last executing test programs: 8.067751231s ago: executing program 2 (id=13113): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf4, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0x2}, 0x7602, 0x5, 0x0, 0x0, 0x100000000000000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b0000"], 0xee8a) 7.186919357s ago: executing program 1 (id=13117): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 5.218810459s ago: executing program 3 (id=13120): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.164462992s ago: executing program 2 (id=13122): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r2, 0x2) r3 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x4, 0x2}]}, {0x0, [0x2e, 0x5f]}}, 0x0, 0x34}, 0x28) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.stat\x00', 0x60ff, 0x8cffffff) 2.094602091s ago: executing program 2 (id=13123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x0, 0x80, 0x3, 0x0, 0x8, 0x30, 0x0, 0x6, 0x1000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140), 0xe}, 0x1000, 0x5, 0x1000, 0x7, 0x4, 0x7, 0xc84, 0x0, 0x5, 0x0, 0xff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex, 0xffffffffffffffff, 0x16, 0x2008}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0xfffffe2b, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c25949301a3c92b", 0x14}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, &(0x7f0000000b40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 2.090098642s ago: executing program 0 (id=13133): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000c0b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0xa, 0x2}, @printk={@i, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)={'a', ' *:* ', 'rm\x00'}, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8920, &(0x7f0000000080)) recvmsg(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000001c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000580)=""/126, 0x7e}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/13, 0xd}, {&(0x7f0000001640)=""/35, 0x23}], 0x4, &(0x7f00000016c0)=""/59, 0x3b}, 0x12000) r6 = socket$kcm(0x29, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000140)={r7, r2}) 2.087041572s ago: executing program 1 (id=13124): perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x48) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) r5 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa7, 0xf2, 0x10, 0x2, 0x0, 0x0, 0x21100, 0xe1a7d742b0ec2988, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x4, 0x1}, 0xd12, 0x8, 0x2, 0x2, 0x3bd, 0x0, 0xe, 0x0, 0x79, 0x0, 0x4}, r5, 0x5, r0, 0x1) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) close(r1) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @local}) 1.997256296s ago: executing program 3 (id=13126): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.718787751s ago: executing program 3 (id=13127): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4020940d, &(0x7f0000000540)={'\x00', @link_local}) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) 1.716715891s ago: executing program 0 (id=13137): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1, 0x4}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0xfffffffc, @loopback={0xfe80000000000000}, 0x4}, 0x80, 0x0}, 0x20008810) r4 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000080)={r4}) r5 = socket$kcm(0xa, 0x6, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(r5, 0x10d, 0xa, &(0x7f0000000000)=r6, 0x11) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 751.953801ms ago: executing program 3 (id=13128): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x18010, 0x5, 0x3, 0xaaf04684de878bda, 0x3, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)}, 0x10140) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa5, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x140c0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 750.436471ms ago: executing program 1 (id=13139): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 749.985991ms ago: executing program 2 (id=13129): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x12) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0xa) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x13ed, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}, 0x80, 0x0}, 0x24000059) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0) 739.090272ms ago: executing program 0 (id=13140): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x600, 0x1a, 0x0, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02ff8d000100"}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x58, &(0x7f00000011c0)}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 586.20528ms ago: executing program 1 (id=13130): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xe0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 581.88516ms ago: executing program 2 (id=13132): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 450.011427ms ago: executing program 3 (id=13134): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r2, 0x2) r3 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x4, 0x2}]}, {0x0, [0x2e, 0x5f]}}, 0x0, 0x34}, 0x28) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.stat\x00', 0x60ff, 0x8cffffff) 448.535297ms ago: executing program 0 (id=13145): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}, 0x10140) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 392.04185ms ago: executing program 1 (id=13135): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) 249.940687ms ago: executing program 1 (id=13136): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 249.069198ms ago: executing program 2 (id=13138): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b7"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="720ac4ffe3d5332d6910160f848e00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000500)) socket$kcm(0xa, 0x7, 0x88) close(0x3) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000180)="8621457b1771c16215fa9f61f75cf2b7f246ca4726d77339de5f19bddf0e5e56d67a9c943710e1856ef4ad79e01a9e315c18d7cfe9f2b7527bb11ccb33e891fa895730a87e5468f436edbb5d4eba1e745b31397bed3c53a4c68eaf5697a2c64ed886ef9b468a17df0d2b8c040881d9bedade4bdde343850d24292a7c60802c73cf50c1ae0025bd41c61d4c0b3102ef54a5f3794886c958e725ec90ce3eca7054853eec33b7402219c45ff36057cf8b61e733ff4aeeac7cd30de0c2ecc2acd297be4c9ef5be139211942840f35ce90696aee14a5897b38c31f11599d9130fda79a950312b9a3c827897be60496a100454", &(0x7f0000000280)=""/154, &(0x7f0000000040)="5c40ff6c90ecb6021e46e04c1f7aae2f2d8e506a417ab09fbb2b537853cfa3e9c5d04be090aed655ef6821faf3ca9dadea8cafd1a902", &(0x7f0000000340)="784be7fc6158bb0b3359fdfa2a5268088c9a001d031aeebbe7ea32e7d7471d6a12035e3e287920198e1e8b7f4b9ea835cd3507f75eeb3d14aaf87b67cd380c6aca71308453aa304c285216186aa407310c25a9cdc6f262efe072fe58b303a96c51616cffa3f1235c60d84dd19034455c78646b6318116eef81d035553dc7f149e23c84b72fc2cd5363fbe9411d5f4c8ac8a75c352e0e4a24a1c50f95d3d2e6eb9c4d4afff03860fe1455a9fc8b2ddcdc38cbee31137a544b36fa3690d6449ea78c1a3702c99a11ccbb998d210cb81c5c11", 0x8a8, 0xffffffffffffffff, 0x4}, 0x38) 235.537048ms ago: executing program 0 (id=13141): socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 112.595745ms ago: executing program 3 (id=13142): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000023c0), 0x0, 0xa2b, 0x2000000, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x50) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x1, 0x4, 0x0, 0x0, 0x6, 0x20202, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1c12, 0x2, @perf_config_ext={0x40000100000001, 0x400}, 0x5010, 0x20000102, 0x9, 0x0, 0x8, 0x100, 0x9, 0x0, 0x200, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 0s ago: executing program 0 (id=13143): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) kernel console output (not intermixed with test programs): resses [ 1974.848911][ T1667] netlink: 'syz.1.11507': attribute type 3 has an invalid length. [ 1974.866484][ T1667] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.11507'. [ 1975.332361][ T1683] netlink: 'syz.1.11512': attribute type 1 has an invalid length. [ 1975.342550][ T1683] netlink: 'syz.1.11512': attribute type 4 has an invalid length. [ 1975.352061][ T1683] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.11512'. [ 1975.601705][ T1689] netlink: 'syz.0.11515': attribute type 39 has an invalid length. [ 1975.962432][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.971276][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.546744][ T1702] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1976.716025][ T1704] netlink: 'syz.2.11521': attribute type 3 has an invalid length. [ 1976.748203][ T1704] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.11521'. [ 1977.557252][ T1714] netlink: 'syz.3.11533': attribute type 3 has an invalid length. [ 1977.582204][ T1714] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.11533'. [ 1977.584894][ T1713] syzkaller0: entered promiscuous mode [ 1977.608027][ T1713] syzkaller0: entered allmulticast mode [ 1977.618391][ T1706] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.11518'. [ 1977.632147][ T1706] bridge_slave_1: default FDB implementation only supports local addresses [ 1977.794649][ T1719] netlink: 'syz.0.11526': attribute type 1 has an invalid length. [ 1977.802817][ T1719] netlink: 'syz.0.11526': attribute type 4 has an invalid length. [ 1977.836079][ T1719] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.11526'. [ 1979.878436][ T1721] netlink: 'syz.3.11527': attribute type 39 has an invalid length. [ 1979.936477][ T1725] syzkaller0: entered promiscuous mode [ 1979.942022][ T1725] syzkaller0: entered allmulticast mode [ 1980.150132][ T1741] netlink: 'syz.1.11532': attribute type 29 has an invalid length. [ 1981.935353][ T1739] netlink: 'syz.3.11531': attribute type 39 has an invalid length. [ 1981.949268][ T1741] netlink: 'syz.1.11532': attribute type 29 has an invalid length. [ 1982.221487][ T1752] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1982.444405][ T1762] netlink: 21 bytes leftover after parsing attributes in process `syz.1.11540'. [ 1982.478808][ T1762] ksmbd: Unknown IPC event: 0, ignore. [ 1982.495815][ T1763] netlink: 'syz.0.11541': attribute type 1 has an invalid length. [ 1982.504146][ T1763] netlink: 'syz.0.11541': attribute type 4 has an invalid length. [ 1982.536752][ T1763] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.11541'. [ 1982.836978][ T1771] netlink: 'syz.0.11544': attribute type 39 has an invalid length. [ 1983.416449][ T1780] syzkaller0: entered promiscuous mode [ 1983.422154][ T1780] syzkaller0: entered allmulticast mode [ 1983.501308][ T1786] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11551'. [ 1983.530437][ T1787] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1983.685248][ T1789] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.11552'. [ 1983.699391][ T1789] netlink: zone id is out of range [ 1983.707303][ T1789] netlink: zone id is out of range [ 1983.733486][ T1789] netlink: zone id is out of range [ 1983.743530][ T1789] netlink: zone id is out of range [ 1983.753707][ T1789] netlink: zone id is out of range [ 1983.763754][ T1789] netlink: zone id is out of range [ 1983.792588][ T1789] netlink: zone id is out of range [ 1983.800405][ T1789] netlink: zone id is out of range [ 1983.809440][ T1789] netlink: zone id is out of range [ 1983.822179][ T1789] netlink: zone id is out of range [ 1983.878860][ T1794] netlink: 21 bytes leftover after parsing attributes in process `syz.3.11554'. [ 1983.888617][ T1794] ksmbd: Unknown IPC event: 0, ignore. [ 1985.655910][ T1796] netlink: 'syz.2.11555': attribute type 1 has an invalid length. [ 1985.664029][ T1796] netlink: 'syz.2.11555': attribute type 4 has an invalid length. [ 1985.674758][ T1796] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.11555'. [ 1985.684513][ T1800] netlink: 'syz.0.11557': attribute type 28 has an invalid length. [ 1985.815172][ T1805] netlink: 'syz.2.11558': attribute type 39 has an invalid length. [ 1986.615011][ T1820] netlink: 'syz.2.11564': attribute type 3 has an invalid length. [ 1986.666228][ T1820] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.11564'. [ 1986.843481][ T1823] syzkaller0: entered promiscuous mode [ 1986.860728][ T1823] syzkaller0: entered allmulticast mode [ 1987.224474][ T1833] netlink: 21 bytes leftover after parsing attributes in process `syz.2.11568'. [ 1987.245008][ T1833] ksmbd: Unknown IPC event: 0, ignore. [ 1988.956533][ T1832] netlink: 'syz.3.11569': attribute type 1 has an invalid length. [ 1988.964493][ T1832] netlink: 'syz.3.11569': attribute type 4 has an invalid length. [ 1988.972560][ T1832] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.11569'. [ 1989.352044][ T1842] netlink: 'syz.1.11573': attribute type 39 has an invalid length. [ 1990.620713][ T1848] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11570'. [ 1990.630257][ T1848] bridge_slave_1: default FDB implementation only supports local addresses [ 1992.120131][ T1852] netlink: 'syz.3.11576': attribute type 3 has an invalid length. [ 1992.135569][ T1852] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.11576'. [ 1992.154655][ T1858] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1993.165065][ T1874] net_ratelimit: 80 callbacks suppressed [ 1993.165109][ T1874] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1993.221433][ T1876] netlink: 'syz.1.11582': attribute type 1 has an invalid length. [ 1993.257805][ T1876] netlink: 'syz.1.11582': attribute type 4 has an invalid length. [ 1993.288301][ T1876] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.11582'. [ 1993.305924][ T1878] netlink: 21 bytes leftover after parsing attributes in process `syz.0.11591'. [ 1993.335601][ T1878] ksmbd: Unknown IPC event: 0, ignore. [ 1993.890284][ T1890] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1995.035478][ T1882] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11585'. [ 1995.048210][ T1882] bridge_slave_1: default FDB implementation only supports local addresses [ 1995.600697][ T1900] netlink: 'syz.2.11590': attribute type 3 has an invalid length. [ 1995.613995][ T1900] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.11590'. [ 1995.752007][ T1903] syzkaller0: entered promiscuous mode [ 1995.772391][ T1903] syzkaller0: entered allmulticast mode [ 1998.207086][ T1920] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11599'. [ 1999.027211][ T1938] netlink: 'syz.1.11605': attribute type 3 has an invalid length. [ 1999.035850][ T1938] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.11605'. [ 1999.909252][ T1933] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11603'. [ 1999.920291][ T1933] bridge_slave_1: default FDB implementation only supports local addresses [ 2000.217273][ T1951] netlink: 'syz.0.11608': attribute type 15 has an invalid length. [ 2000.258122][ T1951] netlink: 'syz.0.11608': attribute type 7 has an invalid length. [ 2000.727238][ T1958] netlink: 'syz.2.11613': attribute type 2 has an invalid length. [ 2000.735143][ T1965] netlink: 'syz.3.11614': attribute type 29 has an invalid length. [ 2000.743788][ T1958] netlink: 119 bytes leftover after parsing attributes in process `syz.2.11613'. [ 2000.800854][ T1962] syzkaller0: entered promiscuous mode [ 2000.806467][ T1962] syzkaller0: entered allmulticast mode [ 2000.842659][ T1965] netlink: 'syz.3.11614': attribute type 29 has an invalid length. [ 2000.974389][ T1969] netlink: 'syz.2.11615': attribute type 3 has an invalid length. [ 2000.997691][ T1969] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.11615'. [ 2003.841381][ T1989] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.11619'. [ 2003.851206][ T1989] bridge_slave_1: default FDB implementation only supports local addresses [ 2004.162498][ T1999] netlink: 'syz.1.11623': attribute type 15 has an invalid length. [ 2004.307780][ T2002] netlink: 'syz.2.11621': attribute type 15 has an invalid length. [ 2004.380393][ T2002] netlink: 'syz.2.11621': attribute type 7 has an invalid length. [ 2004.873986][ T2006] netlink: 'syz.1.11626': attribute type 3 has an invalid length. [ 2004.913569][ T2006] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.11626'. [ 2005.143844][ T2010] netlink: 'syz.0.11627': attribute type 29 has an invalid length. [ 2005.266239][ T2010] netlink: 'syz.0.11627': attribute type 29 has an invalid length. [ 2005.366984][ T2014] netlink: 'syz.3.11629': attribute type 2 has an invalid length. [ 2005.383965][ T2014] netlink: 119 bytes leftover after parsing attributes in process `syz.3.11629'. [ 2007.045523][ T2032] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.11631'. [ 2007.054833][ T2032] bridge_slave_1: default FDB implementation only supports local addresses [ 2008.906279][ T2064] netlink: 'syz.2.11643': attribute type 6 has an invalid length. [ 2008.945899][ T2064] netlink: 164 bytes leftover after parsing attributes in process `syz.2.11643'. [ 2008.989993][ T2065] netlink: 'syz.1.11641': attribute type 2 has an invalid length. [ 2009.035316][ T2065] netlink: 119 bytes