] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2276.776581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2276.794406][T25962] netlink: 132 bytes leftover after parsing attributes in process `syz.2.39815'. [ 2277.187856][T25981] ¥: port 1(erspan0) entered blocking state [ 2277.213546][T25981] ¥: port 1(erspan0) entered disabled state [ 2277.251005][T25981] device erspan0 entered promiscuous mode [ 2278.333885][T26009] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2278.450248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2279.699263][T26045] __nla_validate_parse: 2 callbacks suppressed [ 2279.699395][T26045] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.39843'. [ 2279.794012][T26045] validate_nla: 6 callbacks suppressed [ 2279.794048][T26045] netlink: 'syz.1.39843': attribute type 3 has an invalid length. [ 2279.812891][T26045] netlink: 16770 bytes leftover after parsing attributes in process `syz.1.39843'. [ 2279.823650][T26045] netlink: 'syz.1.39843': attribute type 1 has an invalid length. [ 2280.006420][T26055] netlink: 'syz.0.39847': attribute type 10 has an invalid length. [ 2280.019727][T26055] netlink: 40 bytes leftover after parsing attributes in process `syz.0.39847'. [ 2280.031434][T26055] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2280.081253][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2280.834056][T26083] netlink: 'syz.4.39859': attribute type 2 has an invalid length. [ 2280.904221][T26083] netlink: 'syz.4.39859': attribute type 8 has an invalid length. [ 2280.937598][T26083] netlink: 132 bytes leftover after parsing attributes in process `syz.4.39859'. [ 2282.077550][T26122] netlink: 'syz.0.39874': attribute type 10 has an invalid length. [ 2283.256574][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.262998][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.198151][T26156] netlink: 'syz.2.39883': attribute type 10 has an invalid length. [ 2284.216590][T26156] netlink: 40 bytes leftover after parsing attributes in process `syz.2.39883'. [ 2284.252428][T26156] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2284.747820][T26179] netlink: 'syz.4.39895': attribute type 10 has an invalid length. [ 2288.451762][T26262] netlink: 14 bytes leftover after parsing attributes in process `syz.0.39934'. [ 2288.609354][T26265] netlink: 'syz.0.39934': attribute type 10 has an invalid length. [ 2288.618723][T26265] netlink: 40 bytes leftover after parsing attributes in process `syz.0.39934'. [ 2288.722055][T26271] netlink: 14 bytes leftover after parsing attributes in process `syz.3.39940'. [ 2288.858285][T26277] netlink: 'syz.3.39940': attribute type 10 has an invalid length. [ 2288.877719][T26277] netlink: 40 bytes leftover after parsing attributes in process `syz.3.39940'. [ 2288.921735][T26277] device team0 entered promiscuous mode [ 2288.927728][T26277] device team_slave_1 entered promiscuous mode [ 2288.960003][T26277] device virt_wifi0 entered promiscuous mode [ 2288.966546][T26277] device macvlan0 entered promiscuous mode [ 2288.990902][T26277] device geneve1 entered promiscuous mode [ 2289.031360][T26277] 8021q: adding VLAN 0 to HW filter on device team0 [ 2289.076808][T26277] bridge0: port 3(team0) entered blocking state [ 2289.091606][T26277] bridge0: port 3(team0) entered disabled state [ 2289.164428][T26277] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2289.575546][T26302] netlink: 'syz.1.39937': attribute type 10 has an invalid length. [ 2291.104870][T26338] IPv6: Can't replace route, no match found [ 2291.470053][T26344] device vlan0 left promiscuous mode [ 2291.475720][T26344] À: port 1(vlan0) entered disabled state [ 2291.724071][T26344] team0: Port device macvlan0 removed [ 2292.022230][T26355] netlink: 'syz.2.39960': attribute type 10 has an invalid length. [ 2293.819074][T26390] IPv6: Can't replace route, no match found [ 2293.953448][T26394] netlink: 'syz.3.39980': attribute type 10 has an invalid length. [ 2293.979333][T26396] IPv6: Can't replace route, no match found [ 2295.335191][T26440] netlink: 'syz.4.39995': attribute type 1 has an invalid length. [ 2295.357145][T26440] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.39995'. [ 2297.865502][T26528] netlink: 14 bytes leftover after parsing attributes in process `syz.1.40045'. [ 2297.952975][T26533] netlink: 'syz.1.40045': attribute type 10 has an invalid length. [ 2297.970092][T26533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.40045'. [ 2297.991333][T26533] device team0 entered promiscuous mode [ 2297.998201][T26533] device team_slave_1 entered promiscuous mode [ 2298.007294][T26533] device virt_wifi0 entered promiscuous mode [ 2298.015752][T26533] device wlan1 entered promiscuous mode [ 2298.023777][T26533] device geneve1 entered promiscuous mode [ 2298.060408][T26533] 8021q: adding VLAN 0 to HW filter on device team0 [ 2298.092240][T26533] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2298.399350][T26543] device syzkaller0 entered promiscuous mode [ 2298.516360][T26554] IPv6: Can't replace route, no match found [ 2298.819079][T26562] device vlan0 left promiscuous mode [ 2298.825180][T26562] À: port 1(vlan0) entered disabled state [ 2299.590836][T26570] netlink: 14 bytes leftover after parsing attributes in process `syz.2.40054'. [ 2299.697640][T26580] netlink: 'syz.2.40054': attribute type 10 has an invalid length. [ 2299.713876][T26580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.40054'. [ 2299.724368][T26579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2299.946706][T26586] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.40069'. [ 2300.041182][T26586] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.40069'. [ 2300.084527][T26591] IPv6: Can't replace route, no match found [ 2300.091482][T26589] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.40069'. [ 2300.105724][T26592] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.40069'. [ 2301.002352][T26606] device vlan0 left promiscuous mode [ 2301.030002][T26606] À: port 1(vlan0) entered disabled state [ 2301.350395][T26619] IPv6: Can't replace route, no match found [ 2301.622128][T26628] IPv6: Can't replace route, no match found [ 2301.776155][T26636] netlink: 'syz.0.40079': attribute type 28 has an invalid length. [ 2302.214692][T26645] netlink: 'syz.2.40082': attribute type 10 has an invalid length. [ 2303.102905][T26661] À: port 1(vlan0) entered disabled state [ 2303.313418][T26661] device vlan0 left promiscuous mode [ 2303.325559][T26661] À: port 1(vlan0) entered disabled state [ 2303.469485][T26661] device macvlan0 left promiscuous mode [ 2303.482155][T26661] team0: Port device macvlan0 removed [ 2303.519745][T26665] netlink: 'syz.4.40091': attribute type 10 has an invalid length. [ 2303.535860][T26668] IPv6: Can't replace route, no match found [ 2307.228018][T26796] netlink: 'syz.4.40149': attribute type 10 has an invalid length. [ 2307.301164][T26807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2307.319829][T26796] team0: Device wg1 is of different type [ 2307.668367][T26813] netlink: 'syz.3.40158': attribute type 10 has an invalid length. [ 2307.861549][T26813] team0: Device veth1_macvtap failed to register rx_handler [ 2308.057456][T26820] netlink: 'syz.2.40159': attribute type 9 has an invalid length. [ 2308.088755][T26820] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.40159'. [ 2308.375369][T26829] IPv6: Can't replace route, no match found [ 2308.540414][T26825] netlink: 'syz.3.40172': attribute type 10 has an invalid length. [ 2308.567775][T26825] device wg1 entered promiscuous mode [ 2308.630014][T26825] team0: Device wg1 is of different type [ 2308.786683][T26839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2308.908669][T26843] IPv6: Can't replace route, no match found [ 2309.271270][T26849] netlink: 'syz.4.40173': attribute type 41 has an invalid length. [ 2309.723378][T26859] netlink: 'syz.3.40177': attribute type 10 has an invalid length. [ 2311.055877][T26874] netlink: 'syz.1.40192': attribute type 28 has an invalid length. [ 2311.305705][T26885] netlink: 'syz.0.40185': attribute type 10 has an invalid length. [ 2312.115366][T26887] netlink: 'syz.3.40189': attribute type 41 has an invalid length. [ 2312.256643][T26891] netlink: 'syz.4.40191': attribute type 9 has an invalid length. [ 2312.279193][T26891] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.40191'. [ 2312.437228][T26900] netlink: 'syz.4.40195': attribute type 39 has an invalid length. [ 2312.848378][T26906] netlink: 132 bytes leftover after parsing attributes in process `syz.4.40197'. [ 2314.249498][T26925] netlink: 'syz.1.40204': attribute type 41 has an invalid length. [ 2314.437223][T26933] netlink: 'syz.1.40207': attribute type 39 has an invalid length. [ 2314.562659][T26932] netlink: 'syz.3.40206': attribute type 9 has an invalid length. [ 2314.572329][T26932] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.40206'. [ 2314.686593][T26938] netlink: 'syz.2.40210': attribute type 28 has an invalid length. [ 2315.044440][T26943] device syzkaller0 entered promiscuous mode [ 2315.515794][T26967] netlink: 'syz.0.40224': attribute type 9 has an invalid length. [ 2315.568831][T26967] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.40224'. [ 2315.912747][T26971] netlink: 'syz.0.40226': attribute type 39 has an invalid length. [ 2316.504573][T26980] device ip6gretap0 left promiscuous mode [ 2316.518495][T26980] Ÿë: port 1(ip6gretap0) entered disabled state [ 2316.904750][T26993] device syzkaller0 entered promiscuous mode [ 2317.227197][T27006] netlink: 'syz.1.40236': attribute type 9 has an invalid length. [ 2317.245739][T27006] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.40236'. [ 2317.724391][T27012] netlink: 'syz.2.40239': attribute type 39 has an invalid length. [ 2317.780642][T27014] netlink: 152 bytes leftover after parsing attributes in process `syz.4.40241'. [ 2318.208644][T27025] device syzkaller0 entered promiscuous mode [ 2318.582945][T27042] netlink: 'syz.3.40256': attribute type 39 has an invalid length. [ 2318.764017][T27044] netlink: 'syz.1.40250': attribute type 10 has an invalid length. [ 2318.824158][T27044] device wg1 entered promiscuous mode [ 2318.850085][T27044] team0: Device wg1 is of different type [ 2319.112380][T27050] netlink: 60 bytes leftover after parsing attributes in process `syz.3.40259'. [ 2319.620327][T27057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2319.813567][T27064] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.40263'. [ 