last executing test programs: 2.790858668s ago: executing program 1 (id=6645): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003f000b12d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x11, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r3}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r1, &(0x7f0000000100)}, 0x20) 1.798978113s ago: executing program 2 (id=6660): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 1.712152594s ago: executing program 3 (id=6661): socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1e, &(0x7f0000000040)=@raw=[@snprintf, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8000}}, @jmp={0x5, 0x0, 0xae41743ad2da5312, 0x0, 0x3, 0xfffffffffffffff8, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000140)='syzkaller\x00', 0xffff, 0x74, &(0x7f0000000180)=""/116, 0xc9c4ed9d17207862, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x0, 0x10, 0x7, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3400c0c1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x40012040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x65}]}, &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='\x00') sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.711419894s ago: executing program 1 (id=6662): socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1e, &(0x7f0000000040)=@raw=[@snprintf, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8000}}, @jmp={0x5, 0x0, 0xae41743ad2da5312, 0x0, 0x3, 0xfffffffffffffff8, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000140)='syzkaller\x00', 0xffff, 0x74, &(0x7f0000000180)=""/116, 0xc9c4ed9d17207862, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x0, 0x10, 0x7, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3400c0c1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x40012040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x65}]}, &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='\x00') sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.579956946s ago: executing program 4 (id=6663): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x47}, 0x80, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x18, 0x7, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, r1, 0x1) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7bf}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) r5 = socket$kcm(0x1e, 0x7, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x2c}, 0x1}}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8983, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair(0x18, 0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)="bd1e5345bbe1767e2170ee6e1a9e45a3ac148ad52b37399e20c45e3c3c0e3073797b1a800bba99d39d741798401d7e02e0b6f486a74063d7b7bd24a79beacd0e24", 0x41}, {0x0}, {&(0x7f0000000500)="889cb7b052dc444ad2b65f2f7a4391e5d5ca48c2376c07eea205c3dce86936a72bdea3e88f981f733c55eb6854b88f6c94e57c4627aa39289ad5c7d1b6762819a98b754bbb5db3fc7053a0ce7afc4834d3bc4e62e12f9c01fd6f7e0fc468b469a97cea3780f8c297dadda360d22f906bd8405e0c0ef933a8b04a28830c17c6cc71ec509a95c6a97da7dab98246fb448b84607f62ab26476570d82f6afc4ac8a1a59f35d125668c402df7e7b4b8c0fcdc07", 0xb1}, {&(0x7f00000005c0)="a074e300a35cd38c575709f43d2944f257dfd45301e0dee9875aa9678a913086403b14d9f111f5e628a298229670352900de21b92ebf71311e36c358337bc475966c03e134912374d52ea68aa93877bf7102323fa5980ff070646b582744f836752a0ed4ff", 0x65}, {&(0x7f00000000c0)="3e73cb6b84", 0x5}], 0x5}, 0x20000081) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x1fab4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.579573846s ago: executing program 2 (id=6665): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a"], 0xfe33) close(r0) 1.562336367s ago: executing program 0 (id=6666): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x47, &(0x7f0000003fc0)}, 0xe) 1.404678019s ago: executing program 0 (id=6667): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000a"], 0x48) r0 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, 0x0, 0x24}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x2f, &(0x7f0000000100), 0x120) 1.37031674s ago: executing program 4 (id=6668): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x20000000, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x4012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1800000}, 0x2c020, 