last executing test programs: 5.989505836s ago: executing program 4 (id=3769): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/5, 0x5}], 0x1, &(0x7f0000000000)=""/14, 0xe}, 0x40000100) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[], 0x11f0}, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.660558075s ago: executing program 4 (id=3777): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) 4.142727839s ago: executing program 3 (id=3781): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r5, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x10) 3.901438831s ago: executing program 3 (id=3784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 3.748014252s ago: executing program 0 (id=3785): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4001000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}], 0x10, 0x0, @void, @value}, 0x90) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 3.695780873s ago: executing program 2 (id=3787): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.637587083s ago: executing program 1 (id=3788): socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) socket$kcm(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x10, 0x6, 0x0, 0x0, 0x0, 0x1, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x30, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 3.473640364s ago: executing program 2 (id=3789): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x8004745a, 0x2000000c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0xd1}, 0x2f) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) 3.346412145s ago: executing program 0 (id=3790): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.659792118s ago: executing program 1 (id=3791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 1.600876318s ago: executing program 4 (id=3792): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209000a0000000401a80016000a0004", 0x37}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.596407488s ago: executing program 0 (id=3793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) 1.577088898s ago: executing program 3 (id=3794): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x2c}, 0x1}}, 0x80, 0x0}, 0x0) 1.534516828s ago: executing program 2 (id=3795): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40012002) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.35731605s ago: executing program 3 (id=3796): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.253748671s ago: executing program 1 (id=3797): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$TUNSETIFF(r0, 0xb701, 0x0) 1.174847601s ago: executing program 0 (id=3798): socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x30, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.058397142s ago: executing program 2 (id=3799): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000001e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge_slave_0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000540)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x97SA\x8b\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^#6\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7S\x03U\xe0\xd8t\xe3%96\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00w\x9f\x95\x9f\xa2\xbc\xf3\x1f\xd8.\xaf\xd9\xa8\x90\xe8\x8b\x94\xa9\x04\xf2\x0f\xbd\xc3\xfd\xc7\x91x\x00IL$\xd7\x8a\xfb\xdb1J\xcaO\xca\x00\x00\xbfU\\^\xbc5\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xd9v\xc3#\x03\xaa\xfcjS\xfca\xb0\xbah\x94\x14z\xad\xc1\xe8\x8c\xbb\xbb\x12\x8c@.^\x122\xe2\xd9\x13\x19\x1f\xc5\x11\xf6-o\x15\xf9\xff\xfa\x9c\x9b\x8a\xd0') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 1.058117162s ago: executing program 3 (id=3800): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000500)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) write$cgroup_devices(r2, &(0x7f00000058c0)=ANY=[@ANYBLOB], 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3032, 0x10000, @value=r4}, 0x28) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) 983.604693ms ago: executing program 1 (id=3801): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfc}, 0x80, 0xf, 0x0, 0x0, 0x234, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x80}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 983.252722ms ago: executing program 4 (id=3802): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000240)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0}, 0x0) socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) 765.132774ms ago: executing program 2 (id=3803): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$inet(r4, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20000001) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) 763.302204ms ago: executing program 0 (id=3813): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 566.679856ms ago: executing program 2 (id=3804): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7020000010000e18500", @ANYRES32, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 563.842276ms ago: executing program 1 (id=3815): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f0000000740)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x100) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000791208000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 513.369036ms ago: executing program 0 (id=3805): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r1, &(0x7f0000000b00), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 513.137626ms ago: executing program 4 (id=3806): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 92.595379ms ago: executing program 4 (id=3807): socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x69) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 54.2652ms ago: executing program 1 (id=3808): syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid_for_children\x00') bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 3 (id=3809): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) kernel console output (not intermixed with test programs): rface lo may have been left with an inconsistent configuration, please check. [ 527.688394][T10612] device syzkaller0 entered promiscuous mode [ 530.384646][T10625] device wg2 entered promiscuous mode [ 530.394817][T10626] netlink: 'syz.2.2324': attribute type 10 has an invalid length. [ 530.437604][T10634] netlink: 'syz.3.2326': attribute type 10 has an invalid length. [ 530.498663][T10634] bond0: (slave netdevsim0): Releasing backup interface [ 530.513466][T10634] device netdevsim0 left promiscuous mode [ 530.532420][T10634] team0: Port device netdevsim0 added [ 530.567260][T10635] netlink: 'syz.3.2326': attribute type 10 has an invalid length. [ 530.606623][T10635] team0: Port device netdevsim0 removed [ 530.614591][T10635] device netdevsim0 entered promiscuous mode [ 530.631653][T10635] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 530.915312][T10646] device macsec0 entered promiscuous mode [ 530.921781][T10646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 530.934918][T10647] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 530.983814][T10647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.092738][T10649] netlink: 'syz.3.2332': attribute type 39 has an invalid length. [ 534.711401][T10681] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 534.771722][T10681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.347561][T10705] netlink: 'syz.1.2356': attribute type 10 has an invalid length. [ 535.914360][T10716] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 536.030829][T10716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.158226][T10746] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 537.351223][T10746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 539.086768][T10790] netlink: 'syz.1.2390': attribute type 10 has an invalid length. [ 539.354683][T10790] batman_adv: batadv0: Adding interface: team0 [ 539.396272][T10790] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.545165][T10790] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 541.323601][T10830] device syzkaller0 entered promiscuous mode [ 548.043921][T10898] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 548.099163][T10898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 548.694626][T10908] device syzkaller0 entered promiscuous mode [ 554.846293][T11027] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 554.874572][T11027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.113298][T11170] netlink: 'syz.3.2490': attribute type 10 has an invalid length. [ 559.146223][T11170] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2490'. [ 559.379345][T11169] device syzkaller0 entered promiscuous mode [ 562.880155][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.886607][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.174570][T11247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 566.183304][T11249] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 566.214413][T11249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 569.198723][T11323] device syzkaller0 entered promiscuous mode [ 569.290245][T11329] netlink: 'syz.1.2521': attribute type 10 has an invalid length. [ 569.306168][T11329] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2521'. [ 573.002650][T11369] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 573.521243][T11369] device syzkaller0 entered promiscuous mode [ 573.869802][T11394] netlink: 'syz.3.2542': attribute type 2 has an invalid length. [ 579.635221][T11452] netlink: 'syz.1.2561': attribute type 21 has an invalid length. [ 579.699313][T11452] netlink: 'syz.1.2561': attribute type 6 has an invalid length. [ 579.726844][T11452] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2561'. [ 586.405886][T11560] netlink: 'syz.4.2594': attribute type 2 has an invalid length. [ 586.587806][T11562] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 586.703674][T11562] device syzkaller0 entered promiscuous mode [ 586.739030][T11568] netlink: 'syz.2.2599': attribute type 21 has an invalid length. [ 586.750069][T11568] netlink: 'syz.2.2599': attribute type 6 has an invalid length. [ 586.770215][T11568] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2599'. [ 590.354490][T11612] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 590.695138][T11612] device syzkaller0 entered promiscuous mode [ 590.723833][T11616] netlink: 'syz.0.2610': attribute type 21 has an invalid length. [ 590.746661][T11616] netlink: 'syz.0.2610': attribute type 6 has an invalid length. [ 590.761810][T11616] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2610'. [ 594.659841][T11660] device syzkaller0 entered promiscuous mode [ 594.894208][T11665] netlink: 'syz.3.2629': attribute type 21 has an invalid length. [ 594.954010][T11665] netlink: 'syz.3.2629': attribute type 6 has an invalid length. [ 594.988209][T11665] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2629'. [ 596.512110][T11702] netlink: 'syz.1.2640': attribute type 15 has an invalid length. [ 597.327581][T11723] netlink: 'syz.4.2645': attribute type 21 has an invalid length. [ 597.396240][T11723] netlink: 'syz.4.2645': attribute type 6 has an invalid length. [ 597.440782][T11723] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2645'. [ 598.682368][T11746] netlink: 'syz.4.2655': attribute type 15 has an invalid length. [ 599.491282][T11757] device syzkaller0 entered promiscuous mode [ 599.774336][T11770] netlink: 766 bytes leftover after parsing attributes in process `syz.4.2665'. [ 600.984702][T11791] netlink: 'syz.3.2674': attribute type 15 has an invalid length. [ 602.748074][T11833] device syzkaller0 entered promiscuous mode [ 603.125594][T11841] netlink: 'syz.3.2688': attribute type 10 has an invalid length. [ 603.318355][T11847] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 603.545920][T11847] device syzkaller0 entered promiscuous mode [ 608.426949][T11903] netlink: 'syz.4.2710': attribute type 5 has an invalid length. [ 608.441030][T11903] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2710'. [ 610.393135][T11943] netlink: 'syz.2.2723': attribute type 5 has an invalid length. [ 610.430573][T11943] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2723'. [ 611.758847][T11966] netlink: 'syz.2.2732': attribute type 10 has an invalid length. [ 611.813822][T11964] netlink: 'syz.2.2732': attribute type 10 has an invalid length. [ 612.369322][T11968] netlink: 'syz.0.2736': attribute type 10 has an invalid length. [ 612.388900][T11968] netlink: 'syz.0.2736': attribute type 4 has an invalid length. [ 612.402753][T11968] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2736'. [ 612.820667][T11984] netlink: 'syz.0.2739': attribute type 5 has an invalid length. [ 612.997973][T11984] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2739'. [ 616.005535][T12024] netlink: 'syz.1.2753': attribute type 5 has an invalid length. [ 616.021941][T12024] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2753'. [ 617.979126][T12052] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 619.232522][T12055] netlink: 'syz.1.2761': attribute type 10 has an invalid length. [ 619.253411][T12055] batman_adv: batadv0: Removing interface: team0 [ 619.291598][T12055] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.657294][T12062] netlink: 'syz.3.2763': attribute type 3 has an invalid length. [ 619.665555][T12062] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2763'. [ 619.686202][T12065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 619.693462][T12065] IPv6: NLM_F_CREATE should be set when creating new route [ 619.700954][T12065] IPv6: NLM_F_CREATE should be set when creating new route [ 619.708290][T12065] IPv6: NLM_F_CREATE should be set when creating new route [ 620.008684][T12071] netlink: 'syz.3.2767': attribute type 5 has an invalid length. [ 620.037268][T12071] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2767'. [ 620.093482][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 623.519033][T12116] device syzkaller0 entered promiscuous mode [ 624.320915][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.327346][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.884794][T12123] netlink: 'syz.3.2785': attribute type 5 has an invalid length. [ 629.892941][T12123] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2785'. [ 629.916910][T12159] netlink: 'syz.1.2802': attribute type 21 has an invalid length. [ 629.924789][T12159] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2802'. [ 629.986188][T12159] netlink: 'syz.1.2802': attribute type 4 has an invalid length. [ 629.993974][T12159] netlink: 'syz.1.2802': attribute type 5 has an invalid length. [ 630.063845][T12159] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2802'. [ 636.856803][ T3622] udevd[3622]: worker [11252] terminated by signal 33 (Unknown signal 33) [ 636.865411][ T3622] udevd[3622]: worker [11252] failed while handling '/devices/virtual/block/loop3' [ 638.735365][T12291] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2849'. [ 642.472926][T12379] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 642.521531][T12379] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 643.652066][T12394] delete_channel: no stack [ 643.873541][T12401] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2890'. [ 648.080232][T12467] netlink: 114704 bytes leftover after parsing attributes in process `syz.0.2912'. [ 648.686540][T12476] device syzkaller0 entered promiscuous mode [ 648.775843][T12478] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2915'. [ 651.241717][T12504] netlink: 'syz.0.2923': attribute type 10 has an invalid length. [ 651.953672][T12515] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2928'. [ 652.280008][T12525] netlink: 'syz.1.2933': attribute type 21 has an invalid length. [ 658.405355][T12657] netlink: 118396 bytes leftover after parsing attributes in process `syz.0.2985'. [ 662.061094][T12725] netlink: 'syz.0.3010': attribute type 10 has an invalid length. [ 662.119285][T12725] device bond_slave_0 left promiscuous mode [ 662.128751][T12725] device bond_slave_1 left promiscuous mode [ 662.139690][T12725] device netdevsim0 left promiscuous mode [ 662.157958][T12725] device batadv_slave_0 left promiscuous mode [ 663.771169][T12768] netlink: 'syz.0.3025': attribute type 39 has an invalid length. [ 663.790920][T12764] device syzkaller0 entered promiscuous mode [ 664.640221][T12786] netlink: 'syz.4.3033': attribute type 10 has an invalid length. [ 664.907794][T12786] team0: Port device