last executing test programs: 26.981613768s ago: executing program 0 (id=21017): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x20, 0x80000000000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000100)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r2, 0x0, &(0x7f0000000500)=""/146}, 0x20) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 19.556072954s ago: executing program 0 (id=21042): socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="85000000560000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x544, 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x2, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, 0x4000, r1}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') 18.750219759s ago: executing program 0 (id=21048): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000800000000", @ANYBLOB="0000ffffffffddffdcfffffffffd5f3d"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000880)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000480), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10020) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d4"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 17.01431606s ago: executing program 0 (id=21053): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x1, @ANYRES64, @ANYRES16, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x10) syz_clone(0x801000, 0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0xfa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x4, 0xc8, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0) 16.602291789s ago: executing program 4 (id=21055): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf422}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0xff9, &(0x7f0000000a80)=""/4089}, 0x94) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x4000004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES8, @ANYBLOB="00000000d3ec66ecc053c543da7965e0432e2e"], 0x48) 16.313905548s ago: executing program 0 (id=21058): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$unix(r0, 0x0, 0x12021) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0xffffffffffffff8f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) 15.915040436s ago: executing program 0 (id=21062): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f91124fc60", 0x14}], 0x1}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4000000800000000, 0x8}, 0x0, 0x0, 0x0, 0x3}) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 15.597943038s ago: executing program 4 (id=21063): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x104c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0xfffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe}, 0x10, 0x0, r1}, 0x94) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x102000, 0x0, 0x0, 0x8, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0xb, 0xa, 0x7, 0xffffffffffffffa1, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000cc0)={0x3, 0x9, 0x7, 0x4}, 0x10, 0x25639, r2, 0x6, &(0x7f0000000d00)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000d40)=[{0x0, 0x4, 0x0, 0x4}, {0x1, 0x2, 0xe, 0x1}, {0x4, 0x2, 0xa, 0x4}, {0x1, 0x2, 0x0, 0x9}, {0x3, 0x5, 0x7, 0x3}, {0x0, 0x5, 0xb, 0x8}], 0x10, 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r7, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)=r1}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e0000000c000000010000000200000000100100", @ANYRES32, @ANYBLOB="abac00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="4b2a3fca11d6534a2bb3f7b93086f05f0b145d3f8c721bda97e41bab057f0e4cebddb951a5e939dcbe98fd152e9607b949c2bd1f3ad589f4a70d63ec94ae80c77de2f8ed04ad6dfa3616a38dbd8f13b140bb73102784e3a2e29f438252aabbdc1e1072c8839c5b565acef3286736eb018756d0cef72be6fe889c256df7ce84342c26330159930e7577ac3c6de1ff80d48ee1ad7b8fbef8c61da5c61aea8eaf3ddaede56a8a2f1ca49a0134d79480e4b97f280f89"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x14, 0x2c, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0xc}, {}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x0, 0x3, 0x6, 0x0, 0x6}, @alu={0x7, 0x1, 0x7, 0x8, 0x0, 0xfffffffffffffff0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @generic={0x4, 0x4, 0xc, 0x1f, 0x7}, @tail_call, @alu={0x4, 0x0, 0x2, 0xb, 0x8, 0x1, 0x8}, @alu={0x7, 0x0, 0x6, 0x3, 0x2, 0x100, 0xffffffffffffffff}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f00000002c0)='syzkaller\x00', 0xe63, 0x62, &(0x7f0000000300)=""/98, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x8, 0x8, 0xd, 0x8}, 0x10, 0x0, r6, 0x2, &(0x7f0000000fc0)=[r7, r8, r9, r0], &(0x7f0000001000)=[{0x1, 0x3, 0xb}, {0x0, 0x4, 0xa, 0x4}], 0x10, 0x80000001}, 0x94) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r3, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r10) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r12) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r13, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r14) setsockopt$sock_attach_bpf(r15, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r13) r16 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r16, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000500)='\nZ', 0x2}], 0x2}, 0x20000010) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) 13.97498084s ago: executing program 4 (id=21068): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000800000000", @ANYBLOB="0000ffffffffddffdcfffffffffd5f3d"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000880)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000480), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10020) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 9.622809802s ago: executing program 4 (id=21084): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002280)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000030000000e0000000000000204000000070000000000000c03000000000000000000000b010000000d0000000000000c040000000030002ce33f31c42ed4ca605b13df53333a3a59a009ebd8d80733d689ba6e5f38216e1ab951a93563fba993a87778df1e05d132161ba08e044c0c507d10353fbc8f26d8de66340c3b44e576c89afb7c1300fbd88d0ef9408abb6f1c8012dde53383874f7ba5334b13f7d9abd626e092947702199080e6ba7ab11568eb5dbc79d374bdf8896f07977b4a4c27f698"], &(0x7f0000001280)=""/4096, 0x4b, 0x1000, 0x0, 0x8, 0x10000}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1}, 0x94) r3 = socket$kcm(0x2, 0x200000000000003, 0x106) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x23, 0x5, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, @perf_config_ext={0x8, 0x100000001}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x113, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f91524fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x8, 0x0, 0xa4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r7, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) r10 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x8, 0x5, 0x48, 0x72, 0x0, 0x401, 0xa0410, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x9}, 0x1302, 0x9ec, 0x1ff, 0x0, 0x4, 0x4, 0xfff8, 0x0, 0x3, 0x0, 0x4}, 0x0, 0xd, r4, 0x8) ioctl$PERF_EVENT_IOC_ID(r10, 0x80082407, &(0x7f0000000740)) close(r7) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r11, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r3, 0x0, 0x884) 7.805328319s ago: executing program 2 (id=21079): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$sock(r0, 0x0, 0x20046800) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x5, 0x100000001}, 0x880, 0x800, 0x0, 0x6, 0x4, 0x3, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) close(r1) 7.336795611s ago: executing program 4 (id=21081): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x2, 0x5, 0x84) close(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000014006b04000000d86e6c1d000a117ea6e070d6060003910000000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f61400c9f4d49346d88037e786a6d0bdd7000000", 0x5b}, {&(0x7f0000000280)="e1", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 7.286903254s ago: executing program 3 (id=21082): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00009b0000000000000000040000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x7, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xa60, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(r0, 0x0, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x31) 6.691367336s ago: executing program 3 (id=21086): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x9f) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91024fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r0, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x31, 0x6000000000000000}, 0x50) 6.105246716s ago: executing program 2 (id=21088): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000800000000", @ANYBLOB="0000ffffffffddffdcfffffffffd5f3d"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000880)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000480), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10020) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d4"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 5.936520128s ago: executing program 4 (id=21089): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2c3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000200)=0x80000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000e00000000000000000183a000004000000000000000000000095000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r2}, &(0x7f0000000ac0), 0x0}, 0x20) 5.632538909s ago: executing program 3 (id=21090): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002280)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000030000000e0000000000000204000000070000000000000c03000000000000000000000b010000000d0000000000000c040000000030002ce33f31c42ed4ca605b13df53333a3a59a009ebd8d80733d689ba6e5f38216e1ab951a93563fba993a87778df1e05d132161ba08e044c0c507d10353fbc8f26d8de66340c3b44e576c89afb7c1300fbd88d0ef9408abb6f1c8012dde53383874f7ba5334b13f7d9abd626e092947702199080e6ba7ab11568eb5dbc79d374bdf8896f07977b4a4c27f698"], &(0x7f0000001280)=""/4096, 0x4b, 0x1000, 0x0, 0x8, 0x10000}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1}, 0x94) r3 = socket$kcm(0x2, 0x200000000000003, 0x106) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x23, 0x5, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, @perf_config_ext={0x8, 0x100000001}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x113, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f91524fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x8, 0x0, 0xa4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r7, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r9 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x8, 0x5, 0x48, 0x72, 0x0, 0x401, 0xa0410, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x9}, 0x1302, 0x9ec, 0x1ff, 0x0, 0x4, 0x4, 0xfff8, 0x0, 0x3, 0x0, 0x4}, 0x0, 0xd, r4, 0x8) ioctl$PERF_EVENT_IOC_ID(r9, 0x80082407, &(0x7f0000000740)) close(r7) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r10, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x388}, 0x884) 5.62131689s ago: executing program 1 (id=21091): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x104c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0xfffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe}, 0x10, 0x0, r1}, 0x94) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x102000, 0x0, 0x0, 0x8, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0xb, 0xa, 0x7, 0xffffffffffffffa1, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000cc0)={0x3, 0x9, 0x7, 0x4}, 0x10, 0x25639, r2, 0x6, &(0x7f0000000d00)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000d40)=[{0x0, 0x4, 0x0, 0x4}, {0x1, 0x2, 0xe, 0x1}, {0x4, 0x2, 0xa, 0x4}, {0x1, 0x2, 0x0, 0x9}, {0x3, 0x5, 0x7, 0x3}, {0x0, 0x5, 0xb, 0x8}], 0x10, 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r7, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)=r1}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e0000000c000000010000000200000000100100", @ANYRES32, @ANYBLOB="abac00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="4b2a3fca11d6534a2bb3f7b93086f05f0b145d3f8c721bda97e41bab057f0e4cebddb951a5e939dcbe98fd152e9607b949c2bd1f3ad589f4a70d63ec94ae80c77de2f8ed04ad6dfa3616a38dbd8f13b140bb73102784e3a2e29f438252aabbdc1e1072c8839c5b565acef3286736eb018756d0cef72be6fe889c256df7ce84342c26330159930e7577ac3c6de1ff80d48ee1ad7b8fbef8c61da5c61aea8eaf3ddaede56a8a2f1ca49a0134d79480e4b97f280f89"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x14, 0x2c, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0xc}, {}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x0, 0x3, 0x6, 0x0, 0x6}, @alu={0x7, 0x1, 0x7, 0x8, 0x0, 0xfffffffffffffff0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @generic={0x4, 0x4, 0xc, 0x1f, 0x7}, @tail_call, @alu={0x4, 0x0, 0x2, 0xb, 0x8, 0x1, 0x8}, @alu={0x7, 0x0, 0x6, 0x3, 0x2, 0x100, 0xffffffffffffffff}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f00000002c0)='syzkaller\x00', 0xe63, 0x62, &(0x7f0000000300)=""/98, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x8, 0x8, 0xd, 0x8}, 0x10, 0x0, r6, 0x2, &(0x7f0000000fc0)=[r7, r8, r9, r0], &(0x7f0000001000)=[{0x1, 0x3, 0xb}, {0x0, 0x4, 0xa, 0x4}], 0x10, 0x80000001}, 0x94) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r3, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r10) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r12) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r13, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r14) setsockopt$sock_attach_bpf(r15, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r13) r16 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r16, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000500)='\nZ', 0x2}], 0x2}, 0x20000010) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.04755617s ago: executing program 1 (id=21092): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x403, 0x6, 0x0, 0x34d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x7d9437282000) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000500)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f00000005c0)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x2101) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x5b}, 0x28) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) setsockopt$sock_attach_bpf(r1, 0x6, 0x3, &(0x7f0000000200), 0x4) socket$kcm(0x10, 0x2, 0x0) 4.490496898s ago: executing program 1 (id=21093): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002280)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000030000000e0000000000000204000000070000000000000c03000000000000000000000b010000000d0000000000000c040000000030002ce33f31c42ed4ca605b13df53333a3a59a009ebd8d80733d689ba6e5f38216e1ab951a93563fba993a87778df1e05d132161ba08e044c0c507d10353fbc8f26d8de66340c3b44e576c89afb7c1300fbd88d0ef9408abb6f1c8012dde53383874f7ba5334b13f7d9abd626e092947702199080e6ba7ab11568eb5dbc79d374bdf8896f07977b4a4c27f698"], &(0x7f0000001280)=""/4096, 0x4b, 0x1000, 0x0, 0x8, 0x10000}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1}, 0x94) r3 = socket$kcm(0x2, 0x200000000000003, 0x106) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x23, 0x5, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, @perf_config_ext={0x8, 0x100000001}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x113, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f91524fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x8, 0x0, 0xa4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r7, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) r10 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x8, 0x5, 0x48, 0x72, 0x0, 0x401, 0xa0410, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x9}, 0x1302, 0x9ec, 0x1ff, 0x0, 0x4, 0x4, 0xfff8, 0x0, 0x3, 0x0, 0x4}, 0x0, 0xd, r4, 0x8) ioctl$PERF_EVENT_IOC_ID(r10, 0x80082407, &(0x7f0000000740)) close(r7) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r11, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r3, 0x0, 0x884) 4.072230167s ago: executing program 2 (id=21094): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000800000000", @ANYBLOB="0000ffffffffddffdcfffffffffd5f3d"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000880)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000480), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10020) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.720622781s ago: executing program 3 (id=21095): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x104c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0xfffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe}, 0x10, 0x0, r1}, 0x94) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x102000, 0x0, 0x0, 0x8, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0xb, 0xa, 0x7, 0xffffffffffffffa1, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000cc0)={0x3, 0x9, 0x7, 0x4}, 0x10, 0x25639, r2, 0x6, &(0x7f0000000d00)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000d40)=[{0x0, 0x4, 0x0, 0x4}, {0x1, 0x2, 0xe, 0x1}, {0x4, 0x2, 0xa, 0x4}, {0x1, 0x2, 0x0, 0x9}, {0x3, 0x5, 0x7, 0x3}, {0x0, 0x5, 0xb, 0x8}], 0x10, 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r7, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)=r1}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e0000000c000000010000000200000000100100", @ANYRES32, @ANYBLOB="abac00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="4b2a3fca11d6534a2bb3f7b93086f05f0b145d3f8c721bda97e41bab057f0e4cebddb951a5e939dcbe98fd152e9607b949c2bd1f3ad589f4a70d63ec94ae80c77de2f8ed04ad6dfa3616a38dbd8f13b140bb73102784e3a2e29f438252aabbdc1e1072c8839c5b565acef3286736eb018756d0cef72be6fe889c256df7ce84342c26330159930e7577ac3c6de1ff80d48ee1ad7b8fbef8c61da5c61aea8eaf3ddaede56a8a2f1ca49a0134d79480e4b97f280f89"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x14, 0x2c, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0xc}, {}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x0, 0x3, 0x6, 0x0, 0x6}, @alu={0x7, 0x1, 0x7, 0x8, 0x0, 0xfffffffffffffff0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @generic={0x4, 0x4, 0xc, 0x1f, 0x7}, @tail_call, @alu={0x4, 0x0, 0x2, 0xb, 0x8, 0x1, 0x8}, @alu={0x7, 0x0, 0x6, 0x3, 0x2, 0x100, 0xffffffffffffffff}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f00000002c0)='syzkaller\x00', 0xe63, 0x62, &(0x7f0000000300)=""/98, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x8, 0x8, 0xd, 0x8}, 0x10, 0x0, r6, 0x2, &(0x7f0000000fc0)=[r7, r8, r9, r0], &(0x7f0000001000)=[{0x1, 0x3, 0xb}, {0x0, 0x4, 0xa, 0x4}], 0x10, 0x80000001}, 0x94) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r3, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r10) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r12) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r13, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r14) setsockopt$sock_attach_bpf(r15, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r13) r16 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r16, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000500)='\nZ', 0x2}], 0x2}, 0x20000010) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.389152474s ago: executing program 2 (id=21096): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) close(r3) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r5}, 0x8) sendmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000080)={r7}) recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000340)=""/193, 0xc1}, 0x40010103) r9 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xa2, 0x4, 0x3, 0x9, 0x0, 0xbf18, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3c, 0x2}, 0x201be30867a0b654, 0x5, 0x10001, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x0, 0x6}, 0x0, 0xb, r6, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000001040)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') 1.507918865s ago: executing program 1 (id=21097): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$unix(r0, 0x0, 0x12021) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0xffffffffffffff8f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) 1.507609785s ago: executing program 3 (id=21098): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$sock(r0, 0x0, 0x20046800) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x5, 0x100000001}, 0x880, 0x800, 0x0, 0x6, 0x4, 0x3, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) close(r1) 1.503563416s ago: executing program 2 (id=21107): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) close(r3) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r5}, 0x8) sendmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r8, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000080)={r7}) recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1}, 0x40010103) r9 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xa2, 0x4, 0x3, 0x9, 0x0, 0xbf18, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3c, 0x2}, 0x201be30867a0b654, 0x5, 0x10001, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x0, 0x6}, 0x0, 0xb, r6, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000001040)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') 954.725874ms ago: executing program 1 (id=21099): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x2, 0x5, 0x84) close(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000014006b04000000d86e6c1d000a117ea6e070d6060003910000000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f61400c9f4d49346d88037e786a6d0bdd7000000", 0x5b}, {&(0x7f0000000280)="e1", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 785.522506ms ago: executing program 32 (id=21062): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f91124fc60", 0x14}], 0x1}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4000000800000000, 0x8}, 0x0, 0x0, 0x0, 0x3}) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 427.41686ms ago: executing program 1 (id=21101): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x1555}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x12120) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) 346.000035ms ago: executing program 3 (id=21102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef2685634a8270e7123c000000"], 0xffdd) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a8270001406"], 0xffdd) 0s ago: executing program 2 (id=21103): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x403, 0x6, 0x0, 0x34d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x7d9437282000) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000500)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f00000005c0)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x2101) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x5b}, 0x28) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) setsockopt$sock_attach_bpf(r1, 0x6, 0x3, &(0x7f0000000200), 0x4) socket$kcm(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): id length. [ 2103.774803][T16858] netlink: 'syz.4.16059': attribute type 41 has an invalid length. [ 2103.834508][T16858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16059'. [ 2104.520254][T16875] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.16064'. [ 2105.414224][T16894] netlink: 'syz.0.16069': attribute type 10 has an invalid length. [ 2105.641615][T16900] device sit0 entered promiscuous mode [ 2105.929071][T16906] device wlan1 entered promiscuous mode [ 2105.950212][T16910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16078'. [ 2105.976502][T16906] netlink: 'syz.3.16074': attribute type 41 has an invalid length. [ 2105.994555][T16906] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16074'. [ 2106.040771][T16906] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2106.172371][T16910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16078'. [ 2106.801959][T16942] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.16083'. [ 2107.160623][T16942] Ÿë: port 2(ip6gretap0) entered blocking state [ 2107.185151][T16942] Ÿë: port 2(ip6gretap0) entered disabled state [ 2107.212758][T16942] device ip6gretap0 entered promiscuous mode [ 2107.363793][T16952] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16086'. [ 2108.144219][T16977] netlink: 'syz.4.16092': attribute type 10 has an invalid length. [ 2108.241446][T16968] delete_channel: no stack [ 2108.560821][T16991] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.16097'. [ 2108.601803][T16984] netlink: 'syz.1.16094': attribute type 39 has an invalid length. [ 2109.669488][T17012] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16105'. [ 2110.558387][T17020] netlink: 'syz.4.16107': attribute type 10 has an invalid length. [ 2110.604023][T17020] netlink: 209796 bytes leftover after parsing attributes in process `syz.4.16107'. [ 2110.607685][T17031] netlink: 'syz.3.16111': attribute type 39 has an invalid length. [ 2110.692837][T17020] openvswitch: netlink: Flow key attr not present in new flow. [ 2110.703412][T17033] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.16112'. [ 2112.015565][T17076] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16124'. [ 2112.374779][T17088] netlink: 'syz.3.16125': attribute type 39 has an invalid length. [ 2112.856025][T17098] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.16128'. [ 2112.971796][T17098] openvswitch: netlink: IP tunnel dst address not specified [ 2113.181750][T17102] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.16130'. [ 2113.877740][T17118] netlink: 'syz.4.16134': attribute type 7 has an invalid length. [ 2113.930794][T17118] netlink: 'syz.4.16134': attribute type 1 has an invalid length. [ 2113.944062][T17118] netlink: 'syz.4.16134': attribute type 4 has an invalid length. [ 2114.042038][T17118] netlink: 'syz.4.16134': attribute type 7 has an invalid length. [ 2114.055131][T17118] netlink: 207220 bytes leftover after parsing attributes in process `syz.4.16134'. [ 2114.418679][T17133] netlink: 'syz.1.16140': attribute type 39 has an invalid length. [ 2114.474116][T17141] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.16141'. [ 2114.876162][T17147] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16142'. [ 2115.712406][T17158] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.16145'. [ 2115.758139][T17158] openvswitch: netlink: IP tunnel dst address not specified [ 2116.072600][T17173] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.16149'. [ 2116.188624][T17175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2116.233470][T17175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2116.355454][T17175] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 2116.370761][T17175] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 2116.409393][T17175] batman_adv: batadv0: Removing interface: netdevsim0 [ 2117.213971][T17201] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16160'. [ 2117.960240][T17220] netlink: 'syz.3.16165': attribute type 7 has an invalid length. [ 2118.041168][T17220] netlink: 'syz.3.16165': attribute type 1 has an invalid length. [ 2118.083518][T17220] netlink: 'syz.3.16165': attribute type 4 has an invalid length. [ 2118.104887][T17220] netlink: 'syz.3.16165': attribute type 7 has an invalid length. [ 2118.114775][T17220] netlink: 207220 bytes leftover after parsing attributes in process `syz.3.16165'. [ 2118.867567][T17240] delete_channel: no stack [ 2119.523908][T17269] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16180'. [ 2120.609346][T17294] delete_channel: no stack [ 2120.682177][T17293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2120.728070][T17293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2120.768572][T17293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2120.842844][T17293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2121.005747][T17293] batman_adv: batadv0: Removing interface: netdevsim0 [ 2121.357085][T17317] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.16194'. [ 2121.411020][T17317] openvswitch: netlink: IP tunnel dst address not specified [ 2122.140236][T17335] delete_channel: no stack [ 2122.278595][T17343] netlink: 'syz.4.16206': attribute type 12 has an invalid length. [ 2122.287623][T17343] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16206'. [ 2122.301247][T17343] netlink: 'syz.4.16206': attribute type 12 has an invalid length. [ 2122.311943][T17343] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16206'. [ 2122.741015][T17354] netlink: 'syz.1.16210': attribute type 39 has an invalid length. [ 2123.528906][T17371] netlink: 'syz.1.16225': attribute type 39 has an invalid length. [ 2123.678168][T17384] netlink: 156 bytes leftover after parsing attributes in process `syz.4.16215'. [ 2123.908190][T17385] delete_channel: no stack [ 2124.760187][T17409] netlink: 'syz.0.16223': attribute type 39 has an invalid length. [ 2125.343984][T17427] netlink: 'syz.1.16231': attribute type 6 has an invalid length. [ 2125.401391][T17424] delete_channel: no stack [ 2125.527937][T17435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2125.554920][T17435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2126.451500][T17441] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16237'. [ 2126.462842][T17447] netlink: 'syz.1.16238': attribute type 39 has an invalid length. [ 2126.852866][T17463] netlink: 'syz.1.16243': attribute type 39 has an invalid length. [ 2126.956780][T17460] netlink: 'syz.4.16242': attribute type 9 has an invalid length. [ 2126.960430][T17470] delete_channel: no stack [ 2126.994244][T17460] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.16242'. [ 2128.310618][T17505] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16255'. [ 2128.399918][T17502] netlink: 'syz.3.16252': attribute type 10 has an invalid length. [ 2128.566572][T17514] delete_channel: no stack [ 2129.102837][T17525] netlink: 'syz.4.16258': attribute type 39 has an invalid length. [ 2129.358131][T17534] netlink: 'syz.2.16260': attribute type 6 has an invalid length. [ 2130.069772][T17547] netlink: 'syz.2.16264': attribute type 9 has an invalid length. [ 2130.144343][T17547] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.16264'. [ 2130.154767][T17555] netlink: 'syz.1.16266': attribute type 39 has an invalid length. [ 2130.365638][T17559] delete_channel: no stack [ 2130.403425][T17564] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16272'. [ 2130.737291][T17571] netlink: 'syz.1.16283': attribute type 39 has an invalid length. [ 2131.022059][T17580] netlink: 'syz.0.16276': attribute type 6 has an