0x800000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00685b09bf438b266e0ea85600"/39], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x900, &(0x7f0000000140)=[{&(0x7f0000000300)="d80000001e0081054e81f782db4cb904021d080006007c09e8fe08a10a000e800a00142603600e1208000fc00e000406a80016c008000e400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 1.249269541s ago: executing program 2 (id=6669): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000b00)=""/255, 0xff}, {&(0x7f0000000d00)=""/214, 0xd6}, {&(0x7f0000003100)=""/4059, 0xfdb}, {&(0x7f0000001000)=""/210, 0xd2}, {&(0x7f0000000e00)=""/203, 0xcb}, {&(0x7f0000000240)=""/223, 0xdf}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/199, 0xc7}, {&(0x7f0000000540)=""/167, 0xa7}, {&(0x7f0000000c00)=""/195, 0xc3}, {&(0x7f0000000480)=""/89, 0x59}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f0000000a00)=""/182, 0xb6}], 0xd}, 0x40012100) 1.248420721s ago: executing program 0 (id=6670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) 1.247657892s ago: executing program 1 (id=6671): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200ac7f7f00"}) r4 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000040) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000280)='cpuset.sched_load_balance\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000071061140c00000000000600000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r5) sendmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000cc0)={0x2, 0x4e24, @local}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000000f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)="67a18449faad4d2cc38c932171cd36cb7078d0859c42ec86617b671523024a7804b2b8faebdc0844f36daa6ab8e65aea319ed7bd8f78aee04ba5ef71ef6e924ef3aa215f57717b009f1c5f4692a60334e1353b38ed8860effbf815e567db3295542205f9bdf3413b6c738d84fa08337bb9a18e0ef2834aa188b3df6af085a48a6bc63ec05932d567cf2b8238874d90df96575d15f011f9dd1574f2a1060000008951683dbb27f4bdb0b00c2f680ab19415de1f459e02e98828a0d8ad97a0790893e795895e", 0x0, 0x894, r7}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) write$cgroup_devices(r2, 0x0, 0x9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1e0000000900000001000000ea00000048130000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES64, @ANYRES32, @ANYBLOB="0200000005000000000000000f00"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x300) 1.040977855s ago: executing program 3 (id=6675): sendmsg$inet(0xffffffffffffffff, 0x0, 0x48850) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3000, 0x0) close(r0) 1.022268225s ago: executing program 1 (id=6676): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 862.401867ms ago: executing program 3 (id=6677): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socket$kcm(0x2b, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xd00}, {0x0}], 0x2}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15}, [@call={0x45, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0xfdb9, &(0x7f0000000180)=""/153, 0x0, 0x8e, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x64) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) mkdirat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x4, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 839.673307ms ago: executing program 0 (id=6678): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x47}, 0x80, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x18, 0x7, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, r1, 0x1) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7bf}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) r5 = socket$kcm(0x1e, 0x7, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x2c}, 0x1}}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8983, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair(0x18, 0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)="bd1e5345bbe1767e2170ee6e1a9e45a3ac148ad52b37399e20c45e3c3c0e3073797b1a800bba99d39d741798401d7e02e0b6f486a74063d7b7bd24a79beacd0e24", 0x41}, {0x0}, {&(0x7f0000000500)="889cb7b052dc444ad2b65f2f7a4391e5d5ca48c2376c07eea205c3dce86936a72bdea3e88f981f733c55eb6854b88f6c94e57c4627aa39289ad5c7d1b6762819a98b754bbb5db3fc7053a0ce7afc4834d3bc4e62e12f9c01fd6f7e0fc468b469a97cea3780f8c297dadda360d22f906bd8405e0c0ef933a8b04a28830c17c6cc71ec509a95c6a97da7dab98246fb448b84607f62ab26476570d82f6afc4ac8a1a59f35d125668c402df7e7b4b8c0fcdc07", 