last executing test programs: 4.153610755s ago: executing program 4 (id=22360): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r2, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast}) 3.848463292s ago: executing program 4 (id=22366): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x826, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/121, 0x79}, {0x0}], 0x2}, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r3}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x93, 0x94, &(0x7f00000005c0)="825cdcf91fca6b63cd0d1613d0d3752b14d762c3895810dcbf268627bf9da10bdb38f4065bb8905def5ec23547294bd3885a635f3712ac255cbbae257e47143ea94c3c8da7a48759ade56c1ce824236f992c57439eb43352cec5ac7e2286a5644e326c85404248802c9fbd5e5dd4891b38fbcdcfc297ef31c9f9e744954ed3b478ff0af173da618c0f35aeb6412ad9729c8e8b", &(0x7f00000006c0)=""/148, 0xffff0001, 0x0, 0x0, 0x4d, 0x0, &(0x7f0000000840)="7de15d5b730288ac7f1298a6b8773de155d46338ec226a09138313ca9b660541d34b0541e4fc11540afeffca69afb09336cc46ec331666694cadfd72c1a924aa8859ace75a8dc22ed221fbd445", 0x0, 0x0, 0x10000}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x48010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x6, 0x0, &(0x7f0000000900)="2800000086e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) 2.869940577s ago: executing program 3 (id=22370): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.848371348s ago: executing program 2 (id=22371): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xc9, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffa43, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x10001}, 0x105014, 0x8, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xf, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.846815608s ago: executing program 1 (id=22372): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047459, &(0x7f0000000180)) 2.824445169s ago: executing program 4 (id=22373): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xfff5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.818835018s ago: executing program 0 (id=22374): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYRES16], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c012, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x142f1bfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000a3f}, 0x50) r1 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5ae) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a1085", @ANYRES8=r3, @ANYBLOB="8700"/20, @ANYRESDEC=r0, @ANYBLOB='\x00'/28], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e0a7875f80e0000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) write$cgroup_int(r7, &(0x7f0000000040), 0x1) 2.37487768s ago: executing program 0 (id=22375): perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d02000000000000001800000000000000840000000700000062"], 0x38}, 0x41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0x6, 0xde, &(0x7f0000000340)=""/222}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xfc, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000240)=0x3) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305828, &(0x7f0000000040)=0x20000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c40)}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.299512652s ago: executing program 3 (id=22376): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r2, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast}) 2.282355512s ago: executing program 1 (id=22386): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x37}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) 1.853676403s ago: executing program 2 (id=22377): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000002500)={&(0x7f00000001c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="ec", 0x1}], 0x1}, 0x80) setsockopt$sock_attach_bpf(r0, 0x29, 0x39, 0x0, 0x0) 1.853483533s ago: executing program 1 (id=22378): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x80047441, &(0x7f0000001200)) 1.853328403s ago: executing program 4 (id=22379): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x24b2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90724fc6004000b000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.828657214s ago: executing program 3 (id=22380): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.795407424s ago: executing program 0 (id=22381): perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d02000000000000001800000000000000840000000700000062"], 0x38}, 0x41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0x6, 0xde, &(0x7f0000000340)=""/222}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xfc, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000240)=0x3) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305828, &(0x7f0000000040)=0x20000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x46, &(0x7f0000000840)=ANY=[@ANYBLOB="1800005cc6000000000000000500000018110000c74e917a2781575ae4eef0bab4d99a0a657276665a40bb6b1374c06cd9b345a7fdd579c56b1737ed24b88af185b81841d2adf97f96aba2a696293f65bb94ca7b06cf9759f695523072b3cc157a80bc5921f38c62257ce04caace8a118d0d3f88069881b6c479f4cef38579c924b682fbb7c4f8ad74c8c19bb4887b80eaa13014b8eacfca6134d45b336980a62890229c62f6fd13584c4964e969772fba9200ef9b748720e0a429bdb365affe89af08d474a010948f1f04bf0e83da70b8ab6e70577eeb1d029f568b66dee34c6901d0eda2a753a88669665f6563f719369dc1c94cdf85ab703bc396c82c79541c2ae870a6223a7bc8e041b30ef41540cbb54d3882e62c374e49d7bc70", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdf4}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x0, 0x80000}, {0x0, 0x4, 0x10006}]}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.615059539s ago: executing program 4 (id=22382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.544256321s ago: executing program 1 (id=22383): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x826, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/121, 0x79}, {0x0}], 0x2}, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r3}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x93, 0x94, &(0x7f00000005c0)="825cdcf91fca6b63cd0d1613d0d3752b14d762c3895810dcbf268627bf9da10bdb38f4065bb8905def5ec23547294bd3885a635f3712ac255cbbae257e47143ea94c3c8da7a48759ade56c1ce824236f992c57439eb43352cec5ac7e2286a5644e326c85404248802c9fbd5e5dd4891b38fbcdcfc297ef31c9f9e744954ed3b478ff0af173da618c0f35aeb6412ad9729c8e8b", &(0x7f00000006c0)=""/148, 0xffff0001, 0x0, 0x0, 0x4d, 0x0, &(0x7f0000000840)="7de15d5b730288ac7f1298a6b8773de155d46338ec226a09138313ca9b660541d34b0541e4fc11540afeffca69afb09336cc46ec331666694cadfd72c1a924aa8859ace75a8dc22ed221fbd445", 0x0, 0x0, 0x10000}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x48010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x6, 0x0, &(0x7f0000000900)="2800000086e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) 1.543491731s ago: executing program 3 (id=22384): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="f897ede80000000000000000010000008500000097000000850000002a0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x826, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/121, 0x79}, {0x0}], 0x2, &(0x7f0000000200)=""/108, 0x6c}, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r4}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0xa7, 0x94, &(0x7f00000005c0)="825cdcf91fca6b63cd0d1613d0d3752b14d762c3895810dcbf268627bf9da10bdb38f4065bb8905def5ec23547294bd3885a635f3712ac255cbbae257e47143ea94c3c8da7a48759ade56c1ce824236f992c57439eb43352cec5ac7e2286a5644e326c85404248802c9fbd5e5dd4891b38fbcdcfc297ef31c9f9e744954ed3b478ff0af173da618c0f35aeb6412ad9729c8e8b8f549c4c619315a8ada72688c108563f188c0195", &(0x7f00000006c0)=""/148, 0xffff0001, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000840)="7de15d5b730288ac7f1298a6b8773de155d46338ec226a09138313ca9b660541d34b0541e4fc11540afeffca69afb09336cc46ec331666694cadfd72c1a924aa8859ace75a8dc22ed221fbd4451be21d0f02710eb09dbc9a", 0x0, 0x0, 0x10000}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x48010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x6, 0x0, &(0x7f0000000900)="2800000086e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x35, 0x0, 0x0) 1.361595695s ago: executing program 0 (id=22385): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYRES16], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c012, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x142f1bfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000a3f}, 0x50) r1 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5ae) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a1085", @ANYRES8=r3, @ANYBLOB="8700"/20, @ANYRESDEC=r0, @ANYBLOB='\x00'/28], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e0a7875f80e0000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000"], 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) write$cgroup_int(r7, &(0x7f0000000040), 0x1) 975.654835ms ago: executing program 2 (id=22387): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000640)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 870.965978ms ago: executing program 2 (id=22388): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 614.603474ms ago: executing program 4 (id=22389): r0 = socket$kcm(0x2, 0x5, 0x84) close(0x3) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="c7", 0x100000}], 0x1}, 0x880) 572.697866ms ago: executing program 1 (id=22390): close(0xffffffffffffffff) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff20ffffdd8667000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 553.743976ms ago: executing program 3 (id=22391): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x87, 0x52000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x8000, 0xfffffffffffffffd, 0x80000001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2b8e5fe3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 489.902488ms ago: executing program 2 (id=22392): perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d02000000000000001800000000000000840000000700000062"], 0x38}, 0x41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0x6, 0xde, &(0x7f0000000340)=""/222}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xfc, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000240)=0x3) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305828, &(0x7f0000000040)=0x20000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c40)}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 117.779147ms ago: executing program 0 (id=22393): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, &(0x7f0000000300), 0x0}, 0x20) 67.988259ms ago: executing program 2 (id=22394): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc601000050000ba0200053582c137153e37000c", 0x26}], 0x1}, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x4, 0x4}, {0x0, 0x1000, 0x3}, {0x0, 0x4}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 31.608449ms ago: executing program 1 (id=22395): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 31.138829ms ago: executing program 0 (id=22396): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x91f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 3 (id=22397): perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d02000000000000001800000000000000840000000700000062"], 0x38}, 0x41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0x6, 0xde, &(0x7f0000000340)=""/222}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xfc, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000240)=0x3) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305828, &(0x7f0000000040)=0x20000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x46, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdf4}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x0, 0x80000}, {0x0, 0x4, 0x10006}]}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2541.779450][T27662] RSP: 002b:00007fa538119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2541.787876][T27662] RAX: ffffffffffffffda RBX: 00007fa537416090 RCX: 00007fa53719ce59 [ 2541.795848][T27662] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2541.803819][T27662] RBP: 00007fa537232e6f R08: 0000000000000000 R09: 0000000000000000 [ 2541.811790][T27662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2541.819762][T27662] R13: 00007fa537416128 R14: 00007fa537416090 R15: 00007fffa6097378 [ 2541.827756][T27662] [ 2542.178587][T27683] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19573'. [ 2542.328177][T27689] netlink: 144 bytes leftover after parsing attributes in process `syz.0.19578'. [ 2542.347058][T27687] netlink: 'syz.4.19576': attribute type 10 has an invalid length. [ 2542.360713][T27689] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.19578'. [ 2542.370491][T27687] netlink: 168 bytes leftover after parsing attributes in process `syz.4.19576'. [ 2542.383564][T27689] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2542.396156][T27687] netlink: 'syz.4.19576': attribute type 10 has an invalid length. [ 2543.291057][T27711] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19581'. [ 2543.321265][T27710] netlink: 'syz.1.19582': attribute type 3 has an invalid length. [ 2543.359181][T27710] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.19582'. [ 2543.802508][T27724] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.19585'. [ 2543.872260][T27724] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2543.896043][T27724] CPU: 1 PID: 27724 Comm: syz.1.19585 Not tainted syzkaller #0 [ 2543.903650][T27724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2543.913714][T27724] Call Trace: [ 2543.916983][T27724] [ 2543.919912][T27724] dump_stack_lvl+0x188/0x24e [ 2543.924613][T27724] ? show_regs_print_info+0x12/0x12 [ 2543.929834][T27724] ? load_image+0x400/0x400 [ 2543.934371][T27724] sysfs_warn_dup+0x8a/0xa0 [ 2543.938897][T27724] sysfs_do_create_link_sd+0xc0/0x110 [ 2543.944296][T27724] device_add+0x7f6/0x1000 [ 2543.948744][T27724] wiphy_register+0x1d9f/0x2ac0 [ 2543.953625][T27724] ? cfg80211_event_work+0x40/0x40 [ 2543.958749][T27724] ? minstrel_ht_alloc+0x894/0xa20 [ 2543.962935][T27731] netlink: 'syz.4.19586': attribute type 27 has an invalid length. [ 2543.963871][T27724] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2543.963905][T27724] ieee80211_register_hw+0x2d00/0x39f0 [ 2543.963939][T27724] ? ieee80211_register_hw+0xec1/0x39f0 [ 2543.988877][T27724] ? ieee80211_register_hw+0xec1/0x39f0 [ 2543.994456][T27724] ? ieee80211_tasklet_handler+0x20/0x20 [ 2544.000120][T27724] ? memset+0x1e/0x40 [ 2544.004122][T27724] ? __hrtimer_init+0x186/0x270 [ 2544.009000][T27724] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2544.014766][T27724] hwsim_new_radio_nl+0xafa/0xce0 [ 2544.019826][T27724] genl_family_rcv_msg_doit+0x22a/0x330 [ 2544.025428][T27724] ? end_current_label_crit_section+0x170/0x170 [ 2544.031693][T27724] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2544.037615][T27724] ? bpf_lsm_capable+0x5/0x10 [ 2544.042314][T27724] ? security_capable+0x85/0xb0 [ 2544.047194][T27724] genl_rcv_msg+0x604/0x790 [ 2544.051728][T27724] ? check_preemption_disabled+0x1/0x110 [ 2544.057384][T27724] ? genl_bind+0x360/0x360 [ 2544.061821][T27724] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2544.068180][T27724] netlink_rcv_skb+0x1fb/0x450 [ 2544.072962][T27724] ? genl_bind+0x360/0x360 [ 2544.077401][T27724] ? netlink_ack+0x1170/0x1170 [ 2544.082196][T27724] ? down_read+0x1a8/0x2d0 [ 2544.086634][T27724] genl_rcv+0x24/0x40 [ 2544.090641][T27724] netlink_unicast+0x74d/0x8d0 [ 2544.095439][T27724] netlink_sendmsg+0x8ad/0xbd0 [ 2544.100227][T27724] ? netlink_getsockopt+0x550/0x550 [ 2544.105454][T27724] ? netlink_getsockopt+0x550/0x550 [ 2544.110677][T27724] ____sys_sendmsg+0x5be/0x970 [ 2544.115469][T27724] ? __sys_sendmsg_sock+0x30/0x30 [ 2544.120507][T27724] ? __import_iovec+0x315/0x500 [ 2544.125381][T27724] ? import_iovec+0x6f/0xa0 [ 2544.129904][T27724] ___sys_sendmsg+0x2a2/0x360 [ 2544.134605][T27724] ? __sys_sendmsg+0x290/0x290 [ 2544.139399][T27724] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2544.145143][T27724] __se_sys_sendmsg+0x1bb/0x2a0 [ 2544.150004][T27724] ? __x64_sys_sendmsg+0x80/0x80 [ 2544.154962][T27724] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2544.160856][T27724] do_syscall_64+0x4c/0xa0 [ 2544.165263][T27724] ? clear_bhb_loop+0x60/0xb0 [ 2544.169934][T27724] ? clear_bhb_loop+0x60/0xb0 [ 2544.174615][T27724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2544.180502][T27724] RIP: 0033:0x7fec0db9ce59 [ 2544.184909][T27724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2544.204503][T27724] RSP: 002b:00007fec0ea2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2544.212909][T27724] RAX: ffffffffffffffda RBX: 00007fec0de16090 RCX: 00007fec0db9ce59 [ 2544.220874][T27724] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2544.228842][T27724] RBP: 00007fec0dc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2544.236802][T27724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2544.244769][T27724] R13: 00007fec0de16128 R14: 00007fec0de16090 R15: 00007ffdbac61338 [ 2544.252744][T27724] [ 2544.926843][T27759] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2545.215959][T27766] netlink: 'syz.3.19596': attribute type 3 has an invalid length. [ 2545.319341][T27748] netlink: 'syz.4.19591': attribute type 41 has an invalid length. [ 2545.440186][T27750] device aaaaaaaaaaaaaaa entered promiscuous mode [ 2546.194403][T27786] netlink: 'syz.2.19603': attribute type 21 has an invalid length. [ 2546.345498][T27795] netlink: 'syz.1.19606': attribute type 2 has an invalid length. [ 2546.384344][T27795] __nla_validate_parse: 6 callbacks suppressed [ 2546.384361][T27795] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.19606'. [ 2546.510199][T27800] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.19608'. [ 2546.589046][T27800] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2546.640358][T27800] CPU: 0 PID: 27800 Comm: syz.2.19608 Not tainted syzkaller #0 [ 2546.647956][T27800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2546.658004][T27800] Call Trace: [ 2546.661274][T27800] [ 2546.664197][T27800] dump_stack_lvl+0x188/0x24e [ 2546.668874][T27800] ? show_regs_print_info+0x12/0x12 [ 2546.674066][T27800] ? load_image+0x400/0x400 [ 2546.678576][T27800] sysfs_warn_dup+0x8a/0xa0 [ 2546.683079][T27800] sysfs_do_create_link_sd+0xc0/0x110 [ 2546.688448][T27800] device_add+0x7f6/0x1000 [ 2546.692870][T27800] wiphy_register+0x1d9f/0x2ac0 [ 2546.697725][T27800] ? cfg80211_event_work+0x40/0x40 [ 2546.702827][T27800] ? minstrel_ht_alloc+0x894/0xa20 [ 2546.707932][T27800] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2546.714000][T27800] ieee80211_register_hw+0x2d00/0x39f0 [ 2546.719457][T27800] ? ieee80211_register_hw+0xec1/0x39f0 [ 2546.724990][T27800] ? ieee80211_register_hw+0xec1/0x39f0 [ 2546.730531][T27800] ? ieee80211_tasklet_handler+0x20/0x20 [ 2546.736164][T27800] ? memset+0x1e/0x40 [ 2546.740136][T27800] ? __hrtimer_init+0x186/0x270 [ 2546.744980][T27800] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2546.750705][T27800] hwsim_new_radio_nl+0xafa/0xce0 [ 2546.755733][T27800] genl_family_rcv_msg_doit+0x22a/0x330 [ 2546.761270][T27800] ? end_current_label_crit_section+0x170/0x170 [ 2546.767510][T27800] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2546.773405][T27800] ? bpf_lsm_capable+0x5/0x10 [ 2546.778077][T27800] ? security_capable+0x85/0xb0 [ 2546.782927][T27800] genl_rcv_msg+0x604/0x790 [ 2546.787435][T27800] ? perf_trace_preemptirq_template+0x268/0x320 [ 2546.793675][T27800] ? genl_bind+0x360/0x360 [ 2546.798083][T27800] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2546.804410][T27800] netlink_rcv_skb+0x1fb/0x450 [ 2546.809167][T27800] ? genl_bind+0x360/0x360 [ 2546.813584][T27800] ? netlink_ack+0x1170/0x1170 [ 2546.818348][T27800] ? down_read+0x1a8/0x2d0 [ 2546.822782][T27800] genl_rcv+0x24/0x40 [ 2546.826761][T27800] netlink_unicast+0x74d/0x8d0 [ 2546.831522][T27800] netlink_sendmsg+0x8ad/0xbd0 [ 2546.836283][T27800] ? netlink_getsockopt+0x550/0x550 [ 2546.841475][T27800] ? aa_sock_msg_perm+0x94/0x150 [ 2546.846425][T27800] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2546.851706][T27800] ? security_socket_sendmsg+0x7c/0xa0 [ 2546.857158][T27800] ? netlink_getsockopt+0x550/0x550 [ 2546.862370][T27800] ____sys_sendmsg+0x5be/0x970 [ 2546.867131][T27800] ? __sys_sendmsg_sock+0x30/0x30 [ 2546.872145][T27800] ? __import_iovec+0x315/0x500 [ 2546.876994][T27800] ? import_iovec+0x6f/0xa0 [ 2546.881488][T27800] ___sys_sendmsg+0x2a2/0x360 [ 2546.886164][T27800] ? __sys_sendmsg+0x290/0x290 [ 2546.890933][T27800] ? lockdep_hardirqs_on+0x94/0x140 [ 2546.896147][T27800] __se_sys_sendmsg+0x1bb/0x2a0 [ 2546.900994][T27800] ? __x64_sys_sendmsg+0x80/0x80 [ 2546.905933][T27800] ? lockdep_hardirqs_on+0x94/0x140 [ 2546.911127][T27800] do_syscall_64+0x4c/0xa0 [ 2546.915539][T27800] ? clear_bhb_loop+0x60/0xb0 [ 2546.920304][T27800] ? clear_bhb_loop+0x60/0xb0 [ 2546.924978][T27800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2546.930864][T27800] RIP: 0033:0x7fd70f59ce59 [ 2546.935270][T27800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2546.954895][T27800] RSP: 002b:00007fd710501028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2546.963311][T27800] RAX: ffffffffffffffda RBX: 00007fd70f816090 RCX: 00007fd70f59ce59 [ 2546.971277][T27800] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2546.979245][T27800] RBP: 00007fd70f632e6f R08: 0000000000000000 R09: 0000000000000000 [ 2546.987206][T27800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2546.995168][T27800] R13: 00007fd70f816128 R14: 00007fd70f816090 R15: 00007ffc5b1daf18 [ 2547.003143][T27800] [ 2547.232811][T27806] netlink: 'syz.4.19609': attribute type 3 has an invalid length. [ 2547.287534][T27806] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.19609'. [ 2547.604927][T27824] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.19612'. [ 2547.644611][T27824] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2547.732494][T27812] netlink: 'syz.0.19611': attribute type 41 has an invalid length. [ 2547.770747][T27820] netlink: 144 bytes leftover after parsing attributes in process `syz.4.19612'. [ 2549.119522][T27854] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.19620'. [ 2549.176027][T27854] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2549.216885][T27854] CPU: 1 PID: 27854 Comm: syz.2.19620 Not tainted syzkaller #0 [ 2549.224481][T27854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2549.234556][T27854] Call Trace: [ 2549.237858][T27854] [ 2549.240806][T27854] dump_stack_lvl+0x188/0x24e [ 2549.245515][T27854] ? show_regs_print_info+0x12/0x12 [ 2549.250733][T27854] ? load_image+0x400/0x400 [ 2549.255273][T27854] sysfs_warn_dup+0x8a/0xa0 [ 2549.259801][T27854] sysfs_do_create_link_sd+0xc0/0x110 [ 2549.265203][T27854] device_add+0x7f6/0x1000 [ 2549.269651][T27854] wiphy_register+0x1d9f/0x2ac0 [ 2549.274540][T27854] ? cfg80211_event_work+0x40/0x40 [ 2549.279673][T27854] ? minstrel_ht_alloc+0x894/0xa20 [ 2549.284809][T27854] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2549.290901][T27854] ieee80211_register_hw+0x2d00/0x39f0 [ 2549.296390][T27854] ? ieee80211_register_hw+0xec1/0x39f0 [ 2549.301951][T27854] ? ieee80211_register_hw+0xec1/0x39f0 [ 2549.307524][T27854] ? ieee80211_tasklet_handler+0x20/0x20 [ 