invalid length. [ 2131.346987][T17598] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.16281'. [ 2131.497292][T17598] netlink: get zone limit has 8 unknown bytes [ 2132.477367][T17616] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16287'. [ 2132.565414][T17611] netlink: 'syz.3.16285': attribute type 39 has an invalid length. [ 2132.662305][T17620] netlink: 'syz.1.16289': attribute type 39 has an invalid length. [ 2132.809078][T31682] tipc: Subscription rejected, illegal request [ 2133.633537][T17640] netlink: 'syz.4.16294': attribute type 6 has an invalid length. [ 2134.020992][T17650] netlink: 'syz.2.16296': attribute type 39 has an invalid length. [ 2134.462501][T17665] netlink: 'syz.4.16302': attribute type 39 has an invalid length. [ 2134.547610][T17671] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16305'. [ 2134.719028][T17682] netlink: 'syz.2.16304': attribute type 10 has an invalid length. [ 2135.514528][T17697] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16318'. [ 2135.715996][T17699] netlink: 'syz.3.16308': attribute type 6 has an invalid length. [ 2135.903959][T17706] netlink: 'syz.1.16320': attribute type 10 has an invalid length. [ 2136.629023][T17719] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16323'. [ 2137.467934][T17734] netlink: 'syz.4.16315': attribute type 39 has an invalid length. [ 2137.621160][T17738] netlink: 'syz.1.16316': attribute type 39 has an invalid length. [ 2137.802187][T17748] netlink: 'syz.0.16325': attribute type 6 has an invalid length. [ 2138.797489][T17767] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16331'. [ 2138.922122][T17782] netlink: 'syz.2.16334': attribute type 39 has an invalid length. [ 2138.960405][T17773] netlink: 'syz.3.16332': attribute type 39 has an invalid length. [ 2139.628345][T17797] netlink: 'syz.1.16337': attribute type 10 has an invalid length. [ 2139.709726][T17797] netlink: 55 bytes leftover after parsing attributes in process `syz.1.16337'. [ 2140.150363][T17810] netlink: 'syz.0.16343': attribute type 6 has an invalid length. [ 2141.233041][T17826] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16350'. [ 2141.389057][T17842] netlink: 'syz.1.16352': attribute type 21 has an invalid length. [ 2141.474600][T17842] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16352'. [ 2141.632027][T17839] netlink: 'syz.1.16352': attribute type 1 has an invalid length. [ 2141.694069][T17839] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.16352'. [ 2143.086580][T17867] netlink: 'syz.3.16360': attribute type 6 has an invalid length. [ 2143.454077][T17870] netlink: 'syz.1.16362': attribute type 39 has an invalid length. [ 2143.651725][T17882] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16365'. [ 2144.839185][T17907] netlink: 'syz.3.16377': attribute type 39 has an invalid length. [ 2144.920091][T17914] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16380'. [ 2145.090310][T17922] netlink: 'syz.2.16382': attribute type 21 has an invalid length. [ 2145.113777][T17922] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16382'. [ 2145.218914][T17912] netlink: 'syz.4.16378': attribute type 10 has an invalid length. [ 2145.284279][T17912] netlink: 55 bytes leftover after parsing attributes in process `syz.4.16378'. [ 2145.830037][T17922] netlink: 'syz.2.16382': attribute type 1 has an invalid length. [ 2145.838445][T17922] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.16382'. [ 2146.044675][T17934] netlink: 'syz.2.16385': attribute type 11 has an invalid length. [ 2146.084031][T17934] netlink: 140 bytes leftover after parsing attributes in process `syz.2.16385'. [ 2147.019145][T17963] netlink: 'syz.2.16392': attribute type 39 has an invalid length. [ 2147.276498][T17975] netlink: 'syz.0.16396': attribute type 21 has an invalid length. [ 2147.300212][T17975] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16396'. [ 2147.431836][T17975] netlink: 'syz.0.16396': attribute type 1 has an invalid length. [ 2147.440091][T17975] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.16396'. [ 2147.633546][T17986] netlink: 'syz.3.16399': attribute type 10 has an invalid length. [ 2147.715602][T17986] netlink: 55 bytes leftover after parsing attributes in process `syz.3.16399'. [ 2147.982799][T17992] netlink: 150396 bytes leftover after parsing attributes in process `syz.1.16402'. [ 2148.055267][T17992] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2148.081158][T17992] CPU: 0 PID: 17992 Comm: syz.1.16402 Not tainted syzkaller #0 [ 2148.088772][T17992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2148.098940][T17992] Call Trace: [ 2148.102241][T17992] [ 2148.105194][T17992] dump_stack_lvl+0x188/0x250 [ 2148.110218][T17992] ? asm_common_interrupt+0x22/0x40 [ 2148.115461][T17992] ? show_regs_print_info+0x20/0x20 [ 2148.120686][T17992] ? asm_common_interrupt+0x22/0x40 [ 2148.125916][T17992] ? dump_stack+0x5/0x20 [ 2148.130197][T17992] sysfs_warn_dup+0x8a/0xa0 [ 2148.134728][T17992] sysfs_do_create_link_sd+0xc0/0x110 [ 2148.140129][T17992] device_add+0x7ed/0xfb0 [ 2148.144494][T17992] wiphy_register+0x1e81/0x2c30 [ 2148.149387][T17992] ? cfg80211_event_work+0x40/0x40 [ 2148.154611][T17992] ? minstrel_ht_alloc+0x808/0x980 [ 2148.159754][T17992] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2148.165846][T17992] ieee80211_register_hw+0x2aa1/0x3af0 [ 2148.171379][T17992] ? ieee80211_tasklet_handler+0x20/0x20 [ 2148.177040][T17992] ? rcu_is_watching+0x11/0xa0 [ 2148.181836][T17992] ? memset+0x1e/0x40 [ 2148.185836][T17992] ? hrtimer_init+0x10c/0x220 [ 2148.190541][T17992] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2148.196301][T17992] hwsim_new_radio_nl+0xa6f/0xc40 [ 2148.201368][T17992] genl_rcv_msg+0xcea/0xf90 [ 2148.205913][T17992] ? genl_bind+0x380/0x380 [ 2148.210362][T17992] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2148.215929][T17992] ? verify_lock_unused+0x140/0x140 [ 2148.221155][T17992] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2148.226728][T17992] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2148.233427][T17992] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2148.240045][T17992] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2148.246612][T17992] netlink_rcv_skb+0x1f5/0x440 [ 2148.251395][T17992] ? genl_bind+0x380/0x380 [ 2148.255830][T17992] ? netlink_ack+0xb50/0xb50 [ 2148.260439][T17992] ? __lock_acquire+0x7d10/0x7d10 [ 2148.265488][T17992] ? down_read+0x1aa/0x2e0 [ 2148.269943][T17992] genl_rcv+0x24/0x40 [ 2148.273950][T17992] netlink_unicast+0x774/0x920 [ 2148.278749][T17992] netlink_sendmsg+0x8ba/0xbe0 [ 2148.283538][T17992] ? netlink_getsockopt+0x570/0x570 [ 2148.288758][T17992] ? aa_sock_msg_perm+0x94/0x150 [ 2148.293718][T17992] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2148.299021][T17992] ? security_socket_sendmsg+0x7c/0xa0 [ 2148.304509][T17992] ? netlink_getsockopt+0x570/0x570 [ 2148.309720][T17992] ____sys_sendmsg+0x5b7/0x8f0 [ 2148.314514][T17992] ? __sys_sendmsg_sock+0x30/0x30 [ 2148.319622][T17992] ? import_iovec+0x6f/0xa0 [ 2148.324151][T17992] ___sys_sendmsg+0x236/0x2e0 [ 2148.328951][T17992] ? __sys_sendmsg+0x2a0/0x2a0 [ 2148.333785][T17992] __se_sys_sendmsg+0x1af/0x290 [ 2148.338771][T17992] ? __x64_sys_sendmsg+0x80/0x80 [ 2148.343733][T17992] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2148.349924][T17992] ? lockdep_hardirqs_on+0x94/0x140 [ 2148.355155][T17992] do_syscall_64+0x4c/0xa0 [ 2148.359585][T17992] ? clear_bhb_loop+0x30/0x80 [ 2148.364277][T17992] ? clear_bhb_loop+0x30/0x80 [ 2148.368973][T17992] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2148.374909][T17992] RIP: 0033:0x7fa09f5ea819 [ 2148.379351][T17992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2148.398984][T17992] RSP: 002b:00007fa09d823028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2148.407424][T17992] RAX: ffffffffffffffda RBX: 00007fa09f864090 RCX: 00007fa09f5ea819 [ 2148.415412][T17992] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2148.423400][T17992] RBP: 00007fa09f680c91 R08: 0000000000000000 R09: 0000000000000000 [ 2148.431382][T17992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2148.439372][T17992] R13: 00007fa09f864128 R14: 00007fa09f864090 R15: 00007ffc6944bdd8 [ 2148.447379][T17992] [ 2148.550428][T18001] netlink: 'syz.2.16406': attribute type 39 has an invalid length. [ 2148.731582][T18006] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.16408'. [ 2148.976394][ T863] tipc: Subscription rejected, illegal request [ 2150.014729][T18057] __nla_validate_parse: 2 callbacks suppressed [ 2150.015407][T18057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16426'. [ 2150.434460][T18081] validate_nla: 2 callbacks suppressed [ 2150.434477][T18081] netlink: 'syz.3.16433': attribute type 39 has an invalid length. [ 2150.553384][T18084] delete_channel: no stack [ 2151.282827][T18108] netlink: 'syz.4.16442': attribute type 21 has an invalid length. [ 2151.457182][T18108] netlink: 156 bytes leftover after parsing attributes in process `syz.4.16442'. [ 2151.514634][T18108] netlink: 'syz.4.16442': attribute type 1 has an invalid length. [ 2151.523401][T18108] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.16442'. [ 2152.025368][T18125] netlink: 'syz.1.16446': attribute type 39 has an invalid length. [ 2152.153725][T18127] delete_channel: no stack [ 2152.259030][T18135] netlink: 'syz.4.16449': attribute type 11 has an invalid length. [ 2152.270415][T18135] netlink: 140 bytes leftover after parsing attributes in process `syz.4.16449'. [ 2152.707920][T18159] netlink: 150396 bytes leftover after parsing attributes in process `syz.0.16457'. [ 2152.821076][T18159] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2152.830063][T18159] CPU: 1 PID: 18159 Comm: syz.0.16457 Not tainted syzkaller #0 [ 2152.837662][T18159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2152.847942][T18159] Call Trace: [ 2152.851241][T18159] [ 2152.854272][T18159] dump_stack_lvl+0x188/0x250 [ 2152.859044][T18159] ? show_regs_print_info+0x20/0x20 [ 2152.864275][T18159] ? load_image+0x400/0x400 [ 2152.868807][T18159] sysfs_warn_dup+0x8a/0xa0 [ 2152.873324][T18159] sysfs_do_create_link_sd+0xc0/0x110 [ 2152.878693][T18159] device_add+0x7ed/0xfb0 [ 2152.883043][T18159] wiphy_register+0x1e81/0x2c30 [ 2152.887909][T18159] ? cfg80211_event_work+0x40/0x40 [ 2152.893122][T18159] ? minstrel_ht_alloc+0x808/0x980 [ 2152.898257][T18159] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2152.904365][T18159] ieee80211_register_hw+0x2aa1/0x3af0 [ 2152.909873][T18159] ? ieee80211_tasklet_handler+0x20/0x20 [ 2152.915533][T18159] ? rcu_is_watching+0x11/0xa0 [ 2152.920318][T18159] ? memset+0x1e/0x40 [ 2152.924318][T18159] ? hrtimer_init+0x10c/0x220 [ 2152.929053][T18159] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2152.934807][T18159] hwsim_new_radio_nl+0xa6f/0xc40 [ 2152.940031][T18159] genl_rcv_msg+0xcea/0xf90 [ 2152.944663][T18159] ? genl_bind+0x380/0x380 [ 2152.949199][T18159] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 2152.954405][T18159] ? verify_lock_unused+0x140/0x140 [ 2152.959624][T18159] ? kmalloc_large_node+0xf2/0x190 [ 2152.964756][T18159] ? dev_queue_xmit+0x20/0x20 [ 2152.969525][T18159] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2152.976225][T18159] netlink_rcv_skb+0x1f5/0x440 [ 2152.980998][T18159] ? genl_bind+0x380/0x380 [ 2152.985441][T18159] ? netlink_ack+0xb50/0xb50 [ 2152.990042][T18159] ? __lock_acquire+0x7d10/0x7d10 [ 2152.995181][T18159] ? down_read+0x1aa/0x2e0 [ 2152.999790][T18159] genl_rcv+0x24/0x40 [ 2153.003820][T18159] netlink_unicast+0x774/0x920 [ 2153.008622][T18159] netlink_sendmsg+0x8ba/0xbe0 [ 2153.013417][T18159] ? netlink_getsockopt+0x570/0x570 [ 2153.018733][T18159] ? aa_sock_msg_perm+0x94/0x150 [ 2153.023775][T18159] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2153.029069][T18159] ? security_socket_sendmsg+0x7c/0xa0 [ 2153.034542][T18159] ? netlink_getsockopt+0x570/0x570 [ 2153.039747][T18159] ____sys_sendmsg+0x5b7/0x8f0 [ 2153.044532][T18159] ? __sys_sendmsg_sock+0x30/0x30 [ 2153.049577][T18159] ? import_iovec+0x6f/0xa0 [ 2153.054092][T18159] ___sys_sendmsg+0x236/0x2e0 [ 2153.058789][T18159] ? __sys_sendmsg+0x2a0/0x2a0 [ 2153.063602][T18159] __se_sys_sendmsg+0x1af/0x290 [ 2153.068567][T18159] ? __x64_sys_sendmsg+0x80/0x80 [ 2153.073513][T18159] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2153.079524][T18159] ? lockdep_hardirqs_on+0x94/0x140 [ 2153.084913][T18159] do_syscall_64+0x4c/0xa0 [ 2153.089424][T18159] ? clear_bhb_loop+0x30/0x80 [ 2153.094219][T18159] ? clear_bhb_loop+0x30/0x80 [ 2153.098917][T18159] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2153.104813][T18159] RIP: 0033:0x7fb387614819 [ 2153.109235][T18159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2153.129351][T18159] RSP: 002b:00007fb38584d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2153.137777][T18159] RAX: ffffffffffffffda RBX: 00007fb38788e090 RCX: 00007fb387614819 [ 2153.145760][T18159] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2153.153745][T18159] RBP: 00007fb3876aac91 R08: 0000000000000000 R09: 0000000000000000 [ 2153.161719][T18159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2153.169699][T18159] R13: 00007fb38788e128 R14: 00007fb38788e090 R15: 00007ffc20886568 [ 2153.177692][T18159] [ 2153.249044][T18166] netlink: 'syz.1.16462': attribute type 39 has an invalid length. [ 2153.578943][T18173] delete_channel: no stack [ 2153.962973][T18186] netlink: 'syz.3.16469': attribute type 11 has an invalid length. [ 2153.983964][T18186] netlink: 140 bytes leftover after parsing attributes in process `syz.3.16469'. [ 2154.509095][T18212] netlink: 'syz.2.16474': attribute type 39 has an invalid length. [ 2154.729692][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16475'. [ 2154.869550][T18216] delete_channel: no stack [ 2155.606052][T18246] netlink: 'syz.3.16487': attribute type 21 has an invalid length. [ 2155.634337][T18246] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16487'. [ 2155.827677][T18255] netlink: 'syz.4.16489': attribute type 39 has an invalid length. [ 2156.092232][T18259] delete_channel: no stack [ 2156.438159][T18286] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16502'. [ 2156.509540][T18291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16497'. [ 2156.601767][T18284] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.16501'. [ 2156.603790][T18293] netlink: 'syz.4.16503': attribute type 39 has an invalid length. [ 2156.697437][T18284] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.16501'. [ 2157.257575][T18305] device team_slave_0 left promiscuous mode [ 2157.320395][T18305] team0: Port device team_slave_0 removed [ 2157.352477][T18306] delete_channel: no stack [ 2157.589746][T18314] device wg2 entered promiscuous mode [ 2158.019699][T18336] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16516'. [ 2158.149101][T18328] netlink: 'syz.0.16514': attribute type 39 has an invalid length. [ 2158.294203][T18345] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.16518'. [ 2158.702175][T18351] delete_channel: no stack [ 2159.187703][T18368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16524'. [ 2159.708881][T18382] netlink: 'syz.0.16531': attribute type 39 has an invalid length. [ 2159.968563][T18390] delete_channel: no stack [ 2160.015129][T18401] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16537'. [ 2160.353973][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.360366][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.168083][T18434] netlink: 'syz.1.16545': attribute type 39 has an invalid length. [ 2161.419860][T18449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16547'. [ 2161.787468][T18438] delete_channel: no stack [ 2162.008993][T18465] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16553'. [ 2163.096646][T18483] netlink: 'syz.1.16559': attribute type 39 has an invalid length. [ 2163.139790][T18479] device aaaaaaaaaaaaaaa entered promiscuous mode [ 2163.406409][T18494] delete_channel: no stack [ 2163.480427][T18497] netlink: 'syz.0.16564': attribute type 39 has an invalid length. [ 2163.972320][T18515] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16570'. [ 2164.416736][T18527] netlink: 'syz.2.16572': attribute type 39 has an invalid length. [ 2165.533401][T18538] delete_channel: no stack [ 2165.707521][T18554] netlink: 399 bytes leftover after parsing attributes in process `syz.2.16581'. [ 2166.238747][T18571] netlink: 156 bytes leftover after parsing attributes in process `syz.4.16586'. [ 2166.343800][T18569] netlink: 'syz.0.16585': attribute type 39 has an invalid length. [ 2166.807216][T18582] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16589'. [ 2166.871127][T18554] delete_channel: no stack [ 2167.386694][T18597] netlink: 'syz.4.16593': attribute type 21 has an invalid length. [ 2167.437889][T18597] netlink: 156 bytes leftover after parsing attributes in process `syz.4.16593'. [ 2167.460646][T18601] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16592'. [ 2167.543843][T18598] delete_channel: no stack [ 2167.998344][T18612] netlink: 'syz.4.16596': attribute type 39 has an invalid length. [ 2168.329117][T18619] netlink: 'syz.0.16599': attribute type 39 has an invalid length. [ 2168.566366][T18628] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16603'. [ 2169.619476][T18642] netlink: 'syz.2.16607': attribute type 21 has an invalid length. [ 2169.652536][T18642] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16607'. [ 2169.730309][T18639] delete_channel: no stack [ 2169.971362][T18655] netlink: 'syz.1.16611': attribute type 39 has an invalid length. [ 2170.102472][T18660] netlink: 'syz.4.16610': attribute type 39 has an invalid length. [ 2170.326602][T18668] netlink: 'syz.3.16612': attribute type 9 has an invalid length. [ 2170.386424][T18659] delete_channel: no stack [ 2170.392214][T18659] delete_channel: no stack [ 2170.486862][T18668] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16612'. [ 2170.879746][T18683] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16617'. [ 2171.391931][T18670] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 2171.420927][T18670] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 2171.445512][T18670] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 2172.541045][T18701] netlink: 'syz.0.16621': attribute type 21 has an invalid length. [ 2172.594641][T18701] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16621'. [ 2172.904337][T18698] delete_channel: no stack [ 2173.613340][T18716] netlink: 'syz.2.16624': attribute type 39 has an invalid length. [ 2174.483578][T18731] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16629'. [ 2175.029835][T18751] netlink: 'syz.1.16634': attribute type 9 has an invalid length. [ 2175.081587][T18749] delete_channel: no stack [ 2175.151636][T18749] delete_channel: no stack [ 2175.297545][T18750] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.16634'. [ 2175.397889][T18757] device aaaaaaaaaaaaaaa entered promiscuous mode [ 2175.481974][T18762] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16638'. [ 2175.525232][T18764] netlink: 'syz.4.16637': attribute type 39 has an invalid length. [ 2176.278471][T18779] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.16641'. [ 2176.313916][T18779] openvswitch: netlink: Tunnel attr 8692 out of range max 16 [ 2176.662681][T18788] device gretap0 left promiscuous mode [ 2176.672670][T18788] Ÿë: port 3(gretap0) entered disabled state [ 2176.979227][T18788] device veth0_to_bridge left promiscuous mode [ 2177.102199][T18788] Ÿë: port 2(veth0_to_bridge) entered disabled state [ 2177.131825][T18788] device ip6gretap0 left promiscuous mode [ 2177.154107][T18788] Ÿë: port 1(ip6gretap0) entered disabled state [ 2177.205444][T18807] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16649'. [ 2177.446877][T18811] netlink: 'syz.2.16650': attribute type 39 has an invalid length. [ 2177.553243][T18819] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16654'. [ 2178.545797][T18844] netlink: 399 bytes leftover after parsing attributes in process `syz.4.16658'. [ 2179.633104][T18865] netlink: 'syz.1.16663': attribute type 39 has an invalid length. [ 2180.288821][T18875] netlink: 'syz.2.16667': attribute type 9 has an invalid length. [ 2180.317205][T18875] delete_channel: no stack [ 2180.328677][T18875] delete_channel: no stack [ 2180.329162][T18844] delete_channel: no stack [ 2180.398360][T18875] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16667'. [ 2180.631340][T18883] delete_channel: no stack [ 2181.115158][T18897] netlink: 'syz.1.16675': attribute type 7 has an invalid length. [ 2181.124927][T18897] netlink: 'syz.1.16675': attribute type 6 has an invalid length. [ 2181.292663][T18902] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16677'. [ 2181.622386][T18907] netlink: 'syz.0.16678': attribute type 39 has an invalid length. [ 2182.141274][T18914] netlink: 'syz.4.16681': attribute type 9 has an invalid length. [ 2182.305826][T18916] delete_channel: no stack [ 2182.310461][T18916] delete_channel: no stack [ 2182.492594][T18916] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.16681'. [ 2183.150145][T18930] netlink: 'syz.4.16684': attribute type 3 has an invalid length. [ 2183.229165][T18930] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.16684'. [ 2183.369890][T18935] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.16686'. [ 2183.380645][T18935] openvswitch: netlink: Tunnel attr 8692 out of range max 16 [ 2183.465009][T18911] delete_channel: no stack [ 2183.619116][T18950] netlink: 'syz.1.16691': attribute type 39 has an invalid length. [ 2183.697743][T18958] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16693'. [ 2183.741834][T18956] netlink: 'syz.0.16692': attribute type 21 has an invalid length. [ 2183.753806][T18956] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16692'. [ 2183.776709][T18956] netlink: 'syz.0.16692': attribute type 1 has an invalid length. [ 2185.475792][T18986] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.16700'. [ 2185.517308][T18986] openvswitch: netlink: Tunnel attr 8692 out of range max 16 [ 2185.760721][T18991] netlink: 'syz.4.16702': attribute type 7 has an invalid length. [ 2185.782684][T18991] netlink: 'syz.4.16702': attribute type 6 has an invalid length. [ 2185.817472][T18995] device gretap0 left promiscuous mode [ 2185.886194][T18995] Ÿë: port 3(gretap0) entered disabled state [ 2185.940615][T18995] device veth0_to_bridge left promiscuous mode [ 2185.984161][T18995] Ÿë: port 2(veth0_to_bridge) entered disabled state [ 2186.001709][T18995] device ip6gretap0 left promiscuous mode [ 2186.011746][T18995] Ÿë: port 1(ip6gretap0) entered disabled state [ 2186.626423][T19014] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16708'. [ 2187.214594][T19032] netlink: 'syz.1.16712': attribute type 39 has an invalid length. [ 2187.809528][T19040] netlink: 'syz.3.16715': attribute type 10 has an invalid length. [ 2187.995697][T19046] netlink: 'syz.0.16717': attribute type 7 has an invalid length. [ 2188.144869][T19046] netlink: 'syz.0.16717': attribute type 6 has an invalid length. [ 2188.636542][T19069] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16725'. [ 2189.013156][T19078] netlink: 'syz.0.16728': attribute type 39 has an invalid length. [ 2189.499264][T19092] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16731'. [ 2189.649924][T19089] netlink: 48 bytes leftover after parsing attributes in process `syz.3.16730'. [ 2190.097989][T19103] netlink: 'syz.4.16733': attribute type 21 has an invalid length. [ 2190.198295][T19103] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16733'. [ 2190.281674][T19103] netlink: 'syz.4.16733': attribute type 1 has an invalid length. [ 2190.814722][T19117] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.16737'. [ 2190.893935][T19117] openvswitch: netlink: Tunnel attr 8692 out of range max 16 [ 2191.012413][T19124] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16740'. [ 2192.018023][T19138] netlink: 14 bytes leftover after parsing attributes in process `syz.4.16746'. [ 2192.096516][T19148] netlink: 156 bytes leftover after parsing attributes in process `syz.2.16758'. [ 2192.200621][T19151] netlink: 'syz.3.16748': attribute type 21 has an invalid length. [ 2192.233603][T19151] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16748'. [ 2192.263832][T19151] netlink: 'syz.3.16748': attribute type 1 has an invalid length. [ 2192.683361][T19165] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.16752'. [ 2192.698091][T19165] openvswitch: netlink: Tunnel attr 8692 out of range max 16 [ 2192.867547][T19169] netlink: 'syz.2.16754': attribute type 10 has an invalid length. [ 2192.922799][T19176] netlink: 'syz.0.16753': attribute type 10 has an invalid length. [ 2193.362067][T19185] netlink: 'syz.1.16761': attribute type 21 has an invalid length. [ 2193.387647][T19185] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16761'. [ 2193.483390][T19185] netlink: 'syz.1.16761': attribute type 1 has an invalid length. [ 2193.560200][T19187] netlink: 'syz.0.16762': attribute type 39 has an invalid length. [ 2193.910085][T19194] netlink: 'syz.2.16767': attribute type 7 has an invalid length. [ 2193.972812][T19194] netlink: 'syz.2.16767': attribute type 6 has an invalid length. [ 2193.990119][T19202] openvswitch: netlink: Tunnel attr 8692 out of range max 16 [ 2194.172200][T19209] delete_channel: no stack [ 2196.049575][T19250] netlink: 'syz.3.16782': attribute type 7 has an invalid length. [ 2196.217686][T19256] delete_channel: no stack [ 2196.396100][T19264] __nla_validate_parse: 3 callbacks suppressed [ 2196.396140][T19264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16787'. [ 2197.990786][T19299] validate_nla: 2 callbacks suppressed [ 2197.990810][T19299] netlink: 'syz.1.16797': attribute type 39 has an invalid length. [ 2198.114745][T19301] delete_channel: no stack [ 2198.327804][T19309] mac80211_hwsim hwsim52 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2199.320582][T19338] netlink: 'syz.4.16811': attribute type 10 has an invalid length. [ 2199.378468][T19339] delete_channel: no stack [ 2200.095422][T19362] netlink: 3 bytes leftover after parsing attributes in process `syz.1.16819'. [ 2200.121485][T19362] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.16819'. [ 2200.528098][T19373] netlink: 'syz.1.16823': attribute type 10 has an invalid length. [ 2200.571259][T19377] delete_channel: no stack [ 2200.801256][T19383] delete_channel: no stack [ 2201.038250][T19391] delete_channel: no stack [ 2201.141811][T19395] netlink: 'syz.3.16829': attribute type 21 has an invalid length. [ 2201.150910][T19395] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16829'. [ 2201.708672][T19407] netlink: 3 bytes leftover after parsing attributes in process `syz.2.16833'. [ 2201.919699][T19411] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.16833'. [ 2202.199033][T19419] device syzkaller0 entered promiscuous mode [ 2202.278589][T19426] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2202.319287][T19427] delete_channel: no stack [ 2202.578025][T19437] netlink: 'syz.1.16845': attribute type 21 has an invalid length. [ 2202.619901][T19437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16845'. [ 2202.692532][T19439] delete_channel: no stack [ 2202.906390][T19448] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 2202.933134][T19448] syzkaller0: owner set to 0 [ 2203.028598][T19448] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 2203.035580][T19448] syzkaller0: group set to 9 [ 2203.229982][T19448] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2203.251766][T19448] syzkaller0: Linktype set failed because interface is up [ 2203.613743][T12794] tipc: Subscription rejected, illegal request [ 2203.988613][T19472] netlink: 3 bytes leftover after parsing attributes in process `syz.3.16855'. [ 2204.058540][T19472] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.16855'. [ 2204.158646][T19476] delete_channel: no stack [ 2204.529265][T19482] netlink: 'syz.2.16861': attribute type 21 has an invalid length. [ 2204.577299][T19482] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16861'. [ 2204.827279][T12794] wlan1: Trigger new scan to find an IBSS to join [ 2205.046333][T19501] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 2205.083826][T19501] syzkaller0: owner set to 0 [ 2205.151450][T19501] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 2205.163945][T19501] syzkaller0: group set to 9 [ 2205.218216][T19503] netlink: 'syz.3.16868': attribute type 39 has an invalid length. [ 2205.252699][T19501] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2205.269867][T19501] syzkaller0: Linktype set failed because interface is up [ 2205.476798][T19509] delete_channel: no stack [ 2205.646481][T19517] netlink: 'syz.0.16873': attribute type 3 has an invalid length. [ 2205.683781][T19517] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.16873'. [ 2206.635760][T19537] netlink: 'syz.2.16879': attribute type 4 has an invalid length. [ 2206.667083][T19537] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16879'. [ 2206.752854][T19539] netlink: 'syz.0.16880': attribute type 39 has an invalid length. [ 2207.060744][T19546] delete_channel: no stack [ 2207.143460][T19551] netlink: 'syz.2.16893': attribute type 39 has an invalid length. [ 2207.484657][T19568] netlink: 'syz.2.16899': attribute type 39 has an invalid length. [ 2207.640256][T19571] netlink: 'syz.1.16890': attribute type 3 has an invalid length. [ 2207.687189][T19571] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.16890'. [ 2207.863796][T12794] wlan1: Trigger new scan to find an IBSS to join [ 2207.947804][T19581] netlink: 'syz.3.16903': attribute type 39 has an invalid length. [ 2208.111823][T19588] device syzkaller0 entered promiscuous mode [ 2208.336398][T19595] netlink: 'syz.3.16896': attribute type 39 has an invalid length. [ 2208.359786][T19595] netlink: 55 bytes leftover after parsing attributes in process `syz.3.16896'. [ 2209.186708][T19617] mac80211_hwsim hwsim59 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2209.657573][T19639] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.16912'. [ 2209.791838][T19630] device syzkaller0 entered promiscuous mode [ 2209.810532][T19641] validate_nla: 2 callbacks suppressed [ 2209.810552][T19641] netlink: 