vlan0 added [ 664.935673][T12792] device sit0 left promiscuous mode [ 665.500091][T12795] device sit0 entered promiscuous mode [ 668.375377][T12841] device lo left promiscuous mode [ 668.505483][T12846] device lo entered promiscuous mode [ 668.555157][T12846] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 672.551014][T12928] netlink: 'syz.1.3087': attribute type 39 has an invalid length. [ 672.754544][T12931] netlink: 'syz.4.3088': attribute type 10 has an invalid length. [ 672.815143][T12931] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.007298][T12932] netlink: 'syz.4.3088': attribute type 10 has an invalid length. [ 673.382892][T12948] netlink: 'syz.1.3095': attribute type 2 has an invalid length. [ 673.434002][T12952] netlink: 'syz.1.3095': attribute type 1 has an invalid length. [ 673.480145][T12948] device 2 entered promiscuous mode [ 673.526417][T12952] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3095'. [ 673.577294][T12953] netlink: 114704 bytes leftover after parsing attributes in process `syz.4.3097'. [ 673.673687][T12953] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 674.526709][T12976] netlink: 'syz.2.3105': attribute type 10 has an invalid length. [ 674.603035][T12977] sctp: [Deprecated]: syz.2.3105 (pid 12977) Use of int in max_burst socket option deprecated. [ 674.603035][T12977] Use struct sctp_assoc_value instead [ 674.701859][T12976] team0: Port device geneve1 removed [ 674.950648][T12987] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 675.593780][T13008] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3119'. [ 675.676979][T13008] netlink: 114704 bytes leftover after parsing attributes in process `syz.1.3119'. [ 677.484925][T13002] netlink: 'syz.0.3115': attribute type 39 has an invalid length. [ 677.499010][T13008] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 678.957866][T13051] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3136'. [ 679.017609][T13053] netlink: 'syz.3.3137': attribute type 10 has an invalid length. [ 679.788455][T13076] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3145'. [ 683.634316][T13108] netlink: 'syz.2.3156': attribute type 10 has an invalid length. [ 683.782866][T13108] device hsr_slave_0 left promiscuous mode [ 683.816316][T13108] device hsr_slave_1 left promiscuous mode [ 684.213599][T13115] netlink: 'syz.4.3158': attribute type 4 has an invalid length. [ 684.793444][T13135] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3166'. [ 685.474426][T13154] netlink: 'syz.1.3171': attribute type 10 has an invalid length. [ 685.486737][T13154] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3171'. [ 685.837037][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.843443][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.223976][T13172] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3177'. [ 687.674149][T13201] IPv6: Can't replace route, no match found [ 689.079440][T13246] sctp: [Deprecated]: syz.2.3207 (pid 13246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 689.079440][T13246] Use struct sctp_sack_info instead [ 689.304292][T13251] netlink: 'syz.3.3210': attribute type 29 has an invalid length. [ 689.341180][T13251] netlink: 'syz.3.3210': attribute type 29 has an invalid length. [ 689.942968][T13273] device veth0_vlan left promiscuous mode [ 689.949813][T13273] device veth0_vlan entered promiscuous mode [ 689.965750][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 689.976198][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 690.707881][T13298] netlink: 'syz.1.3232': attribute type 39 has an invalid length. [ 690.874377][T13306] netlink: 'syz.0.3235': attribute type 28 has an invalid length. [ 691.578676][T13325] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 691.627340][T13325] netlink: 'syz.3.3242': attribute type 10 has an invalid length. [ 691.711811][T13325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.736188][T13325] device batadv0 entered promiscuous mode [ 691.752927][T13325] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 691.877759][T13335] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.3246'. [ 691.879075][T13333] Y4`Ҙ: renamed from lo [ 691.959895][T13335] netlink: 114704 bytes leftover after parsing attributes in process `syz.0.3246'. [ 692.008331][T13335] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 692.028171][T13335] CPU: 0 PID: 13335 Comm: syz.0.3246 Not tainted 6.1.131-syzkaller #0 [ 692.036387][T13335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 692.046488][T13335] Call Trace: [ 692.049793][T13335] [ 692.052838][T13335] dump_stack_lvl+0x1e3/0x2cb [ 692.057611][T13335] ? nf_tcp_handle_invalid+0x647/0x647 [ 692.063125][T13335] ? panic+0x764/0x764 [ 692.067245][T13335] sysfs_warn_dup+0x8a/0xa0 [ 692.071795][T13335] sysfs_do_create_link_sd+0xbe/0x100 [ 692.077198][T13335] device_add+0x7d4/0xfd0 [ 692.081567][T13335] wiphy_register+0x1e91/0x2d10 [ 692.086488][T13335] ? cfg80211_event_work+0x40/0x40 [ 692.091640][T13335] ? minstrel_ht_alloc+0x874/0x9e0 [ 692.096789][T13335] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 692.102920][T13335] ieee80211_register_hw+0x31bd/0x3f10 [ 692.108432][T13335] ? ieee80211_register_hw+0x11d1/0x3f10 [ 692.114111][T13335] ? ieee80211_register_hw+0x10d1/0x3f10 [ 692.119791][T13335] ? ieee80211_tasklet_handler+0x20/0x20 [ 692.125453][T13335] ? __debug_object_init+0xe9/0x450 [ 692.130682][T13335] ? memset+0x1f/0x40 [ 692.134707][T13335] ? __hrtimer_init+0x181/0x260 [ 692.139606][T13335] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 692.145392][T13335] hwsim_new_radio_nl+0xc54/0x1190 [ 692.150557][T13335] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 692.156942][T13335] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 692.163316][T13335] genl_rcv_msg+0xbfa/0xf50 [ 692.167892][T13335] ? genl_bind+0x400/0x400 [ 692.172368][T13335] ? read_lock_is_recursive+0x10/0x10 [ 692.177797][T13335] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 692.184184][T13335] netlink_rcv_skb+0x1cd/0x410 [ 692.188988][T13335] ? genl_bind+0x400/0x400 [ 692.193448][T13335] ? netlink_ack+0x12a0/0x12a0 [ 692.198268][T13335] genl_rcv+0x24/0x40 [ 692.202279][T13335] netlink_unicast+0x7e2/0x970 [ 692.207084][T13335] ? netlink_detachskb+0x90/0x90 [ 692.212050][T13335] ? find_vmap_area+0xf3/0x100 [ 692.216860][T13335] ? __phys_addr_symbol+0x2b/0x70 [ 692.221926][T13335] ? __check_object_size+0x4dd/0xa30 [ 692.227250][T13335] ? bpf_lsm_netlink_send+0x5/0x10 [ 692.232409][T13335] netlink_sendmsg+0xa26/0xd60 [ 692.237227][T13335] ? netlink_getsockopt+0x580/0x580 [ 692.242469][T13335] ? aa_sock_msg_perm+0x91/0x150 [ 692.247446][T13335] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 692.252776][T13335] ? security_socket_sendmsg+0x7d/0xa0 [ 692.258282][T13335] ? netlink_getsockopt+0x580/0x580 [ 692.263517][T13335] ____sys_sendmsg+0x5d3/0x9a0 [ 692.268325][T13335] ? __sys_sendmsg_sock+0x30/0x30 [ 692.273402][T13335] __sys_sendmsg+0x2a9/0x390 [ 692.278035][T13335] ? ____sys_sendmsg+0x9a0/0x9a0 [ 692.283042][T13335] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 692.289075][T13335] ? syscall_enter_from_user_mode+0x2e/0x230 [ 692.295104][T13335] ? lockdep_hardirqs_on+0x94/0x130 [ 692.300337][T13335] ? syscall_enter_from_user_mode+0x2e/0x230 [ 692.306357][T13335] do_syscall_64+0x3b/0xb0 [ 692.310795][T13335] ? clear_bhb_loop+0x45/0xa0 [ 692.315508][T13335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.321431][T13335] RIP: 0033:0x7fba46f8d169 [ 692.325891][T13335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.345540][T13335] RSP: 002b:00007fba47d65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.354001][T13335] RAX: ffffffffffffffda RBX: 00007fba471a6080 RCX: 00007fba46f8d169 [ 692.362008][T13335] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000c [ 692.370017][T13335] RBP: 00007fba4700e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 692.378021][T13335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.386022][T13335] R13: 0000000000000000 R14: 00007fba471a6080 R15: 00007fff49eb0b88 [ 692.394063][T13335] [ 692.869470][T13351] netlink: 'syz.2.3251': attribute type 10 has an invalid length. [ 692.961592][T13351] bond0: (slave netdevsim0): Releasing backup interface [ 693.024937][T13351] team0: Port device netdevsim0 added [ 693.050893][T13357] netlink: 'syz.2.3251': attribute type 10 has an invalid length. [ 693.093749][T13357] team0: Port device netdevsim0 removed [ 693.115182][T13357] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 693.530883][T13377] netlink: 'syz.0.3258': attribute type 2 has an invalid length. [ 693.546832][T13377] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.3258'. [ 693.564614][T13376] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 696.822185][T13389] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.3266'. [ 697.138569][T13399] netlink: 'syz.4.3269': attribute type 39 has an invalid length. [ 697.187583][T13399] device veth0_macvtap left promiscuous mode [ 697.773863][T13401] netlink: 'syz.0.3271': attribute type 21 has an invalid length. [ 697.787858][T13401] netlink: 'syz.0.3271': attribute type 1 has an invalid length. [ 697.860612][T13408] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3274'. [ 698.092613][T13414] netlink: 14566 bytes leftover after parsing attributes in process `syz.2.3277'. [ 698.962698][T13441] netlink: 'syz.2.3285': attribute type 9 has an invalid length. [ 699.576637][T13465] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 699.583623][T13465] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 699.857920][T13472] netlink: 'syz.3.3299': attribute type 10 has an invalid length. [ 699.883888][T13472] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3299'. [ 699.925301][T13472] device bond_slave_0 left promiscuous mode [ 699.932104][T13472] device bond_slave_1 left promiscuous mode [ 699.941260][T13472] device batadv_slave_0 left promiscuous mode [ 699.947796][T13472] device netdevsim0 left promiscuous mode [ 699.954129][T13472] device batadv0 left promiscuous mode [ 700.008318][T13472] team0: Port device bond0 removed [ 700.015853][T13472] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 701.277072][T13500] netlink: 'syz.4.3309': attribute type 10 has an invalid length. [ 701.665561][T13506] netlink: 114704 bytes leftover after parsing attributes in process `syz.3.3313'. [ 701.862446][T13506] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 702.775338][T13542] netlink: 'syz.3.3324': attribute type 29 has an invalid length. [ 702.850024][T13542] netlink: 'syz.3.3324': attribute type 29 has an invalid length. [ 702.911057][T13547] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.3325'. [ 703.046769][T13547] netlink: 114704 bytes leftover after parsing attributes in process `syz.0.3325'. [ 703.252755][T13547] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 703.296284][T13547] CPU: 1 PID: 13547 Comm: syz.0.3325 Not tainted 6.1.131-syzkaller #0 [ 703.304513][T13547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 703.314604][T13547] Call Trace: [ 703.317933][T13547] [ 703.320892][T13547] dump_stack_lvl+0x1e3/0x2cb [ 703.325577][T13547] ? nf_tcp_handle_invalid+0x647/0x647 [ 703.331052][T13547] ? panic+0x764/0x764 [ 703.335166][T13547] ? sysfs_warn_dup+0x61/0xa0 [ 703.339885][T13547] sysfs_warn_dup+0x8a/0xa0 [ 703.344435][T13547] sysfs_do_create_link_sd+0xbe/0x100 [ 703.349942][T13547] device_add+0x7d4/0xfd0 [ 703.354329][T13547] wiphy_register+0x1e91/0x2d10 [ 703.359239][T13547] ? cfg80211_event_work+0x40/0x40 [ 703.364476][T13547] ? minstrel_ht_alloc+0x874/0x9e0 [ 703.369728][T13547] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 703.375926][T13547] ieee80211_register_hw+0x31bd/0x3f10 [ 703.381449][T13547] ? ieee80211_register_hw+0x11d1/0x3f10 [ 703.387087][T13547] ? ieee80211_register_hw+0x10d1/0x3f10 [ 703.392728][T13547] ? ieee80211_tasklet_handler+0x20/0x20 [ 703.398367][T13547] ? __debug_object_init+0xe9/0x450 [ 703.403593][T13547] ? memset+0x1f/0x40 [ 703.407600][T13547] ? __hrtimer_init+0x181/0x260 [ 703.412478][T13547] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 703.418220][T13547] hwsim_new_radio_nl+0xc54/0x1190 [ 703.423347][T13547] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 703.429712][T13547] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 703.436091][T13547] genl_rcv_msg+0xbfa/0xf50 [ 703.440648][T13547] ? genl_bind+0x400/0x400 [ 703.445139][T13547] ? read_lock_is_recursive+0x10/0x10 [ 703.450565][T13547] ? perf_trace_preemptirq_template+0x2d1/0x3d0 [ 703.456851][T13547] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 703.463277][T13547] netlink_rcv_skb+0x1cd/0x410 [ 703.468085][T13547] ? genl_bind+0x400/0x400 [ 703.472539][T13547] ? netlink_ack+0x12a0/0x12a0 [ 703.477332][T13547] ? lockdep_hardirqs_on+0x94/0x130 [ 703.482593][T13547] genl_rcv+0x24/0x40 [ 703.486632][T13547] netlink_unicast+0x7e2/0x970 [ 703.491543][T13547] ? netlink_detachskb+0x90/0x90 [ 703.496520][T13547] ? find_vmap_area+0xf3/0x100 [ 703.501327][T13547] ? __phys_addr_symbol+0x2b/0x70 [ 703.506424][T13547] ? __check_object_size+0x4dd/0xa30 [ 703.511742][T13547] ? bpf_lsm_netlink_send+0x5/0x10 [ 703.516895][T13547] netlink_sendmsg+0xa26/0xd60 [ 703.521704][T13547] ? netlink_getsockopt+0x580/0x580 [ 703.526929][T13547] ? apparmor_socket_sendmsg+0xe/0x30 [ 703.532345][T13547] ? aa_sock_msg_perm+0x91/0x150 [ 703.537316][T13547] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 703.542636][T13547] ? security_socket_sendmsg+0x7d/0xa0 [ 703.548133][T13547] ? netlink_getsockopt+0x580/0x580 [ 703.553361][T13547] ____sys_sendmsg+0x5d3/0x9a0 [ 703.558171][T13547] ? __sys_sendmsg_sock+0x30/0x30 [ 703.563424][T13547] __sys_sendmsg+0x2a9/0x390 [ 703.568048][T13547] ? ____sys_sendmsg+0x9a0/0x9a0 [ 703.573054][T13547] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 703.579092][T13547] ? syscall_enter_from_user_mode+0x2e/0x230 [ 703.585128][T13547] ? lockdep_hardirqs_on+0x94/0x130 [ 703.590357][T13547] ? syscall_enter_from_user_mode+0x2e/0x230 [ 703.596393][T13547] do_syscall_64+0x3b/0xb0 [ 703.600836][T13547] ? clear_bhb_loop+0x45/0xa0 [ 703.605542][T13547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 703.611468][T13547] RIP: 0033:0x7fba46f8d169 [ 703.615907][T13547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.635543][T13547] RSP: 002b:00007fba47d86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.644003][T13547] RAX: ffffffffffffffda RBX: 00007fba471a5fa0 RCX: 00007fba46f8d169 [ 703.652008][T13547] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000d [ 703.660001][T13547] RBP: 00007fba4700e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 703.667997][T13547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.675995][T13547] R13: 0000000000000000 R14: 00007fba471a5fa0 R15: 00007fff49eb0b88 [ 703.684018][T13547] [ 704.533088][T13567] bond0: (slave geneve0): Error: Slave device does not support XDP [ 705.573525][T13588] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 706.332791][T13613] netlink: 'syz.0.3346': attribute type 10 has an invalid length. [ 706.363521][T13613] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.381278][T13613] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.391041][T13613] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.400967][T13613] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.395939][T13641] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.3358'. [ 707.528211][T13643] netlink: 114704 bytes leftover after parsing attributes in process `syz.4.3358'. [ 707.745245][T13643] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 707.776122][T13643] CPU: 0 PID: 13643 Comm: syz.4.3358 Not tainted 6.1.131-syzkaller #0 [ 707.784347][T13643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 707.794436][T13643] Call Trace: [ 707.797736][T13643] [ 707.800695][T13643] dump_stack_lvl+0x1e3/0x2cb [ 707.805400][T13643] ? nf_tcp_handle_invalid+0x647/0x647 [ 707.810877][T13643] ? panic+0x764/0x764 [ 707.815003][T13643] sysfs_warn_dup+0x8a/0xa0 [ 707.819556][T13643] sysfs_do_create_link_sd+0xbe/0x100 [ 707.824945][T13643] device_add+0x7d4/0xfd0 [ 707.829298][T13643] wiphy_register+0x1e91/0x2d10 [ 707.834176][T13643] ? cfg80211_event_work+0x40/0x40 [ 707.839305][T13643] ? minstrel_ht_alloc+0x874/0x9e0 [ 707.844428][T13643] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 707.850515][T13643] ieee80211_register_hw+0x31bd/0x3f10 [ 707.855997][T13643] ? ieee80211_register_hw+0x11d1/0x3f10 [ 