0xb1}, {&(0x7f00000005c0)="a074e300a35cd38c575709f43d2944f257dfd45301e0dee9875aa9678a913086403b14d9f111f5e628a298229670352900de21b92ebf71311e36c358337bc475966c03e134912374d52ea68aa93877bf7102323fa5980ff070646b582744f836752a0ed4ff", 0x65}, {&(0x7f00000000c0)="3e73cb6b84", 0x5}], 0x5}, 0x20000081) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x1fab4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 769.044139ms ago: executing program 4 (id=6679): socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1e, &(0x7f0000000040)=@raw=[@snprintf, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8000}}, @jmp={0x5, 0x0, 0xae41743ad2da5312, 0x0, 0x3, 0xfffffffffffffff8, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000140)='syzkaller\x00', 0xffff, 0x74, &(0x7f0000000180)=""/116, 0xc9c4ed9d17207862, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x0, 0x10, 0x7, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3400c0c1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x40012040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x65}]}, &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='\x00') sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 717.614669ms ago: executing program 1 (id=6680): socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1e, &(0x7f0000000040)=@raw=[@snprintf, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8000}}, @jmp={0x5, 0x0, 0xae41743ad2da5312, 0x0, 0x3, 0xfffffffffffffff8, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000140)='syzkaller\x00', 0xffff, 0x74, &(0x7f0000000180)=""/116, 0xc9c4ed9d17207862, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x0, 0x10, 0x7, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3400c0c1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x40012040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x65}]}, &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='\x00') sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 656.0697ms ago: executing program 3 (id=6681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @random="2e2e018225ca"}) 572.288331ms ago: executing program 0 (id=6682): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000200)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000480)="62042700a80f00000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af2155427a000000f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82b01000000000000006fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff34526b546717701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xe0}, {&(0x7f0000000c00)="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", 0x113}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0", 0xbd}, {&(0x7f0000001ac0)="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", 0xd4b}], 0x4}, 0x4008001) 526.676062ms ago: executing program 4 (id=6683): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15}, [@call={0x45, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0xfdb9, &(0x7f0000000180)=""/153, 0x0, 0x8e, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x64) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) mkdirat$cgroup(r3, &(0x7f00000004c0)='syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x4, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 470.101323ms ago: executing program 2 (id=6684): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='{})%\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x4012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1800000}, 0x2c020, 0x800000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00685b09bf438b266e0ea85600"/39], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x900, &(0x7f0000000140)=[{&(0x7f0000000300)="d80000001e0081054e81f782db4cb904021d080006007c09e8fe08a10a000e800a00142603600e1208000fc00e000406a80016c008000e400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 289.170596ms ago: executing program 0 (id=6685): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc00000, 0x9}, 0x100108, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 270.344316ms ago: executing program 3 (id=6686): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200ac7f7f00"}) r4 