2319.868126][T27065] delete_channel: no stack [ 2319.874723][T27065] delete_channel: no stack [ 2320.837970][T27086] netlink: 'syz.2.40273': attribute type 39 has an invalid length. [ 2320.938139][T27090] device syzkaller0 entered promiscuous mode [ 2320.945957][T27090] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2320.981743][T27094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2321.872893][T27121] netlink: 'syz.4.40287': attribute type 39 has an invalid length. [ 2321.950176][T27125] netlink: 'syz.0.40298': attribute type 10 has an invalid length. [ 2322.137012][T27133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2322.295379][T27134] device syzkaller0 entered promiscuous mode [ 2323.006861][T27150] netlink: 'syz.4.40309': attribute type 10 has an invalid length. [ 2323.085649][T27150] team0: Device veth1_macvtap failed to register rx_handler [ 2323.749878][T27172] netlink: 'syz.2.40304': attribute type 10 has an invalid length. [ 2323.845129][T27176] netlink: 'syz.4.40305': attribute type 39 has an invalid length. [ 2323.890047][T27178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2324.024861][T27186] netlink: 'syz.1.40314': attribute type 10 has an invalid length. [ 2324.386387][T27186] team0: Device veth1_macvtap failed to register rx_handler [ 2324.842064][T27210] netlink: 'syz.0.40318': attribute type 10 has an invalid length. [ 2325.323813][T27212] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.40320'. [ 2325.351689][T27212] device bridge_slave_1 entered promiscuous mode [ 2325.529401][T27221] netlink: 'syz.2.40323': attribute type 39 has an invalid length. [ 2325.616053][T27228] delete_channel: no stack [ 2325.620772][T27225] netlink: 'syz.3.40324': attribute type 39 has an invalid length. [ 2325.660385][T27228] delete_channel: no stack [ 2325.677768][T27227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2325.926713][T27236] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.40328'. [ 2327.360870][T27278] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.40344'. [ 2327.361963][T27274] netlink: 152 bytes leftover after parsing attributes in process `syz.2.40345'. [ 2327.655570][T27299] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.40363'. [ 2328.202461][T27313] device syzkaller0 entered promiscuous mode [ 2329.069179][T27334] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.40369'. [ 2329.126254][T27332] device syzkaller0 entered promiscuous mode [ 2329.330279][T27341] netlink: 'syz.2.40382': attribute type 10 has an invalid length. [ 2331.536236][T27403] sctp: [Deprecated]: syz.1.40396 (pid 27403) Use of int in maxseg socket option. [ 2331.536236][T27403] Use struct sctp_assoc_value instead [ 2331.620436][T27403] netlink: 'syz.1.40396': attribute type 49 has an invalid length. [ 2331.760095][T27409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2332.595308][T27426] device syzkaller0 entered promiscuous mode [ 2333.582958][T27469] netlink: 'syz.0.40420': attribute type 39 has an invalid length. [ 2334.096829][T27485] netlink: 'syz.4.40425': attribute type 3 has an invalid length. [ 2334.140146][T27485] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.40425'. [ 2334.768888][T27504] sctp: [Deprecated]: syz.2.40432 (pid 27504) Use of int in maxseg socket option. [ 2334.768888][T27504] Use struct sctp_assoc_value instead [ 2334.857197][T27508] netlink: 'syz.2.40432': attribute type 49 has an invalid length. [ 2335.897666][T27538] netlink: 'syz.4.40447': attribute type 10 has an invalid length. [ 2336.175019][T27538] team0 (unregistering): Port device team_slave_1 removed [ 2336.206274][T27538] team0 (unregistering): Port device bridge0 removed [ 2336.277377][T27538] team0 (unregistering): Port device wlan1 removed [ 2336.310123][T27538] team0 (unregistering): Port device geneve1 removed [ 2336.338529][T27538] team0 (unregistering): Port device veth1_to_bond removed [ 2336.495376][T27549] device syzkaller0 entered promiscuous mode [ 2336.582206][T27554] netlink: 'syz.1.40462': attribute type 39 has an invalid length. [ 2336.591312][T27556] sctp: [Deprecated]: syz.4.40450 (pid 27556) Use of int in maxseg socket option. [ 2336.591312][T27556] Use struct sctp_assoc_value instead [ 2336.669742][T27556] netlink: 'syz.4.40450': attribute type 49 has an invalid length. [ 2336.934405][T27567] netlink: 'syz.0.40454': attribute type 3 has an invalid length. [ 2336.942878][T27567] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.40454'. [ 2337.093916][T27573] sctp: [Deprecated]: syz.4.40457 (pid 27573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2337.093916][T27573] Use struct sctp_sack_info instead [ 2337.694310][T27590] device syzkaller0 entered promiscuous mode [ 2338.082618][T27610] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.40474'. [ 2338.103309][T27608] netlink: 'syz.2.40475': attribute type 15 has an invalid length. [ 2338.140806][T27608] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.40475'. [ 2338.205153][T27613] netlink: 'syz.2.40475': attribute type 4 has an invalid length. [ 2338.245771][T27613] netlink: 'syz.2.40475': attribute type 5 has an invalid length. [ 2338.282537][T27613] netlink: 'syz.2.40475': attribute type 6 has an invalid length. [ 2338.299872][T27613] netlink: 'syz.2.40475': attribute type 7 has an invalid length. [ 2338.325525][T27613] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.40475'. [ 2339.835007][T27653] device syzkaller0 entered promiscuous mode [ 2340.582638][T27664] validate_nla: 9 callbacks suppressed [ 2340.582679][T27664] netlink: 'syz.0.40496': attribute type 15 has an invalid length. [ 2340.608404][T27664] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.40496'. [ 2340.637001][T27667] netlink: 'syz.0.40496': attribute type 4 has an invalid length. [ 2340.659691][T27667] netlink: 'syz.0.40496': attribute type 5 has an invalid length. [ 2340.667832][T27667] netlink: 'syz.0.40496': attribute type 6 has an invalid length. [ 2340.676334][T27667] netlink: 'syz.0.40496': attribute type 7 has an invalid length. [ 2340.684912][T27667] netlink: 'syz.0.40496': attribute type 11 has an invalid length. [ 2340.696459][T27667] netlink: 'syz.0.40496': attribute type 15 has an invalid length. [ 2340.705051][T27667] netlink: 'syz.0.40496': attribute type 16 has an invalid length. [ 2340.713529][T27667] netlink: 'syz.0.40496': attribute type 21 has an invalid length. [ 2340.721965][T27667] netlink: 'syz.0.40496': attribute type 25 has an invalid length. [ 2340.730387][T27667] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.40496'. [ 2341.496435][T27695] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.40506'. [ 2341.848820][T27706] netlink: 132 bytes leftover after parsing attributes in process `syz.1.40510'. [ 2342.236244][T27718] device syzkaller0 entered promiscuous mode [ 2342.260597][T27716] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.40512'. [ 2342.286683][T27719] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.40512'. [ 2342.524311][T27727] device syzkaller0 entered promiscuous mode [ 2342.641503][T27738] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.40519'. [ 2344.124142][T27770] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2344.683252][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.689706][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.731799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2345.758331][T27817] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2345.829322][T27815] validate_nla: 22 callbacks suppressed [ 2345.829406][T27815] netlink: 'syz.1.40548': attribute type 10 has an invalid length. [ 2346.315869][T27815] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2346.346203][T27816] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2346.605272][T27824] netlink: 'syz.4.40552': attribute type 2 has an invalid length. [ 2346.640089][T27824] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.40552'. [ 2347.537343][T27848] device syzkaller0 entered promiscuous mode [ 2347.865875][T27853] netlink: 'syz.2.40563': attribute type 4 has an invalid length. [ 2347.909786][T27853] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.40563'. [ 2348.045696][T27858] netlink: 'syz.0.40576': attribute type 4 has an invalid length. [ 2348.069764][T27858] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.40576'. [ 2348.137696][T27863] netlink: 'syz.2.40564': attribute type 10 has an invalid length. [ 2348.395331][T27868] device syzkaller0 entered promiscuous mode [ 2348.438021][T19889] syzkaller0: tun_net_xmit 48 [ 2348.521338][T27868] syzkaller0: delete flow: hash 3412173590 index 2 [ 2348.855298][T27896] netlink: 'syz.0.40580': attribute type 7 has an invalid length. [ 2348.895200][T27896] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.40580'. [ 2349.140968][T27907] netlink: 'syz.4.40582': attribute type 10 has an invalid length. [ 2349.805583][T27929] device syzkaller0 entered promiscuous mode [ 2349.815505][T27937] netlink: 'syz.2.40597': attribute type 29 has an invalid length. [ 2349.847954][T27937] netlink: 'syz.2.40597': attribute type 29 has an invalid length. [ 2349.880086][T27546] syzkaller0: tun_net_xmit 48 [ 2349.887256][T27933] netlink: 'syz.2.40597': attribute type 29 has an invalid length. [ 2350.028647][T27939] device syzkaller0 left promiscuous mode [ 2350.080649][T27939] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2350.150005][T27936] syzkaller0: delete flow: hash 3427683887 index 2 [ 2351.479770][T27965] validate_nla: 1 callbacks suppressed [ 2351.479793][T27965] netlink: 'syz.3.40618': attribute type 29 has an invalid length. [ 2351.564621][T27965] netlink: 'syz.3.40618': attribute type 29 has an invalid length. [ 2351.978853][T27978] netlink: 144 bytes leftover after parsing attributes in process `syz.3.40612'. [ 2352.258510][T27987] netlink: 'syz.2.40613': attribute type 10 has an invalid length. [ 2352.347054][T27992] device syzkaller0 entered promiscuous mode [ 2352.568809][T27998] netlink: 'syz.1.40620': attribute type 10 has an invalid length. [ 2352.652113][T27998] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2352.698674][T27998] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2352.759703][T28000] netlink: 'syz.3.40621': attribute type 2 has an invalid length. [ 2352.770825][T27998] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2352.785265][T28000] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.40621'. [ 