707.861643][T13643] ? ieee80211_register_hw+0x10d1/0x3f10 [ 707.867288][T13643] ? ieee80211_tasklet_handler+0x20/0x20 [ 707.872927][T13643] ? __debug_object_init+0xe9/0x450 [ 707.878139][T13643] ? memset+0x1f/0x40 [ 707.882128][T13643] ? __hrtimer_init+0x181/0x260 [ 707.886989][T13643] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 707.892738][T13643] hwsim_new_radio_nl+0xc54/0x1190 [ 707.897859][T13643] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 707.904217][T13643] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 707.910666][T13643] genl_rcv_msg+0xbfa/0xf50 [ 707.915183][T13643] ? genl_bind+0x400/0x400 [ 707.919619][T13643] ? read_lock_is_recursive+0x10/0x10 [ 707.925011][T13643] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 707.931450][T13643] ? refcount_inc+0x80/0x80 [ 707.935988][T13643] netlink_rcv_skb+0x1cd/0x410 [ 707.940793][T13643] ? genl_bind+0x400/0x400 [ 707.945325][T13643] ? netlink_ack+0x12a0/0x12a0 [ 707.950125][T13643] genl_rcv+0x24/0x40 [ 707.954126][T13643] netlink_unicast+0x7e2/0x970 [ 707.958944][T13643] ? netlink_detachskb+0x90/0x90 [ 707.963893][T13643] ? find_vmap_area+0xf3/0x100 [ 707.968697][T13643] ? __phys_addr_symbol+0x2b/0x70 [ 707.973736][T13643] ? __check_object_size+0x4dd/0xa30 [ 707.979036][T13643] ? bpf_lsm_netlink_send+0x5/0x10 [ 707.984174][T13643] netlink_sendmsg+0xa26/0xd60 [ 707.988957][T13643] ? netlink_getsockopt+0x580/0x580 [ 707.994161][T13643] ? aa_sock_msg_perm+0x91/0x150 [ 707.999108][T13643] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 708.004403][T13643] ? security_socket_sendmsg+0x7d/0xa0 [ 708.009880][T13643] ? netlink_getsockopt+0x580/0x580 [ 708.015106][T13643] ____sys_sendmsg+0x5d3/0x9a0 [ 708.019883][T13643] ? __sys_sendmsg_sock+0x30/0x30 [ 708.024929][T13643] __sys_sendmsg+0x2a9/0x390 [ 708.029531][T13643] ? ____sys_sendmsg+0x9a0/0x9a0 [ 708.034505][T13643] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 708.040518][T13643] ? syscall_enter_from_user_mode+0x2e/0x230 [ 708.046507][T13643] ? lockdep_hardirqs_on+0x94/0x130 [ 708.051713][T13643] ? syscall_enter_from_user_mode+0x2e/0x230 [ 708.057709][T13643] do_syscall_64+0x3b/0xb0 [ 708.062139][T13643] ? clear_bhb_loop+0x45/0xa0 [ 708.066826][T13643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.072728][T13643] RIP: 0033:0x7f547498d169 [ 708.077151][T13643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.096759][T13643] RSP: 002b:00007f54747de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.105182][T13643] RAX: ffffffffffffffda RBX: 00007f5474ba6160 RCX: 00007f547498d169 [ 708.113158][T13643] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000d [ 708.121133][T13643] RBP: 00007f5474a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 708.129119][T13643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.137094][T13643] R13: 0000000000000000 R14: 00007f5474ba6160 R15: 00007fffe154af68 [ 708.145195][T13643] [ 709.939005][T13683] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 709.955915][T13683] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 711.105594][T13685] netlink: 114704 bytes leftover after parsing attributes in process `syz.2.3376'. [ 711.237214][T13687] netlink: 'syz.1.3377': attribute type 21 has an invalid length. [ 711.251218][T13687] netlink: 'syz.1.3377': attribute type 1 has an invalid length. [ 711.355823][T13685] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 711.583907][T13696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 711.591432][T13696] IPv6: NLM_F_CREATE should be set when creating new route [ 711.600735][T13696] IPv6: NLM_F_CREATE should be set when creating new route [ 712.318352][T13718] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 712.352613][T13718] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 713.069020][T13730] sock: sock_set_timeout: `syz.1.3395' (pid 13730) tries to set negative timeout [ 713.289478][T13736] delete_channel: no stack [ 713.400815][T13741] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3400'. [ 713.926607][T13757] netlink: 'syz.3.3406': attribute type 29 has an invalid length. [ 713.956548][T13757] netlink: 'syz.3.3406': attribute type 29 has an invalid length. [ 714.116402][T13757] netlink: 'syz.3.3406': attribute type 29 has an invalid length. [ 714.134954][T13763] netlink: 'syz.3.3406': attribute type 29 has an invalid length. [ 714.297623][T13765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.326367][T13765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.357805][T13765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.387720][T13765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.425156][T13765] batman_adv: batadv0: Interface deactivated: wlan0 [ 714.446253][T13765] batman_adv: batadv0: Removing interface: wlan0 [ 715.110966][T13771] netlink: 'syz.4.3411': attribute type 10 has an invalid length. [ 715.505688][T13784] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.3419'. [ 715.574258][T13784] netlink: 114704 bytes leftover after parsing attributes in process `syz.1.3419'. [ 715.640480][T13784] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 715.649209][T13784] CPU: 1 PID: 13784 Comm: syz.1.3419 Not tainted 6.1.131-syzkaller #0 [ 715.657417][T13784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 715.667499][T13784] Call Trace: [ 715.670807][T13784] [ 715.673769][T13784] dump_stack_lvl+0x1e3/0x2cb [ 715.678486][T13784] ? nf_tcp_handle_invalid+0x647/0x647 [ 715.683986][T13784] ? panic+0x764/0x764 [ 715.688112][T13784] sysfs_warn_dup+0x8a/0xa0 [ 715.692654][T13784] sysfs_do_create_link_sd+0xbe/0x100 [ 715.698062][T13784] device_add+0x7d4/0xfd0 [ 715.702446][T13784] wiphy_register+0x1e91/0x2d10 [ 715.707344][T13784] ? cfg80211_event_work+0x40/0x40 [ 715.712482][T13784] ? minstrel_ht_alloc+0x874/0x9e0 [ 715.717631][T13784] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 715.723729][T13784] ieee80211_register_hw+0x31bd/0x3f10 [ 715.729232][T13784] ? ieee80211_register_hw+0x11d1/0x3f10 [ 715.734901][T13784] ? ieee80211_register_hw+0x10d1/0x3f10 [ 715.740684][T13784] ? ieee80211_tasklet_handler+0x20/0x20 [ 715.746341][T13784] ? __debug_object_init+0xe9/0x450 [ 715.751580][T13784] ? memset+0x1f/0x40 [ 715.755567][T13784] ? __hrtimer_init+0x181/0x260 [ 715.760438][T13784] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 715.766220][T13784] hwsim_new_radio_nl+0xc54/0x1190 [ 715.771375][T13784] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 715.777735][T13784] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 715.784074][T13784] genl_rcv_msg+0xbfa/0xf50 [ 715.788594][T13784] ? genl_bind+0x400/0x400 [ 715.793025][T13784] ? read_lock_is_recursive+0x10/0x10 [ 715.798430][T13784] ? ref_tracker_free+0x638/0x7d0 [ 715.803563][T13784] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 715.809920][T13784] ? refcount_inc+0x80/0x80 [ 715.814480][T13784] netlink_rcv_skb+0x1cd/0x410 [ 715.819278][T13784] ? genl_bind+0x400/0x400 [ 715.823702][T13784] ? netlink_ack+0x12a0/0x12a0 [ 715.828511][T13784] genl_rcv+0x24/0x40 [ 715.832523][T13784] netlink_unicast+0x7e2/0x970 [ 715.837299][T13784] ? netlink_detachskb+0x90/0x90 [ 715.842245][T13784] ? find_vmap_area+0xf3/0x100 [ 715.847024][T13784] ? __phys_addr_symbol+0x2b/0x70 [ 715.852059][T13784] ? __check_object_size+0x4dd/0xa30 [ 715.857392][T13784] ? bpf_lsm_netlink_send+0x5/0x10 [ 715.862551][T13784] netlink_sendmsg+0xa26/0xd60 [ 715.867362][T13784] ? netlink_getsockopt+0x580/0x580 [ 715.872605][T13784] ? aa_sock_msg_perm+0x91/0x150 [ 715.877580][T13784] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 715.882907][T13784] ? security_socket_sendmsg+0x7d/0xa0 [ 715.888412][T13784] ? netlink_getsockopt+0x580/0x580 [ 715.893636][T13784] ____sys_sendmsg+0x5d3/0x9a0 [ 715.898442][T13784] ? __sys_sendmsg_sock+0x30/0x30 [ 715.903509][T13784] __sys_sendmsg+0x2a9/0x390 [ 715.908127][T13784] ? ____sys_sendmsg+0x9a0/0x9a0 [ 715.913089][T13784] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 715.919391][T13784] ? perf_trace_run_bpf_submit+0xf7/0x1d0 [ 715.925157][T13784] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 715.931183][T13784] ? syscall_enter_from_user_mode+0x2e/0x230 [ 715.937194][T13784] ? lockdep_hardirqs_on+0x94/0x130 [ 715.942417][T13784] ? syscall_enter_from_user_mode+0x2e/0x230 [ 715.948426][T13784] do_syscall_64+0x3b/0xb0 [ 715.952863][T13784] ? clear_bhb_loop+0x45/0xa0 [ 715.957564][T13784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.963481][T13784] RIP: 0033:0x7f10eab8d169 [ 715.967922][T13784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.987555][T13784] RSP: 002b:00007f10eb9de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.995990][T13784] RAX: ffffffffffffffda RBX: 00007f10eada5fa0 RCX: 00007f10eab8d169 [ 716.003985][T13784] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000e [ 716.011988][T13784] RBP: 00007f10eac0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 716.020039][T13784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.028036][T13784] R13: 0000000000000000 R14: 00007f10eada5fa0 R15: 00007ffeb4e5a3a8 [ 716.036053][T13784] [ 716.066429][T13800] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 716.106586][T13800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.266973][T13805] netlink: 766 bytes leftover after parsing attributes in process `syz.2.3424'. [ 716.356363][T13802] netlink: 'syz.0.3425': attribute type 21 has an invalid length. [ 716.388517][T13802] netlink: 'syz.0.3425': attribute type 4 has an invalid length. [ 716.471122][T13809] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3425'. [ 717.001547][T13822] netlink: 'syz.2.3431': attribute type 39 has an invalid length. [ 717.532572][T13832] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 717.553528][T13832] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 717.735459][T13843] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 717.742139][T13843] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 717.754948][T13839] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3437'. [ 724.031452][ T4262] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 724.202744][T13930] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.3468'. [ 724.494311][T13935] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.3470'. [ 724.547925][T13941] netlink: 114704 bytes leftover after parsing attributes in process `syz.3.3470'. [ 724.570566][T13941] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 724.596520][T13941] CPU: 0 PID: 13941 Comm: syz.3.3470 Not tainted 6.1.131-syzkaller #0 [ 724.604750][T13941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 724.614845][T13941] Call Trace: [ 724.618153][T13941] [ 724.621109][T13941] dump_stack_lvl+0x1e3/0x2cb [ 724.625827][T13941] ? nf_tcp_handle_invalid+0x647/0x647 [ 724.631322][T13941] ? panic+0x764/0x764 [ 724.635460][T13941] sysfs_warn_dup+0x8a/0xa0 [ 724.640012][T13941] sysfs_do_create_link_sd+0xbe/0x100 [ 724.645424][T13941] device_add+0x7d4/0xfd0 [ 724.649805][T13941] wiphy_register+0x1e91/0x2d10 [ 724.654803][T13941] ? cfg80211_event_work+0x40/0x40 [ 724.659960][T13941] ? minstrel_ht_alloc+0x874/0x9e0 [ 724.665124][T13941] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 724.671242][T13941] ieee80211_register_hw+0x31bd/0x3f10 [ 724.676758][T13941] ? ieee80211_register_hw+0x11d1/0x3f10 [ 724.682432][T13941] ? ieee80211_register_hw+0x10d1/0x3f10 [ 724.688110][T13941] ? ieee80211_tasklet_handler+0x20/0x20 [ 724.693800][T13941] ? __debug_object_init+0xe9/0x450 [ 724.699069][T13941] ? memset+0x1f/0x40 [ 724.703088][T13941] ? __hrtimer_init+0x181/0x260 [ 724.707981][T13941] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 724.713772][T13941] hwsim_new_radio_nl+0xc54/0x1190 [ 724.718932][T13941] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 724.725313][T13941] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 724.731692][T13941] genl_rcv_msg+0xbfa/0xf50 [ 724.736256][T13941] ? genl_bind+0x400/0x400 [ 724.740722][T13941] ? read_lock_is_recursive+0x10/0x10 [ 724.746141][T13941] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 724.752511][T13941] netlink_rcv_skb+0x1cd/0x410 [ 724.757288][T13941] ? genl_bind+0x400/0x400 [ 724.761742][T13941] ? netlink_ack+0x12a0/0x12a0 [ 724.766542][T13941] genl_rcv+0x24/0x40 [ 724.770573][T13941] netlink_unicast+0x7e2/0x970 [ 724.775370][T13941] ? netlink_detachskb+0x90/0x90 [ 724.780326][T13941] ? find_vmap_area+0xf3/0x100 [ 724.785127][T13941] ? __phys_addr_symbol+0x2b/0x70 [ 724.790168][T13941] ? __check_object_size+0x4dd/0xa30 [ 724.795469][T13941] ? bpf_lsm_netlink_send+0x5/0x10 [ 724.800624][T13941] netlink_sendmsg+0xa26/0xd60 [ 724.805412][T13941] ? netlink_getsockopt+0x580/0x580 [ 724.810624][T13941] ? aa_sock_msg_perm+0x91/0x150 [ 724.815570][T13941] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 724.820874][T13941] ? security_socket_sendmsg+0x7d/0xa0 [ 724.826366][T13941] ? netlink_getsockopt+0x580/0x580 [ 724.831590][T13941] ____sys_sendmsg+0x5d3/0x9a0 [ 724.836817][T13941] ? __sys_sendmsg_sock+0x30/0x30 [ 724.841879][T13941] __sys_sendmsg+0x2a9/0x390 [ 724.846485][T13941] ? ____sys_sendmsg+0x9a0/0x9a0 [ 724.851460][T13941] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 724.857468][T13941] ? syscall_enter_from_user_mode+0x2e/0x230 [ 724.863457][T13941] ? lockdep_hardirqs_on+0x94/0x130 [ 724.868671][T13941] ? syscall_enter_from_user_mode+0x2e/0x230 [ 724.874667][T13941] do_syscall_64+0x3b/0xb0 [ 724.879093][T13941] ? clear_bhb_loop+0x45/0xa0 [ 724.883781][T13941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 724.889700][T13941] RIP: 0033:0x7f2ec238d169 [ 724.894119][T13941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.913734][T13941] RSP: 002b:00007f2ec318a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 724.922159][T13941] RAX: ffffffffffffffda RBX: 00007f2ec25a6080 RCX: 00007f2ec238d169 [ 724.930135][T13941] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000e [ 724.938110][T13941] RBP: 00007f2ec240e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 724.946086][T13941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.954065][T13941] R13: 0000000000000000 R14: 00007f2ec25a6080 R15: 00007ffc887e6da8 [ 724.962056][T13941] [ 725.068713][T13949] device sit0 left promiscuous mode [ 725.217236][T13951] device sit0 entered promiscuous mode [ 725.971501][T13959] device syzkaller0 entered promiscuous mode [ 728.503147][T13988] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 729.082452][T14008] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3491'. [ 732.900199][T14034] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.3498'. [ 732.981670][T14040] netlink: 114704 bytes leftover after parsing attributes in process `syz.4.3498'. [ 733.059489][T14040] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 733.076024][T14040] CPU: 1 PID: 14040 Comm: syz.4.3498 Not tainted 6.1.131-syzkaller #0 [ 733.084258][T14040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 733.094350][T14040] Call Trace: [ 733.097641][T14040] [ 733.100577][T14040] dump_stack_lvl+0x1e3/0x2cb [ 733.105271][T14040] ? nf_tcp_handle_invalid+0x647/0x647 [ 733.110736][T14040] ? panic+0x764/0x764 [ 733.114829][T14040] sysfs_warn_dup+0x8a/0xa0 [ 733.119351][T14040] sysfs_do_create_link_sd+0xbe/0x100 [ 733.124733][T14040] device_add+0x7d4/0xfd0 [ 733.129110][T14040] wiphy_register+0x1e91/0x2d10 [ 733.133990][T14040] ? cfg80211_event_work+0x40/0x40 [ 733.139115][T14040] ? minstrel_ht_alloc+0x874/0x9e0 [ 733.144242][T14040] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 733.150330][T14040] ieee80211_register_hw+0x31bd/0x3f10 [ 733.155817][T14040] ? ieee80211_register_hw+0x11d1/0x3f10 [ 733.161457][T14040] ? ieee80211_register_hw+0x10d1/0x3f10 [ 733.167105][T14040] ? ieee80211_tasklet_handler+0x20/0x20 [ 733.172752][T14040] ? __debug_object_init+0xe9/0x450 [ 733.177962][T14040] ? memset+0x1f/0x40 [ 733.181955][T14040] ? __hrtimer_init+0x181/0x260 [ 733.186822][T14040] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 733.192580][T14040] hwsim_new_radio_nl+0xc54/0x1190 [ 733.197712][T14040] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 733.204067][T14040] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 733.210414][T14040] genl_rcv_msg+0xbfa/0xf50 [ 733.214934][T14040] ? genl_bind+0x400/0x400 [ 733.219376][T14040] ? read_lock_is_recursive+0x10/0x10 [ 733.224774][T14040] ? ref_tracker_free+0x638/0x7d0 [ 733.229815][T14040] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 733.236162][T14040] ? refcount_inc+0x80/0x80 [ 733.240688][T14040] netlink_rcv_skb+0x1cd/0x410 [ 733.245460][T14040] ? genl_bind+0x400/0x400 [ 733.249893][T14040] ? netlink_ack+0x12a0/0x12a0 [ 733.254683][T14040] genl_rcv+0x24/0x40 [ 733.258675][T14040] netlink_unicast+0x7e2/0x970 [ 733.263454][T14040] ? netlink_detachskb+0x90/0x90 [ 733.268396][T14040] ? find_vmap_area+0xf3/0x100 [ 733.273175][T14040] ? __phys_addr_symbol+0x2b/0x70 [ 733.278222][T14040] ? __check_object_size+0x4dd/0xa30 [ 733.283523][T14040] ? bpf_lsm_netlink_send+0x5/0x10 [ 733.288651][T14040] netlink_sendmsg+0xa26/0xd60 [ 733.293447][T14040] ? netlink_getsockopt+0x580/0x580 [ 733.298656][T14040] ? aa_sock_msg_perm+0x91/0x150 [ 733.303616][T14040] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 733.308910][T14040] ? security_socket_sendmsg+0x7d/0xa0 [ 733.314384][T14040] ? netlink_getsockopt+0x580/0x580 [ 733.319594][T14040] ____sys_sendmsg+0x5d3/0x9a0 [ 733.324376][T14040] ? __sys_sendmsg_sock+0x30/0x30 [ 733.329423][T14040] __sys_sendmsg+0x2a9/0x390 [ 733.334021][T14040] ? ____sys_sendmsg+0x9a0/0x9a0 [ 733.339086][T14040] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 733.345110][T14040] ? syscall_enter_from_user_mode+0x2e/0x230 [ 733.351100][T14040] ? syscall_enter_from_user_mode+0x2e/0x230 [ 733.357100][T14040] ? lockdep_hardirqs_on+0x94/0x130 [ 733.362307][T14040] ? syscall_enter_from_user_mode+0x2e/0x230 [ 733.368294][T14040] do_syscall_64+0x3b/0xb0 [ 733.372714][T14040] ? clear_bhb_loop+0x45/0xa0 [ 733.377403][T14040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.383309][T14040] RIP: 0033:0x7f547498d169 [ 733.387731][T14040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.407348][T14040] RSP: 002b:00007f54747ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.415771][T14040] RAX: ffffffffffffffda RBX: 00007f5474ba6080 RCX: 00007f547498d169 [ 733.423747][T14040] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000c [ 733.431720][T14040] RBP: 00007f5474a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 733.439715][T14040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.447690][T14040] R13: 0000000000000000 R14: 00007f5474ba6080 R15: 00007fffe154af68 [ 733.455680][T14040] [ 734.878598][T14079] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3514'. [ 734.960770][T14079] netlink: 114704 bytes leftover after parsing attributes in process `syz.3.3514'. [ 735.123994][T14079] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 735.136540][T14079] CPU: 1 PID: 14079 Comm: syz.3.3514 Not tainted 6.1.131-syzkaller #0 [ 735.144748][T14079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 735.154836][T14079] Call Trace: [ 735.158142][T14079] [ 735.161098][T14079] dump_stack_lvl+0x1e3/0x2cb [ 735.165819][T14079] ? nf_tcp_handle_invalid+0x647/0x647 [ 735.171366][T14079] ? panic+0x764/0x764 [ 735.175480][T14079] sysfs_warn_dup+0x8a/0xa0 [ 735.180014][T14079] sysfs_do_create_link_sd+0xbe/0x100 [ 735.185423][T14079] device_add+0x7d4/0xfd0 [ 735.189829][T14079] wiphy_register+0x1e91/0x2d10 [ 735.194747][T14079] ? cfg80211_event_work+0x40/0x40 [ 735.199891][T14079] ? minstrel_ht_alloc+0x874/0x9e0 [ 735.205025][T14079] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 735.211124][T14079] ieee80211_register_hw+0x31bd/0x3f10 [ 735.216630][T14079] ? ieee80211_register_hw+0x11d1/0x3f10 [ 735.222310][T14079] ? ieee80211_register_hw+0x10d1/0x3f10 [ 735.227969][T14079] ? ieee80211_tasklet_handler+0x20/0x20 [ 735.233602][T14079] ? __debug_object_init+0xe9/0x450 [ 735.238825][T14079] ? memset+0x1f/0x40 [ 735.242861][T14079] ? __hrtimer_init+0x181/0x260 [ 735.247760][T14079] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 735.253518][T14079] hwsim_new_radio_nl+0xc54/0x1190 [ 735.258650][T14079] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 735.265003][T14079] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 735.271347][T14079] genl_rcv_msg+0xbfa/0xf50 [ 735.275873][T14079] ? genl_bind+0x400/0x400 [ 735.280318][T14079] ? read_lock_is_recursive+0x10/0x10 [ 735.285714][T14079] ? lockdep_hardirqs_on+0x94/0x130 [ 735.290926][T14079] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 735.297279][T14079] netlink_rcv_skb+0x1cd/0x410 [ 735.302050][T14079] ? genl_bind+0x400/0x400 [ 735.306476][T14079] ? netlink_ack+0x12a0/0x12a0 [ 735.311261][T14079] genl_rcv+0x24/0x40 [ 735.315251][T14079] netlink_unicast+0x7e2/0x970 [ 735.320035][T14079] ? netlink_detachskb+0x90/0x90 [ 735.324980][T14079] ? find_vmap_area+0xf3/0x100 [ 735.329761][T14079] ? __phys_addr_symbol+0x2b/0x70 [ 735.334800][T14079] ? __check_object_size+0x4dd/0xa30 [ 735.340100][T14079] ? bpf_lsm_netlink_send+0x5/0x10 [ 735.345224][T14079] netlink_sendmsg+0xa26/0xd60 [ 735.350008][T14079] ? netlink_getsockopt+0x580/0x580 [ 735.355213][T14079] ? aa_sock_msg_perm+0x91/0x150 [ 735.360156][T14079] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 735.365450][T14079] ? security_socket_sendmsg+0x7d/0xa0 [ 735.370919][T14079] ? netlink_getsockopt+0x580/0x580 [ 735.376128][T14079] ____sys_sendmsg+0x5d3/0x9a0 [ 735.380905][T14079] ? __sys_sendmsg_sock+0x30/0x30 [ 735.385987][T14079] __sys_sendmsg+0x2a9/0x390 [ 735.390599][T14079] ? ____sys_sendmsg+0x9a0/0x9a0 [ 735.395599][T14079] do_syscall_64+0x3b/0xb0 [ 735.400023][T14079] ? clear_bhb_loop+0x45/0xa0 [ 735.404713][T14079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 735.410616][T14079] RIP: 0033:0x7f2ec238d169 [ 735.415036][T14079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.434757][T14079] RSP: 002b:00007f2ec31ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.443187][T14079] RAX: ffffffffffffffda RBX: 00007f2ec25a5fa0 RCX: 00007f2ec238d169 [ 735.451184][T14079] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000f [ 735.459174][T14079] RBP: 00007f2ec240e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 735.467338][T14079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.475307][T14079] R13: 0000000000000000 R14: 00007f2ec25a5fa0 R15: 00007ffc887e6da8 [ 735.483292][T14079] [ 736.031413][T14101] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.3519'. [ 736.149225][T14101] netlink: 114704 bytes leftover after parsing attributes in process `syz.2.3519'. [ 736.255779][T14101] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 736.314480][T14101] CPU: 0 PID: 14101 Comm: syz.2.3519 Not tainted 6.1.131-syzkaller #0 [ 736.322711][T14101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 736.332806][T14101] Call Trace: [ 736.336097][T14101] [ 736.339034][T14101] dump_stack_lvl+0x1e3/0x2cb [ 736.343771][T14101] ? nf_tcp_handle_invalid+0x647/0x647 [ 736.349264][T14101] ? panic+0x764/0x764 [ 736.353374][T14101] ? sysfs_warn_dup+0x61/0xa0 [ 736.358066][T14101] sysfs_warn_dup+0x8a/0xa0 [ 736.362577][T14101] sysfs_do_create_link_sd+0xbe/0x100 [ 736.367963][T14101] device_add+0x7d4/0xfd0 [ 736.372331][T14101] wiphy_register+0x1e91/0x2d10 [ 736.377204][T14101] ? cfg80211_event_work+0x40/0x40 [ 736.382323][T14101] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 736.388502][T14101] ieee80211_register_hw+0x31bd/0x3f10 [ 736.393981][T14101] ? ieee80211_register_hw+0x11d1/0x3f10 [ 736.399657][T14101] ? ieee80211_register_hw+0x10d1/0x3f10 [ 736.405304][T14101] ? ieee80211_tasklet_handler+0x20/0x20 [ 736.410957][T14101] ? __debug_object_init+0xe9/0x450 [ 736.416167][T14101] ? memset+0x1f/0x40 [ 736.420175][T14101] ? __hrtimer_init+0x181/0x260 [ 736.425047][T14101] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 736.430797][T14101] hwsim_new_radio_nl+0xc54/0x1190 [ 736.435924][T14101] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 736.442269][T14101] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 736.448608][T14101] genl_rcv_msg+0xbfa/0xf50 [ 736.453153][T14101] ? genl_bind+0x400/0x400 [ 736.457593][T14101] ? read_lock_is_recursive+0x10/0x10 [ 736.462989][T14101] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 736.469384][T14101] netlink_rcv_skb+0x1cd/0x410 [ 736.474156][T14101] ? genl_bind+0x400/0x400 [ 736.478583][T14101] ? netlink_ack+0x12a0/0x12a0 [ 736.483366][T14101] genl_rcv+0x24/0x40 [ 736.487353][T14101] netlink_unicast+0x7e2/0x970 [ 736.492124][T14101] ? netlink_detachskb+0x90/0x90 [ 736.497063][T14101] ? bpf_lsm_netlink_send+0x5/0x10 [ 736.502186][T14101] netlink_sendmsg+0xa26/0xd60 [ 736.506964][T14101] ? netlink_getsockopt+0x580/0x580 [ 736.512170][T14101] ? tomoyo_socket_sendmsg_permission+0x129/0x410 [ 736.518633][T14101] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 736.523945][T14101] ? security_socket_sendmsg+0x7d/0xa0 [ 736.529421][T14101] ? netlink_getsockopt+0x580/0x580 [ 736.534639][T14101] ____sys_sendmsg+0x5d3/0x9a0 [ 736.539419][T14101] ? __sys_sendmsg_sock+0x30/0x30 [ 736.544462][T14101] __sys_sendmsg+0x2a9/0x390 [ 736.549060][T14101] ? ____sys_sendmsg+0x9a0/0x9a0 [ 736.554044][T14101] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 736.560052][T14101] ? syscall_enter_from_user_mode+0x2e/0x230 [ 736.566042][T14101] ? lockdep_hardirqs_on+0x94/0x130 [ 736.571248][T14101] ? syscall_enter_from_user_mode+0x2e/0x230 [ 736.577241][T14101] do_syscall_64+0x3b/0xb0 [ 736.581660][T14101] ? clear_bhb_loop+0x45/0xa0 [ 736.586345][T14101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.592246][T14101] RIP: 0033:0x7f2a3d58d169 [ 736.596674][T14101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.616289][T14101] RSP: 002b:00007f2a3e4d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.624716][T14101] RAX: ffffffffffffffda RBX: 00007f2a3d7a5fa0 RCX: 00007f2a3d58d169 [ 736.632697][T14101] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000d [ 736.640671][T14101] RBP: 00007f2a3d60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 736.648646][T14101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.656618][T14101] R13: 0000000000000000 R14: 00007f2a3d7a5fa0 R15: 00007ffe956af278 [ 736.664614][T14101] [ 737.668844][T14138] netlink: 'syz.0.3530': attribute type 3 has an invalid length. [ 737.689765][T14133] netlink: 'syz.3.3528': attribute type 21 has an invalid length. [ 737.714633][T14133] netlink: 'syz.3.3528': attribute type 15 has an invalid length. [ 737.724997][T14138] netlink: 'syz.0.3530': attribute type 1 has an invalid length. [ 737.754088][T14133] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3528'. [ 737.796230][T14133] IPv6: NLM_F_CREATE should be specified when creating new route [ 737.815193][T14138] netlink: 114704 bytes leftover after parsing attributes in process `syz.0.3530'. [ 737.846243][T14133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 737.853550][T14133] IPv6: NLM_F_CREATE should be set when creating new route [ 737.861027][T14133] IPv6: NLM_F_CREATE should be set when creating new route [ 737.868422][T14133] IPv6: NLM_F_CREATE should be set when creating new route [ 738.086720][T14138] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 738.150421][T14138] CPU: 1 PID: 14138 Comm: syz.0.3530 Not tainted 6.1.131-syzkaller #0 [ 738.158643][T14138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 738.168751][T14138] Call Trace: [ 738.172062][T14138] [ 738.175025][T14138] dump_stack_lvl+0x1e3/0x2cb [ 738.179777][T14138] ? nf_tcp_handle_invalid+0x647/0x647 [ 738.185272][T14138] ? panic+0x764/0x764 [ 738.189398][T14138] sysfs_warn_dup+0x8a/0xa0 [ 738.193945][T14138] sysfs_do_create_link_sd+0xbe/0x100 [ 738.199361][T14138] device_add+0x7d4/0xfd0 [ 738.203771][T14138] wiphy_register+0x1e91/0x2d10 [ 738.208677][T14138] ? cfg80211_event_work+0x40/0x40 [ 738.213815][T14138] ? minstrel_ht_alloc+0x874/0x9e0 [ 738.218965][T14138] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 738.225050][T14138] ieee80211_register_hw+0x31bd/0x3f10 [ 738.230539][T14138] ? ieee80211_register_hw+0x11d1/0x3f10 [ 738.236178][T14138] ? ieee80211_register_hw+0x10d1/0x3f10 [ 738.241855][T14138] ? ieee80211_tasklet_handler+0x20/0x20 [ 738.247587][T14138] ? __debug_object_init+0xe9/0x450 [ 738.252798][T14138] ? memset+0x1f/0x40 [ 738.256790][T14138] ? __hrtimer_init+0x181/0x260 [ 738.261659][T14138] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 738.267414][T14138] hwsim_new_radio_nl+0xc54/0x1190 [ 738.272547][T14138] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 738.278896][T14138] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 738.285266][T14138] genl_rcv_msg+0xbfa/0xf50 [ 738.289787][T14138] ? genl_bind+0x400/0x400 [ 738.294230][T14138] ? read_lock_is_recursive+0x10/0x10 [ 738.299619][T14138] ? perf_trace_lock+0x37f/0x440 [ 738.304576][T14138] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 738.310939][T14138] netlink_rcv_skb+0x1cd/0x410 [ 738.315712][T14138] ? genl_bind+0x400/0x400 [ 738.320139][T14138] ? netlink_ack+0x12a0/0x12a0 [ 738.324926][T14138] genl_rcv+0x24/0x40 [ 738.329088][T14138] netlink_unicast+0x7e2/0x970 [ 738.333881][T14138] ? netlink_detachskb+0x90/0x90 [ 738.338824][T14138] ? find_vmap_area+0xf3/0x100 [ 738.343622][T14138] ? __phys_addr_symbol+0x2b/0x70 [ 738.348656][T14138] ? __check_object_size+0x4dd/0xa30 [ 738.353946][T14138] ? bpf_lsm_netlink_send+0x5/0x10 [ 738.359167][T14138] netlink_sendmsg+0xa26/0xd60 [ 738.363988][T14138] ? netlink_getsockopt+0x580/0x580 [ 738.369212][T14138] ? aa_sock_msg_perm+0x91/0x150 [ 738.374155][T14138] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 738.379454][T14138] ? security_socket_sendmsg+0x7d/0xa0 [ 738.384928][T14138] ? netlink_getsockopt+0x580/0x580 [ 738.390138][T14138] ____sys_sendmsg+0x5d3/0x9a0 [ 738.394920][T14138] ? __sys_sendmsg_sock+0x30/0x30 [ 738.399970][T14138] __sys_sendmsg+0x2a9/0x390 [ 738.404572][T14138] ? ____sys_sendmsg+0x9a0/0x9a0 [ 738.409545][T14138] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 738.415557][T14138] ? syscall_enter_from_user_mode+0x2e/0x230 [ 738.421634][T14138] ? lockdep_hardirqs_on+0x94/0x130 [ 738.426841][T14138] ? syscall_enter_from_user_mode+0x2e/0x230 [ 738.432831][T14138] do_syscall_64+0x3b/0xb0 [ 738.437253][T14138] ? clear_bhb_loop+0x45/0xa0 [ 738.441936][T14138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 738.447835][T14138] RIP: 0033:0x7fba46f8d169 [ 738.452256][T14138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.471870][T14138] RSP: 002b:00007fba47d65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.480295][T14138] RAX: ffffffffffffffda RBX: 00007fba471a6080 RCX: 00007fba46f8d169 [ 738.488274][T14138] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000e [ 738.496244][T14138] RBP: 00007fba4700e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 738.504214][T14138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.512188][T14138] R13: 0000000000000000 R14: 00007fba471a6080 R15: 00007fff49eb0b88 [ 738.520181][T14138] [ 738.842361][T14152] device syzkaller0 entered promiscuous mode [ 741.554337][T14164] netlink: 'syz.3.3536': attribute type 10 has an invalid length. [ 741.563800][T14164] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3536'. [ 741.574833][T14164] device vlan1 entered promiscuous mode [ 741.583676][T14164] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 741.854439][T14181] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3542'. [ 741.893670][T14181] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 742.042591][T14181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 742.103907][T14184] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3544'. [ 742.125465][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3544'. [ 742.166350][ T4262] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 742.571406][T14203] netlink: 'syz.1.3551': attribute type 10 has an invalid length. [ 742.618591][T14203] team0: Device ipvlan1 failed to register rx_handler [ 742.973914][T14216] netlink: 'syz.4.3557': attribute type 10 has an invalid length. [ 743.022492][T14216] device veth1_macvtap left promiscuous mode [ 743.212970][T14219] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3558'. [ 743.549729][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 743.588757][T14231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 743.993700][T14241] IPv6: NLM_F_CREATE should be specified when creating new route [ 744.016796][T14241] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3567'. [ 746.009373][T14284] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3582'. [ 746.304695][T14284] bond0: (slave macvlan0): Releasing backup interface [ 747.273048][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.279645][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.952352][T14303] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.3591'. [ 748.121142][T14303] netlink: 114704 bytes leftover after parsing attributes in