leftover after parsing attributes in process `syz.1.11641'. [ 2009.290463][ T2073] netlink: 'syz.1.11645': attribute type 21 has an invalid length. [ 2009.307741][ T2073] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11645'. [ 2010.148550][ T2093] netlink: 830 bytes leftover after parsing attributes in process `syz.2.11652'. [ 2010.298213][ T2094] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.11652'. [ 2010.359256][ T2093] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.11652'. [ 2010.469396][ T2094] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.11652'. [ 2011.188976][ T2109] netlink: 'syz.3.11659': attribute type 21 has an invalid length. [ 2011.201658][ T2109] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11659'. [ 2011.383055][ T2113] netlink: 'syz.1.11656': attribute type 15 has an invalid length. [ 2011.393816][ T2113] netlink: 'syz.1.11656': attribute type 7 has an invalid length. [ 2011.427768][ T2110] netlink: 'syz.0.11654': attribute type 2 has an invalid length. [ 2011.450382][ T2110] netlink: 119 bytes leftover after parsing attributes in process `syz.0.11654'. [ 2012.216943][ T2135] netlink: 830 bytes leftover after parsing attributes in process `syz.3.11666'. [ 2012.341913][ T2136] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.11666'. [ 2012.429458][ T2135] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.11666'. [ 2012.645307][ T2135] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.11666'. [ 2013.395029][ T2148] netlink: 'syz.0.11670': attribute type 21 has an invalid length. [ 2013.407099][ T2148] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11670'. [ 2014.619338][ T2145] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11669'. [ 2014.646050][ T2145] bridge_slave_1: default FDB implementation only supports local addresses [ 2015.052815][ T2169] netlink: 'syz.3.11678': attribute type 6 has an invalid length. [ 2015.117177][ T2169] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11678'. [ 2020.668479][ T2213] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11689'. [ 2020.685709][ T2213] bridge_slave_1: default FDB implementation only supports local addresses [ 2021.232606][ T2221] netlink: 'syz.1.11692': attribute type 6 has an invalid length. [ 2021.278768][ T2221] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11692'. [ 2023.173605][ T2244] netlink: set zone limit has 8 unknown bytes [ 2023.481985][ T2231] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11705'. [ 2023.492611][ T2231] bridge_slave_1: default FDB implementation only supports local addresses [ 2024.563337][ T2262] netlink: 'syz.0.11706': attribute type 6 has an invalid length. [ 2024.572944][ T2262] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11706'. [ 2025.055274][ T2261] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.11712'. [ 2025.064797][ T2261] bridge_slave_1: default FDB implementation only supports local addresses [ 2025.221236][ T2270] netlink: 'syz.1.11709': attribute type 9 has an invalid length. [ 2025.266048][ T2270] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11709'. [ 2025.952519][ T2279] syzkaller0: entered promiscuous mode [ 2025.965697][ T2279] syzkaller0: entered allmulticast mode [ 2030.292613][ T2324] netlink: 'syz.3.11724': attribute type 9 has an invalid length. [ 2030.326852][ T2324] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11724'. [ 2030.939435][ T2321] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11722'. [ 2031.064919][ T2321] bridge_slave_1: default FDB implementation only supports local addresses [ 2031.957516][ T2346] syzkaller0: entered promiscuous mode [ 2031.964109][ T2346] syzkaller0: entered allmulticast mode [ 2035.026147][ T2371] netlink: 'syz.0.11737': attribute type 9 has an invalid length. [ 2035.045597][ T2371] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.11737'. [ 2035.482465][ T2383] netlink: 15490 bytes leftover after parsing attributes in process `syz.3.11743'. [ 2036.938429][ T2415] syzkaller0: entered promiscuous mode [ 2036.943986][ T2415] syzkaller0: entered allmulticast mode [ 2037.364579][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.371322][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.467882][ T2427] netlink: 15490 bytes leftover after parsing attributes in process `syz.0.11754'. [ 2039.731988][ T2434] netlink: 'syz.2.11757': attribute type 9 has an invalid length. [ 2039.741741][ T2434] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11757'. [ 2039.780577][ T2432] syzkaller0: entered promiscuous mode [ 2039.786274][ T2432] syzkaller0: entered allmulticast mode [ 2039.838930][ T2435] syzkaller0: entered promiscuous mode [ 2039.844486][ T2435] syzkaller0: entered allmulticast mode [ 2045.798000][ T2479] netlink: 15490 bytes leftover after parsing attributes in process `syz.2.11765'. [ 2046.026216][ T2483] netlink: 'syz.1.11768': attribute type 10 has an invalid length. [ 2046.192725][ T2483] team0: Device xfrm0 is of different type [ 2046.467771][ T2493] syzkaller0: entered promiscuous mode [ 2046.495997][ T2493] syzkaller0: entered allmulticast mode [ 2047.276199][ T2515] netlink: 'syz.0.11766': attribute type 10 has an invalid length. [ 2047.295955][ T2515] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11766'. [ 2051.173348][ T2575] netlink: 'syz.2.11788': attribute type 10 has an invalid length. [ 2051.185621][ T2575] netlink: 168 bytes leftover after parsing attributes in process `syz.2.11788'. [ 2054.571133][ T2637] syzkaller0: entered promiscuous mode [ 2054.595507][ T2637] syzkaller0: entered allmulticast mode [ 2056.201217][ T2659] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11806'. [ 2062.979375][ T2718] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.11822'. [ 2063.007460][ T2718] netlink: 22572 bytes leftover after parsing attributes in process `syz.3.11822'. [ 2063.029513][ T2718] tipc: Started in network mode [ 2063.048134][ T2718] tipc: Node identity e, cluster identity 4711 [ 2063.058518][ T2718] tipc: Node number set to 14 [ 2063.068969][ T2716] netlink: 'syz.0.11830': attribute type 9 has an invalid length. [ 2063.089321][ T2716] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.11830'. [ 2064.475255][ T2749] netlink: 'syz.2.11832': attribute type 9 has an invalid length. [ 2064.497895][ T2749] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11832'. [ 2065.427245][ T2762] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.11835'. [ 2065.471824][ T2762] netlink: 22616 bytes leftover after parsing attributes in process `syz.0.11835'. [ 2067.992918][ T2766] netlink: 'syz.0.11836': attribute type 10 has an invalid length. [ 2068.324100][ T2775] netlink: 'syz.1.11839': attribute type 9 has an invalid length. [ 2068.351550][ T2775] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11839'. [ 2068.963462][ T2792] netlink: 'syz.3.11842': attribute type 3 has an invalid length. [ 2069.034671][ T2794] netlink: 'syz.2.11845': attribute type 10 has an invalid length. [ 2069.056700][ T2792] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.11842'. [ 2069.076414][ T2794] veth1_macvtap: left promiscuous mode [ 2069.443661][ T2803] netlink: 'syz.3.11849': attribute type 10 has an invalid length. [ 2069.625581][ T2803] xfrm0: entered promiscuous mode [ 2069.650012][ T2803] xfrm0: entered allmulticast mode [ 2069.666064][ T2803] team0: Device xfrm0 is of different type [ 2070.302415][ T2839] netlink: 'syz.3.11856': attribute type 9 has an invalid length. [ 2070.312040][ T2839] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11856'. [ 2071.660417][ T2864] netlink: 188 bytes leftover after parsing attributes in process `syz.0.11872'. [ 2071.729203][ T2864] Ù: renamed from bond_slave_1 (while UP) [ 2072.319063][ T2882] netlink: 'syz.2.11870': attribute type 10 has an invalid length. [ 2072.430974][ T2882] team0: Device xfrm0 is of different type [ 2072.478211][ T2887] netlink: 'syz.1.11871': attribute type 10 has an invalid length. [ 2072.517675][ T2888] netlink: 'syz.1.11871': attribute type 2 has an invalid length. [ 2072.526265][ T2888] netlink: 'syz.1.11871': attribute type 8 has an invalid length. [ 2072.543852][ T2888] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11871'. [ 2073.023937][ T2895] netlink: 'syz.3.11885': attribute type 10 has an invalid length. [ 2073.550637][ T2895] team0: Device xfrm0 is of different type [ 2076.228578][ T2911] netlink: 'syz.2.11875': attribute type 9 has an invalid length. [ 2076.248930][ T2911] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11875'. [ 2077.252190][ T2925] netlink: 'syz.3.11886': attribute type 10 has an invalid length. [ 2077.279237][ T2925] veth1_macvtap: left promiscuous mode [ 2077.435166][ T2930] netlink: 'syz.2.11887': attribute type 10 has an invalid length. [ 2077.450390][ T2930] netlink: 'syz.2.11887': attribute type 2 has an invalid length. [ 2077.465801][ T2930] netlink: 'syz.2.11887': attribute type 8 has an invalid length. [ 2077.481202][ T2930] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11887'. [ 2077.607656][ T2932] IPv6: pim6reg1: Disabled Multicast RS [ 2078.044713][ T2940] netlink: 'syz.2.11895': attribute type 9 has an invalid length. [ 2078.081541][ T2936] netlink: 'syz.0.11891': attribute type 3 has an invalid length. [ 2078.099378][ T2940] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11895'. [ 2078.127682][ T2936] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.11891'. [ 2079.537776][ T2962] netlink: 'syz.0.11902': attribute type 10 has an invalid length. [ 2079.636104][ T2962] veth1_macvtap: left promiscuous mode [ 2080.202050][ T2959] netlink: 'syz.3.11904': attribute type 10 has an invalid length. [ 2080.225751][ T2964] netlink: 'syz.3.11904': attribute type 2 has an invalid length. [ 2080.245646][ T2964] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11904'. [ 2080.717691][ T2974] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.11908'. [ 2080.730991][ T2976] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.11907'. [ 2081.985602][ T2974] ieee80211 phy91: Failed to add default virtual iface [ 2082.223039][ T2990] validate_nla: 3 callbacks suppressed [ 2082.223075][ T2990] netlink: 'syz.1.11915': attribute type 10 has an invalid length. [ 2082.279882][ T2990] veth1_macvtap: left promiscuous mode [ 2082.707876][ T3002] netlink: 'syz.2.11918': attribute type 9 has an invalid length. [ 2082.738010][ T3002] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11918'. [ 2082.982881][ T3004] netlink: 'syz.3.11919': attribute type 3 has an invalid length. [ 2082.996937][ T3004] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.11919'. [ 2083.291816][ T3009] netlink: 'syz.1.11928': attribute type 3 has an invalid length. [ 2083.313790][ T3009] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.11928'. [ 2083.667455][ T3015] netlink: 'syz.3.11923': attribute type 9 has an invalid length. [ 2083.678640][ T3015] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11923'. [ 2084.324773][ T3031] IPv6: pim6reg1: Disabled Multicast RS [ 2084.372252][ T3030] netlink: 'syz.0.11930': attribute type 10 has an invalid length. [ 2084.396496][ T3030] netlink: 41459 bytes leftover after parsing attributes in process `syz.0.11930'. [ 2084.631952][ T3041] netlink: 'syz.0.11933': attribute type 3 has an invalid length. [ 2084.640787][ T3041] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.11933'. [ 2084.838994][ T3047] netlink: 'syz.1.11935': attribute type 10 has an invalid length. [ 2085.023953][ T3047] team0: Device xfrm0 is of different type [ 2085.688133][ T3059] netlink: 'syz.1.11947': attribute type 3 has an invalid length. [ 2085.710797][ T3059] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.11947'. [ 2085.826155][ T3044] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11934'. [ 2085.853267][ T3044] bridge_slave_1: default FDB implementation only supports local addresses [ 2086.041269][ T3068] netlink: 'syz.3.11941': attribute type 9 has an invalid length. [ 2086.054460][ T3068] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11941'. [ 2086.352515][ T3044] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11934'. [ 2086.364889][ T3044] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2086.385615][ T3044] CPU: 0 PID: 3044 Comm: syz.2.11934 Not tainted syzkaller #0 [ 2086.393150][ T3044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2086.403249][ T3044] Call Trace: [ 2086.406572][ T3044] [ 2086.409542][ T3044] dump_stack_lvl+0x18c/0x250 [ 2086.414378][ T3044] ? show_regs_print_info+0x20/0x20 [ 2086.419633][ T3044] ? load_image+0x420/0x420 [ 2086.424234][ T3044] sysfs_warn_dup+0x8e/0xa0 [ 2086.428781][ T3044] sysfs_do_create_link_sd+0xc0/0x110 [ 2086.434175][ T3044] device_add_class_symlinks+0x1cf/0x240 [ 2086.439834][ T3044] device_add+0x507/0xc20 [ 2086.444215][ T3044] wiphy_register+0x1dad/0x2ae0 [ 2086.449124][ T3044] ? cfg80211_event_work+0x40/0x40 [ 2086.454285][ T3044] ? minstrel_ht_alloc+0x88a/0x990 [ 2086.459445][ T3044] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2086.465555][ T3044] ieee80211_register_hw+0x3464/0x4250 [ 2086.471064][ T3044] ? ieee80211_tasklet_handler+0x20/0x20 [ 2086.476725][ T3044] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2086.482660][ T3044] ? __debug_object_init+0xec/0x450 [ 2086.487909][ T3044] ? __asan_memset+0x22/0x40 [ 2086.492536][ T3044] ? __hrtimer_init+0x186/0x270 [ 2086.497422][ T3044] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2086.503213][ T3044] ? mac80211_hwsim_free+0x220/0x220 [ 2086.508529][ T3044] ? rcu_is_watching+0x15/0xb0 [ 2086.513319][ T3044] ? kstrndup+0xbd/0x140 [ 2086.517598][ T3044] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2086.523169][ T3044] ? __nla_validate+0x50/0x50 [ 2086.527877][ T3044] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2086.534241][ T3044] ? __nla_parse+0x40/0x50 [ 2086.538686][ T3044] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2086.545134][ T3044] genl_family_rcv_msg_doit+0x211/0x310 [ 2086.550715][ T3044] ? end_current_label_crit_section+0x170/0x170 [ 2086.556997][ T3044] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2086.562933][ T3044] ? bpf_lsm_capable+0x9/0x10 [ 2086.567655][ T3044] ? security_capable+0x89/0xb0 [ 2086.572557][ T3044] genl_rcv_msg+0x619/0x7a0 [ 2086.577102][ T3044] ? genl_bind+0x360/0x360 [ 2086.581532][ T3044] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2086.587891][ T3044] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2086.594531][ T3044] netlink_rcv_skb+0x241/0x4d0 [ 2086.599333][ T3044] ? genl_bind+0x360/0x360 [ 2086.603806][ T3044] ? netlink_ack+0x1180/0x1180 [ 2086.608663][ T3044] ? __lock_acquire+0x7d40/0x7d40 [ 2086.613727][ T3044] ? down_read+0x1ac/0x2e0 [ 2086.618213][ T3044] genl_rcv+0x28/0x40 [ 2086.622223][ T3044] netlink_unicast+0x751/0x8d0 [ 2086.627034][ T3044] netlink_sendmsg+0x8d0/0xbf0 [ 2086.631835][ T3044] ? netlink_getsockopt+0x590/0x590 [ 2086.637074][ T3044] ? aa_sock_msg_perm+0x94/0x150 [ 2086.642044][ T3044] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2086.647370][ T3044] ? security_socket_sendmsg+0x80/0xa0 [ 2086.652863][ T3044] ? netlink_getsockopt+0x590/0x590 [ 2086.658188][ T3044] ____sys_sendmsg+0x5ba/0x960 [ 2086.662989][ T3044] ? __asan_memset+0x22/0x40 [ 2086.667612][ T3044] ? __sys_sendmsg_sock+0x30/0x30 [ 2086.672656][ T3044] ? __import_iovec+0x5f2/0x850 [ 2086.677535][ T3044] ? import_iovec+0x73/0xa0 [ 2086.682098][ T3044] ___sys_sendmsg+0x2a6/0x360 [ 2086.686808][ T3044] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 2086.692491][ T3044] ? __sys_sendmsg+0x2a0/0x2a0 [ 2086.697338][ T3044] __se_sys_sendmsg+0x1c2/0x2b0 [ 2086.702223][ T3044] ? __x64_sys_sendmsg+0x80/0x80 [ 2086.707208][ T3044] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2086.713154][ T3044] do_syscall_64+0x55/0xa0 [ 2086.717619][ T3044] ? clear_bhb_loop+0x40/0x90 [ 2086.722341][ T3044] ? clear_bhb_loop+0x40/0x90 [ 2086.727057][ T3044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2086.732986][ T3044] RIP: 0033:0x7f9b0779cdd9 [ 2086.737450][ T3044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2086.757095][ T3044] RSP: 002b:00007f9b085b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2086.765584][ T3044] RAX: ffffffffffffffda RBX: 00007f9b07a15fa0 RCX: 00007f9b0779cdd9 [ 2086.773587][ T3044] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2086.781585][ T3044] RBP: 00007f9b07832d69 R08: 0000000000000000 R09: 0000000000000000 [ 2086.789590][ T3044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2086.797590][ T3044] R13: 00007f9b07a16038 R14: 00007f9b07a15fa0 R15: 00007ffc7b203f58 [ 2086.805612][ T3044] [ 2086.973242][ T3073] syzkaller0: entered promiscuous mode [ 2086.979693][ T3073] syzkaller0: entered allmulticast mode [ 2089.769648][ T3096] validate_nla: 2 callbacks suppressed [ 2089.769781][ T3096] netlink: 'syz.0.11953': attribute type 9 has an invalid length. [ 2089.802886][ T3096] __nla_validate_parse: 1 callbacks suppressed [ 2089.802903][ T3096] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.11953'. [ 