2352.803375][T27998] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2353.232992][T28018] netlink: 144 bytes leftover after parsing attributes in process `syz.4.40628'. [ 2353.563376][T28037] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.40633'. [ 2353.686630][T28043] netlink: 'syz.1.40635': attribute type 2 has an invalid length. [ 2353.698596][T28043] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.40635'. [ 2353.778901][T28045] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2353.794238][T28045] device syzkaller0 entered promiscuous mode [ 2354.250774][T28065] netlink: 144 bytes leftover after parsing attributes in process `syz.1.40642'. [ 2354.346678][T28071] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.40648'. [ 2354.524239][T28077] netlink: 'syz.2.40650': attribute type 2 has an invalid length. [ 2354.546251][T28077] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.40650'. [ 2354.720948][T28090] netlink: 132 bytes leftover after parsing attributes in process `syz.4.40656'. [ 2354.776879][T28090] netlink: 'syz.4.40656': attribute type 10 has an invalid length. [ 2354.827385][T28090] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.40656'. [ 2354.864378][T28090] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2355.044863][T28107] netlink: 'syz.1.40662': attribute type 10 has an invalid length. [ 2355.109417][T28107] device virt_wifi0 left promiscuous mode [ 2355.129992][T28107] team0: Port device virt_wifi0 removed [ 2355.493541][T28117] netlink: 'syz.0.40667': attribute type 2 has an invalid length. [ 2356.362765][T28150] device syzkaller0 entered promiscuous mode [ 2356.848743][T28166] device syzkaller0 entered promiscuous mode [ 2357.167503][T28187] validate_nla: 3 callbacks suppressed [ 2357.167543][T28187] netlink: 'syz.1.40691': attribute type 28 has an invalid length. [ 2357.556604][T28196] __nla_validate_parse: 6 callbacks suppressed [ 2357.556640][T28196] netlink: 132 bytes leftover after parsing attributes in process `syz.0.40704'. [ 2357.592292][T28195] netlink: 144 bytes leftover after parsing attributes in process `syz.1.40695'. [ 2357.628426][T28196] netlink: 'syz.0.40704': attribute type 10 has an invalid length. [ 2357.636865][T28196] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.40704'. [ 2357.648857][T28196] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2358.586893][T28224] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2358.593501][T28224] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2358.989223][T28244] netlink: 'syz.1.40713': attribute type 4 has an invalid length. [ 2359.038986][T28244] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.40713'. [ 2359.041230][T28247] netlink: 'syz.1.40713': attribute type 17 has an invalid length. [ 2359.163759][T28247] netlink: 148 bytes leftover after parsing attributes in process `syz.1.40713'. [ 2359.730924][T28260] netlink: 132 bytes leftover after parsing attributes in process `syz.3.40718'. [ 2359.764145][T28258] netlink: 'syz.4.40720': attribute type 28 has an invalid length. [ 2359.803443][T28260] netlink: 'syz.3.40718': attribute type 10 has an invalid length. [ 2359.818891][T28260] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.40718'. [ 2359.829232][T28260] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2361.783450][T28294] netlink: 'syz.3.40730': attribute type 3 has an invalid length. [ 2361.820193][T28294] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.40730'. [ 2361.957069][T28299] netlink: 132 bytes leftover after parsing attributes in process `syz.1.40734'. [ 2362.036374][T28299] netlink: 'syz.1.40734': attribute type 10 has an invalid length. [ 2362.055241][T28299] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.40734'. [ 2362.082405][T28299] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2362.307452][T28314] netlink: 'syz.2.40739': attribute type 28 has an invalid length. [ 2363.059254][T28353] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.40752'. [ 2363.308920][T28359] netlink: 'syz.3.40753': attribute type 28 has an invalid length. [ 2363.532614][T28366] netlink: 'syz.3.40757': attribute type 25 has an invalid length. [ 2363.571979][T28366] netlink: 'syz.3.40757': attribute type 25 has an invalid length. [ 2363.602579][T28370] netlink: 'syz.0.40767': attribute type 28 has an invalid length. [ 2363.959234][T28380] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.40761'. [ 2364.089614][T28376] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.40761'. [ 2364.183517][T28384] netlink: 132 bytes leftover after parsing attributes in process `syz.2.40762'. [ 2364.246359][T28384] netlink: 'syz.2.40762': attribute type 10 has an invalid length. [ 2364.254882][T28384] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.40762'. [ 2364.275433][T28384] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2365.641495][T28417] netlink: 'syz.3.40773': attribute type 28 has an invalid length. [ 2365.787665][T28426] netlink: 'syz.0.40775': attribute type 4 has an invalid length. [ 2365.826391][T28426] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.40775'. [ 2365.921879][T28428] netlink: 'syz.0.40775': attribute type 17 has an invalid length. [ 2365.942044][T28428] netlink: 148 bytes leftover after parsing attributes in process `syz.0.40775'. [ 2366.029527][T28429] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.40778'. [ 2366.229969][T28432] netlink: 132 bytes leftover after parsing attributes in process `syz.1.40779'. [ 2366.249297][T28435] netlink: 'syz.1.40779': attribute type 10 has an invalid length. [ 2366.271704][T28435] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.40779'. [ 2366.281881][T28435] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2368.064793][T28501] validate_nla: 5 callbacks suppressed [ 2368.064828][T28501] netlink: 'syz.1.40802': attribute type 28 has an invalid length. [ 2368.231563][T28511] __nla_validate_parse: 5 callbacks suppressed [ 2368.231601][T28511] netlink: 132 bytes leftover after parsing attributes in process `syz.4.40807'. [ 2368.295924][T28511] netlink: 'syz.4.40807': attribute type 10 has an invalid length. [ 2368.380202][T28511] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.40807'. [ 2368.420106][T28511] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2368.540097][T28518] netlink: 'syz.1.40808': attribute type 2 has an invalid length. [ 2368.567113][T28518] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.40808'. [ 2368.844930][T28514] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.40808'. [ 2368.868872][T28526] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.40810'. [ 2369.178419][T28538] netlink: 76 bytes leftover after parsing attributes in process `syz.4.40815'. [ 2369.256124][T28542] netlink: 'syz.2.40817': attribute type 1 has an invalid length. [ 2369.274282][T28542] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.40817'. [ 2369.784136][T28568] syz_tun: tun_chr_ioctl cmd 1074025681 [ 2369.850784][T28572] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.40825'. [ 2369.855068][T28563] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.40825'. [ 2370.024072][T28576] netlink: 132 bytes leftover after parsing attributes in process `syz.1.40829'. [ 2370.122461][T28576] netlink: 'syz.1.40829': attribute type 10 has an invalid length. [ 2370.166341][T28576] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2370.957046][T28610] netlink: 'syz.4.40855': attribute type 10 has an invalid length. [ 2370.988301][T28610] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2371.281585][T28625] netlink: 'syz.0.40844': attribute type 2 has an invalid length. [ 2371.955786][T28639] netlink: 'syz.3.40856': attribute type 1 has an invalid length. [ 2373.262543][T28666] __nla_validate_parse: 9 callbacks suppressed [ 2373.262583][T28666] netlink: 132 bytes leftover after parsing attributes in process `syz.2.40865'. [ 2373.362945][T28666] netlink: 'syz.2.40865': attribute type 10 has an invalid length. [ 2373.413082][T28666] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.40865'. [ 2373.510098][T28666] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2373.688097][T28673] netlink: 76 bytes leftover after parsing attributes in process `syz.1.40866'. [ 2373.918731][T28674] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2373.926632][T28674] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2374.256924][T28690] syz_tun: tun_chr_ioctl cmd 1074025681 [ 2374.477872][T28697] netlink: 'syz.2.40872': attribute type 2 has an invalid length. [ 2374.526253][T28697] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.40872'. [ 2375.251827][T28691] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.40872'. [ 2375.684867][T28731] netlink: 'syz.0.40884': attribute type 1 has an invalid length. [ 2375.698937][T28731] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.40884'. [ 2377.318788][T28769] netlink: 'syz.1.40898': attribute type 1 has an invalid length. [ 2377.329057][T28769] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.40898'. [ 2377.457374][T28773] netlink: 132 bytes leftover after parsing attributes in process `syz.4.40900'. [ 2377.491669][T28777] netlink: 'syz.1.40911': attribute type 29 has an invalid length. [ 2377.552319][T28777] netlink: 'syz.1.40911': attribute type 29 has an invalid length. [ 2377.621725][T28773] netlink: 'syz.4.40900': attribute type 10 has an invalid length. [ 2377.661720][T28773] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.40900'. [ 2377.703646][T28773] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2379.405671][T28836] netlink: 'syz.0.40920': attribute type 29 has an invalid length. [ 2379.442961][T28836] netlink: 'syz.0.40920': attribute type 29 has an invalid length. [ 2380.826556][T28874] netlink: 'syz.3.40935': attribute type 29 has an invalid length. [ 2380.861063][T28874] netlink: 'syz.3.40935': attribute type 29 has an invalid length. [ 2380.949165][T28877] netlink: 132 bytes leftover after parsing attributes in process `syz.1.40934'. [ 2381.076950][T28886] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.40940'. [ 2381.148196][T28886] netlink: 'syz.1.40940': attribute type 10 has an invalid length. [ 2382.015566][T28886] device veth0_macvtap left promiscuous mode [ 2382.264268][T28911] netlink: 'syz.4.40949': attribute type 29 has an invalid length. [ 2382.304174][T28911] netlink: 'syz.4.40949': attribute type 29 has an invalid length. [ 2382.414448][T28921] netlink: 132 bytes leftover after parsing attributes in process `syz.2.40950'. [ 