2549.313190][T27854] ? memset+0x1e/0x40 [ 2549.317183][T27854] ? __hrtimer_init+0x186/0x270 [ 2549.322046][T27854] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2549.327780][T27854] hwsim_new_radio_nl+0xafa/0xce0 [ 2549.332809][T27854] genl_family_rcv_msg_doit+0x22a/0x330 [ 2549.338350][T27854] ? end_current_label_crit_section+0x170/0x170 [ 2549.344591][T27854] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2549.350482][T27854] ? bpf_lsm_capable+0x5/0x10 [ 2549.355153][T27854] ? security_capable+0x85/0xb0 [ 2549.360008][T27854] genl_rcv_msg+0x604/0x790 [ 2549.364513][T27854] ? genl_bind+0x360/0x360 [ 2549.368919][T27854] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2549.375248][T27854] netlink_rcv_skb+0x1fb/0x450 [ 2549.380002][T27854] ? genl_bind+0x360/0x360 [ 2549.384411][T27854] ? netlink_ack+0x1170/0x1170 [ 2549.389175][T27854] ? down_read+0x1a8/0x2d0 [ 2549.393586][T27854] genl_rcv+0x24/0x40 [ 2549.397557][T27854] netlink_unicast+0x74d/0x8d0 [ 2549.402324][T27854] netlink_sendmsg+0x8ad/0xbd0 [ 2549.407085][T27854] ? netlink_getsockopt+0x550/0x550 [ 2549.412280][T27854] ? aa_sock_msg_perm+0x94/0x150 [ 2549.417209][T27854] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2549.422487][T27854] ? security_socket_sendmsg+0x7c/0xa0 [ 2549.427939][T27854] ? netlink_getsockopt+0x550/0x550 [ 2549.433131][T27854] ____sys_sendmsg+0x5be/0x970 [ 2549.437891][T27854] ? __sys_sendmsg_sock+0x30/0x30 [ 2549.442903][T27854] ? __import_iovec+0x315/0x500 [ 2549.447749][T27854] ? import_iovec+0x6f/0xa0 [ 2549.452249][T27854] ___sys_sendmsg+0x2a2/0x360 [ 2549.456920][T27854] ? __sys_sendmsg+0x290/0x290 [ 2549.461691][T27854] ? ktime_get_real_ts64+0x440/0x440 [ 2549.467422][T27854] __se_sys_sendmsg+0x1bb/0x2a0 [ 2549.472265][T27854] ? __x64_sys_sendmsg+0x80/0x80 [ 2549.477206][T27854] ? lockdep_hardirqs_on+0x94/0x140 [ 2549.482399][T27854] do_syscall_64+0x4c/0xa0 [ 2549.486813][T27854] ? clear_bhb_loop+0x60/0xb0 [ 2549.491487][T27854] ? clear_bhb_loop+0x60/0xb0 [ 2549.496160][T27854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2549.502049][T27854] RIP: 0033:0x7fd70f59ce59 [ 2549.506466][T27854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2549.526067][T27854] RSP: 002b:00007fd710501028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2549.534472][T27854] RAX: ffffffffffffffda RBX: 00007fd70f816090 RCX: 00007fd70f59ce59 [ 2549.542433][T27854] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2549.550395][T27854] RBP: 00007fd70f632e6f R08: 0000000000000000 R09: 0000000000000000 [ 2549.558355][T27854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2549.566320][T27854] R13: 00007fd70f816128 R14: 00007fd70f816090 R15: 00007ffc5b1daf18 [ 2549.574294][T27854] [ 2549.689239][T27860] netlink: 'syz.4.19622': attribute type 2 has an invalid length. [ 2549.790155][T27860] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.19622'. [ 2552.006871][T27881] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19627'. [ 2552.067260][T27877] netlink: 'syz.0.19636': attribute type 3 has an invalid length. [ 2552.084846][T27882] netlink: 'syz.2.19629': attribute type 41 has an invalid length. [ 2552.116407][T27877] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.19636'. [ 2552.125086][T27887] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.19626'. [ 2552.184988][T27887] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2552.213767][T27887] CPU: 0 PID: 27887 Comm: syz.3.19626 Not tainted syzkaller #0 [ 2552.221359][T27887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2552.231428][T27887] Call Trace: [ 2552.234718][T27887] [ 2552.237667][T27887] dump_stack_lvl+0x188/0x24e [ 2552.242371][T27887] ? show_regs_print_info+0x12/0x12 [ 2552.247589][T27887] ? load_image+0x400/0x400 [ 2552.252128][T27887] sysfs_warn_dup+0x8a/0xa0 [ 2552.256656][T27887] sysfs_do_create_link_sd+0xc0/0x110 [ 2552.262059][T27887] device_add+0x7f6/0x1000 [ 2552.266513][T27887] wiphy_register+0x1d9f/0x2ac0 [ 2552.271407][T27887] ? cfg80211_event_work+0x40/0x40 [ 2552.276537][T27887] ? minstrel_ht_alloc+0x894/0xa20 [ 2552.281656][T27887] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2552.287721][T27887] ieee80211_register_hw+0x2d00/0x39f0 [ 2552.293184][T27887] ? ieee80211_register_hw+0xec1/0x39f0 [ 2552.298723][T27887] ? ieee80211_register_hw+0xec1/0x39f0 [ 2552.304274][T27887] ? ieee80211_tasklet_handler+0x20/0x20 [ 2552.309913][T27887] ? memset+0x1e/0x40 [ 2552.313891][T27887] ? __hrtimer_init+0x186/0x270 [ 2552.318738][T27887] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2552.324464][T27887] hwsim_new_radio_nl+0xafa/0xce0 [ 2552.329512][T27887] genl_family_rcv_msg_doit+0x22a/0x330 [ 2552.335071][T27887] ? end_current_label_crit_section+0x170/0x170 [ 2552.341364][T27887] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2552.347301][T27887] ? bpf_lsm_capable+0x5/0x10 [ 2552.351982][T27887] ? security_capable+0x85/0xb0 [ 2552.356859][T27887] genl_rcv_msg+0x604/0x790 [ 2552.361399][T27887] ? genl_bind+0x360/0x360 [ 2552.365848][T27887] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2552.372192][T27887] netlink_rcv_skb+0x1fb/0x450 [ 2552.376957][T27887] ? genl_bind+0x360/0x360 [ 2552.381369][T27887] ? netlink_ack+0x1170/0x1170 [ 2552.386132][T27887] ? down_read+0x1a8/0x2d0 [ 2552.390546][T27887] genl_rcv+0x24/0x40 [ 2552.394528][T27887] netlink_unicast+0x74d/0x8d0 [ 2552.399296][T27887] netlink_sendmsg+0x8ad/0xbd0 [ 2552.404061][T27887] ? netlink_getsockopt+0x550/0x550 [ 2552.409258][T27887] ? aa_sock_msg_perm+0x94/0x150 [ 2552.414189][T27887] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2552.419470][T27887] ? security_socket_sendmsg+0x7c/0xa0 [ 2552.424925][T27887] ? netlink_getsockopt+0x550/0x550 [ 2552.430119][T27887] ____sys_sendmsg+0x5be/0x970 [ 2552.434881][T27887] ? __sys_sendmsg_sock+0x30/0x30 [ 2552.439896][T27887] ? __import_iovec+0x315/0x500 [ 2552.444756][T27887] ? import_iovec+0x6f/0xa0 [ 2552.449252][T27887] ___sys_sendmsg+0x2a2/0x360 [ 2552.453925][T27887] ? __sys_sendmsg+0x290/0x290 [ 2552.458698][T27887] ? ktime_get_real_ts64+0x440/0x440 [ 2552.464367][T27887] __se_sys_sendmsg+0x1bb/0x2a0 [ 2552.469231][T27887] ? __x64_sys_sendmsg+0x80/0x80 [ 2552.474184][T27887] ? lockdep_hardirqs_on+0x94/0x140 [ 2552.479401][T27887] do_syscall_64+0x4c/0xa0 [ 2552.483819][T27887] ? clear_bhb_loop+0x60/0xb0 [ 2552.488495][T27887] ? clear_bhb_loop+0x60/0xb0 [ 2552.493172][T27887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2552.499065][T27887] RIP: 0033:0x7fc63399ce59 [ 2552.503482][T27887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2552.523088][T27887] RSP: 002b:00007fc631bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2552.531496][T27887] RAX: ffffffffffffffda RBX: 00007fc633c16090 RCX: 00007fc63399ce59 [ 2552.539459][T27887] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2552.547420][T27887] RBP: 00007fc633a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2552.555383][T27887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2552.563350][T27887] R13: 00007fc633c16128 R14: 00007fc633c16090 R15: 00007ffd004e3428 [ 2552.571331][T27887] [ 2553.593271][T27912] device aaaaaaaaaaaaaaa entered promiscuous mode [ 2553.740910][T27929] netlink: 'syz.4.19640': attribute type 21 has an invalid length. [ 2553.767196][T27929] netlink: 128 bytes leftover after parsing attributes in process `syz.4.19640'. [ 2553.791621][T27929] netlink: 3 bytes leftover after parsing attributes in process `syz.4.19640'. [ 2553.824597][T27931] netlink: 'syz.1.19639': attribute type 10 has an invalid length. [ 2553.836492][T27931] netlink: 168 bytes leftover after parsing attributes in process `syz.1.19639'. [ 2553.857068][T27934] netlink: 'syz.1.19639': attribute type 10 has an invalid length. [ 2554.031312][T27939] netlink: 'syz.4.19642': attribute type 3 has an invalid length. [ 2554.049862][T27939] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.19642'. [ 2554.136352][T27941] netlink: 'syz.3.19643': attribute type 10 has an invalid length. [ 2554.160512][T27943] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19644'. [ 2554.318686][T27945] netlink: 'syz.4.19646': attribute type 41 has an invalid length. [ 2555.698437][T27992] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.19654'. [ 2555.737484][T27980] netlink: 'syz.3.19655': attribute type 10 has an invalid length. [ 2555.751438][T27980] netlink: 168 bytes leftover after parsing attributes in process `syz.3.19655'. [ 2555.770322][T27985] netlink: 'syz.3.19655': attribute type 10 has an invalid length. [ 2555.797589][T27978] device aaaaaaaaaaaaaaa entered promiscuous mode [ 2555.807603][T27992] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2555.816127][T27992] CPU: 0 PID: 27992 Comm: syz.1.19654 Not tainted syzkaller #0 [ 2555.823700][T27992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2555.833768][T27992] Call Trace: [ 2555.837057][T27992] [ 2555.840000][T27992] dump_stack_lvl+0x188/0x24e [ 2555.844703][T27992] ? show_regs_print_info+0x12/0x12 [ 2555.849918][T27992] ? load_image+0x400/0x400 [ 2555.854462][T27992] sysfs_warn_dup+0x8a/0xa0 [ 2555.858987][T27992] sysfs_do_create_link_sd+0xc0/0x110 [ 2555.864386][T27992] device_add+0x7f6/0x1000 [ 2555.868828][T27992] wiphy_register+0x1d9f/0x2ac0 [ 2555.873715][T27992] ? cfg80211_event_work+0x40/0x40 [ 2555.878840][T27992] ? minstrel_ht_alloc+0x894/0xa20 [ 2555.883971][T27992] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2555.890067][T27992] ieee80211_register_hw+0x2d00/0x39f0 [ 2555.895547][T27992] ? ieee80211_register_hw+0xec1/0x39f0 [ 2555.901109][T27992] ? ieee80211_register_hw+0xec1/0x39f0 [ 2555.906676][T27992] ? ieee80211_tasklet_handler+0x20/0x20 [ 2555.912333][T27992] ? memset+0x1e/0x40 [ 2555.916329][T27992] ? __hrtimer_init+0x186/0x270 [ 2555.921196][T27992] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2555.926946][T27992] hwsim_new_radio_nl+0xafa/0xce0 [ 2555.931994][T27992] genl_family_rcv_msg_doit+0x22a/0x330 [ 2555.937558][T27992] ? end_current_label_crit_section+0x170/0x170 [ 2555.943816][T27992] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2555.949736][T27992] ? bpf_lsm_capable+0x5/0x10 [ 2555.954421][T27992] ? security_capable+0x85/0xb0 [ 2555.959290][T27992] genl_rcv_msg+0x604/0x790 [ 2555.963809][T27992] ? lock_chain_count+0x20/0x20 [ 2555.968690][T27992] ? genl_bind+0x360/0x360 [ 2555.973115][T27992] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2555.979468][T27992] netlink_rcv_skb+0x1fb/0x450 [ 2555.984236][T27992] ? genl_bind+0x360/0x360 [ 2555.988641][T27992] ? netlink_ack+0x1170/0x1170 [ 2555.993398][T27992] ? down_read+0x1a8/0x2d0 [ 2555.997798][T27992] genl_rcv+0x24/0x40 [ 2556.001767][T27992] netlink_unicast+0x74d/0x8d0 [ 2556.006518][T27992] netlink_sendmsg+0x8ad/0xbd0 [ 2556.011269][T27992] ? netlink_getsockopt+0x550/0x550 [ 2556.016447][T27992] ? aa_sock_msg_perm+0x94/0x150 [ 2556.021371][T27992] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2556.026637][T27992] ? security_socket_sendmsg+0x7c/0xa0 [ 2556.032080][T27992] ? netlink_getsockopt+0x550/0x550 [ 2556.037259][T27992] ____sys_sendmsg+0x5be/0x970 [ 2556.042014][T27992] ? __sys_sendmsg_sock+0x30/0x30 [ 2556.047027][T27992] ? __import_iovec+0x315/0x500 [ 2556.051875][T27992] ? import_iovec+0x6f/0xa0 [ 2556.056373][T27992] ___sys_sendmsg+0x2a2/0x360 [ 2556.061047][T27992] ? __sys_sendmsg+0x290/0x290 [ 2556.066264][T27992] ? trace_call_bpf+0xbf/0x6b0 [ 2556.071037][T27992] __se_sys_sendmsg+0x1bb/0x2a0 [ 2556.075962][T27992] ? __x64_sys_sendmsg+0x80/0x80 [ 2556.080892][T27992] ? lockdep_hardirqs_on+0x94/0x140 [ 2556.086081][T27992] do_syscall_64+0x4c/0xa0 [ 2556.090529][T27992] ? clear_bhb_loop+0x60/0xb0 [ 2556.095191][T27992] ? clear_bhb_loop+0x60/0xb0 [ 2556.099874][T27992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2556.105773][T27992] RIP: 0033:0x7fec0db9ce59 [ 2556.110177][T27992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2556.129780][T27992] RSP: 002b:00007fec0e9c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2556.138183][T27992] RAX: ffffffffffffffda RBX: 00007fec0de16360 RCX: 00007fec0db9ce59 [ 2556.146155][T27992] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2556.154114][T27992] RBP: 00007fec0dc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2556.162070][T27992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2556.170032][T27992] R13: 00007fec0de163f8 R14: 00007fec0de16360 R15: 00007ffdbac61338 [ 2556.178012][T27992] [ 2557.316560][T28021] __nla_validate_parse: 2 callbacks suppressed [ 2557.316593][T28021] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19664'. [ 2557.389425][T28027] device syzkaller0 entered promiscuous mode [ 2558.366715][T28051] validate_nla: 2 callbacks suppressed [ 2558.366755][T28051] netlink: 'syz.2.19671': attribute type 3 has an invalid length. [ 2558.400130][T28051] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.19671'. [ 2558.803141][T28049] device aaaaaaaaaaaaaaa entered promiscuous mode [ 2559.056595][T28067] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.19675'. [ 2559.077730][T28065] netlink: 128 bytes leftover after parsing attributes in process `syz.2.19676'. [ 2559.112668][T28065] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2559.175726][T28067] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2559.204510][T28067] CPU: 0 PID: 28067 Comm: syz.0.19675 Not tainted syzkaller #0 [ 2559.212093][T28067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2559.222136][T28067] Call Trace: [ 2559.225410][T28067] [ 2559.228347][T28067] dump_stack_lvl+0x188/0x24e [ 2559.233041][T28067] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2559.239226][T28067] ? show_regs_print_info+0x12/0x12 [ 2559.244447][T28067] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2559.250631][T28067] ? dump_stack+0x5/0x12 [ 2559.254900][T28067] sysfs_warn_dup+0x8a/0xa0 [ 2559.259437][T28067] sysfs_do_create_link_sd+0xc0/0x110 [ 2559.264837][T28067] device_add+0x7f6/0x1000 [ 2559.269279][T28067] wiphy_register+0x1d9f/0x2ac0 [ 2559.274149][T28067] ? cfg80211_event_work+0x40/0x40 [ 2559.279296][T28067] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2559.285466][T28067] ieee80211_register_hw+0x2d00/0x39f0 [ 2559.290932][T28067] ? ieee80211_register_hw+0xec1/0x39f0 [ 2559.296471][T28067] ? ieee80211_register_hw+0xec1/0x39f0 [ 2559.302014][T28067] ? ieee80211_tasklet_handler+0x20/0x20 [ 2559.307638][T28067] ? lockdep_hardirqs_on+0x94/0x140 [ 2559.312832][T28067] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2559.318992][T28067] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2559.324719][T28067] hwsim_new_radio_nl+0xafa/0xce0 [ 2559.329745][T28067] genl_family_rcv_msg_doit+0x22a/0x330 [ 2559.335287][T28067] ? end_current_label_crit_section+0x170/0x170 [ 2559.341522][T28067] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2559.347414][T28067] ? bpf_lsm_capable+0x5/0x10 [ 2559.352092][T28067] ? security_capable+0x85/0xb0 [ 2559.356941][T28067] genl_rcv_msg+0x604/0x790 [ 2559.361450][T28067] ? genl_bind+0x360/0x360 [ 2559.365857][T28067] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2559.372186][T28067] netlink_rcv_skb+0x1fb/0x450 [ 2559.376944][T28067] ? genl_bind+0x360/0x360 [ 2559.381356][T28067] ? netlink_ack+0x1170/0x1170 [ 2559.386120][T28067] ? down_read+0x1a8/0x2d0 [ 2559.390542][T28067] genl_rcv+0x24/0x40 [ 2559.394514][T28067] netlink_unicast+0x74d/0x8d0 [ 2559.399281][T28067] netlink_sendmsg+0x8ad/0xbd0 [ 2559.404046][T28067] ? netlink_getsockopt+0x550/0x550 [ 2559.409239][T28067] ? aa_sock_msg_perm+0x94/0x150 [ 2559.414168][T28067] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2559.419444][T28067] ? security_socket_sendmsg+0x7c/0xa0 [ 2559.424899][T28067] ? netlink_getsockopt+0x550/0x550 [ 2559.430094][T28067] ____sys_sendmsg+0x5be/0x970 [ 2559.434854][T28067] ? __sys_sendmsg_sock+0x30/0x30 [ 2559.439869][T28067] ? __import_iovec+0x315/0x500 [ 2559.444726][T28067] ? import_iovec+0x6f/0xa0 [ 2559.449222][T28067] ___sys_sendmsg+0x2a2/0x360 [ 2559.453899][T28067] ? __sys_sendmsg+0x290/0x290 [ 2559.458673][T28067] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2559.464408][T28067] __se_sys_sendmsg+0x1bb/0x2a0 [ 2559.469258][T28067] ? __x64_sys_sendmsg+0x80/0x80 [ 2559.474202][T28067] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2559.480094][T28067] do_syscall_64+0x4c/0xa0 [ 2559.484501][T28067] ? clear_bhb_loop+0x60/0xb0 [ 2559.489170][T28067] ? clear_bhb_loop+0x60/0xb0 [ 2559.493842][T28067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2559.499726][T28067] RIP: 0033:0x7fa53719ce59 [ 2559.504132][T28067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2559.523728][T28067] RSP: 002b:00007fa538119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2559.532130][T28067] RAX: ffffffffffffffda RBX: 00007fa537416090 RCX: 00007fa53719ce59 [ 2559.540091][T28067] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2559.548051][T28067] RBP: 00007fa537232e6f R08: 0000000000000000 R09: 0000000000000000 [ 2559.556014][T28067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2559.563976][T28067] R13: 00007fa537416128 R14: 00007fa537416090 R15: 00007fffa6097378 [ 2559.571953][T28067] [ 2559.869547][T28082] netlink: 'syz.3.19682': attribute type 3 has an invalid length. [ 2559.890241][T28082] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.19682'. [ 2560.098209][T28089] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19683'. [ 2560.333517][T28095] netlink: 'syz.3.19686': attribute type 3 has an invalid length. [ 2560.354298][T28095] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.19686'. [ 2561.080139][T28117] netlink: 'syz.4.19691': attribute type 10 has an invalid length. [ 2561.235094][T28127] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.19694'. [ 2561.284493][T28127] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2561.310063][T28127] CPU: 1 PID: 28127 Comm: syz.1.19694 Not tainted syzkaller #0 [ 2561.317666][T28127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2561.327744][T28127] Call Trace: [ 2561.331047][T28127] [ 2561.333998][T28127] dump_stack_lvl+0x188/0x24e [ 2561.338712][T28127] ? show_regs_print_info+0x12/0x12 [ 2561.343937][T28127] ? load_image+0x400/0x400 [ 2561.348480][T28127] sysfs_warn_dup+0x8a/0xa0 [ 2561.353011][T28127] sysfs_do_create_link_sd+0xc0/0x110 [ 2561.358420][T28127] device_add+0x7f6/0x1000 [ 2561.362869][T28127] wiphy_register+0x1d9f/0x2ac0 [ 2561.367739][T28127] ? cfg80211_event_work+0x40/0x40 [ 2561.372848][T28127] ? minstrel_ht_alloc+0x894/0xa20 [ 2561.377962][T28127] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2561.384034][T28127] ieee80211_register_hw+0x2d00/0x39f0 [ 2561.389493][T28127] ? lockdep_hardirqs_on+0x94/0x140 [ 2561.394717][T28127] ? ieee80211_register_hw+0xec1/0x39f0 [ 2561.400264][T28127] ? ieee80211_register_hw+0xec1/0x39f0 [ 2561.405821][T28127] ? ieee80211_tasklet_handler+0x20/0x20 [ 2561.411461][T28127] ? memset+0x1e/0x40 [ 2561.415443][T28127] ? __hrtimer_init+0x186/0x270 [ 2561.420297][T28127] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2561.426034][T28127] hwsim_new_radio_nl+0xafa/0xce0 [ 2561.431068][T28127] genl_family_rcv_msg_doit+0x22a/0x330 [ 2561.436610][T28127] ? end_current_label_crit_section+0x170/0x170 [ 2561.442846][T28127] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2561.448736][T28127] ? bpf_lsm_capable+0x5/0x10 [ 2561.453409][T28127] ? security_capable+0x85/0xb0 [ 2561.458260][T28127] genl_rcv_msg+0x604/0x790 [ 2561.462765][T28127] ? genl_bind+0x360/0x360 [ 2561.467171][T28127] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2561.473503][T28127] netlink_rcv_skb+0x1fb/0x450 [ 2561.478259][T28127] ? genl_bind+0x360/0x360 [ 2561.482675][T28127] ? netlink_ack+0x1170/0x1170 [ 2561.487438][T28127] ? down_read+0x1a8/0x2d0 [ 2561.491852][T28127] genl_rcv+0x24/0x40 [ 2561.495827][T28127] netlink_unicast+0x74d/0x8d0 [ 2561.500591][T28127] netlink_sendmsg+0x8ad/0xbd0 [ 2561.505353][T28127] ? netlink_getsockopt+0x550/0x550 [ 2561.510545][T28127] ? aa_sock_msg_perm+0x94/0x150 [ 2561.515475][T28127] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2561.520754][T28127] ? security_socket_sendmsg+0x7c/0xa0 [ 2561.526204][T28127] ? netlink_getsockopt+0x550/0x550 [ 2561.531394][T28127] ____sys_sendmsg+0x5be/0x970 [ 2561.536167][T28127] ? __sys_sendmsg_sock+0x30/0x30 [ 2561.541180][T28127] ? __import_iovec+0x315/0x500 [ 2561.546032][T28127] ? import_iovec+0x6f/0xa0 [ 2561.550531][T28127] ___sys_sendmsg+0x2a2/0x360 [ 2561.555205][T28127] ? __sys_sendmsg+0x290/0x290 [ 2561.559968][T28127] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2561.565953][T28127] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2561.572100][T28127] ? lockdep_hardirqs_on+0x94/0x140 [ 2561.577298][T28127] ? __se_sys_sendmsg+0xf4/0x2a0 [ 2561.582231][T28127] ? kasan_check_range+0x80/0x290 [ 2561.587260][T28127] __se_sys_sendmsg+0x1bb/0x2a0 [ 2561.592110][T28127] ? __x64_sys_sendmsg+0x80/0x80 [ 2561.597068][T28127] ? lockdep_hardirqs_on+0x94/0x140 [ 2561.602274][T28127] do_syscall_64+0x4c/0xa0 [ 2561.606686][T28127] ? clear_bhb_loop+0x60/0xb0 [ 2561.611363][T28127] ? clear_bhb_loop+0x60/0xb0 [ 2561.616041][T28127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2561.621934][T28127] RIP: 0033:0x7fec0db9ce59 [ 2561.626345][T28127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2561.645958][T28127] RSP: 002b:00007fec0ea2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2561.654378][T28127] RAX: ffffffffffffffda RBX: 00007fec0de16090 RCX: 00007fec0db9ce59 [ 2561.662344][T28127] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2561.670305][T28127] RBP: 00007fec0dc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2561.678271][T28127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2561.686233][T28127] R13: 00007fec0de16128 R14: 00007fec0de16090 R15: 00007ffdbac61338 [ 2561.694211][T28127] [ 2561.901363][T28131] netlink: 'syz.4.19695': attribute type 10 has an invalid length. [ 2561.909381][T28131] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.19695'. [ 2562.332597][T28145] netlink: 'syz.0.19699': attribute type 3 has an invalid length. [ 2562.346665][T28145] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.19699'. [ 2563.227457][T28161] netlink: 'syz.3.19705': attribute type 3 has an invalid length. [ 2563.260623][T28161] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.19705'. [ 2563.295349][T28166] netlink: 'syz.0.19706': attribute type 21 has an invalid length. [ 2563.344126][T28166] netlink: 128 bytes leftover after parsing attributes in process `syz.0.19706'. [ 2563.373138][T28166] netlink: 3 bytes leftover after parsing attributes in process `syz.0.19706'. [ 2563.650862][T28179] netlink: 128 bytes leftover after parsing attributes in process `syz.3.19709'. [ 2563.661917][T28179] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2563.941318][T28189] netlink: 'syz.3.19715': attribute type 3 has an invalid length. [ 2563.949451][T28189] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.19715'. [ 2564.284715][T28204] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.19719'. [ 2564.313008][T28204] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2564.322707][T28204] CPU: 0 PID: 28204 Comm: syz.3.19719 Not tainted syzkaller #0 [ 