'syz.1.16922': attribute type 39 has an invalid length. [ 2209.825131][T19639] netlink: 'syz.3.16912': attribute type 2 has an invalid length. [ 2209.833564][T19639] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16912'. [ 2211.065194][T19681] netlink: 'syz.3.16925': attribute type 3 has an invalid length. [ 2211.078108][T19681] netlink: 'syz.3.16925': attribute type 6 has an invalid length. [ 2211.091100][T19681] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.16925'. [ 2211.571558][T19695] netlink: 'syz.3.16928': attribute type 3 has an invalid length. [ 2211.656413][T19695] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.16928'. [ 2212.352999][T19696] device syzkaller0 entered promiscuous mode [ 2213.192962][T19733] netlink: 'syz.1.16939': attribute type 21 has an invalid length. [ 2213.211607][T19733] netlink: 128 bytes leftover after parsing attributes in process `syz.1.16939'. [ 2213.221708][T19733] netlink: 'syz.1.16939': attribute type 4 has an invalid length. [ 2213.233881][T19733] netlink: 3 bytes leftover after parsing attributes in process `syz.1.16939'. [ 2213.645382][T19750] netlink: 'syz.4.16944': attribute type 3 has an invalid length. [ 2213.732272][T19750] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.16944'. [ 2213.765240][T19751] netlink: 'syz.3.16945': attribute type 1 has an invalid length. [ 2213.773599][T19751] netlink: 'syz.3.16945': attribute type 3 has an invalid length. [ 2213.782058][T19751] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16945'. [ 2214.289488][T19760] delete_channel: no stack [ 2214.578871][T19775] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.16952'. [ 2214.670396][T19775] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16952'. [ 2215.730626][T19803] delete_channel: no stack [ 2216.197434][T19828] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.16969'. [ 2216.307423][T19828] validate_nla: 1 callbacks suppressed [ 2216.307447][T19828] netlink: 'syz.2.16969': attribute type 2 has an invalid length. [ 2216.322598][T19828] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16969'. [ 2216.940974][T19843] device sit0 left promiscuous mode [ 2216.991947][T19847] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2217.512706][T19860] delete_channel: no stack [ 2217.740949][T19869] netlink: 'syz.2.16984': attribute type 6 has an invalid length. [ 2218.318185][T19887] sctp: [Deprecated]: syz.3.16989 (pid 19887) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2218.318185][T19887] Use struct sctp_sack_info instead [ 2221.425334][T19953] delete_channel: no stack [ 2222.127203][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.133788][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.739934][T19975] mac80211_hwsim hwsim59 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2223.001191][T19992] delete_channel: no stack [ 2223.295996][T20000] delete_channel: no stack [ 2224.966183][T20032] delete_channel: no stack [ 2225.539490][T20047] netlink: 'syz.3.17040': attribute type 21 has an invalid length. [ 2225.558362][T20047] netlink: 128 bytes leftover after parsing attributes in process `syz.3.17040'. [ 2225.614925][T20047] netlink: 'syz.3.17040': attribute type 4 has an invalid length. [ 2225.622847][T20047] netlink: 3 bytes leftover after parsing attributes in process `syz.3.17040'. [ 2225.642968][T20053] netlink: 'syz.1.17042': attribute type 6 has an invalid length. [ 2225.979205][T20063] netlink: 'syz.0.17046': attribute type 21 has an invalid length. [ 2225.992243][T20063] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17046'. [ 2226.460508][T20077] delete_channel: no stack [ 2228.090697][T20119] device syzkaller0 entered promiscuous mode [ 2228.358242][T20125] delete_channel: no stack [ 2228.509356][T20138] netlink: 'syz.1.17068': attribute type 21 has an invalid length. [ 2228.562327][T20138] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17068'. [ 2228.903259][T20158] netlink: 134268 bytes leftover after parsing attributes in process `syz.2.17073'. [ 2229.650198][T20170] delete_channel: no stack [ 2230.538569][T20184] device sit0 entered promiscuous mode [ 2230.760548][T20191] device sit0 entered promiscuous mode [ 2230.860694][T20193] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2231.193319][T20205] netlink: 'syz.3.17088': attribute type 21 has an invalid length. [ 2231.210775][T20205] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17088'. [ 2231.480296][T20209] delete_channel: no stack [ 2231.576086][T20223] netlink: 830 bytes leftover after parsing attributes in process `syz.0.17094'. [ 2232.167226][T20231] device sit0 left promiscuous mode [ 2232.964363][T20256] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.17102'. [ 2233.325199][T20263] delete_channel: no stack [ 2233.754181][T20276] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.17116'. [ 2233.856266][T20280] netlink: 'syz.3.17111': attribute type 3 has an invalid length. [ 2233.883924][T20280] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.17111'. [ 2234.224200][T20280] device wlan0 left promiscuous mode [ 2234.317952][T20292] netlink: 'syz.2.17112': attribute type 39 has an invalid length. [ 2235.054700][T20324] netlink: 'syz.4.17120': attribute type 16 has an invalid length. [ 2235.080664][T20324] netlink: 'syz.4.17120': attribute type 3 has an invalid length. [ 2235.153746][T20324] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17120'. [ 2235.411213][T20329] netlink: 830 bytes leftover after parsing attributes in process `syz.1.17124'. [ 2235.716962][T20333] netlink: 'syz.4.17125': attribute type 39 has an invalid length. [ 2235.961751][T20344] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.17126'. [ 2235.999187][T20342] netlink: 'syz.2.17128': attribute type 3 has an invalid length. [ 2236.028534][T20342] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.17128'. [ 2236.188094][T20342] device wlan0 left promiscuous mode [ 2237.404289][T20381] netlink: 'syz.1.17137': attribute type 4 has an invalid length. [ 2237.430764][T20381] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17137'. [ 2237.467122][T20378] netlink: 830 bytes leftover after parsing attributes in process `syz.4.17139'. [ 2237.776516][T20388] netlink: 'syz.4.17141': attribute type 21 has an invalid length. [ 2237.804984][T20388] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17141'. [ 2237.818472][T20390] netlink: 830 bytes leftover after parsing attributes in process `syz.3.17151'. [ 2238.009830][T20396] netlink: 'syz.0.17143': attribute type 3 has an invalid length. [ 2238.050913][T20396] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.17143'. [ 2238.632450][T20399] device wlan0 left promiscuous mode [ 2239.559342][T20430] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17152'. [ 2239.668181][T20429] netlink: 'syz.3.17153': attribute type 8 has an invalid length. [ 2239.676855][T20429] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17153'. [ 2240.277557][T20440] netlink: 'syz.3.17155': attribute type 16 has an invalid length. [ 2240.384527][T20440] netlink: 'syz.3.17155': attribute type 3 has an invalid length. [ 2240.491004][T20440] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17155'. [ 2240.827595][T20439] netlink: 'syz.2.17165': attribute type 21 has an invalid length. [ 2241.039643][T20460] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.17158'. [ 2241.098339][T20464] netlink: 'syz.2.17159': attribute type 21 has an invalid length. [ 2241.134848][T20464] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17159'. [ 2242.004171][T20479] netlink: 'syz.3.17164': attribute type 3 has an invalid length. [ 2242.018693][T20481] netlink: 'syz.1.17166': attribute type 10 has an invalid length. [ 2242.709309][T20501] delete_channel: no stack [ 2243.667781][T20521] device wlan0 left promiscuous mode [ 2243.910354][T20526] validate_nla: 1 callbacks suppressed [ 2243.910373][T20526] netlink: 'syz.3.17181': attribute type 21 has an invalid length. [ 2244.275440][T20538] delete_channel: no stack [ 2244.356650][T20540] netlink: 'syz.1.17184': attribute type 8 has an invalid length. [ 2244.402107][T20540] __nla_validate_parse: 3 callbacks suppressed [ 2244.402191][T20540] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17184'. [ 2245.368459][T20570] netlink: 'syz.3.17194': attribute type 21 has an invalid length. [ 2245.379939][T20570] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17194'. [ 2246.311747][T20583] netlink: 'syz.1.17197': attribute type 21 has an invalid length. [ 2246.336534][T20586] delete_channel: no stack [ 2247.308537][T20611] netlink: 'syz.2.17206': attribute type 4 has an invalid length. [ 2247.338475][T20611] netlink: 152 bytes leftover after parsing attributes in process `syz.2.17206'. [ 2248.167294][T20620] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.17210'. [ 2248.182316][T20622] netlink: 'syz.2.17209': attribute type 16 has an invalid length. [ 2248.211201][T20622] netlink: 'syz.2.17209': attribute type 3 has an invalid length. [ 2248.225177][T20624] device wlan0 left promiscuous mode [ 2248.232425][T20622] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17209'. [ 2249.486229][T20652] netlink: 'syz.1.17230': attribute type 3 has an invalid length. [ 2249.584738][T20652] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.17230'. [ 2249.660607][T20654] netlink: 'syz.4.17220': attribute type 21 has an invalid length. [ 2250.096838][T20659] netlink: 'syz.0.17222': attribute type 4 has an invalid length. [ 2250.155517][T20659] netlink: 152 bytes leftover after parsing attributes in process `syz.0.17222'. [ 2250.234001][T20667] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2250.239913][T20667] syzkaller0: Linktype set failed because interface is up [ 2250.442452][T20677] netlink: 'syz.1.17227': attribute type 16 has an invalid length. [ 2250.480521][T20677] netlink: 'syz.1.17227': attribute type 3 has an invalid length. [ 2250.519859][T20677] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17227'. [ 2250.537470][T20674] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.17228'. [ 2251.335536][T20695] netlink: 'syz.4.17235': attribute type 8 has an invalid length. [ 2251.344863][T20695] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17235'. [ 2251.732305][T20707] netlink: 'syz.4.17236': attribute type 3 has an invalid length. [ 2251.747501][T20704] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.17247'. [ 2251.747998][T20707] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.17236'. [ 2252.496561][T20713] netlink: 'syz.2.17240': attribute type 3 has an invalid length. [ 2252.633950][T20713] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.17240'. [ 2252.791549][T20721] netlink: 'syz.0.17239': attribute type 21 has an invalid length. [ 2253.005122][T20730] netlink: 'syz.3.17244': attribute type 4 has an invalid length. [ 2253.045782][T20730] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17244'. [ 2253.124788][T20730] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2253.286882][T20734] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17245'. [ 2254.654052][T20781] validate_nla: 3 callbacks suppressed [ 2254.654092][T20781] netlink: 'syz.0.17263': attribute type 3 has an invalid length. [ 2254.712938][T20784] netlink: 'syz.2.17262': attribute type 4 has an invalid length. [ 2254.723897][T20781] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.17263'. [ 2254.729117][T20784] netlink: 152 bytes leftover after parsing attributes in process `syz.2.17262'. [ 2254.814583][T20781] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2254.837306][T20781] syzkaller0: Linktype set failed because interface is up [ 2254.917498][T20786] Ÿë: port 1(ip6gretap0) entered blocking state [ 2254.946654][T20786] Ÿë: port 1(ip6gretap0) entered disabled state [ 2254.970243][T20786] device ip6gretap0 entered promiscuous mode [ 2255.549094][T20804] device wlan0 entered promiscuous mode [ 2255.648932][T20819] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.17274'. [ 2255.736145][T20819] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2255.819529][T20819] CPU: 0 PID: 20819 Comm: syz.2.17274 Not tainted syzkaller #0 [ 2255.827153][T20819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2255.837236][T20819] Call Trace: [ 2255.840666][T20819] [ 2255.843630][T20819] dump_stack_lvl+0x188/0x250 [ 2255.848349][T20819] ? show_regs_print_info+0x20/0x20 [ 2255.853819][T20819] ? load_image+0x400/0x400 [ 2255.858377][T20819] sysfs_warn_dup+0x8a/0xa0 [ 2255.862918][T20819] sysfs_do_create_link_sd+0xc0/0x110 [ 2255.868324][T20819] device_add+0x7ed/0xfb0 [ 2255.872698][T20819] wiphy_register+0x1e81/0x2c30 [ 2255.877608][T20819] ? cfg80211_event_work+0x40/0x40 [ 2255.882765][T20819] ? minstrel_ht_alloc+0x808/0x980 [ 2255.887917][T20819] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2255.894023][T20819] ieee80211_register_hw+0x2aa1/0x3af0 [ 2255.899536][T20819] ? ieee80211_tasklet_handler+0x20/0x20 [ 2255.905216][T20819] ? rcu_is_watching+0x11/0xa0 [ 2255.910013][T20819] ? memset+0x1e/0x40 [ 2255.914022][T20819] ? hrtimer_init+0x10c/0x220 [ 2255.918731][T20819] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2255.924503][T20819] hwsim_new_radio_nl+0xa6f/0xc40 [ 2255.929588][T20819] genl_rcv_msg+0xcea/0xf90 [ 2255.934133][T20819] ? genl_bind+0x380/0x380 [ 2255.938592][T20819] ? vmacache_find+0x238/0x590 [ 2255.943471][T20819] ? verify_lock_unused+0x140/0x140 [ 2255.949046][T20819] ? verify_lock_unused+0x140/0x140 [ 2255.954269][T20819] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2255.960279][T20819] ? lock_chain_count+0x20/0x20 [ 2255.965171][T20819] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2255.971730][T20819] netlink_rcv_skb+0x1f5/0x440 [ 2255.976523][T20819] ? genl_bind+0x380/0x380 [ 2255.980979][T20819] ? netlink_ack+0xb50/0xb50 [ 2255.985597][T20819] ? __lock_acquire+0x7d10/0x7d10 [ 2255.990646][T20819] ? down_read+0x1aa/0x2e0 [ 2255.995079][T20819] genl_rcv+0x24/0x40 [ 2255.999077][T20819] netlink_unicast+0x774/0x920 [ 2256.003861][T20819] netlink_sendmsg+0x8ba/0xbe0 [ 2256.008663][T20819] ? netlink_getsockopt+0x570/0x570 [ 2256.013869][T20819] ? aa_sock_msg_perm+0x94/0x150 [ 2256.018820][T20819] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2256.024208][T20819] ? security_socket_sendmsg+0x7c/0xa0 [ 2256.029676][T20819] ? netlink_getsockopt+0x570/0x570 [ 2256.034882][T20819] ____sys_sendmsg+0x5b7/0x8f0 [ 2256.039662][T20819] ? __sys_sendmsg_sock+0x30/0x30 [ 2256.044701][T20819] ? import_iovec+0x6f/0xa0 [ 2256.049215][T20819] ___sys_sendmsg+0x236/0x2e0 [ 2256.053906][T20819] ? __sys_sendmsg+0x2a0/0x2a0 [ 2256.058801][T20819] __se_sys_sendmsg+0x1af/0x290 [ 2256.063665][T20819] ? __x64_sys_sendmsg+0x80/0x80 [ 2256.068614][T20819] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2256.074623][T20819] ? lockdep_hardirqs_on+0x94/0x140 [ 2256.079845][T20819] do_syscall_64+0x4c/0xa0 [ 2256.084279][T20819] ? clear_bhb_loop+0x30/0x80 [ 2256.088958][T20819] ? clear_bhb_loop+0x30/0x80 [ 2256.093728][T20819] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2256.099718][T20819] RIP: 0033:0x7fd8a6d39819 [ 2256.104146][T20819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2256.123761][T20819] RSP: 002b:00007fd8a4f51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2256.132275][T20819] RAX: ffffffffffffffda RBX: 00007fd8a6fb3180 RCX: 00007fd8a6d39819 [ 2256.140339][T20819] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2256.148509][T20819] RBP: 00007fd8a6dcfc91 R08: 0000000000000000 R09: 0000000000000000 [ 2256.156573][T20819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2256.164553][T20819] R13: 00007fd8a6fb3218 R14: 00007fd8a6fb3180 R15: 00007ffdc423f108 [ 2256.172561][T20819] [ 2256.824324][T20837] netlink: 144452 bytes leftover after parsing attributes in process `syz.3.17279'. [ 2257.004608][T20837] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2257.034163][T20837] CPU: 0 PID: 20837 Comm: syz.3.17279 Not tainted syzkaller #0 [ 2257.041797][T20837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2257.051981][T20837] Call Trace: [ 2257.055286][T20837] [ 2257.058239][T20837] dump_stack_lvl+0x188/0x250 [ 2257.062962][T20837] ? show_regs_print_info+0x20/0x20 [ 2257.068502][T20837] ? load_image+0x400/0x400 [ 2257.073046][T20837] sysfs_warn_dup+0x8a/0xa0 [ 2257.077658][T20837] sysfs_do_create_link_sd+0xc0/0x110 [ 2257.083080][T20837] device_add+0x7ed/0xfb0 [ 2257.087468][T20837] wiphy_register+0x1e81/0x2c30 [ 2257.092379][T20837] ? cfg80211_event_work+0x40/0x40 [ 2257.097651][T20837] ? minstrel_ht_alloc+0x808/0x980 [ 2257.102815][T20837] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2257.108930][T20837] ieee80211_register_hw+0x2aa1/0x3af0 [ 2257.114454][T20837] ? ieee80211_tasklet_handler+0x20/0x20 [ 2257.120154][T20837] ? rcu_is_watching+0x11/0xa0 [ 2257.124965][T20837] ? memset+0x1e/0x40 [ 2257.128990][T20837] ? hrtimer_init+0x10c/0x220 [ 2257.133798][T20837] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2257.139584][T20837] hwsim_new_radio_nl+0xa6f/0xc40 [ 2257.144674][T20837] genl_rcv_msg+0xcea/0xf90 [ 2257.149322][T20837] ? genl_bind+0x380/0x380 [ 2257.153802][T20837] ? rcu_nmi_exit+0x6f/0xf0 [ 2257.158342][T20837] ? verify_lock_unused+0x140/0x140 [ 2257.163577][T20837] ? verify_lock_unused+0x140/0x140 [ 2257.168804][T20837] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2257.174831][T20837] ? lock_chain_count+0x20/0x20 [ 2257.179737][T20837] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2257.186304][T20837] netlink_rcv_skb+0x1f5/0x440 [ 2257.191099][T20837] ? genl_bind+0x380/0x380 [ 2257.195548][T20837] ? netlink_ack+0xb50/0xb50 [ 2257.200171][T20837] ? __lock_acquire+0x7d10/0x7d10 [ 2257.205244][T20837] ? down_read+0x1aa/0x2e0 [ 2257.209723][T20837] genl_rcv+0x24/0x40 [ 2257.213744][T20837] netlink_unicast+0x774/0x920 [ 2257.218551][T20837] netlink_sendmsg+0x8ba/0xbe0 [ 2257.223352][T20837] ? netlink_getsockopt+0x570/0x570 [ 2257.228587][T20837] ? aa_sock_msg_perm+0x94/0x150 [ 2257.233678][T20837] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2257.238991][T20837] ? security_socket_sendmsg+0x7c/0xa0 [ 2257.244504][T20837] ? netlink_getsockopt+0x570/0x570 [ 2257.249718][T20837] ____sys_sendmsg+0x5b7/0x8f0 [ 2257.254879][T20837] ? __sys_sendmsg_sock+0x30/0x30 [ 2257.259929][T20837] ? import_iovec+0x6f/0xa0 [ 2257.264454][T20837] ___sys_sendmsg+0x236/0x2e0 [ 2257.269252][T20837] ? __sys_sendmsg+0x2a0/0x2a0 [ 2257.274088][T20837] __se_sys_sendmsg+0x1af/0x290 [ 2257.278973][T20837] ? __x64_sys_sendmsg+0x80/0x80 [ 2257.283945][T20837] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2257.289988][T20837] ? lockdep_hardirqs_on+0x94/0x140 [ 2257.295304][T20837] do_syscall_64+0x4c/0xa0 [ 2257.299892][T20837] ? clear_bhb_loop+0x30/0x80 [ 2257.304582][T20837] ? clear_bhb_loop+0x30/0x80 [ 2257.309279][T20837] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2257.315193][T20837] RIP: 0033:0x7f3333482819 [ 2257.319638][T20837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2257.339367][T20837] RSP: 002b:00007f33316dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2257.347808][T20837] RAX: ffffffffffffffda RBX: 00007f33336fbfa0 RCX: 00007f3333482819 [ 2257.355901][T20837] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2257.363966][T20837] RBP: 00007f3333518c91 R08: 0000000000000000 R09: 0000000000000000 [ 2257.371988][T20837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2257.379970][T20837] R13: 00007f33336fc038 R14: 00007f33336fbfa0 R15: 00007ffc6f391dc8 [ 2257.387995][T20837] [ 2257.504822][T20861] device wlan0 entered promiscuous mode [ 2259.564717][T20899] netlink: 'syz.4.17296': attribute type 10 has an invalid length. [ 2259.584782][T20910] tun0: tun_chr_ioctl cmd 1074025677 [ 2259.593448][T20910] tun0: linktype set to 768 [ 2259.602387][T20912] device wlan0 entered promiscuous mode [ 2259.926123][T20921] netlink: 'syz.4.17301': attribute type 21 has an invalid length. [ 2260.117911][T20921] netlink: 'syz.4.17301': attribute type 29 has an invalid length. [ 2260.283467][T20921] netlink: 'syz.4.17301': attribute type 29 has an invalid length. [ 2260.310573][T20922] netlink: 'syz.4.17301': attribute type 29 has an invalid length. [ 2262.406499][T20976] device wlan0 entered promiscuous mode [ 2262.461061][T20979] netlink: 'syz.1.17315': attribute type 21 has an invalid length. [ 2262.519357][T20979] netlink: 'syz.1.17315': attribute type 29 has an invalid length. [ 2262.579142][T20979] netlink: 'syz.1.17315': attribute type 29 has an invalid length. [ 2262.934138][T20985] netlink: 'syz.1.17315': attribute type 29 has an invalid length. [ 2263.326241][T20991] netlink: 'syz.0.17318': attribute type 2 has an invalid length. [ 2263.408740][T20991] netlink: 14 bytes leftover after parsing attributes in process `syz.0.17318'. [ 2264.244874][T21012] netlink: 'syz.0.17327': attribute type 10 has an invalid length. [ 2265.291520][T21047] tun0: tun_chr_ioctl cmd 1074025677 [ 2265.393922][T21047] tun0: linktype set to 768 [ 2266.201479][T21057] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.17338'. [ 2266.532244][T21057] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2266.542114][T21057] CPU: 1 PID: 21057 Comm: syz.3.17338 Not tainted syzkaller #0 [ 2266.549713][T21057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2266.559807][T21057] Call Trace: [ 2266.563214][T21057] [ 2266.566173][T21057] dump_stack_lvl+0x188/0x250 [ 2266.570889][T21057] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2266.577078][T21057] ? show_regs_print_info+0x20/0x20 [ 2266.582310][T21057] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2266.588529][T21057] sysfs_warn_dup+0x8a/0xa0 [ 2266.593088][T21057] sysfs_do_create_link_sd+0xc0/0x110 [ 2266.598509][T21057] device_add+0x7ed/0xfb0 [ 2266.603017][T21057] wiphy_register+0x1e81/0x2c30 [ 2266.607931][T21057] ? cfg80211_event_work+0x40/0x40 [ 2266.613074][T21057] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2266.619294][T21057] ? ieee80211_register_hw+0x28d4/0x3af0 [ 2266.624978][T21057] ieee80211_register_hw+0x2aa1/0x3af0 [ 2266.630510][T21057] ? ieee80211_tasklet_handler+0x20/0x20 [ 2266.636191][T21057] ? rcu_is_watching+0x11/0xa0 [ 2266.640996][T21057] ? memset+0x1e/0x40 [ 2266.645023][T21057] ? hrtimer_init+0x10c/0x220 [ 2266.649828][T21057] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2266.655636][T21057] hwsim_new_radio_nl+0xa6f/0xc40 [ 2266.660735][T21057] genl_rcv_msg+0xcea/0xf90 [ 2266.665320][T21057] ? genl_bind+0x380/0x380 [ 2266.669794][T21057] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2266.675899][T21057] ? verify_lock_unused+0x140/0x140 [ 2266.681148][T21057] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2266.686734][T21057] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2266.693437][T21057] ? lockdep_hardirqs_on+0x94/0x140 [ 2266.698664][T21057] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2266.704853][T21057] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2266.711576][T21057] netlink_rcv_skb+0x1f5/0x440 [ 2266.716365][T21057] ? genl_bind+0x380/0x380 [ 2266.720825][T21057] ? netlink_ack+0xb50/0xb50 [ 2266.725436][T21057] ? __lock_acquire+0x7d10/0x7d10 [ 2266.730497][T21057] ? down_read+0x1aa/0x2e0 [ 2266.734934][T21057] genl_rcv+0x24/0x40 [ 2266.738930][T21057] netlink_unicast+0x774/0x920 [ 2266.743717][T21057] netlink_sendmsg+0x8ba/0xbe0 [ 2266.748582][T21057] ? netlink_getsockopt+0x570/0x570 [ 2266.753799][T21057] ? netlink_getsockopt+0x570/0x570 [ 2266.759006][T21057] ____sys_sendmsg+0x5b7/0x8f0 [ 2266.763790][T21057] ? __sys_sendmsg_sock+0x30/0x30 [ 2266.768831][T21057] ? import_iovec+0x6f/0xa0 [ 2266.773551][T21057] ___sys_sendmsg+0x236/0x2e0 [ 2266.778249][T21057] ? __sys_sendmsg+0x2a0/0x2a0 [ 2266.783060][T21057] __se_sys_sendmsg+0x1af/0x290 [ 2266.787927][T21057] ? __x64_sys_sendmsg+0x80/0x80 [ 2266.792876][T21057] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2266.798877][T21057] ? lockdep_hardirqs_on+0x94/0x140 [ 2266.804203][T21057] do_syscall_64+0x4c/0xa0 [ 2266.808631][T21057] ? clear_bhb_loop+0x30/0x80 [ 2266.813308][T21057] ? clear_bhb_loop+0x30/0x80 [ 2266.817991][T21057] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2266.823891][T21057] RIP: 0033:0x7f3333482819 [ 2266.828314][T21057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2266.847940][T21057] RSP: 002b:00007f33316dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2266.856652][T21057] RAX: ffffffffffffffda RBX: 00007f33336fbfa0 RCX: 00007f3333482819 [ 2266.864649][T21057] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 2266.872651][T21057] RBP: 00007f3333518c91 R08: 0000000000000000 R09: 0000000000000000 [ 2266.880635][T21057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2266.888619][T21057] R13: 00007f33336fc038 R14: 00007f33336fbfa0 R15: 00007ffc6f391dc8 [ 2266.896624][T21057] [ 2267.193105][T21084] delete_channel: no stack [ 2267.809759][T21109] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.17350'. [ 2268.810389][T21124] delete_channel: no stack [ 2268.939078][T21130] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.17359'. [ 2272.505136][T21175] delete_channel: no stack [ 2272.615032][T21181] tun0: tun_chr_ioctl cmd 1074025677 [ 2272.625221][T21181] tun0: linktype set to 768 [ 2272.849407][T21180] delete_channel: no stack [ 2273.643127][T21214] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.17379'. [ 2274.259053][T21227] delete_channel: no stack [ 2275.178739][T21260] netlink: 'syz.4.17396': attribute type 2 has an invalid length. [ 2275.202288][T21260] netlink: 14 bytes leftover after parsing attributes in process `syz.4.17396'. [ 2275.608502][T21266] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.17397'. [ 2275.778513][T21271] delete_channel: no stack [ 2276.257117][T21283] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.17403'. [ 2276.391557][T21283] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2276.446906][T21283] CPU: 1 PID: 21283 Comm: syz.4.17403 Not tainted syzkaller #0 [ 2276.454525][T21283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2276.464608][T21283] Call Trace: [ 2276.467917][T21283] [ 2276.470886][T21283] dump_stack_lvl+0x188/0x250 [ 2276.475702][T21283] ? show_regs_print_info+0x20/0x20 [ 2276.480940][T21283] ? load_image+0x400/0x400 [ 2276.485580][T21283] sysfs_warn_dup+0x8a/0xa0 [ 2276.490108][T21283] sysfs_do_create_link_sd+0xc0/0x110 [ 2276.495502][T21283] device_add+0x7ed/0xfb0 [ 2276.499873][T21283] wiphy_register+0x1e81/0x2c30 [ 2276.504778][T21283] ? cfg80211_event_work+0x40/0x40 [ 2276.509911][T21283] ? minstrel_ht_alloc+0x808/0x980 [ 2276.515051][T21283] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2276.521147][T21283] ieee80211_register_hw+0x2aa1/0x3af0 [ 2276.526744][T21283] ? ieee80211_tasklet_handler+0x20/0x20 [ 2276.532407][T21283] ? rcu_is_watching+0x11/0xa0 [ 2276.537201][T21283] ? memset+0x1e/0x40 [ 2276.541207][T21283] ? hrtimer_init+0x10c/0x220 [ 2276.545906][T21283] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2276.551674][T21283] hwsim_new_radio_nl+0xa6f/0xc40 [ 2276.556757][T21283] genl_rcv_msg+0xcea/0xf90 [ 2276.561301][T21283] ? genl_bind+0x380/0x380 [ 2276.565843][T21283] ? verify_lock_unused+0x140/0x140 [ 2276.571064][T21283] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2276.576667][T21283] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2276.583286][T21283] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2276.589836][T21283] netlink_rcv_skb+0x1f5/0x440 [ 2276.594620][T21283] ? genl_bind+0x380/0x380 [ 2276.599057][T21283] ? netlink_ack+0xb50/0xb50 [ 2276.603759][T21283] ? lockdep_hardirqs_on+0x94/0x140 [ 2276.608995][T21283] ? down_read+0x1aa/0x2e0 [ 2276.613441][T21283] genl_rcv+0x24/0x40 [ 2276.617462][T21283] netlink_unicast+0x774/0x920 [ 2276.622265][T21283] netlink_sendmsg+0x8ba/0xbe0 [ 2276.627124][T21283] ? netlink_getsockopt+0x570/0x570 [ 2276.632441][T21283] ? aa_sock_msg_perm+0x94/0x150 [ 2276.637413][T21283] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2276.642720][T21283] ? security_socket_sendmsg+0x7c/0xa0 [ 2276.648230][T21283] ? netlink_getsockopt+0x570/0x570 [ 2276.653450][T21283] ____sys_sendmsg+0x5b7/0x8f0 [ 2276.658254][T21283] ? __sys_sendmsg_sock+0x30/0x30 [ 2276.663413][T21283] ? import_iovec+0x6f/0xa0 [ 2276.667943][T21283] ___sys_sendmsg+0x236/0x2e0 [ 2276.672653][T21283] ? __sys_sendmsg+0x2a0/0x2a0 [ 2276.677489][T21283] __se_sys_sendmsg+0x1af/0x290 [ 2276.682454][T21283] ? __x64_sys_sendmsg+0x80/0x80 [ 2276.687409][T21283] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2276.693433][T21283] ? lockdep_hardirqs_on+0x94/0x140 [ 2276.698666][T21283] do_syscall_64+0x4c/0xa0 [ 2276.703106][T21283] ? clear_bhb_loop+0x30/0x80 [ 2276.707806][T21283] ? clear_bhb_loop+0x30/0x80 [ 2276.712521][T21283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2276.718432][T21283] RIP: 0033:0x7fad621a9819 [ 2276.722878][T21283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2276.742768][T21283] RSP: 002b:00007fad60403028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2276.751312][T21283] RAX: ffffffffffffffda RBX: 00007fad62422fa0 RCX: 00007fad621a9819 [ 2276.759306][T21283] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2276.767389][T21283] RBP: 00007fad6223fc91 R08: 0000000000000000 R09: 0000000000000000 [ 2276.775380][T21283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2276.783453][T21283] R13: 00007fad62423038 R14: 00007fad62422fa0 R15: 00007ffed3f02b48 [ 2276.791571][T21283] [ 2277.083216][T21306] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.17408'. [ 2277.136306][T21306] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2277.215372][T21306] CPU: 1 PID: 21306 Comm: syz.1.17408 Not tainted syzkaller #0 [ 2277.222990][T21306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2277.233180][T21306] Call Trace: [ 2277.236498][T21306] [ 2277.239464][T21306] dump_stack_lvl+0x188/0x250 [ 2277.244265][T21306] ? show_regs_print_info+0x20/0x20 [ 2277.249490][T21306] ? load_image+0x400/0x400 [ 2277.254043][T21306] sysfs_warn_dup+0x8a/0xa0 [ 2277.258579][T21306] sysfs_do_create_link_sd+0xc0/0x110 [ 2277.264063][T21306] device_add+0x7ed/0xfb0 [ 2277.268434][T21306] wiphy_register+0x1e81/0x2c30 [ 2277.273383][T21306] ? cfg80211_event_work+0x40/0x40 [ 2277.278522][T21306] ? minstrel_ht_alloc+0x808/0x980 [ 