2382.571255][T28923] device syzkaller0 entered promiscuous mode [ 2382.748531][T28925] netlink: 'syz.4.40956': attribute type 3 has an invalid length. [ 2382.788878][T28925] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.40956'. [ 2382.801592][T28932] netlink: 'syz.4.40956': attribute type 9 has an invalid length. [ 2382.809471][T28932] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.40956'. [ 2382.928651][T28925] netlink: 'syz.4.40956': attribute type 9 has an invalid length. [ 2382.989824][T28925] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.40956'. [ 2383.151606][T28949] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.40960'. [ 2383.961902][T28965] netlink: 132 bytes leftover after parsing attributes in process `syz.4.40967'. [ 2384.261718][T28981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.40984'. [ 2384.463102][T28988] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.40977'. [ 2384.566011][T28994] validate_nla: 1 callbacks suppressed [ 2384.566038][T28994] netlink: 'syz.0.40977': attribute type 10 has an invalid length. [ 2388.847784][T29036] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.40993'. [ 2388.877420][T29036] netlink: 'syz.3.40993': attribute type 10 has an invalid length. [ 2389.160642][T29046] netlink: 'syz.2.40996': attribute type 29 has an invalid length. [ 2389.202792][T29046] netlink: 'syz.2.40996': attribute type 29 has an invalid length. [ 2390.512548][T29083] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.41012'. [ 2390.527415][T29083] netlink: 'syz.4.41012': attribute type 10 has an invalid length. [ 2390.537360][T29084] netlink: 'syz.2.41011': attribute type 29 has an invalid length. [ 2390.557599][T29084] netlink: 'syz.2.41011': attribute type 29 has an invalid length. [ 2392.727116][T29117] netlink: 'syz.1.41026': attribute type 29 has an invalid length. [ 2392.767528][T29117] netlink: 'syz.1.41026': attribute type 29 has an invalid length. [ 2394.775664][T29143] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.41033'. [ 2394.797838][T29143] netlink: 'syz.3.41033': attribute type 10 has an invalid length. [ 2396.188576][T29152] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.41037'. [ 2397.304423][T29171] netlink: 'syz.4.41048': attribute type 3 has an invalid length. [ 2397.339865][T29171] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.41048'. [ 2398.515190][T29197] netlink: 'syz.1.41053': attribute type 20 has an invalid length. [ 2398.918415][T29217] netlink: 'syz.0.41065': attribute type 1 has an invalid length. [ 2398.958450][T29217] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.41065'. [ 2399.870924][T29238] netlink: 'syz.3.41073': attribute type 29 has an invalid length. [ 2399.890952][T29238] netlink: 'syz.3.41073': attribute type 29 has an invalid length. [ 2400.171724][T29251] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.41076'. [ 2401.221221][T29280] netlink: 'syz.3.41088': attribute type 3 has an invalid length. [ 2401.234329][T29282] netlink: 144 bytes leftover after parsing attributes in process `syz.4.41090'. [ 2401.262264][T29280] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.41088'. [ 2401.370160][T29285] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.41091'. [ 2401.516870][T29290] device syzkaller0 entered promiscuous mode [ 2401.961637][T29311] netlink: 'syz.2.41103': attribute type 10 has an invalid length. [ 2402.077897][T29317] netlink: 'syz.2.41104': attribute type 3 has an invalid length. [ 2402.106560][T29317] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.41104'. [ 2403.690910][T29352] netlink: 'syz.1.41120': attribute type 3 has an invalid length. [ 2403.807260][T29352] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.41120'. [ 2405.730110][T29356] netlink: 'syz.0.41119': attribute type 20 has an invalid length. [ 2406.123687][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.130109][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.939043][T29384] netlink: 'syz.1.41129': attribute type 10 has an invalid length. [ 2407.900326][T29395] netlink: 'syz.2.41134': attribute type 20 has an invalid length. [ 2410.847645][T29404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2410.889992][T29419] device syzkaller0 entered promiscuous mode [ 2411.164511][T29429] netlink: 'syz.1.41144': attribute type 2 has an invalid length. [ 2411.174843][T29429] netlink: 119 bytes leftover after parsing attributes in process `syz.1.41144'. [ 2411.597757][T29457] netlink: 'syz.0.41157': attribute type 3 has an invalid length. [ 2411.632447][T29457] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.41157'. [ 2411.742357][T21897] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2411.795216][T29465] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2411.845861][T29464] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2411.917367][T29473] netlink: 'syz.3.41163': attribute type 2 has an invalid length. [ 2411.943069][T29477] netlink: 'syz.0.41176': attribute type 3 has an invalid length. [ 2411.952166][T29473] netlink: 119 bytes leftover after parsing attributes in process `syz.3.41163'. [ 2411.975992][T29477] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.41176'. [ 2412.093500][T29484] device syzkaller0 entered promiscuous mode [ 2412.321477][T29495] netlink: 'syz.0.41181': attribute type 2 has an invalid length. [ 2412.341050][T29495] netlink: 119 bytes leftover after parsing attributes in process `syz.0.41181'. [ 2413.183672][T29529] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.41199'. [ 2413.358849][T29537] netlink: 'syz.4.41190': attribute type 2 has an invalid length. [ 2413.411549][T29537] netlink: 119 bytes leftover after parsing attributes in process `syz.4.41190'. [ 2413.922310][T29564] netlink: 'syz.2.41205': attribute type 7 has an invalid length. [ 2414.276755][T29581] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2414.315489][T29580] device syzkaller0 entered promiscuous mode [ 2416.346704][T29624] netlink: 'syz.1.41228': attribute type 7 has an invalid length. [ 2416.462518][T29626] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.41229'. [ 2416.476322][T29633] netlink: 'syz.4.41231': attribute type 9 has an invalid length. [ 2416.491879][T29633] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.41231'. [ 2416.747204][T29626] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2416.790016][T29626] CPU: 0 PID: 29626 Comm: syz.3.41229 Not tainted syzkaller #0 [ 2416.797663][T29626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2416.807774][T29626] Call Trace: [ 2416.811106][T29626] [ 2416.814091][T29626] dump_stack_lvl+0x188/0x250 [ 2416.818830][T29626] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2416.825062][T29626] ? show_regs_print_info+0x20/0x20 [ 2416.830318][T29626] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2416.836545][T29626] sysfs_warn_dup+0x8a/0xa0 [ 2416.841079][T29626] sysfs_do_create_link_sd+0xc0/0x110 [ 2416.846505][T29626] device_add+0x7f6/0x1000 [ 2416.851075][T29626] wiphy_register+0x1e81/0x2c30 [ 2416.856003][T29626] ? cfg80211_event_work+0x40/0x40 [ 2416.861157][T29626] ? minstrel_ht_alloc+0x808/0x980 [ 2416.866326][T29626] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2416.872446][T29626] ieee80211_register_hw+0x2aa1/0x3af0 [ 2416.877995][T29626] ? ieee80211_tasklet_handler+0x20/0x20 [ 2416.883697][T29626] ? rcu_is_watching+0x11/0xa0 [ 2416.888514][T29626] ? memset+0x1e/0x40 [ 2416.892531][T29626] ? hrtimer_init+0x10c/0x220 [ 2416.897245][T29626] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2416.903050][T29626] hwsim_new_radio_nl+0xa6f/0xc40 [ 2416.908165][T29626] genl_rcv_msg+0xcea/0xf90 [ 2416.912725][T29626] ? genl_bind+0x380/0x380 [ 2416.917187][T29626] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2416.923216][T29626] ? perf_swevent_get_recursion_context+0xd/0x150 [ 2416.929679][T29626] ? lock_chain_count+0x20/0x20 [ 2416.934574][T29626] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2416.940775][T29626] ? lockdep_hardirqs_on+0x94/0x140 [ 2416.946027][T29626] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2416.952225][T29626] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2416.958796][T29626] ? lock_acquire+0x208/0x400 [ 2416.963533][T29626] netlink_rcv_skb+0x1f5/0x440 [ 2416.968341][T29626] ? genl_bind+0x380/0x380 [ 2416.972807][T29626] ? netlink_ack+0xb50/0xb50 [ 2416.977445][T29626] ? __lock_acquire+0x7d10/0x7d10 [ 2416.982526][T29626] ? down_read+0x1aa/0x2e0 [ 2416.986986][T29626] genl_rcv+0x24/0x40 [ 2416.991006][T29626] netlink_unicast+0x774/0x920 [ 2416.995833][T29626] netlink_sendmsg+0x8ba/0xbe0 [ 2417.000655][T29626] ? netlink_getsockopt+0x570/0x570 [ 2417.005902][T29626] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2417.012094][T29626] ? aa_sock_msg_perm+0x94/0x150 [ 2417.017096][T29626] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2417.022440][T29626] ? security_socket_sendmsg+0x7c/0xa0 [ 2417.027945][T29626] ? netlink_getsockopt+0x570/0x570 [ 2417.033185][T29626] ____sys_sendmsg+0x5b7/0x8f0 [ 2417.038016][T29626] ? __sys_sendmsg_sock+0x30/0x30 [ 2417.043087][T29626] ? import_iovec+0x6f/0xa0 [ 2417.047642][T29626] ___sys_sendmsg+0x236/0x2e0 [ 2417.052389][T29626] ? __sys_sendmsg+0x2a0/0x2a0 [ 2417.057217][T29626] ? rcu_is_watching+0x11/0xa0 [ 2417.062073][T29626] __se_sys_sendmsg+0x1af/0x290 [ 2417.066981][T29626] ? __x64_sys_sendmsg+0x80/0x80 [ 2417.071996][T29626] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2417.077939][T29626] do_syscall_64+0x4c/0xa0 [ 2417.082384][T29626] ? clear_bhb_loop+0x30/0x80 [ 2417.087101][T29626] ? clear_bhb_loop+0x30/0x80 [ 2417.091820][T29626] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2417.097750][T29626] RIP: 0033:0x7f140b646e59 [ 2417.102196][T29626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2417.121836][T29626] RSP: 002b:00007f14098a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2417.130289][T29626] RAX: ffffffffffffffda RBX: 00007f140b8bffa0 RCX: 00007f140b646e59 [ 2417.138288][T29626] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2417.146309][T29626] RBP: 00007f140b6dcd6f R08: 0000000000000000 R09: 0000000000000000 [ 2417.154329][T29626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2417.162343][T29626] R13: 00007f140b8c0038 R14: 00007f140b8bffa0 R15: 00007ffc8cb97688 [ 2417.170532][T29626] [ 2418.702149][T29655] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.680043][T29649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2419.824318][T29675] netlink: 