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000040) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000280)='cpuset.sched_load_balance\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000071061140c00000000000600000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r5) sendmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000cc0)={0x2, 0x4e24, @local}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000000f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)="67a18449faad4d2cc38c932171cd36cb7078d0859c42ec86617b671523024a7804b2b8faebdc0844f36daa6ab8e65aea319ed7bd8f78aee04ba5ef71ef6e924ef3aa215f57717b009f1c5f4692a60334e1353b38ed8860effbf815e567db3295542205f9bdf3413b6c738d84fa08337bb9a18e0ef2834aa188b3df6af085a48a6bc63ec05932d567cf2b8238874d90df96575d15f011f9dd1574f2a1060000008951683dbb27f4bdb0b00c2f680ab19415de1f459e02e98828a0d8ad97a0790893e795895e59", 0x0, 0x894, r7}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, 0x0) 144.059328ms ago: executing program 2 (id=6687): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) 143.355398ms ago: executing program 4 (id=6688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) 0s ago: executing program 1 (id=6689): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a331286dd", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 00 RDI: 000000000000000b [ 1042.330255][T18204] RBP: 00007f639c010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1042.338333][T18204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.346325][T18204] R13: 0000000000000000 R14: 00007f639c1b5fa0 R15: 00007ffd6f179248 [ 1042.354358][T18204] [ 1042.557494][T18210] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4426'. [ 1042.568296][T18210] netlink: zone id is out of range [ 1042.574948][T18210] netlink: zone id is out of range [ 1042.581032][T18210] netlink: zone id is out of range [ 1042.591180][T18210] netlink: zone id is out of range [ 1042.597795][T18210] netlink: zone id is out of range [ 1042.605344][T18210] netlink: zone id is out of range [ 1042.617396][T18210] netlink: zone id is out of range [ 1042.627288][T18210] netlink: zone id is out of range [ 1042.638833][T18210] netlink: zone id is out of range [ 1043.923478][T18249] netlink: 'syz.3.4443': attribute type 12 has an invalid length. [ 1043.992790][T18249] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4443'. [ 1044.425556][T18256] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.4445'. [ 1044.460180][T18256] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.4445'. [ 1045.101844][T18272] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4446'. [ 1045.178416][T18272] net_ratelimit: 150 callbacks suppressed [ 1045.178457][T18272] netlink: zone id is out of range [ 1045.213761][T18272] netlink: zone id is out of range [ 1045.231234][T18272] netlink: zone id is out of range [ 1045.254135][T18272] netlink: zone id is out of range [ 1045.259882][T18272] netlink: zone id is out of range [ 1045.267940][T18272] netlink: zone id is out of range [ 1045.274565][T18272] netlink: zone id is out of range [ 1045.280340][T18272] netlink: zone id is out of range [ 1045.288373][T18272] netlink: zone id is out of range [ 1045.294707][T18272] netlink: zone id is out of range [ 1046.738474][T18307] netlink: 'syz.1.4463': attribute type 12 has an invalid length. [ 1046.751656][T18307] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4463'. [ 1049.423631][T18385] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4500'. [ 1049.458460][T18385] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1049.474582][T18385] CPU: 1 PID: 18385 Comm: syz.1.4500 Not tainted 6.1.141-syzkaller #0 [ 1049.482838][T18385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1049.492951][T18385] Call Trace: [ 1049.496326][T18385] [ 1049.499385][T18385] dump_stack_lvl+0x168/0x22e [ 1049.504139][T18385] ? show_regs_print_info+0x12/0x12 [ 1049.509407][T18385] ? load_image+0x3b0/0x3b0 [ 1049.513988][T18385] sysfs_warn_dup+0x8a/0xa0 [ 1049.518555][T18385] sysfs_do_create_link_sd+0xc0/0x110 [ 1049.524005][T18385] device_add+0x7ed/0xfb0 [ 1049.528402][T18385] wiphy_register+0x1e68/0x2bd0 [ 1049.533326][T18385] ? cfg80211_event_work+0x40/0x40 [ 1049.538498][T18385] ? minstrel_ht_alloc+0x894/0xa20 [ 1049.543671][T18385] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1049.549776][T18385] ieee80211_register_hw+0x2c29/0x38c0 [ 1049.555276][T18385] ? ieee80211_register_hw+0xef1/0x38c0 [ 1049.560852][T18385] ? ieee80211_register_hw+0xef1/0x38c0 [ 1049.566434][T18385] ? ieee80211_tasklet_handler+0x20/0x20 [ 1049.572196][T18385] ? memset+0x1e/0x40 [ 1049.576200][T18385] ? __hrtimer_init+0x186/0x270 [ 1049.581079][T18385] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1049.586845][T18385] hwsim_new_radio_nl+0xafa/0xce0 [ 1049.591902][T18385] genl_family_rcv_msg_doit+0x22e/0x320 [ 1049.597564][T18385] ? end_current_label_crit_section+0x170/0x170 [ 1049.603833][T18385] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1049.609754][T18385] ? bpf_lsm_capable+0x5/0x10 [ 1049.614459][T18385] ? security_capable+0x85/0xb0 [ 1049.619341][T18385] genl_rcv_msg+0x5f2/0x780 [ 1049.623874][T18385] ? genl_bind+0x350/0x350 [ 1049.628311][T18385] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1049.634754][T18385] ? lock_chain_count+0x20/0x20 [ 1049.639640][T18385] ? rcu_is_watching+0x11/0xa0 [ 1049.644431][T18385] netlink_rcv_skb+0x1de/0x420 [ 1049.649225][T18385] ? genl_bind+0x350/0x350 [ 1049.653661][T18385] ? netlink_ack+0x1100/0x1100 [ 1049.658453][T18385] ? preempt_count_add+0x2/0x190 [ 1049.663411][T18385] ? down_read+0x1a8/0x2d0 [ 1049.667870][T18385] genl_rcv+0x24/0x40 [ 1049.671865][T18385] netlink_unicast+0x74c/0x8c0 [ 1049.676665][T18385] netlink_sendmsg+0x89e/0xbc0 [ 1049.681464][T18385] ? netlink_getsockopt+0x540/0x540 [ 1049.686706][T18385] ? aa_sock_msg_perm+0x94/0x150 [ 1049.691667][T18385] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1049.696972][T18385] ? security_socket_sendmsg+0x7c/0xa0 [ 1049.702447][T18385] ? netlink_getsockopt+0x540/0x540 [ 1049.707672][T18385] ____sys_sendmsg+0x59b/0x970 [ 1049.712473][T18385] ? __sys_sendmsg_sock+0x30/0x30 [ 1049.717523][T18385] ? __import_iovec+0x315/0x500 [ 1049.722409][T18385] ? import_iovec+0x6f/0xa0 [ 1049.726964][T18385] ___sys_sendmsg+0x21c/0x290 [ 1049.731686][T18385] ? __sys_sendmsg+0x270/0x270 [ 1049.736517][T18385] ? __fdget+0x17c/0x200 [ 1049.740798][T18385] __se_sys_sendmsg+0x19e/0x270 [ 1049.745678][T18385] ? __x64_sys_sendmsg+0x80/0x80 [ 1049.750654][T18385] ? lockdep_hardirqs_on+0x94/0x140 [ 1049.755875][T18385] do_syscall_64+0x4c/0xa0 [ 1049.760338][T18385] ? clear_bhb_loop+0x60/0xb0 [ 1049.765048][T18385] ? clear_bhb_loop+0x60/0xb0 [ 1049.769771][T18385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1049.775795][T18385] RIP: 0033:0x7f639bf8e929 [ 1049.780234][T18385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1049.799879][T18385] RSP: 002b:00007f639cd24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1049.808321][T18385] RAX: ffffffffffffffda RBX: 00007f639c1b5fa0 RCX: 00007f639bf8e929 [ 1049.816330][T18385] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1049.824339][T18385] RBP: 00007f639c010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1049.832332][T18385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.840322][T18385] R13: 0000000000000000 R14: 00007f639c1b5fa0 R15: 00007ffd6f179248 [ 1049.848324][T18385] [ 1050.327808][T18402] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4507'. [ 1050.365180][T18402] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1050.381877][T18402] CPU: 0 PID: 18402 Comm: syz.0.4507 Not tainted 6.1.141-syzkaller #0 [ 1050.390119][T18402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1050.400222][T18402] Call Trace: [ 1050.403562][T18402] [ 1050.406546][T18402] dump_stack_lvl+0x168/0x22e [ 1050.411313][T18402] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1050.417796][T18402] ? show_regs_print_info+0x12/0x12 [ 1050.423055][T18402] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1050.429340][T18402] sysfs_warn_dup+0x8a/0xa0 [ 1050.434002][T18402] sysfs_do_create_link_sd+0xc0/0x110 [ 1050.439439][T18402] device_add+0x7ed/0xfb0 [ 1050.443852][T18402] wiphy_register+0x1e68/0x2bd0 [ 1050.448789][T18402] ? cfg80211_event_work+0x40/0x40 [ 1050.453968][T18402] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1050.460188][T18402] ? rtnl_unlock+0x5/0x10 [ 1050.464591][T18402] ieee80211_register_hw+0x2c29/0x38c0 [ 1050.470124][T18402] ? ieee80211_register_hw+0xef1/0x38c0 [ 1050.475736][T18402] ? ieee80211_register_hw+0xef1/0x38c0 [ 