process `syz.1.3591'. [ 748.239114][T14306] netlink: 'syz.0.3593': attribute type 10 has an invalid length. [ 748.392049][T14306] team0: Port device wlan1 added [ 748.412732][T14303] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 748.428978][T14303] CPU: 0 PID: 14303 Comm: syz.1.3591 Not tainted 6.1.131-syzkaller #0 [ 748.437189][T14303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 748.447274][T14303] Call Trace: [ 748.450577][T14303] [ 748.453531][T14303] dump_stack_lvl+0x1e3/0x2cb [ 748.458242][T14303] ? nf_tcp_handle_invalid+0x647/0x647 [ 748.463721][T14303] ? panic+0x764/0x764 [ 748.467831][T14303] sysfs_warn_dup+0x8a/0xa0 [ 748.472367][T14303] sysfs_do_create_link_sd+0xbe/0x100 [ 748.477756][T14303] device_add+0x7d4/0xfd0 [ 748.482196][T14303] wiphy_register+0x1e91/0x2d10 [ 748.487076][T14303] ? cfg80211_event_work+0x40/0x40 [ 748.492316][T14303] ? minstrel_ht_alloc+0x874/0x9e0 [ 748.497446][T14303] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 748.503542][T14303] ieee80211_register_hw+0x31bd/0x3f10 [ 748.509021][T14303] ? ieee80211_register_hw+0x11d1/0x3f10 [ 748.514669][T14303] ? ieee80211_register_hw+0x10d1/0x3f10 [ 748.520322][T14303] ? ieee80211_tasklet_handler+0x20/0x20 [ 748.525988][T14303] ? __debug_object_init+0xe9/0x450 [ 748.531213][T14303] ? memset+0x1f/0x40 [ 748.535226][T14303] ? __hrtimer_init+0x181/0x260 [ 748.540098][T14303] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 748.545886][T14303] hwsim_new_radio_nl+0xc54/0x1190 [ 748.551024][T14303] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 748.557200][T14303] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 748.563558][T14303] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 748.569933][T14303] genl_rcv_msg+0xbfa/0xf50 [ 748.574454][T14303] ? genl_bind+0x400/0x400 [ 748.578917][T14303] ? read_lock_is_recursive+0x10/0x10 [ 748.584330][T14303] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 748.590670][T14303] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 748.596769][T14303] netlink_rcv_skb+0x1cd/0x410 [ 748.601556][T14303] ? genl_bind+0x400/0x400 [ 748.605984][T14303] ? netlink_ack+0x12a0/0x12a0 [ 748.610775][T14303] ? __rcu_read_unlock+0x92/0x100 [ 748.615813][T14303] genl_rcv+0x24/0x40 [ 748.619813][T14303] netlink_unicast+0x7e2/0x970 [ 748.624602][T14303] ? netlink_detachskb+0x90/0x90 [ 748.629544][T14303] ? find_vmap_area+0xf3/0x100 [ 748.634417][T14303] ? __phys_addr_symbol+0x2b/0x70 [ 748.639465][T14303] ? __check_object_size+0x4dd/0xa30 [ 748.644779][T14303] ? bpf_lsm_netlink_send+0x5/0x10 [ 748.649916][T14303] netlink_sendmsg+0xa26/0xd60 [ 748.654717][T14303] ? netlink_getsockopt+0x580/0x580 [ 748.659936][T14303] ? aa_sock_msg_perm+0x91/0x150 [ 748.664895][T14303] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 748.670188][T14303] ? security_socket_sendmsg+0x7d/0xa0 [ 748.675652][T14303] ? netlink_getsockopt+0x580/0x580 [ 748.680871][T14303] ____sys_sendmsg+0x5d3/0x9a0 [ 748.685646][T14303] ? __sys_sendmsg_sock+0x30/0x30 [ 748.690703][T14303] __sys_sendmsg+0x2a9/0x390 [ 748.695297][T14303] ? ____sys_sendmsg+0x9a0/0x9a0 [ 748.700290][T14303] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 748.706321][T14303] ? syscall_enter_from_user_mode+0x2e/0x230 [ 748.712326][T14303] ? syscall_enter_from_user_mode+0x2e/0x230 [ 748.718317][T14303] ? lockdep_hardirqs_on+0x94/0x130 [ 748.723538][T14303] ? syscall_enter_from_user_mode+0x2e/0x230 [ 748.729534][T14303] do_syscall_64+0x3b/0xb0 [ 748.733962][T14303] ? clear_bhb_loop+0x45/0xa0 [ 748.738664][T14303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 748.744581][T14303] RIP: 0033:0x7f10eab8d169 [ 748.749001][T14303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.768632][T14303] RSP: 002b:00007f10eb9de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.777088][T14303] RAX: ffffffffffffffda RBX: 00007f10eada5fa0 RCX: 00007f10eab8d169 [ 748.785211][T14303] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000e [ 748.793187][T14303] RBP: 00007f10eac0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 748.801262][T14303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.809263][T14303] R13: 0000000000000000 R14: 00007f10eada5fa0 R15: 00007ffeb4e5a3a8 [ 748.817280][T14303] [ 748.924311][T14321] device sit0 left promiscuous mode [ 749.365087][T14326] device syzkaller0 entered promiscuous mode [ 749.677682][T14337] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.3601'. [ 749.815433][T14337] netlink: 114704 bytes leftover after parsing attributes in process `syz.1.3601'. [ 751.636971][T14346] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 751.653862][T14346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 751.692623][T14337] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 751.716156][T14337] CPU: 0 PID: 14337 Comm: syz.1.3601 Not tainted 6.1.131-syzkaller #0 [ 751.724370][T14337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 751.734465][T14337] Call Trace: [ 751.737772][T14337] [ 751.740724][T14337] dump_stack_lvl+0x1e3/0x2cb [ 751.745441][T14337] ? nf_tcp_handle_invalid+0x647/0x647 [ 751.750933][T14337] ? panic+0x764/0x764 [ 751.755035][T14337] sysfs_warn_dup+0x8a/0xa0 [ 751.759571][T14337] sysfs_do_create_link_sd+0xbe/0x100 [ 751.764969][T14337] device_add+0x7d4/0xfd0 [ 751.769347][T14337] wiphy_register+0x1e91/0x2d10 [ 751.774233][T14337] ? cfg80211_event_work+0x40/0x40 [ 751.779371][T14337] ? minstrel_ht_alloc+0x874/0x9e0 [ 751.784547][T14337] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 751.790651][T14337] ieee80211_register_hw+0x31bd/0x3f10 [ 751.796137][T14337] ? ieee80211_register_hw+0x11d1/0x3f10 [ 751.801783][T14337] ? ieee80211_register_hw+0x10d1/0x3f10 [ 751.807434][T14337] ? ieee80211_tasklet_handler+0x20/0x20 [ 751.813079][T14337] ? __debug_object_init+0xe9/0x450 [ 751.818331][T14337] ? memset+0x1f/0x40 [ 751.822327][T14337] ? __hrtimer_init+0x181/0x260 [ 751.827188][T14337] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 751.832961][T14337] hwsim_new_radio_nl+0xc54/0x1190 [ 751.838104][T14337] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 751.844452][T14337] ? genl_family_rcv_msg_attrs_parse+0x1d5/0x290 [ 751.850805][T14337] genl_rcv_msg+0xbfa/0xf50 [ 751.855321][T14337] ? genl_bind+0x400/0x400 [ 751.859743][T14337] ? validate_chain+0x112/0x5950 [ 751.864687][T14337] ? lock_acquire+0x26f/0x5a0 [ 751.869418][T14337] ? read_lock_is_recursive+0x10/0x10 [ 751.874815][T14337] ? ref_tracker_free+0x638/0x7d0 [ 751.879862][T14337] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 751.886206][T14337] ? refcount_inc+0x80/0x80 [ 751.890731][T14337] netlink_rcv_skb+0x1cd/0x410 [ 751.895516][T14337] ? genl_bind+0x400/0x400 [ 751.899941][T14337] ? netlink_ack+0x12a0/0x12a0 [ 751.904731][T14337] genl_rcv+0x24/0x40 [ 751.908728][T14337] netlink_unicast+0x7e2/0x970 [ 751.913504][T14337] ? netlink_detachskb+0x90/0x90 [ 751.918456][T14337] ? security_netlink_send+0x30/0x90 [ 751.923778][T14337] ? bpf_lsm_netlink_send+0x5/0x10 [ 751.928917][T14337] netlink_sendmsg+0xa26/0xd60 [ 751.933704][T14337] ? netlink_getsockopt+0x580/0x580 [ 751.938917][T14337] ? aa_sock_msg_perm+0x91/0x150 [ 751.943866][T14337] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 751.949193][T14337] ? security_socket_sendmsg+0x7d/0xa0 [ 751.954674][T14337] ? netlink_getsockopt+0x580/0x580 [ 751.959884][T14337] ____sys_sendmsg+0x5d3/0x9a0 [ 751.964666][T14337] ? __sys_sendmsg_sock+0x30/0x30 [ 751.969720][T14337] __sys_sendmsg+0x2a9/0x390 [ 751.974325][T14337] ? ____sys_sendmsg+0x9a0/0x9a0 [ 751.979318][T14337] do_syscall_64+0x3b/0xb0 [ 751.983733][T14337] ? clear_bhb_loop+0x45/0xa0 [ 751.988417][T14337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 751.994313][T14337] RIP: 0033:0x7f10eab8d169 [ 751.998754][T14337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.018367][T14337] RSP: 002b:00007f10eb9de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.026790][T14337] RAX: ffffffffffffffda RBX: 00007f10eada5fa0 RCX: 00007f10eab8d169 [ 752.034783][T14337] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000e [ 752.042763][T14337] RBP: 00007f10eac0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 752.050736][T14337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.058752][T14337] R13: 0000000000000000 R14: 00007f10eada5fa0 R15: 00007ffeb4e5a3a8 [ 752.066750][T14337] [ 752.385929][T14357] A link change request failed with some changes committed already. Interface Y4`Ҙ may have been left with an inconsistent configuration, please check. [ 752.658949][T14363] netlink: 'syz.2.3613': attribute type 10 has an invalid length. [ 752.674105][T14363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3613'. [ 752.714036][T14363] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 752.743108][T14363] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.776388][T14363] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 753.234357][T14390] netlink: 'syz.1.3619': attribute type 3 has an invalid length. [ 753.261701][T14390] netlink: 'syz.1.3619': attribute type 1 has an invalid length. [ 753.364916][T14390] netlink: 114704 bytes leftover after parsing attributes in process `syz.1.3619'. [ 753.476923][T14390] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 753.576336][T14390] CPU: 0 PID: 14390 Comm: syz.1.3619 Not tainted 6.1.131-syzkaller #0 [ 753.584563][T14390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 753.594652][T14390] Call Trace: [ 753.597964][T14390] [ 753.600925][T14390] dump_stack_lvl+0x1e3/0x2cb [ 753.605652][T14390] ? nf_tcp_handle_invalid+0x647/0x647 [ 753.611157][T14390] ? panic+0x764/0x764 [ 753.615290][T14390] sysfs_warn_dup+0x8a/0xa0 [ 753.619838][T14390] sysfs_do_create_link_sd+0xbe/0x100 [ 753.625261][T14390] device_add+0x7d4/0xfd0 [ 753.629651][T14390] wiphy_register+0x1e91/0x2d10 [ 753.634561][T14390] ? cfg80211_event_work+0x40/0x40 [ 753.639715][T14390] ? minstrel_ht_alloc+0x874/0x9e0 [ 753.644870][T14390] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 753.651080][T14390] ieee80211_register_hw+0x31bd/0x3f10 [ 753.656588][T14390] ? ieee80211_register_hw+0x11d1/0x3f10 [ 753.662237][T14390] ? ieee80211_register_hw+0x10d1/0x3f10 [ 753.667889][T14390] ? ieee80211_tasklet_handler+0x20/0x20 [ 753.673540][T14390] ? __debug_object_init+0xe9/0x450 [ 753.678760][T14390] ? memset+0x1f/0x40 [ 753.682755][T14390] ? __hrtimer_init+0x181/0x260 [ 753.687624][T14390] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 753.693383][T14390] hwsim_new_radio_nl+0xc54/0x1190 [ 753.698522][T14390] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 753.704875][T14390] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 753.711240][T14390] genl_rcv_msg+0xbfa/0xf50 [ 753.715759][T14390] ? genl_bind+0x400/0x400 [ 753.720186][T14390] ? validate_chain+0x112/0x5950 [ 753.725128][T14390] ? lock_acquire+0x26f/0x5a0 [ 753.729822][T14390] ? read_lock_is_recursive+0x10/0x10 [ 753.735217][T14390] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 753.741560][T14390] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 753.747653][T14390] netlink_rcv_skb+0x1cd/0x410 [ 753.752447][T14390] ? genl_bind+0x400/0x400 [ 753.756872][T14390] ? netlink_ack+0x12a0/0x12a0 [ 753.761649][T14390] ? __rcu_read_unlock+0x92/0x100 [ 753.766681][T14390] genl_rcv+0x24/0x40 [ 753.770670][T14390] netlink_unicast+0x7e2/0x970 [ 753.775446][T14390] ? netlink_detachskb+0x90/0x90 [ 753.780387][T14390] ? find_vmap_area+0xf3/0x100 [ 753.785176][T14390] ? __phys_addr_symbol+0x2b/0x70 [ 753.790212][T14390] ? __check_object_size+0x4dd/0xa30 [ 753.795512][T14390] ? bpf_lsm_netlink_send+0x5/0x10 [ 753.800637][T14390] netlink_sendmsg+0xa26/0xd60 [ 753.805424][T14390] ? netlink_getsockopt+0x580/0x580 [ 753.810635][T14390] ? aa_sock_msg_perm+0x91/0x150 [ 753.815597][T14390] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 753.820907][T14390] ? security_socket_sendmsg+0x7d/0xa0 [ 753.826384][T14390] ? netlink_getsockopt+0x580/0x580 [ 753.831590][T14390] ____sys_sendmsg+0x5d3/0x9a0 [ 753.836377][T14390] ? __sys_sendmsg_sock+0x30/0x30 [ 753.841417][T14390] __sys_sendmsg+0x2a9/0x390 [ 753.846015][T14390] ? ____sys_sendmsg+0x9a0/0x9a0 [ 753.850981][T14390] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 753.857141][T14390] ? lockdep_hardirqs_on+0x94/0x130 [ 753.862360][T14390] ? syscall_enter_from_user_mode+0x37/0x230 [ 753.868351][T14390] ? syscall_enter_from_user_mode+0x2e/0x230 [ 753.874348][T14390] do_syscall_64+0x3b/0xb0 [ 753.878774][T14390] ? clear_bhb_loop+0x45/0xa0 [ 753.883460][T14390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 753.889358][T14390] RIP: 0033:0x7f10eab8d169 [ 753.893773][T14390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.913378][T14390] RSP: 002b:00007f10eb9de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 753.921795][T14390] RAX: ffffffffffffffda RBX: 00007f10eada5fa0 RCX: 00007f10eab8d169 [ 753.929768][T14390] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000f [ 753.937739][T14390] RBP: 00007f10eac0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 753.945710][T14390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.953684][T14390] R13: 0000000000000000 R14: 00007f10eada5fa0 R15: 00007ffeb4e5a3a8 [ 753.961675][T14390] [ 754.568842][T14417] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.3629'. [ 754.629778][T14417] netlink: 114704 bytes leftover after parsing attributes in process `syz.3.3629'. [ 754.761492][T14417] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 754.826531][T14417] CPU: 1 PID: 14417 Comm: syz.3.3629 Not tainted 6.1.131-syzkaller #0 [ 754.834755][T14417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 754.844847][T14417] Call Trace: [ 754.848154][T14417] [ 754.851107][T14417] dump_stack_lvl+0x1e3/0x2cb [ 754.855805][T14417] ? nf_tcp_handle_invalid+0x647/0x647 [ 754.861288][T14417] ? panic+0x764/0x764 [ 754.865409][T14417] sysfs_warn_dup+0x8a/0xa0 [ 754.869947][T14417] sysfs_do_create_link_sd+0xbe/0x100 [ 754.875360][T14417] device_add+0x7d4/0xfd0 [ 754.879740][T14417] wiphy_register+0x1e91/0x2d10 [ 754.884649][T14417] ? cfg80211_event_work+0x40/0x40 [ 754.889798][T14417] ? minstrel_ht_alloc+0x874/0x9e0 [ 754.894951][T14417] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 754.901074][T14417] ieee80211_register_hw+0x31bd/0x3f10 [ 754.906590][T14417] ? ieee80211_register_hw+0x11d1/0x3f10 [ 754.912260][T14417] ? ieee80211_register_hw+0x10d1/0x3f10 [ 754.917944][T14417] ? ieee80211_tasklet_handler+0x20/0x20 [ 754.923620][T14417] ? __debug_object_init+0xe9/0x450 [ 754.928840][T14417] ? memset+0x1f/0x40 [ 754.932861][T14417] ? __hrtimer_init+0x181/0x260 [ 754.937755][T14417] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 754.943539][T14417] hwsim_new_radio_nl+0xc54/0x1190 [ 754.948696][T14417] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 754.955116][T14417] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 754.961486][T14417] genl_rcv_msg+0xbfa/0xf50 [ 754.966029][T14417] ? genl_bind+0x400/0x400 [ 754.970479][T14417] ? read_lock_is_recursive+0x10/0x10 [ 754.975873][T14417] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 754.982234][T14417] netlink_rcv_skb+0x1cd/0x410 [ 754.987016][T14417] ? genl_bind+0x400/0x400 [ 754.991442][T14417] ? netlink_ack+0x12a0/0x12a0 [ 754.996238][T14417] genl_rcv+0x24/0x40 [ 755.000231][T14417] netlink_unicast+0x7e2/0x970 [ 755.005014][T14417] ? netlink_detachskb+0x90/0x90 [ 755.009976][T14417] ? netlink_sendmsg+0x83c/0xd60 [ 755.014933][T14417] netlink_sendmsg+0xa26/0xd60 [ 755.019718][T14417] ? netlink_getsockopt+0x580/0x580 [ 755.024925][T14417] ? aa_sock_msg_perm+0x91/0x150 [ 755.029873][T14417] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 755.035171][T14417] ? security_socket_sendmsg+0x7d/0xa0 [ 755.040661][T14417] ? netlink_getsockopt+0x580/0x580 [ 755.045865][T14417] ____sys_sendmsg+0x5d3/0x9a0 [ 755.050644][T14417] ? __sys_sendmsg_sock+0x30/0x30 [ 755.055687][T14417] __sys_sendmsg+0x2a9/0x390 [ 755.060290][T14417] ? ____sys_sendmsg+0x9a0/0x9a0 [ 755.065263][T14417] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 755.071370][T14417] ? syscall_enter_from_user_mode+0x2e/0x230 [ 755.077359][T14417] ? lockdep_hardirqs_on+0x94/0x130 [ 755.082563][T14417] ? syscall_enter_from_user_mode+0x2e/0x230 [ 755.088551][T14417] do_syscall_64+0x3b/0xb0 [ 755.092969][T14417] ? clear_bhb_loop+0x45/0xa0 [ 755.097656][T14417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 755.103557][T14417] RIP: 0033:0x7f2ec238d169 [ 755.107974][T14417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.127583][T14417] RSP: 