2277.283670][T21306] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2277.289777][T21306] ieee80211_register_hw+0x2aa1/0x3af0 [ 2277.295386][T21306] ? ieee80211_tasklet_handler+0x20/0x20 [ 2277.301049][T21306] ? rcu_is_watching+0x11/0xa0 [ 2277.305842][T21306] ? memset+0x1e/0x40 [ 2277.309847][T21306] ? hrtimer_init+0x10c/0x220 [ 2277.314552][T21306] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2277.320329][T21306] hwsim_new_radio_nl+0xa6f/0xc40 [ 2277.325480][T21306] genl_rcv_msg+0xcea/0xf90 [ 2277.330027][T21306] ? genl_bind+0x380/0x380 [ 2277.334473][T21306] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2277.340044][T21306] ? verify_lock_unused+0x140/0x140 [ 2277.345262][T21306] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2277.350872][T21306] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2277.357518][T21306] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2277.364168][T21306] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2277.370722][T21306] netlink_rcv_skb+0x1f5/0x440 [ 2277.375530][T21306] ? genl_bind+0x380/0x380 [ 2277.379981][T21306] ? netlink_ack+0xb50/0xb50 [ 2277.384626][T21306] ? __lock_acquire+0x7d10/0x7d10 [ 2277.389690][T21306] ? down_read+0x1aa/0x2e0 [ 2277.394145][T21306] genl_rcv+0x24/0x40 [ 2277.398153][T21306] netlink_unicast+0x774/0x920 [ 2277.402953][T21306] netlink_sendmsg+0x8ba/0xbe0 [ 2277.407764][T21306] ? netlink_getsockopt+0x570/0x570 [ 2277.412991][T21306] ? aa_sock_msg_perm+0x94/0x150 [ 2277.417956][T21306] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2277.423260][T21306] ? security_socket_sendmsg+0x7c/0xa0 [ 2277.428786][T21306] ? netlink_getsockopt+0x570/0x570 [ 2277.434004][T21306] ____sys_sendmsg+0x5b7/0x8f0 [ 2277.438808][T21306] ? __sys_sendmsg_sock+0x30/0x30 [ 2277.443868][T21306] ? import_iovec+0x6f/0xa0 [ 2277.448571][T21306] ___sys_sendmsg+0x236/0x2e0 [ 2277.453288][T21306] ? __sys_sendmsg+0x2a0/0x2a0 [ 2277.458097][T21306] ? percpu_counter_add_batch+0x13b/0x160 [ 2277.463881][T21306] __se_sys_sendmsg+0x1af/0x290 [ 2277.468766][T21306] ? __x64_sys_sendmsg+0x80/0x80 [ 2277.473730][T21306] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2277.479782][T21306] ? lockdep_hardirqs_on+0x94/0x140 [ 2277.485007][T21306] do_syscall_64+0x4c/0xa0 [ 2277.489450][T21306] ? clear_bhb_loop+0x30/0x80 [ 2277.494167][T21306] ? clear_bhb_loop+0x30/0x80 [ 2277.498952][T21306] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2277.505143][T21306] RIP: 0033:0x7fa09f5ea819 [ 2277.509677][T21306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2277.529561][T21306] RSP: 002b:00007fa09d823028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2277.538002][T21306] RAX: ffffffffffffffda RBX: 00007fa09f864090 RCX: 00007fa09f5ea819 [ 2277.545992][T21306] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 2277.554072][T21306] RBP: 00007fa09f680c91 R08: 0000000000000000 R09: 0000000000000000 [ 2277.562079][T21306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2277.570158][T21306] R13: 00007fa09f864128 R14: 00007fa09f864090 R15: 00007ffc6944bdd8 [ 2277.578187][T21306] [ 2277.625218][T21320] netlink: 'syz.3.17412': attribute type 2 has an invalid length. [ 2277.653210][T21320] netlink: 14 bytes leftover after parsing attributes in process `syz.3.17412'. [ 2278.071118][T21328] delete_channel: no stack [ 2278.127701][T21333] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.17416'. [ 2279.964883][T21380] netlink: 'syz.2.17429': attribute type 3 has an invalid length. [ 2279.972797][T21380] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.17429'. [ 2280.026465][T21369] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.17426'. [ 2280.200892][T21369] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2280.243970][T21369] CPU: 1 PID: 21369 Comm: syz.0.17426 Not tainted syzkaller #0 [ 2280.251676][T21369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2280.261747][T21369] Call Trace: [ 2280.265039][T21369] [ 2280.267976][T21369] dump_stack_lvl+0x188/0x250 [ 2280.272665][T21369] ? show_regs_print_info+0x20/0x20 [ 2280.277882][T21369] ? load_image+0x400/0x400 [ 2280.282400][T21369] sysfs_warn_dup+0x8a/0xa0 [ 2280.286911][T21369] sysfs_do_create_link_sd+0xc0/0x110 [ 2280.292289][T21369] device_add+0x7ed/0xfb0 [ 2280.296640][T21369] wiphy_register+0x1e81/0x2c30 [ 2280.301517][T21369] ? cfg80211_event_work+0x40/0x40 [ 2280.306635][T21369] ? minstrel_ht_alloc+0x808/0x980 [ 2280.311761][T21369] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2280.317849][T21369] ieee80211_register_hw+0x2aa1/0x3af0 [ 2280.323332][T21369] ? ieee80211_tasklet_handler+0x20/0x20 [ 2280.328981][T21369] ? rcu_is_watching+0x11/0xa0 [ 2280.333757][T21369] ? memset+0x1e/0x40 [ 2280.337766][T21369] ? hrtimer_init+0x10c/0x220 [ 2280.342462][T21369] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2280.348292][T21369] hwsim_new_radio_nl+0xa6f/0xc40 [ 2280.353348][T21369] genl_rcv_msg+0xcea/0xf90 [ 2280.357857][T21369] ? lock_chain_count+0x20/0x20 [ 2280.362825][T21369] ? genl_bind+0x380/0x380 [ 2280.367251][T21369] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2280.372981][T21369] ? verify_lock_unused+0x140/0x140 [ 2280.378201][T21369] ? perf_trace_lock_acquire+0x340/0x3e0 [ 2280.383954][T21369] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2280.390727][T21369] ? perf_trace_lock+0xe4/0x390 [ 2280.395680][T21369] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2280.402200][T21369] netlink_rcv_skb+0x1f5/0x440 [ 2280.406973][T21369] ? genl_bind+0x380/0x380 [ 2280.411490][T21369] ? netlink_ack+0xb50/0xb50 [ 2280.416177][T21369] ? __lock_acquire+0x7d10/0x7d10 [ 2280.421219][T21369] ? down_read+0x1aa/0x2e0 [ 2280.425643][T21369] genl_rcv+0x24/0x40 [ 2280.429630][T21369] netlink_unicast+0x774/0x920 [ 2280.434405][T21369] netlink_sendmsg+0x8ba/0xbe0 [ 2280.439271][T21369] ? netlink_getsockopt+0x570/0x570 [ 2280.444589][T21369] ? netlink_getsockopt+0x570/0x570 [ 2280.449789][T21369] ____sys_sendmsg+0x5b7/0x8f0 [ 2280.454584][T21369] ? __sys_sendmsg_sock+0x30/0x30 [ 2280.459619][T21369] ? ___sys_sendmsg+0x21b/0x2e0 [ 2280.464496][T21369] ___sys_sendmsg+0x236/0x2e0 [ 2280.469363][T21369] ? __sys_sendmsg+0x2a0/0x2a0 [ 2280.474172][T21369] __se_sys_sendmsg+0x1af/0x290 [ 2280.479136][T21369] ? __x64_sys_sendmsg+0x80/0x80 [ 2280.484164][T21369] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2280.490163][T21369] ? lockdep_hardirqs_on+0x94/0x140 [ 2280.495377][T21369] do_syscall_64+0x4c/0xa0 [ 2280.499796][T21369] ? clear_bhb_loop+0x30/0x80 [ 2280.504487][T21369] ? clear_bhb_loop+0x30/0x80 [ 2280.509173][T21369] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2280.515076][T21369] RIP: 0033:0x7fb387614819 [ 2280.519503][T21369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2280.539372][T21369] RSP: 002b:00007fb38586e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2280.547881][T21369] RAX: ffffffffffffffda RBX: 00007fb38788dfa0 RCX: 00007fb387614819 [ 2280.555946][T21369] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 2280.563927][T21369] RBP: 00007fb3876aac91 R08: 0000000000000000 R09: 0000000000000000 [ 2280.571901][T21369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2280.579873][T21369] R13: 00007fb38788e038 R14: 00007fb38788dfa0 R15: 00007ffc20886568 [ 2280.587872][T21369] [ 2280.886905][T21394] netlink: 'syz.2.17443': attribute type 39 has an invalid length. [ 2281.264666][T21398] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.17432'. [ 2282.599722][T21444] netlink: 'syz.1.17447': attribute type 39 has an invalid length. [ 2282.700970][T21442] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.17446'. [ 2282.787774][T21442] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2282.824071][T21442] CPU: 0 PID: 21442 Comm: syz.2.17446 Not tainted syzkaller #0 [ 2282.832037][T21442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2282.842392][T21442] Call Trace: [ 2282.845721][T21442] [ 2282.848822][T21442] dump_stack_lvl+0x188/0x250 [ 2282.853546][T21442] ? show_regs_print_info+0x20/0x20 [ 2282.858854][T21442] ? load_image+0x400/0x400 [ 2282.863423][T21442] sysfs_warn_dup+0x8a/0xa0 [ 2282.868071][T21442] sysfs_do_create_link_sd+0xc0/0x110 [ 2282.873579][T21442] device_add+0x7ed/0xfb0 [ 2282.877955][T21442] wiphy_register+0x1e81/0x2c30 [ 2282.882822][T21442] ? cfg80211_event_work+0x40/0x40 [ 2282.887956][T21442] ? minstrel_ht_alloc+0x808/0x980 [ 2282.893113][T21442] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2282.899231][T21442] ieee80211_register_hw+0x2aa1/0x3af0 [ 2282.904756][T21442] ? ieee80211_tasklet_handler+0x20/0x20 [ 2282.910442][T21442] ? rcu_is_watching+0x11/0xa0 [ 2282.915326][T21442] ? memset+0x1e/0x40 [ 2282.919383][T21442] ? hrtimer_init+0x10c/0x220 [ 2282.924095][T21442] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2282.929884][T21442] hwsim_new_radio_nl+0xa6f/0xc40 [ 2282.934977][T21442] genl_rcv_msg+0xcea/0xf90 [ 2282.939530][T21442] ? genl_bind+0x380/0x380 [ 2282.943988][T21442] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2282.949566][T21442] ? verify_lock_unused+0x140/0x140 [ 2282.954816][T21442] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2282.960400][T21442] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2282.967012][T21442] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2282.973635][T21442] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2282.980192][T21442] netlink_rcv_skb+0x1f5/0x440 [ 2282.985167][T21442] ? genl_bind+0x380/0x380 [ 2282.989617][T21442] ? netlink_ack+0xb50/0xb50 [ 2282.994228][T21442] ? __lock_acquire+0x7d10/0x7d10 [ 2282.999276][T21442] ? down_read+0x1aa/0x2e0 [ 2283.003715][T21442] genl_rcv+0x24/0x40 [ 2283.007711][T21442] netlink_unicast+0x774/0x920 [ 2283.012584][T21442] netlink_sendmsg+0x8ba/0xbe0 [ 2283.017382][T21442] ? netlink_getsockopt+0x570/0x570 [ 2283.022600][T21442] ? aa_sock_msg_perm+0x94/0x150 [ 2283.027549][T21442] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2283.032841][T21442] ? security_socket_sendmsg+0x7c/0xa0 [ 2283.038364][T21442] ? netlink_getsockopt+0x570/0x570 [ 2283.043566][T21442] ____sys_sendmsg+0x5b7/0x8f0 [ 2283.048397][T21442] ? __sys_sendmsg_sock+0x30/0x30 [ 2283.053454][T21442] ? import_iovec+0x6f/0xa0 [ 2283.057978][T21442] ___sys_sendmsg+0x236/0x2e0 [ 2283.062685][T21442] ? __sys_sendmsg+0x2a0/0x2a0 [ 2283.067557][T21442] ? percpu_counter_add_batch+0x13b/0x160 [ 2283.073401][T21442] __se_sys_sendmsg+0x1af/0x290 [ 2283.078269][T21442] ? __x64_sys_sendmsg+0x80/0x80 [ 2283.083212][T21442] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2283.089233][T21442] ? lockdep_hardirqs_on+0x94/0x140 [ 2283.094453][T21442] do_syscall_64+0x4c/0xa0 [ 2283.098872][T21442] ? clear_bhb_loop+0x30/0x80 [ 2283.103558][T21442] ? clear_bhb_loop+0x30/0x80 [ 2283.108246][T21442] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2283.114143][T21442] RIP: 0033:0x7fd8a6d39819 [ 2283.118572][T21442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2283.138193][T21442] RSP: 002b:00007fd8a4f72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2283.146620][T21442] RAX: ffffffffffffffda RBX: 00007fd8a6fb3090 RCX: 00007fd8a6d39819 [ 2283.154604][T21442] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 2283.162590][T21442] RBP: 00007fd8a6dcfc91 R08: 0000000000000000 R09: 0000000000000000 [ 2283.170566][T21442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2283.178549][T21442] R13: 00007fd8a6fb3128 R14: 00007fd8a6fb3090 R15: 00007ffdc423f108 [ 2283.186649][T21442] [ 2283.238202][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.244608][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.351288][T21450] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.17448'. [ 2283.967917][T21477] netlink: 'syz.2.17454': attribute type 10 has an invalid length. [ 2284.220252][T21489] netlink: 'syz.2.17458': attribute type 39 has an invalid length. [ 2285.125743][T21518] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.17463'. [ 2285.185650][T21518] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2285.209992][T21518] CPU: 1 PID: 21518 Comm: syz.4.17463 Not tainted syzkaller #0 [ 2285.217722][T21518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2285.228006][T21518] Call Trace: [ 2285.231402][T21518] [ 2285.234413][T21518] dump_stack_lvl+0x188/0x250 [ 2285.239150][T21518] ? show_regs_print_info+0x20/0x20 [ 2285.244380][T21518] ? load_image+0x400/0x400 [ 2285.249045][T21518] sysfs_warn_dup+0x8a/0xa0 [ 2285.253589][T21518] sysfs_do_create_link_sd+0xc0/0x110 [ 2285.259000][T21518] device_add+0x7ed/0xfb0 [ 2285.263387][T21518] wiphy_register+0x1e81/0x2c30 [ 2285.268295][T21518] ? cfg80211_event_work+0x40/0x40 [ 2285.273436][T21518] ? minstrel_ht_alloc+0x808/0x980 [ 2285.278596][T21518] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2285.284701][T21518] ieee80211_register_hw+0x2aa1/0x3af0 [ 2285.290216][T21518] ? ieee80211_tasklet_handler+0x20/0x20 [ 2285.295885][T21518] ? rcu_is_watching+0x11/0xa0 [ 2285.300781][T21518] ? memset+0x1e/0x40 [ 2285.304792][T21518] ? hrtimer_init+0x10c/0x220 [ 2285.309511][T21518] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2285.315276][T21518] hwsim_new_radio_nl+0xa6f/0xc40 [ 2285.320340][T21518] genl_rcv_msg+0xcea/0xf90 [ 2285.324872][T21518] ? genl_bind+0x380/0x380 [ 2285.329315][T21518] ? perf_trace_lock+0xe4/0x390 [ 2285.334175][T21518] ? verify_lock_unused+0x140/0x140 [ 2285.339392][T21518] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2285.344961][T21518] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2285.351562][T21518] ? perf_trace_lock+0xe4/0x390 [ 2285.356439][T21518] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2285.362988][T21518] netlink_rcv_skb+0x1f5/0x440 [ 2285.367860][T21518] ? genl_bind+0x380/0x380 [ 2285.372293][T21518] ? netlink_ack+0xb50/0xb50 [ 2285.376902][T21518] ? __lock_acquire+0x7d10/0x7d10 [ 2285.381948][T21518] ? down_read+0x1aa/0x2e0 [ 2285.386383][T21518] genl_rcv+0x24/0x40 [ 2285.390376][T21518] netlink_unicast+0x774/0x920 [ 2285.395381][T21518] netlink_sendmsg+0x8ba/0xbe0 [ 2285.400167][T21518] ? netlink_getsockopt+0x570/0x570 [ 2285.405376][T21518] ? aa_sock_msg_perm+0x94/0x150 [ 2285.410335][T21518] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2285.415633][T21518] ? security_socket_sendmsg+0x7c/0xa0 [ 2285.421274][T21518] ? netlink_getsockopt+0x570/0x570 [ 2285.426486][T21518] ____sys_sendmsg+0x5b7/0x8f0 [ 2285.431280][T21518] ? __sys_sendmsg_sock+0x30/0x30 [ 2285.436331][T21518] ? import_iovec+0x6f/0xa0 [ 2285.440852][T21518] ___sys_sendmsg+0x236/0x2e0 [ 2285.445557][T21518] ? __sys_sendmsg+0x2a0/0x2a0 [ 2285.450355][T21518] ? trace_event_raw_event_lock+0x270/0x270 [ 2285.456300][T21518] __se_sys_sendmsg+0x1af/0x290 [ 2285.461165][T21518] ? __x64_sys_sendmsg+0x80/0x80 [ 2285.466207][T21518] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2285.472223][T21518] ? lockdep_hardirqs_on+0x94/0x140 [ 2285.477437][T21518] do_syscall_64+0x4c/0xa0 [ 2285.481968][T21518] ? clear_bhb_loop+0x30/0x80 [ 2285.486655][T21518] ? clear_bhb_loop+0x30/0x80 [ 2285.491350][T21518] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2285.497249][T21518] RIP: 0033:0x7fad621a9819 [ 2285.501677][T21518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2285.521384][T21518] RSP: 002b:00007fad603e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2285.529814][T21518] RAX: ffffffffffffffda RBX: 00007fad62423090 RCX: 00007fad621a9819 [ 2285.537795][T21518] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 2285.545773][T21518] RBP: 00007fad6223fc91 R08: 0000000000000000 R09: 0000000000000000 [ 2285.553756][T21518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2285.561738][T21518] R13: 00007fad62423128 R14: 00007fad62423090 R15: 00007ffed3f02b48 [ 2285.569753][T21518] [ 2286.038940][T21525] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.17467'. [ 2286.272064][T21524] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.17466'. [ 2286.368719][T21545] netlink: 'syz.1.17471': attribute type 39 has an invalid length. [ 2287.645119][T21572] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.17480'. [ 2287.675149][T21572] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2287.713961][T21572] CPU: 1 PID: 21572 Comm: syz.3.17480 Not tainted syzkaller #0 [ 2287.721559][T21572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2287.731652][T21572] Call Trace: [ 2287.734966][T21572] [ 2287.737930][T21572] dump_stack_lvl+0x188/0x250 [ 2287.742646][T21572] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2287.748852][T21572] ? show_regs_print_info+0x20/0x20 [ 2287.754100][T21572] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2287.760372][T21572] ? dump_stack+0x5/0x20 [ 2287.764667][T21572] sysfs_warn_dup+0x8a/0xa0 [ 2287.769204][T21572] sysfs_do_create_link_sd+0xc0/0x110 [ 2287.774759][T21572] device_add+0x7ed/0xfb0 [ 2287.779143][T21572] wiphy_register+0x1e81/0x2c30 [ 2287.784037][T21572] ? cfg80211_event_work+0x40/0x40 [ 2287.789172][T21572] ? minstrel_ht_alloc+0x808/0x980 [ 2287.794311][T21572] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2287.800493][T21572] ieee80211_register_hw+0x2aa1/0x3af0 [ 2287.805991][T21572] ? ieee80211_tasklet_handler+0x20/0x20 [ 2287.811644][T21572] ? rcu_is_watching+0x11/0xa0 [ 2287.816420][T21572] ? memset+0x1e/0x40 [ 2287.820420][T21572] ? hrtimer_init+0x10c/0x220 [ 2287.825213][T21572] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2287.830988][T21572] hwsim_new_radio_nl+0xa6f/0xc40 [ 2287.836040][T21572] genl_rcv_msg+0xcea/0xf90 [ 2287.840591][T21572] ? genl_bind+0x380/0x380 [ 2287.845131][T21572] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2287.850878][T21572] ? verify_lock_unused+0x140/0x140 [ 2287.856104][T21572] ? perf_trace_lock_acquire+0x340/0x3e0 [ 2287.861799][T21572] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2287.868429][T21572] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2287.875060][T21572] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2287.881594][T21572] netlink_rcv_skb+0x1f5/0x440 [ 2287.886372][T21572] ? genl_bind+0x380/0x380 [ 2287.890890][T21572] ? netlink_ack+0xb50/0xb50 [ 2287.895605][T21572] ? __lock_acquire+0x7d10/0x7d10 [ 2287.900650][T21572] ? down_read+0x1aa/0x2e0 [ 2287.905183][T21572] genl_rcv+0x24/0x40 [ 2287.909175][T21572] netlink_unicast+0x774/0x920 [ 2287.914054][T21572] netlink_sendmsg+0x8ba/0xbe0 [ 2287.918844][T21572] ? netlink_getsockopt+0x570/0x570 [ 2287.924064][T21572] ? aa_sock_msg_perm+0x94/0x150 [ 2287.929021][T21572] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2287.934311][T21572] ? security_socket_sendmsg+0x7c/0xa0 [ 2287.939779][T21572] ? netlink_getsockopt+0x570/0x570 [ 2287.944990][T21572] ____sys_sendmsg+0x5b7/0x8f0 [ 2287.949877][T21572] ? __sys_sendmsg_sock+0x30/0x30 [ 2287.954930][T21572] ? import_iovec+0x6f/0xa0 [ 2287.959540][T21572] ___sys_sendmsg+0x236/0x2e0 [ 2287.964376][T21572] ? __sys_sendmsg+0x2a0/0x2a0 [ 2287.969406][T21572] ? rcu_lock_release+0x9/0x20 [ 2287.974228][T21572] __se_sys_sendmsg+0x1af/0x290 [ 2287.979110][T21572] ? __x64_sys_sendmsg+0x80/0x80 [ 2287.984067][T21572] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2287.990104][T21572] ? lockdep_hardirqs_on+0x94/0x140 [ 2287.995352][T21572] do_syscall_64+0x4c/0xa0 [ 2287.999779][T21572] ? clear_bhb_loop+0x30/0x80 [ 2288.004461][T21572] ? clear_bhb_loop+0x30/0x80 [ 2288.009149][T21572] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2288.015053][T21572] RIP: 0033:0x7f3333482819 [ 2288.019494][T21572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2288.039569][T21572] RSP: 002b:00007f33316bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2288.048021][T21572] RAX: ffffffffffffffda RBX: 00007f33336fc090 RCX: 00007f3333482819 [ 2288.056031][T21572] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2288.064213][T21572] RBP: 00007f3333518c91 R08: 0000000000000000 R09: 0000000000000000 [ 2288.072195][T21572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2288.080188][T21572] R13: 00007f33336fc128 R14: 00007f33336fc090 R15: 00007ffc6f391dc8 [ 2288.088361][T21572] [ 2288.269061][T21587] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.17484'. [ 2288.402095][T21589] netlink: 'syz.1.17485': attribute type 10 has an invalid length. [ 2288.477571][T21582] Ÿë: port 1(ip6gretap0) entered blocking state [ 2288.485174][T21582] Ÿë: port 1(ip6gretap0) entered disabled state [ 2288.565614][T21582] device ip6gretap0 entered promiscuous mode [ 2288.590519][T21594] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.17486'. [ 2288.690048][T21596] netlink: 'syz.3.17487': attribute type 39 has an invalid length. [ 2291.420288][T21630] netlink: 'syz.4.17508': attribute type 10 has an invalid length. [ 2291.518200][T21636] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.17499'. [ 2291.550171][T21636] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2291.571205][T21636] CPU: 0 PID: 21636 Comm: syz.0.17499 Not tainted syzkaller #0 [ 2291.578844][T21636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2291.588941][T21636] Call Trace: [ 2291.592263][T21636] [ 2291.595233][T21636] dump_stack_lvl+0x188/0x250 [ 2291.599965][T21636] ? show_regs_print_info+0x20/0x20 [ 2291.605203][T21636] ? load_image+0x400/0x400 [ 2291.609795][T21636] sysfs_warn_dup+0x8a/0xa0 [ 2291.614344][T21636] sysfs_do_create_link_sd+0xc0/0x110 [ 2291.619777][T21636] device_add+0x7ed/0xfb0 [ 2291.624187][T21636] wiphy_register+0x1e81/0x2c30 [ 2291.629152][T21636] ? cfg80211_event_work+0x40/0x40 [ 2291.634310][T21636] ? minstrel_ht_alloc+0x808/0x980 [ 2291.639785][T21636] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2291.645891][T21636] ieee80211_register_hw+0x2aa1/0x3af0 [ 2291.651499][T21636] ? ieee80211_tasklet_handler+0x20/0x20 [ 2291.657162][T21636] ? rcu_is_watching+0x11/0xa0 [ 2291.661959][T21636] ? memset+0x1e/0x40 [ 2291.666017][T21636] ? hrtimer_init+0x10c/0x220 [ 2291.670750][T21636] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2291.676555][T21636] hwsim_new_radio_nl+0xa6f/0xc40 [ 2291.681667][T21636] genl_rcv_msg+0xcea/0xf90 [ 2291.686241][T21636] ? genl_bind+0x380/0x380 [ 2291.690710][T21636] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2291.696484][T21636] ? verify_lock_unused+0x140/0x140 [ 2291.701834][T21636] ? perf_trace_lock_acquire+0x340/0x3e0 [ 2291.707535][T21636] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2291.714275][T21636] ? dev_queue_xmit+0x20/0x20 [ 2291.718997][T21636] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2291.725672][T21636] netlink_rcv_skb+0x1f5/0x440 [ 2291.730485][T21636] ? genl_bind+0x380/0x380 [ 2291.734948][T21636] ? netlink_ack+0xb50/0xb50 [ 2291.739594][T21636] ? __lock_acquire+0x7d10/0x7d10 [ 2291.744677][T21636] ? down_read+0x1aa/0x2e0 [ 2291.749148][T21636] genl_rcv+0x24/0x40 [ 2291.753441][T21636] netlink_unicast+0x774/0x920 [ 2291.758274][T21636] netlink_sendmsg+0x8ba/0xbe0 [ 2291.763107][T21636] ? netlink_getsockopt+0x570/0x570 [ 2291.768358][T21636] ? aa_sock_msg_perm+0x94/0x150 [ 2291.773484][T21636] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2291.778781][T21636] ? security_socket_sendmsg+0x7c/0xa0 [ 2291.784283][T21636] ? netlink_getsockopt+0x570/0x570 [ 2291.789520][T21636] ____sys_sendmsg+0x5b7/0x8f0 [ 2291.794348][T21636] ? __sys_sendmsg_sock+0x30/0x30 [ 2291.799451][T21636] ? import_iovec+0x6f/0xa0 [ 2291.804004][T21636] ___sys_sendmsg+0x236/0x2e0 [ 2291.808721][T21636] ? __sys_sendmsg+0x2a0/0x2a0 [ 2291.813627][T21636] ? percpu_counter_add_batch+0x13b/0x160 [ 2291.819502][T21636] __se_sys_sendmsg+0x1af/0x290 [ 2291.824457][T21636] ? __x64_sys_sendmsg+0x80/0x80 [ 2291.829410][T21636] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2291.835438][T21636] ? lockdep_hardirqs_on+0x94/0x140 [ 2291.840833][T21636] do_syscall_64+0x4c/0xa0 [ 2291.845256][T21636] ? clear_bhb_loop+0x30/0x80 [ 2291.850024][T21636] ? clear_bhb_loop+0x30/0x80 [ 2291.854725][T21636] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2291.860750][T21636] RIP: 0033:0x7fb387614819 [ 2291.865196][T21636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2291.884833][T21636] RSP: 002b:00007fb38584d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2291.893368][T21636] RAX: ffffffffffffffda RBX: 00007fb38788e090 RCX: 00007fb387614819 [ 2291.901566][T21636] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2291.909566][T21636] RBP: 00007fb3876aac91 R08: 0000000000000000 R09: 0000000000000000 [ 2291.917685][T21636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2291.925793][T21636] R13: 00007fb38788e128 R14: 00007fb38788e090 R15: 00007ffc20886568 [ 2291.933976][T21636] [ 2292.013686][T21652] netlink: 'syz.3.17500': attribute type 10 has an invalid length. [ 2292.250086][T21661] netlink: 'syz.2.17502': attribute type 39 has an invalid length. [ 2292.409253][T21665] device wlan0 left promiscuous mode [ 2293.682531][T21696] netlink: 'syz.0.17514': attribute type 10 has an invalid length. [ 2293.730570][T21698] netlink: 'syz.3.17516': attribute type 10 has an invalid length. [ 2293.941407][T21707] netlink: 'syz.0.17520': attribute type 39 has an invalid length. [ 2295.655649][T21754] netlink: 'syz.4.17533': attribute type 10 has an invalid length. [ 2295.698852][T21760] netlink: 'syz.0.17535': attribute type 39 has an invalid length. [ 2296.004249][T21772] netlink: 'syz.1.17537': attribute type 10 has an invalid length. [ 2296.053688][T21772] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17537'. [ 2296.299436][T21772] netlink: 'syz.1.17537': attribute type 10 has an invalid length. [ 2296.322905][T21772] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17537'. [ 2297.600853][T21811] netlink: 'syz.3.17550': attribute type 39 has an invalid length. [ 2297.762734][T21815] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.17551'. [ 2298.751312][T21845] device wlan0 left promiscuous mode [ 2298.950466][T21847] netlink: 'syz.1.17556': attribute type 10 has an invalid length. [ 2299.662068][T21881] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.17571'. [ 2300.648753][T21898] IPv6: …: Disabled Multicast RS [ 2300.670195][T21890] netlink: 830 bytes leftover after parsing attributes in process `syz.3.17574'. [ 2300.792084][T21904] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17577'. [ 2301.098392][T21908] netlink: 'syz.0.17579': attribute type 10 has an invalid length. [ 2301.512327][T21927] netlink: 'syz.1.17587': attribute type 10 has an invalid length. [ 2301.551928][T21927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17587'. [ 2301.607537][T21931] device wlan0 left promiscuous mode [ 2302.007476][T21948] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.17589'. [ 2302.201382][T21950] netlink: 'syz.3.17590': attribute type 10 has an invalid length. [ 2302.337374][T21950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17590'. [ 2303.342330][T21950] netlink: 'syz.3.17590': attribute type 10 has an invalid length. [ 2303.355080][T21950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17590'. [ 2303.399446][T21951] device syzkaller0 entered promiscuous mode [ 2304.119831][T21985] netlink: 'syz.2.17597': attribute type 10 has an invalid length. [ 2304.185823][T21994] netlink: 'syz.0.17603': attribute type 10 has an invalid length. [ 2304.210948][T21994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17603'. [ 2304.422726][T22000] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17606'. [ 2304.614026][T22002] netlink: 'syz.2.17607': attribute type 10 has an invalid length. [ 2304.653694][T22002] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17607'. [ 2304.663411][T22002] netlink: 'syz.2.17607': attribute type 10 has an invalid length. [ 2304.672228][T22002] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17607'. [ 2306.017203][T22050] netlink: 'syz.2.17617': attribute type 10 has an invalid length. [ 2306.534981][T22064] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17624'. [ 2307.155921][T22089] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17641'. [ 2307.315175][T22091] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.17630'. [ 2308.126793][T22097] delete_channel: no stack [ 2309.268644][T22132] netlink: 'syz.2.17640': attribute type 10 has an invalid length. [ 2309.360047][T22132] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17640'. [ 2309.377859][T22133] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17642'. [ 2309.700410][T22136] delete_channel: no stack [ 2311.462530][T22166] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.17663'. [ 2311.699416][T22173] netlink: 'syz.3.17654': attribute type 10 has an invalid length. [ 2312.733397][T22193] netlink: 'syz.0.17659': attribute type 39 has an invalid length. [ 2312.787853][T22196] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17660'. [ 2312.789949][T22192] netlink: 44 bytes leftover after parsing attributes in process `syz.3.17658'. [ 2313.036153][T22201] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17662'. [ 2313.656419][T22211] IPv6: …: Disabled Multicast RS [ 2313.798721][T22218] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.17669'. [ 2313.936090][T22225] device wlan1 entered promiscuous mode [ 2314.063776][T22221] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.17670'. [ 2314.420609][T22227] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17681'. [ 2314.555541][T22242] netlink: 'syz.3.17673': attribute type 39 has an invalid length. [ 2314.625565][T22243] netlink: 'syz.0.17672': attribute type 10 has an invalid length. [ 2314.897287][T22252] netlink: 'syz.1.17685': attribute type 39 has an invalid length. [ 2315.292571][T22258] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17677'. [ 2316.307786][T22281] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.17686'. [ 2316.337165][T22290] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17688'. [ 2316.956902][T22293] netlink: 'syz.3.17689': attribute type 39 has an invalid length. [ 2317.522940][T22315] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17693'. [ 2318.098524][T22325] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.17697'. [ 2318.461347][T22338] netlink: 'syz.4.17700': attribute type 11 has an invalid length. [ 2318.747344][T22349] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.17702'. [ 2318.817359][T22348] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17704'. [ 2319.068203][T22357] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.17707'. [ 2319.280304][T22363] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.17708'. [ 