2564.330284][T28204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2564.340372][T28204] Call Trace: [ 2564.343666][T28204] [ 2564.346612][T28204] dump_stack_lvl+0x188/0x24e [ 2564.351321][T28204] ? show_regs_print_info+0x12/0x12 [ 2564.356541][T28204] ? load_image+0x400/0x400 [ 2564.361090][T28204] sysfs_warn_dup+0x8a/0xa0 [ 2564.365618][T28204] sysfs_do_create_link_sd+0xc0/0x110 [ 2564.371026][T28204] device_add+0x7f6/0x1000 [ 2564.375470][T28204] wiphy_register+0x1d9f/0x2ac0 [ 2564.380367][T28204] ? cfg80211_event_work+0x40/0x40 [ 2564.385496][T28204] ? minstrel_ht_alloc+0x894/0xa20 [ 2564.390635][T28204] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2564.396716][T28204] ieee80211_register_hw+0x2d00/0x39f0 [ 2564.402172][T28204] ? ieee80211_register_hw+0xec1/0x39f0 [ 2564.407703][T28204] ? ieee80211_register_hw+0xec1/0x39f0 [ 2564.413238][T28204] ? ieee80211_tasklet_handler+0x20/0x20 [ 2564.418861][T28204] ? memset+0x1e/0x40 [ 2564.422829][T28204] ? __hrtimer_init+0x186/0x270 [ 2564.427670][T28204] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2564.433390][T28204] hwsim_new_radio_nl+0xafa/0xce0 [ 2564.438413][T28204] genl_family_rcv_msg_doit+0x22a/0x330 [ 2564.443949][T28204] ? end_current_label_crit_section+0x170/0x170 [ 2564.450186][T28204] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2564.456088][T28204] ? bpf_lsm_capable+0x5/0x10 [ 2564.460755][T28204] ? security_capable+0x85/0xb0 [ 2564.465608][T28204] genl_rcv_msg+0x604/0x790 [ 2564.470103][T28204] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2564.476249][T28204] ? genl_bind+0x360/0x360 [ 2564.480649][T28204] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2564.486974][T28204] netlink_rcv_skb+0x1fb/0x450 [ 2564.491725][T28204] ? genl_bind+0x360/0x360 [ 2564.496126][T28204] ? netlink_ack+0x1170/0x1170 [ 2564.500878][T28204] ? down_read+0x1a8/0x2d0 [ 2564.505282][T28204] genl_rcv+0x24/0x40 [ 2564.509254][T28204] netlink_unicast+0x74d/0x8d0 [ 2564.514009][T28204] netlink_sendmsg+0x8ad/0xbd0 [ 2564.518765][T28204] ? netlink_getsockopt+0x550/0x550 [ 2564.523947][T28204] ? __sanitizer_cov_trace_pc+0x3e/0x60 [ 2564.529482][T28204] ? aa_sock_msg_perm+0x94/0x150 [ 2564.534409][T28204] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2564.539690][T28204] ? security_socket_sendmsg+0x7c/0xa0 [ 2564.545142][T28204] ? netlink_getsockopt+0x550/0x550 [ 2564.550329][T28204] ____sys_sendmsg+0x5be/0x970 [ 2564.555084][T28204] ? __sys_sendmsg_sock+0x30/0x30 [ 2564.560094][T28204] ? __import_iovec+0x315/0x500 [ 2564.564935][T28204] ? import_iovec+0x6f/0xa0 [ 2564.569426][T28204] ___sys_sendmsg+0x2a2/0x360 [ 2564.574093][T28204] ? __sys_sendmsg+0x290/0x290 [ 2564.578857][T28204] ? rcu_is_watching+0x11/0xa0 [ 2564.583627][T28204] __se_sys_sendmsg+0x1bb/0x2a0 [ 2564.588468][T28204] ? __x64_sys_sendmsg+0x80/0x80 [ 2564.593399][T28204] ? lockdep_hardirqs_on+0x94/0x140 [ 2564.598595][T28204] do_syscall_64+0x4c/0xa0 [ 2564.603001][T28204] ? clear_bhb_loop+0x60/0xb0 [ 2564.607666][T28204] ? clear_bhb_loop+0x60/0xb0 [ 2564.612332][T28204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2564.618212][T28204] RIP: 0033:0x7fc63399ce59 [ 2564.622610][T28204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2564.642203][T28204] RSP: 002b:00007fc631bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2564.650598][T28204] RAX: ffffffffffffffda RBX: 00007fc633c16090 RCX: 00007fc63399ce59 [ 2564.658554][T28204] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2564.666520][T28204] RBP: 00007fc633a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2564.674504][T28204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2564.682485][T28204] R13: 00007fc633c16128 R14: 00007fc633c16090 R15: 00007ffd004e3428 [ 2564.690493][T28204] [ 2564.894144][T28213] netlink: 'syz.2.19721': attribute type 3 has an invalid length. [ 2564.920099][T28213] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.19721'. [ 2565.345707][T28231] netlink: 'syz.2.19730': attribute type 3 has an invalid length. [ 2565.365213][T28231] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.19730'. [ 2566.405539][T28263] netlink: 'syz.3.19736': attribute type 2 has an invalid length. [ 2566.469815][T28263] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.19736'. [ 2566.740352][T28250] device aaaaaaaaaaaaaaa entered promiscuous mode [ 2566.773242][T28270] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2566.798190][T28270] CPU: 1 PID: 28270 Comm: syz.4.19735 Not tainted syzkaller #0 [ 2566.805789][T28270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2566.815860][T28270] Call Trace: [ 2566.819154][T28270] [ 2566.822103][T28270] dump_stack_lvl+0x188/0x24e [ 2566.826808][T28270] ? show_regs_print_info+0x12/0x12 [ 2566.832028][T28270] ? load_image+0x400/0x400 [ 2566.837026][T28270] sysfs_warn_dup+0x8a/0xa0 [ 2566.841567][T28270] sysfs_do_create_link_sd+0xc0/0x110 [ 2566.846969][T28270] device_add+0x7f6/0x1000 [ 2566.851415][T28270] wiphy_register+0x1d9f/0x2ac0 [ 2566.856312][T28270] ? cfg80211_event_work+0x40/0x40 [ 2566.861444][T28270] ? minstrel_ht_alloc+0x894/0xa20 [ 2566.866583][T28270] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2566.872681][T28270] ieee80211_register_hw+0x2d00/0x39f0 [ 2566.878171][T28270] ? ieee80211_register_hw+0xec1/0x39f0 [ 2566.883732][T28270] ? ieee80211_register_hw+0xec1/0x39f0 [ 2566.889308][T28270] ? ieee80211_tasklet_handler+0x20/0x20 [ 2566.894971][T28270] ? memset+0x1e/0x40 [ 2566.898985][T28270] ? __hrtimer_init+0x186/0x270 [ 2566.903852][T28270] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2566.909588][T28270] hwsim_new_radio_nl+0xafa/0xce0 [ 2566.914622][T28270] genl_family_rcv_msg_doit+0x22a/0x330 [ 2566.920165][T28270] ? end_current_label_crit_section+0x170/0x170 [ 2566.926404][T28270] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2566.932297][T28270] ? bpf_lsm_capable+0x5/0x10 [ 2566.937007][T28270] ? security_capable+0x85/0xb0 [ 2566.941878][T28270] genl_rcv_msg+0x604/0x790 [ 2566.946379][T28270] ? lock_chain_count+0x20/0x20 [ 2566.951240][T28270] ? genl_bind+0x360/0x360 [ 2566.955649][T28270] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2566.961993][T28270] netlink_rcv_skb+0x1fb/0x450 [ 2566.966754][T28270] ? genl_bind+0x360/0x360 [ 2566.971166][T28270] ? netlink_ack+0x1170/0x1170 [ 2566.975931][T28270] ? down_read+0x1a8/0x2d0 [ 2566.980345][T28270] genl_rcv+0x24/0x40 [ 2566.984322][T28270] netlink_unicast+0x74d/0x8d0 [ 2566.989090][T28270] netlink_sendmsg+0x8ad/0xbd0 [ 2566.993856][T28270] ? netlink_getsockopt+0x550/0x550 [ 2566.999068][T28270] ? aa_sock_msg_perm+0x94/0x150 [ 2567.004003][T28270] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2567.009283][T28270] ? security_socket_sendmsg+0x7c/0xa0 [ 2567.014740][T28270] ? netlink_getsockopt+0x550/0x550 [ 2567.019930][T28270] ____sys_sendmsg+0x5be/0x970 [ 2567.024699][T28270] ? __sys_sendmsg_sock+0x30/0x30 [ 2567.029712][T28270] ? __import_iovec+0x315/0x500 [ 2567.034565][T28270] ? import_iovec+0x6f/0xa0 [ 2567.039066][T28270] ___sys_sendmsg+0x2a2/0x360 [ 2567.043737][T28270] ? try_to_wake_up+0x6ae/0x1080 [ 2567.048679][T28270] ? __sys_sendmsg+0x290/0x290 [ 2567.053483][T28270] __se_sys_sendmsg+0x1bb/0x2a0 [ 2567.058339][T28270] ? __x64_sys_sendmsg+0x80/0x80 [ 2567.063282][T28270] ? lockdep_hardirqs_on+0x94/0x140 [ 2567.068480][T28270] do_syscall_64+0x4c/0xa0 [ 2567.072891][T28270] ? clear_bhb_loop+0x60/0xb0 [ 2567.077569][T28270] ? clear_bhb_loop+0x60/0xb0 [ 2567.082251][T28270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2567.088147][T28270] RIP: 0033:0x7f687019ce59 [ 2567.092555][T28270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2567.112158][T28270] RSP: 002b:00007f6870ff9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2567.120566][T28270] RAX: ffffffffffffffda RBX: 00007f6870416360 RCX: 00007f687019ce59 [ 2567.128531][T28270] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2567.136492][T28270] RBP: 00007f6870232e6f R08: 0000000000000000 R09: 0000000000000000 [ 2567.144456][T28270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2567.152419][T28270] R13: 00007f68704163f8 R14: 00007f6870416360 R15: 00007ffc2dc8f9d8 [ 2567.160398][T28270] [ 2567.253941][T28277] netlink: 'syz.0.19738': attribute type 2 has an invalid length. [ 2567.285283][T28276] netlink: 'syz.0.19738': attribute type 10 has an invalid length. [ 2567.697186][T28294] netlink: 'syz.1.19745': attribute type 3 has an invalid length. [ 2567.723890][T28294] __nla_validate_parse: 1 callbacks suppressed [ 2567.723929][T28294] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.19745'. [ 2568.053125][T28302] netlink: 'syz.1.19748': attribute type 21 has an invalid length. [ 2568.110130][T28302] netlink: 128 bytes leftover after parsing attributes in process `syz.1.19748'. [ 2568.162267][T28302] netlink: 3 bytes leftover after parsing attributes in process `syz.1.19748'. [ 2568.704138][T28321] netlink: 'syz.1.19753': attribute type 2 has an invalid length. [ 2568.788862][T28321] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.19753'. [ 2568.936663][T28333] netlink: 'syz.3.19757': attribute type 2 has an invalid length. [ 2568.960742][T28334] netlink: 'syz.3.19757': attribute type 10 has an invalid length. [ 2569.325890][T28338] netlink: 'syz.0.19760': attribute type 3 has an invalid length. [ 2569.371255][T28338] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.19760'. [ 2569.639506][T28345] netlink: 'syz.1.19763': attribute type 3 has an invalid length. [ 2569.712867][T28345] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.19763'. [ 2569.773605][T28349] netlink: 'syz.2.19764': attribute type 10 has an invalid length. [ 2569.963993][T28358] netlink: 'syz.3.19767': attribute type 21 has an invalid length. [ 2569.986848][T28358] netlink: 128 bytes leftover after parsing attributes in process `syz.3.19767'. [ 2570.014904][T28358] netlink: 3 bytes leftover after parsing attributes in process `syz.3.19767'. [ 2570.104432][T28361] netlink: 'syz.1.19768': attribute type 10 has an invalid length. [ 2570.237661][T28366] netlink: 128 bytes leftover after parsing attributes in process `syz.0.19769'. [ 2570.272257][T28366] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2570.447199][T28375] netlink: 'syz.4.19773': attribute type 2 has an invalid length. [ 2570.509967][T28375] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.19773'. [ 2570.955928][T28394] netlink: 'syz.4.19779': attribute type 3 has an invalid length. [ 2570.974214][T28389] netlink: 'syz.2.19775': attribute type 2 has an invalid length. [ 2571.023166][T28392] netlink: 'syz.2.19775': attribute type 10 has an invalid length. [ 2572.061275][T28426] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2572.922814][T28462] __nla_validate_parse: 8 callbacks suppressed [ 2572.922847][T28462] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.19806'. [ 2573.518825][T28478] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.19811'. [ 2573.615265][T28487] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.19812'. [ 2573.651244][T28482] netlink: 128 bytes leftover after parsing attributes in process `syz.2.19815'. [ 2573.730206][T28482] netlink: 3 bytes leftover after parsing attributes in process `syz.2.19815'. [ 2573.905261][T28498] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.19817'. [ 2574.127636][T28508] validate_nla: 17 callbacks suppressed [ 2574.127673][T28508] netlink: 'syz.4.19820': attribute type 3 has an invalid length. [ 2574.149716][T28508] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.19820'. [ 2575.047851][T28534] netlink: 'syz.2.19831': attribute type 21 has an invalid length. [ 2575.070152][T28534] netlink: 128 bytes leftover after parsing attributes in process `syz.2.19831'. [ 2575.079552][T28534] netlink: 3 bytes leftover after parsing attributes in process `syz.2.19831'. [ 2575.335690][T28544] netlink: 'syz.1.19833': attribute type 3 has an invalid length. [ 2575.358327][T28544] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.19833'. [ 2575.629124][T28559] netlink: 'syz.2.19837': attribute type 2 has an invalid length. [ 2576.096180][T28574] netlink: 'syz.2.19845': attribute type 28 has an invalid length. [ 2576.122810][T28572] netlink: 'syz.1.19843': attribute type 39 has an invalid length. [ 2576.259540][T28580] netlink: 'syz.4.19846': attribute type 21 has an invalid length. [ 2576.598008][T28585] netlink: 'syz.3.19850': attribute type 10 has an invalid length. [ 2576.735209][T28599] netlink: 'syz.1.19853': attribute type 10 has an invalid length. [ 2576.904963][T28604] netlink: 'syz.2.19855': attribute type 2 has an invalid length. [ 2577.049754][T28611] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2577.422010][T28625] device wlan1 entered promiscuous mode [ 2578.728291][T28663] __nla_validate_parse: 8 callbacks suppressed [ 2578.728310][T28663] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.19873'. [ 2580.163133][T28690] validate_nla: 7 callbacks suppressed [ 2580.163150][T28690] netlink: 'syz.0.19884': attribute type 3 has an invalid length. [ 2580.186676][T28690] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19884'. [ 2580.257929][T28688] netlink: 'syz.3.19883': attribute type 39 has an invalid length. [ 2580.483799][T28699] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19887'. [ 2580.782459][T28708] device wlan1 entered promiscuous mode [ 2580.951814][T28711] netlink: 'syz.3.19890': attribute type 21 has an invalid length. [ 2580.959771][T28711] netlink: 128 bytes leftover after parsing attributes in process `syz.3.19890'. [ 2581.000893][T28711] netlink: 3 bytes leftover after parsing attributes in process `syz.3.19890'. [ 2583.816502][T28727] netlink: 'syz.2.19897': attribute type 3 has an invalid length. [ 2583.828921][T28727] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.19897'. [ 2583.878208][T28734] netlink: 'syz.1.19893': attribute type 1 has an invalid length. [ 2583.887009][T28734] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.19893'. [ 2583.901304][T28734] netlink: 'syz.1.19893': attribute type 29 has an invalid length. [ 2583.910103][T28734] netlink: 'syz.1.19893': attribute type 29 has an invalid length. [ 2584.114640][T28740] netlink: 160 bytes leftover after parsing attributes in process `syz.0.19899'. [ 2584.176571][T28740] netlink: 'syz.0.19899': attribute type 39 has an invalid length. [ 2584.421430][T28747] netlink: 'syz.2.19903': attribute type 39 has an invalid length. [ 2584.528911][T28757] : port 1(ip6gretap0) entered blocking state [ 2584.535670][T28757] : port 1(ip6gretap0) entered disabled state [ 2584.543589][T28757] device ip6gretap0 entered promiscuous mode [ 2584.556164][T28757] device ip6gretap0 left promiscuous mode [ 2584.566061][T28757] : port 1(ip6gretap0) entered disabled state [ 2585.022622][T28761] netlink: 'syz.3.19907': attribute type 3 has an invalid length. [ 2585.047644][T28761] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.19907'. [ 2585.227892][T28767] netlink: 'syz.4.19911': attribute type 3 has an invalid length. [ 2585.246585][T28767] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.19911'. [ 2585.358557][T28777] netlink: 'syz.3.19914': attribute type 2 has an invalid length. [ 2585.382357][T28777] netlink: 'syz.3.19914': attribute type 10 has an invalid length. [ 2585.956998][T28801] netlink: 'syz.1.19920': attribute type 39 has an invalid length. [ 2586.027197][T28792] netlink: 'syz.4.19919': attribute type 1 has an invalid length. [ 2586.070252][T28795] netlink: 'syz.4.19919': attribute type 29 has an invalid length. [ 2586.130053][T28792] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.19919'. [ 2586.152985][T28795] netlink: 'syz.4.19919': attribute type 29 has an invalid length. [ 2586.294211][T28814] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19924'. [ 2587.225848][T28824] netlink: 'syz.4.19927': attribute type 3 has an invalid length. [ 2587.260127][T28824] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.19927'. [ 2588.115485][T28851] netlink: 'syz.4.19935': attribute type 21 has an invalid length. [ 2588.133971][T28851] netlink: 128 bytes leftover after parsing attributes in process `syz.4.19935'. [ 2588.150225][T28851] netlink: 3 bytes leftover after parsing attributes in process `syz.4.19935'. [ 2588.227870][T28857] netlink: 'syz.2.19937': attribute type 29 has an invalid length. [ 2588.845523][T28878] __nla_validate_parse: 3 callbacks suppressed [ 2588.845555][T28878] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.19943'. [ 2589.067898][T28884] netlink: 156 bytes leftover after parsing attributes in process `syz.4.19945'. [ 2589.283793][T28900] netlink: 128 bytes leftover after parsing attributes in process `syz.0.19950'. [ 2589.290776][T28902] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.19952'. [ 2589.294059][T28900] netlink: 3 bytes leftover after parsing attributes in process `syz.0.19950'. [ 2589.321084][T28902] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19952'. [ 2589.636154][T28914] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.19957'. [ 2589.832770][T28928] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19961'. [ 2589.952858][T28930] netlink: 2 bytes leftover after parsing attributes in process `syz.0.19962'. [ 2590.172368][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.178732][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.282285][T28940] validate_nla: 15 callbacks suppressed [ 2590.282302][T28940] netlink: 'syz.1.19964': attribute type 21 has an invalid length. [ 2590.327900][T28940] netlink: 128 bytes leftover after parsing attributes in process `syz.1.19964'. [ 2593.338840][T28974] netlink: 'syz.2.19974': attribute type 2 has an invalid length. [ 2594.046943][T28998] netlink: 'syz.1.19981': attribute type 10 has an invalid length. [ 2594.061091][T28998] __nla_validate_parse: 2 callbacks suppressed [ 2594.061122][T28998] netlink: 2 bytes leftover after parsing attributes in process `syz.1.19981'. [ 2594.671004][T29027] netlink: 'syz.3.19991': attribute type 2 has an invalid length. [ 2594.678840][T29027] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.19991'. [ 2594.856502][T29035] netlink: 'syz.2.19993': attribute type 21 has an invalid length. [ 2595.142119][T29046] netlink: 'syz.3.19999': attribute type 3 has an invalid length. [ 2595.156311][T29046] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.19999'. [ 2595.564243][T29060] netlink: 'syz.1.20003': attribute type 19 has an invalid length. [ 2595.581617][T29060] netlink: 156 bytes leftover after parsing attributes in process `syz.1.20003'. [ 2596.218464][T29075] netlink: 'syz.1.20008': attribute type 3 has an invalid length. [ 2596.232177][T29075] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20008'. [ 2596.425288][T29084] netlink: 'syz.1.20012': attribute type 3 has an invalid length. [ 2596.442515][T29084] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20012'. [ 2596.729594][T29103] netlink: 'syz.0.20018': attribute type 21 has an invalid length. [ 2596.832842][T29105] netlink: 'syz.1.20021': attribute type 10 has an invalid length. [ 2596.852483][T29105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20021'. [ 2596.916100][T29102] netlink: 'syz.2.20020': attribute type 19 has an invalid length. [ 2596.917835][T29109] netlink: 'syz.3.20023': attribute type 3 has an invalid length. [ 2596.926927][T29102] netlink: 156 bytes leftover after parsing attributes in process `syz.2.20020'. [ 2596.958571][T29109] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.20023'. [ 2597.247982][T29120] netlink: 'syz.2.20027': attribute type 3 has an invalid length. [ 2597.284835][T29120] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.20027'. [ 2600.132035][T29158] netlink: 'syz.3.20036': attribute type 3 has an invalid length. [ 2600.150132][T29158] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.20036'. [ 2600.182402][T29161] netlink: 'syz.1.20044': attribute type 2 has an invalid length. [ 2600.219176][T29161] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.20044'. [ 2600.249842][T29163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20037'. [ 2600.610419][T29178] validate_nla: 1 callbacks suppressed [ 2600.610436][T29178] netlink: 'syz.1.20051': attribute type 2 has an invalid length. [ 2600.714509][T29172] netlink: 'syz.3.20040': attribute type 19 has an invalid length. [ 2600.723544][T29178] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.20051'. [ 2600.733700][T29172] netlink: 156 bytes leftover after parsing attributes in process `syz.3.20040'. [ 2600.989365][T29189] netlink: 'syz.0.20043': attribute type 3 has an invalid length. [ 2601.007373][T29189] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.20043'. [ 2601.153242][T29197] netlink: 'syz.2.20047': attribute type 21 has an invalid length. [ 2601.174546][T29195] netlink: 'syz.4.20049': attribute type 3 has an invalid length. [ 2601.190594][T29197] netlink: 128 bytes leftover after parsing attributes in process `syz.2.20047'. [ 2601.210276][T29195] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20049'. [ 2601.223706][T29197] netlink: 3 bytes leftover after parsing attributes in process `syz.2.20047'. [ 2601.445761][T29213] netlink: 'syz.4.20054': attribute type 10 has an invalid length. [ 2601.467202][T29213] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20054'. [ 2601.553598][T29223] netlink: 'syz.2.20056': attribute type 2 has an invalid length. [ 2602.353568][T29246] netlink: 'syz.3.20064': attribute type 3 has an invalid length. [ 2602.481997][T29253] netlink: 'syz.4.20066': attribute type 3 has an invalid length. [ 2602.593637][T29261] device sit0 entered promiscuous mode [ 2602.697467][T29263] netlink: 'syz.0.20069': attribute type 10 has an invalid length. [ 2603.716309][T29301] : port 1(ip6gretap0) entered blocking state [ 2603.730469][T29301] : port 1(ip6gretap0) entered disabled state [ 2603.744030][T29301] device ip6gretap0 entered promiscuous mode [ 2603.758696][T29301] device ip6gretap0 left promiscuous mode [ 2603.765992][T29301] : port 1(ip6gretap0) entered disabled state [ 2605.429601][T29356] __nla_validate_parse: 15 callbacks suppressed [ 2605.429637][T29356] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.20105'. [ 2605.863641][T29371] validate_nla: 12 callbacks suppressed [ 2605.863668][T29371] netlink: 'syz.1.20109': attribute type 3 has an invalid length. [ 2605.912772][T29371] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20109'. [ 2605.971639][T29376] netlink: 'syz.3.20111': attribute type 10 has an invalid length. [ 2606.011356][T29376] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20111'. [ 2606.142794][T29386] netlink: 'syz.2.20112': attribute type 2 has an invalid length. [ 2606.158379][T29386] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.20112'. [ 2606.766130][T29406] netlink: 'syz.4.20120': attribute type 3 has an invalid length. [ 2606.792130][T29406] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20120'. [ 2607.222674][T29419] netlink: 'syz.3.20124': attribute type 3 has an invalid length. [ 2607.231379][T29419] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.20124'. [ 2607.422079][T29423] netlink: 'syz.3.20126': attribute type 22 has an invalid length. [ 2607.435590][T29423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20126'. [ 