002b:00007f2ec31ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 755.136012][T14417] RAX: ffffffffffffffda RBX: 00007f2ec25a5fa0 RCX: 00007f2ec238d169 [ 755.143992][T14417] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000d [ 755.151972][T14417] RBP: 00007f2ec240e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 755.159951][T14417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.167925][T14417] R13: 0000000000000000 R14: 00007f2ec25a5fa0 R15: 00007ffc887e6da8 [ 755.175917][T14417] [ 755.526327][T14427] netlink: 'syz.4.3632': attribute type 21 has an invalid length. [ 755.534306][T14427] netlink: 'syz.4.3632': attribute type 15 has an invalid length. [ 755.557077][T14427] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3632'. [ 755.591431][T14427] IPv6: NLM_F_CREATE should be specified when creating new route [ 755.624009][T14427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 755.631409][T14427] IPv6: NLM_F_CREATE should be set when creating new route [ 755.638763][T14427] IPv6: NLM_F_CREATE should be set when creating new route [ 755.646033][T14427] IPv6: NLM_F_CREATE should be set when creating new route [ 756.053031][T14444] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3636'. [ 756.175634][T14444] netlink: 114704 bytes leftover after parsing attributes in process `syz.0.3636'. [ 756.243845][T14444] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 756.318768][T14444] CPU: 1 PID: 14444 Comm: syz.0.3636 Not tainted 6.1.131-syzkaller #0 [ 756.326988][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 756.337095][T14444] Call Trace: [ 756.340398][T14444] [ 756.343351][T14444] dump_stack_lvl+0x1e3/0x2cb [ 756.348068][T14444] ? nf_tcp_handle_invalid+0x647/0x647 [ 756.353565][T14444] ? panic+0x764/0x764 [ 756.357693][T14444] sysfs_warn_dup+0x8a/0xa0 [ 756.362237][T14444] sysfs_do_create_link_sd+0xbe/0x100 [ 756.367645][T14444] device_add+0x7d4/0xfd0 [ 756.372024][T14444] wiphy_register+0x1e91/0x2d10 [ 756.376934][T14444] ? cfg80211_event_work+0x40/0x40 [ 756.382087][T14444] ? minstrel_ht_alloc+0x874/0x9e0 [ 756.387256][T14444] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 756.393367][T14444] ieee80211_register_hw+0x31bd/0x3f10 [ 756.398887][T14444] ? ieee80211_register_hw+0x11d1/0x3f10 [ 756.404554][T14444] ? ieee80211_register_hw+0x10d1/0x3f10 [ 756.410231][T14444] ? ieee80211_tasklet_handler+0x20/0x20 [ 756.415902][T14444] ? __debug_object_init+0xe9/0x450 [ 756.421141][T14444] ? memset+0x1f/0x40 [ 756.425165][T14444] ? __hrtimer_init+0x181/0x260 [ 756.430057][T14444] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 756.435839][T14444] hwsim_new_radio_nl+0xc54/0x1190 [ 756.441009][T14444] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 756.447404][T14444] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 756.453796][T14444] genl_rcv_msg+0xbfa/0xf50 [ 756.458348][T14444] ? genl_bind+0x400/0x400 [ 756.462801][T14444] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 756.468829][T14444] ? print_irqtrace_events+0x210/0x210 [ 756.474340][T14444] ? rcu_is_watching+0x11/0xb0 [ 756.479146][T14444] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 756.485339][T14444] ? lockdep_hardirqs_on+0x94/0x130 [ 756.490584][T14444] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 756.496987][T14444] netlink_rcv_skb+0x1cd/0x410 [ 756.501789][T14444] ? genl_bind+0x400/0x400 [ 756.506246][T14444] ? netlink_ack+0x12a0/0x12a0 [ 756.511066][T14444] genl_rcv+0x24/0x40 [ 756.515086][T14444] netlink_unicast+0x7e2/0x970 [ 756.519904][T14444] ? netlink_detachskb+0x90/0x90 [ 756.524882][T14444] ? find_vmap_area+0xf3/0x100 [ 756.529691][T14444] ? __phys_addr_symbol+0x2b/0x70 [ 756.534757][T14444] ? __check_object_size+0x4dd/0xa30 [ 756.540079][T14444] ? bpf_lsm_netlink_send+0x5/0x10 [ 756.545226][T14444] netlink_sendmsg+0xa26/0xd60 [ 756.550032][T14444] ? netlink_getsockopt+0x580/0x580 [ 756.555254][T14444] ? tomoyo_socket_sendmsg_permission+0x129/0x410 [ 756.561711][T14444] ? bpf_lsm_socket_accept+0x10/0x10 [ 756.567041][T14444] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 756.572366][T14444] ? security_socket_sendmsg+0x7d/0xa0 [ 756.577898][T14444] ? netlink_getsockopt+0x580/0x580 [ 756.583135][T14444] ____sys_sendmsg+0x5d3/0x9a0 [ 756.587947][T14444] ? __sys_sendmsg_sock+0x30/0x30 [ 756.593028][T14444] __sys_sendmsg+0x2a9/0x390 [ 756.597653][T14444] ? ____sys_sendmsg+0x9a0/0x9a0 [ 756.602659][T14444] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 756.608693][T14444] ? syscall_enter_from_user_mode+0x2e/0x230 [ 756.614709][T14444] ? lockdep_hardirqs_on+0x94/0x130 [ 756.619950][T14444] ? syscall_enter_from_user_mode+0x2e/0x230 [ 756.625977][T14444] do_syscall_64+0x3b/0xb0 [ 756.630556][T14444] ? clear_bhb_loop+0x45/0xa0 [ 756.635297][T14444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 756.641223][T14444] RIP: 0033:0x7fba46f8d169 [ 756.645671][T14444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.659957][T14450] netlink: 'syz.3.3640': attribute type 3 has an invalid length. [ 756.665284][T14444] RSP: 002b:00007fba47d86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 756.665316][T14444] RAX: ffffffffffffffda RBX: 00007fba471a5fa0 RCX: 00007fba46f8d169 [ 756.665334][T14444] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000f [ 756.665350][T14444] RBP: 00007fba4700e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 756.665365][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.665381][T14444] R13: 0000000000000000 R14: 00007fba471a5fa0 R15: 00007fff49eb0b88 [ 756.665418][T14444] [ 756.700166][T14450] netlink: 'syz.3.3640': attribute type 1 has an invalid length. [ 756.920245][T14450] netlink: 114704 bytes leftover after parsing attributes in process `syz.3.3640'. [ 757.019705][T14450] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 757.077247][T14450] CPU: 1 PID: 14450 Comm: syz.3.3640 Not tainted 6.1.131-syzkaller #0 [ 757.085989][T14450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 757.096080][T14450] Call Trace: [ 757.099417][T14450] [ 757.102386][T14450] dump_stack_lvl+0x1e3/0x2cb [ 757.107112][T14450] ? nf_tcp_handle_invalid+0x647/0x647 [ 757.112613][T14450] ? panic+0x764/0x764 [ 757.116736][T14450] sysfs_warn_dup+0x8a/0xa0 [ 757.121279][T14450] sysfs_do_create_link_sd+0xbe/0x100 [ 757.126690][T14450] device_add+0x7d4/0xfd0 [ 757.131075][T14450] wiphy_register+0x1e91/0x2d10 [ 757.135966][T14450] ? cfg80211_event_work+0x40/0x40 [ 757.141106][T14450] ? minstrel_ht_alloc+0x874/0x9e0 [ 757.146249][T14450] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 757.152351][T14450] ieee80211_register_hw+0x31bd/0x3f10 [ 757.157839][T14450] ? ieee80211_register_hw+0x11d1/0x3f10 [ 757.163479][T14450] ? ieee80211_register_hw+0x10d1/0x3f10 [ 757.169131][T14450] ? ieee80211_tasklet_handler+0x20/0x20 [ 757.174776][T14450] ? __debug_object_init+0xe9/0x450 [ 757.179990][T14450] ? memset+0x1f/0x40 [ 757.183979][T14450] ? __hrtimer_init+0x181/0x260 [ 757.188844][T14450] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 757.194601][T14450] hwsim_new_radio_nl+0xc54/0x1190 [ 757.199720][T14450] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 757.205891][T14450] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 757.212241][T14450] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 757.218589][T14450] genl_rcv_msg+0xbfa/0xf50 [ 757.223135][T14450] ? genl_bind+0x400/0x400 [ 757.227592][T14450] ? read_lock_is_recursive+0x10/0x10 [ 757.233010][T14450] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 757.239418][T14450] netlink_rcv_skb+0x1cd/0x410 [ 757.244201][T14450] ? genl_bind+0x400/0x400 [ 757.248631][T14450] ? netlink_ack+0x12a0/0x12a0 [ 757.253449][T14450] genl_rcv+0x24/0x40 [ 757.257458][T14450] netlink_unicast+0x7e2/0x970 [ 757.262263][T14450] ? netlink_detachskb+0x90/0x90 [ 757.267214][T14450] ? find_vmap_area+0xf3/0x100 [ 757.272003][T14450] ? __phys_addr_symbol+0x2b/0x70 [ 757.277049][T14450] ? __check_object_size+0x4dd/0xa30 [ 757.282347][T14450] ? bpf_lsm_netlink_send+0x5/0x10 [ 757.287472][T14450] netlink_sendmsg+0xa26/0xd60 [ 757.292258][T14450] ? netlink_getsockopt+0x580/0x580 [ 757.297465][T14450] ? aa_sock_msg_perm+0x91/0x150 [ 757.302408][T14450] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 757.307702][T14450] ? security_socket_sendmsg+0x7d/0xa0 [ 757.313174][T14450] ? netlink_getsockopt+0x580/0x580 [ 757.318381][T14450] ____sys_sendmsg+0x5d3/0x9a0 [ 757.323163][T14450] ? __sys_sendmsg_sock+0x30/0x30 [ 757.328209][T14450] __sys_sendmsg+0x2a9/0x390 [ 757.332805][T14450] ? ____sys_sendmsg+0x9a0/0x9a0 [ 757.337815][T14450] do_syscall_64+0x3b/0xb0 [ 757.342240][T14450] ? clear_bhb_loop+0x45/0xa0 [ 757.346926][T14450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.352818][T14450] RIP: 0033:0x7f2ec238d169 [ 757.357237][T14450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.376846][T14450] RSP: 002b:00007f2ec31ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.385263][T14450] RAX: ffffffffffffffda RBX: 00007f2ec25a5fa0 RCX: 00007f2ec238d169 [ 757.393240][T14450] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000f [ 757.401217][T14450] RBP: 00007f2ec240e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 757.409192][T14450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.417183][T14450] R13: 0000000000000000 R14: 00007f2ec25a5fa0 R15: 00007ffc887e6da8 [ 757.425173][T14450] [ 758.445255][T14482] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.3647'. [ 758.743862][T14482] netlink: 114704 bytes leftover after parsing attributes in process `syz.0.3647'. [ 758.984002][T14493] netlink: 'syz.1.3650': attribute type 21 has an invalid length. [ 759.013596][T14493] netlink: 'syz.1.3650': attribute type 15 has an invalid length. [ 759.056646][T14493] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3650'. [ 759.065787][T14493] IPv6: NLM_F_CREATE should be specified when creating new route [ 759.145519][T14493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 759.152921][T14493] IPv6: NLM_F_CREATE should be set when creating new route [ 759.160435][T14493] IPv6: NLM_F_CREATE should be set when creating new route [ 759.167843][T14493] IPv6: NLM_F_CREATE should be set when creating new route [ 759.532835][T14482] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 759.556021][T14482] CPU: 1 PID: 14482 Comm: syz.0.3647 Not tainted 6.1.131-syzkaller #0 [ 759.564247][T14482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 759.574310][T14482] Call Trace: [ 759.577602][T14482] [ 759.580537][T14482] dump_stack_lvl+0x1e3/0x2cb [ 759.585226][T14482] ? nf_tcp_handle_invalid+0x647/0x647 [ 759.590691][T14482] ? panic+0x764/0x764 [ 759.594779][T14482] sysfs_warn_dup+0x8a/0xa0 [ 759.599291][T14482] sysfs_do_create_link_sd+0xbe/0x100 [ 759.604672][T14482] device_add+0x7d4/0xfd0 [ 759.609021][T14482] wiphy_register+0x1e91/0x2d10 [ 759.613909][T14482] ? cfg80211_event_work+0x40/0x40 [ 759.619031][T14482] ? minstrel_ht_alloc+0x874/0x9e0 [ 759.624149][T14482] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 759.630233][T14482] ieee80211_register_hw+0x31bd/0x3f10 [ 759.635716][T14482] ? ieee80211_register_hw+0x11d1/0x3f10 [ 759.641394][T14482] ? ieee80211_register_hw+0x10d1/0x3f10 [ 759.647040][T14482] ? ieee80211_tasklet_handler+0x20/0x20 [ 759.652678][T14482] ? __debug_object_init+0xe9/0x450 [ 759.657893][T14482] ? memset+0x1f/0x40 [ 759.661891][T14482] ? __hrtimer_init+0x181/0x260 [ 759.666760][T14482] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 759.672511][T14482] hwsim_new_radio_nl+0xc54/0x1190 [ 759.677643][T14482] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 759.683993][T14482] ? genl_family_rcv_msg_attrs_parse+0x1d5/0x290 [ 759.690353][T14482] genl_rcv_msg+0xbfa/0xf50 [ 759.694872][T14482] ? genl_bind+0x400/0x400 [ 759.699315][T14482] ? read_lock_is_recursive+0x10/0x10 [ 759.704710][T14482] ? irqentry_enter+0x33/0x50 [ 759.709392][T14482] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 759.715742][T14482] netlink_rcv_skb+0x1cd/0x410 [ 759.720511][T14482] ? genl_bind+0x400/0x400 [ 759.725029][T14482] ? netlink_ack+0x12a0/0x12a0 [ 759.729805][T14482] ? genl_rcv+0x9/0x40 [ 759.733889][T14482] genl_rcv+0x24/0x40 [ 759.737883][T14482] netlink_unicast+0x7e2/0x970 [ 759.742657][T14482] ? netlink_detachskb+0x90/0x90 [ 759.747596][T14482] ? find_vmap_area+0xf3/0x100 [ 759.752369][T14482] ? __phys_addr_symbol+0x2b/0x70 [ 759.757403][T14482] ? __check_object_size+0x4dd/0xa30 [ 759.762698][T14482] ? bpf_lsm_netlink_send+0x5/0x10 [ 759.767824][T14482] netlink_sendmsg+0xa26/0xd60 [ 759.772608][T14482] ? netlink_getsockopt+0x580/0x580 [ 759.777817][T14482] ? aa_sock_msg_perm+0x91/0x150 [ 759.782761][T14482] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 759.788054][T14482] ? security_socket_sendmsg+0x7d/0xa0 [ 759.793522][T14482] ? netlink_getsockopt+0x580/0x580 [ 759.798734][T14482] ____sys_sendmsg+0x5d3/0x9a0 [ 759.803518][T14482] ? __sys_sendmsg_sock+0x30/0x30 [ 759.808561][T14482] __sys_sendmsg+0x2a9/0x390 [ 759.813164][T14482] ? ____sys_sendmsg+0x9a0/0x9a0 [ 759.818128][T14482] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 759.824288][T14482] ? lockdep_hardirqs_on+0x94/0x130 [ 759.829628][T14482] ? syscall_enter_from_user_mode+0x37/0x230 [ 759.835644][T14482] ? syscall_enter_from_user_mode+0x2e/0x230 [ 759.841654][T14482] do_syscall_64+0x3b/0xb0 [ 759.846080][T14482] ? clear_bhb_loop+0x45/0xa0 [ 759.850770][T14482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 759.856675][T14482] RIP: 0033:0x7fba46f8d169 [ 759.861097][T14482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.880710][T14482] RSP: 002b:00007fba47d86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.889132][T14482] RAX: ffffffffffffffda RBX: 00007fba471a5fa0 RCX: 00007fba46f8d169 [ 759.897117][T14482] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000d [ 759.905109][T14482] RBP: 00007fba4700e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 759.913081][T14482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.921052][T14482] R13: 0000000000000000 R14: 00007fba471a5fa0 R15: 00007fff49eb0b88 [ 759.929039][T14482] [ 760.693063][T14511] netlink: 'syz.3.3656': attribute type 10 has an invalid length. [ 760.768926][T14511] team0: Port device wlan1 added [ 761.034061][T14514] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.3658'. [ 761.132529][T14514] netlink: 114704 bytes leftover after parsing attributes in process `syz.4.3658'. [ 761.249975][T14514] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 761.293159][T14514] CPU: 1 PID: 14514 Comm: syz.4.3658 Not tainted 6.1.131-syzkaller #0 [ 761.301386][T14514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 761.311478][T14514] Call Trace: [ 761.314791][T14514] [ 761.317757][T14514] dump_stack_lvl+0x1e3/0x2cb [ 761.322477][T14514] ? nf_tcp_handle_invalid+0x647/0x647 [ 761.327981][T14514] ? panic+0x764/0x764 [ 761.332111][T14514] sysfs_warn_dup+0x8a/0xa0 [ 761.336664][T14514] sysfs_do_create_link_sd+0xbe/0x100 [ 761.342086][T14514] device_add+0x7d4/0xfd0 [ 761.346459][T14514] wiphy_register+0x1e91/0x2d10 [ 761.351364][T14514] ? cfg80211_event_work+0x40/0x40 [ 761.356514][T14514] ? __wake_up_klogd+0xcc/0x100 [ 761.361426][T14514] ieee80211_register_hw+0x31bd/0x3f10 [ 761.366937][T14514] ? ieee80211_register_hw+0x11d1/0x3f10 [ 761.372628][T14514] ? ieee80211_register_hw+0x10d1/0x3f10 [ 761.378308][T14514] ? ieee80211_tasklet_handler+0x20/0x20 [ 761.383988][T14514] ? __debug_object_init+0xe9/0x450 [ 761.389232][T14514] ? memset+0x1f/0x40 [ 761.393342][T14514] ? __hrtimer_init+0x181/0x260 [ 761.398238][T14514] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 761.404030][T14514] hwsim_new_radio_nl+0xc54/0x1190 [ 761.409194][T14514] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 761.415569][T14514] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 761.421778][T14514] genl_rcv_msg+0xbfa/0xf50 [ 761.426328][T14514] ? genl_bind+0x400/0x400 [ 761.430803][T14514] ? read_lock_is_recursive+0x10/0x10 [ 761.436229][T14514] ? ref_tracker_free+0x638/0x7d0 [ 761.441288][T14514] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 761.447672][T14514] ? refcount_inc+0x80/0x80 [ 761.452245][T14514] netlink_rcv_skb+0x1cd/0x410 [ 761.457037][T14514] ? genl_bind+0x400/0x400 [ 761.461480][T14514] ? netlink_ack+0x12a0/0x12a0 [ 761.466280][T14514] genl_rcv+0x24/0x40 [ 761.470321][T14514] netlink_unicast+0x7e2/0x970 [ 761.475134][T14514] ? netlink_detachskb+0x90/0x90 [ 761.480091][T14514] ? __check_object_size+0x4ca/0xa30 [ 