2319.390401][T22366] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.17709'. [ 2320.608376][T22402] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17719'. [ 2321.303086][T22437] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 2321.320810][T22437] syzkaller0: owner set to 0 [ 2321.394784][T22437] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 2321.418236][T22437] syzkaller0: group set to 9 [ 2321.968655][T22454] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.17737'. [ 2322.412830][T22475] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.17743'. [ 2323.708689][T22501] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.17750'. [ 2324.400550][T22531] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2324.644313][T22535] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.17760'. [ 2324.881142][T22531] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.17759'. [ 2325.551316][T22569] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17770'. [ 2326.258666][T22588] netlink: 'syz.2.17775': attribute type 3 has an invalid length. [ 2326.291085][T22588] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17775'. [ 2326.611380][T22596] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2326.661000][T22592] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.17776'. [ 2327.075853][T22598] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.17778'. [ 2327.678434][T22620] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.17783'. [ 2327.897427][T22620] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2327.979720][T22620] CPU: 0 PID: 22620 Comm: syz.0.17783 Not tainted syzkaller #0 [ 2327.987346][T22620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2327.997573][T22620] Call Trace: [ 2328.000924][T22620] [ 2328.003882][T22620] dump_stack_lvl+0x188/0x250 [ 2328.008637][T22620] ? show_regs_print_info+0x20/0x20 [ 2328.013870][T22620] ? load_image+0x400/0x400 [ 2328.018416][T22620] sysfs_warn_dup+0x8a/0xa0 [ 2328.022929][T22620] sysfs_do_create_link_sd+0xc0/0x110 [ 2328.028333][T22620] device_add+0x7ed/0xfb0 [ 2328.032688][T22620] wiphy_register+0x1e81/0x2c30 [ 2328.037681][T22620] ? cfg80211_event_work+0x40/0x40 [ 2328.042840][T22620] ? minstrel_ht_alloc+0x808/0x980 [ 2328.047991][T22620] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2328.054184][T22620] ieee80211_register_hw+0x2aa1/0x3af0 [ 2328.059687][T22620] ? ieee80211_tasklet_handler+0x20/0x20 [ 2328.065358][T22620] ? rcu_is_watching+0x11/0xa0 [ 2328.070421][T22620] ? memset+0x1e/0x40 [ 2328.074438][T22620] ? hrtimer_init+0x10c/0x220 [ 2328.079145][T22620] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2328.085018][T22620] hwsim_new_radio_nl+0xa6f/0xc40 [ 2328.090079][T22620] genl_rcv_msg+0xcea/0xf90 [ 2328.094606][T22620] ? genl_bind+0x380/0x380 [ 2328.099046][T22620] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 2328.104252][T22620] ? verify_lock_unused+0x140/0x140 [ 2328.109471][T22620] ? kmalloc_large_node+0xf2/0x190 [ 2328.114587][T22620] ? dev_queue_xmit+0x20/0x20 [ 2328.119267][T22620] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2328.125802][T22620] netlink_rcv_skb+0x1f5/0x440 [ 2328.130589][T22620] ? genl_bind+0x380/0x380 [ 2328.135107][T22620] ? netlink_ack+0xb50/0xb50 [ 2328.139724][T22620] ? __lock_acquire+0x7d10/0x7d10 [ 2328.144762][T22620] ? down_read+0x1aa/0x2e0 [ 2328.149272][T22620] genl_rcv+0x24/0x40 [ 2328.153259][T22620] netlink_unicast+0x774/0x920 [ 2328.158043][T22620] netlink_sendmsg+0x8ba/0xbe0 [ 2328.162828][T22620] ? netlink_getsockopt+0x570/0x570 [ 2328.168828][T22620] ? aa_sock_msg_perm+0x94/0x150 [ 2328.173780][T22620] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2328.179069][T22620] ? security_socket_sendmsg+0x7c/0xa0 [ 2328.184702][T22620] ? netlink_getsockopt+0x570/0x570 [ 2328.189904][T22620] ____sys_sendmsg+0x5b7/0x8f0 [ 2328.194683][T22620] ? __sys_sendmsg_sock+0x30/0x30 [ 2328.199811][T22620] ? import_iovec+0x6f/0xa0 [ 2328.204332][T22620] ___sys_sendmsg+0x236/0x2e0 [ 2328.209028][T22620] ? __sys_sendmsg+0x2a0/0x2a0 [ 2328.213851][T22620] __se_sys_sendmsg+0x1af/0x290 [ 2328.218714][T22620] ? __x64_sys_sendmsg+0x80/0x80 [ 2328.223656][T22620] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2328.229751][T22620] ? lockdep_hardirqs_on+0x94/0x140 [ 2328.234964][T22620] do_syscall_64+0x4c/0xa0 [ 2328.239390][T22620] ? clear_bhb_loop+0x30/0x80 [ 2328.244097][T22620] ? clear_bhb_loop+0x30/0x80 [ 2328.248865][T22620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2328.254765][T22620] RIP: 0033:0x7fb387614819 [ 2328.259191][T22620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2328.279165][T22620] RSP: 002b:00007fb38584d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2328.287588][T22620] RAX: ffffffffffffffda RBX: 00007fb38788e090 RCX: 00007fb387614819 [ 2328.295569][T22620] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2328.303546][T22620] RBP: 00007fb3876aac91 R08: 0000000000000000 R09: 0000000000000000 [ 2328.311640][T22620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2328.319617][T22620] R13: 00007fb38788e128 R14: 00007fb38788e090 R15: 00007ffc20886568 [ 2328.327703][T22620] [ 2329.738302][T22646] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.17788'. [ 2330.520972][T22651] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.17792'. [ 2330.591895][T22661] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17794'. [ 2331.227328][T22677] netlink: 'syz.1.17800': attribute type 2 has an invalid length. [ 2331.269370][T22677] netlink: 'syz.1.17800': attribute type 8 has an invalid length. [ 2331.357674][T22677] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17800'. [ 2331.642765][T22688] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.17802'. [ 2331.736055][T22692] netlink: 'syz.0.17803': attribute type 29 has an invalid length. [ 2332.469994][T22685] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 2332.480402][T22685] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 2332.490381][T22692] netlink: 'syz.0.17803': attribute type 29 has an invalid length. [ 2332.513636][T22685] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2332.999426][T22716] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.17807'. [ 2334.192070][T22746] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2334.617732][T22757] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.17816'. [ 2334.658327][T22752] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.17818'. [ 2335.211592][T22771] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.17822'. [ 2335.224700][T22766] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.17820'. [ 2336.722371][T22806] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.17830'. [ 2336.774531][T22806] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2336.784848][T22806] CPU: 1 PID: 22806 Comm: syz.1.17830 Not tainted syzkaller #0 [ 2336.792448][T22806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2336.802540][T22806] Call Trace: [ 2336.805944][T22806] [ 2336.808984][T22806] dump_stack_lvl+0x188/0x250 [ 2336.813685][T22806] ? show_regs_print_info+0x20/0x20 [ 2336.818930][T22806] ? load_image+0x400/0x400 [ 2336.823483][T22806] sysfs_warn_dup+0x8a/0xa0 [ 2336.827994][T22806] sysfs_do_create_link_sd+0xc0/0x110 [ 2336.833378][T22806] device_add+0x7ed/0xfb0 [ 2336.837727][T22806] wiphy_register+0x1e81/0x2c30 [ 2336.842689][T22806] ? cfg80211_event_work+0x40/0x40 [ 2336.847818][T22806] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2336.853908][T22806] ieee80211_register_hw+0x2aa1/0x3af0 [ 2336.859398][T22806] ? ieee80211_tasklet_handler+0x20/0x20 [ 2336.865051][T22806] ? hrtimer_init+0x90/0x220 [ 2336.869697][T22806] ? hrtimer_init+0x9a/0x220 [ 2336.874391][T22806] ? hrtimer_init+0x10c/0x220 [ 2336.879084][T22806] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2336.884849][T22806] hwsim_new_radio_nl+0xa6f/0xc40 [ 2336.889906][T22806] genl_rcv_msg+0xcea/0xf90 [ 2336.894438][T22806] ? genl_bind+0x380/0x380 [ 2336.898876][T22806] ? mark_lock+0x94/0x320 [ 2336.903217][T22806] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2336.909205][T22806] ? lock_chain_count+0x20/0x20 [ 2336.914065][T22806] ? rcu_is_watching+0x11/0xa0 [ 2336.918837][T22806] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2336.925003][T22806] ? lockdep_hardirqs_on+0x94/0x140 [ 2336.930324][T22806] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2336.936839][T22806] ? netlink_rcv_skb+0x192/0x440 [ 2336.941877][T22806] netlink_rcv_skb+0x1f5/0x440 [ 2336.946651][T22806] ? genl_bind+0x380/0x380 [ 2336.951091][T22806] ? netlink_ack+0xb50/0xb50 [ 2336.955689][T22806] ? __lock_acquire+0x7d10/0x7d10 [ 2336.960733][T22806] ? down_read+0x1aa/0x2e0 [ 2336.965173][T22806] genl_rcv+0x24/0x40 [ 2336.969160][T22806] netlink_unicast+0x774/0x920 [ 2336.973945][T22806] netlink_sendmsg+0x8ba/0xbe0 [ 2336.978811][T22806] ? netlink_getsockopt+0x570/0x570 [ 2336.984107][T22806] ? aa_sock_msg_perm+0x94/0x150 [ 2336.989052][T22806] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2336.994347][T22806] ? security_socket_sendmsg+0x7c/0xa0 [ 2336.999816][T22806] ? netlink_getsockopt+0x570/0x570 [ 2337.005031][T22806] ____sys_sendmsg+0x5b7/0x8f0 [ 2337.009821][T22806] ? __sys_sendmsg_sock+0x30/0x30 [ 2337.014861][T22806] ? import_iovec+0x6f/0xa0 [ 2337.019477][T22806] ___sys_sendmsg+0x236/0x2e0 [ 2337.024271][T22806] ? __sys_sendmsg+0x2a0/0x2a0 [ 2337.029144][T22806] ? ktime_get_real_ts64+0x440/0x440 [ 2337.034601][T22806] __se_sys_sendmsg+0x1af/0x290 [ 2337.039494][T22806] ? __x64_sys_sendmsg+0x80/0x80 [ 2337.044509][T22806] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2337.050441][T22806] do_syscall_64+0x4c/0xa0 [ 2337.054869][T22806] ? clear_bhb_loop+0x30/0x80 [ 2337.059552][T22806] ? clear_bhb_loop+0x30/0x80 [ 2337.064238][T22806] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2337.070136][T22806] RIP: 0033:0x7fa09f5ea819 [ 2337.074565][T22806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2337.094180][T22806] RSP: 002b:00007fa09d844028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2337.102601][T22806] RAX: ffffffffffffffda RBX: 00007fa09f863fa0 RCX: 00007fa09f5ea819 [ 2337.110580][T22806] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2337.118561][T22806] RBP: 00007fa09f680c91 R08: 0000000000000000 R09: 0000000000000000 [ 2337.126546][T22806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2337.134524][T22806] R13: 00007fa09f864038 R14: 00007fa09f863fa0 R15: 00007ffc6944bdd8 [ 2337.142609][T22806] [ 2337.846825][T22834] netlink: 'syz.3.17838': attribute type 2 has an invalid length. [ 2337.892066][T22817] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.17834'. [ 2337.893674][T22834] netlink: 'syz.3.17838': attribute type 8 has an invalid length. [ 2337.949145][T22834] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17838'. [ 2337.978973][T22836] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.17839'. [ 2338.096256][T22840] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.17840'. [ 2338.688575][T22855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2339.662798][T22882] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.17853'. [ 2339.844181][T22873] delete_channel: no stack [ 2339.845544][T22886] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.17854'. [ 2340.076753][T22891] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.17855'. [ 2341.440816][T22917] netlink: 'syz.3.17862': attribute type 4 has an invalid length. [ 2341.472939][T22923] sctp: [Deprecated]: syz.4.17864 (pid 22923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2341.472939][T22923] Use struct sctp_sack_info instead [ 2341.525952][T22917] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17862'. [ 2341.616962][T22928] delete_channel: no stack [ 2342.042413][T22943] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.17870'. [ 2342.149392][T22936] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.17868'. [ 2342.212847][T22940] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.17869'. [ 2343.352198][T22974] netlink: 'syz.3.17877': attribute type 29 has an invalid length. [ 2343.484730][T22974] netlink: 'syz.3.17877': attribute type 29 has an invalid length. [ 2343.746362][T22977] delete_channel: no stack [ 2344.120202][T22994] netlink: 'syz.0.17880': attribute type 10 has an invalid length. [ 2344.464581][T22999] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.17884'. [ 2344.824088][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.830867][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.975431][T23012] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.17887'. [ 2345.826808][T23032] netlink: 'syz.2.17891': attribute type 2 has an invalid length. [ 2345.907056][T23032] netlink: 'syz.2.17891': attribute type 8 has an invalid length. [ 2346.088697][T23032] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17891'. [ 2346.192526][T23029] delete_channel: no stack [ 2346.396144][T23042] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17895'. [ 2348.047737][T23074] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.17905'. [ 2348.090870][T23069] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.17903'. [ 2348.846747][T23083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2348.995584][T23077] delete_channel: no stack [ 2349.155251][T23096] netlink: 'syz.4.17908': attribute type 29 has an invalid length. [ 2349.319251][T23096] netlink: 'syz.4.17908': attribute type 29 has an invalid length. [ 2350.237786][T23110] sctp: [Deprecated]: syz.3.17914 (pid 23110) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2350.237786][T23110] Use struct sctp_sack_info instead [ 2351.419374][T23129] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.17919'. [ 2351.440316][T23124] delete_channel: no stack [ 2351.720398][T23140] netlink: 'syz.2.17920': attribute type 40 has an invalid length. [ 2351.962120][T23142] netlink: 'syz.4.17922': attribute type 4 has an invalid length. [ 2352.005361][T23142] netlink: 152 bytes leftover after parsing attributes in process `syz.4.17922'. [ 2352.249667][T23149] netlink: 'syz.2.17923': attribute type 29 has an invalid length. [ 2352.521998][T23149] netlink: 'syz.2.17923': attribute type 29 has an invalid length. [ 2352.608288][T23147] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17924'. [ 2353.927054][T23190] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.17934'. [ 2354.037809][T23190] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2354.153521][T23190] CPU: 0 PID: 23190 Comm: syz.4.17934 Not tainted syzkaller #0 [ 2354.161263][T23190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2354.171421][T23190] Call Trace: [ 2354.174743][T23190] [ 2354.177703][T23190] dump_stack_lvl+0x188/0x250 [ 2354.182606][T23190] ? show_regs_print_info+0x20/0x20 [ 2354.187840][T23190] ? load_image+0x400/0x400 [ 2354.192502][T23190] sysfs_warn_dup+0x8a/0xa0 [ 2354.197039][T23190] sysfs_do_create_link_sd+0xc0/0x110 [ 2354.202443][T23190] device_add+0x7ed/0xfb0 [ 2354.206983][T23190] wiphy_register+0x1e81/0x2c30 [ 2354.212051][T23190] ? cfg80211_event_work+0x40/0x40 [ 2354.217199][T23190] ? minstrel_ht_alloc+0x808/0x980 [ 2354.222366][T23190] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2354.228474][T23190] ieee80211_register_hw+0x2aa1/0x3af0 [ 2354.234006][T23190] ? ieee80211_tasklet_handler+0x20/0x20 [ 2354.239796][T23190] ? rcu_is_watching+0x11/0xa0 [ 2354.244604][T23190] ? memset+0x1e/0x40 [ 2354.248621][T23190] ? hrtimer_init+0x10c/0x220 [ 2354.253343][T23190] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2354.259134][T23190] hwsim_new_radio_nl+0xa6f/0xc40 [ 2354.264228][T23190] genl_rcv_msg+0xcea/0xf90 [ 2354.268797][T23190] ? genl_bind+0x380/0x380 [ 2354.273362][T23190] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2354.278948][T23190] ? verify_lock_unused+0x140/0x140 [ 2354.284187][T23190] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2354.289773][T23190] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2354.296405][T23190] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2354.303035][T23190] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2354.309597][T23190] netlink_rcv_skb+0x1f5/0x440 [ 2354.314406][T23190] ? genl_bind+0x380/0x380 [ 2354.318857][T23190] ? netlink_ack+0xb50/0xb50 [ 2354.323483][T23190] ? __lock_acquire+0x7d10/0x7d10 [ 2354.328549][T23190] ? down_read+0x1aa/0x2e0 [ 2354.333000][T23190] genl_rcv+0x24/0x40 [ 2354.337018][T23190] netlink_unicast+0x774/0x920 [ 2354.341907][T23190] netlink_sendmsg+0x8ba/0xbe0 [ 2354.346732][T23190] ? netlink_getsockopt+0x570/0x570 [ 2354.351972][T23190] ? aa_sock_msg_perm+0x94/0x150 [ 2354.356946][T23190] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2354.362266][T23190] ? security_socket_sendmsg+0x7c/0xa0 [ 2354.367767][T23190] ? netlink_getsockopt+0x570/0x570 [ 2354.372990][T23190] ____sys_sendmsg+0x5b7/0x8f0 [ 2354.377804][T23190] ? __sys_sendmsg_sock+0x30/0x30 [ 2354.382963][T23190] ? import_iovec+0x6f/0xa0 [ 2354.387511][T23190] ___sys_sendmsg+0x236/0x2e0 [ 2354.392243][T23190] ? __sys_sendmsg+0x2a0/0x2a0 [ 2354.397110][T23190] __se_sys_sendmsg+0x1af/0x290 [ 2354.402143][T23190] ? __x64_sys_sendmsg+0x80/0x80 [ 2354.407131][T23190] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2354.413180][T23190] ? lockdep_hardirqs_on+0x94/0x140 [ 2354.418536][T23190] do_syscall_64+0x4c/0xa0 [ 2354.423089][T23190] ? clear_bhb_loop+0x30/0x80 [ 2354.427866][T23190] ? clear_bhb_loop+0x30/0x80 [ 2354.432583][T23190] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2354.438526][T23190] RIP: 0033:0x7fad621a9819 [ 2354.442958][T23190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2354.462576][T23190] RSP: 002b:00007fad603c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2354.471013][T23190] RAX: ffffffffffffffda RBX: 00007fad62423180 RCX: 00007fad621a9819 [ 2354.478997][T23190] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2354.487068][T23190] RBP: 00007fad6223fc91 R08: 0000000000000000 R09: 0000000000000000 [ 2354.495046][T23190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2354.503028][T23190] R13: 00007fad62423218 R14: 00007fad62423180 R15: 00007ffed3f02b48 [ 2354.511151][T23190] [ 2354.671035][T23186] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.17933'. [ 2354.970833][T23200] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.17937'. [ 2355.546352][T23214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2356.527920][T23245] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.17949'. [ 2356.558925][T23239] sctp: [Deprecated]: syz.2.17948 (pid 23239) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2356.558925][T23239] Use struct sctp_sack_info instead [ 2356.607386][T23245] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2356.650764][T23245] CPU: 0 PID: 23245 Comm: syz.4.17949 Not tainted syzkaller #0 [ 2356.658390][T23245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2356.668588][T23245] Call Trace: [ 2356.671888][T23245] [ 2356.674835][T23245] dump_stack_lvl+0x188/0x250 [ 2356.679621][T23245] ? show_regs_print_info+0x20/0x20 [ 2356.684829][T23245] ? load_image+0x400/0x400 [ 2356.689475][T23245] sysfs_warn_dup+0x8a/0xa0 [ 2356.693991][T23245] sysfs_do_create_link_sd+0xc0/0x110 [ 2356.699370][T23245] device_add+0x7ed/0xfb0 [ 2356.703723][T23245] wiphy_register+0x1e81/0x2c30 [ 2356.708614][T23245] ? cfg80211_event_work+0x40/0x40 [ 2356.713734][T23245] ? minstrel_ht_alloc+0x808/0x980 [ 2356.718856][T23245] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2356.724932][T23245] ieee80211_register_hw+0x2aa1/0x3af0 [ 2356.730421][T23245] ? ieee80211_tasklet_handler+0x20/0x20 [ 2356.736159][T23245] ? rcu_is_watching+0x11/0xa0 [ 2356.740938][T23245] ? memset+0x1e/0x40 [ 2356.744927][T23245] ? hrtimer_init+0x10c/0x220 [ 2356.749649][T23245] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2356.755394][T23245] hwsim_new_radio_nl+0xa6f/0xc40 [ 2356.760440][T23245] genl_rcv_msg+0xcea/0xf90 [ 2356.764967][T23245] ? genl_bind+0x380/0x380 [ 2356.769414][T23245] ? vmacache_find+0x238/0x590 [ 2356.774212][T23245] ? verify_lock_unused+0x140/0x140 [ 2356.779443][T23245] ? verify_lock_unused+0x140/0x140 [ 2356.784656][T23245] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2356.790656][T23245] ? lock_chain_count+0x20/0x20 [ 2356.795524][T23245] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2356.802060][T23245] netlink_rcv_skb+0x1f5/0x440 [ 2356.806836][T23245] ? genl_bind+0x380/0x380 [ 2356.811259][T23245] ? netlink_ack+0xb50/0xb50 [ 2356.815860][T23245] ? __lock_acquire+0x7d10/0x7d10 [ 2356.820986][T23245] ? down_read+0x1aa/0x2e0 [ 2356.825413][T23245] genl_rcv+0x24/0x40 [ 2356.829609][T23245] netlink_unicast+0x774/0x920 [ 2356.834611][T23245] netlink_sendmsg+0x8ba/0xbe0 [ 2356.839493][T23245] ? netlink_getsockopt+0x570/0x570 [ 2356.844706][T23245] ? aa_sock_msg_perm+0x94/0x150 [ 2356.849776][T23245] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2356.855260][T23245] ? security_socket_sendmsg+0x7c/0xa0 [ 2356.860821][T23245] ? netlink_getsockopt+0x570/0x570 [ 2356.866024][T23245] ____sys_sendmsg+0x5b7/0x8f0 [ 2356.870897][T23245] ? __sys_sendmsg_sock+0x30/0x30 [ 2356.875946][T23245] ? import_iovec+0x6f/0xa0 [ 2356.880458][T23245] ___sys_sendmsg+0x236/0x2e0 [ 2356.885164][T23245] ? __sys_sendmsg+0x2a0/0x2a0 [ 2356.890059][T23245] ? percpu_counter_add_batch+0x13b/0x160 [ 2356.895809][T23245] __se_sys_sendmsg+0x1af/0x290 [ 2356.900672][T23245] ? __x64_sys_sendmsg+0x80/0x80 [ 2356.905617][T23245] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2356.911625][T23245] ? lockdep_hardirqs_on+0x94/0x140 [ 2356.916835][T23245] do_syscall_64+0x4c/0xa0 [ 2356.921257][T23245] ? clear_bhb_loop+0x30/0x80 [ 2356.925951][T23245] ? clear_bhb_loop+0x30/0x80 [ 2356.930642][T23245] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2356.936539][T23245] RIP: 0033:0x7fad621a9819 [ 2356.940962][T23245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2356.960575][T23245] RSP: 002b:00007fad603e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2356.969004][T23245] RAX: ffffffffffffffda RBX: 00007fad62423090 RCX: 00007fad621a9819 [ 2356.977068][T23245] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 2356.985139][T23245] RBP: 00007fad6223fc91 R08: 0000000000000000 R09: 0000000000000000 [ 2356.993113][T23245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2357.001091][T23245] R13: 00007fad62423128 R14: 00007fad62423090 R15: 00007ffed3f02b48 [ 2357.009083][T23245] [ 2357.174407][T23253] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.17950'. [ 2357.249553][T23253] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2357.266931][T23253] CPU: 1 PID: 23253 Comm: syz.3.17950 Not tainted syzkaller #0 [ 2357.274540][T23253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2357.284627][T23253] Call Trace: [ 2357.287938][T23253] [ 2357.290902][T23253] dump_stack_lvl+0x188/0x250 [ 2357.295705][T23253] ? show_regs_print_info+0x20/0x20 [ 2357.301034][T23253] ? load_image+0x400/0x400 [ 2357.305587][T23253] sysfs_warn_dup+0x8a/0xa0 [ 2357.310220][T23253] sysfs_do_create_link_sd+0xc0/0x110 [ 2357.315621][T23253] device_add+0x7ed/0xfb0 [ 2357.320000][T23253] wiphy_register+0x1e81/0x2c30 [ 2357.324911][T23253] ? cfg80211_event_work+0x40/0x40 [ 2357.330066][T23253] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2357.336373][T23253] ieee80211_register_hw+0x2aa1/0x3af0 [ 2357.341905][T23253] ? ieee80211_tasklet_handler+0x20/0x20 [ 2357.347578][T23253] ? rcu_is_watching+0x11/0xa0 [ 2357.352374][T23253] ? memset+0x1e/0x40 [ 2357.356384][T23253] ? hrtimer_init+0x10c/0x220 [ 2357.361098][T23253] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2357.366884][T23253] hwsim_new_radio_nl+0xa6f/0xc40 [ 2357.371966][T23253] genl_rcv_msg+0xcea/0xf90 [ 2357.376525][T23253] ? genl_bind+0x380/0x380 [ 2357.380983][T23253] ? mark_lock+0x94/0x320 [ 2357.385379][T23253] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2357.391399][T23253] ? lock_chain_count+0x20/0x20 [ 2357.396294][T23253] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2357.402482][T23253] ? lockdep_hardirqs_on+0x94/0x140 [ 2357.407717][T23253] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2357.414358][T23253] ? netlink_rcv_skb+0x81/0x440 [ 2357.419266][T23253] netlink_rcv_skb+0x1f5/0x440 [ 2357.424059][T23253] ? genl_bind+0x380/0x380 [ 2357.428510][T23253] ? netlink_ack+0xb50/0xb50 [ 2357.433138][T23253] ? __lock_acquire+0x7d10/0x7d10 [ 2357.438240][T23253] ? down_read+0x1aa/0x2e0 [ 2357.442688][T23253] genl_rcv+0x24/0x40 [ 2357.446697][T23253] netlink_unicast+0x774/0x920 [ 2357.451510][T23253] netlink_sendmsg+0x8ba/0xbe0 [ 2357.456333][T23253] ? netlink_getsockopt+0x570/0x570 [ 2357.461563][T23253] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 2357.467054][T23253] ? aa_sock_msg_perm+0x94/0x150 [ 2357.472038][T23253] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2357.477368][T23253] ? security_socket_sendmsg+0x7c/0xa0 [ 2357.482961][T23253] ? netlink_getsockopt+0x570/0x570 [ 2357.488169][T23253] ____sys_sendmsg+0x5b7/0x8f0 [ 2357.492968][T23253] ? __sys_sendmsg_sock+0x30/0x30 [ 2357.498046][T23253] ? import_iovec+0x6f/0xa0 [ 2357.502675][T23253] ___sys_sendmsg+0x236/0x2e0 [ 2357.507379][T23253] ? __sys_sendmsg+0x2a0/0x2a0 [ 2357.512171][T23253] ? ktime_get_real_ts64+0x440/0x440 [ 2357.517488][T23253] __se_sys_sendmsg+0x1af/0x290 [ 2357.522392][T23253] ? __x64_sys_sendmsg+0x80/0x80 [ 2357.527385][T23253] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2357.533316][T23253] do_syscall_64+0x4c/0xa0 [ 2357.537750][T23253] ? clear_bhb_loop+0x30/0x80 [ 2357.542458][T23253] ? clear_bhb_loop+0x30/0x80 [ 2357.547151][T23253] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2357.553056][T23253] RIP: 0033:0x7f3333482819 [ 2357.557486][T23253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2357.577290][T23253] RSP: 002b:00007f33316dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2357.585714][T23253] RAX: ffffffffffffffda RBX: 00007f33336fbfa0 RCX: 00007f3333482819 [ 2357.593697][T23253] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2357.601900][T23253] RBP: 00007f3333518c91 R08: 0000000000000000 R09: 0000000000000000 [ 2357.609900][T23253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2357.617998][T23253] R13: 00007f33336fc038 R14: 00007f33336fbfa0 R15: 00007ffc6f391dc8 [ 2357.626010][T23253] [ 2358.173755][T23259] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.17951'. [ 2358.350463][T23282] netlink: 'syz.1.17954': attribute type 4 has an invalid length. [ 2358.399592][T23282] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17954'. [ 2359.018568][T23285] netlink: 92964 bytes leftover after parsing attributes in process `syz.0.17959'. [ 2359.554899][T23306] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.17964'. [ 2359.839472][T23310] sctp: [Deprecated]: syz.0.17965 (pid 23310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2359.839472][T23310] Use struct sctp_sack_info instead [ 2360.332690][T23306] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.17964'. [ 2361.067525][T23329] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.17970'. [ 2361.452343][T23334] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.17971'. [ 2361.873398][T23349] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.17976'. [ 2362.073990][T23353] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.17977'. [ 2362.105145][T23343] netlink: 'syz.0.17974': attribute type 4 has an invalid length. [ 2362.135567][T23343] netlink: 152 bytes leftover after parsing attributes in process `syz.0.17974'. [ 2362.155484][T23353] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.17977'. [ 2362.231668][T23353] netlink: 'syz.1.17977': attribute type 1 has an invalid length. [ 2362.270996][T23353] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.17977'. [ 2362.663158][T23368] sctp: [Deprecated]: syz.1.17980 (pid 23368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2362.663158][T23368] Use struct sctp_sack_info instead [ 2362.735266][T23362] netlink: 'syz.0.17979': attribute type 16 has an invalid length. [ 2365.087942][T23399] __nla_validate_parse: 2 callbacks suppressed [ 2365.087964][T23399] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.17987'. [ 2365.442472][T23405] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.17991'. [ 2365.847813][T23406] netlink: 'syz.2.17989': attribute type 4 has an invalid length. [ 2365.978729][T23406] netlink: 152 bytes leftover after parsing attributes in process `syz.2.17989'. [ 2366.301727][T23417] sctp: [Deprecated]: syz.3.17993 (pid 23417) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2366.301727][T23417] Use struct sctp_sack_info instead [ 2366.856473][T23429] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.17997'. [ 2367.429038][T23432] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.17998'. [ 2367.518817][T23432] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.17998'. [ 2367.659499][T23432] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.17998'. [ 2368.408073][T23457] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18003'. [ 2369.442462][T23472] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.18006'. [ 2369.505370][T23472] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.18006'. [ 2369.574894][T23471] sctp: [Deprecated]: syz.1.18007 (pid 23471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2369.574894][T23471] Use struct sctp_sack_info instead [ 2369.627570][T23472] netlink: 'syz.0.18006': attribute type 1 has an invalid length. [ 2370.596480][T23490] netlink: 'syz.1.18013': attribute type 4 has an invalid length. [ 2370.645699][T23490] __nla_validate_parse: 3 callbacks suppressed [ 2370.645720][T23490] netlink: 152 bytes leftover after parsing attributes in process `syz.1.18013'. [ 2370.820227][T23494] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.18024'. [ 2371.822115][T23508] netlink: 'syz.2.18015': attribute type 16 has an invalid length. [ 2371.959368][T23508] netlink: 152 bytes leftover after parsing attributes in process `syz.2.18015'. [ 2372.557478][T23523] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.18019'. [ 2372.756969][T23521] netlink: 164 bytes leftover after parsing attributes in process `syz.4.18020'. [ 2372.870292][T23529] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18023'. [ 2372.947152][T23531] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.18025'. [ 