2090.235078][ T3103] netlink: 'syz.1.11956': attribute type 10 has an invalid length. [ 2090.450832][ T3103] team0: Device xfrm0 is of different type [ 2090.679855][ T3109] netlink: 'syz.0.11966': attribute type 9 has an invalid length. [ 2090.697556][ T3109] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.11966'. [ 2090.708219][ T3115] netlink: 'syz.1.11958': attribute type 10 has an invalid length. [ 2090.717359][ T3115] netlink: 41459 bytes leftover after parsing attributes in process `syz.1.11958'. [ 2090.854584][ T3119] syz.3.11961[3119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2090.854722][ T3119] syz.3.11961[3119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2090.946435][ T3122] netlink: 'syz.1.11962': attribute type 3 has an invalid length. [ 2090.974349][ T3122] netlink: 130920 bytes leftover after parsing attributes in process `syz.1.11962'. [ 2091.682007][ T3133] netlink: 'syz.2.11969': attribute type 10 has an invalid length. [ 2092.275437][ T3133] team0: Device xfrm0 is of different type [ 2092.517102][ T3140] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.11975'. [ 2092.526551][ T3140] bridge_slave_1: default FDB implementation only supports local addresses [ 2092.907861][ T3136] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11975'. [ 2092.927679][ T3136] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2092.937367][ T3136] CPU: 1 PID: 3136 Comm: syz.3.11975 Not tainted syzkaller #0 [ 2092.944906][ T3136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2092.955034][ T3136] Call Trace: [ 2092.958357][ T3136] [ 2092.961314][ T3136] dump_stack_lvl+0x18c/0x250 [ 2092.966065][ T3136] ? show_regs_print_info+0x20/0x20 [ 2092.971335][ T3136] ? load_image+0x420/0x420 [ 2092.975929][ T3136] sysfs_warn_dup+0x8e/0xa0 [ 2092.980487][ T3136] sysfs_do_create_link_sd+0xc0/0x110 [ 2092.985937][ T3136] device_add_class_symlinks+0x1cf/0x240 [ 2092.991641][ T3136] device_add+0x507/0xc20 [ 2092.996033][ T3136] wiphy_register+0x1dad/0x2ae0 [ 2093.000948][ T3136] ? cfg80211_event_work+0x40/0x40 [ 2093.006099][ T3136] ? minstrel_ht_alloc+0x88a/0x990 [ 2093.011272][ T3136] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2093.017395][ T3136] ieee80211_register_hw+0x3464/0x4250 [ 2093.022943][ T3136] ? ieee80211_tasklet_handler+0x20/0x20 [ 2093.028621][ T3136] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2093.034608][ T3136] ? __debug_object_init+0xec/0x450 [ 2093.039876][ T3136] ? __asan_memset+0x22/0x40 [ 2093.044518][ T3136] ? __hrtimer_init+0x186/0x270 [ 2093.049428][ T3136] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2093.055270][ T3136] ? mac80211_hwsim_free+0x220/0x220 [ 2093.060637][ T3136] ? rcu_is_watching+0x15/0xb0 [ 2093.065487][ T3136] ? kstrndup+0xbd/0x140 [ 2093.069832][ T3136] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2093.075020][ T3136] ? __nla_validate+0x50/0x50 [ 2093.079844][ T3136] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2093.086280][ T3136] ? __nla_parse+0x40/0x50 [ 2093.090819][ T3136] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2093.097244][ T3136] genl_family_rcv_msg_doit+0x211/0x310 [ 2093.102850][ T3136] ? end_current_label_crit_section+0x170/0x170 [ 2093.109162][ T3136] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2093.115108][ T3136] ? bpf_lsm_capable+0x9/0x10 [ 2093.119832][ T3136] ? security_capable+0x89/0xb0 [ 2093.124771][ T3136] genl_rcv_msg+0x619/0x7a0 [ 2093.129359][ T3136] ? genl_bind+0x360/0x360 [ 2093.133837][ T3136] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2093.140269][ T3136] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2093.146908][ T3136] ? ref_tracker_free+0x690/0x840 [ 2093.151983][ T3136] netlink_rcv_skb+0x241/0x4d0 [ 2093.156819][ T3136] ? genl_bind+0x360/0x360 [ 2093.161321][ T3136] ? netlink_ack+0x1180/0x1180 [ 2093.166156][ T3136] ? __lock_acquire+0x7d40/0x7d40 [ 2093.171235][ T3136] ? down_read+0x1ac/0x2e0 [ 2093.175717][ T3136] genl_rcv+0x28/0x40 [ 2093.179771][ T3136] netlink_unicast+0x751/0x8d0 [ 2093.184619][ T3136] netlink_sendmsg+0x8d0/0xbf0 [ 2093.189437][ T3136] ? netlink_getsockopt+0x590/0x590 [ 2093.194678][ T3136] ? aa_sock_msg_perm+0x94/0x150 [ 2093.199647][ T3136] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2093.204963][ T3136] ? security_socket_sendmsg+0x80/0xa0 [ 2093.210450][ T3136] ? netlink_getsockopt+0x590/0x590 [ 2093.215687][ T3136] ____sys_sendmsg+0x5ba/0x960 [ 2093.220520][ T3136] ? __asan_memset+0x22/0x40 [ 2093.225141][ T3136] ? __sys_sendmsg_sock+0x30/0x30 [ 2093.230185][ T3136] ? __import_iovec+0x5f2/0x850 [ 2093.235074][ T3136] ? import_iovec+0x73/0xa0 [ 2093.239605][ T3136] ___sys_sendmsg+0x2a6/0x360 [ 2093.244318][ T3136] ? __sys_sendmsg+0x2a0/0x2a0 [ 2093.249160][ T3136] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 2093.255524][ T3136] __se_sys_sendmsg+0x1c2/0x2b0 [ 2093.260412][ T3136] ? hrtimer_interrupt+0x89a/0x9c0 [ 2093.265567][ T3136] ? __x64_sys_sendmsg+0x80/0x80 [ 2093.270622][ T3136] ? lockdep_hardirqs_on+0x98/0x150 [ 2093.275901][ T3136] do_syscall_64+0x55/0xa0 [ 2093.280350][ T3136] ? clear_bhb_loop+0x40/0x90 [ 2093.285060][ T3136] ? clear_bhb_loop+0x40/0x90 [ 2093.289806][ T3136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2093.295770][ T3136] RIP: 0033:0x7f42dc39cdd9 [ 2093.300236][ T3136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2093.319872][ T3136] RSP: 002b:00007f42dd1cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2093.328594][ T3136] RAX: ffffffffffffffda RBX: 00007f42dc615fa0 RCX: 00007f42dc39cdd9 [ 2093.336692][ T3136] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2093.344681][ T3136] RBP: 00007f42dc432d69 R08: 0000000000000000 R09: 0000000000000000 [ 2093.352691][ T3136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2093.360688][ T3136] R13: 00007f42dc616038 R14: 00007f42dc615fa0 R15: 00007ffe52155658 [ 2093.368713][ T3136] [ 2093.482913][ T3149] netlink: 'syz.3.11971': attribute type 10 has an invalid length. [ 2093.499739][ T3149] netlink: 41459 bytes leftover after parsing attributes in process `syz.3.11971'. [ 2093.539136][ T3152] netlink: 'syz.0.11980': attribute type 10 has an invalid length. [ 2093.539931][ T3158] syz.1.11972[3158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2093.572305][ T3158] syz.1.11972[3158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2093.850909][ T3164] netlink: 'syz.1.11976': attribute type 2 has an invalid length. [ 2093.942488][ T3167] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11976'. [ 2093.983952][ T3167] bond0: (slave dummy0): Releasing backup interface [ 2094.080572][ T3170] netlink: 'syz.0.11978': attribute type 29 has an invalid length. [ 2095.010672][T17482] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 2095.020433][ T3191] syz.2.11985[3191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2095.040546][ T3191] syz.2.11985[3191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2095.445178][ T3184] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.11981'. [ 2095.548928][ T3200] validate_nla: 1 callbacks suppressed [ 2095.548947][ T3200] netlink: 'syz.2.11989': attribute type 29 has an invalid length. [ 2095.610414][ T3184] bridge_slave_1: default FDB implementation only supports local addresses [ 2095.905479][ T3200] netlink: 'syz.2.11989': attribute type 29 has an invalid length. [ 2096.052760][ T3201] netlink: 'syz.2.11989': attribute type 29 has an invalid length. [ 2096.200007][ T3203] netlink: 'syz.3.11990': attribute type 2 has an invalid length. [ 2096.237597][ T3203] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11990'. [ 2096.338737][ T3203] .`: (slave dummy0): Releasing backup interface [ 2096.356762][ T3203] dummy0 (unregistering): left promiscuous mode [ 2096.363096][ T3203] dummy0 (unregistering): left allmulticast mode [ 2096.380343][ T3175] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11981'. [ 2096.623957][ T3175] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2096.694052][ T3175] CPU: 1 PID: 3175 Comm: syz.1.11981 Not tainted syzkaller #0 [ 2096.701612][ T3175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2096.711725][ T3175] Call Trace: [ 2096.715060][ T3175] [ 2096.718040][ T3175] dump_stack_lvl+0x18c/0x250 [ 2096.722785][ T3175] ? show_regs_print_info+0x20/0x20 [ 2096.728054][ T3175] ? load_image+0x420/0x420 [ 2096.732642][ T3175] sysfs_warn_dup+0x8e/0xa0 [ 2096.737209][ T3175] sysfs_do_create_link_sd+0xc0/0x110 [ 2096.742638][ T3175] device_add_class_symlinks+0x1cf/0x240 [ 2096.748342][ T3175] device_add+0x507/0xc20 [ 2096.752764][ T3175] wiphy_register+0x1dad/0x2ae0 [ 2096.757696][ T3175] ? cfg80211_event_work+0x40/0x40 [ 2096.762873][ T3175] ? minstrel_ht_alloc+0x88a/0x990 [ 2096.768079][ T3175] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2096.774214][ T3175] ieee80211_register_hw+0x3464/0x4250 [ 2096.779763][ T3175] ? ieee80211_tasklet_handler+0x20/0x20 [ 2096.785466][ T3175] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2096.791437][ T3175] ? __debug_object_init+0xec/0x450 [ 2096.796723][ T3175] ? __asan_memset+0x22/0x40 [ 2096.801380][ T3175] ? __hrtimer_init+0x186/0x270 [ 2096.806299][ T3175] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2096.812109][ T3175] ? mac80211_hwsim_free+0x220/0x220 [ 2096.817461][ T3175] ? rcu_is_watching+0x15/0xb0 [ 2096.822285][ T3175] ? kstrndup+0xbd/0x140 [ 2096.826615][ T3175] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2096.831865][ T3175] ? mark_lock+0x94/0x320 [ 2096.836317][ T3175] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2096.842760][ T3175] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2096.849009][ T3175] ? lockdep_hardirqs_on+0x98/0x150 [ 2096.854287][ T3175] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2096.860538][ T3175] genl_family_rcv_msg_doit+0x211/0x310 [ 2096.866152][ T3175] ? end_current_label_crit_section+0x170/0x170 [ 2096.872574][ T3175] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2096.878551][ T3175] ? bpf_lsm_capable+0x9/0x10 [ 2096.883302][ T3175] ? security_capable+0x89/0xb0 [ 2096.888237][ T3175] genl_rcv_msg+0x619/0x7a0 [ 2096.892838][ T3175] ? genl_bind+0x360/0x360 [ 2096.897330][ T3175] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2096.903752][ T3175] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2096.910427][ T3175] ? perf_trace_lock+0xfc/0x3b0 [ 2096.915370][ T3175] netlink_rcv_skb+0x241/0x4d0 [ 2096.920200][ T3175] ? genl_bind+0x360/0x360 [ 2096.924672][ T3175] ? netlink_ack+0x1180/0x1180 [ 2096.929539][ T3175] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2096.935777][ T3175] ? down_read+0x1ac/0x2e0 [ 2096.940280][ T3175] genl_rcv+0x28/0x40 [ 2096.944406][ T3175] netlink_unicast+0x751/0x8d0 [ 2096.949260][ T3175] netlink_sendmsg+0x8d0/0xbf0 [ 2096.954121][ T3175] ? netlink_getsockopt+0x590/0x590 [ 2096.959412][ T3175] ? aa_sock_msg_perm+0x94/0x150 [ 2096.964421][ T3175] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2096.969785][ T3175] ? security_socket_sendmsg+0x80/0xa0 [ 2096.975309][ T3175] ? netlink_getsockopt+0x590/0x590 [ 2096.980585][ T3175] ____sys_sendmsg+0x5ba/0x960 [ 2096.985450][ T3175] ? __asan_memset+0x22/0x40 [ 2096.990102][ T3175] ? __sys_sendmsg_sock+0x30/0x30 [ 2096.995182][ T3175] ? __import_iovec+0x5f2/0x850 [ 2097.000110][ T3175] ? import_iovec+0x73/0xa0 [ 2097.004665][ T3175] ___sys_sendmsg+0x2a6/0x360 [ 2097.009409][ T3175] ? __sys_sendmsg+0x2a0/0x2a0 [ 2097.014249][ T3175] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 2097.020840][ T3175] __se_sys_sendmsg+0x1c2/0x2b0 [ 2097.025757][ T3175] ? __x64_sys_sendmsg+0x80/0x80 [ 2097.030818][ T3175] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2097.036794][ T3175] do_syscall_64+0x55/0xa0 [ 2097.041267][ T3175] ? clear_bhb_loop+0x40/0x90 [ 2097.046015][ T3175] ? clear_bhb_loop+0x40/0x90 [ 2097.050777][ T3175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2097.056738][ T3175] RIP: 0033:0x7f620279cdd9 [ 2097.061207][ T3175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2097.080883][ T3175] RSP: 002b:00007f6203685028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2097.089426][ T3175] RAX: ffffffffffffffda RBX: 00007f6202a15fa0 RCX: 00007f620279cdd9 [ 2097.097465][ T3175] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2097.105485][ T3175] RBP: 00007f6202832d69 R08: 0000000000000000 R09: 0000000000000000 [ 2097.113514][ T3175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2097.121542][ T3175] R13: 00007f6202a16038 R14: 00007f6202a15fa0 R15: 00007ffeafb38d78 [ 2097.129593][ T3175] [ 2098.798200][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.804801][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.906417][ T3237] netlink: 'syz.3.12000': attribute type 29 has an invalid length. [ 2101.110602][ T3237] netlink: 'syz.3.12000': attribute type 29 has an invalid length. [ 2101.135913][ T3238] netlink: 'syz.3.12000': attribute type 29 has an invalid length. [ 2102.572453][ T3261] netlink: 'syz.3.12011': attribute type 9 has an invalid length. [ 2102.590119][ T3252] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.12003'. [ 2102.620871][ T3261] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.12011'. [ 2102.630527][ T3252] bridge_slave_1: default FDB implementation only supports local addresses [ 2103.406005][ T3271] netlink: 164 bytes leftover after parsing attributes in process `syz.1.12023'. [ 2103.457279][ T3252] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12003'. [ 2103.471002][ T3252] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2103.494602][ T3252] CPU: 1 PID: 3252 Comm: syz.0.12003 Not tainted syzkaller #0 [ 2103.502165][ T3252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2103.512332][ T3252] Call Trace: [ 2103.515673][ T3252] [ 2103.518659][ T3252] dump_stack_lvl+0x18c/0x250 [ 2103.523418][ T3252] ? show_regs_print_info+0x20/0x20 [ 2103.528705][ T3252] ? load_image+0x420/0x420 [ 2103.533320][ T3252] sysfs_warn_dup+0x8e/0xa0 [ 2103.537912][ T3252] sysfs_do_create_link_sd+0xc0/0x110 [ 2103.543413][ T3252] device_add_class_symlinks+0x1cf/0x240 [ 2103.549233][ T3252] device_add+0x507/0xc20 [ 2103.553653][ T3252] wiphy_register+0x1dad/0x2ae0 [ 2103.558621][ T3252] ? cfg80211_event_work+0x40/0x40 [ 2103.563897][ T3252] ? minstrel_ht_alloc+0x88a/0x990 [ 2103.569101][ T3252] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2103.575264][ T3252] ieee80211_register_hw+0x3464/0x4250 [ 2103.580819][ T3252] ? ieee80211_tasklet_handler+0x20/0x20 [ 2103.586534][ T3252] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2103.592491][ T3252] ? __debug_object_init+0xec/0x450 [ 2103.597831][ T3252] ? __asan_memset+0x22/0x40 [ 2103.602478][ T3252] ? __hrtimer_init+0x186/0x270 [ 2103.607380][ T3252] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2103.613188][ T3252] ? mac80211_hwsim_free+0x220/0x220 [ 2103.618516][ T3252] ? rcu_is_watching+0x15/0xb0 [ 2103.623330][ T3252] ? kstrndup+0xbd/0x140 [ 2103.627635][ T3252] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2103.632798][ T3252] ? __nla_validate+0x50/0x50 [ 2103.637542][ T3252] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2103.643936][ T3252] ? __nla_parse+0x40/0x50 [ 2103.648402][ T3252] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2103.654783][ T3252] genl_family_rcv_msg_doit+0x211/0x310 [ 2103.660372][ T3252] ? end_current_label_crit_section+0x170/0x170 [ 2103.666667][ T3252] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2103.672619][ T3252] ? bpf_lsm_capable+0x9/0x10 [ 2103.677342][ T3252] ? security_capable+0x89/0xb0 [ 2103.682261][ T3252] genl_rcv_msg+0x619/0x7a0 [ 2103.686825][ T3252] ? genl_bind+0x360/0x360 [ 2103.691314][ T3252] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2103.697690][ T3252] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2103.704326][ T3252] ? ref_tracker_free+0x690/0x840 [ 2103.709412][ T3252] netlink_rcv_skb+0x241/0x4d0 [ 2103.714239][ T3252] ? genl_bind+0x360/0x360 [ 2103.718695][ T3252] ? netlink_ack+0x1180/0x1180 [ 2103.723542][ T3252] ? __lock_acquire+0x7d40/0x7d40 [ 2103.728643][ T3252] ? down_read+0x1ac/0x2e0 [ 2103.733106][ T3252] genl_rcv+0x28/0x40 [ 2103.737134][ T3252] netlink_unicast+0x751/0x8d0 [ 2103.741963][ T3252] netlink_sendmsg+0x8d0/0xbf0 [ 2103.746790][ T3252] ? netlink_getsockopt+0x590/0x590 [ 2103.752042][ T3252] ? aa_sock_msg_perm+0x94/0x150 [ 2103.757024][ T3252] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2103.762356][ T3252] ? security_socket_sendmsg+0x80/0xa0 [ 2103.767855][ T3252] ? netlink_getsockopt+0x590/0x590 [ 2103.773108][ T3252] ____sys_sendmsg+0x5ba/0x960 [ 2103.777927][ T3252] ? __asan_memset+0x22/0x40 [ 2103.782565][ T3252] ? __sys_sendmsg_sock+0x30/0x30 [ 2103.787620][ T3252] ? __import_iovec+0x5f2/0x850 [ 2103.792526][ T3252] ? import_iovec+0x73/0xa0 [ 2103.797075][ T3252] ___sys_sendmsg+0x2a6/0x360 [ 2103.801806][ T3252] ? __sys_sendmsg+0x2a0/0x2a0 [ 2103.806648][ T3252] ? handle_mm_fault+0xe7/0x4c00 [ 2103.811679][ T3252] __se_sys_sendmsg+0x1c2/0x2b0 [ 2103.816605][ T3252] ? __x64_sys_sendmsg+0x80/0x80 [ 2103.821629][ T3252] ? lock_chain_count+0x20/0x20 [ 2103.826537][ T3252] ? lockdep_hardirqs_on+0x98/0x150 [ 2103.831803][ T3252] do_syscall_64+0x55/0xa0 [ 2103.836253][ T3252] ? clear_bhb_loop+0x40/0x90 [ 2103.840977][ T3252] ? clear_bhb_loop+0x40/0x90 [ 2103.845726][ T3252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2103.851670][ T3252] RIP: 0033:0x7eff2279cdd9 [ 2103.856128][ T3252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2103.875766][ T3252] RSP: 002b:00007eff209f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2103.884264][ T3252] RAX: ffffffffffffffda RBX: 00007eff22a16090 RCX: 00007eff2279cdd9 [ 2103.892309][ T3252] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2103.900329][ T3252] RBP: 00007eff22832d69 R08: 0000000000000000 R09: 0000000000000000 [ 2103.908345][ T3252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2103.916357][ T3252] R13: 00007eff22a16128 R14: 00007eff22a16090 R15: 00007ffcfdef9998 [ 2103.924422][ T3252] [ 2104.370103][ T3283] netlink: 'syz.0.12020': attribute type 15 has an invalid length. [ 2104.382380][ T3283] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.12020'. [ 2104.405513][T17482] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 2104.605329][ T3288] netlink: 'syz.2.12024': attribute type 2 has an invalid length. [ 2104.645916][ T3288] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12024'. [ 2104.797063][ T3288] bond0: (slave dummy0): Releasing backup interface [ 2105.592642][ T3315] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12034'. [ 2105.630222][ T3315] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2105.656215][ T3315] CPU: 1 PID: 3315 Comm: syz.3.12034 Not tainted syzkaller #0 [ 2105.663763][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2105.673888][ T3315] Call Trace: [ 2105.677217][ T3315] [ 2105.680226][ T3315] dump_stack_lvl+0x18c/0x250 [ 2105.685062][ T3315] ? show_regs_print_info+0x20/0x20 [ 2105.690328][ T3315] ? load_image+0x420/0x420 [ 2105.694915][ T3315] sysfs_warn_dup+0x8e/0xa0 [ 2105.699489][ T3315] sysfs_do_create_link_sd+0xc0/0x110 [ 2105.704933][ T3315] device_add_class_symlinks+0x1cf/0x240 [ 2105.710630][ T3315] device_add+0x507/0xc20 [ 2105.715030][ T3315] wiphy_register+0x1dad/0x2ae0 [ 2105.719975][ T3315] ? cfg80211_event_work+0x40/0x40 [ 2105.725148][ T3315] ? minstrel_ht_alloc+0x88a/0x990 [ 2105.730337][ T3315] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2105.736470][ T3315] ieee80211_register_hw+0x3464/0x4250 [ 2105.742006][ T3315] ? ieee80211_tasklet_handler+0x20/0x20 [ 2105.747709][ T3315] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2105.753667][ T3315] ? __debug_object_init+0xec/0x450 [ 2105.758929][ T3315] ? __asan_memset+0x22/0x40 [ 2105.763601][ T3315] ? __hrtimer_init+0x186/0x270 [ 2105.768508][ T3315] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2105.774306][ T3315] ? mac80211_hwsim_free+0x220/0x220 [ 2105.779644][ T3315] ? rcu_is_watching+0x15/0xb0 [ 2105.784476][ T3315] ? kstrndup+0xbd/0x140 [ 2105.788794][ T3315] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2105.793966][ T3315] ? __nla_validate+0x50/0x50 [ 2105.798722][ T3315] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2105.805125][ T3315] ? __nla_parse+0x40/0x50 [ 2105.809608][ T3315] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2105.815996][ T3315] genl_family_rcv_msg_doit+0x211/0x310 [ 2105.821599][ T3315] ? end_current_label_crit_section+0x170/0x170 [ 2105.827909][ T3315] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2105.833865][ T3315] ? bpf_lsm_capable+0x9/0x10 [ 2105.838612][ T3315] ? security_capable+0x89/0xb0 [ 2105.843528][ T3315] genl_rcv_msg+0x619/0x7a0 [ 2105.848103][ T3315] ? genl_bind+0x360/0x360 [ 2105.852586][ T3315] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2105.858984][ T3315] ? ref_tracker_free+0x690/0x840 [ 2105.864079][ T3315] netlink_rcv_skb+0x241/0x4d0 [ 2105.868911][ T3315] ? genl_bind+0x360/0x360 [ 2105.873405][ T3315] ? netlink_ack+0x1180/0x1180 [ 2105.878259][ T3315] ? __lock_acquire+0x7d40/0x7d40 [ 2105.883369][ T3315] ? down_read+0x1ac/0x2e0 [ 2105.887891][ T3315] genl_rcv+0x28/0x40 [ 2105.891924][ T3315] netlink_unicast+0x751/0x8d0 [ 2105.896757][ T3315] netlink_sendmsg+0x8d0/0xbf0 [ 2105.901581][ T3315] ? netlink_getsockopt+0x590/0x590 [ 2105.906830][ T3315] ? aa_sock_msg_perm+0x94/0x150 [ 2105.911816][ T3315] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2105.917239][ T3315] ? security_socket_sendmsg+0x80/0xa0 [ 2105.922746][ T3315] ? netlink_getsockopt+0x590/0x590 [ 2105.928095][ T3315] ____sys_sendmsg+0x5ba/0x960 [ 2105.932920][ T3315] ? __asan_memset+0x22/0x40 [ 2105.937561][ T3315] ? __sys_sendmsg_sock+0x30/0x30 [ 2105.942649][ T3315] ? __import_iovec+0x5f2/0x850 [ 2105.947568][ T3315] ? import_iovec+0x73/0xa0 [ 2105.952206][ T3315] ___sys_sendmsg+0x2a6/0x360 [ 2105.956950][ T3315] ? __sys_sendmsg+0x2a0/0x2a0 [ 2105.961824][ T3315] __se_sys_sendmsg+0x1c2/0x2b0 [ 2105.966740][ T3315] ? __x64_sys_sendmsg+0x80/0x80 [ 2105.971747][ T3315] ? lockdep_hardirqs_on+0x98/0x150 [ 2105.977055][ T3315] do_syscall_64+0x55/0xa0 [ 2105.981528][ T3315] ? clear_bhb_loop+0x40/0x90 [ 2105.986266][ T3315] ? clear_bhb_loop+0x40/0x90 [ 2105.990995][ T3315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2105.996946][ T3315] RIP: 0033:0x7f42dc39cdd9 [ 2106.001420][ T3315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2106.021088][ T3315] RSP: 002b:00007f42dd1cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2106.029571][ T3315] RAX: ffffffffffffffda RBX: 00007f42dc615fa0 RCX: 00007f42dc39cdd9 [ 2106.037587][ T3315] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2106.045601][ T3315] RBP: 00007f42dc432d69 R08: 0000000000000000 R09: 0000000000000000 [ 2106.053627][ T3315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2106.061643][ T3315] R13: 00007f42dc616038 R14: 00007f42dc615fa0 R15: 00007ffe52155658 [ 2106.069713][ T3315] [ 2106.146149][ T3313] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.12030'. [ 2106.189658][ T3313] bridge_slave_1: default FDB implementation only supports local addresses [ 2106.455066][ T3313] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12030'. [ 2106.740803][ T3313] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2106.778304][ T3313] CPU: 0 PID: 3313 Comm: syz.0.12030 Not tainted syzkaller #0 [ 2106.785867][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2106.795979][ T3313] Call Trace: [ 2106.799325][ T3313] [ 2106.802300][ T3313] dump_stack_lvl+0x18c/0x250 [ 2106.807052][ T3313] ? show_regs_print_info+0x20/0x20 [ 2106.812318][ T3313] ? load_image+0x420/0x420 [ 2106.816898][ T3313] sysfs_warn_dup+0x8e/0xa0 [ 2106.821458][ T3313] sysfs_do_create_link_sd+0xc0/0x110 [ 2106.826886][ T3313] device_add_class_symlinks+0x1cf/0x240 [ 2106.832577][ T3313] device_add+0x507/0xc20 [ 2106.836972][ T3313] wiphy_register+0x1dad/0x2ae0 [ 2106.841924][ T3313] ? cfg80211_event_work+0x40/0x40 [ 2106.847090][ T3313] ? minstrel_ht_alloc+0x88a/0x990 [ 2106.852313][ T3313] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2106.858454][ T3313] ieee80211_register_hw+0x3464/0x4250 [ 2106.864009][ T3313] ? ieee80211_tasklet_handler+0x20/0x20 [ 2106.869707][ T3313] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2106.875677][ T3313] ? __debug_object_init+0xec/0x450 [ 2106.880993][ T3313] ? __asan_memset+0x22/0x40 [ 2106.885655][ T3313] ? __hrtimer_init+0x186/0x270 [ 2106.890568][ T3313] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2106.896378][ T3313] ? mac80211_hwsim_free+0x220/0x220 [ 2106.901715][ T3313] ? rcu_is_watching+0x15/0xb0 [ 2106.906539][ T3313] ? kstrndup+0xbd/0x140 [ 2106.910836][ T3313] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2106.916009][ T3313] ? __nla_validate+0x50/0x50 [ 2106.920742][ T3313] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2106.927115][ T3313] ? __nla_parse+0x40/0x50 [ 2106.931577][ T3313] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2106.937941][ T3313] genl_family_rcv_msg_doit+0x211/0x310 [ 2106.943560][ T3313] ? end_current_label_crit_section+0x170/0x170 [ 2106.949870][ T3313] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2106.955831][ T3313] ? bpf_lsm_capable+0x9/0x10 [ 2106.960568][ T3313] ? security_capable+0x89/0xb0 [ 2106.965489][ T3313] genl_rcv_msg+0x619/0x7a0 [ 2106.970093][ T3313] ? genl_bind+0x360/0x360 [ 2106.974554][ T3313] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2106.980950][ T3313] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2106.987592][ T3313] ? ref_tracker_free+0x690/0x840 [ 2106.992662][ T3313] netlink_rcv_skb+0x241/0x4d0 [ 2106.997511][ T3313] ? genl_bind+0x360/0x360 [ 2107.001975][ T3313] ? netlink_ack+0x1180/0x1180 [ 2107.006797][ T3313] ? __lock_acquire+0x7d40/0x7d40 [ 2107.011875][ T3313] ? down_read+0x1ac/0x2e0 [ 2107.016332][ T3313] genl_rcv+0x28/0x40 [ 2107.020349][ T3313] netlink_unicast+0x751/0x8d0 [ 2107.025168][ T3313] netlink_sendmsg+0x8d0/0xbf0 [ 2107.030076][ T3313] ? netlink_getsockopt+0x590/0x590 [ 2107.035320][ T3313] ? aa_sock_msg_perm+0x94/0x150 [ 2107.040299][ T3313] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2107.045648][ T3313] ? security_socket_sendmsg+0x80/0xa0 [ 2107.051145][ T3313] ? netlink_getsockopt+0x590/0x590 [ 2107.056385][ T3313] ____sys_sendmsg+0x5ba/0x960 [ 2107.061185][ T3313] ? __asan_memset+0x22/0x40 [ 2107.065850][ T3313] ? __sys_sendmsg_sock+0x30/0x30 [ 2107.070931][ T3313] ? __import_iovec+0x5f2/0x850 [ 2107.075818][ T3313] ? import_iovec+0x73/0xa0 [ 2107.080357][ T3313] ___sys_sendmsg+0x2a6/0x360 [ 2107.085072][ T3313] ? __sys_sendmsg+0x2a0/0x2a0 [ 2107.089918][ T3313] ? trace_call_bpf+0xc3/0x6c0 [ 2107.094785][ T3313] __se_sys_sendmsg+0x1c2/0x2b0 [ 2107.099694][ T3313] ? __x64_sys_sendmsg+0x80/0x80 [ 2107.104708][ T3313] ? lockdep_hardirqs_on+0x98/0x150 [ 2107.109984][ T3313] do_syscall_64+0x55/0xa0 [ 2107.114447][ T3313] ? clear_bhb_loop+0x40/0x90 [ 2107.119191][ T3313] ? clear_bhb_loop+0x40/0x90 [ 2107.123945][ T3313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2107.129891][ T3313] RIP: 0033:0x7eff2279cdd9 [ 2107.134350][ T3313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2107.154013][ T3313] RSP: 002b:00007eff209f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2107.162496][ T3313] RAX: ffffffffffffffda RBX: 00007eff22a16090 RCX: 00007eff2279cdd9 [ 2107.170503][ T3313] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2107.178527][ T3313] RBP: 00007eff22832d69 R08: 0000000000000000 R09: 0000000000000000 [ 2107.186554][ T3313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2107.194566][ T3313] R13: 00007eff22a16128 R14: 00007eff22a16090 R15: 00007ffcfdef9998 [ 2107.202593][ T3313] [ 2108.023202][ T3340] netlink: 164 bytes leftover after parsing attributes in process `syz.0.12051'. [ 2109.045192][ T3361] netlink: 'syz.2.12048': attribute type 9 has an invalid length. [ 2109.055055][ T3361] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12048'. [ 2110.429825][ T3381] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12054'. [ 2110.546611][ T3383] netlink: 'syz.0.12056': attribute type 10 has an invalid length. [ 2110.565744][ T3383] netlink: 2 bytes leftover after parsing attributes in process `syz.0.12056'. [ 2111.316760][ T3393] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12059'. [ 2111.354463][ T3393] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2111.403261][ T3393] CPU: 1 PID: 3393 Comm: syz.2.12059 Not tainted syzkaller #0 [ 2111.410808][ T3393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2111.420908][ T3393] Call Trace: [ 2111.424230][ T3393] [ 2111.427205][ T3393] dump_stack_lvl+0x18c/0x250 [ 2111.431954][ T3393] ? show_regs_print_info+0x20/0x20 [ 2111.437215][ T3393] ? load_image+0x420/0x420 [ 2111.441795][ T3393] sysfs_warn_dup+0x8e/0xa0 [ 2111.446351][ T3393] sysfs_do_create_link_sd+0xc0/0x110 [ 2111.451757][ T3393] device_add_class_symlinks+0x1cf/0x240 [ 2111.457436][ T3393] device_add+0x507/0xc20 [ 2111.461830][ T3393] wiphy_register+0x1dad/0x2ae0 [ 2111.466752][ T3393] ? cfg80211_event_work+0x40/0x40 [ 2111.471907][ T3393] ? minstrel_ht_alloc+0x88a/0x990 [ 2111.477080][ T3393] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2111.483205][ T3393] ieee80211_register_hw+0x3464/0x4250 [ 2111.488731][ T3393] ? ieee80211_tasklet_handler+0x20/0x20 [ 2111.494425][ T3393] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2111.500371][ T3393] ? __debug_object_init+0xec/0x450 [ 2111.505623][ T3393] ? __asan_memset+0x22/0x40 [ 2111.510284][ T3393] ? __hrtimer_init+0x186/0x270 [ 2111.515171][ T3393] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2111.520946][ T3393] ? mac80211_hwsim_free+0x220/0x220 [ 2111.526268][ T3393] ? rcu_is_watching+0x15/0xb0 [ 2111.531085][ T3393] ? kstrndup+0xbd/0x140 [ 2111.535373][ T3393] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2111.540529][ T3393] ? __nla_validate+0x50/0x50 [ 2111.545251][ T3393] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2111.551626][ T3393] ? __nla_parse+0x40/0x50 [ 2111.556082][ T3393] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2111.562443][ T3393] genl_family_rcv_msg_doit+0x211/0x310 [ 2111.568023][ T3393] ? end_current_label_crit_section+0x170/0x170 [ 2111.574302][ T3393] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2111.580235][ T3393] ? bpf_lsm_capable+0x9/0x10 [ 2111.584957][ T3393] ? security_capable+0x89/0xb0 [ 2111.589884][ T3393] genl_rcv_msg+0x619/0x7a0 [ 2111.594425][ T3393] ? genl_bind+0x360/0x360 [ 2111.598869][ T3393] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2111.605233][ T3393] ? ref_tracker_free+0x690/0x840 [ 2111.610303][ T3393] netlink_rcv_skb+0x241/0x4d0 [ 2111.615121][ T3393] ? genl_bind+0x360/0x360 [ 2111.619567][ T3393] ? netlink_ack+0x1180/0x1180 [ 2111.624381][ T3393] ? __lock_acquire+0x7d40/0x7d40 [ 2111.629448][ T3393] ? down_read+0x1ac/0x2e0 [ 2111.633902][ T3393] genl_rcv+0x28/0x40 [ 2111.637912][ T3393] netlink_unicast+0x751/0x8d0 [ 2111.642720][ T3393] netlink_sendmsg+0x8d0/0xbf0 [ 2111.647538][ T3393] ? netlink_getsockopt+0x590/0x590 [ 2111.652772][ T3393] ? aa_sock_msg_perm+0x94/0x150 [ 2111.657752][ T3393] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2111.663070][ T3393] ? security_socket_sendmsg+0x80/0xa0 [ 2111.668559][ T3393] ? netlink_getsockopt+0x590/0x590 [ 2111.673803][ T3393] ____sys_sendmsg+0x5ba/0x960 [ 2111.678614][ T3393] ? __asan_memset+0x22/0x40 [ 2111.683256][ T3393] ? __sys_sendmsg_sock+0x30/0x30 [ 2111.688344][ T3393] ? __import_iovec+0x5f2/0x850 [ 2111.693289][ T3393] ? import_iovec+0x73/0xa0 [ 2111.697839][ T3393] ___sys_sendmsg+0x2a6/0x360 [ 2111.702562][ T3393] ? __sys_sendmsg+0x2a0/0x2a0 [ 2111.707413][ T3393] __se_sys_sendmsg+0x1c2/0x2b0 [ 2111.712325][ T3393] ? __x64_sys_sendmsg+0x80/0x80 [ 2111.717312][ T3393] ? lockdep_hardirqs_on+0x98/0x150 [ 2111.722568][ T3393] do_syscall_64+0x55/0xa0 [ 2111.727032][ T3393] ? clear_bhb_loop+0x40/0x90 [ 2111.731753][ T3393] ? clear_bhb_loop+0x40/0x90 [ 2111.736468][ T3393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2111.742395][ T3393] RIP: 0033:0x7f9b0779cdd9 [ 2111.746866][ T3393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2111.766517][ T3393] RSP: 002b:00007f9b085b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2111.774980][ T3393] RAX: ffffffffffffffda RBX: 00007f9b07a15fa0 RCX: 00007f9b0779cdd9 [ 2111.782984][ T3393] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2111.790985][ T3393] RBP: 00007f9b07832d69 R08: 0000000000000000 R09: 0000000000000000 [ 2111.798992][ T3393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2111.806986][ T3393] R13: 00007f9b07a16038 R14: 00007f9b07a15fa0 R15: 00007ffc7b203f58 [ 2111.815179][ T3393] [ 2112.278486][ T3399] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.12068'. [ 2112.365741][ T3399] bridge_slave_1: default FDB implementation only supports local addresses [ 2112.412639][ T3399] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12068'. [ 2112.469307][ T3399] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2112.553374][ T3399] CPU: 1 PID: 3399 Comm: syz.0.12068 Not tainted syzkaller #0 [ 2112.560915][ T3399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2112.571009][ T3399] Call Trace: [ 2112.574337][ T3399] [ 2112.577289][ T3399] dump_stack_lvl+0x18c/0x250 [ 2112.582021][ T3399] ? show_regs_print_info+0x20/0x20 [ 2112.587257][ T3399] ? load_image+0x420/0x420 [ 2112.591801][ T3399] sysfs_warn_dup+0x8e/0xa0 [ 2112.596326][ T3399] sysfs_do_create_link_sd+0xc0/0x110 [ 2112.601738][ T3399] device_add_class_symlinks+0x1cf/0x240 [ 2112.607404][ T3399] device_add+0x507/0xc20 [ 2112.611773][ T3399] wiphy_register+0x1dad/0x2ae0 [ 2112.616669][ T3399] ? cfg80211_event_work+0x40/0x40 [ 2112.621807][ T3399] ? minstrel_ht_alloc+0x88a/0x990 [ 2112.627000][ T3399] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2112.633099][ T3399] ieee80211_register_hw+0x3464/0x4250 [ 2112.638631][ T3399] ? ieee80211_tasklet_handler+0x20/0x20 [ 2112.644289][ T3399] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2112.650231][ T3399] ? __debug_object_init+0xec/0x450 [ 2112.655477][ T3399] ? __asan_memset+0x22/0x40 [ 2112.660113][ T3399] ? __hrtimer_init+0x186/0x270 [ 2112.665012][ T3399] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2112.670784][ T3399] ? mac80211_hwsim_free+0x220/0x220 [ 2112.676123][ T3399] ? rcu_is_watching+0x15/0xb0 [ 2112.680970][ T3399] ? kstrndup+0xbd/0x140 [ 2112.685262][ T3399] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2112.690409][ T3399] ? __nla_validate+0x50/0x50 [ 2112.695131][ T3399] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2112.701497][ T3399] ? __nla_parse+0x40/0x50 [ 2112.705945][ T3399] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2112.712306][ T3399] genl_family_rcv_msg_doit+0x211/0x310 [ 2112.717879][ T3399] ? end_current_label_crit_section+0x170/0x170 [ 2112.724159][ T3399] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2112.730122][ T3399] ? bpf_lsm_capable+0x9/0x10 [ 2112.734842][ T3399] ? security_capable+0x89/0xb0 [ 2112.739735][ T3399] genl_rcv_msg+0x619/0x7a0 [ 2112.744279][ T3399] ? genl_bind+0x360/0x360 [ 2112.748738][ T3399] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2112.755094][ T3399] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2112.761723][ T3399] ? ref_tracker_free+0x690/0x840 [ 2112.766790][ T3399] netlink_rcv_skb+0x241/0x4d0 [ 2112.771592][ T3399] ? genl_bind+0x360/0x360 [ 2112.776031][ T3399] ? netlink_ack+0x1180/0x1180 [ 2112.780848][ T3399] ? __lock_acquire+0x7d40/0x7d40 [ 2112.785908][ T3399] ? down_read+0x1ac/0x2e0 [ 2112.790354][ T3399] genl_rcv+0x28/0x40 [ 2112.794367][ T3399] netlink_unicast+0x751/0x8d0 [ 2112.799217][ T3399] netlink_sendmsg+0x8d0/0xbf0 [ 2112.804031][ T3399] ? netlink_getsockopt+0x590/0x590 [ 2112.809276][ T3399] ? aa_sock_msg_perm+0x94/0x150 [ 2112.814251][ T3399] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2112.819572][ T3399] ? security_socket_sendmsg+0x80/0xa0 [ 2112.825060][ T3399] ? netlink_getsockopt+0x590/0x590 [ 2112.830295][ T3399] ____sys_sendmsg+0x5ba/0x960 [ 2112.835107][ T3399] ? __asan_memset+0x22/0x40 [ 2112.839736][ T3399] ? __sys_sendmsg_sock+0x30/0x30 [ 2112.844788][ T3399] ? __import_iovec+0x5f2/0x850 [ 2112.849679][ T3399] ? import_iovec+0x73/0xa0 [ 2112.854253][ T3399] ___sys_sendmsg+0x2a6/0x360 [ 2112.858971][ T3399] ? __sys_sendmsg+0x2a0/0x2a0 [ 2112.863842][ T3399] __se_sys_sendmsg+0x1c2/0x2b0 [ 2112.868732][ T3399] ? __x64_sys_sendmsg+0x80/0x80 [ 2112.873711][ T3399] ? lockdep_hardirqs_on+0x98/0x150 [ 2112.878966][ T3399] do_syscall_64+0x55/0xa0 [ 2112.883414][ T3399] ? clear_bhb_loop+0x40/0x90 [ 2112.888121][ T3399] ? clear_bhb_loop+0x40/0x90 [ 2112.892832][ T3399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2112.898759][ T3399] RIP: 0033:0x7eff2279cdd9 [ 2112.903203][ T3399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2112.922830][ T3399] RSP: 002b:00007eff209f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2112.931287][ T3399] RAX: ffffffffffffffda RBX: 00007eff22a16090 RCX: 00007eff2279cdd9 [ 2112.939282][ T3399] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2112.947271][ T3399] RBP: 00007eff22832d69 R08: 0000000000000000 R09: 0000000000000000 [ 2112.955261][ T3399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2112.963255][ T3399] R13: 00007eff22a16128 R14: 00007eff22a16090 R15: 00007ffcfdef9998 [ 2112.971268][ T3399] [ 2113.089367][ T3407] netlink: 'syz.1.12064': attribute type 1 has an invalid length. [ 2113.098189][ T3407] netlink: 'syz.1.12064': attribute type 3 has an invalid length. [ 2113.117384][ T3403] netlink: 'syz.2.12062': attribute type 9 has an invalid length. [ 2113.132197][ T3407] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12064'. [ 2113.142404][ T3403] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12062'. [ 2113.700334][ T3421] netlink: 164 bytes leftover after parsing attributes in process `syz.2.12069'. [ 2113.833393][ T3425] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12072'. [ 2113.846545][ T3425] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2113.868291][ T3425] CPU: 0 PID: 3425 Comm: syz.1.12072 Not tainted syzkaller #0 [ 2113.875848][ T3425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2113.885957][ T3425] Call Trace: [ 2113.889318][ T3425] [ 2113.892299][ T3425] dump_stack_lvl+0x18c/0x250 [ 2113.897058][ T3425] ? show_regs_print_info+0x20/0x20 [ 2113.902320][ T3425] ? load_image+0x420/0x420 [ 2113.906901][ T3425] sysfs_warn_dup+0x8e/0xa0 [ 2113.911453][ T3425] sysfs_do_create_link_sd+0xc0/0x110 [ 2113.916884][ T3425] device_add_class_symlinks+0x1cf/0x240 [ 2113.922594][ T3425] device_add+0x507/0xc20 [ 2113.927000][ T3425] wiphy_register+0x1dad/0x2ae0 [ 2113.931925][ T3425] ? cfg80211_event_work+0x40/0x40 [ 2113.937110][ T3425] ? minstrel_ht_alloc+0x88a/0x990 [ 2113.942288][ T3425] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2113.948412][ T3425] ieee80211_register_hw+0x3464/0x4250 [ 2113.953984][ T3425] ? ieee80211_tasklet_handler+0x20/0x20 [ 2113.959682][ T3425] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2113.965652][ T3425] ? __debug_object_init+0xec/0x450 [ 2113.970924][ T3425] ? __asan_memset+0x22/0x40 [ 2113.975577][ T3425] ? __hrtimer_init+0x186/0x270 [ 2113.980503][ T3425] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2113.986304][ T3425] ? mac80211_hwsim_free+0x220/0x220 [ 2113.991648][ T3425] ? rcu_is_watching+0x15/0xb0 [ 2113.996471][ T3425] ? kstrndup+0xbd/0x140 [ 2114.000780][ T3425] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2114.005956][ T3425] ? __nla_validate+0x50/0x50 [ 2114.010735][ T3425] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2114.017134][ T3425] ? __nla_parse+0x40/0x50 [ 2114.021621][ T3425] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2114.028005][ T3425] genl_family_rcv_msg_doit+0x211/0x310 [ 2114.033636][ T3425] ? end_current_label_crit_section+0x170/0x170 [ 2114.039956][ T3425] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2114.045921][ T3425] ? bpf_lsm_capable+0x9/0x10 [ 2114.050665][ T3425] ? security_capable+0x89/0xb0 [ 2114.055586][ T3425] genl_rcv_msg+0x619/0x7a0 [ 2114.060151][ T3425] ? genl_bind+0x360/0x360 [ 2114.064625][ T3425] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2114.071098][ T3425] ? ref_tracker_free+0x690/0x840 [ 2114.076180][ T3425] netlink_rcv_skb+0x241/0x4d0 [ 2114.081002][ T3425] ? genl_bind+0x360/0x360 [ 2114.085471][ T3425] ? netlink_ack+0x1180/0x1180 [ 2114.090647][ T3425] ? __lock_acquire+0x7d40/0x7d40 [ 2114.095730][ T3425] ? down_read+0x1ac/0x2e0 [ 2114.100222][ T3425] genl_rcv+0x28/0x40 [ 2114.104260][ T3425] netlink_unicast+0x751/0x8d0 [ 2114.109098][ T3425] netlink_sendmsg+0x8d0/0xbf0 [ 2114.113966][ T3425] ? netlink_getsockopt+0x590/0x590 [ 2114.119234][ T3425] ? aa_sock_msg_perm+0x94/0x150 [ 2114.124239][ T3425] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2114.129579][ T3425] ? security_socket_sendmsg+0x80/0xa0 [ 2114.135090][ T3425] ? netlink_getsockopt+0x590/0x590 [ 2114.140436][ T3425] ____sys_sendmsg+0x5ba/0x960 [ 2114.145271][ T3425] ? __asan_memset+0x22/0x40 [ 2114.149914][ T3425] ? __sys_sendmsg_sock+0x30/0x30 [ 2114.154983][ T3425] ? __import_iovec+0x5f2/0x850 [ 2114.159898][ T3425] ? import_iovec+0x73/0xa0 [ 2114.164457][ T3425] ___sys_sendmsg+0x2a6/0x360 [ 2114.169201][ T3425] ? __sys_sendmsg+0x2a0/0x2a0 [ 2114.174055][ T3425] ? debug_mutex_init+0x38/0x70 [ 2114.178986][ T3425] __se_sys_sendmsg+0x1c2/0x2b0 [ 2114.183958][ T3425] ? __x64_sys_sendmsg+0x80/0x80 [ 2114.188972][ T3425] ? lockdep_hardirqs_on+0x98/0x150 [ 2114.194239][ T3425] do_syscall_64+0x55/0xa0 [ 2114.198714][ T3425] ? clear_bhb_loop+0x40/0x90 [ 2114.203445][ T3425] ? clear_bhb_loop+0x40/0x90 [ 2114.208187][ T3425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2114.214128][ T3425] RIP: 0033:0x7f620279cdd9 [ 2114.218593][ T3425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2114.238240][ T3425] RSP: 002b:00007f6203685028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2114.246710][ T3425] RAX: ffffffffffffffda RBX: 00007f6202a15fa0 RCX: 00007f620279cdd9 [ 2114.254738][ T3425] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2114.262767][ T3425] RBP: 00007f6202832d69 R08: 0000000000000000 R09: 0000000000000000 [ 2114.270784][ T3425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2114.278806][ T3425] R13: 00007f6202a16038 R14: 00007f6202a15fa0 R15: 00007ffeafb38d78 [ 2114.286857][ T3425] [ 2114.432330][ T3427] netlink: 'syz.3.12073': attribute type 10 has an invalid length. [ 2114.465789][ T3427] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12073'. [ 2114.492309][ T3427] hsr0: entered promiscuous mode [ 2115.255715][ T3452] netlink: 'syz.1.12083': attribute type 21 has an invalid length. [ 2115.271345][ T3452] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.12083'. [ 2115.583305][ T3462] netlink: 'syz.2.12086': attribute type 1 has an invalid length. [ 2115.627210][ T3462] netlink: 'syz.2.12086': attribute type 3 has an invalid length. [ 2115.663813][ T3462] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12086'. [ 2117.233241][ T3486] netlink: 'syz.3.12096': attribute type 21 has an invalid length. [ 2117.263769][ T3486] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.12096'. [ 2117.597538][ T3493] netlink: 'syz.3.12098': attribute type 1 has an invalid length. [ 2117.607145][ T3493] netlink: 'syz.3.12098': attribute type 3 has an invalid length. [ 2117.625325][ T3493] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12098'. [ 2117.999271][ T3504] netlink: 'syz.1.12102': attribute type 10 has an invalid length. [ 2118.025590][ T3504] netlink: 2 bytes leftover after parsing attributes in process `syz.1.12102'. [ 2118.046850][ T3504] hsr0: entered promiscuous mode [ 2118.598395][ T3519] netlink: 'syz.0.12108': attribute type 21 has an invalid length. [ 2118.671163][ T3519] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.12108'. [ 2119.280207][ T3524] netlink: 'syz.0.12111': attribute type 1 has an invalid length. [ 2119.295678][ T3524] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12111'. [ 2119.359531][ T3528] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12113'. [ 2119.370503][ T3528] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12113'. [ 2120.501392][ T3543] validate_nla: 3 callbacks suppressed [ 2120.501480][ T3543] netlink: 'syz.2.12116': attribute type 10 has an invalid length. [ 2120.520651][ T3543] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12116'. [ 2123.803056][ T3563] netlink: 'syz.2.12125': attribute type 21 has an invalid length. [ 2123.814184][ T3563] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.12125'. [ 2125.030509][ T3576] netlink: 'syz.2.12131': attribute type 10 has an invalid length. [ 2125.047476][ T3576] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12131'. [ 2126.430179][ T3612] netlink: 'syz.2.12146': attribute type 21 has an invalid length. [ 2126.450462][ T3612] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.12146'. [ 2126.940330][ T3624] netlink: 'syz.1.12159': attribute type 21 has an invalid length. [ 2126.966800][ T3624] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.12159'. [ 2131.223390][ T3656] netlink: 'syz.0.12170': attribute type 10 has an invalid length. [ 2131.261983][ T3656] netlink: 2 bytes leftover after parsing attributes in process `syz.0.12170'. [ 2131.341278][ T3661] netlink: 'syz.3.12162': attribute type 21 has an invalid length. [ 2131.369812][ T3661] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.12162'. [ 2132.223391][ T3689] netlink: 'syz.1.12175': attribute type 10 has an invalid length. [ 2132.234536][ T3689] netlink: 2 bytes leftover after parsing attributes in process `syz.1.12175'. [ 2132.558190][ T3694] netlink: 'syz.1.12187': attribute type 10 has an invalid length. [ 2132.587822][ T3694] netlink: 2 bytes leftover after parsing attributes in process `syz.1.12187'. [ 2133.068650][ T3708] netlink: 'syz.0.12190': attribute type 10 has an invalid length. [ 2133.080361][ T3708] netlink: 2 bytes leftover after parsing attributes in process `syz.0.12190'. [ 2133.101140][ T3707] veth1_to_bond: entered allmulticast mode [ 2133.465039][ T3715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2135.180280][ T3752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2136.788846][ T3782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2138.453173][ T3809] netlink: 'syz.3.12224': attribute type 2 has an invalid length. [ 2139.617072][ T3822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2139.688858][ T3826] netlink: 'syz.0.12236': attribute type 10 has an invalid length. [ 2139.705709][ T3826] netlink: 2 bytes leftover after parsing attributes in process `syz.0.12236'. [ 2143.457329][ T3847] veth1_to_bond: entered allmulticast mode [ 2143.809017][ T3861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2143.827010][ T3859] netlink: 'syz.3.12243': attribute type 10 has an invalid length. [ 2143.844416][ T3859] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12243'. [ 2144.696266][ T3874] netlink: 'syz.1.12257': attribute type 10 has an invalid length. [ 2144.743963][ T3874] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12257'. [ 2144.792524][ T3874] netlink: 'syz.1.12257': attribute type 10 has an invalid length. [ 2144.810080][ T3874] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12257'. [ 2145.784149][ T3885] syzkaller0: entered promiscuous mode [ 2145.811847][ T3885] syzkaller0: entered allmulticast mode [ 2148.432802][ T3898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2148.449943][ T3897] netlink: 'syz.2.12254': attribute type 10 has an invalid length. [ 2148.460683][ T3897] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12254'. [ 2148.793413][ T3909] veth1_to_bond: entered allmulticast mode [ 2148.968776][ T3917] netlink: 'syz.0.12263': attribute type 10 has an invalid length. [ 2148.978183][ T3917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12263'. [ 2148.988876][ T3917] netlink: 'syz.0.12263': attribute type 10 has an invalid length. [ 2149.015799][ T3917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12263'. [ 2149.979270][ T3938] netlink: 'syz.2.12271': attribute type 3 has an invalid length. [ 2150.010267][ T3938] netlink: 'syz.2.12271': attribute type 1 has an invalid length. [ 2150.038198][ T3938] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.12271'. [ 2151.834302][ T3977] netlink: 'syz.0.12283': attribute type 3 has an invalid length. [ 2151.846520][ T3977] netlink: 'syz.0.12283': attribute type 1 has an invalid length. [ 2151.854756][ T3977] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.12283'. [ 2154.060341][ T4018] netlink: 'syz.1.12297': attribute type 3 has an invalid length. [ 2154.084560][ T4018] netlink: 'syz.1.12297': attribute type 1 has an invalid length. [ 2154.103897][ T4018] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.12297'. [ 2156.162268][ T4058] veth1_to_bond: entered allmulticast mode [ 2157.012940][ T4083] netlink: 'syz.3.12320': attribute type 3 has an invalid length. [ 2157.062557][ T4083] netlink: 'syz.3.12320': attribute type 1 has an invalid length. [ 2157.098075][ T4083] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.12320'. [ 2158.547222][ T4114] netlink: 'syz.1.12333': attribute type 3 has an invalid length. [ 2158.566078][ T4114] netlink: 'syz.1.12333': attribute type 1 has an invalid length. [ 2158.575709][ T4114] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.12333'. [ 2158.845004][ T4124] netlink: 'syz.1.12345': attribute type 3 has an invalid length. [ 2158.889746][ T4124] netlink: 'syz.1.12345': attribute type 1 has an invalid length. [ 2158.902555][ T4124] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.12345'. [ 2159.947005][ T4158] netlink: 'syz.3.12349': attribute type 10 has an invalid length. [ 2159.973386][ T4158] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12349'. [ 2160.023691][ T4158] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2160.289312][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.305719][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.422505][ T4196] netlink: 'syz.0.12367': attribute type 3 has an invalid length. [ 2161.444914][ T4196] netlink: 'syz.0.12367': attribute type 1 has an invalid length. [ 2161.455576][ T4196] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.12367'. [ 2161.676968][ T4203] netlink: 'syz.0.12369': attribute type 9 has an invalid length. [ 2161.702215][ T4203] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.12369'. [ 2163.109761][ T4225] netlink: 'syz.0.12380': attribute type 3 has an invalid length. [ 2163.129120][ T4225] netlink: 'syz.0.12380': attribute type 1 has an invalid length. [ 2163.137988][ T4225] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.12380'. [ 2163.566553][ T4246] netlink: 'syz.2.12387': attribute type 10 has an invalid length. [ 2163.592912][ T4246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12387'. [ 2163.665576][ T4250] netlink: 'syz.3.12388': attribute type 9 has an invalid length. [ 2163.683825][ T4250] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.12388'. [ 2166.007731][ T4280] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.12398'. [ 2167.302145][ T4288] netlink: 'syz.3.12401': attribute type 3 has an invalid length. [ 2167.311374][ T4288] netlink: 'syz.3.12401': attribute type 1 has an invalid length. [ 2167.320260][ T4288] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.12401'. [ 2168.282538][ T4311] syzkaller0: entered promiscuous mode [ 2168.295546][ T4311] syzkaller0: entered allmulticast mode [ 2170.549908][ T4329] netlink: 'syz.3.12414': attribute type 3 has an invalid length. [ 2170.562762][ T4329] netlink: 'syz.3.12414': attribute type 1 has an invalid length. [ 2170.578831][ T4329] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.12414'. [ 2172.118067][ T4324] netlink: 'syz.2.12421': attribute type 21 has an invalid length. [ 2172.126414][ T4324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12421'. [ 2172.265195][T17482] Bluetooth: hci3: unexpected event 0x3c length: 15 > 7 [ 2172.553134][T17482] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 2172.693734][ T4358] netlink: 'syz.0.12429': attribute type 3 has an invalid length. [ 2172.712689][ T4358] netlink: 'syz.0.12429': attribute type 1 has an invalid length. [ 2172.721802][ T4358] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.12429'. [ 2172.794439][ T4362] syzkaller0: entered promiscuous mode [ 2172.813654][ T4362] syzkaller0: entered allmulticast mode [ 2173.255889][T17482] Bluetooth: hci2: unexpected event 0x3c length: 15 > 7 [ 2175.015469][ T4379] netlink: 'syz.0.12437': attribute type 21 has an invalid length. [ 2175.030687][ T4379] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12437'. [ 2175.320974][ T4390] netlink: 'syz.1.12443': attribute type 3 has an invalid length. [ 2175.334293][ T4390] netlink: 'syz.1.12443': attribute type 1 has an invalid length. [ 2175.351478][ T4390] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.12443'. [ 2175.493529][ T4394] syzkaller0: entered promiscuous mode [ 2175.502336][ T4394] syzkaller0: entered allmulticast mode [ 2177.772147][ T4409] netlink: 'syz.0.12450': attribute type 10 has an invalid length. [ 2177.780280][ T4409] netlink: 2 bytes leftover after parsing attributes in process `syz.0.12450'. [ 2178.040145][ T4421] netlink: 'syz.1.12456': attribute type 3 has an invalid length. [ 2178.054153][ T4421] netlink: 'syz.1.12456': attribute type 1 has an invalid length. [ 2178.071972][ T4421] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.12456'. [ 2178.317042][ T4432] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12460'. [ 2178.399944][ T4432] team0: Port device bond0 removed [ 2178.441391][ T4432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2178.528804][ T4432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2178.553345][ T4432] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2178.576595][ T4432] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 2178.600478][ T4432] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2178.622143][ T4432] bond0 (unregistering): Released all slaves [ 2178.651817][ T4439] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 2178.657745][ T4439] pim6reg0: ignored: set checksum disabled [ 2178.668293][ T4436] netlink: 'syz.3.12462': attribute type 10 has an invalid length. [ 2178.716774][ T4436] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12462'. [ 2178.784411][ T4442] netlink: 'syz.1.12465': attribute type 21 has an invalid length. [ 2178.792794][ T4442] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12465'. [ 2179.007994][T17482] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2179.015922][T17482] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 2179.027727][T17482] CPU: 0 PID: 17482 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 2179.035435][T17482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2179.045563][T17482] Workqueue: hci3 hci_rx_work [ 2179.050319][T17482] Call Trace: [ 2179.053654][T17482] [ 2179.056660][T17482] dump_stack_lvl+0x18c/0x250 [ 2179.061414][T17482] ? show_regs_print_info+0x20/0x20 [ 2179.066681][T17482] ? load_image+0x420/0x420 [ 2179.071252][T17482] sysfs_create_dir_ns+0x26e/0x2a0 [ 2179.076413][T17482] ? sysfs_warn_dup+0xa0/0xa0 [ 2179.081140][T17482] ? do_raw_spin_unlock+0x121/0x230 [ 2179.086413][T17482] kobject_add_internal+0x61c/0xcc0 [ 2179.091715][T17482] kobject_add+0x164/0x240 [ 2179.096211][T17482] ? __rwlock_init+0x150/0x150 [ 2179.101095][T17482] ? kobject_init+0x1e0/0x1e0 [ 2179.105840][T17482] ? _raw_spin_unlock+0x28/0x40 [ 2179.110819][T17482] ? get_device_parent+0x366/0x390 [ 2179.115998][T17482] device_add+0x408/0xc20 [ 2179.120400][T17482] hci_conn_add_sysfs+0xd5/0x1e0 [ 2179.125393][T17482] le_conn_complete_evt+0xf5d/0x1540 [ 2179.130753][T17482] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 2179.137041][T17482] ? bt_info+0x180/0x180 [ 2179.141335][T17482] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 2179.147015][T17482] ? skb_pull_data+0xfb/0x200 [ 2179.151750][T17482] hci_le_conn_complete_evt+0x187/0x440 [ 2179.157365][T17482] ? hci_remote_host_features_evt+0x150/0x150 [ 2179.163490][T17482] hci_event_packet+0x7ba/0x1270 [ 2179.168488][T17482] ? bis_list+0x290/0x290 [ 2179.172877][T17482] ? lockdep_hardirqs_on+0x98/0x150 [ 2179.178127][T17482] ? hci_send_to_monitor+0xd7/0x4f0 [ 2179.183369][T17482] hci_rx_work+0x43a/0xd60 [ 2179.187859][T17482] ? process_scheduled_works+0x96f/0x15d0 [ 2179.193647][T17482] process_scheduled_works+0xa5d/0x15d0 [ 2179.199272][T17482] ? worker_attach_to_pool+0x380/0x380 [ 2179.204789][T17482] ? assign_work+0x3d2/0x5d0 [ 2179.209433][T17482] worker_thread+0xa55/0xfc0 [ 2179.214100][T17482] kthread+0x2fa/0x390 [ 2179.218210][T17482] ? pr_cont_work+0x560/0x560 [ 2179.222929][T17482] ? kthread_blkcg+0xd0/0xd0 [ 2179.227575][T17482] ret_from_fork+0x48/0x80 [ 2179.232034][T17482] ? kthread_blkcg+0xd0/0xd0 [ 2179.236661][T17482] ret_from_fork_asm+0x11/0x20 [ 2179.241477][T17482] [ 2179.248704][T17482] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2179.263856][T17482] Bluetooth: hci3: failed to register connection device [ 2179.289953][ T4451] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12474'. [ 2179.343578][ T4451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2179.379401][ T4451] bond0 (unregistering): (slave cÙ): Releasing backup interface [ 2179.400799][ T4451] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2179.412826][ T4451] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2179.427778][ T4451] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 2179.457940][ T4451] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2179.471126][ T4451] bond0 (unregistering): (slave team0): Releasing backup interface [ 2179.482121][ T4459] netlink: 'syz.2.12469': attribute type 3 has an invalid length. [ 2179.494401][ T4459] netlink: 'syz.2.12469': attribute type 1 has an invalid length. [ 2179.502635][ T4451] bond0 (unregistering): Released all slaves [ 2179.509036][ T4459] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.12469'. [ 2179.540642][ T4457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2179.825963][ T4468] netlink: 'syz.1.12473': attribute type 3 has an invalid length. [ 2179.834428][ T4468] netlink: 'syz.1.12473': attribute type 1 has an invalid length. [ 2179.844584][ T4468] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.12473'. [ 2180.031289][ T4473] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 2180.047808][ T4473] pim6reg0: ignored: set checksum disabled [ 2180.207252][ T4475] netlink: 'syz.3.12476': attribute type 21 has an invalid length. [ 2180.215607][ T4475] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12476'. [ 2180.691444][ T4454] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 2180.699443][ T4454] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 2180.708966][ T4454] CPU: 0 PID: 4454 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 2180.716559][ T4454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2180.726645][ T4454] Workqueue: hci2 hci_rx_work [ 2180.731369][ T4454] Call Trace: [ 2180.734686][ T4454] [ 2180.737642][ T4454] dump_stack_lvl+0x18c/0x250 [ 2180.742378][ T4454] ? show_regs_print_info+0x20/0x20 [ 2180.747653][ T4454] ? load_image+0x420/0x420 [ 2180.752241][ T4454] sysfs_create_dir_ns+0x26e/0x2a0 [ 2180.757417][ T4454] ? sysfs_warn_dup+0xa0/0xa0 [ 2180.762152][ T4454] ? do_raw_spin_unlock+0x121/0x230 [ 2180.767426][ T4454] kobject_add_internal+0x61c/0xcc0 [ 2180.772678][ T4454] kobject_add+0x164/0x240 [ 2180.777139][ T4454] ? __rwlock_init+0x150/0x150 [ 2180.782039][ T4454] ? kobject_init+0x1e0/0x1e0 [ 2180.786764][ T4454] ? _raw_spin_unlock+0x28/0x40 [ 2180.791664][ T4454] ? get_device_parent+0x366/0x390 [ 2180.796828][ T4454] device_add+0x408/0xc20 [ 2180.801225][ T4454] hci_conn_add_sysfs+0xd5/0x1e0 [ 2180.806208][ T4454] le_conn_complete_evt+0xf5d/0x1540 [ 2180.811538][ T4454] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 2180.817820][ T4454] ? bt_info+0x180/0x180 [ 2180.822102][ T4454] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 2180.827856][ T4454] ? skb_pull_data+0xfb/0x200 [ 2180.832578][ T4454] hci_le_conn_complete_evt+0x187/0x440 [ 2180.838159][ T4454] ? hci_remote_host_features_evt+0x150/0x150 [ 2180.844261][ T4454] hci_event_packet+0x7ba/0x1270 [ 2180.849240][ T4454] ? bis_list+0x290/0x290 [ 2180.853610][ T4454] ? lockdep_hardirqs_on+0x98/0x150 [ 2180.858849][ T4454] ? hci_send_to_monitor+0xd7/0x4f0 [ 2180.864083][ T4454] hci_rx_work+0x43a/0xd60 [ 2180.868561][ T4454] ? process_scheduled_works+0x96f/0x15d0 [ 2180.874318][ T4454] process_scheduled_works+0xa5d/0x15d0 [ 2180.879926][ T4454] ? worker_attach_to_pool+0x380/0x380 [ 2180.885464][ T4454] ? assign_work+0x3d2/0x5d0 [ 2180.890119][ T4454] worker_thread+0xa55/0xfc0 [ 2180.894763][ T4454] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2180.900704][ T4454] ? _raw_spin_unlock+0x40/0x40 [ 2180.905588][ T4454] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 2180.911540][ T4454] kthread+0x2fa/0x390 [ 2180.915644][ T4454] ? pr_cont_work+0x560/0x560 [ 2180.920364][ T4454] ? kthread_blkcg+0xd0/0xd0 [ 2180.925072][ T4454] ret_from_fork+0x48/0x80 [ 2180.929528][ T4454] ? kthread_blkcg+0xd0/0xd0 [ 2180.934149][ T4454] ret_from_fork_asm+0x11/0x20 [ 2180.938983][ T4454] [ 2180.953254][ T4454] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2180.967639][ T4454] Bluetooth: hci2: failed to register connection device [ 2181.030103][ T4494] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12482'. [ 2181.304197][ T4502] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 2181.329699][ T4502] pim6reg0: ignored: set checksum disabled [ 2181.847644][ T4454] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2181.858791][ T4454] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 2181.868282][ T4454] CPU: 0 PID: 4454 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 2181.875882][ T4454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2181.885992][ T4454] Workqueue: hci0 hci_rx_work [ 2181.890729][ T4454] Call Trace: [ 2181.894042][ T4454] [ 2181.897015][ T4454] dump_stack_lvl+0x18c/0x250 [ 2181.901767][ T4454] ? show_regs_print_info+0x20/0x20 [ 2181.907021][ T4454] ? load_image+0x420/0x420 [ 2181.911617][ T4454] sysfs_create_dir_ns+0x26e/0x2a0 [ 2181.916793][ T4454] ? sysfs_warn_dup+0xa0/0xa0 [ 2181.921504][ T4454] ? do_raw_spin_unlock+0x121/0x230 [ 2181.926745][ T4454] kobject_add_internal+0x61c/0xcc0 [ 2181.931984][ T4454] kobject_add+0x164/0x240 [ 2181.936431][ T4454] ? __rwlock_init+0x150/0x150 [ 2181.941236][ T4454] ? kobject_init+0x1e0/0x1e0 [ 2181.945951][ T4454] ? _raw_spin_unlock+0x28/0x40 [ 2181.950856][ T4454] ? get_device_parent+0x366/0x390 [ 2181.956110][ T4454] device_add+0x408/0xc20 [ 2181.960490][ T4454] hci_conn_add_sysfs+0xd5/0x1e0 [ 2181.965476][ T4454] le_conn_complete_evt+0xf5d/0x1540 [ 2181.970823][ T4454] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 2181.977091][ T4454] ? bt_info+0x180/0x180 [ 2181.981375][ T4454] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 2181.987043][ T4454] ? skb_pull_data+0xfb/0x200 [ 2181.991768][ T4454] hci_le_conn_complete_evt+0x187/0x440 [ 2181.997368][ T4454] ? hci_remote_host_features_evt+0x150/0x150 [ 2182.003476][ T4454] hci_event_packet+0x7ba/0x1270 [ 2182.008498][ T4454] ? bis_list+0x290/0x290 [ 2182.012881][ T4454] ? lockdep_hardirqs_on+0x98/0x150 [ 2182.018130][ T4454] ? hci_send_to_monitor+0xd7/0x4f0 [ 2182.023380][ T4454] hci_rx_work+0x43a/0xd60 [ 2182.027882][ T4454] ? process_scheduled_works+0x96f/0x15d0 [ 2182.033669][ T4454] process_scheduled_works+0xa5d/0x15d0 [ 2182.039292][ T4454] ? worker_attach_to_pool+0x380/0x380 [ 2182.044807][ T4454] ? assign_work+0x3d2/0x5d0 [ 2182.049458][ T4454] worker_thread+0xa55/0xfc0 [ 2182.054098][ T4454] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2182.060065][ T4454] ? _raw_spin_unlock+0x40/0x40 [ 2182.064999][ T4454] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 2182.070957][ T4454] kthread+0x2fa/0x390 [ 2182.075082][ T4454] ? pr_cont_work+0x560/0x560 [ 2182.079814][ T4454] ? kthread_blkcg+0xd0/0xd0 [ 2182.084469][ T4454] ret_from_fork+0x48/0x80 [ 2182.089023][ T4454] ? kthread_blkcg+0xd0/0xd0 [ 2182.093679][ T4454] ret_from_fork_asm+0x11/0x20 [ 2182.098514][ T4454] [ 2182.115452][ T4454] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2182.129589][ T4454] Bluetooth: hci0: failed to register connection device [ 2182.780510][ T4539] .` (unregistering): left promiscuous mode [ 2182.787636][ T4539] bond_slave_0: left promiscuous mode [ 2182.795142][ T4539] bond_slave_1: left promiscuous mode [ 2182.802704][ T4539] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 2182.811941][ T4539] bridge_slave_1: left promiscuous mode [ 2182.824035][ T4539] .` (unregistering): left allmulticast mode [ 2182.831256][ T4539] bond_slave_0: left allmulticast mode [ 2182.842596][ T4539] bond_slave_1: left allmulticast mode [ 2182.848693][ T4539] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 2182.857720][ T4539] bridge_slave_1: left allmulticast mode [ 2182.914404][ T4539] team0: Port device .` removed [ 2182.924853][ T4539] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 2182.953679][ T4539] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 2182.977697][ T4539] .` (unregistering): (slave netdevsim0): Releasing backup interface [ 2182.995291][ T4539] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2183.008404][ T4539] .