2607.537213][T29434] netlink: 'syz.4.20129': attribute type 2 has an invalid length. [ 2607.560049][T29434] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.20129'. [ 2607.820951][T29445] netlink: 'syz.4.20137': attribute type 3 has an invalid length. [ 2607.829301][T29445] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20137'. [ 2607.854688][T29449] device sit0 left promiscuous mode [ 2607.938235][T29450] device sit0 entered promiscuous mode [ 2608.280851][T29463] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.20142'. [ 2608.316422][T29466] netlink: 'syz.4.20143': attribute type 10 has an invalid length. [ 2609.494021][T29480] netlink: 'syz.2.20146': attribute type 2 has an invalid length. [ 2611.229508][T29491] netlink: 'syz.3.20152': attribute type 10 has an invalid length. [ 2611.354531][T29499] netlink: 'syz.3.20152': attribute type 29 has an invalid length. [ 2611.363367][T29499] netlink: 'syz.3.20152': attribute type 29 has an invalid length. [ 2611.373948][T29491] netlink: 'syz.3.20152': attribute type 29 has an invalid length. [ 2611.494725][T29505] netlink: 'syz.4.20156': attribute type 1 has an invalid length. [ 2611.523808][T29505] __nla_validate_parse: 2 callbacks suppressed [ 2611.523841][T29505] netlink: 16134 bytes leftover after parsing attributes in process `syz.4.20156'. [ 2611.622669][T29510] netlink: 'syz.1.20154': attribute type 21 has an invalid length. [ 2611.713561][T29517] device wlan1 entered promiscuous mode [ 2611.733566][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2612.055568][T29528] netlink: 'syz.3.20160': attribute type 2 has an invalid length. [ 2612.079934][T29528] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.20160'. [ 2613.073673][T29558] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.20172'. [ 2613.175002][T29562] netlink: 'syz.4.20175': attribute type 2 has an invalid length. [ 2613.184929][T29562] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.20175'. [ 2613.192216][T29560] : port 1(ip6gretap0) entered blocking state [ 2613.220515][T29560] : port 1(ip6gretap0) entered disabled state [ 2613.235600][T29560] device ip6gretap0 entered promiscuous mode [ 2613.268755][T29566] device ip6gretap0 left promiscuous mode [ 2613.278058][T29566] : port 1(ip6gretap0) entered disabled state [ 2613.424878][T29571] netlink: 'syz.4.20180': attribute type 3 has an invalid length. [ 2613.441073][T29575] netlink: 'syz.0.20178': attribute type 1 has an invalid length. [ 2613.449113][T29575] netlink: 16134 bytes leftover after parsing attributes in process `syz.0.20178'. [ 2613.459248][T29571] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20180'. [ 2613.572430][T29581] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20182'. [ 2613.653480][T29582] device syzkaller0 entered promiscuous mode [ 2614.374270][T29598] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.20185'. [ 2614.470359][T29598] bridge_slave_1: default FDB implementation only supports local addresses [ 2614.584784][T29603] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.20188'. [ 2614.829392][T29610] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.20191'. [ 2616.343179][T29666] validate_nla: 11 callbacks suppressed [ 2616.343196][T29666] netlink: 'syz.4.20205': attribute type 2 has an invalid length. [ 2616.684842][T29675] netlink: 'syz.2.20209': attribute type 3 has an invalid length. [ 2616.694098][T29675] __nla_validate_parse: 5 callbacks suppressed [ 2616.694281][T29675] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.20209'. [ 2617.009738][T29692] device sit0 entered promiscuous mode [ 2617.046239][T29694] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20217'. [ 2617.519338][T29714] netlink: 'syz.4.20225': attribute type 3 has an invalid length. [ 2617.540248][T29714] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20225'. [ 2617.553776][T29717] netlink: 'syz.1.20223': attribute type 2 has an invalid length. [ 2617.571894][T29717] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.20223'. [ 2618.196639][T29737] netlink: 'syz.1.20232': attribute type 39 has an invalid length. [ 2618.218019][T29738] netlink: 'syz.2.20240': attribute type 2 has an invalid length. [ 2618.287172][T29738] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.20240'. [ 2618.332947][T29740] device wlan1 entered promiscuous mode [ 2618.368363][T27699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2618.735008][T29757] device sit0 left promiscuous mode [ 2618.836859][T29754] netlink: 'syz.4.20237': attribute type 3 has an invalid length. [ 2618.870678][T29754] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20237'. [ 2618.970989][T29758] device sit0 entered promiscuous mode [ 2619.398901][T29771] netlink: 'syz.2.20243': attribute type 3 has an invalid length. [ 2619.434981][T29771] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.20243'. [ 2619.767075][T29789] netlink: 'syz.2.20246': attribute type 2 has an invalid length. [ 2619.800219][T29789] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.20246'. [ 2619.899311][T29791] netlink: 'syz.4.20250': attribute type 3 has an invalid length. [ 2619.930378][T29791] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20250'. [ 2620.153452][T29803] device wlan1 entered promiscuous mode [ 2620.166509][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2620.426027][T29813] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20258'. [ 2621.362933][T29847] validate_nla: 10 callbacks suppressed [ 2621.362972][T29847] netlink: 'syz.2.20269': attribute type 3 has an invalid length. [ 2621.404210][T29849] netlink: 'syz.1.20270': attribute type 3 has an invalid length. [ 2621.444181][T29854] netlink: 'syz.4.20272': attribute type 2 has an invalid length. [ 2621.545435][T29857] netlink: 'syz.3.20274': attribute type 1 has an invalid length. [ 2621.666885][T29861] netlink: 'syz.1.20275': attribute type 3 has an invalid length. [ 2621.974993][T29869] __nla_validate_parse: 9 callbacks suppressed [ 2621.975028][T29869] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.20278'. [ 2621.991591][T29873] netlink: 'syz.1.20280': attribute type 10 has an invalid length. [ 2622.002003][T29869] netlink: 43 bytes leftover after parsing attributes in process `syz.4.20278'. [ 2622.061869][T29874] netlink: 14 bytes leftover after parsing attributes in process `syz.2.20279'. [ 2622.377396][T29881] netlink: 'syz.1.20283': attribute type 3 has an invalid length. [ 2622.387395][T29881] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20283'. [ 2622.388754][T29883] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20284'. [ 2622.500993][T29885] netlink: 'syz.1.20285': attribute type 3 has an invalid length. [ 2622.509077][T29885] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20285'. [ 2622.586541][T29891] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20287'. [ 2622.654962][T29893] netlink: 'syz.3.20288': attribute type 2 has an invalid length. [ 2622.684543][T29893] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.20288'. [ 2622.897370][T29902] netlink: 'syz.1.20292': attribute type 1 has an invalid length. [ 2622.915604][T29902] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.20292'. [ 2623.015253][T29900] netlink: 55 bytes leftover after parsing attributes in process `syz.0.20291'. [ 2624.959359][T29968] device wlan1 left promiscuous mode [ 2626.446060][T30026] validate_nla: 16 callbacks suppressed [ 2626.446097][T30026] netlink: 'syz.4.20330': attribute type 10 has an invalid length. [ 2626.649529][T30016] netlink: 'syz.2.20327': attribute type 2 has an invalid length. [ 2626.700014][T30016] netlink: 'syz.2.20327': attribute type 8 has an invalid length. [ 2627.149051][T30043] netlink: 'syz.4.20334': attribute type 2 has an invalid length. [ 2627.176014][T30043] __nla_validate_parse: 18 callbacks suppressed [ 2627.176031][T30043] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.20334'. [ 2627.686447][T30051] device wlan1 left promiscuous mode [ 2627.944289][T30062] netlink: 'syz.3.20340': attribute type 3 has an invalid length. [ 2627.970126][T30062] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.20340'. [ 2628.060519][T30065] delete_channel: no stack [ 2628.363941][T30085] netlink: 'syz.1.20343': attribute type 10 has an invalid length. [ 2628.420412][T30085] netlink: 140 bytes leftover after parsing attributes in process `syz.1.20343'. [ 2628.507867][T30086] netlink: 'syz.0.20347': attribute type 2 has an invalid length. [ 2628.527681][T30088] netlink: 'syz.2.20345': attribute type 10 has an invalid length. [ 2628.560186][T30086] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.20347'. [ 2628.579421][T30073] netlink: 'syz.3.20344': attribute type 2 has an invalid length. [ 2628.658541][T30073] netlink: 'syz.3.20344': attribute type 8 has an invalid length. [ 2628.692927][T30073] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20344'. [ 2629.712930][T30119] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20365'. [ 2629.734828][T30117] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.20354'. [ 2630.661315][T30134] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.20359'. [ 2632.025591][T30154] validate_nla: 8 callbacks suppressed [ 2632.025627][T30154] netlink: 'syz.1.20368': attribute type 3 has an invalid length. [ 2632.053857][T30154] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20368'. [ 2632.114804][T30158] netlink: 'syz.2.20369': attribute type 3 has an invalid length. [ 2632.160265][T30158] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.20369'. [ 2632.195001][T30165] netlink: 14 bytes leftover after parsing attributes in process `syz.3.20370'. [ 2632.261983][T30169] netlink: 175 bytes leftover after parsing attributes in process `syz.1.20373'. [ 2632.298575][T30169] netlink: 'syz.1.20373': attribute type 10 has an invalid length. [ 2632.331081][T30159] netlink: 'syz.0.20367': attribute type 2 has an invalid length. [ 2632.343800][T30159] netlink: 'syz.0.20367': attribute type 8 has an invalid length. [ 2632.396192][T30159] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20367'. [ 2632.485659][T30176] netlink: 'syz.2.20375': attribute type 2 has an invalid length. [ 2632.525065][T30176] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.20375'. [ 2632.726900][T30183] netlink: 14 bytes leftover after parsing attributes in process `syz.4.20374'. [ 2633.599489][T30208] netlink: 'syz.4.20385': attribute type 3 has an invalid length. [ 2633.618271][T30208] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20385'. [ 2633.702323][T30212] netlink: 'syz.0.20386': attribute type 3 has an invalid length. [ 2633.721044][T30212] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.20386'. [ 2633.868339][T30217] netlink: 175 bytes leftover after parsing attributes in process `syz.4.20387'. [ 2633.910650][T30217] netlink: 'syz.4.20387': attribute type 10 has an invalid length. [ 2634.149261][T30223] delete_channel: no stack [ 2634.264794][T30221] netlink: 'syz.1.20389': attribute type 2 has an invalid length. [ 2634.287456][T30221] netlink: 132 bytes leftover after parsing attributes in process `syz.1.20389'. [ 2634.463480][T30238] netlink: 168 bytes leftover after parsing attributes in process `syz.0.20396'. [ 2634.580784][T30238] device wlan1 left promiscuous mode [ 2637.059769][T30333] validate_nla: 10 callbacks suppressed [ 2637.059805][T30333] netlink: 'syz.1.20428': attribute type 3 has an invalid length. [ 2637.077726][T30338] netlink: 'syz.3.20429': attribute type 3 has an invalid length. [ 2637.935838][T30362] netlink: 'syz.4.20439': attribute type 2 has an invalid length. [ 2637.975499][T30362] netlink: 'syz.4.20439': attribute type 8 has an invalid length. [ 2637.999144][T30362] __nla_validate_parse: 7 callbacks suppressed [ 2637.999188][T30362] netlink: 132 bytes leftover after parsing attributes in process `syz.4.20439'. [ 2638.302546][T30376] netlink: 'syz.4.20444': attribute type 3 has an invalid length. [ 2638.335043][T30376] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20444'. [ 2638.946740][T30394] netlink: 'syz.4.20449': attribute type 3 has an invalid length. [ 2638.977134][T30394] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20449'. [ 2639.414601][T30413] netlink: 'syz.4.20456': attribute type 3 has an invalid length. [ 2639.481614][T30413] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20456'. [ 2639.992468][T30429] netlink: 'syz.0.20462': attribute type 2 has an invalid length. [ 2640.020772][T30429] netlink: 'syz.0.20462': attribute type 8 has an invalid length. [ 2640.033441][T30429] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20462'. [ 2640.157700][T30437] netlink: 'syz.4.20463': attribute type 3 has an invalid length. [ 2640.182677][T30437] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20463'. [ 2640.419113][T30451] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20469'. [ 2641.317623][T30485] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20478'. [ 2641.648502][T30494] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20482'. [ 2641.777170][T30501] netlink: 175 bytes leftover after parsing attributes in process `syz.0.20495'. [ 2642.293509][T30521] validate_nla: 6 callbacks suppressed [ 2642.293549][T30521] netlink: 'syz.4.20493': attribute type 3 has an invalid length. [ 2642.478794][T30530] netlink: 'syz.0.20497': attribute type 3 has an invalid length. [ 2642.619816][T30534] delete_channel: no stack [ 2642.898412][T30546] netlink: 'syz.4.20514': attribute type 3 has an invalid length. [ 2642.939461][T30553] netlink: 'syz.2.20501': attribute type 10 has an invalid length. [ 2643.005497][T30557] netlink: 'syz.3.20502': attribute type 2 has an invalid length. [ 2643.024100][T30557] netlink: 'syz.3.20502': attribute type 8 has an invalid length. [ 2643.058066][T30557] __nla_validate_parse: 5 callbacks suppressed [ 2643.058100][T30557] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20502'. [ 2643.303095][T30569] netlink: 'syz.3.20508': attribute type 3 has an invalid length. [ 2643.342242][T30569] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.20508'. [ 2643.598279][T30585] delete_channel: no stack [ 2643.770910][T30594] netlink: 'syz.2.20519': attribute type 3 has an invalid length. [ 2643.789283][T30594] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.20519'. [ 2643.908067][T30600] netlink: 'syz.1.20522': attribute type 10 has an invalid length. [ 2643.944182][T30600] netlink: 55 bytes leftover after parsing attributes in process `syz.1.20522'. [ 2644.011547][T30596] netlink: 'syz.0.20520': attribute type 2 has an invalid length. [ 2644.019567][T30596] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20520'. [ 2644.197447][T30614] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20528'. [ 2644.608297][T30635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20532'. [ 2644.795724][T30643] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.20535'. [ 2645.084403][T30656] netlink: 55 bytes leftover after parsing attributes in process `syz.2.20541'. [ 2645.354700][T30661] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.20545'. [ 2646.635025][T30702] device wlan1 left promiscuous mode [ 2647.629681][T30747] validate_nla: 14 callbacks suppressed [ 2647.629717][T30747] netlink: 'syz.3.20573': attribute type 10 has an invalid length. [ 2648.081755][T30766] device wlan1 left promiscuous mode [ 2648.527413][T30789] netlink: 'syz.0.20586': attribute type 3 has an invalid length. [ 2648.590140][T30789] __nla_validate_parse: 3 callbacks suppressed [ 2648.590177][T30789] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.20586'. [ 2649.005858][T30811] netlink: 'syz.0.20592': attribute type 28 has an invalid length. [ 2649.046028][T30806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20596'. [ 2649.101477][T30811] netlink: 'syz.0.20592': attribute type 10 has an invalid length. [ 2649.697280][T30839] netlink: 'syz.4.20604': attribute type 3 has an invalid length. [ 2649.751045][T30839] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20604'. [ 2650.155295][T30854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20609'. [ 2650.244407][T30862] netlink: 'syz.1.20613': attribute type 16 has an invalid length. [ 2650.289397][T30853] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.20610'. [ 2650.374879][T30862] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20613'. [ 2650.490307][T30866] netlink: 'syz.1.20613': attribute type 1 has an invalid length. [ 2650.521863][T30866] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.20613'. [ 2651.612131][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.618506][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2653.301169][T30892] netlink: 'syz.1.20620': attribute type 3 has an invalid length. [ 2653.330237][T30892] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20620'. [ 2653.981713][T30919] netlink: 14 bytes leftover after parsing attributes in process `syz.0.20625'. [ 2654.487423][T30927] netlink: 'syz.3.20629': attribute type 3 has an invalid length. [ 2654.508374][T30927] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.20629'. [ 2654.565806][T30938] netlink: 'syz.1.20627': attribute type 7 has an invalid length. [ 2654.738482][T30942] netlink: 'syz.3.20634': attribute type 3 has an invalid length. [ 2654.767316][T30942] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.20634'. [ 2654.801624][T30946] netlink: 140 bytes leftover after parsing attributes in process `syz.2.20638'. [ 2655.148767][T30961] netlink: 'syz.4.20643': attribute type 3 has an invalid length. [ 2655.164674][T30961] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20643'. [ 2655.480056][T30978] netlink: 'syz.1.20649': attribute type 3 has an invalid length. [ 2655.498547][T30978] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20649'. [ 2655.651054][T30983] netlink: 'syz.4.20651': attribute type 3 has an invalid length. [ 2655.698107][T30983] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20651'. [ 2655.808257][T30984] netlink: 14 bytes leftover after parsing attributes in process `syz.2.20646'. [ 2656.255798][T31003] netlink: 'syz.0.20657': attribute type 3 has an invalid length. [ 2656.270394][T31003] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.20657'. [ 2656.338475][T31009] netlink: 140 bytes leftover after parsing attributes in process `syz.3.20659'. [ 2656.595979][T31020] netlink: 'syz.3.20663': attribute type 3 has an invalid length. [ 2656.692219][T31025] netlink: 'syz.1.20665': attribute type 3 has an invalid length. [ 2658.667795][T31096] validate_nla: 6 callbacks suppressed [ 2658.667834][T31096] netlink: 'syz.1.20688': attribute type 3 has an invalid length. [ 2659.228895][T31113] netlink: 'syz.3.20694': attribute type 3 has an invalid length. [ 2659.250693][T31113] __nla_validate_parse: 8 callbacks suppressed [ 2659.250728][T31113] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.20694'. [ 2659.557595][T31121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20696'. [ 2661.128909][T31164] netlink: 'syz.2.20710': attribute type 3 has an invalid length. [ 2661.186768][T31164] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.20710'. [ 2661.215980][T31154] netlink: 'syz.1.20707': attribute type 2 has an invalid length. [ 2661.227184][T31154] netlink: 'syz.1.20707': attribute type 8 has an invalid length. [ 2661.235569][T31154] netlink: 132 bytes leftover after parsing attributes in process `syz.1.20707'. [ 2661.869752][T31188] netlink: 'syz.3.20717': attribute type 10 has an invalid length. [ 2661.877978][T31188] netlink: 168 bytes leftover after parsing attributes in process `syz.3.20717'. [ 2661.985146][T31188] netlink: 'syz.3.20717': attribute type 10 has an invalid length. [ 2662.675119][T31212] netlink: 'syz.3.20723': attribute type 3 has an invalid length. [ 2662.699278][T31212] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.20723'. [ 2662.744054][T31207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20718'. [ 2663.091911][T31215] netlink: 'syz.0.20724': attribute type 2 has an invalid length. [ 2663.130274][T31215] netlink: 'syz.0.20724': attribute type 8 has an invalid length. [ 2663.180227][T31215] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20724'. [ 2663.561989][T31233] netlink: 188 bytes leftover after parsing attributes in process `syz.4.20732'. [ 2663.582707][T31233] ksmbd: Unknown IPC event: 10, ignore. [ 2664.315345][T31254] netlink: 'syz.4.20737': attribute type 21 has an invalid length. [ 2664.342833][T31254] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2664.475144][T31262] netlink: 'syz.1.20738': attribute type 27 has an invalid length. [ 2664.551432][T31262] netlink: 164 bytes leftover after parsing attributes in process `syz.1.20738'. [ 2665.324522][T31279] netlink: 'syz.4.20744': attribute type 2 has an invalid length. [ 2665.363256][T31279] netlink: 'syz.4.20744': attribute type 8 has an invalid length. [ 2665.386965][T31279] netlink: 132 bytes leftover after parsing attributes in process `syz.4.20744'. [ 2665.699000][T31300] netlink: 'syz.4.20748': attribute type 21 has an invalid length. [ 2665.720148][T31300] netlink: 128 bytes leftover after parsing attributes in process `syz.4.20748'. [ 2665.795361][T31300] netlink: 'syz.4.20748': attribute type 4 has an invalid length. [ 2665.818823][T31300] netlink: 'syz.4.20748': attribute type 5 has an invalid length. [ 2665.865511][T31300] netlink: 3 bytes leftover after parsing attributes in process `syz.4.20748'. [ 2665.936067][T31305] netlink: 'syz.4.20748': attribute type 275 has an invalid length. [ 2667.419323][T31337] netlink: 'syz.0.20759': attribute type 27 has an invalid length. [ 2667.454310][T31337] netlink: 164 bytes leftover after parsing attributes in process `syz.0.20759'. [ 2667.886359][T31344] netlink: 'syz.3.20761': attribute type 2 has an invalid length. [ 2667.910136][T31344] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20761'. [ 2668.104747][T31355] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.20767'. [ 2668.145600][T31355] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2668.162285][T31355] CPU: 0 PID: 31355 Comm: syz.1.20767 Not tainted syzkaller #0 [ 2668.169871][T31355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2668.179980][T31355] Call Trace: [ 2668.183273][T31355] [ 2668.186218][T31355] dump_stack_lvl+0x188/0x24e [ 2668.190930][T31355] ? show_regs_print_info+0x12/0x12 [ 2668.196152][T31355] ? load_image+0x400/0x400 [ 2668.200696][T31355] sysfs_warn_dup+0x8a/0xa0 [ 2668.205222][T31355] sysfs_do_create_link_sd+0xc0/0x110 [ 2668.210628][T31355] device_add+0x7f6/0x1000 [ 2668.215078][T31355] wiphy_register+0x1d9f/0x2ac0 [ 2668.219969][T31355] ? cfg80211_event_work+0x40/0x40 [ 2668.225100][T31355] ? minstrel_ht_alloc+0x894/0xa20 [ 2668.230238][T31355] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2668.236336][T31355] ieee80211_register_hw+0x2d00/0x39f0 [ 2668.241827][T31355] ? ieee80211_register_hw+0xec1/0x39f0 [ 2668.247389][T31355] ? ieee80211_register_hw+0xec1/0x39f0 [ 2668.252960][T31355] ? ieee80211_tasklet_handler+0x20/0x20 [ 2668.258622][T31355] ? memset+0x1e/0x40 [ 2668.262622][T31355] ? __hrtimer_init+0x186/0x270 [ 2668.267497][T31355] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2668.273257][T31355] hwsim_new_radio_nl+0xafa/0xce0 [ 2668.278319][T31355] genl_family_rcv_msg_doit+0x22a/0x330 [ 2668.283888][T31355] ? end_current_label_crit_section+0x170/0x170 [ 2668.290158][T31355] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2668.296083][T31355] ? bpf_lsm_capable+0x5/0x10 [ 2668.300785][T31355] ? security_capable+0x85/0xb0 [ 2668.305665][T31355] genl_rcv_msg+0x604/0x790 [ 2668.310193][T31355] ? lock_chain_count+0x20/0x20 [ 2668.315079][T31355] ? genl_bind+0x360/0x360 [ 2668.319514][T31355] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2668.325880][T31355] netlink_rcv_skb+0x1fb/0x450 [ 2668.330669][T31355] ? genl_bind+0x360/0x360 [ 2668.335114][T31355] ? netlink_ack+0x1170/0x1170 [ 2668.339909][T31355] ? down_read+0x1a8/0x2d0 [ 2668.344350][T31355] genl_rcv+0x24/0x40 [ 2668.348351][T31355] netlink_unicast+0x74d/0x8d0 [ 2668.353149][T31355] netlink_sendmsg+0x8ad/0xbd0 [ 2668.357947][T31355] ? netlink_getsockopt+0x550/0x550 [ 2668.363166][T31355] ? aa_sock_msg_perm+0x94/0x150 [ 2668.368125][T31355] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2668.373428][T31355] ? security_socket_sendmsg+0x7c/0xa0 [ 2668.378902][T31355] ? netlink_getsockopt+0x550/0x550 [ 2668.384105][T31355] ____sys_sendmsg+0x5be/0x970 [ 2668.388883][T31355] ? __sys_sendmsg_sock+0x30/0x30 [ 2668.393917][T31355] ? __import_iovec+0x315/0x500 [ 2668.398783][T31355] ? import_iovec+0x6f/0xa0 [ 2668.403295][T31355] ___sys_sendmsg+0x2a2/0x360 [ 2668.407984][T31355] ? try_to_wake_up+0x6ae/0x1080 [ 2668.412942][T31355] ? __sys_sendmsg+0x290/0x290 [ 2668.417798][T31355] __se_sys_sendmsg+0x1bb/0x2a0 [ 2668.422663][T31355] ? __x64_sys_sendmsg+0x80/0x80 [ 2668.427619][T31355] ? lockdep_hardirqs_on+0x94/0x140 [ 2668.432823][T31355] do_syscall_64+0x4c/0xa0 [ 2668.437243][T31355] ? clear_bhb_loop+0x60/0xb0 [ 2668.441937][T31355] ? clear_bhb_loop+0x60/0xb0 [ 2668.446622][T31355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2668.452522][T31355] RIP: 0033:0x7fec0db9ce59 [ 2668.456961][T31355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2668.476579][T31355] RSP: 002b:00007fec0ea4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2668.485009][T31355] RAX: ffffffffffffffda RBX: 00007fec0de15fa0 RCX: 00007fec0db9ce59 [ 2668.492987][T31355] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2668.500949][T31355] RBP: 00007fec0dc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2668.508917][T31355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2668.516893][T31355] R13: 00007fec0de16038 R14: 00007fec0de15fa0 R15: 00007ffdbac61338 [ 2668.524892][T31355] [ 2669.475850][T31387] validate_nla: 1 callbacks suppressed [ 2669.475889][T31387] netlink: 'syz.1.20776': attribute type 3 has an invalid length. [ 2669.490336][T31387] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20776'. [ 2669.748605][T31399] netlink: 'syz.1.20777': attribute type 10 has an invalid length. [ 2669.810068][T31399] netlink: 168 bytes leftover after parsing attributes in process `syz.1.20777'. [ 2669.874847][T31407] netlink: 'syz.1.20777': attribute type 10 has an invalid length. [ 2670.121397][T31397] netlink: 'syz.2.20778': attribute type 2 has an invalid length. [ 2670.177788][T31397] netlink: 'syz.2.20778': attribute type 8 has an invalid length. [ 2670.196366][T31397] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20778'. [ 2670.817215][T31426] netlink: 168 bytes leftover after parsing attributes in process `syz.0.20785'. [ 2671.133236][T31433] netlink: 'syz.3.20789': attribute type 3 has an invalid length. [ 2671.181511][T31433] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.20789'. [ 2671.433050][T31443] netlink: 'syz.0.20792': attribute type 21 has an invalid length. [ 2671.442028][T31443] netlink: 128 bytes leftover after parsing attributes in process `syz.0.20792'. [ 2671.457633][T31443] netlink: 'syz.0.20792': attribute type 4 has an invalid length. [ 2671.465717][T31443] netlink: 'syz.0.20792': attribute type 5 has an invalid length. [ 2671.473723][T31443] netlink: 3 bytes leftover after parsing attributes in process `syz.0.20792'. [ 2671.626250][T31443] netlink: 'syz.0.20792': attribute type 275 has an invalid length. [ 2672.484071][T31452] netlink: 188 bytes leftover after parsing attributes in process `syz.1.20803'. [ 2672.494667][T31452] ksmbd: Unknown IPC event: 10, ignore. [ 2672.795281][T31461] netlink: 168 bytes leftover after parsing attributes in process `syz.4.20793'. [ 2672.843068][T31453] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20794'. [ 2673.106825][T31478] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.20798'. [ 2674.155126][T31502] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2674.200245][T31502] CPU: 1 PID: 31502 Comm: syz.4.20805 Not tainted syzkaller #0 [ 2674.207870][T31502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2674.217970][T31502] Call Trace: [ 2674.221284][T31502] [ 2674.224256][T31502] dump_stack_lvl+0x188/0x24e [ 2674.228995][T31502] ? show_regs_print_info+0x12/0x12 [ 2674.234246][T31502] ? load_image+0x400/0x400 [ 2674.238844][T31502] sysfs_warn_dup+0x8a/0xa0 [ 2674.243399][T31502] sysfs_do_create_link_sd+0xc0/0x110 [ 2674.248833][T31502] device_add+0x7f6/0x1000 [ 2674.253317][T31502] wiphy_register+0x1d9f/0x2ac0 [ 2674.258231][T31502] ? cfg80211_event_work+0x40/0x40 [ 2674.263360][T31502] ? minstrel_ht_alloc+0x894/0xa20 [ 2674.268505][T31502] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2674.274606][T31502] ieee80211_register_hw+0x2d00/0x39f0 [ 2674.280109][T31502] ? ieee80211_register_hw+0xec1/0x39f0 [ 2674.285670][T31502] ? ieee80211_register_hw+0xec1/0x39f0 [ 2674.291242][T31502] ? ieee80211_tasklet_handler+0x20/0x20 [ 2674.296909][T31502] ? memset+0x1e/0x40 [ 2674.300900][T31502] ? __hrtimer_init+0x186/0x270 [ 2674.305773][T31502] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2674.311550][T31502] hwsim_new_radio_nl+0xafa/0xce0 [ 2674.316619][T31502] genl_family_rcv_msg_doit+0x22a/0x330 [ 2674.322179][T31502] ? end_current_label_crit_section+0x170/0x170 [ 2674.328440][T31502] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2674.334366][T31502] ? bpf_lsm_capable+0x5/0x10 [ 2674.339050][T31502] ? security_capable+0x85/0xb0 [ 2674.343936][T31502] genl_rcv_msg+0x604/0x790 [ 2674.348473][T31502] ? genl_bind+0x360/0x360 [ 2674.352897][T31502] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2674.359270][T31502] netlink_rcv_skb+0x1fb/0x450 [ 2674.364070][T31502] ? genl_bind+0x360/0x360 [ 2674.368505][T31502] ? netlink_ack+0x1170/0x1170 [ 2674.373325][T31502] ? down_read+0x1a8/0x2d0 [ 2674.377785][T31502] genl_rcv+0x24/0x40 [ 2674.381791][T31502] netlink_unicast+0x74d/0x8d0 [ 2674.386598][T31502] netlink_sendmsg+0x8ad/0xbd0 [ 2674.391405][T31502] ? netlink_getsockopt+0x550/0x550 [ 2674.396624][T31502] ? aa_sock_msg_perm+0x94/0x150 [ 2674.401584][T31502] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2674.406876][T31502] ? security_socket_sendmsg+0x7c/0xa0 [ 2674.412349][T31502] ? netlink_getsockopt+0x550/0x550 [ 2674.417563][T31502] ____sys_sendmsg+0x5be/0x970 [ 2674.422361][T31502] ? __sys_sendmsg_sock+0x30/0x30 [ 2674.427389][T31502] ? __import_iovec+0x315/0x500 [ 2674.432270][T31502] ? import_iovec+0x6f/0xa0 [ 2674.436806][T31502] ___sys_sendmsg+0x2a2/0x360 [ 2674.441508][T31502] ? __sys_sendmsg+0x290/0x290 [ 2674.446330][T31502] ? trace_call_bpf+0xbf/0x6b0 [ 2674.451172][T31502] __se_sys_sendmsg+0x1bb/0x2a0 [ 2674.456043][T31502] ? __x64_sys_sendmsg+0x80/0x80 [ 2674.461032][T31502] ? lockdep_hardirqs_on+0x94/0x140 [ 2674.466249][T31502] do_syscall_64+0x4c/0xa0 [ 2674.470671][T31502] ? clear_bhb_loop+0x60/0xb0 [ 2674.475362][T31502] ? clear_bhb_loop+0x60/0xb0 [ 2674.480062][T31502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2674.485967][T31502] RIP: 0033:0x7f687019ce59 [ 2674.490398][T31502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2674.510019][T31502] RSP: 002b:00007f687107d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2674.518444][T31502] RAX: ffffffffffffffda RBX: 00007f6870415fa0 RCX: 00007f687019ce59 [ 2674.526428][T31502] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2674.534406][T31502] RBP: 00007f6870232e6f R08: 0000000000000000 R09: 0000000000000000 [ 2674.542383][T31502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2674.550358][T31502] R13: 00007f6870416038 R14: 00007f6870415fa0 R15: 00007ffc2dc8f9d8 [ 2674.558375][T31502] [ 2674.660669][T31515] validate_nla: 4 callbacks suppressed [ 2674.660784][T31515] netlink: 'syz.2.20806': attribute type 27 has an invalid length. [ 2675.428578][T31530] __nla_validate_parse: 2 callbacks suppressed [ 2675.428614][T31530] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.20809'. [ 2675.548539][T31530] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2675.560747][T31530] CPU: 1 PID: 31530 Comm: syz.1.20809 Not tainted syzkaller #0 [ 2675.568335][T31530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2675.578408][T31530] Call Trace: [ 2675.581703][T31530] [ 2675.584652][T31530] dump_stack_lvl+0x188/0x24e [ 2675.589356][T31530] ? show_regs_print_info+0x12/0x12 [ 2675.594582][T31530] ? load_image+0x400/0x400 [ 2675.599133][T31530] sysfs_warn_dup+0x8a/0xa0 [ 2675.603668][T31530] sysfs_do_create_link_sd+0xc0/0x110 [ 2675.609071][T31530] device_add+0x7f6/0x1000 [ 2675.613523][T31530] wiphy_register+0x1d9f/0x2ac0 [ 2675.618421][T31530] ? cfg80211_event_work+0x40/0x40 [ 2675.623569][T31530] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2675.629665][T31530] ieee80211_register_hw+0x2d00/0x39f0 [ 2675.635152][T31530] ? ieee80211_register_hw+0xec1/0x39f0 [ 2675.640706][T31530] ? ieee80211_register_hw+0xec1/0x39f0 [ 2675.646268][T31530] ? ieee80211_tasklet_handler+0x20/0x20 [ 2675.651941][T31530] ? memset+0x1e/0x40 [ 2675.655937][T31530] ? __hrtimer_init+0x186/0x270 [ 2675.660804][T31530] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2675.666554][T31530] hwsim_new_radio_nl+0xafa/0xce0 [ 2675.671605][T31530] genl_family_rcv_msg_doit+0x22a/0x330 [ 2675.677163][T31530] ? end_current_label_crit_section+0x170/0x170 [ 2675.683418][T31530] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2675.689333][T31530] ? bpf_lsm_capable+0x5/0x10 [ 2675.694022][T31530] ? security_capable+0x85/0xb0 [ 2675.698891][T31530] genl_rcv_msg+0x604/0x790 [ 2675.703419][T31530] ? genl_bind+0x360/0x360 [ 2675.707846][T31530] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2675.714196][T31530] netlink_rcv_skb+0x1fb/0x450 [ 2675.718967][T31530] ? genl_bind+0x360/0x360 [ 2675.723390][T31530] ? netlink_ack+0x1170/0x1170 [ 2675.728171][T31530] ? down_read+0x1a8/0x2d0 [ 2675.732597][T31530] genl_rcv+0x24/0x40 [ 2675.736584][T31530] netlink_unicast+0x74d/0x8d0 [ 2675.741365][T31530] netlink_sendmsg+0x8ad/0xbd0 [ 2675.746143][T31530] ? netlink_getsockopt+0x550/0x550 [ 2675.751353][T31530] ? aa_sock_msg_perm+0x94/0x150 [ 2675.756329][T31530] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2675.761617][T31530] ? security_socket_sendmsg+0x7c/0xa0 [ 2675.767081][T31530] ? netlink_getsockopt+0x550/0x550 [ 2675.772289][T31530] ____sys_sendmsg+0x5be/0x970 [ 2675.777068][T31530] ? __sys_sendmsg_sock+0x30/0x30 [ 2675.782098][T31530] ? __import_iovec+0x315/0x500 [ 2675.786966][T31530] ? import_iovec+0x6f/0xa0 [ 2675.791478][T31530] ___sys_sendmsg+0x2a2/0x360 [ 2675.796168][T31530] ? __sys_sendmsg+0x290/0x290 [ 2675.800967][T31530] ? ktime_get_real_ts64+0x440/0x440 [ 2675.806289][T31530] __se_sys_sendmsg+0x1bb/0x2a0 [ 2675.811147][T31530] ? __x64_sys_sendmsg+0x80/0x80 [ 2675.816111][T31530] ? lockdep_hardirqs_on+0x94/0x140 [ 2675.821320][T31530] do_syscall_64+0x4c/0xa0 [ 2675.825740][T31530] ? clear_bhb_loop+0x60/0xb0 [ 2675.830427][T31530] ? clear_bhb_loop+0x60/0xb0 [ 2675.835122][T31530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2675.841029][T31530] RIP: 0033:0x7fec0db9ce59 [ 2675.845452][T31530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2675.865066][T31530] RSP: 002b:00007fec0ea2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2675.873492][T31530] RAX: ffffffffffffffda RBX: 00007fec0de16090 RCX: 00007fec0db9ce59 [ 2675.881468][T31530] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2675.889440][T31530] RBP: 00007fec0dc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2675.897415][T31530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2675.905394][T31530] R13: 00007fec0de16128 R14: 00007fec0de16090 R15: 00007ffdbac61338 [ 2675.913390][T31530] [ 2676.140697][T31523] delete_channel: no stack [ 2676.203591][T31542] netlink: 'syz.2.20810': attribute type 11 has an invalid length. [ 2676.820155][T31567] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.20819'. [ 2676.878354][T31567] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2676.923916][T31567] CPU: 0 PID: 31567 Comm: syz.3.20819 Not tainted syzkaller #0 [ 2676.931542][T31567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2676.941639][T31567] Call Trace: [ 2676.944955][T31567] [ 2676.947917][T31567] dump_stack_lvl+0x188/0x24e [ 2676.952635][T31567] ? show_regs_print_info+0x12/0x12 [ 2676.957860][T31567] ? load_image+0x400/0x400 [ 2676.962427][T31567] sysfs_warn_dup+0x8a/0xa0 [ 2676.966956][T31567] sysfs_do_create_link_sd+0xc0/0x110 [ 2676.972348][T31567] device_add+0x7f6/0x1000 [ 2676.976801][T31567] wiphy_register+0x1d9f/0x2ac0 [ 2676.981714][T31567] ? cfg80211_event_work+0x40/0x40 [ 2676.986844][T31567] ? minstrel_ht_alloc+0x894/0xa20 [ 2676.991986][T31567] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2676.998076][T31567] ieee80211_register_hw+0x2d00/0x39f0 [ 2677.003573][T31567] ? ieee80211_register_hw+0xec1/0x39f0 [ 2677.009126][T31567] ? ieee80211_register_hw+0xec1/0x39f0 [ 2677.014699][T31567] ? ieee80211_tasklet_handler+0x20/0x20 [ 2677.020372][T31567] ? memset+0x1e/0x40 [ 2677.024365][T31567] ? __hrtimer_init+0x186/0x270 [ 2677.029238][T31567] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2677.035020][T31567] hwsim_new_radio_nl+0xafa/0xce0 [ 2677.040090][T31567] genl_family_rcv_msg_doit+0x22a/0x330 [ 2677.045647][T31567] ? end_current_label_crit_section+0x170/0x170 [ 2677.051909][T31567] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2677.057832][T31567] ? bpf_lsm_capable+0x5/0x10 [ 2677.062518][T31567] ? security_capable+0x85/0xb0 [ 2677.067397][T31567] genl_rcv_msg+0x604/0x790 [ 2677.071935][T31567] ? genl_bind+0x360/0x360 [ 2677.076358][T31567] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2677.082733][T31567] netlink_rcv_skb+0x1fb/0x450 [ 2677.087512][T31567] ? genl_bind+0x360/0x360 [ 2677.091945][T31567] ? netlink_ack+0x1170/0x1170 [ 2677.096741][T31567] ? down_read+0x1a8/0x2d0 [ 2677.101175][T31567] genl_rcv+0x24/0x40 [ 2677.105166][T31567] netlink_unicast+0x74d/0x8d0 [ 2677.109968][T31567] netlink_sendmsg+0x8ad/0xbd0 [ 2677.114764][T31567] ? netlink_getsockopt+0x550/0x550 [ 2677.119980][T31567] ? aa_sock_msg_perm+0x94/0x150 [ 2677.124932][T31567] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2677.130223][T31567] ? security_socket_sendmsg+0x7c/0xa0 [ 2677.135693][T31567] ? netlink_getsockopt+0x550/0x550 [ 2677.140901][T31567] ____sys_sendmsg+0x5be/0x970 [ 2677.145695][T31567] ? __sys_sendmsg_sock+0x30/0x30 [ 2677.150723][T31567] ? __import_iovec+0x315/0x500 [ 2677.155603][T31567] ? import_iovec+0x6f/0xa0 [ 2677.160129][T31567] ___sys_sendmsg+0x2a2/0x360 [ 2677.164829][T31567] ? __sys_sendmsg+0x290/0x290 [ 2677.169651][T31567] ? trace_call_bpf+0xbf/0x6b0 [ 2677.174501][T31567] __se_sys_sendmsg+0x1bb/0x2a0 [ 2677.179369][T31567] ? __x64_sys_sendmsg+0x80/0x80 [ 2677.184357][T31567] ? lockdep_hardirqs_on+0x94/0x140 [ 2677.189577][T31567] do_syscall_64+0x4c/0xa0 [ 2677.194003][T31567] ? clear_bhb_loop+0x60/0xb0 [ 2677.198688][T31567] ? clear_bhb_loop+0x60/0xb0 [ 2677.203384][T31567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2677.209288][T31567] RIP: 0033:0x7fc63399ce59 [ 2677.213714][T31567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2677.233329][T31567] RSP: 002b:00007fc631bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2677.241754][T31567] RAX: ffffffffffffffda RBX: 00007fc633c15fa0 RCX: 00007fc63399ce59 [ 2677.249734][T31567] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2677.257728][T31567] RBP: 00007fc633a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2677.265721][T31567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2677.273706][T31567] R13: 00007fc633c16038 R14: 00007fc633c15fa0 R15: 00007ffd004e3428 [ 2677.281728][T31567] [ 2677.370838][T31575] netlink: 'syz.4.20820': attribute type 27 has an invalid length. [ 2677.379276][T31575] netlink: 164 bytes leftover after parsing attributes in process `syz.4.20820'. [ 2677.686308][T31584] device wlan1 entered promiscuous mode [ 2677.705789][T31582] device wlan1 entered promiscuous mode [ 2677.760782][T31584] netlink: 'syz.2.20822': attribute type 3 has an invalid length. [ 2677.778282][T31584] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.20822'. [ 2677.787108][T31587] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.20823'. [ 2678.183762][T31600] netlink: 'syz.0.20826': attribute type 2 has an invalid length. [ 2678.205283][T31600] netlink: 'syz.0.20826': attribute type 8 has an invalid length. [ 2678.230061][T31600] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20826'. [ 2678.360471][T31590] delete_channel: no stack [ 2678.492792][T31615] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.20829'. [ 2678.528946][T31615] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2678.535485][T31615] dvmrp1: linktype set to 768 [ 2678.745075][T31628] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.20835'. [ 2678.789817][T31628] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2678.811236][T31628] CPU: 0 PID: 31628 Comm: syz.0.20835 Not tainted syzkaller #0 [ 2678.818840][T31628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2678.829002][T31628] Call Trace: [ 2678.832290][T31628] [ 2678.835231][T31628] dump_stack_lvl+0x188/0x24e [ 2678.839931][T31628] ? show_regs_print_info+0x12/0x12 [ 2678.845141][T31628] ? load_image+0x400/0x400 [ 2678.849690][T31628] sysfs_warn_dup+0x8a/0xa0 [ 2678.854213][T31628] sysfs_do_create_link_sd+0xc0/0x110 [ 2678.859602][T31628] device_add+0x7f6/0x1000 [ 2678.864050][T31628] wiphy_register+0x1d9f/0x2ac0 [ 2678.868934][T31628] ? cfg80211_event_work+0x40/0x40 [ 2678.874056][T31628] ? minstrel_ht_alloc+0x894/0xa20 [ 2678.879187][T31628] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2678.885275][T31628] ieee80211_register_hw+0x2d00/0x39f0 [ 2678.890761][T31628] ? ieee80211_register_hw+0xec1/0x39f0 [ 2678.896322][T31628] ? ieee80211_register_hw+0xec1/0x39f0 [ 2678.901886][T31628] ? ieee80211_tasklet_handler+0x20/0x20 [ 2678.907542][T31628] ? memset+0x1e/0x40 [ 2678.911534][T31628] ? __hrtimer_init+0x186/0x270 [ 2678.916403][T31628] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2678.922157][T31628] hwsim_new_radio_nl+0xafa/0xce0 [ 2678.927204][T31628] genl_family_rcv_msg_doit+0x22a/0x330 [ 2678.932762][T31628] ? end_current_label_crit_section+0x170/0x170 [ 2678.939020][T31628] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2678.944939][T31628] ? bpf_lsm_capable+0x5/0x10 [ 2678.949632][T31628] ? security_capable+0x85/0xb0 [ 2678.954506][T31628] genl_rcv_msg+0x604/0x790 [ 2678.959020][T31628] ? lock_chain_count+0x20/0x20 [ 2678.963896][T31628] ? genl_bind+0x360/0x360 [ 2678.968322][T31628] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2678.974679][T31628] netlink_rcv_skb+0x1fb/0x450 [ 2678.979455][T31628] ? genl_bind+0x360/0x360 [ 2678.983887][T31628] ? netlink_ack+0x1170/0x1170 [ 2678.988671][T31628] ? down_read+0x1a8/0x2d0 [ 2678.993106][T31628] genl_rcv+0x24/0x40 [ 2678.997096][T31628] netlink_unicast+0x74d/0x8d0 [ 2679.001880][T31628] netlink_sendmsg+0x8ad/0xbd0 [ 2679.006666][T31628] ? netlink_getsockopt+0x550/0x550 [ 2679.011880][T31628] ? aa_sock_msg_perm+0x94/0x150 [ 2679.016831][T31628] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2679.022127][T31628] ? security_socket_sendmsg+0x7c/0xa0 [ 2679.027597][T31628] ? netlink_getsockopt+0x550/0x550 [ 2679.032816][T31628] ____sys_sendmsg+0x5be/0x970 [ 2679.037607][T31628] ? __sys_sendmsg_sock+0x30/0x30 [ 2679.042647][T31628] ? __import_iovec+0x315/0x500 [ 2679.047517][T31628] ? import_iovec+0x6f/0xa0 [ 2679.052032][T31628] ___sys_sendmsg+0x2a2/0x360 [ 2679.056719][T31628] ? try_to_wake_up+0x6ae/0x1080 [ 2679.061677][T31628] ? __sys_sendmsg+0x290/0x290 [ 2679.066516][T31628] __se_sys_sendmsg+0x1bb/0x2a0 [ 2679.071382][T31628] ? __x64_sys_sendmsg+0x80/0x80 [ 2679.076353][T31628] ? lockdep_hardirqs_on+0x94/0x140 [ 2679.081569][T31628] do_syscall_64+0x4c/0xa0 [ 2679.085996][T31628] ? clear_bhb_loop+0x60/0xb0 [ 2679.090689][T31628] ? clear_bhb_loop+0x60/0xb0 [ 2679.095382][T31628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2679.101289][T31628] RIP: 0033:0x7fa53719ce59 [ 2679.105712][T31628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2679.125329][T31628] RSP: 002b:00007fa53813a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2679.133756][T31628] RAX: ffffffffffffffda RBX: 00007fa537415fa0 RCX: 00007fa53719ce59 [ 2679.141738][T31628] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2679.149718][T31628] RBP: 00007fa537232e6f R08: 0000000000000000 R09: 0000000000000000 [ 2679.157704][T31628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2679.165688][T31628] R13: 00007fa537416038 R14: 00007fa537415fa0 R15: 00007fffa6097378 [ 2679.173691][T31628] [ 2679.706137][T31641] netlink: 'syz.1.20839': attribute type 3 has an invalid length. [ 2679.721415][T31641] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.20839'. [ 2680.018098][T31653] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.20843'. [ 2680.419054][T31658] netlink: 'syz.2.20847': attribute type 2 has an invalid length. [ 2680.427269][T31658] netlink: 'syz.2.20847': attribute type 8 has an invalid length. [ 2680.435494][T31658] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20847'. [ 2680.623669][T31673] netlink: 'syz.3.20850': attribute type 2 has an invalid length. [ 2680.644150][T31673] netlink: 'syz.3.20850': attribute type 8 has an invalid length. [ 2680.660009][T31673] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20850'. [ 2680.681437][T31671] netlink: 'syz.0.20849': attribute type 11 has an invalid length. [ 2680.691114][T31673] netlink: 'syz.3.20850': attribute type 2 has an invalid length. [ 2680.746676][T31673] netlink: 'syz.3.20850': attribute type 8 has an invalid length. [ 2680.785392][T31673] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20850'. [ 2680.850733][T31678] netlink: 'syz.3.20850': attribute type 10 has an invalid length. [ 2680.876471][T31679] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.20851'. [ 2680.923239][T31679] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2680.945752][T31679] CPU: 1 PID: 31679 Comm: syz.4.20851 Not tainted syzkaller #0 [ 2680.953367][T31679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2680.963436][T31679] Call Trace: [ 2680.966731][T31679] [ 2680.969667][T31679] dump_stack_lvl+0x188/0x24e [ 2680.974359][T31679] ? show_regs_print_info+0x12/0x12 [ 2680.979558][T31679] ? load_image+0x400/0x400 [ 2680.984073][T31679] sysfs_warn_dup+0x8a/0xa0 [ 2680.988577][T31679] sysfs_do_create_link_sd+0xc0/0x110 [ 2680.993953][T31679] device_add+0x7f6/0x1000 [ 2680.998380][T31679] wiphy_register+0x1d9f/0x2ac0 [ 2681.003239][T31679] ? cfg80211_event_work+0x40/0x40 [ 2681.008341][T31679] ? minstrel_ht_alloc+0x894/0xa20 [ 2681.013453][T31679] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2681.019518][T31679] ieee80211_register_hw+0x2d00/0x39f0 [ 2681.024975][T31679] ? lockdep_hardirqs_on+0x94/0x140 [ 2681.030179][T31679] ? ieee80211_register_hw+0xec1/0x39f0 [ 2681.035719][T31679] ? ieee80211_register_hw+0xec1/0x39f0 [ 2681.041265][T31679] ? ieee80211_tasklet_handler+0x20/0x20 [ 2681.046897][T31679] ? memset+0x1e/0x40 [ 2681.050874][T31679] ? __hrtimer_init+0x186/0x270 [ 2681.055726][T31679] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2681.061455][T31679] hwsim_new_radio_nl+0xafa/0xce0 [ 2681.066487][T31679] genl_family_rcv_msg_doit+0x22a/0x330 [ 2681.072029][T31679] ? end_current_label_crit_section+0x170/0x170 [ 2681.078264][T31679] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2681.084158][T31679] ? bpf_lsm_capable+0x5/0x10 [ 2681.088829][T31679] ? security_capable+0x85/0xb0 [ 2681.093678][T31679] genl_rcv_msg+0x604/0x790 [ 2681.098185][T31679] ? genl_bind+0x360/0x360 [ 2681.102595][T31679] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2681.108927][T31679] netlink_rcv_skb+0x1fb/0x450 [ 2681.113690][T31679] ? genl_bind+0x360/0x360 [ 2681.118101][T31679] ? netlink_ack+0x1170/0x1170 [ 2681.122867][T31679] ? down_read+0x1a8/0x2d0 [ 2681.127281][T31679] genl_rcv+0x24/0x40 [ 2681.131256][T31679] netlink_unicast+0x74d/0x8d0 [ 2681.136018][T31679] netlink_sendmsg+0x8ad/0xbd0 [ 2681.140782][T31679] ? netlink_getsockopt+0x550/0x550 [ 2681.145975][T31679] ? aa_sock_msg_perm+0x94/0x150 [ 2681.150905][T31679] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2681.156181][T31679] ? security_socket_sendmsg+0x7c/0xa0 [ 2681.161633][T31679] ? netlink_getsockopt+0x550/0x550 [ 2681.166823][T31679] ____sys_sendmsg+0x5be/0x970 [ 2681.171587][T31679] ? __sys_sendmsg_sock+0x30/0x30 [ 2681.176604][T31679] ? __import_iovec+0x315/0x500 [ 2681.181456][T31679] ? import_iovec+0x6f/0xa0 [ 2681.185960][T31679] ___sys_sendmsg+0x2a2/0x360 [ 2681.190634][T31679] ? __sys_sendmsg+0x290/0x290 [ 2681.195406][T31679] ? ktime_get_real_ts64+0x440/0x440 [ 2681.200708][T31679] __se_sys_sendmsg+0x1bb/0x2a0 [ 2681.205555][T31679] ? __x64_sys_sendmsg+0x80/0x80 [ 2681.210499][T31679] ? lockdep_hardirqs_on+0x94/0x140 [ 2681.215699][T31679] do_syscall_64+0x4c/0xa0 [ 2681.220110][T31679] ? clear_bhb_loop+0x60/0xb0 [ 2681.224803][T31679] ? clear_bhb_loop+0x60/0xb0 [ 2681.229493][T31679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2681.235391][T31679] RIP: 0033:0x7f687019ce59 [ 2681.239803][T31679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2681.259412][T31679] RSP: 002b:00007f687105c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2681.267824][T31679] RAX: ffffffffffffffda RBX: 00007f6870416090 RCX: 00007f687019ce59 [ 2681.275791][T31679] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2681.283755][T31679] RBP: 00007f6870232e6f R08: 0000000000000000 R09: 0000000000000000 [ 2681.291719][T31679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2681.299702][T31679] R13: 00007f6870416128 R14: 00007f6870416090 R15: 00007ffc2dc8f9d8 [ 2681.307689][T31679] [ 2681.370176][T31691] delete_channel: no stack [ 2681.423104][T31691] delete_channel: no stack [ 2681.466888][T31690] delete_channel: no stack [ 2681.733886][T31706] device wlan1 entered promiscuous mode [ 2681.793865][T31706] netlink: 'syz.3.20859': attribute type 3 has an invalid length. [ 2681.816996][T31706] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.20859'. [ 2681.870765][ T3266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2682.183740][T31730] sock: sock_set_timeout: `syz.1.20865' (pid 31730) tries to set negative timeout [ 2682.241185][T31730] netlink: 152 bytes leftover after parsing attributes in process `syz.1.20865'. [ 2682.269630][T31730] netlink: 152 bytes leftover after parsing attributes in process `syz.1.20865'. [ 2682.993330][T31756] device wlan1 entered promiscuous mode [ 2683.037516][T31756] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.20876'. [ 2683.275135][T31768] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20879'. [ 2683.586703][T31774] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.20892'. [ 2683.632143][T31779] device wlan1 entered promiscuous mode [ 2683.800111][T31786] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2683.821976][T31786] CPU: 1 PID: 31786 Comm: syz.2.20882 Not tainted syzkaller #0 [ 2683.829582][T31786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2683.839667][T31786] Call Trace: [ 2683.842977][T31786] [ 2683.845929][T31786] dump_stack_lvl+0x188/0x24e [ 2683.850637][T31786] ? show_regs_print_info+0x12/0x12 [ 2683.855866][T31786] ? load_image+0x400/0x400 [ 2683.860413][T31786] sysfs_warn_dup+0x8a/0xa0 [ 2683.864948][T31786] sysfs_do_create_link_sd+0xc0/0x110 [ 2683.870350][T31786] device_add+0x7f6/0x1000 [ 2683.874779][T31786] wiphy_register+0x1d9f/0x2ac0 [ 2683.879644][T31786] ? cfg80211_event_work+0x40/0x40 [ 2683.884758][T31786] ? minstrel_ht_alloc+0x894/0xa20 [ 2683.889876][T31786] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2683.895949][T31786] ieee80211_register_hw+0x2d00/0x39f0 [ 2683.901406][T31786] ? lockdep_hardirqs_on+0x94/0x140 [ 2683.906610][T31786] ? ieee80211_register_hw+0xec1/0x39f0 [ 2683.912153][T31786] ? ieee80211_register_hw+0xec1/0x39f0 [ 2683.917704][T31786] ? ieee80211_tasklet_handler+0x20/0x20 [ 2683.923346][T31786] ? memset+0x1e/0x40 [ 2683.927325][T31786] ? __hrtimer_init+0x186/0x270 [ 2683.932176][T31786] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2683.937912][T31786] hwsim_new_radio_nl+0xafa/0xce0 [ 2683.942949][T31786] genl_family_rcv_msg_doit+0x22a/0x330 [ 2683.948493][T31786] ? end_current_label_crit_section+0x170/0x170 [ 2683.954735][T31786] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2683.960636][T31786] ? bpf_lsm_capable+0x5/0x10 [ 2683.965313][T31786] ? security_capable+0x85/0xb0 [ 2683.970165][T31786] genl_rcv_msg+0x604/0x790 [ 2683.974675][T31786] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2683.980836][T31786] ? genl_bind+0x360/0x360 [ 2683.985247][T31786] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2683.991578][T31786] ? lock_acquire+0x225/0x4a0 [ 2683.996262][T31786] netlink_rcv_skb+0x1fb/0x450 [ 2684.001026][T31786] ? genl_bind+0x360/0x360 [ 2684.005445][T31786] ? netlink_ack+0x1170/0x1170 [ 2684.010222][T31786] ? down_read+0x1a8/0x2d0 [ 2684.014640][T31786] genl_rcv+0x24/0x40 [ 2684.018622][T31786] netlink_unicast+0x74d/0x8d0 [ 2684.023408][T31786] netlink_sendmsg+0x8ad/0xbd0 [ 2684.028166][T31786] ? lockdep_hardirqs_on+0x94/0x140 [ 2684.033371][T31786] ? netlink_getsockopt+0x550/0x550 [ 2684.038567][T31786] ? bpf_lsm_socket_accept+0x10/0x10 [ 2684.043851][T31786] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2684.049129][T31786] ? security_socket_sendmsg+0x7c/0xa0 [ 2684.054587][T31786] ? netlink_getsockopt+0x550/0x550 [ 2684.059779][T31786] ____sys_sendmsg+0x5be/0x970 [ 2684.064549][T31786] ? __sys_sendmsg_sock+0x30/0x30 [ 2684.069566][T31786] ? __import_iovec+0x315/0x500 [ 2684.074426][T31786] ? import_iovec+0x6f/0xa0 [ 2684.078930][T31786] ___sys_sendmsg+0x2a2/0x360 [ 2684.083617][T31786] ? __sys_sendmsg+0x290/0x290 [ 2684.088397][T31786] ? trace_call_bpf+0xbf/0x6b0 [ 2684.093182][T31786] __se_sys_sendmsg+0x1bb/0x2a0 [ 2684.098030][T31786] ? __x64_sys_sendmsg+0x80/0x80 [ 2684.102976][T31786] ? lockdep_hardirqs_on+0x94/0x140 [ 2684.108179][T31786] do_syscall_64+0x4c/0xa0 [ 2684.112602][T31786] ? clear_bhb_loop+0x60/0xb0 [ 2684.117279][T31786] ? clear_bhb_loop+0x60/0xb0 [ 2684.121956][T31786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2684.127847][T31786] RIP: 0033:0x7fd70f59ce59 [ 2684.132260][T31786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2684.151860][T31786] RSP: 002b:00007fd710501028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2684.160274][T31786] RAX: ffffffffffffffda RBX: 00007fd70f816090 RCX: 00007fd70f59ce59 [ 2684.168239][T31786] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2684.176206][T31786] RBP: 00007fd70f632e6f R08: 0000000000000000 R09: 0000000000000000 [ 2684.184176][T31786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2684.192144][T31786] R13: 00007fd70f816128 R14: 00007fd70f816090 R15: 00007ffc5b1daf18 [ 2684.200125][T31786] [ 2684.823415][T31810] validate_nla: 9 callbacks suppressed [ 2684.823432][T31810] netlink: 'syz.1.20888': attribute type 39 has an invalid length. [ 2685.036842][T31816] device syzkaller0 entered promiscuous mode [ 2685.130329][T31820] netlink: 'syz.3.20893': attribute type 27 has an invalid length. [ 2685.344239][T31827] netlink: 'syz.4.20894': attribute type 3 has an invalid length. [ 2685.419920][T31829] netlink: 'syz.2.20896': attribute type 3 has an invalid length. [ 2685.450377][T31829] __nla_validate_parse: 3 callbacks suppressed [ 2685.450411][T31829] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.20896'. [ 2685.462929][T31834] netlink: 'syz.3.20897': attribute type 2 has an invalid length. [ 2685.482335][T31834] netlink: 'syz.3.20897': attribute type 8 has an invalid length. [ 2685.491875][T31834] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20897'. [ 2685.520283][T31835] netlink: 'syz.0.20898': attribute type 2 has an invalid length. [ 2685.528262][T31835] netlink: 'syz.0.20898': attribute type 8 has an invalid length. [ 2685.539245][T31835] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20898'. [ 2685.572384][T31839] netlink: 'syz.0.20898': attribute type 2 has an invalid length. [ 2685.589934][T31839] netlink: 'syz.0.20898': attribute type 8 has an invalid length. [ 2685.597779][T31839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20898'. [ 2685.621334][T31842] delete_channel: no stack [ 2685.625920][T31842] delete_channel: no stack [ 2685.690480][T31840] delete_channel: no stack [ 2686.027200][T31862] sock: sock_set_timeout: `syz.3.20907' (pid 31862) tries to set negative timeout [ 2686.117094][T31862] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20907'. [ 2686.148206][T31862] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20907'. [ 2686.378356][T31877] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.20913'. [ 2686.471727][T31879] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.20914'. [ 2686.539749][T31885] netlink: 132 bytes leftover after parsing attributes in process `syz.4.20915'. [ 2686.732820][T31891] delete_channel: no stack [ 2686.753562][T31893] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.20919'. [ 2686.763185][T31891] delete_channel: no stack [ 2686.785754][T31886] delete_channel: no stack [ 2686.813319][T31893] IPv6: NLM_F_CREATE should be specified when creating new route [ 2687.447974][T31928] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2687.454988][T31928] dvmrp1: linktype set to 768 [ 2687.608534][T31930] delete_channel: no stack [ 2687.614871][T31930] delete_channel: no stack [ 2687.685486][T31929] delete_channel: no stack [ 2688.469519][T31972] delete_channel: no stack [ 2688.486933][T31972] delete_channel: no stack [ 2688.612116][T31971] delete_channel: no stack [ 2688.756551][T31980] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2688.763434][T31980] dvmrp1: linktype set to 768 [ 2689.408227][T32013] delete_channel: no stack [ 2689.423611][T32013] delete_channel: no stack [ 2689.452406][T32012] delete_channel: no stack [ 2689.810571][T32028] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2689.863057][T32028] CPU: 1 PID: 32028 Comm: syz.3.20964 Not tainted syzkaller #0 [ 2689.870678][T32028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2689.880759][T32028] Call Trace: [ 2689.884052][T32028] [ 2689.886995][T32028] dump_stack_lvl+0x188/0x24e [ 2689.891708][T32028] ? show_regs_print_info+0x12/0x12 [ 2689.896927][T32028] ? load_image+0x400/0x400 [ 2689.901464][T32028] sysfs_warn_dup+0x8a/0xa0 [ 2689.905994][T32028] sysfs_do_create_link_sd+0xc0/0x110 [ 2689.911396][T32028] device_add+0x7f6/0x1000 [ 2689.915829][T32028] wiphy_register+0x1d9f/0x2ac0 [ 2689.920698][T32028] ? cfg80211_event_work+0x40/0x40 [ 2689.925811][T32028] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2689.931880][T32028] ieee80211_register_hw+0x2d00/0x39f0 [ 2689.937342][T32028] ? lockdep_hardirqs_on+0x94/0x140 [ 2689.942547][T32028] ? ieee80211_register_hw+0xec1/0x39f0 [ 2689.948085][T32028] ? ieee80211_register_hw+0xec1/0x39f0 [ 2689.953632][T32028] ? ieee80211_tasklet_handler+0x20/0x20 [ 2689.959269][T32028] ? memset+0x1e/0x40 [ 2689.963246][T32028] ? __hrtimer_init+0x186/0x270 [ 2689.968093][T32028] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2689.973827][T32028] hwsim_new_radio_nl+0xafa/0xce0 [ 2689.978861][T32028] genl_family_rcv_msg_doit+0x22a/0x330 [ 2689.984407][T32028] ? end_current_label_crit_section+0x170/0x170 [ 2689.990660][T32028] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2689.996555][T32028] ? bpf_lsm_capable+0x5/0x10 [ 2690.001227][T32028] ? security_capable+0x85/0xb0 [ 2690.006078][T32028] genl_rcv_msg+0x604/0x790 [ 2690.010588][T32028] ? genl_bind+0x360/0x360 [ 2690.015009][T32028] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2690.021342][T32028] netlink_rcv_skb+0x1fb/0x450 [ 2690.026104][T32028] ? genl_bind+0x360/0x360 [ 2690.030515][T32028] ? netlink_ack+0x1170/0x1170 [ 2690.035280][T32028] ? down_read+0x1a8/0x2d0 [ 2690.039691][T32028] genl_rcv+0x24/0x40 [ 2690.043668][T32028] netlink_unicast+0x74d/0x8d0 [ 2690.048439][T32028] netlink_sendmsg+0x8ad/0xbd0 [ 2690.053207][T32028] ? netlink_getsockopt+0x550/0x550 [ 2690.058403][T32028] ? aa_sock_msg_perm+0x94/0x150 [ 2690.063339][T32028] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2690.068618][T32028] ? security_socket_sendmsg+0x7c/0xa0 [ 2690.074077][T32028] ? netlink_getsockopt+0x550/0x550 [ 2690.079271][T32028] ____sys_sendmsg+0x5be/0x970 [ 2690.084036][T32028] ? __sys_sendmsg_sock+0x30/0x30 [ 2690.089049][T32028] ? __import_iovec+0x315/0x500 [ 2690.093901][T32028] ? import_iovec+0x6f/0xa0 [ 2690.098402][T32028] ___sys_sendmsg+0x2a2/0x360 [ 2690.103078][T32028] ? __sys_sendmsg+0x290/0x290 [ 2690.107855][T32028] ? trace_call_bpf+0xbf/0x6b0 [ 2690.112647][T32028] __se_sys_sendmsg+0x1bb/0x2a0 [ 2690.117498][T32028] ? __x64_sys_sendmsg+0x80/0x80 [ 2690.122444][T32028] ? lockdep_hardirqs_on+0x94/0x140 [ 2690.127642][T32028] do_syscall_64+0x4c/0xa0 [ 2690.132052][T32028] ? clear_bhb_loop+0x60/0xb0 [ 2690.136723][T32028] ? clear_bhb_loop+0x60/0xb0 [ 2690.141398][T32028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2690.147290][T32028] RIP: 0033:0x7fc63399ce59 [ 2690.151701][T32028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2690.171299][T32028] RSP: 002b:00007fc631bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2690.179709][T32028] RAX: ffffffffffffffda RBX: 00007fc633c16090 RCX: 00007fc63399ce59 [ 2690.187677][T32028] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2690.195646][T32028] RBP: 00007fc633a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2690.203609][T32028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2690.211580][T32028] R13: 00007fc633c16128 R14: 00007fc633c16090 R15: 00007ffd004e3428 [ 2690.219558][T32028] [ 2690.444895][T32038] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2690.460925][T32038] dvmrp1: linktype set to 768 [ 2690.618047][T32046] validate_nla: 28 callbacks suppressed [ 2690.618079][T32046] netlink: 'syz.2.20972': attribute type 3 has an invalid length. [ 2690.650487][T32046] __nla_validate_parse: 20 callbacks suppressed [ 2690.650525][T32046] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.20972'. [ 2690.683816][T32050] netlink: 'syz.3.20975': attribute type 3 has an invalid length. [ 2690.693353][T32050] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.20975'. [ 2690.831927][T32058] netlink: 'syz.1.20976': attribute type 27 has an invalid length. [ 2690.860302][T32058] netlink: 164 bytes leftover after parsing attributes in process `syz.1.20976'. [ 2691.958349][T32096] netlink: 'syz.4.20990': attribute type 1 has an invalid length. [ 2691.999027][T32095] netlink: 'syz.2.20989': attribute type 17 has an invalid length. [ 2692.011960][T32096] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.20990'. [ 2692.080125][T32098] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.20987'. [ 2692.144932][T32096] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.20990'. [ 2692.186335][T32098] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2692.220045][T32098] CPU: 0 PID: 32098 Comm: syz.0.20987 Not tainted syzkaller #0 [ 2692.227659][T32098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2692.237734][T32098] Call Trace: [ 2692.241035][T32098] [ 2692.243981][T32098] dump_stack_lvl+0x188/0x24e [ 2692.248683][T32098] ? show_regs_print_info+0x12/0x12 [ 2692.253893][T32098] ? load_image+0x400/0x400 [ 2692.258400][T32098] sysfs_warn_dup+0x8a/0xa0 [ 2692.262895][T32098] sysfs_do_create_link_sd+0xc0/0x110 [ 2692.268260][T32098] device_add+0x7f6/0x1000 [ 2692.272698][T32098] wiphy_register+0x1d9f/0x2ac0 [ 2692.277573][T32098] ? cfg80211_event_work+0x40/0x40 [ 2692.282699][T32098] ? minstrel_ht_alloc+0x894/0xa20 [ 2692.287841][T32098] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2692.293943][T32098] ieee80211_register_hw+0x2d00/0x39f0 [ 2692.299451][T32098] ? ieee80211_register_hw+0xec1/0x39f0 [ 2692.305017][T32098] ? ieee80211_register_hw+0xec1/0x39f0 [ 2692.310599][T32098] ? ieee80211_tasklet_handler+0x20/0x20 [ 2692.316273][T32098] ? memset+0x1e/0x40 [ 2692.320279][T32098] ? __hrtimer_init+0x186/0x270 [ 2692.325155][T32098] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2692.330906][T32098] hwsim_new_radio_nl+0xafa/0xce0 [ 2692.335959][T32098] genl_family_rcv_msg_doit+0x22a/0x330 [ 2692.341513][T32098] ? end_current_label_crit_section+0x170/0x170 [ 2692.347756][T32098] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2692.353655][T32098] ? bpf_lsm_capable+0x5/0x10 [ 2692.358333][T32098] ? security_capable+0x85/0xb0 [ 2692.363193][T32098] genl_rcv_msg+0x604/0x790 [ 2692.367711][T32098] ? genl_bind+0x360/0x360 [ 2692.372129][T32098] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2692.378472][T32098] netlink_rcv_skb+0x1fb/0x450 [ 2692.383235][T32098] ? genl_bind+0x360/0x360 [ 2692.387651][T32098] ? netlink_ack+0x1170/0x1170 [ 2692.392428][T32098] ? down_read+0x1a8/0x2d0 [ 2692.396844][T32098] genl_rcv+0x24/0x40 [ 2692.400820][T32098] netlink_unicast+0x74d/0x8d0 [ 2692.405588][T32098] netlink_sendmsg+0x8ad/0xbd0 [ 2692.410358][T32098] ? netlink_getsockopt+0x550/0x550 [ 2692.415558][T32098] ? aa_sock_msg_perm+0x94/0x150 [ 2692.420493][T32098] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2692.425768][T32098] ? security_socket_sendmsg+0x7c/0xa0 [ 2692.431222][T32098] ? netlink_getsockopt+0x550/0x550 [ 2692.436414][T32098] ____sys_sendmsg+0x5be/0x970 [ 2692.441185][T32098] ? __sys_sendmsg_sock+0x30/0x30 [ 2692.446203][T32098] ? __import_iovec+0x315/0x500 [ 2692.451055][T32098] ? import_iovec+0x6f/0xa0 [ 2692.455557][T32098] ___sys_sendmsg+0x2a2/0x360 [ 2692.460235][T32098] ? __sys_sendmsg+0x290/0x290 [ 2692.464999][T32098] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2692.470987][T32098] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2692.477154][T32098] ? __se_sys_sendmsg+0x91/0x2a0 [ 2692.482086][T32098] ? __se_sys_sendmsg+0xf4/0x2a0 [ 2692.487020][T32098] ? kasan_check_range+0xe/0x290 [ 2692.491970][T32098] __se_sys_sendmsg+0x1bb/0x2a0 [ 2692.496823][T32098] ? __x64_sys_sendmsg+0x80/0x80 [ 2692.501770][T32098] ? lockdep_hardirqs_on+0x94/0x140 [ 2692.506968][T32098] do_syscall_64+0x4c/0xa0 [ 2692.511379][T32098] ? clear_bhb_loop+0x60/0xb0 [ 2692.516054][T32098] ? clear_bhb_loop+0x60/0xb0 [ 2692.520731][T32098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2692.526619][T32098] RIP: 0033:0x7fa53719ce59 [ 2692.531030][T32098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2692.550629][T32098] RSP: 002b:00007fa538119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2692.559039][T32098] RAX: ffffffffffffffda RBX: 00007fa537416090 RCX: 00007fa53719ce59 [ 2692.567003][T32098] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2692.574965][T32098] RBP: 00007fa537232e6f R08: 0000000000000000 R09: 0000000000000000 [ 2692.582933][T32098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2692.590895][T32098] R13: 00007fa537416128 R14: 00007fa537416090 R15: 00007fffa6097378 [ 2692.598880][T32098] [ 2692.631875][T32111] netlink: 14 bytes leftover after parsing attributes in process `syz.3.20993'. [ 2692.908042][T32125] netlink: 'syz.0.20995': attribute type 27 has an invalid length. [ 2692.949146][T32125] netlink: 164 bytes leftover after parsing attributes in process `syz.0.20995'. [ 2692.988327][T32124] netlink: 'syz.2.20999': attribute type 3 has an invalid length. [ 2692.997268][T32124] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.20999'. [ 2693.297179][T32133] netlink: 'syz.4.21012': attribute type 3 has an invalid length. [ 2693.326899][T32133] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.21012'. [ 2693.763472][T32147] netlink: 'syz.0.21005': attribute type 10 has an invalid length. [ 2693.961993][T32156] netlink: 'syz.1.21008': attribute type 20 has an invalid length. [ 2693.997927][T32156] IPv6: NLM_F_CREATE should be specified when creating new route [ 2694.318968][T32173] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2694.328975][T32173] dvmrp1: linktype set to 768 [ 2695.037776][T32198] IPv6: NLM_F_CREATE should be specified when creating new route [ 2695.493056][T32217] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2695.509028][T32217] dvmrp1: linktype set to 768 [ 2695.708588][T32226] validate_nla: 10 callbacks suppressed [ 2695.708633][T32226] netlink: 'syz.0.21047': attribute type 3 has an invalid length. [ 2695.775284][T32226] __nla_validate_parse: 15 callbacks suppressed [ 2695.775321][T32226] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.21047'. [ 2695.807042][T32231] netlink: 14 bytes leftover after parsing attributes in process `syz.1.21038'. [ 2696.120887][T32241] netlink: 'syz.0.21041': attribute type 3 has an invalid length. [ 2696.128674][T32238] netlink: 'syz.4.21039': attribute type 17 has an invalid length. [ 2696.128811][T32241] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.21041'. [ 2696.379806][T32251] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.21044'. [ 2696.428217][T32251] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2696.439793][T32251] CPU: 0 PID: 32251 Comm: syz.1.21044 Not tainted syzkaller #0 [ 2696.447378][T32251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2696.457448][T32251] Call Trace: [ 2696.460742][T32251] [ 2696.463692][T32251] dump_stack_lvl+0x188/0x24e [ 2696.468403][T32251] ? show_regs_print_info+0x12/0x12 [ 2696.473628][T32251] ? load_image+0x400/0x400 [ 2696.478180][T32251] sysfs_warn_dup+0x8a/0xa0 [ 2696.482714][T32251] sysfs_do_create_link_sd+0xc0/0x110 [ 2696.488113][T32251] device_add+0x7f6/0x1000 [ 2696.492569][T32251] wiphy_register+0x1d9f/0x2ac0 [ 2696.497463][T32251] ? cfg80211_event_work+0x40/0x40 [ 2696.502600][T32251] ? minstrel_ht_alloc+0x894/0xa20 [ 