2373.706756][T23531] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.18025'. [ 2373.772083][T23545] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.18028'. [ 2374.127181][T23549] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.18029'. [ 2374.294779][T23560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2375.500572][T23593] netlink: 'syz.4.18040': attribute type 1 has an invalid length. [ 2375.917717][T23598] __nla_validate_parse: 5 callbacks suppressed [ 2375.917739][T23598] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.18044'. [ 2376.219671][T23607] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18046'. [ 2376.248767][T23605] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.18045'. [ 2377.190703][T23621] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.18051'. [ 2377.430214][T23636] netlink: 'syz.1.18050': attribute type 39 has an invalid length. [ 2377.952062][T23641] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18055'. [ 2378.076833][T23650] netlink: 16374 bytes leftover after parsing attributes in process `syz.1.18058'. [ 2378.302754][T23658] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.18060'. [ 2378.424467][T23658] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.18060'. [ 2378.544071][T23660] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18061'. [ 2378.662273][T23665] netlink: 'syz.2.18060': attribute type 1 has an invalid length. [ 2378.734558][T23665] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.18060'. [ 2381.738899][T23730] __nla_validate_parse: 4 callbacks suppressed [ 2381.738919][T23730] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18076'. [ 2381.995162][T23731] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18078'. [ 2383.141923][T23733] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.18077'. [ 2383.171906][T23746] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18081'. [ 2383.243664][T23744] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.18077'. [ 2383.923104][T23764] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18085'. [ 2384.426035][T23772] netlink: 164 bytes leftover after parsing attributes in process `syz.1.18086'. [ 2384.721874][T23783] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18090'. [ 2385.048149][T23791] netlink: 'syz.0.18092': attribute type 39 has an invalid length. [ 2385.472628][T23802] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18095'. [ 2385.619789][T23807] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.18097'. [ 2386.651599][T23822] netlink: 'syz.0.18101': attribute type 10 has an invalid length. [ 2387.027178][T23841] __nla_validate_parse: 2 callbacks suppressed [ 2387.027216][T23841] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18107'. [ 2387.315356][T23850] netlink: 'syz.3.18108': attribute type 12 has an invalid length. [ 2387.325187][T23849] netlink: 'syz.1.18106': attribute type 39 has an invalid length. [ 2387.379770][T23850] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.18108'. [ 2388.015311][T23863] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18112'. [ 2388.037344][T23862] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18111'. [ 2388.141956][T23860] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.18110'. [ 2388.920110][T23876] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18114'. [ 2390.120923][T23903] netlink: 'syz.4.18120': attribute type 39 has an invalid length. [ 2390.385100][T23905] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18122'. [ 2390.750457][T23921] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18126'. [ 2391.292193][T23929] netlink: 'syz.2.18129': attribute type 2 has an invalid length. [ 2391.447315][T23929] netlink: 'syz.2.18129': attribute type 8 has an invalid length. [ 2391.594177][T23929] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18129'. [ 2391.838432][T23932] netlink: 'syz.2.18129': attribute type 2 has an invalid length. [ 2391.893976][T23932] netlink: 'syz.2.18129': attribute type 8 has an invalid length. [ 2392.049899][T23932] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18129'. [ 2393.109630][T23955] netlink: 'syz.0.18135': attribute type 39 has an invalid length. [ 2394.195044][T23973] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18140'. [ 2394.270260][T23986] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18142'. [ 2395.600055][T24016] netlink: 'syz.4.18151': attribute type 39 has an invalid length. [ 2396.222295][T24026] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.18154'. [ 2396.236217][T24030] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18155'. [ 2396.739772][T24039] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18157'. [ 2397.750979][T24061] netlink: 'syz.1.18162': attribute type 39 has an invalid length. [ 2398.465784][T24087] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18171'. [ 2398.559672][T24083] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18169'. [ 2398.764485][T24088] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.18168'. [ 2398.833041][T24094] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.18172'. [ 2399.277505][T24106] netlink: 'syz.3.18174': attribute type 2 has an invalid length. [ 2399.380590][T24106] netlink: 'syz.3.18174': attribute type 8 has an invalid length. [ 2399.402293][T24106] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18174'. [ 2399.711745][T24104] netlink: 'syz.3.18174': attribute type 2 has an invalid length. [ 2399.767030][T24104] netlink: 'syz.3.18174': attribute type 8 has an invalid length. [ 2399.833798][T24104] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18174'. [ 2400.185179][T24118] netlink: 'syz.2.18178': attribute type 39 has an invalid length. [ 2401.018466][T24135] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.18185'. [ 2401.097734][T24136] netlink: 171236 bytes leftover after parsing attributes in process `syz.3.18185'. [ 2401.308083][T24152] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18187'. [ 2401.802908][T24149] netlink: 'syz.0.18186': attribute type 3 has an invalid length. [ 2401.825263][T24149] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.18186'. [ 2402.773988][T24172] netlink: 'syz.4.18192': attribute type 39 has an invalid length. [ 2403.128367][T24181] netlink: 'syz.1.18194': attribute type 2 has an invalid length. [ 2403.244966][T24181] netlink: 'syz.1.18194': attribute type 8 has an invalid length. [ 2403.603833][T24184] netlink: 'syz.1.18194': attribute type 2 has an invalid length. [ 2403.648680][T24184] netlink: 'syz.1.18194': attribute type 8 has an invalid length. [ 2403.731121][T24184] __nla_validate_parse: 3 callbacks suppressed [ 2403.731146][T24184] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18194'. [ 2403.995777][T24204] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18201'. [ 2404.351485][T24205] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.18200'. [ 2405.866851][T24241] netlink: 'syz.4.18208': attribute type 39 has an invalid length. [ 2406.246427][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.252852][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.544533][T24238] netlink: 'syz.1.18205': attribute type 3 has an invalid length. [ 2406.634368][T24238] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.18205'. [ 2408.632322][T24289] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.18220'. [ 2409.231654][T24275] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.18218'. [ 2409.700933][T24303] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18226'. [ 2414.471956][T24350] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.18239'. [ 2416.141296][T24381] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.18245'. [ 2416.591536][T24378] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.18246'. [ 2417.581591][T24405] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.18252'. [ 2418.510188][T24416] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18256'. [ 2419.778579][T24439] netlink: 'syz.4.18261': attribute type 21 has an invalid length. [ 2421.479546][T24472] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18270'. [ 2421.676745][T24487] netlink: 'syz.2.18274': attribute type 7 has an invalid length. [ 2422.249483][T24493] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.18275'. [ 2422.297792][T24494] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.18275'. [ 2422.472129][T24508] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18279'. [ 2423.548965][T24532] netlink: 'syz.3.18286': attribute type 7 has an invalid length. [ 2423.555439][T24529] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18296'. [ 2423.908941][T24545] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18290'. [ 2424.706308][T24559] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.18293'. [ 2424.713237][T24567] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.18297'. [ 2424.882590][T24570] netlink: 'syz.3.18298': attribute type 21 has an invalid length. [ 2425.066833][T24560] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.18293'. [ 2425.704022][T24582] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.18301'. [ 2426.017265][T24593] netlink: 'syz.1.18303': attribute type 39 has an invalid length. [ 2426.545815][T24612] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.18308'. [ 2426.633391][T24615] netlink: 'syz.0.18310': attribute type 21 has an invalid length. [ 2427.805221][T24635] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.18316'. [ 2428.286650][T24643] netlink: 'syz.0.18319': attribute type 39 has an invalid length. [ 2428.938124][T24663] netlink: 'syz.3.18323': attribute type 1 has an invalid length. [ 2428.993705][T24663] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.18323'. [ 2429.353467][T24674] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.18329'. [ 2429.729313][T24682] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.18331'. [ 2430.433158][T24696] netlink: 'syz.3.18334': attribute type 39 has an invalid length. [ 2431.965345][T24718] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18342'. [ 2432.438993][T24737] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18347'. [ 2432.597462][T24730] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.18344'. [ 2433.190162][T24750] netlink: 'syz.0.18349': attribute type 1 has an invalid length. [ 2433.310308][T24750] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.18349'. [ 2433.477488][T24745] netlink: 'syz.3.18348': attribute type 39 has an invalid length. [ 2433.633250][T24736] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.18346'. [ 2434.294273][T24770] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.18354'. [ 2434.587299][T24778] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18358'. [ 2435.794384][T24797] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.18362'. [ 2436.214185][T24806] netlink: 'syz.3.18363': attribute type 39 has an invalid length. [ 2436.592080][T24810] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.18364'. [ 2436.989674][T24822] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.18369'. [ 2437.902109][T24827] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.18370'. [ 2438.336217][T24837] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.18373'. [ 2439.677328][T24858] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18378'. [ 2439.944001][T24864] netlink: 'syz.2.18376': attribute type 39 has an invalid length. [ 2441.367538][T24892] netlink: 'syz.3.18388': attribute type 10 has an invalid length. [ 2441.899396][T24902] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18390'. [ 2443.185808][T24928] netlink: 192444 bytes leftover after parsing attributes in process `syz.1.18395'. [ 2443.216002][T24928] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2445.363321][T24975] netlink: 'syz.4.18409': attribute type 39 has an invalid length. [ 2445.899946][T24968] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18407'. [ 2446.408082][T24993] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.18408'. [ 2446.810786][T25003] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18418'. [ 2447.140994][T25005] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.18416'. [ 2447.935545][T25028] netlink: 'syz.0.18424': attribute type 39 has an invalid length. [ 2448.272678][T25039] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18429'. [ 2449.575514][T25053] netlink: 'syz.3.18432': attribute type 10 has an invalid length. [ 2449.739094][T25053] device ip6_vti0 entered promiscuous mode [ 2449.810680][T25053] team0: Device ip6_vti0 is of different type [ 2450.167678][T25064] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18435'. [ 2450.869387][T25084] netlink: 'syz.0.18438': attribute type 39 has an invalid length. [ 2452.066695][T25116] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18450'. [ 2452.166063][T25113] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.18447'. [ 2452.422055][T25113] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.18447'. [ 2453.083042][T25127] netlink: 'syz.3.18451': attribute type 39 has an invalid length. [ 2453.719196][T25149] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.18456'. [ 2456.715709][T25181] netlink: 'syz.0.18465': attribute type 10 has an invalid length. [ 2457.974653][T25187] netlink: 'syz.2.18467': attribute type 39 has an invalid length. [ 2458.850284][T25220] netlink: 830 bytes leftover after parsing attributes in process `syz.0.18477'. [ 2459.071164][T25230] netlink: 'syz.1.18480': attribute type 10 has an invalid length. [ 2459.334963][T25237] netlink: 'syz.0.18482': attribute type 10 has an invalid length. [ 2459.484488][T25239] netlink: 'syz.1.18483': attribute type 10 has an invalid length. [ 2459.492456][T25239] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18483'. [ 2459.774485][T25243] netlink: 'syz.3.18485': attribute type 39 has an invalid length. [ 2460.848052][T25261] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.18489'. [ 2464.586428][T25335] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.18503'. [ 2465.852067][T25375] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18522'. [ 2466.793798][T25393] netlink: 'syz.1.18525': attribute type 15 has an invalid length. [ 2466.886869][T25393] netlink: 'syz.1.18525': attribute type 7 has an invalid length. [ 2466.997726][T25398] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18527'. [ 2467.556042][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.562460][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.774377][T25412] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18534'. [ 2468.106340][T25418] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.18533'. [ 2468.159228][T25425] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.18533'. [ 2468.440465][T31682] tipc: Subscription rejected, illegal request [ 2468.665190][T25439] netlink: 830 bytes leftover after parsing attributes in process `syz.3.18539'. [ 2468.997406][T25441] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.18540'. [ 2469.489798][T25454] netlink: 'syz.3.18543': attribute type 10 has an invalid length. [ 2469.605783][T25451] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.18538'. [ 2471.331261][T25475] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18549'. [ 2471.797403][T25489] netlink: 'syz.4.18554': attribute type 15 has an invalid length. [ 2471.839247][ T863] tipc: Subscription rejected, illegal request [ 2471.893730][T25489] netlink: 'syz.4.18554': attribute type 7 has an invalid length. [ 2471.944740][T25478] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.18550'. [ 2471.994796][T25479] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.18550'. [ 2472.103783][T25494] IPv6: NLM_F_CREATE should be specified when creating new route [ 2472.112032][T25494] netlink: 1 bytes leftover after parsing attributes in process `syz.0.18555'. [ 2472.212779][T25499] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18558'. [ 2472.500512][T25507] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18559'. [ 2472.622717][T25496] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.18557'. [ 2473.397809][T25524] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18564'. [ 2474.630954][T25549] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.18571'. [ 2474.989900][ T863] tipc: Subscription rejected, illegal request [ 2475.170354][T25557] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.18574'. [ 2476.013377][T25547] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.18570'. [ 2476.164131][T25578] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.18578'. [ 2476.288808][T25581] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.18578'. [ 2476.867212][T25589] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18582'. [ 2479.367350][T25628] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18594'. [ 2480.326360][T25647] netlink: 1 bytes leftover after parsing attributes in process `syz.2.18599'. [ 2480.440408][T25653] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18600'. [ 2480.851520][T25661] ref_ctr_offset mismatch. inode: 0x4b50 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2482.470423][T25689] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.18612'. [ 2483.247584][T25706] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.18615'. [ 2483.466792][T25711] netlink: 1 bytes leftover after parsing attributes in process `syz.3.18616'. [ 2485.795981][T25757] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18631'. [ 2486.523327][T25766] netlink: 'syz.2.18632': attribute type 3 has an invalid length. [ 2486.544908][T25766] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18632'. [ 2486.675628][T25771] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.18635'. [ 2487.795728][T25789] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.18641'. [ 2487.932311][T25798] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.18641'. [ 2488.156804][T25798] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.18641'. [ 2488.755126][T25809] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18645'. [ 2489.329107][T25810] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.18644'. [ 2491.345701][T25873] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.18660'. [ 2491.445585][T25879] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18662'. [ 2492.740847][T25897] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.18667'. [ 2492.985688][T25894] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.18667'. [ 2494.057240][T25930] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.18676'. [ 2494.466885][T25944] netlink: 'syz.3.18679': attribute type 3 has an invalid length. [ 2494.592088][T25939] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18678'. [ 2494.663677][T25944] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18679'. [ 2495.386429][T25958] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.18684'. [ 2495.587203][T25964] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.18684'. [ 2496.721656][T25993] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18693'. [ 2498.311011][T26027] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18702'. [ 2498.639635][T26040] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.18706'. [ 2499.165726][T26059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2499.173034][T26059] IPv6: NLM_F_CREATE should be set when creating new route [ 2499.180466][T26059] IPv6: NLM_F_CREATE should be set when creating new route [ 2499.187750][T26059] IPv6: NLM_F_CREATE should be set when creating new route [ 2499.330312][T26065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2500.497286][T26091] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18722'. [ 2501.538516][T26113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2501.546169][T26113] IPv6: NLM_F_CREATE should be set when creating new route [ 2501.553427][T26113] IPv6: NLM_F_CREATE should be set when creating new route [ 2501.560724][T26113] IPv6: NLM_F_CREATE should be set when creating new route [ 2501.685092][T26119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2501.727151][T26117] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.18730'. [ 2502.967094][T26143] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18738'. [ 2503.127180][T26154] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.18739'. [ 2504.024804][T26176] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.18746'. [ 2504.844538][T26197] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18753'. [ 2506.302117][T26237] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18765'. [ 2506.621053][T26239] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.18776'. [ 2507.060918][T26256] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18771'. [ 2507.631098][T26269] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18774'. [ 2508.260535][T26284] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18780'. [ 2508.897636][T26299] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.18785'. [ 2509.887380][T26313] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.18789'. [ 2510.618927][T26333] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18795'. [ 2511.024593][T26342] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18799'. [ 2511.828757][T26364] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.18804'. [ 2511.882378][T26372] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.18804'. [ 2511.992949][T26369] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.18807'. [ 2512.326162][T26378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18809'. [ 2512.532818][T26386] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18812'. [ 2513.297024][T26399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18815'. [ 2513.345506][T26401] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18816'. [ 2514.485743][T26422] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.18818'. [ 2514.735980][T26422] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.18818'. [ 2514.833573][T26422] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.18818'. [ 2514.851624][T26423] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.18822'. [ 2515.025701][T26423] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.18822'. [ 2516.002318][T26445] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18828'. [ 2517.486866][T26474] netlink: 'syz.1.18838': attribute type 3 has an invalid length. [ 2517.533827][T26474] __nla_validate_parse: 2 callbacks suppressed [ 2517.533848][T26474] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.18838'. [ 2517.840934][T26475] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.18837'. [ 2518.002524][T26475] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.18837'. [ 2518.345200][T26482] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.18836'. [ 2518.752262][T26498] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.18844'. [ 2518.875545][T26501] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.18846'. [ 2519.417940][T26516] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18850'. [ 2519.484451][T26520] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18851'. [ 2520.186797][T26539] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.18858'. [ 2520.435412][T26551] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.18864'. [ 2522.581931][T26595] __nla_validate_parse: 4 callbacks suppressed [ 2522.582297][T26595] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.18877'. [ 2523.868754][T26634] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.18888'. [ 2524.554564][T26643] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.18892'. [ 2525.782931][T26660] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18896'. [ 2527.434095][T26693] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.18905'. [ 2527.645806][T26698] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18907'. [ 2528.192524][T26708] netlink: 'syz.0.18909': attribute type 4 has an invalid length. [ 2528.292231][T26708] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.18909'. [ 2529.105918][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.112459][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 2530.019560][T26759] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18929'. [ 2530.117530][T26755] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.18925'. [ 2530.360400][T26765] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.18925'. [ 2530.934008][T26772] netlink: 52 bytes leftover after parsing attributes in process `syz.1.18931'. [ 2532.111520][T26801] netlink: 'syz.0.18938': attribute type 21 has an invalid length. [ 2532.148023][T26804] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.18942'. [ 2532.192732][T26804] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.18942'. [ 2532.438583][T26814] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18944'. [ 2532.451186][T26810] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.18943'. [ 2533.453844][T26832] __nla_validate_parse: 2 callbacks suppressed [ 2533.453965][T26832] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.18951'. [ 2534.240891][T26851] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.18954'. [ 2534.427145][T26851] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.18954'. [ 2535.182385][T26873] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.18961'. [ 2535.473408][T26876] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18962'. [ 2535.910589][T26888] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.18958'. [ 2536.309227][T26885] netlink: 52 bytes leftover after parsing attributes in process `syz.3.18965'. [ 2536.700496][T26906] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.18971'. [ 2537.617911][T26935] netlink: 52 bytes leftover after parsing attributes in process `syz.0.18980'. [ 2538.954435][T26951] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.18983'. [ 2540.482299][T26994] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.18998'. [ 2540.522968][T26994] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.18998'. [ 2541.059156][T27006] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.19004'. [ 2542.516413][T27034] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.19013'. [ 2542.594495][T27034] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.19013'. [ 2542.922213][T27046] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.19019'. [ 2543.692802][T27074] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.19028'. [ 2544.077415][T27085] netlink: 'syz.1.19030': attribute type 29 has an invalid length. [ 2544.099434][T27087] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.19029'. [ 2544.109362][T27087] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.19029'. [ 2544.531650][T27096] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.19035'. [ 2544.818945][T27104] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.19031'. [ 2545.338002][T27088] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.19031'. [ 2546.202549][T27133] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.19043'. [ 2546.812644][T27142] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.19044'. [ 2546.843708][T27142] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.19044'. [ 2548.075102][T27172] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.19051'. [ 2548.205209][T27167] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.19051'. [ 2549.474844][T27212] __nla_validate_parse: 4 callbacks suppressed [ 2549.474863][T27212] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.19067'. [ 2549.941093][T27227] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.19071'. [ 2550.025719][T27227] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.19071'. [ 2550.365454][T27247] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.19072'. [ 2550.659995][T27235] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.19072'. [ 2550.750809][T27235] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.19072'. [ 2551.446313][T27270] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.19083'. [ 2551.498440][T27270] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.19083'. [ 2552.371149][T27279] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.19087'. [ 2552.555160][T27297] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.19093'. [ 2555.636677][T27374] __nla_validate_parse: 4 callbacks suppressed [ 2555.636699][T27374] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.19116'. [ 2555.773947][T27374] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.19116'. [ 2556.395294][T27384] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.19121'. [ 2556.641888][T27389] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.19122'. [ 2556.870528][T27387] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.19122'. [ 2557.026335][T27406] netlink: 'syz.2.19127': attribute type 1 has an invalid length. [ 2557.139359][T27406] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.19127'. [ 2557.153266][T27400] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.19125'. [ 2557.709884][T27427] netlink: 188 bytes leftover after parsing attributes in process `syz.2.19134'. [ 2557.882312][T27430] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.19133'. [ 2558.007391][T27430] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.19133'. [ 2559.274838][T27446] netlink: del zone limit has 8 unknown bytes [ 2560.094894][T27474] netlink: 'syz.2.19150': attribute type 15 has an invalid length. [ 2561.511169][T27502] __nla_validate_parse: 6 callbacks suppressed [ 2561.511192][T27502] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.19159'. [ 2561.616240][T27501] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.19159'. [ 2562.071495][T27519] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.19162'. [ 2562.816326][T27532] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.19168'. [ 2563.014780][T27532] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.19168'. [ 2563.245248][T27540] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.19171'. [ 2563.567399][T27546] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.19172'. [ 2563.655346][T27546] netlink: del zone limit has 8 unknown bytes [ 2564.482754][T27561] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.19187'. [ 