` (unregistering): Released all slaves [ 2183.362309][ T4564] validate_nla: 7 callbacks suppressed [ 2183.362350][ T4564] netlink: 'syz.1.12508': attribute type 22 has an invalid length. [ 2183.378089][ T4564] __nla_validate_parse: 5 callbacks suppressed [ 2183.378127][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12508'. [ 2184.030906][ T4584] netlink: 'syz.0.12520': attribute type 7 has an invalid length. [ 2184.041161][ T4584] netlink: 'syz.0.12520': attribute type 6 has an invalid length. [ 2184.168074][ T4591] netlink: 'syz.0.12524': attribute type 3 has an invalid length. [ 2184.179079][ T4591] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12524'. [ 2184.790566][ T4612] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 2184.820005][ T4612] pim6reg0: ignored: set checksum disabled [ 2184.983248][ T4618] netlink: 'syz.2.12532': attribute type 7 has an invalid length. [ 2185.015619][ T4618] netlink: 'syz.2.12532': attribute type 6 has an invalid length. [ 2185.378906][ T4629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2185.440602][ T4633] netlink: 'syz.2.12537': attribute type 22 has an invalid length. [ 2185.449428][ T4633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12537'. [ 2185.587020][ T4637] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12539'. [ 2185.703880][ T4637] team0: Port device bond0 removed [ 2185.736477][ T4637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2185.791425][ T4637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2185.823669][ T4637] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2185.844776][ T4637] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2185.877776][ T4637] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 2185.889990][ T4637] bond0 (unregistering): Released all slaves [ 2186.152185][ T4650] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 2186.159005][ T4650] pim6reg0: ignored: set checksum disabled [ 2186.168699][ T4653] netlink: 'syz.3.12545': attribute type 7 has an invalid length. [ 2186.177688][ T4653] netlink: 'syz.3.12545': attribute type 6 has an invalid length. [ 2186.472931][ T4663] netlink: 'syz.3.12550': attribute type 22 has an invalid length. [ 2186.483930][ T4663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12550'. [ 2186.551876][ T4662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2187.720536][ T4682] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 2187.730268][ T4682] pim6reg0: ignored: set checksum disabled [ 2188.626976][ T4679] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2188.642909][ T4679] syzkaller0: entered promiscuous mode [ 2188.664009][ T4679] syzkaller0: entered allmulticast mode [ 2191.299319][ T4711] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12569'. [ 2191.490027][ T4722] netlink: 188 bytes leftover after parsing attributes in process `syz.2.12578'. [ 2191.550897][ T4726] validate_nla: 2 callbacks suppressed [ 2191.550936][ T4726] netlink: 'syz.0.12575': attribute type 22 has an invalid length. [ 2191.568770][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12575'. [ 2193.183845][ T4733] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2193.773756][ T4733] syzkaller0: entered promiscuous mode [ 2193.782166][ T4733] syzkaller0: entered allmulticast mode [ 2195.839874][ T4754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2195.945857][ T4750] syzkaller0: entered promiscuous mode [ 2195.951671][ T4750] syzkaller0: entered allmulticast mode [ 2198.602087][ T4770] netlink: 'syz.2.12592': attribute type 22 has an invalid length. [ 2198.610311][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12592'. [ 2198.748098][ T4776] netlink: 'syz.0.12603': attribute type 1 has an invalid length. [ 2198.762810][ T4776] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.12603'. [ 2198.773336][ T4776] netlink: 1 bytes leftover after parsing attributes in process `syz.0.12603'. [ 2199.271435][ T4795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2200.203540][ T4810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2201.705479][ T4843] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2202.183742][ T4843] syzkaller0: entered promiscuous mode [ 2202.192774][ T4843] syzkaller0: entered allmulticast mode [ 2205.997824][ T4894] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2206.059749][ T4894] syzkaller0: entered promiscuous mode [ 2206.079780][ T4894] syzkaller0: entered allmulticast mode [ 2208.766613][ T4923] syzkaller0: entered promiscuous mode [ 2208.789020][ T4923] syzkaller0: entered allmulticast mode [ 2212.625246][ T4959] syzkaller0: entered promiscuous mode [ 2212.642636][ T4959] syzkaller0: entered allmulticast mode [ 2212.958726][ T4967] sock: sock_timestamping_bind_phc: sock not bind to device [ 2213.513425][ T4984] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.12683'. [ 2214.024119][ T5001] netlink: 'syz.2.12690': attribute type 1 has an invalid length. [ 2214.032712][ T5001] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.12690'. [ 2214.045075][ T5001] netlink: 1 bytes leftover after parsing attributes in process `syz.2.12690'. [ 2214.524713][ T5013] sock: sock_timestamping_bind_phc: sock not bind to device [ 2214.535812][ T5014] syzkaller0: entered promiscuous mode [ 2214.541366][ T5014] syzkaller0: entered allmulticast mode [ 2214.882235][ T5024] netlink: 'syz.3.12700': attribute type 1 has an invalid length. [ 2214.900032][ T5024] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.12700'. [ 2214.916856][ T5024] netlink: 1 bytes leftover after parsing attributes in process `syz.3.12700'. [ 2215.030151][ T5028] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.12702'. [ 2215.457872][ T5037] sock: sock_timestamping_bind_phc: sock not bind to device [ 2215.534837][ T5041] syzkaller0: entered promiscuous mode [ 2215.541740][ T5041] syzkaller0: entered allmulticast mode [ 2215.849220][ T5051] netlink: 'syz.1.12713': attribute type 1 has an invalid length. [ 2215.868585][ T5051] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.12713'. [ 2215.902865][ T5051] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12713'. [ 2216.353086][ T5061] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.12716'. [ 2216.489322][ T5065] sock: sock_timestamping_bind_phc: sock not bind to device [ 2216.734734][ T5071] syzkaller0: entered promiscuous mode [ 2216.740899][ T5071] syzkaller0: entered allmulticast mode [ 2217.361738][ T5089] sock: sock_timestamping_bind_phc: sock not bind to device [ 2218.461632][ T5105] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.12731'. [ 2218.482350][ T5107] netlink: 'syz.3.12733': attribute type 10 has an invalid length. [ 2218.521804][ T5107] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12733'. [ 2218.556634][ T5107] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2219.278638][ T5113] netlink: 'syz.1.12735': attribute type 1 has an invalid length. [ 2219.295435][ T5113] netlink: 'syz.1.12735': attribute type 2 has an invalid length. [ 2219.303647][ T5113] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.12735'. [ 2221.650500][ T5130] sock: sock_timestamping_bind_phc: sock not bind to device [ 2221.679535][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.687027][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.891026][ T5141] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.12744'. [ 2225.715055][ T5177] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.12758'. [ 2230.139423][ T5213] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.12773'. [ 2231.131637][ T5230] netlink: 'syz.0.12777': attribute type 10 has an invalid length. [ 2231.157796][ T5230] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12777'. [ 2231.183168][ T5230] team0: entered promiscuous mode [ 2231.220419][ T5230] team_slave_1: entered promiscuous mode [ 2231.247648][ T5230] syz_tun: entered promiscuous mode [ 2231.267024][ T5230] geneve1: entered promiscuous mode [ 2231.279561][ T5230] hsr_slave_0: entered promiscuous mode [ 2231.295071][ T5230] team0: entered allmulticast mode [ 2231.315504][ T5230] team_slave_1: entered allmulticast mode [ 2231.321346][ T5230] syz_tun: entered allmulticast mode [ 2231.326782][ T5230] geneve1: entered allmulticast mode [ 2231.332150][ T5230] hsr_slave_0: entered allmulticast mode [ 2231.340604][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 2231.348434][ T5230] bridge0: port 3(team0) entered blocking state [ 2231.355034][ T5230] bridge0: port 3(team0) entered disabled state [ 2234.788756][ T5251] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.12785'. [ 2237.228593][ T4454] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1 [ 2237.230215][T31034] Bluetooth: hci0: hardware error 0x00 [ 2237.263397][ T5262] netlink: 'syz.2.12790': attribute type 10 has an invalid length. [ 2237.295681][ T5262] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12790'. [ 2237.344702][ T5262] team0: entered promiscuous mode [ 2237.355792][ T5262] team_slave_1: entered promiscuous mode [ 2237.402092][ T5262] geneve1: entered promiscuous mode [ 2237.435622][ T5262] hsr_slave_0: entered promiscuous mode [ 2237.494838][ T5262] team0: entered allmulticast mode [ 2237.571598][ T5262] team_slave_1: entered allmulticast mode [ 2237.595736][ T5262] geneve1: entered allmulticast mode [ 2237.607075][ T5262] hsr_slave_0: entered allmulticast mode [ 2237.616717][ T5262] 8021q: adding VLAN 0 to HW filter on device team0 [ 2237.625823][ T5262] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2239.355604][T31034] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2241.445514][T31034] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 2242.961242][T31034] Bluetooth: hci1: unexpected event 0x10 length: 15 > 1 [ 2242.962868][T31034] Bluetooth: hci1: hardware error 0x00 [ 2245.994931][ T5263] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 2246.106228][ T5319] netlink: 'syz.1.12807': attribute type 10 has an invalid length. [ 2246.114261][ T5319] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12807'. [ 2246.137097][ T5319] team0: entered promiscuous mode [ 2246.142222][ T5319] team_slave_1: entered promiscuous mode [ 2246.155999][ T5319] geneve1: entered promiscuous mode [ 2246.168628][ T5319] team0: entered allmulticast mode [ 2246.186257][ T5319] team_slave_1: entered allmulticast mode [ 2246.202281][ T5319] geneve1: entered allmulticast mode [ 2246.223830][ T5319] 8021q: adding VLAN 0 to HW filter on device team0 [ 2246.250966][ T5319] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2247.725057][ T5338] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.12818'. [ 2247.933592][T31034] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2248.406936][ T5263] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1 [ 2248.414800][T17482] Bluetooth: hci2: hardware error 0x00 [ 2248.604937][ T5263] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 2249.852731][ T5348] syzkaller0: entered allmulticast mode [ 2250.018421][T31034] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 2250.081459][T31034] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 2250.081500][T31034] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 2250.377067][ T5364] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.12831'. [ 2250.555607][T17482] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2250.763515][ T5364] netlink: 'syz.3.12831': attribute type 1 has an invalid length. [ 2250.773738][ T5364] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.12831'. [ 2252.639627][T17482] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 2254.904931][T17482] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 2255.446684][ T5448] netlink: 'syz.2.12856': attribute type 39 has an invalid length. [ 2255.773999][ T5455] syzkaller0: entered allmulticast mode [ 2256.068155][ T5466] netlink: 'syz.1.12864': attribute type 1 has an invalid length. [ 2256.081279][ T5466] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.12864'. [ 2256.248076][ T5465] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.12864'. [ 2258.466228][ T5477] netlink: 'syz.1.12869': attribute type 39 has an invalid length. [ 2258.881882][ T5490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2259.305117][ T5502] netlink: 'syz.3.12879': attribute type 10 has an invalid length. [ 2259.326035][ T5502] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12879'. [ 2259.341729][ T5502] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2259.695050][ T5507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2259.790196][ T5512] netlink: 'syz.1.12883': attribute type 10 has an invalid length. [ 2259.803663][ T5512] hsr0: left promiscuous mode [ 2259.874472][ T5512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2259.937390][ T5512] hsr0: entered promiscuous mode [ 2259.943986][ T5512] hsr0: entered allmulticast mode [ 2259.951416][ T5512] hsr_slave_0: entered allmulticast mode [ 2259.958254][ T5512] hsr_slave_1: entered allmulticast mode [ 2259.972128][ T5512] team0: Port device hsr0 added [ 2260.253133][T17482] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 2260.269081][ T5529] netlink: 'syz.1.12890': attribute type 10 has an invalid length. [ 2260.296278][ T5529] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12890'. [ 2260.317703][ T5529] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2260.802121][ T5552] netlink: 'syz.3.12899': attribute type 10 has an invalid length. [ 2260.824528][ T5552] hsr0: left promiscuous mode [ 2260.897962][ T5552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2260.965949][ T5552] hsr0: entered promiscuous mode [ 2260.985057][ T5552] hsr0: entered allmulticast mode [ 2260.995179][ T5552] hsr_slave_0: entered allmulticast mode [ 2261.002126][ T5552] hsr_slave_1: entered allmulticast mode [ 2261.016563][ T5552] team0: Port device hsr0 added [ 2261.798177][ T5571] netlink: 'syz.0.12905': attribute type 10 has an invalid length. [ 2261.814780][ T5571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12905'. [ 2262.032927][ T5586] netlink: 'syz.0.12910': attribute type 10 has an invalid length. [ 2262.661874][ T5609] netlink: 'syz.2.12920': attribute type 10 has an invalid length. [ 2262.672123][ T5609] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12920'. [ 2262.698358][ T5609] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2263.618525][ T5624] netlink: 'syz.3.12924': attribute type 39 has an invalid length. [ 2264.228599][ T5633] netlink: 'syz.2.12927': attribute type 10 has an invalid length. [ 2264.444367][ T5640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2266.635620][ T5651] netlink: 'syz.1.12935': attribute type 10 has an invalid length. [ 2266.643869][ T5651] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12935'. [ 2266.664753][ T5651] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2266.991952][ T5657] syzkaller0: entered promiscuous mode [ 2267.004802][ T5657] syzkaller0: entered allmulticast mode [ 2270.004213][T17482] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 2270.075483][ T5687] netlink: 'syz.3.12950': attribute type 10 has an invalid length. [ 2270.893663][ T5705] syzkaller0: entered promiscuous mode [ 2270.903535][ T5705] syzkaller0: entered allmulticast mode [ 2273.275151][ T5710] netlink: 'syz.2.12960': attribute type 10 has an invalid length. [ 2273.283263][ T5710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12960'. [ 2273.293131][ T5710] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2273.315975][ T5714] netlink: 'syz.3.12962': attribute type 10 has an invalid length. [ 2273.506486][ T5721] netlink: 'syz.0.12972': attribute type 10 has an invalid length. [ 2273.532682][ T5721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12972'. [ 2273.592677][ T5720] netlink: 'syz.2.12971': attribute type 10 has an invalid length. [ 2273.602060][ T5720] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 2273.610252][ T5720] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 2273.669734][ T5720] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 2273.693612][ T5720] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 2273.772303][ T5720] team0: Port device wlan1 added [ 2273.968972][ T5718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2274.078378][T17482] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 2274.087366][T17482] Bluetooth: hci3: Injecting HCI hardware error event [ 2274.096094][T31034] Bluetooth: hci3: hardware error 0x00 [ 2274.436602][ T5739] netlink: 'syz.2.12978': attribute type 10 has an invalid length. [ 2274.447067][ T5739] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12978'. [ 2275.465082][ T5779] netlink: 'syz.0.12981': attribute type 10 has an invalid length. [ 2275.482357][ T5779] netlink: 2 bytes leftover after parsing attributes in process `syz.0.12981'. [ 2276.256412][T31034] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2277.880924][ T5828] netlink: 'syz.3.12995': attribute type 10 has an invalid length. [ 2277.895918][ T5828] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12995'. [ 2278.315577][T31034] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 2279.852655][ T5868] netlink: 'syz.1.13008': attribute type 10 has an invalid length. [ 2279.877539][ T5868] netlink: 2 bytes leftover after parsing attributes in process `syz.1.13008'. [ 2280.030516][ T5878] netlink: 'syz.2.13020': attribute type 10 has an invalid length. [ 2280.052144][ T5878] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13020'. [ 2280.070050][ T5878] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2283.122262][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.129906][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.362791][ T5901] netlink: 'syz.2.13022': attribute type 10 has an invalid length. [ 2283.371507][ T5901] netlink: 2 bytes leftover after parsing attributes in process `syz.2.13022'. [ 2283.953108][ T5918] netlink: 'syz.1.13028': attribute type 10 has an invalid length. [ 2283.964640][ T5918] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 2283.986102][ T5918] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 2284.303612][ T5918] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 2284.320374][ T5918] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 2284.391435][ T5918] team0: Port device wlan1 added [ 2284.459424][ T5917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2284.992579][ T5937] netlink: 'syz.1.13034': attribute type 10 has an invalid length. [ 2285.003222][ T5937] netlink: 2 bytes leftover after parsing attributes in process `syz.1.13034'. [ 2288.924598][ T5971] netlink: 'syz.1.13049': attribute type 10 has an invalid length. [ 2288.955824][ T5971] netlink: 'syz.1.13049': attribute type 11 has an invalid length. [ 2288.985026][ T5971] netlink: 'syz.1.13049': attribute type 11 has an invalid length. [ 2289.000050][ T5971] netlink: 'syz.1.13049': attribute type 11 has an invalid length. [ 2289.019089][ T5971] netlink: 'syz.1.13049': attribute type 11 has an invalid length. [ 2289.062860][ T5971] netlink: 'syz.1.13049': attribute type 11 has an invalid length. [ 2289.090920][ T5971] netlink: 'syz.1.13049': attribute type 11 has an invalid length. [ 2289.114986][ T5971] netlink: 'syz.1.13049': attribute type 11 has an invalid length. [ 2289.142369][ T5971] netlink: 'syz.1.13049': attribute type 11 has an invalid length. [ 2289.167994][ T5971] netlink: 'syz.1.13049': attribute type 11 has an invalid length. [ 2289.185601][ T5971] netlink: 'syz.1.13049': attribute type 11 has an invalid length. [ 