2696.507741][T32251] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2696.513843][T32251] ieee80211_register_hw+0x2d00/0x39f0 [ 2696.519343][T32251] ? ieee80211_register_hw+0xec1/0x39f0 [ 2696.524911][T32251] ? ieee80211_register_hw+0xec1/0x39f0 [ 2696.530484][T32251] ? ieee80211_tasklet_handler+0x20/0x20 [ 2696.536156][T32251] ? memset+0x1e/0x40 [ 2696.540151][T32251] ? __hrtimer_init+0x186/0x270 [ 2696.545008][T32251] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2696.550744][T32251] hwsim_new_radio_nl+0xafa/0xce0 [ 2696.555781][T32251] genl_family_rcv_msg_doit+0x22a/0x330 [ 2696.561330][T32251] ? end_current_label_crit_section+0x170/0x170 [ 2696.567575][T32251] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2696.573474][T32251] ? bpf_lsm_capable+0x5/0x10 [ 2696.578150][T32251] ? security_capable+0x85/0xb0 [ 2696.583006][T32251] genl_rcv_msg+0x604/0x790 [ 2696.587515][T32251] ? genl_bind+0x360/0x360 [ 2696.591931][T32251] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2696.598270][T32251] netlink_rcv_skb+0x1fb/0x450 [ 2696.603031][T32251] ? genl_bind+0x360/0x360 [ 2696.607448][T32251] ? netlink_ack+0x1170/0x1170 [ 2696.612215][T32251] ? down_read+0x1a8/0x2d0 [ 2696.616629][T32251] genl_rcv+0x24/0x40 [ 2696.620606][T32251] netlink_unicast+0x74d/0x8d0 [ 2696.625376][T32251] netlink_sendmsg+0x8ad/0xbd0 [ 2696.630147][T32251] ? netlink_getsockopt+0x550/0x550 [ 2696.635342][T32251] ? aa_sock_msg_perm+0x94/0x150 [ 2696.640278][T32251] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2696.645561][T32251] ? security_socket_sendmsg+0x7c/0xa0 [ 2696.651013][T32251] ? netlink_getsockopt+0x550/0x550 [ 2696.656204][T32251] ____sys_sendmsg+0x5be/0x970 [ 2696.660969][T32251] ? __sys_sendmsg_sock+0x30/0x30 [ 2696.665985][T32251] ? __import_iovec+0x315/0x500 [ 2696.670838][T32251] ? import_iovec+0x6f/0xa0 [ 2696.675340][T32251] ___sys_sendmsg+0x2a2/0x360 [ 2696.680016][T32251] ? __sys_sendmsg+0x290/0x290 [ 2696.684792][T32251] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2696.690539][T32251] __se_sys_sendmsg+0x1bb/0x2a0 [ 2696.695397][T32251] ? __x64_sys_sendmsg+0x80/0x80 [ 2696.700345][T32251] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2696.706241][T32251] do_syscall_64+0x4c/0xa0 [ 2696.710653][T32251] ? clear_bhb_loop+0x60/0xb0 [ 2696.715330][T32251] ? clear_bhb_loop+0x60/0xb0 [ 2696.720010][T32251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2696.725900][T32251] RIP: 0033:0x7fec0db9ce59 [ 2696.730309][T32251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2696.749908][T32251] RSP: 002b:00007fec0ea2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2696.758316][T32251] RAX: ffffffffffffffda RBX: 00007fec0de16090 RCX: 00007fec0db9ce59 [ 2696.766278][T32251] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2696.774240][T32251] RBP: 00007fec0dc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2696.782205][T32251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2696.790168][T32251] R13: 00007fec0de16128 R14: 00007fec0de16090 R15: 00007ffdbac61338 [ 2696.798149][T32251] [ 2696.831823][T32261] netlink: 152 bytes leftover after parsing attributes in process `syz.3.21048'. [ 2697.055547][T32269] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.21051'. [ 2697.074897][T32269] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2697.084288][T32271] netlink: 'syz.2.21052': attribute type 3 has an invalid length. [ 2697.084569][T32269] dvmrp1: linktype set to 768 [ 2697.093028][T32271] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21052'. [ 2697.402085][T32285] netlink: 14 bytes leftover after parsing attributes in process `syz.0.21057'. [ 2697.451609][T32282] netlink: 'syz.2.21056': attribute type 3 has an invalid length. [ 2697.462935][T32282] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21056'. [ 2697.463433][T32289] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.21058'. [ 2697.727791][T32294] netlink: 'syz.4.21060': attribute type 3 has an invalid length. [ 2697.917628][T32309] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2697.962000][T32309] CPU: 1 PID: 32309 Comm: syz.0.21065 Not tainted syzkaller #0 [ 2697.969606][T32309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2697.979681][T32309] Call Trace: [ 2697.982981][T32309] [ 2697.985932][T32309] dump_stack_lvl+0x188/0x24e [ 2697.990638][T32309] ? show_regs_print_info+0x12/0x12 [ 2697.995856][T32309] ? load_image+0x400/0x400 [ 2698.000389][T32309] sysfs_warn_dup+0x8a/0xa0 [ 2698.004918][T32309] sysfs_do_create_link_sd+0xc0/0x110 [ 2698.010323][T32309] device_add+0x7f6/0x1000 [ 2698.014755][T32309] wiphy_register+0x1d9f/0x2ac0 [ 2698.019612][T32309] ? cfg80211_event_work+0x40/0x40 [ 2698.024720][T32309] ? minstrel_ht_alloc+0x894/0xa20 [ 2698.029833][T32309] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2698.035906][T32309] ieee80211_register_hw+0x2d00/0x39f0 [ 2698.041364][T32309] ? lockdep_hardirqs_on+0x94/0x140 [ 2698.046564][T32309] ? ieee80211_register_hw+0xec1/0x39f0 [ 2698.052099][T32309] ? ieee80211_register_hw+0xec1/0x39f0 [ 2698.057639][T32309] ? ieee80211_tasklet_handler+0x20/0x20 [ 2698.063268][T32309] ? memset+0x1e/0x40 [ 2698.067239][T32309] ? __hrtimer_init+0x186/0x270 [ 2698.072086][T32309] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2698.077811][T32309] hwsim_new_radio_nl+0xafa/0xce0 [ 2698.082838][T32309] genl_family_rcv_msg_doit+0x22a/0x330 [ 2698.088379][T32309] ? end_current_label_crit_section+0x170/0x170 [ 2698.094617][T32309] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2698.100511][T32309] ? bpf_lsm_capable+0x5/0x10 [ 2698.105180][T32309] ? security_capable+0x85/0xb0 [ 2698.110035][T32309] genl_rcv_msg+0x604/0x790 [ 2698.114541][T32309] ? genl_bind+0x360/0x360 [ 2698.118949][T32309] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2698.125277][T32309] netlink_rcv_skb+0x1fb/0x450 [ 2698.130037][T32309] ? genl_bind+0x360/0x360 [ 2698.134448][T32309] ? netlink_ack+0x1170/0x1170 [ 2698.139206][T32309] ? down_read+0x1a8/0x2d0 [ 2698.143620][T32309] genl_rcv+0x24/0x40 [ 2698.147595][T32309] netlink_unicast+0x74d/0x8d0 [ 2698.152360][T32309] netlink_sendmsg+0x8ad/0xbd0 [ 2698.157124][T32309] ? netlink_getsockopt+0x550/0x550 [ 2698.162320][T32309] ? aa_sock_msg_perm+0x94/0x150 [ 2698.167259][T32309] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2698.172537][T32309] ? security_socket_sendmsg+0x7c/0xa0 [ 2698.177987][T32309] ? netlink_getsockopt+0x550/0x550 [ 2698.183177][T32309] ____sys_sendmsg+0x5be/0x970 [ 2698.187943][T32309] ? __sys_sendmsg_sock+0x30/0x30 [ 2698.192958][T32309] ? __import_iovec+0x315/0x500 [ 2698.197806][T32309] ? import_iovec+0x6f/0xa0 [ 2698.202301][T32309] ___sys_sendmsg+0x2a2/0x360 [ 2698.206974][T32309] ? __sys_sendmsg+0x290/0x290 [ 2698.211768][T32309] __se_sys_sendmsg+0x1bb/0x2a0 [ 2698.216611][T32309] ? __x64_sys_sendmsg+0x80/0x80 [ 2698.221549][T32309] ? lockdep_hardirqs_on+0x94/0x140 [ 2698.226742][T32309] do_syscall_64+0x4c/0xa0 [ 2698.231151][T32309] ? clear_bhb_loop+0x60/0xb0 [ 2698.235822][T32309] ? clear_bhb_loop+0x60/0xb0 [ 2698.240498][T32309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2698.246400][T32309] RIP: 0033:0x7fa53719ce59 [ 2698.250811][T32309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2698.270409][T32309] RSP: 002b:00007fa538119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2698.278814][T32309] RAX: ffffffffffffffda RBX: 00007fa537416090 RCX: 00007fa53719ce59 [ 2698.286780][T32309] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2698.294744][T32309] RBP: 00007fa537232e6f R08: 0000000000000000 R09: 0000000000000000 [ 2698.302707][T32309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2698.310671][T32309] R13: 00007fa537416128 R14: 00007fa537416090 R15: 00007fffa6097378 [ 2698.318645][T32309] [ 2698.383602][T32315] netlink: 'syz.4.21067': attribute type 3 has an invalid length. [ 2698.414876][T32313] netlink: 'syz.3.21068': attribute type 10 has an invalid length. [ 2698.635473][T32323] netlink: 'syz.4.21072': attribute type 3 has an invalid length. [ 2699.360099][T32350] netlink: 'syz.2.21080': attribute type 10 has an invalid length. [ 2701.076199][T32416] validate_nla: 4 callbacks suppressed [ 2701.076235][T32416] netlink: 'syz.2.21107': attribute type 3 has an invalid length. [ 2701.120125][T32416] __nla_validate_parse: 10 callbacks suppressed [ 2701.120162][T32416] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21107'. [ 2701.635171][T32445] netlink: 'syz.1.21119': attribute type 3 has an invalid length. [ 2701.661093][T32445] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21119'. [ 2701.714922][T32442] netlink: 'syz.0.21121': attribute type 17 has an invalid length. [ 2701.828629][T32452] netlink: 'syz.2.21125': attribute type 3 has an invalid length. [ 2701.881029][T32452] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21125'. [ 2702.333588][T32468] netlink: 'syz.1.21131': attribute type 3 has an invalid length. [ 2702.350317][T32468] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21131'. [ 2702.623643][T32481] netlink: 'syz.1.21136': attribute type 10 has an invalid length. [ 2702.734245][T32484] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.21134'. [ 2702.737066][T32483] netlink: 'syz.3.21137': attribute type 3 has an invalid length. [ 2702.779368][T32484] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2702.802839][T32484] CPU: 0 PID: 32484 Comm: syz.2.21134 Not tainted syzkaller #0 [ 2702.810358][T32483] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.21137'. [ 2702.810421][T32484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2702.810435][T32484] Call Trace: [ 2702.810442][T32484] [ 2702.810450][T32484] dump_stack_lvl+0x188/0x24e [ 2702.840862][T32484] ? show_regs_print_info+0x12/0x12 [ 2702.846075][T32484] ? load_image+0x400/0x400 [ 2702.850608][T32484] sysfs_warn_dup+0x8a/0xa0 [ 2702.855136][T32484] sysfs_do_create_link_sd+0xc0/0x110 [ 2702.860537][T32484] device_add+0x7f6/0x1000 [ 2702.864988][T32484] wiphy_register+0x1d9f/0x2ac0 [ 2702.869872][T32484] ? cfg80211_event_work+0x40/0x40 [ 2702.874998][T32484] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2702.881193][T32484] ieee80211_register_hw+0x2d00/0x39f0 [ 2702.886691][T32484] ? ieee80211_register_hw+0xec1/0x39f0 [ 2702.892254][T32484] ? ieee80211_register_hw+0xec1/0x39f0 [ 2702.897831][T32484] ? ieee80211_tasklet_handler+0x20/0x20 [ 2702.903496][T32484] ? memset+0x1e/0x40 [ 2702.907509][T32484] ? __hrtimer_init+0x186/0x270 [ 2702.912389][T32484] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2702.918147][T32484] hwsim_new_radio_nl+0xafa/0xce0 [ 2702.923201][T32484] genl_family_rcv_msg_doit+0x22a/0x330 [ 2702.928764][T32484] ? end_current_label_crit_section+0x170/0x170 [ 2702.935024][T32484] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2702.940947][T32484] ? bpf_lsm_capable+0x5/0x10 [ 2702.945643][T32484] ? security_capable+0x85/0xb0 [ 2702.950525][T32484] genl_rcv_msg+0x604/0x790 [ 2702.955054][T32484] ? genl_bind+0x360/0x360 [ 2702.959487][T32484] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2702.965849][T32484] netlink_rcv_skb+0x1fb/0x450 [ 2702.970437][T32492] netlink: 'syz.1.21139': attribute type 3 has an invalid length. [ 2702.970614][T32484] ? genl_bind+0x360/0x360 [ 2702.982860][T32484] ? netlink_ack+0x1170/0x1170 [ 2702.987653][T32484] ? down_read+0x1a8/0x2d0 [ 2702.989358][T32492] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21139'. [ 2702.992072][T32484] genl_rcv+0x24/0x40 [ 2702.992095][T32484] netlink_unicast+0x74d/0x8d0 [ 2702.992124][T32484] netlink_sendmsg+0x8ad/0xbd0 [ 2703.014968][T32484] ? netlink_getsockopt+0x550/0x550 [ 2703.020192][T32484] ? aa_sock_msg_perm+0x94/0x150 [ 2703.025150][T32484] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2703.030453][T32484] ? security_socket_sendmsg+0x7c/0xa0 [ 2703.035930][T32484] ? netlink_getsockopt+0x550/0x550 [ 2703.041146][T32484] ____sys_sendmsg+0x5be/0x970 [ 2703.046044][T32484] ? __sys_sendmsg_sock+0x30/0x30 [ 2703.051090][T32484] ? __import_iovec+0x315/0x500 [ 2703.055979][T32484] ? import_iovec+0x6f/0xa0 [ 2703.060513][T32484] ___sys_sendmsg+0x2a2/0x360 [ 2703.065210][T32484] ? __sys_sendmsg+0x290/0x290 [ 2703.070014][T32484] ? trace_call_bpf+0xbf/0x6b0 [ 2703.074829][T32484] __se_sys_sendmsg+0x1bb/0x2a0 [ 2703.079701][T32484] ? __x64_sys_sendmsg+0x80/0x80 [ 2703.084674][T32484] ? lockdep_hardirqs_on+0x94/0x140 [ 2703.089899][T32484] do_syscall_64+0x4c/0xa0 [ 2703.094327][T32484] ? clear_bhb_loop+0x60/0xb0 [ 2703.099024][T32484] ? clear_bhb_loop+0x60/0xb0 [ 2703.103729][T32484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2703.109643][T32484] RIP: 0033:0x7fd70f59ce59 [ 2703.114085][T32484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2703.133716][T32484] RSP: 002b:00007fd710501028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2703.142151][T32484] RAX: ffffffffffffffda RBX: 00007fd70f816090 RCX: 00007fd70f59ce59 [ 2703.150142][T32484] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2703.158136][T32484] RBP: 00007fd70f632e6f R08: 0000000000000000 R09: 0000000000000000 [ 2703.166125][T32484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2703.174110][T32484] R13: 00007fd70f816128 R14: 00007fd70f816090 R15: 00007ffc5b1daf18 [ 2703.182118][T32484] [ 2703.868752][T32520] netlink: 'syz.2.21151': attribute type 3 has an invalid length. [ 2703.894288][T32520] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21151'. [ 2703.928728][T32522] netlink: 'syz.1.21152': attribute type 3 has an invalid length. [ 2703.940815][T32522] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21152'. [ 2704.314412][T32547] netlink: 128 bytes leftover after parsing attributes in process `syz.2.21163'. [ 2704.342954][T32547] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2706.185883][T32648] validate_nla: 8 callbacks suppressed [ 2706.185920][T32648] netlink: 'syz.0.21208': attribute type 3 has an invalid length. [ 2706.210530][T32648] __nla_validate_parse: 5 callbacks suppressed [ 2706.210564][T32648] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.21208'. [ 2706.274217][T32656] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.21210'. [ 2706.302601][T32656] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2706.330370][T32656] CPU: 1 PID: 32656 Comm: syz.4.21210 Not tainted syzkaller #0 [ 2706.337960][T32656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2706.348011][T32656] Call Trace: [ 2706.351288][T32656] [ 2706.354219][T32656] dump_stack_lvl+0x188/0x24e [ 2706.358900][T32656] ? show_regs_print_info+0x12/0x12 [ 2706.364093][T32656] ? load_image+0x400/0x400 [ 2706.368601][T32656] sysfs_warn_dup+0x8a/0xa0 [ 2706.373105][T32656] sysfs_do_create_link_sd+0xc0/0x110 [ 2706.378473][T32656] device_add+0x7f6/0x1000 [ 2706.382892][T32656] wiphy_register+0x1d9f/0x2ac0 [ 2706.387751][T32656] ? cfg80211_event_work+0x40/0x40 [ 2706.392863][T32656] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2706.398948][T32656] ieee80211_register_hw+0x2d00/0x39f0 [ 2706.404432][T32656] ? ieee80211_register_hw+0xec1/0x39f0 [ 2706.409986][T32656] ? ieee80211_register_hw+0xec1/0x39f0 [ 2706.415541][T32656] ? ieee80211_tasklet_handler+0x20/0x20 [ 2706.421180][T32656] ? memset+0x1e/0x40 [ 2706.425155][T32656] ? __hrtimer_init+0x186/0x270 [ 2706.430004][T32656] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2706.435735][T32656] hwsim_new_radio_nl+0xafa/0xce0 [ 2706.440764][T32656] genl_family_rcv_msg_doit+0x22a/0x330 [ 2706.446305][T32656] ? end_current_label_crit_section+0x170/0x170 [ 2706.452558][T32656] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2706.458482][T32656] ? bpf_lsm_capable+0x5/0x10 [ 2706.463163][T32656] ? security_capable+0x85/0xb0 [ 2706.468018][T32656] genl_rcv_msg+0x604/0x790 [ 2706.472530][T32656] ? genl_bind+0x360/0x360 [ 2706.476942][T32656] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2706.483277][T32656] netlink_rcv_skb+0x1fb/0x450 [ 2706.488043][T32656] ? genl_bind+0x360/0x360 [ 2706.492457][T32656] ? netlink_ack+0x1170/0x1170 [ 2706.497226][T32656] ? down_read+0x1a8/0x2d0 [ 2706.501642][T32656] genl_rcv+0x24/0x40 [ 2706.505620][T32656] netlink_unicast+0x74d/0x8d0 [ 2706.510389][T32656] netlink_sendmsg+0x8ad/0xbd0 [ 2706.515142][T32656] ? lockdep_hardirqs_on+0x94/0x140 [ 2706.520344][T32656] ? netlink_getsockopt+0x550/0x550 [ 2706.525538][T32656] ? security_socket_sendmsg+0x41/0xa0 [ 2706.531000][T32656] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2706.536293][T32656] ? security_socket_sendmsg+0x7c/0xa0 [ 2706.541757][T32656] ? netlink_getsockopt+0x550/0x550 [ 2706.546955][T32656] ____sys_sendmsg+0x5be/0x970 [ 2706.551725][T32656] ? __sys_sendmsg_sock+0x30/0x30 [ 2706.556741][T32656] ? __import_iovec+0x315/0x500 [ 2706.561590][T32656] ? import_iovec+0x6f/0xa0 [ 2706.566092][T32656] ___sys_sendmsg+0x2a2/0x360 [ 2706.570774][T32656] ? __sys_sendmsg+0x290/0x290 [ 2706.575547][T32656] ? trace_call_bpf+0xbf/0x6b0 [ 2706.580328][T32656] __se_sys_sendmsg+0x1bb/0x2a0 [ 2706.585175][T32656] ? __x64_sys_sendmsg+0x80/0x80 [ 2706.590116][T32656] ? lockdep_hardirqs_on+0x94/0x140 [ 2706.595311][T32656] do_syscall_64+0x4c/0xa0 [ 2706.599718][T32656] ? clear_bhb_loop+0x60/0xb0 [ 2706.604392][T32656] ? clear_bhb_loop+0x60/0xb0 [ 2706.609067][T32656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2706.614957][T32656] RIP: 0033:0x7f687019ce59 [ 2706.619364][T32656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2706.639047][T32656] RSP: 002b:00007f687105c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2706.647451][T32656] RAX: ffffffffffffffda RBX: 00007f6870416090 RCX: 00007f687019ce59 [ 2706.655418][T32656] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2706.663382][T32656] RBP: 00007f6870232e6f R08: 0000000000000000 R09: 0000000000000000 [ 2706.671343][T32656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2706.679301][T32656] R13: 00007f6870416128 R14: 00007f6870416090 R15: 00007ffc2dc8f9d8 [ 2706.687280][T32656] [ 2706.916353][T32672] netlink: 'syz.1.21214': attribute type 10 has an invalid length. [ 2707.128899][T32681] netlink: 'syz.0.21220': attribute type 29 has an invalid length. [ 2707.148711][T32681] netlink: 'syz.0.21220': attribute type 29 has an invalid length. [ 2707.200917][T32679] netlink: 'syz.2.21219': attribute type 3 has an invalid length. [ 2707.217249][T32679] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21219'. [ 2707.219993][T32685] netlink: 'syz.3.21223': attribute type 10 has an invalid length. [ 2707.358588][T32687] netlink: 'syz.1.21224': attribute type 3 has an invalid length. [ 2707.389434][T32687] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21224'. [ 2707.554963][T32701] netlink: 132 bytes leftover after parsing attributes in process `syz.3.21230'. [ 2707.692098][T32711] netlink: 128 bytes leftover after parsing attributes in process `syz.1.21233'. [ 2707.734837][T32711] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2707.865958][T32718] netlink: 'syz.0.21239': attribute type 3 has an invalid length. [ 2707.879721][T32718] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.21239'. [ 2708.083863][T32728] netlink: 'syz.1.21244': attribute type 3 has an invalid length. [ 2708.119474][T32728] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21244'. [ 2708.946910][T32766] netlink: 'syz.4.21261': attribute type 3 has an invalid length. [ 2708.958836][T32766] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.21261'. [ 2708.972146][T32762] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.21259'. [ 2710.384911][ T369] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2710.401885][ T369] CPU: 0 PID: 369 Comm: syz.0.21288 Not tainted syzkaller #0 [ 2710.409319][ T369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2710.419395][ T369] Call Trace: [ 2710.422690][ T369] [ 2710.425635][ T369] dump_stack_lvl+0x188/0x24e [ 2710.430346][ T369] ? show_regs_print_info+0x12/0x12 [ 2710.435568][ T369] ? load_image+0x400/0x400 [ 2710.440109][ T369] sysfs_warn_dup+0x8a/0xa0 [ 2710.444636][ T369] sysfs_do_create_link_sd+0xc0/0x110 [ 2710.450034][ T369] device_add+0x7f6/0x1000 [ 2710.454478][ T369] wiphy_register+0x1d9f/0x2ac0 [ 2710.459370][ T369] ? cfg80211_event_work+0x40/0x40 [ 2710.464499][ T369] ? minstrel_ht_alloc+0x894/0xa20 [ 2710.469633][ T369] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2710.475725][ T369] ieee80211_register_hw+0x2d00/0x39f0 [ 2710.481201][ T369] ? lockdep_hardirqs_on+0x94/0x140 [ 2710.486430][ T369] ? ieee80211_register_hw+0xec1/0x39f0 [ 2710.491991][ T369] ? ieee80211_register_hw+0xec1/0x39f0 [ 2710.497569][ T369] ? ieee80211_tasklet_handler+0x20/0x20 [ 2710.503232][ T369] ? memset+0x1e/0x40 [ 2710.507235][ T369] ? __hrtimer_init+0x186/0x270 [ 2710.512109][ T369] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2710.517860][ T369] hwsim_new_radio_nl+0xafa/0xce0 [ 2710.522894][ T369] genl_family_rcv_msg_doit+0x22a/0x330 [ 2710.528441][ T369] ? end_current_label_crit_section+0x170/0x170 [ 2710.534679][ T369] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2710.540573][ T369] ? bpf_lsm_capable+0x5/0x10 [ 2710.545242][ T369] ? security_capable+0x85/0xb0 [ 2710.550090][ T369] genl_rcv_msg+0x604/0x790 [ 2710.554592][ T369] ? genl_bind+0x360/0x360 [ 2710.559000][ T369] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2710.565331][ T369] netlink_rcv_skb+0x1fb/0x450 [ 2710.570086][ T369] ? genl_bind+0x360/0x360 [ 2710.574496][ T369] ? netlink_ack+0x1170/0x1170 [ 2710.579257][ T369] ? down_read+0x1a8/0x2d0 [ 2710.583695][ T369] genl_rcv+0x24/0x40 [ 2710.587673][ T369] netlink_unicast+0x74d/0x8d0 [ 2710.592437][ T369] netlink_sendmsg+0x8ad/0xbd0 [ 2710.597197][ T369] ? netlink_getsockopt+0x550/0x550 [ 2710.602387][ T369] ? aa_sock_msg_perm+0x94/0x150 [ 2710.607321][ T369] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2710.612599][ T369] ? security_socket_sendmsg+0x7c/0xa0 [ 2710.618053][ T369] ? netlink_getsockopt+0x550/0x550 [ 2710.623241][ T369] ____sys_sendmsg+0x5be/0x970 [ 2710.628004][ T369] ? __sys_sendmsg_sock+0x30/0x30 [ 2710.633017][ T369] ? __import_iovec+0x315/0x500 [ 2710.637865][ T369] ? import_iovec+0x6f/0xa0 [ 2710.642366][ T369] ___sys_sendmsg+0x2a2/0x360 [ 2710.647039][ T369] ? __sys_sendmsg+0x290/0x290 [ 2710.651833][ T369] __se_sys_sendmsg+0x1bb/0x2a0 [ 2710.656677][ T369] ? __x64_sys_sendmsg+0x80/0x80 [ 2710.661621][ T369] ? lockdep_hardirqs_on+0x94/0x140 [ 2710.666819][ T369] do_syscall_64+0x4c/0xa0 [ 2710.671224][ T369] ? clear_bhb_loop+0x60/0xb0 [ 2710.675894][ T369] ? clear_bhb_loop+0x60/0xb0 [ 2710.680580][ T369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2710.686463][ T369] RIP: 0033:0x7fa53719ce59 [ 2710.690871][ T369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2710.710473][ T369] RSP: 002b:00007fa538119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2710.718884][ T369] RAX: ffffffffffffffda RBX: 00007fa537416090 RCX: 00007fa53719ce59 [ 2710.726854][ T369] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2710.734816][ T369] RBP: 00007fa537232e6f R08: 0000000000000000 R09: 0000000000000000 [ 2710.742777][ T369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2710.750737][ T369] R13: 00007fa537416128 R14: 00007fa537416090 R15: 00007fffa6097378 [ 2710.758713][ T369] [ 2711.216275][ T402] validate_nla: 6 callbacks suppressed [ 2711.216301][ T402] netlink: 