761.485400][T14514] ? __check_object_size+0x4dd/0xa30 [ 761.490710][T14514] ? bpf_lsm_netlink_send+0x5/0x10 [ 761.495847][T14514] netlink_sendmsg+0xa26/0xd60 [ 761.500647][T14514] ? netlink_getsockopt+0x580/0x580 [ 761.505893][T14514] ? aa_sock_msg_perm+0x91/0x150 [ 761.510859][T14514] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 761.516173][T14514] ? security_socket_sendmsg+0x7d/0xa0 [ 761.521678][T14514] ? netlink_getsockopt+0x580/0x580 [ 761.526907][T14514] ____sys_sendmsg+0x5d3/0x9a0 [ 761.531702][T14514] ? __sys_sendmsg_sock+0x30/0x30 [ 761.536764][T14514] __sys_sendmsg+0x2a9/0x390 [ 761.541382][T14514] ? ____sys_sendmsg+0x9a0/0x9a0 [ 761.546377][T14514] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 761.552571][T14514] ? lockdep_hardirqs_on+0x94/0x130 [ 761.557817][T14514] ? syscall_enter_from_user_mode+0x37/0x230 [ 761.563826][T14514] ? syscall_enter_from_user_mode+0x2e/0x230 [ 761.569863][T14514] do_syscall_64+0x3b/0xb0 [ 761.574303][T14514] ? clear_bhb_loop+0x45/0xa0 [ 761.579025][T14514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 761.585044][T14514] RIP: 0033:0x7f547498d169 [ 761.589494][T14514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.609119][T14514] RSP: 002b:00007f5475707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.617560][T14514] RAX: ffffffffffffffda RBX: 00007f5474ba5fa0 RCX: 00007f547498d169 [ 761.625563][T14514] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000f [ 761.633653][T14514] RBP: 00007f5474a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 761.641649][T14514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.649661][T14514] R13: 0000000000000000 R14: 00007f5474ba5fa0 R15: 00007fffe154af68 [ 761.657679][T14514] [ 762.337389][T14533] netlink: 'syz.2.3664': attribute type 21 has an invalid length. [ 762.372856][T14533] netlink: 'syz.2.3664': attribute type 15 has an invalid length. [ 762.466421][T14533] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3664'. [ 762.517096][T14533] IPv6: NLM_F_CREATE should be specified when creating new route [ 762.615032][T14533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 762.622502][T14533] IPv6: NLM_F_CREATE should be set when creating new route [ 762.628298][T14537] netlink: 'syz.4.3665': attribute type 3 has an invalid length. [ 762.629985][T14533] IPv6: NLM_F_CREATE should be set when creating new route [ 762.645130][T14533] IPv6: NLM_F_CREATE should be set when creating new route [ 762.673595][T14539] netlink: 114704 bytes leftover after parsing attributes in process `syz.4.3665'. [ 762.724955][T14537] netlink: 'syz.4.3665': attribute type 1 has an invalid length. [ 762.799211][T14539] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 762.863389][T14539] CPU: 0 PID: 14539 Comm: syz.4.3665 Not tainted 6.1.131-syzkaller #0 [ 762.871606][T14539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 762.881673][T14539] Call Trace: [ 762.884958][T14539] [ 762.887896][T14539] dump_stack_lvl+0x1e3/0x2cb [ 762.892588][T14539] ? nf_tcp_handle_invalid+0x647/0x647 [ 762.898053][T14539] ? panic+0x764/0x764 [ 762.902147][T14539] sysfs_warn_dup+0x8a/0xa0 [ 762.906679][T14539] sysfs_do_create_link_sd+0xbe/0x100 [ 762.912078][T14539] device_add+0x7d4/0xfd0 [ 762.916432][T14539] wiphy_register+0x1e91/0x2d10 [ 762.921319][T14539] ? cfg80211_event_work+0x40/0x40 [ 762.926439][T14539] ? minstrel_ht_alloc+0x874/0x9e0 [ 762.931583][T14539] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 762.937667][T14539] ieee80211_register_hw+0x31bd/0x3f10 [ 762.943141][T14539] ? ieee80211_register_hw+0x11d1/0x3f10 [ 762.948791][T14539] ? ieee80211_register_hw+0x10d1/0x3f10 [ 762.954437][T14539] ? ieee80211_tasklet_handler+0x20/0x20 [ 762.960083][T14539] ? __debug_object_init+0xe9/0x450 [ 762.965295][T14539] ? memset+0x1f/0x40 [ 762.969289][T14539] ? __hrtimer_init+0x181/0x260 [ 762.974154][T14539] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 762.979906][T14539] hwsim_new_radio_nl+0xc54/0x1190 [ 762.985037][T14539] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 762.991401][T14539] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 762.997746][T14539] genl_rcv_msg+0xbfa/0xf50 [ 763.002266][T14539] ? genl_bind+0x400/0x400 [ 763.006726][T14539] ? read_lock_is_recursive+0x10/0x10 [ 763.012113][T14539] ? perf_trace_lock+0x37f/0x440 [ 763.017073][T14539] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 763.023414][T14539] ? refcount_inc+0x80/0x80 [ 763.027940][T14539] netlink_rcv_skb+0x1cd/0x410 [ 763.032724][T14539] ? genl_bind+0x400/0x400 [ 763.037148][T14539] ? netlink_ack+0x12a0/0x12a0 [ 763.041933][T14539] genl_rcv+0x24/0x40 [ 763.045921][T14539] netlink_unicast+0x7e2/0x970 [ 763.050705][T14539] ? netlink_detachskb+0x90/0x90 [ 763.055646][T14539] ? find_vmap_area+0xf3/0x100 [ 763.060427][T14539] ? __phys_addr_symbol+0x2b/0x70 [ 763.065462][T14539] ? __check_object_size+0x4dd/0xa30 [ 763.070758][T14539] ? bpf_lsm_netlink_send+0x5/0x10 [ 763.075884][T14539] netlink_sendmsg+0xa26/0xd60 [ 763.080696][T14539] ? netlink_getsockopt+0x580/0x580 [ 763.085901][T14539] ? aa_sock_msg_perm+0x91/0x150 [ 763.090849][T14539] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 763.096148][T14539] ? security_socket_sendmsg+0x7d/0xa0 [ 763.101619][T14539] ? netlink_getsockopt+0x580/0x580 [ 763.106824][T14539] ____sys_sendmsg+0x5d3/0x9a0 [ 763.111605][T14539] ? __sys_sendmsg_sock+0x30/0x30 [ 763.116652][T14539] __sys_sendmsg+0x2a9/0x390 [ 763.121247][T14539] ? ____sys_sendmsg+0x9a0/0x9a0 [ 763.126222][T14539] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 763.132230][T14539] ? syscall_enter_from_user_mode+0x2e/0x230 [ 763.138217][T14539] ? lockdep_hardirqs_on+0x94/0x130 [ 763.143426][T14539] ? syscall_enter_from_user_mode+0x2e/0x230 [ 763.149427][T14539] do_syscall_64+0x3b/0xb0 [ 763.153847][T14539] ? clear_bhb_loop+0x45/0xa0 [ 763.158537][T14539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.164448][T14539] RIP: 0033:0x7f547498d169 [ 763.168870][T14539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.188477][T14539] RSP: 002b:00007f54747ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.196900][T14539] RAX: ffffffffffffffda RBX: 00007f5474ba6080 RCX: 00007f547498d169 [ 763.204873][T14539] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000f [ 763.212857][T14539] RBP: 00007f5474a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 763.220832][T14539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.228820][T14539] R13: 0000000000000000 R14: 00007f5474ba6080 R15: 00007fffe154af68 [ 763.236811][T14539] [ 763.872511][T14553] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.3670'. [ 764.036609][T14553] netlink: 114704 bytes leftover after parsing attributes in process `syz.1.3670'. [ 764.128015][T14553] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 764.168101][T14553] CPU: 0 PID: 14553 Comm: syz.1.3670 Not tainted 6.1.131-syzkaller #0 [ 764.176318][T14553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 764.186398][T14553] Call Trace: [ 764.189682][T14553] [ 764.192610][T14553] dump_stack_lvl+0x1e3/0x2cb [ 764.197301][T14553] ? nf_tcp_handle_invalid+0x647/0x647 [ 764.202764][T14553] ? panic+0x764/0x764 [ 764.206853][T14553] sysfs_warn_dup+0x8a/0xa0 [ 764.211364][T14553] sysfs_do_create_link_sd+0xbe/0x100 [ 764.216767][T14553] device_add+0x7d4/0xfd0 [ 764.221117][T14553] wiphy_register+0x1e91/0x2d10 [ 764.225988][T14553] ? cfg80211_event_work+0x40/0x40 [ 764.231105][T14553] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 764.237272][T14553] ? ieee80211_register_hw+0x2fd0/0x3f10 [ 764.242907][T14553] ? ieee80211_register_hw+0x2fda/0x3f10 [ 764.248553][T14553] ieee80211_register_hw+0x31bd/0x3f10 [ 764.254026][T14553] ? ieee80211_register_hw+0x11d1/0x3f10 [ 764.259665][T14553] ? ieee80211_register_hw+0x10d1/0x3f10 [ 764.265306][T14553] ? ieee80211_tasklet_handler+0x20/0x20 [ 764.270942][T14553] ? __debug_object_init+0xe9/0x450 [ 764.276149][T14553] ? memset+0x1f/0x40 [ 764.280145][T14553] ? __hrtimer_init+0x181/0x260 [ 764.285005][T14553] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 764.290758][T14553] hwsim_new_radio_nl+0xc54/0x1190 [ 764.295888][T14553] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 764.302242][T14553] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 764.308584][T14553] genl_rcv_msg+0xbfa/0xf50 [ 764.313104][T14553] ? genl_bind+0x400/0x400 [ 764.317532][T14553] ? validate_chain+0x112/0x5950 [ 764.322476][T14553] ? lock_acquire+0x26f/0x5a0 [ 764.327171][T14553] ? read_lock_is_recursive+0x10/0x10 [ 764.332584][T14553] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 764.338928][T14553] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 764.345021][T14553] netlink_rcv_skb+0x1cd/0x410 [ 764.349792][T14553] ? genl_bind+0x400/0x400 [ 764.354219][T14553] ? netlink_ack+0x12a0/0x12a0 [ 764.358997][T14553] ? __rcu_read_unlock+0x92/0x100 [ 764.364051][T14553] genl_rcv+0x24/0x40 [ 764.368068][T14553] netlink_unicast+0x7e2/0x970 [ 764.372870][T14553] ? netlink_detachskb+0x90/0x90 [ 764.377824][T14553] ? find_vmap_area+0xf3/0x100 [ 764.382607][T14553] ? __phys_addr_symbol+0x2b/0x70 [ 764.387649][T14553] ? __check_object_size+0x4dd/0xa30 [ 764.392969][T14553] ? bpf_lsm_netlink_send+0x5/0x10 [ 764.398118][T14553] netlink_sendmsg+0xa26/0xd60 [ 764.402928][T14553] ? netlink_getsockopt+0x580/0x580 [ 764.408135][T14553] ? __sanitizer_cov_trace_const_cmp4+0x4/0x80 [ 764.414320][T14553] ? aa_sock_msg_perm+0x91/0x150 [ 764.419266][T14553] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 764.424583][T14553] ? security_socket_sendmsg+0x7d/0xa0 [ 764.430058][T14553] ? netlink_getsockopt+0x580/0x580 [ 764.435265][T14553] ____sys_sendmsg+0x5d3/0x9a0 [ 764.440080][T14553] ? __sys_sendmsg_sock+0x30/0x30 [ 764.445147][T14553] __sys_sendmsg+0x2a9/0x390 [ 764.449749][T14553] ? ____sys_sendmsg+0x9a0/0x9a0 [ 764.454720][T14553] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 764.460891][T14553] ? lockdep_hardirqs_on+0x94/0x130 [ 764.466117][T14553] ? syscall_enter_from_user_mode+0x37/0x230 [ 764.472203][T14553] ? syscall_enter_from_user_mode+0x2e/0x230 [ 764.478200][T14553] do_syscall_64+0x3b/0xb0 [ 764.482637][T14553] ? clear_bhb_loop+0x45/0xa0 [ 764.487325][T14553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.493259][T14553] RIP: 0033:0x7f10eab8d169 [ 764.497680][T14553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.517298][T14553] RSP: 002b:00007f10eb9de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.525720][T14553] RAX: ffffffffffffffda RBX: 00007f10eada5fa0 RCX: 00007f10eab8d169 [ 764.533696][T14553] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000d [ 764.541668][T14553] RBP: 00007f10eac0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 764.549641][T14553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.557611][T14553] R13: 0000000000000000 R14: 00007f10eada5fa0 R15: 00007ffeb4e5a3a8 [ 764.565619][T14553] [ 764.794810][T14561] IPv6: NLM_F_CREATE should be specified when creating new route [ 764.806886][T14561] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3672'. [ 765.914341][T14586] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3678'. [ 766.162218][T14583] netlink: 114704 bytes leftover after parsing attributes in process `syz.1.3678'. [ 766.302600][T14589] netlink: 'syz.3.3680': attribute type 10 has an invalid length. [ 766.336687][T14589] netlink: 'syz.3.3680': attribute type 4 has an invalid length. [ 766.353239][T14589] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3680'. [ 766.382209][T14583] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 766.415179][T14583] CPU: 1 PID: 14583 Comm: syz.1.3678 Not tainted 6.1.131-syzkaller #0 [ 766.423401][T14583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 766.433489][T14583] Call Trace: [ 766.436791][T14583] [ 766.439743][T14583] dump_stack_lvl+0x1e3/0x2cb [ 766.444454][T14583] ? nf_tcp_handle_invalid+0x647/0x647 [ 766.449949][T14583] ? panic+0x764/0x764 [ 766.454080][T14583] sysfs_warn_dup+0x8a/0xa0 [ 766.458619][T14583] sysfs_do_create_link_sd+0xbe/0x100 [ 766.464039][T14583] device_add+0x7d4/0xfd0 [ 766.468420][T14583] wiphy_register+0x1e91/0x2d10 [ 766.473323][T14583] ? cfg80211_event_work+0x40/0x40 [ 766.478468][T14583] ? minstrel_ht_alloc+0x874/0x9e0 [ 766.483625][T14583] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 766.489751][T14583] ieee80211_register_hw+0x31bd/0x3f10 [ 766.495267][T14583] ? ieee80211_register_hw+0x11d1/0x3f10 [ 766.500930][T14583] ? ieee80211_register_hw+0x10d1/0x3f10 [ 766.506649][T14583] ? ieee80211_tasklet_handler+0x20/0x20 [ 766.512316][T14583] ? __debug_object_init+0xe9/0x450 [ 766.517555][T14583] ? memset+0x1f/0x40 [ 766.521577][T14583] ? __hrtimer_init+0x181/0x260 [ 766.526473][T14583] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 766.532231][T14583] hwsim_new_radio_nl+0xc54/0x1190 [ 766.537363][T14583] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 766.543708][T14583] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 766.550049][T14583] genl_rcv_msg+0xbfa/0xf50 [ 766.554571][T14583] ? genl_bind+0x400/0x400 [ 766.559032][T14583] ? mark_lock+0x9a/0x340 [ 766.563365][T14583] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 766.569359][T14583] ? print_irqtrace_events+0x210/0x210 [ 766.574840][T14583] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 766.581089][T14583] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 766.587434][T14583] ? netlink_rcv_skb+0xf4/0x410 [ 766.592290][T14583] ? memset+0x23/0x40 [ 766.596283][T14583] netlink_rcv_skb+0x1cd/0x410 [ 766.601051][T14583] ? genl_bind+0x400/0x400 [ 766.605484][T14583] ? netlink_ack+0x12a0/0x12a0 [ 766.610263][T14583] ? __rcu_read_unlock+0x92/0x100 [ 766.615331][T14583] genl_rcv+0x24/0x40 [ 766.619334][T14583] netlink_unicast+0x7e2/0x970 [ 766.624124][T14583] ? netlink_detachskb+0x90/0x90 [ 766.629075][T14583] ? __check_object_size+0x4ca/0xa30 [ 766.634381][T14583] ? __check_object_size+0x4dd/0xa30 [ 766.639686][T14583] ? bpf_lsm_netlink_send+0x5/0x10 [ 766.644816][T14583] netlink_sendmsg+0xa26/0xd60 [ 766.649603][T14583] ? netlink_getsockopt+0x580/0x580 [ 766.654815][T14583] ? aa_sock_msg_perm+0x91/0x150 [ 766.659785][T14583] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 766.665091][T14583] ? security_socket_sendmsg+0x7d/0xa0 [ 766.670585][T14583] ? netlink_getsockopt+0x580/0x580 [ 766.675799][T14583] ____sys_sendmsg+0x5d3/0x9a0 [ 766.680589][T14583] ? __sys_sendmsg_sock+0x30/0x30 [ 766.685634][T14583] __sys_sendmsg+0x2a9/0x390 [ 766.690235][T14583] ? ____sys_sendmsg+0x9a0/0x9a0 [ 766.695206][T14583] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 766.701374][T14583] ? lockdep_hardirqs_on+0x94/0x130 [ 766.706593][T14583] ? syscall_enter_from_user_mode+0x37/0x230 [ 766.712586][T14583] ? syscall_enter_from_user_mode+0x2e/0x230 [ 766.718585][T14583] do_syscall_64+0x3b/0xb0 [ 766.723008][T14583] ? clear_bhb_loop+0x45/0xa0 [ 766.727793][T14583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 766.733694][T14583] RIP: 0033:0x7f10eab8d169 [ 766.738114][T14583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.757757][T14583] RSP: 002b:00007f10eb9de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.766186][T14583] RAX: ffffffffffffffda RBX: 00007f10eada5fa0 RCX: 00007f10eab8d169 [ 766.774172][T14583] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000f [ 766.782165][T14583] RBP: 00007f10eac0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 766.790138][T14583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.798106][T14583] R13: 0000000000000000 R14: 00007f10eada5fa0 R15: 00007ffeb4e5a3a8 [ 766.806115][T14583] [ 767.368103][T14595] netlink: 'syz.2.3683': attribute type 3 has an invalid length. [ 767.380873][T14598] bond0: (slave geneve0): Error: Slave device does not support XDP [ 767.392506][T14595] netlink: 'syz.2.3683': attribute type 1 has an invalid length. [ 767.416551][T14598] netlink: 'syz.0.3697': attribute type 10 has an invalid length. [ 767.450778][T14595] netlink: 114704 bytes leftover after parsing attributes in process `syz.2.3683'. [ 767.463526][T14598] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.538370][T14595] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 767.556478][T14595] CPU: 1 PID: 14595 Comm: syz.2.3683 Not tainted 6.1.131-syzkaller #0 [ 767.564664][T14595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 767.564681][T14595] Call Trace: [ 767.564691][T14595] [ 767.564700][T14595] dump_stack_lvl+0x1e3/0x2cb [ 767.585865][T14595] ? nf_tcp_handle_invalid+0x647/0x647 [ 