'syz.0.41252': attribute type 2 has an invalid length. [ 2419.859948][T29675] netlink: 'syz.0.41252': attribute type 8 has an invalid length. [ 2419.868378][T29675] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41252'. [ 2419.901202][T29673] netlink: 'syz.2.41250': attribute type 2 has an invalid length. [ 2419.911863][T29673] netlink: 119 bytes leftover after parsing attributes in process `syz.2.41250'. [ 2419.923286][T29682] netlink: 'syz.0.41252': attribute type 2 has an invalid length. [ 2419.953549][T29682] netlink: 'syz.0.41252': attribute type 8 has an invalid length. [ 2419.962174][T29682] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41252'. [ 2420.646631][T29696] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.41260'. [ 2420.743085][T29702] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.41259'. [ 2421.123918][T29696] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2421.149704][T29696] CPU: 0 PID: 29696 Comm: syz.1.41260 Not tainted syzkaller #0 [ 2421.157355][T29696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2421.167469][T29696] Call Trace: [ 2421.170788][T29696] [ 2421.173767][T29696] dump_stack_lvl+0x188/0x250 [ 2421.178500][T29696] ? show_regs_print_info+0x20/0x20 [ 2421.183763][T29696] ? load_image+0x400/0x400 [ 2421.188335][T29696] sysfs_warn_dup+0x8a/0xa0 [ 2421.192887][T29696] sysfs_do_create_link_sd+0xc0/0x110 [ 2421.198310][T29696] device_add+0x7f6/0x1000 [ 2421.202797][T29696] wiphy_register+0x1e81/0x2c30 [ 2421.207727][T29696] ? cfg80211_event_work+0x40/0x40 [ 2421.212886][T29696] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2421.219109][T29696] ? ieee80211_register_hw+0x28ca/0x3af0 [ 2421.224803][T29696] ieee80211_register_hw+0x2aa1/0x3af0 [ 2421.230335][T29696] ? ieee80211_tasklet_handler+0x20/0x20 [ 2421.236019][T29696] ? rcu_is_watching+0x11/0xa0 [ 2421.240860][T29696] ? memset+0x1e/0x40 [ 2421.244892][T29696] ? hrtimer_init+0x10c/0x220 [ 2421.249613][T29696] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2421.255400][T29696] hwsim_new_radio_nl+0xa6f/0xc40 [ 2421.260482][T29696] genl_rcv_msg+0xcea/0xf90 [ 2421.265035][T29696] ? genl_bind+0x380/0x380 [ 2421.269507][T29696] ? mark_lock+0x94/0x320 [ 2421.273891][T29696] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2421.279926][T29696] ? lock_chain_count+0x20/0x20 [ 2421.284830][T29696] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2421.291030][T29696] ? lockdep_hardirqs_on+0x94/0x140 [ 2421.296278][T29696] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2421.302847][T29696] netlink_rcv_skb+0x1f5/0x440 [ 2421.307659][T29696] ? genl_bind+0x380/0x380 [ 2421.312120][T29696] ? netlink_ack+0xb50/0xb50 [ 2421.316745][T29696] ? lockdep_hardirqs_on+0x94/0x140 [ 2421.322003][T29696] ? down_read+0x1aa/0x2e0 [ 2421.326468][T29696] genl_rcv+0x24/0x40 [ 2421.330492][T29696] netlink_unicast+0x774/0x920 [ 2421.335306][T29696] netlink_sendmsg+0x8ba/0xbe0 [ 2421.340119][T29696] ? lockdep_hardirqs_on+0x94/0x140 [ 2421.345372][T29696] ? netlink_getsockopt+0x570/0x570 [ 2421.350628][T29696] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 2421.356210][T29696] ? security_socket_sendmsg+0x7c/0xa0 [ 2421.361714][T29696] ? netlink_getsockopt+0x570/0x570 [ 2421.366949][T29696] ____sys_sendmsg+0x5b7/0x8f0 [ 2421.371761][T29696] ? __sys_sendmsg_sock+0x30/0x30 [ 2421.376826][T29696] ? ___sys_sendmsg+0x21b/0x2e0 [ 2421.381725][T29696] ___sys_sendmsg+0x236/0x2e0 [ 2421.386466][T29696] ? __sys_sendmsg+0x2a0/0x2a0 [ 2421.391280][T29696] ? trace_event_raw_event_lock+0x270/0x270 [ 2421.397233][T29696] __se_sys_sendmsg+0x1af/0x290 [ 2421.402121][T29696] ? __x64_sys_sendmsg+0x80/0x80 [ 2421.407099][T29696] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2421.413127][T29696] ? lockdep_hardirqs_on+0x94/0x140 [ 2421.418363][T29696] do_syscall_64+0x4c/0xa0 [ 2421.422813][T29696] ? clear_bhb_loop+0x30/0x80 [ 2421.427526][T29696] ? clear_bhb_loop+0x30/0x80 [ 2421.432241][T29696] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2421.438306][T29696] RIP: 0033:0x7f7abc0a4e59 [ 2421.442766][T29696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2421.462414][T29696] RSP: 002b:00007f7aba2fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2421.470887][T29696] RAX: ffffffffffffffda RBX: 00007f7abc31dfa0 RCX: 00007f7abc0a4e59 [ 2421.478910][T29696] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2421.486909][T29696] RBP: 00007f7abc13ad6f R08: 0000000000000000 R09: 0000000000000000 [ 2421.494935][T29696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2421.502940][T29696] R13: 00007f7abc31e038 R14: 00007f7abc31dfa0 R15: 00007ffc4c3c01b8 [ 2421.510961][T29696] [ 2421.767796][T29713] device syzkaller0 entered promiscuous mode [ 2422.173713][T29720] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.41268'. [ 2423.003967][T29719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2423.373703][T29738] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.41275'. [ 2423.449493][T29742] netlink: 'syz.0.41277': attribute type 10 has an invalid length. [ 2423.482860][T29742] device wlan1 left promiscuous mode [ 2423.956895][T29761] netlink: 'syz.1.41287': attribute type 2 has an invalid length. [ 2423.975345][T29761] netlink: 'syz.1.41287': attribute type 8 has an invalid length. [ 2423.985463][T29761] netlink: 132 bytes leftover after parsing attributes in process `syz.1.41287'. [ 2424.027919][T29762] netlink: 'syz.1.41287': attribute type 2 has an invalid length. [ 2424.076620][T29762] netlink: 'syz.1.41287': attribute type 8 has an invalid length. [ 2424.118950][T29762] netlink: 132 bytes leftover after parsing attributes in process `syz.1.41287'. [ 2424.516769][T29777] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 2425.147815][T29795] netlink: 'syz.2.41302': attribute type 2 has an invalid length. [ 2425.171306][T29795] netlink: 'syz.2.41302': attribute type 8 has an invalid length. [ 2425.189879][T29795] netlink: 132 bytes leftover after parsing attributes in process `syz.2.41302'. [ 2425.217973][T29795] netlink: 'syz.2.41302': attribute type 2 has an invalid length. [ 2425.239769][T29795] netlink: 'syz.2.41302': attribute type 8 has an invalid length. [ 2425.247721][T29795] netlink: 132 bytes leftover after parsing attributes in process `syz.2.41302'. [ 2425.963166][T29802] netlink: 'syz.0.41313': attribute type 29 has an invalid length. [ 2426.147156][T29803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2426.750475][T29830] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 2427.397636][T29853] device wlan1 left promiscuous mode [ 2427.466541][T29853] team0: Port device wlan1 removed [ 2427.496340][T29858] netlink: 132 bytes leftover after parsing attributes in process `syz.3.41327'. [ 2427.557499][T29860] netlink: 132 bytes leftover after parsing attributes in process `syz.3.41327'. [ 2427.678855][T29869] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41331'. [ 2428.581642][T29911] validate_nla: 16 callbacks suppressed [ 2428.581679][T29911] netlink: 'syz.4.41346': attribute type 2 has an invalid length. [ 2428.607764][T29911] netlink: 'syz.4.41346': attribute type 8 has an invalid length. [ 2428.633451][T29911] netlink: 132 bytes leftover after parsing attributes in process `syz.4.41346'. [ 2428.684204][T29916] netlink: 'syz.4.41346': attribute type 2 has an invalid length. [ 2428.712845][T29916] netlink: 'syz.4.41346': attribute type 8 has an invalid length. [ 2428.733290][T29916] netlink: 132 bytes leftover after parsing attributes in process `syz.4.41346'. [ 2428.760081][T29913] netlink: 'syz.2.41348': attribute type 10 has an invalid length. [ 2428.807311][T29913] device wlan1 left promiscuous mode [ 2428.944297][T29928] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.41356'. [ 2429.514169][T29945] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.41366'. [ 2429.768552][T29945] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2429.780351][T29945] CPU: 0 PID: 29945 Comm: syz.0.41366 Not tainted syzkaller #0 [ 2429.787953][T29945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2429.798057][T29945] Call Trace: [ 2429.801383][T29945] [ 2429.804364][T29945] dump_stack_lvl+0x188/0x250 [ 2429.809105][T29945] ? show_regs_print_info+0x20/0x20 [ 2429.814355][T29945] ? load_image+0x400/0x400 [ 2429.818936][T29945] sysfs_warn_dup+0x8a/0xa0 [ 2429.823489][T29945] sysfs_do_create_link_sd+0xc0/0x110 [ 2429.828914][T29945] device_add+0x7f6/0x1000 [ 2429.833410][T29945] wiphy_register+0x1e81/0x2c30 [ 2429.838347][T29945] ? cfg80211_event_work+0x40/0x40 [ 2429.843526][T29945] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2429.849654][T29945] ieee80211_register_hw+0x2aa1/0x3af0 [ 2429.855202][T29945] ? ieee80211_tasklet_handler+0x20/0x20 [ 2429.860895][T29945] ? rcu_is_watching+0x11/0xa0 [ 2429.865717][T29945] ? memset+0x1e/0x40 [ 2429.869752][T29945] ? hrtimer_init+0x10c/0x220 [ 2429.874487][T29945] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2429.880301][T29945] hwsim_new_radio_nl+0xa6f/0xc40 [ 2429.885429][T29945] genl_rcv_msg+0xcea/0xf90 [ 2429.890062][T29945] ? genl_bind+0x380/0x380 [ 2429.894548][T29945] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2429.900591][T29945] ? lock_chain_count+0x20/0x20 [ 2429.905503][T29945] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2429.911706][T29945] ? lockdep_hardirqs_on+0x94/0x140 [ 2429.916958][T29945] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2429.923179][T29945] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2429.929779][T29945] ? lock_acquire+0x208/0x400 [ 2429.934563][T29945] netlink_rcv_skb+0x1f5/0x440 [ 2429.939379][T29945] ? genl_bind+0x380/0x380 [ 2429.943850][T29945] ? netlink_ack+0xb50/0xb50 [ 2429.948481][T29945] ? lockdep_hardirqs_on+0x94/0x140 [ 2429.953758][T29945] ? down_read+0x1aa/0x2e0 [ 2429.958229][T29945] genl_rcv+0x24/0x40 [ 2429.962254][T29945] netlink_unicast+0x774/0x920 [ 2429.967086][T29945] netlink_sendmsg+0x8ba/0xbe0 [ 2429.971921][T29945] ? netlink_getsockopt+0x570/0x570 [ 2429.977177][T29945] ? aa_sock_msg_perm+0x94/0x150 [ 2429.982162][T29945] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2429.987491][T29945] ? security_socket_sendmsg+0x7c/0xa0 [ 2429.993004][T29945] ? netlink_getsockopt+0x570/0x570 [ 2429.998248][T29945] ____sys_sendmsg+0x5b7/0x8f0 [ 2430.003084][T29945] ? __sys_sendmsg_sock+0x30/0x30 [ 2430.008184][T29945] ? import_iovec+0x6f/0xa0 [ 2430.012744][T29945] ___sys_sendmsg+0x236/0x2e0 [ 2430.017492][T29945] ? __sys_sendmsg+0x2a0/0x2a0 [ 2430.022396][T29945] __se_sys_sendmsg+0x1af/0x290 [ 2430.027300][T29945] ? __x64_sys_sendmsg+0x80/0x80 [ 2430.032282][T29945] ? lockdep_hardirqs_on+0x94/0x140 [ 2430.037567][T29945] do_syscall_64+0x4c/0xa0 [ 2430.042033][T29945] ? clear_bhb_loop+0x30/0x80 [ 2430.046773][T29945] ? clear_bhb_loop+0x30/0x80 [ 2430.051495][T29945] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2430.057437][T29945] RIP: 0033:0x7f346e88be59 [ 2430.061900][T29945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2430.081628][T29945] RSP: 002b:00007f346cae5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2430.090094][T29945] RAX: ffffffffffffffda RBX: 00007f346eb04fa0 RCX: 00007f346e88be59 [ 2430.098110][T29945] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2430.106124][T29945] RBP: 00007f346e921d6f R08: 0000000000000000 R09: 0000000000000000 [ 2430.114131][T29945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2430.122148][T29945] R13: 00007f346eb05038 R14: 00007f346eb04fa0 R15: 00007ffd31facfa8 [ 2430.130206][T29945] [ 2430.339401][T29955] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.41380'. [ 2431.049751][T29985] netlink: 14524 bytes leftover after parsing attributes in process `syz.1.41381'. [ 2431.078056][T29991] netlink: 'syz.2.41387': attribute type 17 has an invalid length. [ 2431.099855][T29991] netlink: 'syz.2.41387': attribute type 16 has an invalid length. [ 2431.107819][T29991] netlink: 152 bytes leftover after parsing attributes in process `syz.2.41387'. [ 2431.330323][T29998] netlink: 'syz.3.41400': attribute type 17 has an invalid length. [ 2431.347723][T29998] netlink: 'syz.3.41400': attribute type 16 has an invalid length. [ 2432.431346][T30043] netlink: 'syz.4.41408': attribute type 17 has an invalid length. [ 2432.830849][T30059] __nla_validate_parse: 8 callbacks suppressed [ 2432.830900][T30059] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.41414'. [ 2433.126814][T30073] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.41421'. [ 2433.173990][T30064] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.41416'. [ 2433.403927][T30082] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.41425'. [ 2433.523968][T30092] mac80211_hwsim hwsim97 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2434.702929][T30124] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.41443'. [ 2434.815441][T30128] netlink: 14524 bytes leftover after parsing attributes in process `syz.4.41441'. [ 2434.881798][T30135] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2436.186131][T30170] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.41459'. [ 2436.268951][T30173] validate_nla: 3 callbacks suppressed [ 2436.268991][T30173] netlink: 'syz.2.41460': attribute type 3 has an invalid length. [ 2436.323219][T30173] netlink: 'syz.2.41460': attribute type 1 has an invalid length. [ 2436.335552][T30173] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.41460'. [ 2437.027899][T30213] netlink: 'syz.0.41478': attribute type 3 has an invalid length. [ 2437.047349][T30213] netlink: 'syz.0.41478': attribute type 1 has an invalid length. [ 2437.060069][T30213] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.41478'. [ 2437.545511][T30236] netlink: 'syz.4.41488': attribute type 11 has an invalid length. [ 2437.574094][T30236] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.41488'. [ 2437.616307][T30236] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2437.660460][T30236] CPU: 1 PID: 30236 Comm: syz.4.41488 Not tainted syzkaller #0 [ 2437.668186][T30236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2437.678297][T30236] Call Trace: [ 2437.681609][T30236] [ 2437.684568][T30236] dump_stack_lvl+0x188/0x250 [ 2437.689286][T30236] ? show_regs_print_info+0x20/0x20 [ 2437.694509][T30236] ? load_image+0x400/0x400 [ 2437.699090][T30236] sysfs_warn_dup+0x8a/0xa0 [ 2437.703636][T30236] sysfs_do_create_link_sd+0xc0/0x110 [ 2437.709051][T30236] device_add+0x7f6/0x1000 [ 2437.713534][T30236] wiphy_register+0x1e81/0x2c30 [ 2437.718475][T30236] ? cfg80211_event_work+0x40/0x40 [ 2437.723620][T30236] ? minstrel_ht_alloc+0x808/0x980 [ 2437.728820][T30236] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2437.734965][T30236] ieee80211_register_hw+0x2aa1/0x3af0 [ 2437.740518][T30236] ? ieee80211_tasklet_handler+0x20/0x20 [ 2437.746206][T30236] ? rcu_is_watching+0x11/0xa0 [ 2437.751017][T30236] ? memset+0x1e/0x40 [ 2437.755049][T30236] ? hrtimer_init+0x10c/0x220 [ 2437.759778][T30236] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2437.765588][T30236] hwsim_new_radio_nl+0xa6f/0xc40 [ 2437.770696][T30236] genl_rcv_msg+0xcea/0xf90 [ 2437.775270][T30236] ? genl_bind+0x380/0x380 [ 2437.779741][T30236] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 2437.785770][T30236] ? verify_lock_unused+0x140/0x140 [ 2437.791024][T30236] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 2437.796882][T30236] ? perf_trace_lock+0x301/0x390 [ 2437.801865][T30236] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2437.808452][T30236] netlink_rcv_skb+0x1f5/0x440 [ 2437.813266][T30236] ? genl_bind+0x380/0x380 [ 2437.817730][T30236] ? netlink_ack+0xb50/0xb50 [ 2437.822373][T30236] ? __lock_acquire+0x7d10/0x7d10 [ 2437.827456][T30236] ? down_read+0x1aa/0x2e0 [ 2437.831921][T30236] genl_rcv+0x24/0x40 [ 2437.835939][T30236] netlink_unicast+0x774/0x920 [ 2437.840762][T30236] netlink_sendmsg+0x8ba/0xbe0 [ 2437.845583][T30236] ? netlink_getsockopt+0x570/0x570 [ 2437.850821][T30236] ? aa_sock_msg_perm+0x94/0x150 [ 2437.855802][T30236] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2437.861123][T30236] ? security_socket_sendmsg+0x7c/0xa0 [ 2437.866618][T30236] ? netlink_getsockopt+0x570/0x570 [ 2437.871845][T30236] ____sys_sendmsg+0x5b7/0x8f0 [ 2437.876677][T30236] ? __sys_sendmsg_sock+0x30/0x30 [ 2437.881994][T30236] ? import_iovec+0x6f/0xa0 [ 2437.886679][T30236] ___sys_sendmsg+0x236/0x2e0 [ 2437.891457][T30236] ? __sys_sendmsg+0x2a0/0x2a0 [ 2437.896317][T30236] ? trace_event_raw_event_lock+0x270/0x270 [ 2437.902351][T30236] __se_sys_sendmsg+0x1af/0x290 [ 2437.907265][T30236] ? __x64_sys_sendmsg+0x80/0x80 [ 2437.912247][T30236] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2437.918323][T30236] ? lockdep_hardirqs_on+0x94/0x140 [ 2437.923581][T30236] do_syscall_64+0x4c/0xa0 [ 2437.928038][T30236] ? clear_bhb_loop+0x30/0x80 [ 2437.932777][T30236] ? clear_bhb_loop+0x30/0x80 [ 2437.937515][T30236] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2437.943469][T30236] RIP: 0033:0x7fb45c344e59 [ 2437.947938][T30236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2437.967594][T30236] RSP: 002b:00007fb45a59e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2437.976066][T30236] RAX: ffffffffffffffda RBX: 00007fb45c5bdfa0 RCX: 00007fb45c344e59 [ 2437.984110][T30236] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2437.992129][T30236] RBP: 00007fb45c3dad6f R08: 0000000000000000 R09: 0000000000000000 [ 2438.000143][T30236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2438.008149][T30236] R13: 00007fb45c5be038 R14: 00007fb45c5bdfa0 R15: 00007ffc71b17f78 [ 2438.016209][T30236] [ 2438.874455][T30278] netlink: 'syz.2.41504': attribute type 11 has an invalid length. [ 2438.887276][T30278] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.41504'. [ 2438.921130][T30278] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2438.945195][T30278] CPU: 0 PID: 30278 Comm: syz.2.41504 Not tainted syzkaller #0 [ 2438.953097][T30278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2438.963201][T30278] Call Trace: [ 2438.966536][T30278] [ 2438.969516][T30278] dump_stack_lvl+0x188/0x250 [ 2438.974279][T30278] ? show_regs_print_info+0x20/0x20 [ 2438.979545][T30278] ? load_image+0x400/0x400 [ 2438.984158][T30278] sysfs_warn_dup+0x8a/0xa0 [ 2438.988749][T30278] sysfs_do_create_link_sd+0xc0/0x110 [ 2438.994377][T30278] device_add+0x7f6/0x1000 [ 2438.998917][T30278] wiphy_register+0x1e81/0x2c30 [ 2439.003936][T30278] ? cfg80211_event_work+0x40/0x40 [ 2439.009115][T30278] ? minstrel_ht_alloc+0x808/0x980 [ 2439.014324][T30278] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2439.020476][T30278] ieee80211_register_hw+0x2aa1/0x3af0 [ 2439.026077][T30278] ? ieee80211_tasklet_handler+0x20/0x20 [ 2439.031799][T30278] ? rcu_is_watching+0x11/0xa0 [ 2439.036639][T30278] ? memset+0x1e/0x40 [ 2439.040680][T30278] ? hrtimer_init+0x10c/0x220 [ 2439.045434][T30278] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2439.051287][T30278] hwsim_new_radio_nl+0xa6f/0xc40 [ 2439.056433][T30278] genl_rcv_msg+0xcea/0xf90 [ 2439.061047][T30278] ? genl_bind+0x380/0x380 [ 2439.065544][T30278] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 2439.071520][T30278] ? verify_lock_unused+0x140/0x140 [ 2439.076804][T30278] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 2439.082694][T30278] ? perf_trace_lock+0x301/0x390 [ 2439.087701][T30278] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2439.094317][T30278] netlink_rcv_skb+0x1f5/0x440 [ 2439.099141][T30278] ? genl_bind+0x380/0x380 [ 2439.103633][T30278] ? netlink_ack+0xb50/0xb50 [ 2439.108294][T30278] ? __lock_acquire+0x7d10/0x7d10 [ 2439.113410][T30278] ? down_read+0x1aa/0x2e0 [ 2439.117899][T30278] genl_rcv+0x24/0x40 [ 2439.121939][T30278] netlink_unicast+0x774/0x920 [ 2439.126794][T30278] netlink_sendmsg+0x8ba/0xbe0 [ 2439.131648][T30278] ? netlink_getsockopt+0x570/0x570 [ 2439.136920][T30278] ? aa_sock_msg_perm+0x94/0x150 [ 2439.141925][T30278] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2439.147264][T30278] ? security_socket_sendmsg+0x7c/0xa0 [ 2439.152788][T30278] ? netlink_getsockopt+0x570/0x570 [ 2439.158134][T30278] ____sys_sendmsg+0x5b7/0x8f0 [ 2439.162994][T30278] ? __sys_sendmsg_sock+0x30/0x30 [ 2439.168104][T30278] ? import_iovec+0x6f/0xa0 [ 2439.172677][T30278] ___sys_sendmsg+0x236/0x2e0 [ 2439.177459][T30278] ? __sys_sendmsg+0x2a0/0x2a0 [ 2439.182441][T30278] __se_sys_sendmsg+0x1af/0x290 [ 2439.187368][T30278] ? __x64_sys_sendmsg+0x80/0x80 [ 2439.192358][T30278] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2439.198443][T30278] ? lockdep_hardirqs_on+0x94/0x140 [ 2439.203715][T30278] do_syscall_64+0x4c/0xa0 [ 2439.208190][T30278] ? clear_bhb_loop+0x30/0x80 [ 2439.212922][T30278] ? clear_bhb_loop+0x30/0x80 [ 2439.217662][T30278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2439.223608][T30278] RIP: 0033:0x7ff0efaf8e59 [ 2439.228079][T30278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2439.247745][T30278] RSP: 