2289.200439][ T5971] netlink: 'syz.1.13049': attribute type 4 has an invalid length. [ 2289.209255][ T5971] netlink: 'syz.1.13049': attribute type 5 has an invalid length. [ 2289.218078][ T5971] netlink: 208556 bytes leftover after parsing attributes in process `syz.1.13049'. [ 2292.881859][ T6014] netlink: 'syz.0.13064': attribute type 10 has an invalid length. [ 2292.901078][ T6014] netlink: 'syz.0.13064': attribute type 4 has an invalid length. [ 2292.909795][ T6014] netlink: 'syz.0.13064': attribute type 5 has an invalid length. [ 2292.918863][ T6014] netlink: 208556 bytes leftover after parsing attributes in process `syz.0.13064'. [ 2293.367454][ T6028] netlink: 'syz.0.13068': attribute type 10 has an invalid length. [ 2293.395732][ T6028] netlink: 55 bytes leftover after parsing attributes in process `syz.0.13068'. [ 2293.443158][ T6027] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.13067'. [ 2294.219486][ T6051] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.13084'. [ 2294.302746][ T6059] netlink: 'syz.2.13075': attribute type 10 has an invalid length. [ 2294.311385][ T6059] nla_validate_range_unsigned: 60 callbacks suppressed [ 2294.311423][ T6059] netlink: 'syz.2.13075': attribute type 11 has an invalid length. [ 2294.356060][ T6059] netlink: 'syz.2.13075': attribute type 11 has an invalid length. [ 2294.407036][ T6059] netlink: 'syz.2.13075': attribute type 11 has an invalid length. [ 2294.445738][ T6059] netlink: 'syz.2.13075': attribute type 11 has an invalid length. [ 2294.454195][ T6059] netlink: 'syz.2.13075': attribute type 11 has an invalid length. [ 2294.475859][ T6059] netlink: 'syz.2.13075': attribute type 11 has an invalid length. [ 2294.484109][ T6059] netlink: 'syz.2.13075': attribute type 11 has an invalid length. [ 2294.526437][ T6059] netlink: 'syz.2.13075': attribute type 11 has an invalid length. [ 2294.534939][ T6059] netlink: 'syz.2.13075': attribute type 11 has an invalid length. [ 2294.544971][ T6059] netlink: 'syz.2.13075': attribute type 11 has an invalid length. [ 2294.586149][ T6059] netlink: 'syz.2.13075': attribute type 4 has an invalid length. [ 2294.603099][ T6059] netlink: 'syz.2.13075': attribute type 5 has an invalid length. [ 2294.630520][ T6059] netlink: 208556 bytes leftover after parsing attributes in process `syz.2.13075'. [ 2295.429981][ T6067] syzkaller0: entered promiscuous mode [ 2295.437310][ T6067] syzkaller0: entered allmulticast mode [ 2298.200563][ T6101] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.13090'. [ 2298.433890][ T6105] netlink: 'syz.3.13092': attribute type 10 has an invalid length. [ 2298.446433][ T6105] netlink: 'syz.3.13092': attribute type 4 has an invalid length. [ 2298.458952][ T6105] netlink: 'syz.3.13092': attribute type 5 has an invalid length. [ 2298.470506][ T6105] netlink: 208556 bytes leftover after parsing attributes in process `syz.3.13092'. [ 2298.974586][ T6123] syzkaller0: entered promiscuous mode [ 2298.982176][ T6123] syzkaller0: entered allmulticast mode [ 2301.854503][ T6140] netlink: 'syz.1.13105': attribute type 10 has an invalid length. [ 2301.863785][ T6140] nla_validate_range_unsigned: 60 callbacks suppressed [ 2301.863844][ T6140] netlink: 'syz.1.13105': attribute type 11 has an invalid length. [ 2301.902193][ T6140] netlink: 'syz.1.13105': attribute type 11 has an invalid length. [ 2301.928068][ T6140] netlink: 'syz.1.13105': attribute type 11 has an invalid length. [ 2301.946770][ T6140] netlink: 'syz.1.13105': attribute type 11 has an invalid length. [ 2301.957233][ T6140] netlink: 'syz.1.13105': attribute type 11 has an invalid length. [ 2301.977006][ T6140] netlink: 'syz.1.13105': attribute type 11 has an invalid length. [ 2301.999217][ T6140] netlink: 'syz.1.13105': attribute type 11 has an invalid length. [ 2302.030795][ T6140] netlink: 'syz.1.13105': attribute type 11 has an invalid length. [ 2302.059039][ T6140] netlink: 'syz.1.13105': attribute type 11 has an invalid length. [ 2302.096249][ T6140] netlink: 'syz.1.13105': attribute type 11 has an invalid length. [ 2302.105058][ T6140] netlink: 'syz.1.13105': attribute type 4 has an invalid length. [ 2302.134765][ T6140] netlink: 'syz.1.13105': attribute type 5 has an invalid length. [ 2302.153629][ T6140] netlink: 208556 bytes leftover after parsing attributes in process `syz.1.13105'. [ 2302.724833][ T6164] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2302.811864][ T6166] syzkaller0: entered promiscuous mode [ 2302.838570][ T6166] syzkaller0: entered allmulticast mode [ 2302.933884][ T6170] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13115'. [ 2303.017497][ T6170] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2303.031567][ T6170] CPU: 1 PID: 6170 Comm: syz.0.13115 Not tainted syzkaller #0 [ 2303.039123][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2303.049238][ T6170] Call Trace: [ 2303.052578][ T6170] [ 2303.055557][ T6170] dump_stack_lvl+0x18c/0x250 [ 2303.060327][ T6170] ? show_regs_print_info+0x20/0x20 [ 2303.065602][ T6170] ? load_image+0x420/0x420 [ 2303.070195][ T6170] sysfs_warn_dup+0x8e/0xa0 [ 2303.074751][ T6170] sysfs_do_create_link_sd+0xc0/0x110 [ 2303.080193][ T6170] device_add_class_symlinks+0x1cf/0x240 [ 2303.085903][ T6170] device_add+0x507/0xc20 [ 2303.090304][ T6170] wiphy_register+0x1dad/0x2ae0 [ 2303.095241][ T6170] ? cfg80211_event_work+0x40/0x40 [ 2303.100415][ T6170] ? minstrel_ht_alloc+0x88a/0x990 [ 2303.105732][ T6170] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2303.111887][ T6170] ieee80211_register_hw+0x3464/0x4250 [ 2303.117421][ T6170] ? ieee80211_tasklet_handler+0x20/0x20 [ 2303.123096][ T6170] ? __hrtimer_init+0x7e/0x270 [ 2303.127925][ T6170] ? __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 2303.134113][ T6170] ? __hrtimer_init+0x186/0x270 [ 2303.138989][ T6170] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2303.144770][ T6170] ? mac80211_hwsim_free+0x220/0x220 [ 2303.150081][ T6170] ? rcu_is_watching+0x15/0xb0 [ 2303.154875][ T6170] ? kstrndup+0xbd/0x140 [ 2303.159153][ T6170] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2303.164320][ T6170] ? mark_lock+0x94/0x320 [ 2303.168715][ T6170] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2303.175087][ T6170] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2303.181325][ T6170] ? lockdep_hardirqs_on+0x98/0x150 [ 2303.186579][ T6170] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2303.192789][ T6170] genl_family_rcv_msg_doit+0x211/0x310 [ 2303.198362][ T6170] ? end_current_label_crit_section+0x170/0x170 [ 2303.204644][ T6170] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2303.210571][ T6170] ? bpf_lsm_capable+0x9/0x10 [ 2303.215291][ T6170] ? security_capable+0x89/0xb0 [ 2303.220216][ T6170] genl_rcv_msg+0x619/0x7a0 [ 2303.224751][ T6170] ? genl_bind+0x360/0x360 [ 2303.229196][ T6170] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2303.235229][ T6170] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2303.241607][ T6170] ? ref_tracker_free+0x690/0x840 [ 2303.246669][ T6170] netlink_rcv_skb+0x241/0x4d0 [ 2303.251572][ T6170] ? genl_bind+0x360/0x360 [ 2303.256058][ T6170] ? netlink_ack+0x1180/0x1180 [ 2303.260884][ T6170] ? __lock_acquire+0x7d40/0x7d40 [ 2303.265937][ T6170] ? down_read+0x1ac/0x2e0 [ 2303.270389][ T6170] genl_rcv+0x28/0x40 [ 2303.274415][ T6170] netlink_unicast+0x751/0x8d0 [ 2303.279238][ T6170] netlink_sendmsg+0x8d0/0xbf0 [ 2303.284088][ T6170] ? netlink_getsockopt+0x590/0x590 [ 2303.289360][ T6170] ? perf_trace_preemptirq_template+0xac/0x330 [ 2303.295597][ T6170] ? aa_sock_msg_perm+0x94/0x150 [ 2303.300611][ T6170] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2303.305926][ T6170] ? security_socket_sendmsg+0x80/0xa0 [ 2303.311430][ T6170] ? netlink_getsockopt+0x590/0x590 [ 2303.316661][ T6170] ____sys_sendmsg+0x5ba/0x960 [ 2303.321454][ T6170] ? __asan_memset+0x22/0x40 [ 2303.326070][ T6170] ? __sys_sendmsg_sock+0x30/0x30 [ 2303.331136][ T6170] ? __import_iovec+0x5f2/0x850 [ 2303.336056][ T6170] ? import_iovec+0x73/0xa0 [ 2303.340624][ T6170] ___sys_sendmsg+0x2a6/0x360 [ 2303.345365][ T6170] ? __sys_sendmsg+0x2a0/0x2a0 [ 2303.350245][ T6170] __se_sys_sendmsg+0x1c2/0x2b0 [ 2303.355124][ T6170] ? __x64_sys_sendmsg+0x80/0x80 [ 2303.360114][ T6170] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2303.366072][ T6170] do_syscall_64+0x55/0xa0 [ 2303.370536][ T6170] ? clear_bhb_loop+0x40/0x90 [ 2303.375274][ T6170] ? clear_bhb_loop+0x40/0x90 [ 2303.380049][ T6170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2303.386015][ T6170] RIP: 0033:0x7eff2279cdd9 [ 2303.390462][ T6170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2303.410105][ T6170] RSP: 002b:00007eff23571028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2303.418570][ T6170] RAX: ffffffffffffffda RBX: 00007eff22a15fa0 RCX: 00007eff2279cdd9 [ 2303.426611][ T6170] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2303.434620][ T6170] RBP: 00007eff22832d69 R08: 0000000000000000 R09: 0000000000000000 [ 2303.442649][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2303.450687][ T6170] R13: 00007eff22a16038 R14: 00007eff22a15fa0 R15: 00007ffcfdef9998 [ 2303.458713][ T6170] [ 2309.221105][ T6202] netlink: 'syz.0.13137': attribute type 4 has an invalid length. [ 2309.245380][ T6202] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13137'. [ 2310.063618][ T6209] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2310.817689][ T6238] syzkaller0: entered promiscuous mode [ 2310.824706][ T6238] syzkaller0: entered allmulticast mode [ 2313.542545][ T6226] ------------[ cut here ]------------ [ 2313.548481][ T6226] WARNING: CPU: 0 PID: 6226 at kernel/events/core.c:6808 perf_pending_task+0x35c/0x470 [ 2313.558613][ T6226] Modules linked in: [ 2313.562567][ T6226] CPU: 0 PID: 6226 Comm: syz.2.13138 Not tainted syzkaller #0 [ 2313.570439][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2313.581113][ T6226] RIP: 0010:perf_pending_task+0x35c/0x470 [ 2313.587367][ T6226] Code: ff 84 db 75 14 e8 64 d8 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 50 d8 d5 ff e8 cb 53 4f ff eb e5 e8 44 d8 d5 ff <0f> 0b e9 f3 fe ff ff e8 38 d8 d5 ff 48 c7 c7 70 f4 1c 8d 4c 89 f6 [ 2313.608026][ T6226] RSP: 0018:ffffc900192bf9c0 EFLAGS: 00010293 [ 2313.614169][ T6226] RAX: ffffffff81b149bc RBX: ffff88808b09a2e0 RCX: ffff88802a480000 [ 2313.622613][ T6226] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2313.631045][ T6226] RBP: 0000000000000001 R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd [ 2313.639137][ T6226] R10: dffffc0000000000 R11: fffffbfff1d162be R12: ffff88802a480000 [ 2313.647306][ T6226] R13: ffff888026a46530 R14: ffff88808b09a0a0 R15: 1ffff11011613414 [ 2313.655661][ T6226] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2313.664640][ T6226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2313.671337][ T6226] CR2: 00007f62036859a0 CR3: 0000000027a02000 CR4: 00000000003506f0 [ 2313.679446][ T6226] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2313.687543][ T6226] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2313.695600][ T6226] Call Trace: [ 2313.698930][ T6226] [ 2313.701911][ T6226] task_work_run+0x1d4/0x260 [ 2313.706653][ T6226] ? task_work_cancel+0x220/0x220 [ 2313.711738][ T6226] do_exit+0x95a/0x2460 [ 2313.716010][ T6226] ? lock_chain_count+0x20/0x20 [ 2313.720910][ T6226] ? put_task_struct+0xc0/0xc0 [ 2313.725788][ T6226] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2313.732008][ T6226] ? lockdep_hardirqs_on+0x98/0x150 [ 2313.737359][ T6226] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2313.743587][ T6226] do_group_exit+0x21b/0x2d0 [ 2313.748326][ T6226] ? _raw_spin_unlock_irq+0x29/0x50 [ 2313.753606][ T6226] get_signal+0x12fc/0x13f0 [ 2313.758272][ T6226] arch_do_signal_or_restart+0xc2/0x800 [ 2313.763913][ T6226] ? __ia32_sys_get_robust_list+0x110/0x110 [ 2313.769918][ T6226] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 2313.776080][ T6226] ? get_sigframe_size+0x20/0x20 [ 2313.781091][ T6226] ? exit_to_user_mode_loop+0x3b/0x110 [ 2313.786679][ T6226] exit_to_user_mode_loop+0x70/0x110 [ 2313.792025][ T6226] exit_to_user_mode_prepare+0xee/0x180 [ 2313.797664][ T6226] syscall_exit_to_user_mode+0x1a/0x50 [ 2313.803180][ T6226] do_syscall_64+0x61/0xa0 [ 2313.807704][ T6226] ? clear_bhb_loop+0x40/0x90 [ 2313.812427][ T6226] ? clear_bhb_loop+0x40/0x90 [ 2313.817225][ T6226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2313.823170][ T6226] RIP: 0033:0x7f9b0779cdd9 [ 2313.827719][ T6226] Code: Unable to access opcode bytes at 0x7f9b0779cdaf. [ 2313.834774][ T6226] RSP: 002b:00007f9b085b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2313.843309][ T6226] RAX: fffffffffffffe00 RBX: 00007f9b07a15fa8 RCX: 00007f9b0779cdd9 [ 2313.851418][ T6226] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9b07a15fa8 [ 2313.859489][ T6226] RBP: 00007f9b07a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2313.867585][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2313.875658][ T6226] R13: 00007f9b07a16038 R14: 00007ffc7b203e70 R15: 00007ffc7b203f58 [ 2313.883706][ T6226] [ 2313.886912][ T6226] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2313.894224][ T6226] CPU: 0 PID: 6226 Comm: syz.2.13138 Not tainted syzkaller #0 [ 2313.901717][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2313.911808][ T6226] Call Trace: [ 2313.915122][ T6226] [ 2313.918076][ T6226] dump_stack_lvl+0x18c/0x250 [ 2313.922804][ T6226] ? show_regs_print_info+0x20/0x20 [ 2313.928048][ T6226] ? load_image+0x420/0x420 [ 2313.932611][ T6226] panic+0x2dc/0x730 [ 2313.936552][ T6226] ? bpf_jit_dump+0xd0/0xd0 [ 2313.941113][ T6226] __warn+0x2e0/0x470 [ 2313.945135][ T6226] ? perf_pending_task+0x35c/0x470 [ 2313.950311][ T6226] ? perf_pending_task+0x35c/0x470 [ 2313.955471][ T6226] report_bug+0x2be/0x4f0 [ 2313.959842][ T6226] ? perf_pending_task+0x35c/0x470 [ 2313.965002][ T6226] ? perf_pending_task+0x35c/0x470 [ 2313.970174][ T6226] ? perf_pending_task+0x35e/0x470 [ 2313.975361][ T6226] handle_bug+0xcf/0x120 [ 2313.979644][ T6226] exc_invalid_op+0x1a/0x50 [ 2313.984185][ T6226] asm_exc_invalid_op+0x1a/0x20 [ 2313.989083][ T6226] RIP: 0010:perf_pending_task+0x35c/0x470 [ 2313.994856][ T6226] Code: ff 84 db 75 14 e8 64 d8 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 50 d8 d5 ff e8 cb 53 4f ff eb e5 e8 44 d8 d5 ff <0f> 0b e9 f3 fe ff ff e8 38 d8 d5 ff 48 c7 c7 70 f4 1c 8d 4c 89 f6 [ 2314.014505][ T6226] RSP: 0018:ffffc900192bf9c0 EFLAGS: 00010293 [ 2314.020611][ T6226] RAX: ffffffff81b149bc RBX: ffff88808b09a2e0 RCX: ffff88802a480000 [ 2314.028620][ T6226] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2314.036611][ T6226] RBP: 0000000000000001 R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd [ 2314.044604][ T6226] R10: dffffc0000000000 R11: fffffbfff1d162be R12: ffff88802a480000 [ 2314.052610][ T6226] R13: ffff888026a46530 R14: ffff88808b09a0a0 R15: 1ffff11011613414 [ 2314.060630][ T6226] ? perf_pending_task+0x35c/0x470 [ 2314.065831][ T6226] task_work_run+0x1d4/0x260 [ 2314.070462][ T6226] ? task_work_cancel+0x220/0x220 [ 2314.075567][ T6226] do_exit+0x95a/0x2460 [ 2314.079767][ T6226] ? lock_chain_count+0x20/0x20 [ 2314.084636][ T6226] ? put_task_struct+0xc0/0xc0 [ 2314.089435][ T6226] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2314.095624][ T6226] ? lockdep_hardirqs_on+0x98/0x150 [ 2314.100857][ T6226] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2314.107054][ T6226] do_group_exit+0x21b/0x2d0 [ 2314.111666][ T6226] ? _raw_spin_unlock_irq+0x29/0x50 [ 2314.116890][ T6226] get_signal+0x12fc/0x13f0 [ 2314.121433][ T6226] arch_do_signal_or_restart+0xc2/0x800 [ 2314.127004][ T6226] ? __ia32_sys_get_robust_list+0x110/0x110 [ 2314.132921][ T6226] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 2314.139017][ T6226] ? get_sigframe_size+0x20/0x20 [ 2314.144019][ T6226] ? exit_to_user_mode_loop+0x3b/0x110 [ 2314.149546][ T6226] exit_to_user_mode_loop+0x70/0x110 [ 2314.154868][ T6226] exit_to_user_mode_prepare+0xee/0x180 [ 2314.160440][ T6226] syscall_exit_to_user_mode+0x1a/0x50 [ 2314.165930][ T6226] do_syscall_64+0x61/0xa0 [ 2314.170383][ T6226] ? clear_bhb_loop+0x40/0x90 [ 2314.175086][ T6226] ? clear_bhb_loop+0x40/0x90 [ 2314.179791][ T6226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2314.185706][ T6226] RIP: 0033:0x7f9b0779cdd9 [ 2314.190136][ T6226] Code: Unable to access opcode bytes at 0x7f9b0779cdaf. [ 2314.197175][ T6226] RSP: 002b:00007f9b085b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2314.205613][ T6226] RAX: fffffffffffffe00 RBX: 00007f9b07a15fa8 RCX: 00007f9b0779cdd9 [ 2314.213630][ T6226] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9b07a15fa8 [ 2314.221620][ T6226] RBP: 00007f9b07a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2314.229613][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2314.237615][ T6226] R13: 00007f9b07a16038 R14: 00007ffc7b203e70 R15: 00007ffc7b203f58 [ 2314.245631][ T6226] [ 2314.248913][ T6226] Kernel Offset: disabled [ 2314.253272][ T6226] Rebooting in 86400 seconds..