767.591363][T14595] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 767.597578][T14595] sysfs_warn_dup+0x8a/0xa0 [ 767.602126][T14595] sysfs_do_create_link_sd+0xbe/0x100 [ 767.607545][T14595] device_add+0x7d4/0xfd0 [ 767.611917][T14595] wiphy_register+0x1e91/0x2d10 [ 767.616795][T14595] ? cfg80211_event_work+0x40/0x40 [ 767.621939][T14595] ? minstrel_ht_alloc+0x874/0x9e0 [ 767.627064][T14595] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 767.633154][T14595] ieee80211_register_hw+0x31bd/0x3f10 [ 767.638642][T14595] ? ieee80211_register_hw+0x11d1/0x3f10 [ 767.644286][T14595] ? ieee80211_register_hw+0x10d1/0x3f10 [ 767.649931][T14595] ? ieee80211_tasklet_handler+0x20/0x20 [ 767.655594][T14595] ? __debug_object_init+0xe9/0x450 [ 767.660826][T14595] ? memset+0x1f/0x40 [ 767.664910][T14595] ? __hrtimer_init+0x181/0x260 [ 767.669804][T14595] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 767.675595][T14595] hwsim_new_radio_nl+0xc54/0x1190 [ 767.680738][T14595] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 767.687092][T14595] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 767.693440][T14595] genl_rcv_msg+0xbfa/0xf50 [ 767.697964][T14595] ? genl_bind+0x400/0x400 [ 767.702404][T14595] ? read_lock_is_recursive+0x10/0x10 [ 767.707804][T14595] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 767.714159][T14595] netlink_rcv_skb+0x1cd/0x410 [ 767.718936][T14595] ? genl_bind+0x400/0x400 [ 767.723361][T14595] ? netlink_ack+0x12a0/0x12a0 [ 767.728141][T14595] genl_rcv+0x24/0x40 [ 767.732135][T14595] netlink_unicast+0x7e2/0x970 [ 767.736955][T14595] ? netlink_detachskb+0x90/0x90 [ 767.741907][T14595] ? netlink_sendmsg+0x80e/0xd60 [ 767.746859][T14595] ? bpf_lsm_netlink_send+0x5/0x10 [ 767.751992][T14595] netlink_sendmsg+0xa26/0xd60 [ 767.756771][T14595] ? netlink_getsockopt+0x580/0x580 [ 767.761972][T14595] ? irqentry_enter+0x33/0x50 [ 767.766761][T14595] ? aa_sock_msg_perm+0x91/0x150 [ 767.771717][T14595] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 767.777031][T14595] ? security_socket_sendmsg+0x7d/0xa0 [ 767.782525][T14595] ? netlink_getsockopt+0x580/0x580 [ 767.787744][T14595] ____sys_sendmsg+0x5d3/0x9a0 [ 767.792560][T14595] ? __sys_sendmsg_sock+0x30/0x30 [ 767.797614][T14595] __sys_sendmsg+0x2a9/0x390 [ 767.802222][T14595] ? ____sys_sendmsg+0x9a0/0x9a0 [ 767.807198][T14595] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 767.813209][T14595] ? syscall_enter_from_user_mode+0x2e/0x230 [ 767.819199][T14595] ? lockdep_hardirqs_on+0x94/0x130 [ 767.824412][T14595] ? syscall_enter_from_user_mode+0x2e/0x230 [ 767.830429][T14595] do_syscall_64+0x3b/0xb0 [ 767.834876][T14595] ? clear_bhb_loop+0x45/0xa0 [ 767.839590][T14595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.845501][T14595] RIP: 0033:0x7f2a3d58d169 [ 767.849923][T14595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.869563][T14595] RSP: 002b:00007f2a3e4d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 767.878026][T14595] RAX: ffffffffffffffda RBX: 00007f2a3d7a5fa0 RCX: 00007f2a3d58d169 [ 767.886047][T14595] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000f [ 767.894027][T14595] RBP: 00007f2a3d60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 767.902002][T14595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.909975][T14595] R13: 0000000000000000 R14: 00007f2a3d7a5fa0 R15: 00007ffe956af278 [ 767.917969][T14595] [ 768.861575][T14621] netlink: 'syz.0.3699': attribute type 3 has an invalid length. [ 768.882130][T14621] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3699'. [ 769.162658][T14629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 769.170076][T14629] IPv6: NLM_F_CREATE should be set when creating new route [ 769.177461][T14629] IPv6: NLM_F_CREATE should be set when creating new route [ 769.184710][T14629] IPv6: NLM_F_CREATE should be set when creating new route [ 769.461750][T14635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3703'. [ 770.223766][T14661] netlink: 'syz.4.3712': attribute type 10 has an invalid length. [ 770.965099][T14677] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.3718'. [ 771.935708][T14695] device syzkaller0 entered promiscuous mode [ 774.594667][T14704] netlink: 'syz.3.3729': attribute type 21 has an invalid length. [ 774.602872][T14704] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3729'. [ 774.612141][T14704] netlink: 'syz.3.3729': attribute type 4 has an invalid length. [ 774.620023][T14704] netlink: 'syz.3.3729': attribute type 5 has an invalid length. [ 774.627888][T14704] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3729'. [ 774.831616][T14726] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3735'. [ 775.411877][T14738] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3741'. [ 777.026243][T14771] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 777.147246][T14771] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 777.419246][T14781] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3758'. [ 779.416086][T14800] netlink: 'syz.2.3765': attribute type 10 has an invalid length. [ 779.426112][T14800] netlink: 'syz.2.3765': attribute type 4 has an invalid length. [ 779.434511][T14800] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3765'. [ 779.802586][T14823] netlink: 114704 bytes leftover after parsing attributes in process `syz.2.3774'. [ 779.890318][T14823] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 779.930357][T14823] CPU: 0 PID: 14823 Comm: syz.2.3774 Not tainted 6.1.131-syzkaller #0 [ 779.938585][T14823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 779.948667][T14823] Call Trace: [ 779.951977][T14823] [ 779.954923][T14823] dump_stack_lvl+0x1e3/0x2cb [ 779.959636][T14823] ? nf_tcp_handle_invalid+0x647/0x647 [ 779.965131][T14823] ? panic+0x764/0x764 [ 779.969256][T14823] sysfs_warn_dup+0x8a/0xa0 [ 779.973793][T14823] sysfs_do_create_link_sd+0xbe/0x100 [ 779.979203][T14823] device_add+0x7d4/0xfd0 [ 779.983571][T14823] wiphy_register+0x1e91/0x2d10 [ 779.988479][T14823] ? cfg80211_event_work+0x40/0x40 [ 779.993629][T14823] ? ieee80211_register_hw+0x30d1/0x3f10 [ 779.999297][T14823] ? ieee80211_register_hw+0x2ed7/0x3f10 [ 780.004968][T14823] ? kasan_check_range+0x74/0x290 [ 780.010036][T14823] ieee80211_register_hw+0x31bd/0x3f10 [ 780.015540][T14823] ? ieee80211_register_hw+0x11d1/0x3f10 [ 780.021203][T14823] ? ieee80211_register_hw+0x10d1/0x3f10 [ 780.026870][T14823] ? ieee80211_tasklet_handler+0x20/0x20 [ 780.032515][T14823] ? __debug_object_init+0xe9/0x450 [ 780.037728][T14823] ? memset+0x1f/0x40 [ 780.041724][T14823] ? __hrtimer_init+0x181/0x260 [ 780.046599][T14823] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 780.052347][T14823] hwsim_new_radio_nl+0xc54/0x1190 [ 780.057476][T14823] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 780.063828][T14823] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 780.070196][T14823] genl_rcv_msg+0xbfa/0xf50 [ 780.074717][T14823] ? genl_bind+0x400/0x400 [ 780.079173][T14823] ? read_lock_is_recursive+0x10/0x10 [ 780.084565][T14823] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 780.090916][T14823] netlink_rcv_skb+0x1cd/0x410 [ 780.095687][T14823] ? genl_bind+0x400/0x400 [ 780.100112][T14823] ? netlink_ack+0x12a0/0x12a0 [ 780.104898][T14823] genl_rcv+0x24/0x40 [ 780.108889][T14823] netlink_unicast+0x7e2/0x970 [ 780.113665][T14823] ? netlink_detachskb+0x90/0x90 [ 780.118607][T14823] ? find_vmap_area+0xf3/0x100 [ 780.123384][T14823] ? __phys_addr_symbol+0x2b/0x70 [ 780.128416][T14823] ? __check_object_size+0x4dd/0xa30 [ 780.133711][T14823] ? bpf_lsm_netlink_send+0x5/0x10 [ 780.138841][T14823] netlink_sendmsg+0xa26/0xd60 [ 780.143627][T14823] ? netlink_getsockopt+0x580/0x580 [ 780.148841][T14823] ? aa_sock_msg_perm+0x91/0x150 [ 780.153788][T14823] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 780.159089][T14823] ? security_socket_sendmsg+0x7d/0xa0 [ 780.164563][T14823] ? netlink_getsockopt+0x580/0x580 [ 780.169771][T14823] ____sys_sendmsg+0x5d3/0x9a0 [ 780.174556][T14823] ? __sys_sendmsg_sock+0x30/0x30 [ 780.179602][T14823] __sys_sendmsg+0x2a9/0x390 [ 780.184207][T14823] ? ____sys_sendmsg+0x9a0/0x9a0 [ 780.189181][T14823] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 780.195346][T14823] ? lockdep_hardirqs_on+0x94/0x130 [ 780.200578][T14823] ? syscall_enter_from_user_mode+0x37/0x230 [ 780.206573][T14823] ? syscall_enter_from_user_mode+0x2e/0x230 [ 780.212578][T14823] do_syscall_64+0x3b/0xb0 [ 780.217004][T14823] ? clear_bhb_loop+0x45/0xa0 [ 780.221696][T14823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 780.227598][T14823] RIP: 0033:0x7f2a3d58d169 [ 780.232040][T14823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.251741][T14823] RSP: 002b:00007f2a3e4d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 780.260161][T14823] RAX: ffffffffffffffda RBX: 00007f2a3d7a5fa0 RCX: 00007f2a3d58d169 [ 780.268136][T14823] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000009 [ 780.276111][T14823] RBP: 00007f2a3d60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 780.284087][T14823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.292060][T14823] R13: 0000000000000000 R14: 00007f2a3d7a5fa0 R15: 00007ffe956af278 [ 780.300068][T14823] [ 781.008817][T14838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 781.016224][T14838] IPv6: NLM_F_CREATE should be set when creating new route [ 781.023530][T14838] IPv6: NLM_F_CREATE should be set when creating new route [ 781.030880][T14838] IPv6: NLM_F_CREATE should be set when creating new route [ 781.454445][T14842] device syzkaller0 entered promiscuous mode [ 781.708502][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3780'. [ 781.717824][T14850] netlink: 'syz.1.3783': attribute type 10 has an invalid length. [ 783.789963][T14863] netlink: 'syz.2.3789': attribute type 21 has an invalid length. [ 784.170549][T14872] netlink: 'syz.4.3792': attribute type 10 has an invalid length. [ 784.196027][T14872] netlink: 'syz.4.3792': attribute type 4 has an invalid length. [ 784.237858][T14872] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3792'. [ 785.907706][T14918] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 785.915658][T14918] #PF: supervisor instruction fetch in kernel mode [ 785.922174][T14918] #PF: error_code(0x0010) - not-present page [ 785.928174][T14918] PGD 787b8067 P4D 787b8067 PUD 0 [ 785.933311][T14918] Oops: 0010 [#1] PREEMPT SMP KASAN [ 785.938529][T14918] CPU: 0 PID: 14918 Comm: syz.1.3808 Not tainted 6.1.131-syzkaller #0 [ 785.946879][T14918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 785.956951][T14918] RIP: 0010:0x0 [ 785.960439][T14918] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 785.967842][T14918] RSP: 0018:ffffc90003257078 EFLAGS: 00010246 [ 785.973944][T14918] RAX: 1ffffffff175834f RBX: ffffffff8bac1a78 RCX: 0000000000000000 [ 785.981945][T14918] RDX: ffffc90003257120 RSI: 0000000000000001 RDI: ffff888076de8000 [ 785.989945][T14918] RBP: ffffc900032571f0 R08: ffffffff85b66061 R09: ffffed100edbd008 [ 785.997953][T14918] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 786.005991][T14918] R13: ffff888076de8000 R14: ffffc90003257158 R15: ffffc90003257158 [ 786.014079][T14918] FS: 00007f10eb9de6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 786.023063][T14918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 786.029662][T14918] CR2: ffffffffffffffd6 CR3: 00000000332ca000 CR4: 00000000003506f0 [ 786.037670][T14918] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 786.045673][T14918] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 786.053934][T14918] Call Trace: [ 786.057217][T14918] [ 786.060145][T14918] ? __die_body+0x5e/0xa0 [ 786.064521][T14918] ? page_fault_oops+0x7fe/0xaa0 [ 786.069487][T14918] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 786.075082][T14918] ? trace_event_raw_event_preemptirq_template+0x1d0/0x1d0 [ 786.082325][T14918] ? rcu_is_watching+0x11/0xb0 [ 786.087123][T14918] ? is_errata93+0xc0/0x240 [ 786.091671][T14918] ? exc_page_fault+0x3d1/0x620 [ 786.096590][T14918] ? asm_exc_page_fault+0x22/0x30 [ 786.101634][T14918] ? bond_get_slave_by_id+0x251/0x560 [ 786.107034][T14918] bond_xdp_xmit+0x3fd/0x650 [ 786.111631][T14918] ? bond_xdp_xmit+0xa7/0x650 [ 786.116347][T14918] ? bond_xdp+0x950/0x950 [ 786.120767][T14918] ? get_page_from_freelist+0x3731/0x38d0 [ 786.126498][T14918] bq_xmit_all+0xe73/0x12e0 [ 786.131053][T14918] ? __dev_flush+0x1c0/0x1c0 [ 786.135659][T14918] ? __alloc_pages+0x770/0x770 [ 786.140452][T14918] ? prepare_alloc_pages+0x35b/0x5b0 [ 786.145770][T14918] ? rcu_is_watching+0x11/0xb0 [ 786.150559][T14918] ? __alloc_pages+0x36f/0x770 [ 786.155492][T14918] ? zone_statistics+0x160/0x160 [ 786.160438][T14918] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 786.166711][T14918] ? rcu_read_lock_bh_held+0x7a/0x110 [ 786.172115][T14918] bq_enqueue+0x324/0x3b0 [ 786.176453][T14918] dev_map_enqueue_multi+0xf8d/0x1100 [ 786.181832][T14918] ? dev_map_enqueue+0x340/0x340 [ 786.186789][T14918] ? memcpy+0x3c/0x60 [ 786.190777][T14918] ? trace_page_pool_state_hold+0xb6/0x280 [ 786.196597][T14918] xdp_do_redirect_frame+0x496/0x660 [ 786.201984][T14918] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 786.207392][T14918] ? 0xffffffffa00038c0 [ 786.211543][T14918] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 786.217110][T14918] ? xdp_convert_md_to_buff+0x330/0x330 [ 786.222666][T14918] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 786.228561][T14918] ? 0xffffffffa00038c0 [ 786.232722][T14918] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 786.238973][T14918] ? __might_fault+0xbd/0x110 [ 786.243655][T14918] ? _copy_from_user+0x109/0x170 [ 786.248609][T14918] ? bpf_test_init+0x137/0x160 [ 786.253399][T14918] ? xdp_convert_md_to_buff+0x5b/0x330 [ 786.258883][T14918] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 786.264274][T14918] ? dev_put+0x80/0x80 [ 786.268382][T14918] ? dev_put+0x80/0x80 [ 786.272463][T14918] bpf_prog_test_run+0x32f/0x3a0 [ 786.277422][T14918] __sys_bpf+0x3eb/0x6c0 [ 786.281661][T14918] ? bpf_link_show_fdinfo+0x300/0x300 [ 786.287029][T14918] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 786.293201][T14918] ? print_irqtrace_events+0x210/0x210 [ 786.298670][T14918] ? print_irqtrace_events+0x210/0x210 [ 786.304138][T14918] ? syscall_enter_from_user_mode+0x2e/0x230 [ 786.310122][T14918] ? lockdep_hardirqs_on+0x94/0x130 [ 786.315329][T14918] __x64_sys_bpf+0x78/0x90 [ 786.319750][T14918] do_syscall_64+0x3b/0xb0 [ 786.324160][T14918] ? clear_bhb_loop+0x45/0xa0 [ 786.328861][T14918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 786.334756][T14918] RIP: 0033:0x7f10eab8d169 [ 786.339175][T14918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.358780][T14918] RSP: 002b:00007f10eb9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 786.367192][T14918] RAX: ffffffffffffffda RBX: 00007f10eada5fa0 RCX: 00007f10eab8d169 [ 786.375292][T14918] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 786.383262][T14918] RBP: 00007f10eac0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 786.391253][T14918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.399228][T14918] R13: 0000000000000000 R14: 00007f10eada5fa0 R15: 00007ffeb4e5a3a8 [ 786.407206][T14918] [ 786.410218][T14918] Modules linked in: [ 786.414119][T14918] CR2: 0000000000000000 [ 786.418284][T14918] ---[ end trace 0000000000000000 ]--- [ 786.423732][T14918] RIP: 0010:0x0 [ 786.427190][T14918] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 786.434546][T14918] RSP: 0018:ffffc90003257078 EFLAGS: 00010246 [ 786.440614][T14918] RAX: 1ffffffff175834f RBX: ffffffff8bac1a78 RCX: 0000000000000000 [ 786.448584][T14918] RDX: ffffc90003257120 RSI: 0000000000000001 RDI: ffff888076de8000 [ 786.456555][T14918] RBP: ffffc900032571f0 R08: ffffffff85b66061 R09: ffffed100edbd008 [ 786.464533][T14918] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 786.472524][T14918] R13: ffff888076de8000 R14: ffffc90003257158 R15: ffffc90003257158 [ 786.480519][T14918] FS: 00007f10eb9de6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 786.489473][T14918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 786.496074][T14918] CR2: ffffffffffffffd6 CR3: 00000000332ca000 CR4: 00000000003506f0 [ 786.504071][T14918] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 786.512057][T14918] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 786.520037][T14918] Kernel panic - not syncing: Fatal exception in interrupt [ 786.527524][T14918] Kernel Offset: disabled [ 786.531842][T14918] Rebooting in 86400 seconds..