002b:00007ff0edd52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2439.256239][T30278] RAX: ffffffffffffffda RBX: 00007ff0efd71fa0 RCX: 00007ff0efaf8e59 [ 2439.264267][T30278] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2439.272289][T30278] RBP: 00007ff0efb8ed6f R08: 0000000000000000 R09: 0000000000000000 [ 2439.280313][T30278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2439.288330][T30278] R13: 00007ff0efd72038 R14: 00007ff0efd71fa0 R15: 00007ffe4fa23468 [ 2439.296413][T30278] [ 2440.202755][T30315] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.41519'. [ 2440.802281][T30324] netlink: 'syz.0.41524': attribute type 11 has an invalid length. [ 2440.830426][T30324] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.41524'. [ 2440.881094][T30324] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2440.889081][T30324] CPU: 1 PID: 30324 Comm: syz.0.41524 Not tainted syzkaller #0 [ 2440.896694][T30324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2440.906805][T30324] Call Trace: [ 2440.910135][T30324] [ 2440.913125][T30324] dump_stack_lvl+0x188/0x250 [ 2440.917894][T30324] ? show_regs_print_info+0x20/0x20 [ 2440.923166][T30324] ? load_image+0x400/0x400 [ 2440.927787][T30324] sysfs_warn_dup+0x8a/0xa0 [ 2440.932359][T30324] sysfs_do_create_link_sd+0xc0/0x110 [ 2440.937854][T30324] device_add+0x7f6/0x1000 [ 2440.942384][T30324] wiphy_register+0x1e81/0x2c30 [ 2440.947365][T30324] ? cfg80211_event_work+0x40/0x40 [ 2440.952541][T30324] ? minstrel_ht_alloc+0x808/0x980 [ 2440.957751][T30324] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2440.963904][T30324] ieee80211_register_hw+0x2aa1/0x3af0 [ 2440.969499][T30324] ? ieee80211_tasklet_handler+0x20/0x20 [ 2440.975213][T30324] ? rcu_is_watching+0x11/0xa0 [ 2440.980040][T30324] ? memset+0x1e/0x40 [ 2440.984078][T30324] ? hrtimer_init+0x10c/0x220 [ 2440.988834][T30324] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2440.994716][T30324] hwsim_new_radio_nl+0xa6f/0xc40 [ 2440.999870][T30324] genl_rcv_msg+0xcea/0xf90 [ 2441.004472][T30324] ? genl_bind+0x380/0x380 [ 2441.008982][T30324] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 2441.014961][T30324] ? verify_lock_unused+0x140/0x140 [ 2441.020234][T30324] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 2441.026120][T30324] ? perf_trace_lock+0x301/0x390 [ 2441.031145][T30324] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2441.037764][T30324] netlink_rcv_skb+0x1f5/0x440 [ 2441.042589][T30324] ? genl_bind+0x380/0x380 [ 2441.047134][T30324] ? netlink_ack+0xb50/0xb50 [ 2441.051802][T30324] ? __lock_acquire+0x7d10/0x7d10 [ 2441.056918][T30324] ? down_read+0x1aa/0x2e0 [ 2441.061490][T30324] genl_rcv+0x24/0x40 [ 2441.065537][T30324] netlink_unicast+0x774/0x920 [ 2441.070396][T30324] netlink_sendmsg+0x8ba/0xbe0 [ 2441.075255][T30324] ? netlink_getsockopt+0x570/0x570 [ 2441.080523][T30324] ? aa_sock_msg_perm+0x94/0x150 [ 2441.085528][T30324] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2441.090867][T30324] ? security_socket_sendmsg+0x7c/0xa0 [ 2441.096391][T30324] ? netlink_getsockopt+0x570/0x570 [ 2441.101648][T30324] ____sys_sendmsg+0x5b7/0x8f0 [ 2441.106512][T30324] ? __sys_sendmsg_sock+0x30/0x30 [ 2441.111637][T30324] ? import_iovec+0x6f/0xa0 [ 2441.116217][T30324] ___sys_sendmsg+0x236/0x2e0 [ 2441.120992][T30324] ? __sys_sendmsg+0x2a0/0x2a0 [ 2441.125867][T30324] ? trace_event_raw_event_lock+0x270/0x270 [ 2441.131918][T30324] __se_sys_sendmsg+0x1af/0x290 [ 2441.136851][T30324] ? __x64_sys_sendmsg+0x80/0x80 [ 2441.141848][T30324] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2441.147952][T30324] ? lockdep_hardirqs_on+0x94/0x140 [ 2441.153242][T30324] do_syscall_64+0x4c/0xa0 [ 2441.157723][T30324] ? clear_bhb_loop+0x30/0x80 [ 2441.162460][T30324] ? clear_bhb_loop+0x30/0x80 [ 2441.167208][T30324] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2441.173163][T30324] RIP: 0033:0x7f346e88be59 [ 2441.177645][T30324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2441.197336][T30324] RSP: 002b:00007f346cae5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2441.205816][T30324] RAX: ffffffffffffffda RBX: 00007f346eb04fa0 RCX: 00007f346e88be59 [ 2441.213904][T30324] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2441.221910][T30324] RBP: 00007f346e921d6f R08: 0000000000000000 R09: 0000000000000000 [ 2441.229916][T30324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2441.237920][T30324] R13: 00007f346eb05038 R14: 00007f346eb04fa0 R15: 00007ffd31facfa8 [ 2441.245970][T30324] [ 2441.713630][T30349] netlink: 14524 bytes leftover after parsing attributes in process `syz.3.41534'. [ 2442.370760][T30385] netlink: 14524 bytes leftover after parsing attributes in process `syz.0.41552'. [ 2443.604492][T30428] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.41566'. [ 2444.244674][T30459] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.41585'. [ 2444.409193][T30461] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.41587'. [ 2445.374828][T30514] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.41609'. [ 2446.276135][T30567] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.41630'. [ 2446.564209][T30577] netlink: 144 bytes leftover after parsing attributes in process `syz.3.41637'. [ 2447.142601][T30620] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.41654'. [ 2447.944291][T30665] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.41676'. [ 2448.410611][T30679] netlink: 'syz.0.41684': attribute type 39 has an invalid length. [ 2448.442065][T30684] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.41695'. [ 2450.314648][T30784] netlink: 'syz.3.41729': attribute type 39 has an invalid length. [ 2451.295381][T30838] netlink: 'syz.1.41752': attribute type 39 has an invalid length. [ 2451.390705][T30838] bond0: (slave syz_tun): Releasing backup interface [ 2451.839069][T30867] netlink: 'syz.1.41760': attribute type 10 has an invalid length. [ 2451.857840][T30867] netlink: 40 bytes leftover after parsing attributes in process `syz.1.41760'. [ 2451.886972][T30867] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2452.514915][T30890] netlink: 'syz.4.41770': attribute type 39 has an invalid length. [ 2452.748203][T30907] netlink: 'syz.3.41775': attribute type 2 has an invalid length. [ 2452.773133][T30907] netlink: 164 bytes leftover after parsing attributes in process `syz.3.41775'. [ 2453.514214][T30938] netlink: 'syz.2.41793': attribute type 39 has an invalid length. [ 2453.802722][T30949] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.41807'. [ 2455.728830][T31066] netlink: 'syz.1.41850': attribute type 2 has an invalid length. [ 2455.747744][T31066] netlink: 164 bytes leftover after parsing attributes in process `syz.1.41850'. [ 2455.788115][T31070] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.41852'. [ 2456.626730][T31102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41867'. [ 2456.898777][T31116] device syzkaller0 entered promiscuous mode [ 2457.426870][T31154] netlink: 180 bytes leftover after parsing attributes in process `syz.2.41892'. [ 2457.638570][T31167] netlink: 'syz.1.41897': attribute type 10 has an invalid length. [ 2457.750739][T31176] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.41899'. [ 2457.801461][T31178] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.41901'. [ 2458.263273][T31204] device syzkaller0 entered promiscuous mode [ 2458.819129][T31234] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.41925'. [ 2458.958419][T31242] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.41928'. [ 2459.248683][T31264] netlink: 'syz.2.41938': attribute type 1 has an invalid length. [ 2459.252142][T31265] netlink: 'syz.4.41940': attribute type 10 has an invalid length. [ 2459.277049][T31264] netlink: 'syz.2.41938': attribute type 3 has an invalid length. [ 2459.287550][T31264] netlink: 132 bytes leftover after parsing attributes in process `syz.2.41938'. [ 2460.348867][T31296] netlink: 180 bytes leftover after parsing attributes in process `syz.0.41949'. [ 2461.226756][T31322] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.41960'. [ 2461.726474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2461.748023][T31336] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2461.846458][T31336] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2463.109963][T31372] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.41980'. [ 2463.217149][T31375] device syzkaller0 entered promiscuous mode [ 2463.823628][T31393] device syzkaller0 left promiscuous mode [ 2464.178293][T31402] netlink: 'syz.0.42004': attribute type 10 has an invalid length. [ 2464.245153][T31401] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.41996'. [ 2464.628949][T31415] netlink: 'syz.0.41999': attribute type 2 has an invalid length. [ 2464.663557][T31415] netlink: 'syz.0.41999': attribute type 8 has an invalid length. [ 2464.689814][T31415] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41999'. [ 2464.740789][T31422] netlink: 'syz.0.41999': attribute type 2 has an invalid length. [ 2464.801426][T31422] netlink: 'syz.0.41999': attribute type 8 has an invalid length. [ 2464.810174][T31422] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41999'. [ 2464.873544][T31427] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.42003'. [ 2465.785400][T31455] netlink: 'syz.3.42012': attribute type 10 has an invalid length. [ 2465.823283][T31455] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2465.854608][T31455] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2465.972247][T31455] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2466.147220][T31455] device geneve0 entered promiscuous mode [ 2466.368692][T31455] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2466.380001][T31455] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2466.389163][T31455] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2466.436933][T31455] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2466.459824][T31467] netlink: 'syz.2.42019': attribute type 2 has an invalid length. [ 2466.468319][T31467] netlink: 'syz.2.42019': attribute type 8 has an invalid length. [ 2466.509806][T31467] netlink: 132 bytes leftover after parsing attributes in process `syz.2.42019'. [ 2466.530513][T31470] netlink: 'syz.2.42019': attribute type 2 has an invalid length. [ 2466.538419][T31470] netlink: 'syz.2.42019': attribute type 8 has an invalid length. [ 2466.611301][T31470] netlink: 132 bytes leftover after parsing attributes in process `syz.2.42019'. [ 