2564.943293][T27578] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.19183'. [ 2565.003879][T27578] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.19183'. [ 2565.336897][T27589] netlink: del zone limit has 8 unknown bytes [ 2566.660594][T27609] __nla_validate_parse: 6 callbacks suppressed [ 2566.660618][T27609] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.19195'. [ 2567.266263][T27626] netlink: 'syz.2.19200': attribute type 9 has an invalid length. [ 2567.343597][T27626] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.19200'. [ 2567.930295][T27647] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.19207'. [ 2567.962691][T27647] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.19207'. [ 2567.988037][T27652] netlink: 184 bytes leftover after parsing attributes in process `syz.0.19219'. [ 2568.314125][T27663] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.19211'. [ 2569.116550][T27669] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.19213'. [ 2569.171505][T27672] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.19213'. [ 2569.353812][T27653] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.19206'. [ 2569.660729][T27650] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.19206'. [ 2572.216109][T27733] __nla_validate_parse: 5 callbacks suppressed [ 2572.216127][T27733] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.19234'. [ 2572.295381][T27733] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.19234'. [ 2572.691745][T27745] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.19238'. [ 2572.716655][T27745] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.19238'. [ 2572.754855][T27726] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.19231'. [ 2572.878556][T27750] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.19231'. [ 2573.289642][T27758] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.19243'. [ 2574.172022][T27770] netlink: 48 bytes leftover after parsing attributes in process `syz.3.19246'. [ 2574.458275][T27774] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.19248'. [ 2574.534292][T27784] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.19251'. [ 2574.624958][T27788] netlink: 'syz.3.19261': attribute type 29 has an invalid length. [ 2574.989955][T27788] netlink: 'syz.3.19261': attribute type 29 has an invalid length. [ 2575.541714][T27805] netlink: 'syz.2.19257': attribute type 1 has an invalid length. [ 2577.225758][T27810] __nla_validate_parse: 2 callbacks suppressed [ 2577.225793][T27810] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.19259'. [ 2577.307260][T27826] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.19259'. [ 2577.616750][T27838] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.19264'. [ 2577.996644][T27836] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.19265'. [ 2578.292957][T27857] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.19271'. [ 2578.574586][T27854] netlink: 'syz.4.19272': attribute type 1 has an invalid length. [ 2579.597153][T27872] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.19277'. [ 2580.905213][T27906] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.19285'. [ 2583.531649][T27960] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.19304'. [ 2584.005537][T27971] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.19305'. [ 2584.624850][T27974] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.19308'. [ 2584.632776][T27977] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.19308'. [ 2585.026174][T27994] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.19315'. [ 2585.063561][T27994] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.19315'. [ 2585.307958][T28004] netlink: 'syz.3.19319': attribute type 10 has an invalid length. [ 2586.657789][T28019] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.19323'. [ 2587.777232][T28035] netlink: 'syz.4.19327': attribute type 9 has an invalid length. [ 2587.796232][T28035] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.19327'. [ 2588.357337][T28045] netlink: 'syz.4.19331': attribute type 10 has an invalid length. [ 2588.906371][T28061] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.19336'. [ 2589.325149][T28061] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.19336'. [ 2589.466867][T28068] netlink: 'syz.2.19337': attribute type 10 has an invalid length. [ 2589.793246][T28084] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.19342'. [ 2590.321154][T28082] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.19340'. [ 2590.641123][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.647639][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.090104][T28102] netlink: 'syz.1.19346': attribute type 10 has an invalid length. [ 2592.952687][T28135] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.19357'. [ 2593.055678][T28128] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.19352'. [ 2593.145707][T28132] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.19352'. [ 2594.888654][T28149] netlink: 'syz.0.19360': attribute type 9 has an invalid length. [ 2595.004807][T28149] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.19360'. [ 2595.150057][T28154] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.19370'. [ 2595.544767][T28158] netlink: 'syz.0.19363': attribute type 10 has an invalid length. [ 2596.141085][T28173] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.19365'. [ 2596.664428][T28184] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.19369'. [ 2596.734088][T28184] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.19369'. [ 2597.426304][T28202] netlink: 'syz.4.19375': attribute type 4 has an invalid length. [ 2597.501201][T28204] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.19376'. [ 2597.545330][T28202] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.19375'. [ 2597.712299][T28200] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.19376'. [ 2598.835607][T28231] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.19385'. [ 2600.082234][T28227] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.19384'. [ 2600.461421][T28227] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.19384'. [ 2600.524188][T28227] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.19384'. [ 2602.036854][T28290] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.19397'. [ 2602.675261][T28301] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.19400'. [ 2604.376525][T28324] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.19407'. [ 2604.496304][T28346] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.19407'. [ 2604.624712][T28352] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.19415'. [ 2604.664127][T28352] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.19415'. [ 2605.421802][T28376] netlink: 'syz.1.19421': attribute type 2 has an invalid length. [ 2605.504257][T28376] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.19421'. [ 2605.584691][T28367] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.19423'. [ 2606.256556][T28390] netlink: 'syz.1.19428': attribute type 1 has an invalid length. [ 2606.347634][T28395] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.19430'. [ 2606.353612][T28390] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.19428'. [ 2606.423912][T28395] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.19430'. [ 2607.537272][T28419] netlink: 'syz.2.19437': attribute type 19 has an invalid length. [ 2607.613603][T28419] netlink: 156 bytes leftover after parsing attributes in process `syz.2.19437'. [ 2607.660588][T28416] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.19436'. [ 2607.672523][T28412] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.19436'. [ 2607.957523][T28423] syz.0.19439[28423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2607.957691][T28423] syz.0.19439[28423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2608.042739][T28424] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.19432'. [ 2608.398816][T28436] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.19441'. [ 2610.075129][T28467] netlink: 'syz.2.19451': attribute type 11 has an invalid length. [ 2610.085636][T28471] netlink: 'syz.3.19452': attribute type 2 has an invalid length. [ 2610.526475][T28461] __nla_validate_parse: 6 callbacks suppressed [ 2610.526534][T28461] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.19450'. [ 2611.255245][T28495] netlink: 'syz.0.19456': attribute type 1 has an invalid length. [ 2611.306817][T28495] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.19456'. [ 2611.788582][T28507] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.19462'. [ 2612.458751][T28517] netlink: 'syz.2.19465': attribute type 2 has an invalid length. [ 2612.566019][T28517] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.19465'. [ 2612.880249][T28529] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.19469'. [ 2614.436845][T28558] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.19476'. [ 2614.973332][T28571] netlink: 'syz.4.19480': attribute type 2 has an invalid length. [ 2615.033934][T28571] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.19480'. [ 2615.421477][T28581] netlink: 'syz.2.19483': attribute type 1 has an invalid length. [ 2615.458136][T28581] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.19483'. [ 2615.656186][T28585] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.19484'. [ 2616.426510][T28602] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.19485'. [ 2616.468073][T28601] netlink: 'syz.2.19489': attribute type 2 has an invalid length. [ 2616.482546][T28601] netlink: 'syz.2.19489': attribute type 1 has an invalid length. [ 2616.497064][T28601] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.19489'. [ 2616.763346][T28609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19491'. [ 2616.833255][T28615] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.19492'. [ 2616.918297][T28609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19491'. [ 2617.735384][T28626] netlink: 'syz.0.19497': attribute type 2 has an invalid length. [ 2617.805241][T28626] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.19497'. [ 2617.958140][T28633] netlink: 'syz.3.19499': attribute type 1 has an invalid length. [ 2618.023548][T28633] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.19499'. [ 2618.657949][T28647] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.19504'. [ 2618.845373][T28654] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.19506'. [ 2621.200445][T28696] netlink: 'syz.4.19519': attribute type 2 has an invalid length. [ 2621.282640][T28696] netlink: 'syz.4.19519': attribute type 1 has an invalid length. [ 2621.373507][T28696] __nla_validate_parse: 4 callbacks suppressed [ 2621.373529][T28696] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.19519'. [ 2621.781154][T28710] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.19521'. [ 2621.953761][T28710] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.19521'. [ 2622.350762][T28721] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.19526'. [ 2622.934029][T28718] netlink: 171236 bytes leftover after parsing attributes in process `syz.3.19526'. [ 2623.033105][T28731] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.19529'. [ 2623.305118][T28731] netlink: 'syz.0.19529': attribute type 2 has an invalid length. [ 2623.802715][T28742] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.19531'. [ 2625.440040][T28761] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.19538'. [ 2626.030168][T28766] netlink: 'syz.1.19539': attribute type 2 has an invalid length. [ 2626.118329][T28766] netlink: 'syz.1.19539': attribute type 1 has an invalid length. [ 2626.194921][T28766] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.19539'. [ 2626.803185][T28780] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.19543'. [ 2628.388551][T28819] netlink: 'syz.3.19555': attribute type 2 has an invalid length. [ 2628.473192][T28819] netlink: 'syz.3.19555': attribute type 1 has an invalid length. [ 2628.536366][T28819] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.19555'. [ 2628.961628][T28830] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.19560'. [ 2629.050873][T28838] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.19560'. [ 2629.147088][T28839] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.19562'. [ 2629.757453][T28853] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.19578'. [ 2630.359088][T28865] netlink: 'syz.0.19569': attribute type 21 has an invalid length. [ 2630.401157][T28865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19569'. [ 2630.467834][T28865] netlink: 'syz.0.19569': attribute type 1 has an invalid length. [ 2631.130393][T28888] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.19582'. [ 2631.195105][T28879] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.19577'. [ 2631.828036][T28907] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.19587'. [ 2633.090682][T28933] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.19594'. [ 2633.117952][T28933] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.19594'. [ 2633.214532][T28942] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.19596'. [ 2633.346201][T28943] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.19595'. [ 2634.058369][T28954] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.19599'. [ 2635.129262][T28971] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.19601'. [ 2635.762165][T28988] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.19612'. [ 2636.304850][T29002] netlink: 'syz.3.19616': attribute type 21 has an invalid length. [ 2636.312890][T29002] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19616'. [ 2636.433407][T29002] netlink: 'syz.3.19616': attribute type 1 has an invalid length. [ 2637.125944][T29015] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.19618'. [ 2637.244937][T29025] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.19618'. [ 2637.514319][T29039] netlink: 40227 bytes leftover after parsing attributes in process `syz.4.19627'. [ 2637.996328][T29051] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.19632'. [ 2639.353397][T29092] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.19647'. [ 2640.402904][T29094] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.19648'. [ 2640.453918][T29099] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.19648'. [ 2640.623951][T29127] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.19658'. [ 2641.220022][T29149] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.19663'. [ 2642.455119][T29185] netlink: 171236 bytes leftover after parsing attributes in process `syz.0.19672'. [ 2642.687000][T29193] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.19675'. [ 2642.788333][T29198] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.19676'. [ 2642.798947][T29183] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.19671'. [ 2643.004134][T29186] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.19671'. [ 2644.265100][T29233] netlink: 171236 bytes leftover after parsing attributes in process `syz.1.19687'. [ 2645.027356][T29248] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.19689'. [ 2645.140066][T29253] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.19689'. [ 2645.215052][T29257] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.19693'. [ 2645.901952][T29276] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.19700'. [ 2647.480310][T29303] __nla_validate_parse: 2 callbacks suppressed [ 2647.480369][T29303] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.19709'. [ 2647.746385][T29327] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.19716'. [ 2648.262503][T29335] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.19720'. [ 2649.986397][T29378] netlink: 'syz.0.19731': attribute type 22 has an invalid length. [ 2650.106017][T29378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19731'. [ 2650.348741][T29366] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.19727'. [ 2650.415423][T29376] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.19727'. [ 2651.885611][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.892226][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.684257][T29422] netlink: 'syz.2.19743': attribute type 22 has an invalid length. [ 2652.692317][T29422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19743'. [ 2652.965232][T29430] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.19745'. [ 2653.388825][T29440] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.19749'. [ 2654.374552][T29434] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.19747'. [ 2654.551050][T29467] netlink: 'syz.1.19758': attribute type 22 has an invalid length. [ 2654.582648][T29467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19758'. [ 2654.640899][T29468] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.19759'. [ 2654.797746][T29431] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.19747'. [ 2655.722146][T29484] netlink: 171236 bytes leftover after parsing attributes in process `syz.3.19763'. [ 2655.905047][T29486] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.19765'. [ 2656.580285][T29497] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.19768'. [ 2657.097663][T29513] netlink: 'syz.4.19772': attribute type 15 has an invalid length. [ 2658.423979][T29553] __nla_validate_parse: 3 callbacks suppressed [ 2658.423999][T29553] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.19786'. [ 2658.588678][T29565] netlink: 171236 bytes leftover after parsing attributes in process `syz.4.19790'. [ 2658.590113][T29568] netlink: 'syz.0.19791': attribute type 10 has an invalid length. [ 2658.627180][T29568] netlink: 209860 bytes leftover after parsing attributes in process `syz.0.19791'. [ 2658.647681][T29568] openvswitch: netlink: Message has 4 unknown bytes. [ 2659.473843][T29585] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19796'. [ 2660.167326][T29601] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.19802'. [ 2660.345253][T29605] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.19803'. [ 2660.366700][T29609] netlink: 171236 bytes leftover after parsing attributes in process `syz.4.19804'. [ 2660.755426][T29618] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19808'. [ 2660.816643][T29618] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19808'. [ 2660.848328][T29618] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19808'. [ 2662.457793][T29659] netlink: 'syz.1.19830': attribute type 10 has an invalid length. [ 2662.519812][T29659] openvswitch: netlink: Message has 4 unknown bytes. [ 2664.055097][T29687] __nla_validate_parse: 13 callbacks suppressed [ 2664.055121][T29687] netlink: 199616 bytes leftover after parsing attributes in process `syz.4.19828'. [ 2665.080635][T29708] netlink: 'syz.2.19835': attribute type 10 has an invalid length. [ 2665.120946][T29708] netlink: 209860 bytes leftover after parsing attributes in process `syz.2.19835'. [ 2665.175597][T29708] openvswitch: netlink: Message has 4 unknown bytes. [ 2665.399433][T29715] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19837'. [ 2665.464139][T29715] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19837'. [ 2665.483790][T29718] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19837'. [ 2665.522890][T29718] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19837'. [ 2665.895545][T29732] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.19843'. [ 2667.017067][T29763] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19850'. [ 2667.090138][T29763] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19850'. [ 2667.204027][T29763] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19850'. [ 2670.934766][T29823] __nla_validate_parse: 4 callbacks suppressed [ 2670.934789][T29823] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.19867'. [ 2673.197207][T29887] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.19891'. [ 2673.264344][T29886] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.19889'. [ 2673.334511][T29886] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.19889'. [ 2673.570669][T29884] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.19890'. [ 2673.625028][T29894] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.19890'. [ 2673.690521][T29894] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.19890'. [ 2675.134295][T29932] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.19904'. [ 2675.536527][T29932] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.19904'. [ 2675.563590][T29932] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.19904'. [ 2677.375327][T29953] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.19907'. [ 2677.885397][T29993] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.19921'. [ 2678.117709][T30001] netlink: 171236 bytes leftover after parsing attributes in process `syz.4.19926'. [ 2678.349954][T29997] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.19923'. [ 2679.007668][T30023] netlink: 'syz.1.19934': attribute type 4 has an invalid length. [ 2679.045247][T30023] netlink: 'syz.1.19934': attribute type 1 has an invalid length. [ 2679.053134][T30023] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.19934'. [ 2680.337345][T30040] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.19938'. [ 2680.615774][T30047] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.19940'. [ 2680.857993][T30035] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.19938'. [ 2680.924991][T30035] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.19938'. [ 2682.885229][T30092] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.19953'. [ 2683.325343][T30095] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.19955'. [ 2684.771327][T30123] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.19963'. [ 2686.215218][T30150] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.19970'. [ 2686.431063][T30148] tap0: tun_chr_ioctl cmd 1074812118 [ 2689.356128][T30205] netlink: 'syz.4.19987': attribute type 3 has an invalid length. [ 2689.407652][T30205] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2689.657580][T30197] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.19986'. [ 2689.938994][T30192] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.19986'. [ 2690.045778][T30192] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.19986'. [ 2691.535371][T30235] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.19996'. [ 2691.684703][T30241] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.19996'. [ 2692.010526][T30241] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.19996'. [ 2692.315725][T30245] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.19999'. [ 2692.392822][T30250] netlink: 'syz.0.20001': attribute type 3 has an invalid length. [ 2692.420972][T30248] netlink: 72 bytes leftover after parsing attributes in process `syz.4.20002'. [ 2692.421543][T30250] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2695.075802][T30297] C: renamed from team_slave_0 [ 2695.147488][T30297] netlink: 'syz.2.20014': attribute type 3 has an invalid length. [ 2695.223682][T30297] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2696.732890][T30332] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.20024'. [ 2698.620625][T30347] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.20030'. [ 2700.193072][T30358] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.20032'. [ 2700.998674][T30370] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.20035'. [ 2701.222763][T30377] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.20038'. [ 2702.154581][T30400] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.20045'. [ 2702.618982][T30406] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.20047'. [ 2703.781747][T30430] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.20053'. [ 2703.907201][T30436] netlink: 171236 bytes leftover after parsing attributes in process `syz.2.20054'. [ 2705.216195][T30488] netlink: 171236 bytes leftover after parsing attributes in process `syz.4.20072'. [ 2705.268063][T30480] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.20070'. [ 2705.723271][T30503] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.20077'. [ 2706.220022][T30523] netlink: 198692 bytes leftover after parsing attributes in process `syz.4.20085'. [ 2706.460141][T30532] netlink: 'syz.4.20088': attribute type 4 has an invalid length. [ 2706.554228][T30532] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.20088'. [ 2707.190027][T30543] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.20092'. [ 2707.480228][T30550] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.20103'. [ 2708.653834][T30566] netlink: 198692 bytes leftover after parsing attributes in process `syz.2.20097'. [ 2709.096366][T30570] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.20096'. [ 2709.487987][T30583] netlink: 180 bytes leftover after parsing attributes in process `syz.2.20102'. [ 2710.428770][T30597] device syzkaller0 left promiscuous mode [ 2710.588142][T30599] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.20108'. [ 2710.670449][T30606] netlink: 198692 bytes leftover after parsing attributes in process `syz.3.20111'. [ 2713.315756][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.322240][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.347347][T30630] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.20116'. [ 2713.560965][T30646] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.20121'. [ 2713.650973][T30626] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.20116'. [ 2713.755815][T30626] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.20116'. [ 2716.066754][T30693] device syzkaller0 entered promiscuous mode [ 2716.307262][T30695] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.20136'. [ 2716.705655][T30707] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.20137'. [ 2716.836865][T30707] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.20137'. [ 2717.287380][T30725] netlink: 'syz.0.20144': attribute type 3 has an invalid length. [ 2717.373380][T30725] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.20144'. [ 2717.916433][T30746] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.20150'. [ 2719.222887][T30776] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.20155'. [ 2719.536881][T30766] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.20155'. [ 2719.557640][T30766] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.20155'. [ 2720.053740][T30790] device syzkaller0 entered promiscuous mode [ 2720.366228][T30805] netlink: 'syz.0.20166': attribute type 3 has an invalid length. [ 2720.393735][T30805] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.20166'. [ 2722.067319][T30843] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.20175'. [ 2722.175829][T30857] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.20175'. [ 2722.307575][T30857] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.20175'. [ 2723.332819][T30883] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.20189'. [ 2724.400223][T30881] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.20189'. [ 2724.582626][T30881] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.20189'. [ 2725.780989][T30927] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.20199'. [ 2725.845430][T30929] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.20199'. [ 2725.935687][T30929] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.20199'. [ 2726.429976][T30951] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.20217'. [ 2726.453492][T30951] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 2727.869462][T30987] netlink: 'syz.1.20215': attribute type 3 has an invalid length. [ 2728.042760][T30987] netlink: 'syz.1.20215': attribute type 4 has an invalid length. [ 2728.056525][T30993] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.20219'. [ 2728.070517][T30994] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.20219'. [ 2728.080736][T30987] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.20215'. [ 2728.092648][T30994] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.20219'. [ 2730.033124][T31052] __nla_validate_parse: 1 callbacks suppressed [ 2730.033146][T31052] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.20235'. [ 2730.139845][T31052] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 2731.361031][T31084] netlink: 171236 bytes leftover after parsing attributes in process `syz.0.20245'. [ 2731.532010][T31086] netlink: 'syz.1.20244': attribute type 2 has an invalid length. [ 2731.659161][T31086] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.20244'. [ 2734.406439][T31123] netlink: 171236 bytes leftover after parsing attributes in process `syz.4.20256'. [ 2734.865682][T31118] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.20254'. [ 2734.942256][T31125] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.20254'. [ 2734.983418][T31136] netlink: 'syz.2.20259': attribute type 2 has an invalid length. [ 2734.992738][T31136] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.20259'. [ 2735.046085][T31125] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.20254'. [ 2736.556000][T31166] netlink: 171236 bytes leftover after parsing attributes in process `syz.4.20270'. [ 2738.454435][T31199] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.20276'. [ 2738.675428][T31186] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.20276'. [ 2738.845722][T31186] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.20276'. [ 2738.954285][T31209] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.20282'. [ 2741.578793][T31247] netlink: 171236 bytes leftover after parsing attributes in process `syz.0.20296'. [ 2743.218828][T31278] netlink: 171236 bytes leftover after parsing attributes in process `syz.4.20307'. [ 2744.217390][T31301] netlink: 'syz.1.20315': attribute type 10 has an invalid length. [ 2744.382362][T31301] device lo left promiscuous mode [ 2744.617997][T31316] netlink: 171236 bytes leftover after parsing attributes in process `syz.2.20319'. [ 2745.573011][T31332] delete_channel: no stack [ 2746.110228][T31348] netlink: 156 bytes leftover after parsing attributes in process `syz.0.20330'. [ 2746.247366][T31354] netlink: 171236 bytes leftover after parsing attributes in process `syz.2.20332'. [ 