'syz.0.21303': attribute type 3 has an invalid length. [ 2711.230708][ T402] __nla_validate_parse: 6 callbacks suppressed [ 2711.230743][ T402] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.21303'. [ 2711.282242][ T404] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.21305'. [ 2711.537236][ T414] netlink: 'syz.4.21309': attribute type 3 has an invalid length. [ 2711.546403][ T414] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.21309'. [ 2711.883368][ T432] netlink: 'syz.4.21317': attribute type 3 has an invalid length. [ 2711.919553][ T432] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.21317'. [ 2711.937025][ T435] netlink: 'syz.1.21318': attribute type 3 has an invalid length. [ 2711.959110][ T435] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.21318'. [ 2712.294234][ T449] netlink: 'syz.4.21324': attribute type 3 has an invalid length. [ 2712.325836][ T449] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.21324'. [ 2712.488585][ T460] netlink: 'syz.1.21327': attribute type 29 has an invalid length. [ 2712.516577][ T460] netlink: 'syz.1.21327': attribute type 29 has an invalid length. [ 2712.528463][ T460] netlink: 'syz.1.21327': attribute type 29 has an invalid length. [ 2712.627835][ T465] netlink: 'syz.4.21330': attribute type 3 has an invalid length. [ 2712.650188][ T465] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.21330'. [ 2712.687856][ T472] netlink: 14566 bytes leftover after parsing attributes in process `syz.1.21332'. [ 2712.833417][ T475] netlink: 'syz.2.21334': attribute type 3 has an invalid length. [ 2712.870285][ T475] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21334'. [ 2713.061810][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.068153][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.616450][ T505] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21347'. [ 2716.367312][ T584] bridge_slave_0: mtu less than device minimum [ 2716.450944][ T586] validate_nla: 8 callbacks suppressed [ 2716.450979][ T586] netlink: 'syz.3.21381': attribute type 3 has an invalid length. [ 2716.483602][ T586] __nla_validate_parse: 4 callbacks suppressed [ 2716.483636][ T586] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.21381'. [ 2716.702568][ T599] netlink: 'syz.4.21384': attribute type 3 has an invalid length. [ 2716.732058][ T599] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.21384'. [ 2717.619358][ T627] netlink: 'syz.4.21398': attribute type 3 has an invalid length. [ 2717.637036][ T627] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.21398'. [ 2717.758597][ T635] netlink: 'syz.1.21402': attribute type 3 has an invalid length. [ 2717.774096][ T635] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21402'. [ 2718.879767][ T657] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2718.920120][ T657] syzkaller1: linktype set to 0 [ 2719.523860][ T673] netlink: 'syz.0.21415': attribute type 3 has an invalid length. [ 2719.600797][ T673] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.21415'. [ 2719.744054][ T677] netlink: 'syz.1.21417': attribute type 3 has an invalid length. [ 2719.752601][ T677] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21417'. [ 2720.479787][ T713] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2720.486223][ T713] syzkaller1: linktype set to 0 [ 2720.749589][ T725] netlink: 'syz.4.21436': attribute type 3 has an invalid length. [ 2720.779194][ T725] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.21436'. [ 2721.216852][ T755] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2721.222933][ T755] syzkaller1: linktype set to 0 [ 2721.594277][ T772] netlink: 'syz.2.21454': attribute type 3 has an invalid length. [ 2721.617252][ T772] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21454'. [ 2722.086191][ T799] netlink: 'syz.3.21467': attribute type 3 has an invalid length. [ 2722.134390][ T799] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.21467'. [ 2722.606444][ T815] netlink: 'syz.0.21475': attribute type 3 has an invalid length. [ 2722.620922][ T815] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.21475'. [ 2723.441136][ T857] netlink: 'syz.2.21490': attribute type 3 has an invalid length. [ 2723.448976][ T857] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21490'. [ 2724.032728][ T877] netlink: 'syz.2.21499': attribute type 2 has an invalid length. [ 2724.041245][ T877] netlink: 10 bytes leftover after parsing attributes in process `syz.2.21499'. [ 2724.634557][ T899] netlink: 'syz.0.21507': attribute type 3 has an invalid length. [ 2724.647304][ T908] netlink: 'syz.2.21509': attribute type 10 has an invalid length. [ 2724.665148][ T899] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.21507'. [ 2724.665885][ T908] netlink: 140 bytes leftover after parsing attributes in process `syz.2.21509'. [ 2724.983920][ T926] netlink: 'syz.4.21516': attribute type 3 has an invalid length. [ 2725.012205][ T926] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.21516'. [ 2725.599274][ T955] netlink: 'syz.4.21526': attribute type 3 has an invalid length. [ 2725.670334][ T955] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.21526'. [ 2725.803218][ T964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21530'. [ 2725.902117][ T965] netlink: 'syz.0.21532': attribute type 3 has an invalid length. [ 2726.678567][ T996] validate_nla: 1 callbacks suppressed [ 2726.678608][ T996] netlink: 'syz.0.21545': attribute type 3 has an invalid length. [ 2726.710042][ T996] __nla_validate_parse: 2 callbacks suppressed [ 2726.710086][ T996] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.21545'. [ 2726.732531][ T1000] netlink: 'syz.1.21547': attribute type 3 has an invalid length. [ 2726.744559][ T1000] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21547'. [ 2726.991786][ T1012] netlink: 'syz.0.21550': attribute type 3 has an invalid length. [ 2727.002135][ T1012] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.21550'. [ 2727.289456][ T1034] netlink: 'syz.1.21556': attribute type 2 has an invalid length. [ 2727.673068][ T1053] netlink: 'syz.1.21560': attribute type 3 has an invalid length. [ 2727.681748][ T1053] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21560'. [ 2728.022103][ T1068] netlink: 'syz.1.21568': attribute type 3 has an invalid length. [ 2728.040247][ T1068] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21568'. [ 2728.040612][ T1074] netlink: 'syz.0.21570': attribute type 10 has an invalid length. [ 2728.090085][ T1074] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21570'. [ 2728.120092][ T1076] netlink: 'syz.3.21572': attribute type 2 has an invalid length. [ 2728.170069][ T1076] netlink: 'syz.3.21572': attribute type 1 has an invalid length. [ 2728.857713][ T1098] netlink: 'syz.0.21579': attribute type 3 has an invalid length. [ 2728.878365][ T1098] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.21579'. [ 2729.332434][ T1105] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.21585'. [ 2729.370310][ T1110] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.21587'. [ 2729.546001][ T1116] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.21589'. [ 2731.783524][ T1188] validate_nla: 16 callbacks suppressed [ 2731.783559][ T1188] netlink: 'syz.4.21616': attribute type 3 has an invalid length. [ 2731.829034][ T1188] __nla_validate_parse: 4 callbacks suppressed [ 2731.829077][ T1188] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.21616'. [ 2732.700835][ T1198] netlink: 'syz.2.21622': attribute type 29 has an invalid length. [ 2732.749592][ T1198] netlink: 'syz.2.21622': attribute type 29 has an invalid length. [ 2732.786766][ T1203] netlink: 'syz.2.21622': attribute type 29 has an invalid length. [ 2732.819338][ T1207] netlink: 'syz.2.21622': attribute type 29 has an invalid length. [ 2732.859916][ T1198] netlink: 'syz.2.21622': attribute type 29 has an invalid length. [ 2732.958863][ T1211] netlink: 'syz.3.21625': attribute type 15 has an invalid length. [ 2732.980688][ T1211] netlink: 'syz.3.21625': attribute type 7 has an invalid length. [ 2732.988631][ T1211] netlink: 52 bytes leftover after parsing attributes in process `syz.3.21625'. [ 2733.136418][ T1219] syz.3.21629[1219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2733.137867][ T1219] syz.3.21629[1219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2733.147295][ T1217] netlink: 'syz.2.21627': attribute type 3 has an invalid length. [ 2733.170347][ T1217] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21627'. [ 2733.203974][ T1223] netlink: 'syz.4.21630': attribute type 1 has an invalid length. [ 2733.215557][ T1223] netlink: 5 bytes leftover after parsing attributes in process `syz.4.21630'. [ 2733.286105][ T1222] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21631'. [ 2733.435030][ T1227] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21633'. [ 2734.269024][ T1262] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21644'. [ 2734.483135][ T1266] netlink: 5 bytes leftover after parsing attributes in process `syz.0.21645'. [ 2734.716874][ T1271] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21647'. [ 2734.927801][ T1276] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.21650'. [ 2737.487395][ T1361] validate_nla: 13 callbacks suppressed [ 2737.487431][ T1361] netlink: 'syz.0.21683': attribute type 3 has an invalid length. [ 2737.506339][ T1361] __nla_validate_parse: 6 callbacks suppressed [ 2737.506374][ T1361] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.21683'. [ 2737.957522][ T1389] netlink: 'syz.2.21693': attribute type 3 has an invalid length. [ 2737.977325][ T1389] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21693'. [ 2738.476608][ T1410] netlink: 'syz.0.21699': attribute type 3 has an invalid length. [ 2738.500095][ T1410] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.21699'. [ 2738.785483][ T1425] netlink: 'syz.2.21706': attribute type 3 has an invalid length. [ 2738.810171][ T1425] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21706'. [ 2739.388706][ T1449] netlink: 'syz.0.21713': attribute type 3 has an invalid length. [ 2739.410093][ T1449] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.21713'. [ 2739.735051][ T1462] netlink: 'syz.0.21720': attribute type 3 has an invalid length. [ 2739.746258][ T1462] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.21720'. [ 2740.666860][ T1488] netlink: 'syz.1.21730': attribute type 3 has an invalid length. [ 2740.690421][ T1488] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21730'. [ 2740.884425][ T1502] netlink: 'syz.4.21735': attribute type 3 has an invalid length. [ 2740.903771][ T1502] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.21735'. [ 2741.397455][ T1526] netlink: 'syz.1.21744': attribute type 3 has an invalid length. [ 2741.433078][ T1526] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.21744'. [ 2741.549766][ T1530] netlink: 'syz.3.21747': attribute type 5 has an invalid length. [ 2741.984807][ T1542] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21750'. [ 2743.105299][ T1570] validate_nla: 1 callbacks suppressed [ 2743.105335][ T1570] netlink: 'syz.3.21769': attribute type 3 has an invalid length. [ 2743.123846][ T1570] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.21769'. [ 2743.288624][ T1576] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.21762'. [ 2743.453794][ T1578] netlink: 'syz.3.21764': attribute type 3 has an invalid length. [ 2743.466095][ T1581] netlink: 'syz.2.21763': attribute type 5 has an invalid length. [ 2743.474429][ T1578] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.21764'. [ 2743.699389][ T1590] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21768'. [ 2743.986359][ T1601] netlink: 'syz.3.21774': attribute type 3 has an invalid length. [ 2744.007719][ T1601] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.21774'. [ 2744.386676][ T1616] netlink: 'syz.4.21779': attribute type 5 has an invalid length. [ 2744.562193][ T1619] netlink: 'syz.2.21780': attribute type 3 has an invalid length. [ 2744.589560][ T1619] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21780'. [ 2744.983323][ T1640] netlink: 'syz.1.21789': attribute type 3 has an invalid length. [ 2745.050083][ T1640] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21789'. [ 2745.540833][ T1657] netlink: 'syz.1.21796': attribute type 3 has an invalid length. [ 2745.559262][ T1657] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21796'. [ 2746.070172][ T1689] netlink: 'syz.1.21807': attribute type 3 has an invalid length. [ 2746.088726][ T1689] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21807'. [ 2746.353696][ T1701] netlink: 105 bytes leftover after parsing attributes in process `syz.1.21811'. [ 2747.891762][ T1725] netlink: 'syz.3.21822': attribute type 3 has an invalid length. [ 2748.620870][ T1739] validate_nla: 1 callbacks suppressed [ 2748.620906][ T1739] netlink: 'syz.0.21836': attribute type 3 has an invalid length. [ 2748.662777][ T1739] __nla_validate_parse: 2 callbacks suppressed [ 2748.662814][ T1739] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.21836'. [ 2749.279310][ T1771] netlink: 'syz.1.21840': attribute type 21 has an invalid length. [ 2749.290151][ T1771] netlink: 'syz.1.21840': attribute type 4 has an invalid length. [ 2749.298605][ T1771] netlink: 'syz.1.21840': attribute type 23 has an invalid length. [ 2749.319777][ T1771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21840'. [ 2749.366782][ T1767] netlink: 'syz.4.21838': attribute type 3 has an invalid length. [ 2749.408052][ T1767] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.21838'. [ 2750.153340][ T1785] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.21845'. [ 2750.323899][ T1792] netlink: 'syz.1.21848': attribute type 3 has an invalid length. [ 2750.332330][ T1792] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21848'. [ 2750.777243][ T1810] netlink: 'syz.2.21853': attribute type 3 has an invalid length. [ 2750.791918][ T1810] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21853'. [ 2751.578477][ T1833] netlink: 'syz.3.21863': attribute type 3 has an invalid length. [ 2751.597056][ T1833] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.21863'. [ 2751.905939][ T1846] netlink: 'syz.2.21868': attribute type 3 has an invalid length. [ 2751.917310][ T1846] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21868'. [ 2752.317976][ T1860] netlink: 'syz.1.21884': attribute type 3 has an invalid length. [ 2752.350248][ T1860] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21884'. [ 2752.880098][ T1868] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.21878'. [ 2754.175493][ T1899] validate_nla: 2 callbacks suppressed [ 2754.175508][ T1899] netlink: 'syz.2.21890': attribute type 3 has an invalid length. [ 2754.199877][ T1899] __nla_validate_parse: 1 callbacks suppressed [ 2754.199891][ T1899] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.21890'. [ 2756.550829][ T1934] netlink: 'syz.4.21904': attribute type 3 has an invalid length. [ 2756.561448][ T1934] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.21904'. [ 2756.640180][ T1943] netlink: 'syz.3.21905': attribute type 3 has an invalid length. [ 2756.651579][ T1943] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.21905'. [ 2760.773095][ T1995] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.21928'. [ 2760.790466][ T1996] netlink: 168 bytes leftover after parsing attributes in process `syz.2.21929'. [ 2761.451118][ T2030] netlink: 168 bytes leftover after parsing attributes in process `syz.0.21942'. [ 2761.668974][ T2039] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.21945'. [ 2764.292530][ T2064] netlink: 168 bytes leftover after parsing attributes in process `syz.3.21960'. [ 2764.436217][ T2069] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.21962'. [ 2764.594448][ T2079] netlink: 'syz.2.21964': attribute type 22 has an invalid length. [ 2764.654162][ T2082] netlink: 128 bytes leftover after parsing attributes in process `syz.0.21965'. [ 2764.673451][ T2082] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2764.732427][ T2085] netlink: 'syz.1.21967': attribute type 7 has an invalid length. [ 2764.924378][ T2098] netlink: 'syz.3.21973': attribute type 2 has an invalid length. [ 2764.944195][ T2098] netlink: 132 bytes leftover after parsing attributes in process `syz.3.21973'. [ 2765.036539][ T2093] can: request_module (can-proto-4) failed. [ 2765.157428][ T2111] netlink: 'syz.4.21976': attribute type 10 has an invalid length. [ 2765.181056][ T2111] netlink: 55 bytes leftover after parsing attributes in process `syz.4.21976'. [ 2765.278900][ T2113] netlink: 'syz.1.21979': attribute type 3 has an invalid length. [ 2765.294034][ T2113] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.21979'. [ 2765.864913][ T2141] netlink: 14 bytes leftover after parsing attributes in process `syz.1.21992'. [ 2766.431432][ T2166] device syzkaller0 entered promiscuous mode [ 2766.910389][ T2182] netlink: 'syz.1.22009': attribute type 1 has an invalid length. [ 2767.937893][ T2207] netlink: 'syz.4.22021': attribute type 3 has an invalid length. [ 2767.946319][ T2207] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.22021'. [ 2768.108575][ T2218] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.22025'. [ 2768.524847][ T2236] netlink: 'syz.3.22032': attribute type 21 has an invalid length. [ 2768.580136][ T2236] netlink: 'syz.3.22032': attribute type 7 has an invalid length. [ 2769.326442][ T2244] netlink: 'syz.3.22035': attribute type 3 has an invalid length. [ 2769.332834][ T2246] netlink: 14 bytes leftover after parsing attributes in process `syz.4.22036'. [ 2769.334835][ T2244] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.22035'. [ 2769.667164][ T2256] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.22040'. [ 2769.756301][ T2258] netlink: 'syz.4.22041': attribute type 3 has an invalid length. [ 2769.771084][ T2258] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.22041'. [ 2770.619384][ T2278] netlink: 14 bytes leftover after parsing attributes in process `syz.3.22052'. [ 2770.659751][ T2276] netlink: 'syz.1.22051': attribute type 3 has an invalid length. [ 2770.669602][ T2276] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.22051'. [ 2771.032700][ T2292] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.22057'. [ 2771.185649][ T2296] netlink: 'syz.2.22059': attribute type 3 has an invalid length. [ 2771.220295][ T2296] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.22059'. [ 2771.648225][ T2313] netlink: 14 bytes leftover after parsing attributes in process `syz.0.22065'. [ 2771.864981][ T2315] netlink: 'syz.1.22066': attribute type 3 has an invalid length. [ 2771.886585][ T2315] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.22066'. [ 2772.269079][ T2332] netlink: 'syz.2.22074': attribute type 3 has an invalid length. [ 2772.301728][ T2332] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.22074'. [ 2772.544322][ T2340] netlink: 'syz.4.22077': attribute type 2 has an invalid length. [ 2772.579187][ T2340] netlink: 'syz.4.22077': attribute type 8 has an invalid length. [ 2772.618197][ T2340] netlink: 'syz.4.22077': attribute type 9 has an invalid length. [ 2772.643923][ T2340] netlink: 'syz.4.22077': attribute type 10 has an invalid length. [ 2772.677192][ T2340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22077'. [ 2773.231488][ T2361] netlink: 'syz.2.22084': attribute type 13 has an invalid length. [ 2773.250000][ T2361] netlink: 152 bytes leftover after parsing attributes in process `syz.2.22084'. [ 2773.571530][ T2365] netlink: 'syz.4.22085': attribute type 11 has an invalid length. [ 2773.582589][ T2365] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.22085'. [ 2773.595274][ T2365] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.22085'. [ 2773.607984][ T2364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2773.677987][ T2368] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.22086'. [ 2774.511342][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.517691][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2776.904924][ T2414] validate_nla: 4 callbacks suppressed [ 2776.904960][ T2414] netlink: 'syz.0.22102': attribute type 3 has an invalid length. [ 2776.921971][ T2414] __nla_validate_parse: 2 callbacks suppressed [ 2776.922015][ T2414] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.22102'. [ 2776.981128][ T2420] netlink: 'syz.4.22104': attribute type 3 has an invalid length. [ 2777.002442][ T2420] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.22104'. [ 2777.186261][ T2432] netlink: 'syz.1.22109': attribute type 3 has an invalid length. [ 2777.207872][ T2432] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.22109'. [ 2778.841485][ T2466] netlink: 'syz.4.22121': attribute type 3 has an invalid length. [ 2778.849940][ T2466] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.22121'. [ 2778.993634][ T2468] netlink: 'syz.4.22122': attribute type 3 has an invalid length. [ 2779.002019][ T2468] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.22122'. [ 2779.292296][ T2475] netlink: 'syz.4.22124': attribute type 3 has an invalid length. [ 2779.300485][ T2475] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.22124'. [ 2781.027706][ T2487] netlink: 56843 bytes leftover after parsing attributes in process `syz.0.22129'. [ 2781.237274][ T2497] netlink: 'syz.1.22132': attribute type 3 has an invalid length. [ 2781.284927][ T2497] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.22132'. [ 2781.488964][ T2502] netlink: 'syz.3.22133': attribute type 3 has an invalid length. [ 2781.511710][ T2502] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.22133'. [ 2781.940388][ T2518] netlink: 60 bytes leftover after parsing attributes in process `syz.2.22140'. [ 2782.288472][ T2535] netlink: 'syz.3.22148': attribute type 3 has an invalid length. [ 2782.318538][ T2535] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.22148'. [ 2782.386195][ T2542] netlink: 'syz.1.22147': attribute type 3 has an invalid length. [ 2782.442265][ T2542] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.22147'. [ 2783.644925][ T2584] netlink: 'syz.2.22162': attribute type 3 has an invalid length. [ 2783.700436][ T2584] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.22162'. [ 2783.807705][ T2596] netlink: 'syz.0.22165': attribute type 3 has an invalid length. [ 2783.834131][ T2596] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.22165'. [ 2784.840443][ T2625] netlink: 'syz.1.22184': attribute type 3 has an invalid length. [ 2784.856860][ T2624] netlink: 'syz.3.22174': attribute type 3 has an invalid length. [ 2784.865794][ T2625] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.22184'. [ 2784.881831][ T2624] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.22174'. [ 2786.818206][ T2679] netlink: 'syz.4.22191': attribute type 3 has an invalid length. [ 2786.850181][ T2679] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.22191'. [ 2786.859142][ T2685] netlink: 'syz.0.22192': attribute type 3 has an invalid length. [ 2786.868026][ T2685] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.22192'. Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.