2466.895599][T31476] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.42022'. [ 2467.521223][T31491] device syzkaller0 entered promiscuous mode [ 2467.583110][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.589616][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.743284][T31493] netlink: 'syz.2.42027': attribute type 3 has an invalid length. [ 2467.777950][T31493] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.42027'. [ 2470.998060][T31597] validate_nla: 1 callbacks suppressed [ 2470.998135][T31597] netlink: 'syz.0.42067': attribute type 3 has an invalid length. [ 2471.012968][T31597] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.42067'. [ 2471.288724][T31611] device macsec0 entered promiscuous mode [ 2471.686364][T31621] netlink: 'syz.2.42080': attribute type 10 has an invalid length. [ 2472.147825][T31651] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.42093'. [ 2472.547724][T31661] netlink: 'syz.0.42096': attribute type 39 has an invalid length. [ 2473.123565][T31681] device macsec0 entered promiscuous mode [ 2476.034574][T31740] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.42133'. [ 2476.359230][T31765] netlink: 'syz.1.42140': attribute type 3 has an invalid length. [ 2476.371198][T31765] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.42140'. [ 2476.403149][T31769] netlink: 'syz.4.42139': attribute type 10 has an invalid length. [ 2476.441759][T31769] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2476.460682][T31769] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2476.470571][T31769] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2476.481966][T31769] device geneve0 entered promiscuous mode [ 2477.594009][T31804] netlink: 'syz.2.42156': attribute type 10 has an invalid length. [ 2477.689206][T31806] netlink: 'syz.4.42157': attribute type 3 has an invalid length. [ 2477.710021][T31806] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.42157'. [ 2479.235511][T31862] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.42179'. [ 2479.636934][T31881] netlink: 'syz.2.42188': attribute type 39 has an invalid length. [ 2479.746521][T31887] netlink: 'syz.3.42190': attribute type 10 has an invalid length. [ 2479.766586][T31887] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2479.807967][T31887] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2479.847905][T31887] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2480.846613][T31914] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.42209'. [ 2483.932863][T31956] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.42215'. [ 2483.991527][T31954] netlink: 14 bytes leftover after parsing attributes in process `syz.4.42216'. [ 2485.209996][T32000] netlink: 14 bytes leftover after parsing attributes in process `syz.2.42233'. [ 2485.745412][T32009] device syzkaller0 entered promiscuous mode [ 2486.397978][T32041] netlink: 14 bytes leftover after parsing attributes in process `syz.0.42248'. [ 2486.757604][T32060] device syzkaller0 entered promiscuous mode [ 2487.387211][T32080] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.42264'. [ 2491.410330][T32102] ------------[ cut here ]------------ [ 2491.416017][T32102] WARNING: CPU: 1 PID: 32102 at kernel/events/core.c:6688 perf_pending_task+0x358/0x470 [ 2491.425892][T32102] Modules linked in: [ 2491.429979][T32102] CPU: 1 PID: 32102 Comm: syz.1.42266 Not tainted syzkaller #0 [ 2491.437564][T32102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2491.447694][T32102] RIP: 0010:perf_pending_task+0x358/0x470 [ 2491.453678][T32102] Code: ff 84 db 75 14 e8 08 47 de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f4 46 de ff e8 37 7b 65 ff eb e5 e8 e8 46 de ff <0f> 0b e9 f3 fe ff ff e8 dc 46 de ff 48 c7 c7 60 4c 3a 8c 4c 89 f6 [ 2491.473393][T32102] RSP: 0018:ffffc900033cf9d8 EFLAGS: 00010293 [ 2491.479545][T32102] RAX: ffffffff819b0208 RBX: ffff8880576e8450 RCX: ffff888078e43b80 [ 2491.487578][T32102] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2491.495638][T32102] RBP: 0000000000000001 R08: ffff888078e44593 R09: 1ffff1100f1c88b2 [ 2491.503871][T32102] R10: dffffc0000000000 R11: ffffed100f1c88b3 R12: ffff888078e43b80 [ 2491.511921][T32102] R13: ffff88802eadc958 R14: ffff8880576e8220 R15: 1ffff1100aedd044 [ 2491.519979][T32102] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 2491.528948][T32102] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2491.535619][T32102] CR2: 0000001b31b14ff8 CR3: 0000000075f24000 CR4: 00000000003506e0 [ 2491.543674][T32102] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2491.551723][T32102] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2491.559775][T32102] Call Trace: [ 2491.563093][T32102] [ 2491.566063][T32102] task_work_run+0x125/0x1a0 [ 2491.570834][T32102] do_exit+0x626/0x20c0 [ 2491.575098][T32102] ? put_task_struct+0x80/0x80 [ 2491.579939][T32102] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2491.585975][T32102] ? lock_chain_count+0x20/0x20 [ 2491.590909][T32102] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2491.595981][T32102] do_group_exit+0x12e/0x300 [ 2491.600643][T32102] ? lockdep_hardirqs_on+0x94/0x140 [ 2491.605885][T32102] get_signal+0x6d6/0x12d0 [ 2491.610480][T32102] arch_do_signal_or_restart+0xe7/0x12c0 [ 2491.616187][T32102] ? perf_trace_preemptirq_template+0x2bc/0x360 [ 2491.622522][T32102] ? irqentry_enter+0x33/0x50 [ 2491.627248][T32102] ? futex_exit_release+0x1c0/0x1c0 [ 2491.632687][T32102] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2491.638719][T32102] ? get_sigframe_size+0x10/0x10 [ 2491.643761][T32102] ? exit_to_user_mode_loop+0x3b/0x130 [ 2491.649271][T32102] exit_to_user_mode_loop+0x9e/0x130 [ 2491.654647][T32102] exit_to_user_mode_prepare+0xee/0x180 [ 2491.660272][T32102] syscall_exit_to_user_mode+0x16/0x40 [ 2491.665773][T32102] do_syscall_64+0x58/0xa0 [ 2491.670271][T32102] ? clear_bhb_loop+0x30/0x80 [ 2491.674981][T32102] ? clear_bhb_loop+0x30/0x80 [ 2491.679744][T32102] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2491.685692][T32102] RIP: 0033:0x7f7abc0a4e59 [ 2491.690174][T32102] Code: Unable to access opcode bytes at RIP 0x7f7abc0a4e2f. [ 2491.697583][T32102] RSP: 002b:00007f7aba2fe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2491.706093][T32102] RAX: fffffffffffffe00 RBX: 00007f7abc31dfa8 RCX: 00007f7abc0a4e59 [ 2491.714154][T32102] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7abc31dfa8 [ 2491.722213][T32102] RBP: 00007f7abc31dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2491.730273][T32102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2491.738285][T32102] R13: 00007f7abc31e038 R14: 00007ffc4c3c00d0 R15: 00007ffc4c3c01b8 [ 2491.746360][T32102] [ 2491.749430][T32102] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2491.756736][T32102] CPU: 1 PID: 32102 Comm: syz.1.42266 Not tainted syzkaller #0 [ 2491.764315][T32102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2491.774404][T32102] Call Trace: [ 2491.777720][T32102] [ 2491.780677][T32102] dump_stack_lvl+0x188/0x250 [ 2491.785398][T32102] ? show_regs_print_info+0x20/0x20 [ 2491.790635][T32102] ? load_image+0x400/0x400 [ 2491.795190][T32102] panic+0x2e5/0x810 [ 2491.799212][T32102] ? bpf_jit_dump+0xd0/0xd0 [ 2491.803773][T32102] ? perf_pending_task+0x358/0x470 [ 2491.808929][T32102] __warn+0x248/0x2b0 [ 2491.812944][T32102] ? perf_pending_task+0x358/0x470 [ 2491.818098][T32102] report_bug+0x1b7/0x2e0 [ 2491.822550][T32102] handle_bug+0x3a/0x70 [ 2491.826739][T32102] exc_invalid_op+0x16/0x40 [ 2491.831288][T32102] asm_exc_invalid_op+0x16/0x20 [ 2491.836172][T32102] RIP: 0010:perf_pending_task+0x358/0x470 [ 2491.841937][T32102] Code: ff 84 db 75 14 e8 08 47 de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f4 46 de ff e8 37 7b 65 ff eb e5 e8 e8 46 de ff <0f> 0b e9 f3 fe ff ff e8 dc 46 de ff 48 c7 c7 60 4c 3a 8c 4c 89 f6 [ 2491.861582][T32102] RSP: 0018:ffffc900033cf9d8 EFLAGS: 00010293 [ 2491.868207][T32102] RAX: ffffffff819b0208 RBX: ffff8880576e8450 RCX: ffff888078e43b80 [ 2491.876259][T32102] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2491.884274][T32102] RBP: 0000000000000001 R08: ffff888078e44593 R09: 1ffff1100f1c88b2 [ 2491.892386][T32102] R10: dffffc0000000000 R11: ffffed100f1c88b3 R12: ffff888078e43b80 [ 2491.900505][T32102] R13: ffff88802eadc958 R14: ffff8880576e8220 R15: 1ffff1100aedd044 [ 2491.908526][T32102] ? perf_pending_task+0x358/0x470 [ 2491.913693][T32102] ? perf_pending_task+0x358/0x470 [ 2491.918856][T32102] task_work_run+0x125/0x1a0 [ 2491.923483][T32102] do_exit+0x626/0x20c0 [ 2491.927678][T32102] ? put_task_struct+0x80/0x80 [ 2491.932475][T32102] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2491.938497][T32102] ? lock_chain_count+0x20/0x20 [ 2491.943392][T32102] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2491.948459][T32102] do_group_exit+0x12e/0x300 [ 2491.953078][T32102] ? lockdep_hardirqs_on+0x94/0x140 [ 2491.958319][T32102] get_signal+0x6d6/0x12d0 [ 2491.962781][T32102] arch_do_signal_or_restart+0xe7/0x12c0 [ 2491.968433][T32102] ? perf_trace_preemptirq_template+0x2bc/0x360 [ 2491.974771][T32102] ? irqentry_enter+0x33/0x50 [ 2491.979453][T32102] ? futex_exit_release+0x1c0/0x1c0 [ 2491.984670][T32102] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2491.990655][T32102] ? get_sigframe_size+0x10/0x10 [ 2491.995640][T32102] ? exit_to_user_mode_loop+0x3b/0x130 [ 2492.001103][T32102] exit_to_user_mode_loop+0x9e/0x130 [ 2492.006415][T32102] exit_to_user_mode_prepare+0xee/0x180 [ 2492.011982][T32102] syscall_exit_to_user_mode+0x16/0x40 [ 2492.017445][T32102] do_syscall_64+0x58/0xa0 [ 2492.021860][T32102] ? clear_bhb_loop+0x30/0x80 [ 2492.026533][T32102] ? clear_bhb_loop+0x30/0x80 [ 2492.031231][T32102] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2492.037129][T32102] RIP: 0033:0x7f7abc0a4e59 [ 2492.041541][T32102] Code: Unable to access opcode bytes at RIP 0x7f7abc0a4e2f. [ 2492.048903][T32102] RSP: 002b:00007f7aba2fe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2492.057317][T32102] RAX: fffffffffffffe00 RBX: 00007f7abc31dfa8 RCX: 00007f7abc0a4e59 [ 2492.065292][T32102] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7abc31dfa8 [ 2492.073277][T32102] RBP: 00007f7abc31dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2492.081248][T32102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2492.089237][T32102] R13: 00007f7abc31e038 R14: 00007ffc4c3c00d0 R15: 00007ffc4c3c01b8 [ 2492.097222][T32102] [ 2492.100537][T32102] Kernel Offset: disabled [ 2492.104881][T32102] Rebooting in 86400 seconds..