2747.598523][T31358] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.20333'. [ 2747.625827][T31358] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.20333'. [ 2747.836575][T31389] netlink: 171236 bytes leftover after parsing attributes in process `syz.4.20343'. [ 2749.349549][T31426] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.20355'. [ 2749.365320][T31431] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.20357'. [ 2749.755564][T31422] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.20355'. [ 2749.784246][T31422] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.20355'. [ 2750.810968][T31479] netlink: 171236 bytes leftover after parsing attributes in process `syz.1.20373'. [ 2751.035413][T31472] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.20369'. [ 2751.685819][T31496] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.20378'. [ 2751.826186][T31503] netlink: 'syz.3.20383': attribute type 10 has an invalid length. [ 2753.147923][T31528] __nla_validate_parse: 3 callbacks suppressed [ 2753.147944][T31528] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.20390'. [ 2753.243999][T31537] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.20390'. [ 2753.803170][T31555] netlink: 171236 bytes leftover after parsing attributes in process `syz.3.20400'. [ 2754.746767][T31569] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.20401'. [ 2754.857407][T31569] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.20401'. [ 2755.887986][T31595] netlink: 'syz.2.20411': attribute type 4 has an invalid length. [ 2756.024583][T31595] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.20411'. [ 2756.145389][T31599] netlink: 198692 bytes leftover after parsing attributes in process `syz.1.20412'. [ 2757.857207][T31628] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.20418'. [ 2757.867262][T31638] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20424'. [ 2757.913985][T31640] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20422'. [ 2758.194714][T31646] netlink: 198692 bytes leftover after parsing attributes in process `syz.3.20425'. [ 2758.275634][T31617] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.20418'. [ 2758.941157][T31663] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.20429'. [ 2759.876843][T31655] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.20429'. [ 2760.359279][T31691] netlink: 198692 bytes leftover after parsing attributes in process `syz.1.20438'. [ 2762.462662][T31736] netlink: 171236 bytes leftover after parsing attributes in process `syz.1.20452'. [ 2765.110012][T31780] netlink: 171236 bytes leftover after parsing attributes in process `syz.3.20465'. [ 2766.208176][T31791] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.20467'. [ 2766.384314][T31794] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.20467'. [ 2767.881027][T31818] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.20477'. [ 2768.048728][T31817] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.20477'. [ 2768.212288][T31825] netlink: 171236 bytes leftover after parsing attributes in process `syz.2.20479'. [ 2769.440286][T31853] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.20483'. [ 2770.155794][T31851] netlink: 134736 bytes leftover after parsing attributes in process `syz.1.20488'. [ 2770.361345][T31869] netlink: 171236 bytes leftover after parsing attributes in process `syz.1.20493'. [ 2770.778256][T31876] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.20492'. [ 2770.994558][T31866] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.20492'. [ 2771.587937][T31887] netlink: 'syz.0.20498': attribute type 9 has an invalid length. [ 2771.685398][T31887] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.20498'. [ 2772.146173][T31889] netlink: 'syz.0.20498': attribute type 9 has an invalid length. [ 2772.161144][T31889] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.20498'. [ 2772.446329][T31902] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20502'. [ 2772.518354][T31902] netlink: 'syz.1.20502': attribute type 8 has an invalid length. [ 2772.591686][T31903] netlink: 'syz.2.20503': attribute type 21 has an invalid length. [ 2772.625334][T31903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2772.632799][T31903] IPv6: NLM_F_CREATE should be set when creating new route [ 2772.641278][T31903] IPv6: NLM_F_CREATE should be set when creating new route [ 2772.649098][T31903] IPv6: NLM_F_CREATE should be set when creating new route [ 2772.718429][T31909] netlink: 171236 bytes leftover after parsing attributes in process `syz.4.20506'. [ 2773.153827][T31915] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.20507'. [ 2773.569800][T31913] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.20507'. [ 2774.846587][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.852955][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.255601][T31960] __sock_release: fasync list not empty! [ 2779.081024][T32010] __nla_validate_parse: 1 callbacks suppressed [ 2779.081045][T32010] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.20533'. [ 2779.327448][T32004] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.20533'. [ 2782.476295][T32073] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.20552'. [ 2782.565910][T32078] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.20552'. [ 2783.346435][T32092] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.20557'. [ 2783.563682][T32087] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.20557'. [ 2785.182825][T32114] netlink: 'syz.4.20561': attribute type 9 has an invalid length. [ 2785.288995][T32114] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.20561'. [ 2786.236307][T32138] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.20568'. [ 2786.321844][T32140] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.20572'. [ 2786.368746][T32146] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.20568'. [ 2786.562019][T32140] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.20572'. [ 2789.085131][T32180] netlink: 'syz.3.20579': attribute type 9 has an invalid length. [ 2789.178995][T32180] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.20579'. [ 2789.358840][T32177] netlink: 'syz.3.20579': attribute type 9 has an invalid length. [ 2789.402105][T32177] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.20579'. [ 2791.834637][T32230] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.20595'. [ 2795.153188][T32290] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.20609'. [ 2795.168505][T32288] netlink: 171236 bytes leftover after parsing attributes in process `syz.0.20613'. [ 2795.426147][T32285] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.20609'. [ 2798.905918][T32353] netlink: 171236 bytes leftover after parsing attributes in process `syz.1.20629'. [ 2799.836017][T32373] device syzkaller0 left promiscuous mode [ 2800.528501][T32394] netlink: 171236 bytes leftover after parsing attributes in process `syz.2.20643'. [ 2800.737154][T32381] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.20639'. [ 2800.931892][T32387] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.20639'. [ 2804.412802][T32434] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.20662'. [ 2804.875702][T32431] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.20654'. [ 2804.887646][T32447] netlink: 171236 bytes leftover after parsing attributes in process `syz.4.20657'. [ 2805.165033][T32431] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.20654'. [ 2805.304443][T32431] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.20654'. [ 2805.684830][T32464] netlink: 830 bytes leftover after parsing attributes in process `syz.4.20664'. [ 2806.951048][T32485] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.20671'. [ 2806.972517][T32487] netlink: 171236 bytes leftover after parsing attributes in process `syz.0.20672'. [ 2808.003816][T32509] netlink: 830 bytes leftover after parsing attributes in process `syz.0.20678'. [ 2808.035107][T32505] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.20677'. [ 2810.005975][T32555] __nla_validate_parse: 3 callbacks suppressed [ 2810.005995][T32555] netlink: 830 bytes leftover after parsing attributes in process `syz.1.20692'. [ 2810.293028][T32564] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.20698'. [ 2810.456202][T32559] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.20695'. [ 2810.709009][T32554] netlink: 171236 bytes leftover after parsing attributes in process `syz.0.20695'. [ 2812.468010][T32602] netlink: 'syz.4.20710': attribute type 2 has an invalid length. [ 2812.533886][T32602] netlink: 198692 bytes leftover after parsing attributes in process `syz.4.20710'. [ 2812.685516][T32613] netlink: 171236 bytes leftover after parsing attributes in process `syz.3.20711'. [ 2813.756821][T32618] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.20713'. [ 2813.827155][T32619] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.20713'. [ 2814.234026][T32640] netlink: 830 bytes leftover after parsing attributes in process `syz.3.20721'. [ 2814.761923][T32650] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.20724'. [ 2816.442337][T32691] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.20731'. [ 2816.626103][T32693] device syzkaller0 entered promiscuous mode [ 2818.145595][T32722] syz.3.20745[32722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2818.145777][T32722] syz.3.20745[32722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2818.318498][T32717] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.20743'. [ 2818.395692][T32717] netlink: 'syz.2.20743': attribute type 2 has an invalid length. [ 2818.742820][T32734] netlink: 171236 bytes leftover after parsing attributes in process `syz.4.20748'. [ 2819.137619][T32737] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.20750'. [ 2819.250631][T32741] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.20750'. [ 2820.753885][T32763] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.20756'. [ 2821.885146][ T313] netlink: 'syz.1.20761': attribute type 1 has an invalid length. [ 2821.893301][ T313] netlink: 'syz.1.20761': attribute type 3 has an invalid length. [ 2822.044653][ T313] netlink: 132 bytes leftover after parsing attributes in process `syz.1.20761'. [ 2822.317373][ T320] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.20763'. [ 2822.600207][ T323] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.20764'. [ 2822.614799][ T319] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.20763'. [ 2822.648841][ T319] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.20763'. [ 2822.750548][ T323] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.20764'. [ 2824.518444][ T377] netlink: 'syz.4.20776': attribute type 1 has an invalid length. [ 2824.541447][ T377] netlink: 'syz.4.20776': attribute type 3 has an invalid length. [ 2824.552203][ T377] netlink: 132 bytes leftover after parsing attributes in process `syz.4.20776'. [ 2824.862464][ T389] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.20781'. [ 2824.913789][ T389] netlink: 'syz.0.20781': attribute type 2 has an invalid length. [ 2825.216639][ T386] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.20780'. [ 2825.285605][ T391] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.20780'. [ 2825.297536][ T404] netlink: 'syz.3.20784': attribute type 3 has an invalid length. [ 2826.693915][ T434] netlink: 'syz.2.20791': attribute type 1 has an invalid length. [ 2826.736509][ T434] netlink: 'syz.2.20791': attribute type 3 has an invalid length. [ 2827.875292][ T462] __nla_validate_parse: 3 callbacks suppressed [ 2827.875314][ T462] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.20797'. [ 2827.905323][ T446] delete_channel: no stack [ 2828.058931][ T449] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.20798'. [ 2828.100669][ T449] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.20798'. [ 2828.311729][ T444] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.20797'. [ 2828.825152][ T477] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.20805'. [ 2830.194985][ T495] netlink: 'syz.4.20812': attribute type 21 has an invalid length. [ 2830.203007][ T495] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.20812'. [ 2830.284215][ T499] netlink: 'syz.3.20811': attribute type 1 has an invalid length. [ 2830.292107][ T499] netlink: 'syz.3.20811': attribute type 3 has an invalid length. [ 2830.463455][ T499] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20811'. [ 2830.571392][ T502] netlink: 'syz.0.20823': attribute type 21 has an invalid length. [ 2830.630388][ T502] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.20823'. [ 2830.663089][ T509] netlink: 198692 bytes leftover after parsing attributes in process `syz.1.20815'. [ 2830.879038][ T503] delete_channel: no stack [ 2832.095340][ T536] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.20822'. [ 2833.245123][ T557] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.20839'. [ 2833.325575][ T553] delete_channel: no stack [ 2833.496623][ T564] netlink: 'syz.3.20830': attribute type 21 has an invalid length. [ 2833.683529][ T564] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.20830'. [ 2833.826463][ T568] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.20831'. [ 2833.946778][ T568] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.20831'. [ 2834.499690][ T583] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.20834'. [ 2835.557082][ T582] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.20834'. [ 2835.804895][ T607] delete_channel: no stack [ 2836.185573][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.191924][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.728424][ T623] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.20846'. [ 2837.316479][ T626] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.20847'. [ 2838.153638][ T622] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.20847'. [ 2838.356124][ T643] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.20849'. [ 2838.533547][ T643] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2839.681099][ T662] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.20858'. [ 2839.706239][ T660] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.20856'. [ 2839.744384][ T663] delete_channel: no stack [ 2839.760474][ T662] netlink: zone id is out of range [ 2839.821997][ T662] netlink: zone id is out of range [ 2839.874665][ T662] netlink: zone id is out of range [ 2839.917489][ T662] netlink: zone id is out of range [ 2839.985823][ T662] netlink: zone id is out of range [ 2840.050080][ T662] netlink: zone id is out of range [ 2840.248364][ T658] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.20856'. [ 2840.305074][ T662] netlink: zone id is out of range [ 2840.356829][ T662] netlink: zone id is out of range [ 2840.433556][ T662] netlink: zone id is out of range [ 2841.291783][ T683] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.20862'. [ 2841.426275][ T685] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.20864'. [ 2841.437379][ T683] bridge_slave_1: default FDB implementation only supports local addresses [ 2843.028259][ T716] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.20873'. [ 2843.946232][ T738] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.20881'. [ 2843.959620][ T736] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.20879'. [ 2844.036677][ T736] bridge_slave_1: default FDB implementation only supports local addresses [ 2846.443954][ T770] netlink: 830 bytes leftover after parsing attributes in process `syz.1.20890'. [ 2846.935069][ T772] device syzkaller0 entered promiscuous mode [ 2847.406654][ T780] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.20903'. [ 2847.582129][ T780] bridge_slave_1: default FDB implementation only supports local addresses [ 2848.061326][ T791] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.20897'. [ 2849.338704][ T814] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.20902'. [ 2850.080642][ T829] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.20909'. [ 2850.181155][ T829] bridge_slave_1: default FDB implementation only supports local addresses [ 2850.550491][ T833] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.20906'. [ 2850.559671][ T835] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.20911'. [ 2850.610621][ T833] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.20906'. [ 2850.684426][ T835] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.20911'. [ 2851.645100][ T849] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.20916'. [ 2853.014015][ T887] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.20924'. [ 2853.185251][ T883] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.20924'. [ 2854.215153][ T915] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.20931'. [ 2854.346534][ T908] __nla_validate_parse: 1 callbacks suppressed [ 2854.346557][ T908] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.20926'. [ 2855.387297][ T932] netlink: 830 bytes leftover after parsing attributes in process `syz.3.20933'. [ 2857.444647][ T954] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.20940'. [ 2857.891129][ T970] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.20945'. [ 2858.119349][ T951] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.20940'. [ 2858.397373][ T990] netlink: 'syz.4.20949': attribute type 10 has an invalid length. [ 2859.046555][ T997] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.20952'. [ 2860.693252][ T1017] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.20958'. [ 2861.454911][ T1024] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.20960'. [ 2861.665209][ T1024] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.20960'. [ 2861.773695][ T1024] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.20960'. [ 2861.982819][ T1056] netlink: 'syz.4.20967': attribute type 3 has an invalid length. [ 2862.019180][ T1056] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.20967'. [ 2862.859027][ T1071] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.20969'. [ 2863.235183][ T1086] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.20972'. [ 2865.248353][ T1116] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.20979'. [ 2865.646428][ T1123] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.20984'. [ 2865.718780][ T1123] net_ratelimit: 674 callbacks suppressed [ 2865.720480][ T1123] netlink: zone id is out of range [ 2865.784262][ T1123] netlink: zone id is out of range [ 2865.791503][ T1123] netlink: zone id is out of range [ 2865.814577][ T1123] netlink: zone id is out of range [ 2865.822061][ T1123] netlink: zone id is out of range [ 2865.844002][ T1123] netlink: zone id is out of range [ 2865.854014][ T1123] netlink: zone id is out of range [ 2865.877402][ T1123] netlink: zone id is out of range [ 2865.907589][ T1123] netlink: zone id is out of range [ 2865.913253][ T1123] netlink: zone id is out of range [ 2866.184085][ T1128] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.20985'. [ 2868.198233][ T1179] netlink: 830 bytes leftover after parsing attributes in process `syz.1.20996'. [ 2868.666412][ T1171] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.20995'. [ 2868.705704][ T1185] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.20995'. [ 2869.144631][ T1197] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20999'. [ 2869.229312][ T1200] netlink: 'syz.4.21000': attribute type 1 has an invalid length. [ 2869.291888][ T1200] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.21000'. [ 2869.392756][ T1206] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.21002'. [ 2873.014761][ T1232] netlink: 'syz.1.21018': attribute type 28 has an invalid length. [ 2874.243879][ T1253] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.21011'. [ 2874.244240][ T1259] netlink: 'syz.1.21015': attribute type 29 has an invalid length. [ 2874.332150][ T1259] netlink: 'syz.1.21015': attribute type 29 has an invalid length. [ 2874.380803][ T1264] netlink: 'syz.1.21015': attribute type 29 has an invalid length. [ 2874.547829][ T1266] netlink: 'syz.1.21015': attribute type 29 has an invalid length. [ 2874.613899][ T1252] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.21011'. [ 2874.648830][ T1252] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.21011'. [ 2874.781983][ T1271] device syzkaller0 entered promiscuous mode [ 2875.078965][ T1277] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.21022'. [ 2877.255663][ T1305] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.21029'. [ 2877.276685][ T1305] net_ratelimit: 331 callbacks suppressed [ 2877.276726][ T1305] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2879.378820][ T1330] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.21035'. [ 2880.142924][ T1337] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.21036'. [ 2881.544709][ T1351] netlink: 'syz.3.21038': attribute type 1 has an invalid length. [ 2881.648073][ T1351] netlink: 'syz.3.21038': attribute type 4 has an invalid length. [ 2881.732492][ T1351] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.21038'. [ 2882.159805][ T1369] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.21044'. [ 2882.204050][ T1369] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2883.823300][ T1385] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.21048'. [ 2884.071823][ T1400] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.21052'. [ 2885.198329][ T1412] netlink: 'syz.4.21055': attribute type 1 has an invalid length. [ 2885.271422][ T1412] netlink: 'syz.4.21055': attribute type 4 has an invalid length. [ 2885.336172][ T1426] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.21058'. [ 2885.345757][ T1426] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2885.404625][ T1412] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.21055'. [ 2886.021357][ T1446] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.21064'. [ 2887.328079][ T1458] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.21067'. [ 2888.363172][ T1477] netlink: 'syz.1.21071': attribute type 9 has an invalid length. [ 2888.440881][ T1472] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.21068'. [ 2888.452555][ T1477] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.21071'. [ 2892.157814][ T1494] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.21073'. [ 2892.198322][ T1493] netlink: 'syz.1.21074': attribute type 1 has an invalid length. [ 2892.224934][ T1493] netlink: 'syz.1.21074': attribute type 4 has an invalid length. [ 2892.245557][ T1493] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.21074'. [ 2892.353580][ T1494] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2892.367284][ T1490] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.21084'. [ 2894.966935][ T1535] netlink: 'syz.3.21086': attribute type 3 has an invalid length. [ 2895.066218][ T1535] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.21086'. [ 2895.715744][ T1546] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.21088'. [ 2895.765603][ T1546] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.21088'. [ 2895.944840][ T1552] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.21090'. [ 2897.081760][ T1564] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.21093'. [ 2897.795314][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.801732][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 2900.187776][ T1593] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.21097'. [ 2900.233448][ T1593] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2902.680050][ T1628] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.21108'. [ 2903.390633][T20409] Bluetooth: hci5: command 0x0409 tx timeout [ 2904.338522][ T1609] chnl_net:caif_netlink_parms(): no params data found [ 2904.744848][ T1609] bridge0: port 1(bridge_slave_0) entered blocking state [ 2904.752035][ T1609] bridge0: port 1(bridge_slave_0) entered disabled state [ 2904.786445][ T1609] device bridge_slave_0 entered promiscuous mode [ 2904.817873][ T1609] bridge0: port 2(bridge_slave_1) entered blocking state [ 2904.845093][ T1609] bridge0: port 2(bridge_slave_1) entered disabled state [ 2904.873984][ T1609] device bridge_slave_1 entered promiscuous mode [ 2904.968805][ T1609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2905.005844][ T1609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2905.117065][ T1609] team0: Port device team_slave_0 added [ 2905.146211][ T1609] team0: Port device team_slave_1 added [ 2905.215814][ T1609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2905.222811][ T1609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2905.335008][ T1609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2905.373530][ T1609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2905.380532][ T1609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2905.463496][T20409] Bluetooth: hci5: command 0x041b tx timeout [ 2905.476765][ T1609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2905.679058][ T1609] device hsr_slave_0 entered promiscuous mode [ 2905.725852][ T1609] device hsr_slave_1 entered promiscuous mode [ 2906.157733][ T1609] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2906.187027][ T1609] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2906.226491][ T1609] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2906.337620][ T1609] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2906.560096][ T1609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2906.722724][ T1609] 8021q: adding VLAN 0 to HW filter on device team0 [ 2906.766880][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2906.775886][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2906.816694][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2906.834864][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2906.876551][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 2906.883692][ T1238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2906.927019][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2906.955749][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2906.984469][ T1238] bridge0: port 2(bridge_slave_1) entered blocking state [ 2906.991690][ T1238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2907.056928][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2907.081105][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2907.114659][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2907.148396][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2907.183709][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2907.216226][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2907.247876][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2907.285940][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2907.314327][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2907.347440][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2907.386555][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2907.414060][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2907.451604][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2907.543660][T20409] Bluetooth: hci5: command 0x040f tx timeout [ 2907.774066][ T863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2907.781567][ T863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2907.813070][ T1609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2908.408019][ T863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2908.425823][ T863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2908.486111][ T863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2908.506354][ T863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2908.536816][ T1609] device veth0_vlan entered promiscuous mode [ 2908.566481][ T863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2908.575062][ T863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2908.596912][ T1609] device veth1_vlan entered promiscuous mode [ 2908.625201][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2908.704586][ T863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2908.715601][ T863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2908.757790][ T1609] device veth0_macvtap entered promiscuous mode [ 2908.776298][ T1609] device veth1_macvtap entered promiscuous mode [ 2908.856839][ T1609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2908.884324][ T863] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2908.895039][ T863] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2908.935212][ T863] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2908.964187][ T863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2908.998513][ T1609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2909.006217][ T863] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2909.024284][ T863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2909.068031][ T1609] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2909.093467][ T1609] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2909.102645][ T1609] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2909.153534][ T1609] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2909.418240][ T1238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2909.435048][ T1238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2909.474003][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2909.508118][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2909.517254][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2909.537523][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2909.623987][ T6551] Bluetooth: hci5: command 0x0419 tx timeout [ 2959.065474][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.071817][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.515204][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.521643][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 3027.703527][T19012] Bluetooth: hci5: command 0x0406 tx timeout [ 3081.944783][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.951121][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.384956][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.391297][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 3204.825264][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.831841][ T1431] ieee802154 phy1 wpan1: encryption failed: -22