1050.481358][T18402] ? ieee80211_tasklet_handler+0x20/0x20 [ 1050.487064][T18402] ? memset+0x1e/0x40 [ 1050.491104][T18402] ? __hrtimer_init+0x186/0x270 [ 1050.496017][T18402] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1050.501814][T18402] hwsim_new_radio_nl+0xafa/0xce0 [ 1050.506914][T18402] genl_family_rcv_msg_doit+0x22e/0x320 [ 1050.512526][T18402] ? end_current_label_crit_section+0x170/0x170 [ 1050.518829][T18402] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1050.524791][T18402] ? bpf_lsm_capable+0x5/0x10 [ 1050.529532][T18402] ? security_capable+0x85/0xb0 [ 1050.534448][T18402] genl_rcv_msg+0x5f2/0x780 [ 1050.539024][T18402] ? genl_bind+0x350/0x350 [ 1050.543529][T18402] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1050.549963][T18402] netlink_rcv_skb+0x1de/0x420 [ 1050.554787][T18402] ? genl_bind+0x350/0x350 [ 1050.559337][T18402] ? netlink_ack+0x1100/0x1100 [ 1050.564172][T18402] ? down_read+0x1a8/0x2d0 [ 1050.568652][T18402] genl_rcv+0x24/0x40 [ 1050.572686][T18402] netlink_unicast+0x74c/0x8c0 [ 1050.577522][T18402] netlink_sendmsg+0x89e/0xbc0 [ 1050.582366][T18402] ? netlink_getsockopt+0x540/0x540 [ 1050.587646][T18402] ? aa_sock_msg_perm+0x94/0x150 [ 1050.592641][T18402] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1050.597975][T18402] ? security_socket_sendmsg+0x7c/0xa0 [ 1050.603657][T18402] ? netlink_getsockopt+0x540/0x540 [ 1050.608913][T18402] ____sys_sendmsg+0x59b/0x970 [ 1050.613756][T18402] ? __sys_sendmsg_sock+0x30/0x30 [ 1050.618855][T18402] ? ___sys_sendmsg+0x202/0x290 [ 1050.623790][T18402] ___sys_sendmsg+0x21c/0x290 [ 1050.628738][T18402] ? __sys_sendmsg+0x270/0x270 [ 1050.633607][T18402] ? ktime_get_real_ts64+0x420/0x420 [ 1050.639062][T18402] ? __fdget+0x17c/0x200 [ 1050.643378][T18402] __se_sys_sendmsg+0x19e/0x270 [ 1050.648294][T18402] ? ct_nmi_exit+0x145/0x1c0 [ 1050.652933][T18402] ? __x64_sys_sendmsg+0x80/0x80 [ 1050.657957][T18402] ? lockdep_hardirqs_on+0x94/0x140 [ 1050.663237][T18402] do_syscall_64+0x4c/0xa0 [ 1050.667717][T18402] ? clear_bhb_loop+0x60/0xb0 [ 1050.672452][T18402] ? clear_bhb_loop+0x60/0xb0 [ 1050.677179][T18402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1050.683135][T18402] RIP: 0033:0x7fa4bf98e929 [ 1050.687595][T18402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1050.707615][T18402] RSP: 002b:00007fa4c0821038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1050.716182][T18402] RAX: ffffffffffffffda RBX: 00007fa4bfbb5fa0 RCX: 00007fa4bf98e929 [ 1050.724243][T18402] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1050.732270][T18402] RBP: 00007fa4bfa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1050.740300][T18402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1050.748444][T18402] R13: 0000000000000000 R14: 00007fa4bfbb5fa0 R15: 00007ffe7018bd18 [ 1050.756485][T18402] [ 1051.274498][T18419] netlink: 'syz.2.4512': attribute type 10 has an invalid length. [ 1051.285954][T18419] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4512'. [ 1051.310000][T18425] netlink: 'syz.3.4514': attribute type 10 has an invalid length. [ 1051.334679][T18425] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4514'. [ 1051.410895][T18425] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4514'. [ 1052.565716][T18461] netlink: 'syz.0.4527': attribute type 21 has an invalid length. [ 1052.593159][T18461] netlink: 'syz.0.4527': attribute type 1 has an invalid length. [ 1052.601598][T18461] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4527'. [ 1052.796192][T18472] netlink: 'syz.1.4532': attribute type 10 has an invalid length. [ 1052.843690][T18472] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4532'. [ 1052.937913][T18471] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4532'. [ 1053.379855][T18488] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4537'. [ 1053.451186][T18488] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1053.473405][T18488] CPU: 0 PID: 18488 Comm: syz.4.4537 Not tainted 6.1.141-syzkaller #0 [ 1053.481653][T18488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1053.491760][T18488] Call Trace: [ 1053.495088][T18488] [ 1053.498072][T18488] dump_stack_lvl+0x168/0x22e [ 1053.502816][T18488] ? show_regs_print_info+0x12/0x12 [ 1053.508160][T18488] ? load_image+0x3b0/0x3b0 [ 1053.512728][T18488] sysfs_warn_dup+0x8a/0xa0 [ 1053.517294][T18488] sysfs_do_create_link_sd+0xc0/0x110 [ 1053.522735][T18488] device_add+0x7ed/0xfb0 [ 1053.527132][T18488] wiphy_register+0x1e68/0x2bd0 [ 1053.532103][T18488] ? cfg80211_event_work+0x40/0x40 [ 1053.537276][T18488] ? minstrel_ht_alloc+0x894/0xa20 [ 1053.542459][T18488] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1053.548574][T18488] ieee80211_register_hw+0x2c29/0x38c0 [ 1053.554096][T18488] ? ieee80211_register_hw+0xef1/0x38c0 [ 1053.559688][T18488] ? ieee80211_register_hw+0xef1/0x38c0 [ 1053.565288][T18488] ? ieee80211_tasklet_handler+0x20/0x20 [ 1053.570977][T18488] ? __hrtimer_init+0x7e/0x270 [ 1053.575784][T18488] ? __sanitizer_cov_trace_const_cmp2+0x80/0x80 [ 1053.582065][T18488] ? __hrtimer_init+0x186/0x270 [ 1053.586954][T18488] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1053.592733][T18488] hwsim_new_radio_nl+0xafa/0xce0 [ 1053.597814][T18488] genl_family_rcv_msg_doit+0x22e/0x320 [ 1053.603406][T18488] ? end_current_label_crit_section+0x170/0x170 [ 1053.609690][T18488] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1053.615630][T18488] ? bpf_lsm_capable+0x5/0x10 [ 1053.620440][T18488] ? security_capable+0x85/0xb0 [ 1053.625435][T18488] genl_rcv_msg+0x5f2/0x780 [ 1053.629985][T18488] ? genl_bind+0x350/0x350 [ 1053.634437][T18488] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1053.640824][T18488] netlink_rcv_skb+0x1de/0x420 [ 1053.645631][T18488] ? genl_bind+0x350/0x350 [ 1053.650084][T18488] ? netlink_ack+0x1100/0x1100 [ 1053.654906][T18488] ? down_read+0x1a8/0x2d0 [ 1053.659366][T18488] genl_rcv+0x24/0x40 [ 1053.663381][T18488] netlink_unicast+0x74c/0x8c0 [ 1053.668208][T18488] netlink_sendmsg+0x89e/0xbc0 [ 1053.673041][T18488] ? netlink_getsockopt+0x540/0x540 [ 1053.678302][T18488] ? aa_sock_msg_perm+0x94/0x150 [ 1053.683281][T18488] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1053.688609][T18488] ? security_socket_sendmsg+0x7c/0xa0 [ 1053.694104][T18488] ? netlink_getsockopt+0x540/0x540 [ 1053.699351][T18488] ____sys_sendmsg+0x59b/0x970 [ 1053.704175][T18488] ? __sys_sendmsg_sock+0x30/0x30 [ 1053.709331][T18488] ? __import_iovec+0x315/0x500 [ 1053.714225][T18488] ? import_iovec+0x6f/0xa0 [ 1053.718775][T18488] ___sys_sendmsg+0x21c/0x290 [ 1053.723508][T18488] ? __sys_sendmsg+0x270/0x270 [ 1053.728341][T18488] ? ktime_get_real_ts64+0x420/0x420 [ 1053.733685][T18488] ? __fdget+0x17c/0x200 [ 1053.737980][T18488] __se_sys_sendmsg+0x19e/0x270 [ 1053.742884][T18488] ? __x64_sys_sendmsg+0x80/0x80 [ 1053.747888][T18488] ? lockdep_hardirqs_on+0x94/0x140 [ 1053.753125][T18488] do_syscall_64+0x4c/0xa0 [ 1053.757585][T18488] ? clear_bhb_loop+0x60/0xb0 [ 1053.762304][T18488] ? clear_bhb_loop+0x60/0xb0 [ 1053.767021][T18488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.772967][T18488] RIP: 0033:0x7f926e58e929 [ 1053.777427][T18488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1053.797081][T18488] RSP: 002b:00007f926f3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1053.805540][T18488] RAX: ffffffffffffffda RBX: 00007f926e7b5fa0 RCX: 00007f926e58e929 [ 1053.813546][T18488] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1053.821548][T18488] RBP: 00007f926e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1053.829553][T18488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.837561][T18488] R13: 0000000000000000 R14: 00007f926e7b5fa0 R15: 00007ffcf54ff2f8 [ 1053.845588][T18488] [ 1054.110722][T18502] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4541'. [ 1054.136332][T18502] device caif0 entered promiscuous mode [ 1054.605398][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.611786][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.709869][T18515] netlink: 'syz.2.4547': attribute type 12 has an invalid length. [ 1054.820302][T18515] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4547'. [ 1054.849697][T18513] netlink: 'syz.4.4548': attribute type 10 has an invalid length. [ 1055.161182][T18524] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1055.181365][T18524] CPU: 1 PID: 18524 Comm: syz.4.4551 Not tainted 6.1.141-syzkaller #0 [ 1055.189621][T18524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1055.199811][T18524] Call Trace: [ 1055.203125][T18524] [ 1055.206182][T18524] dump_stack_lvl+0x168/0x22e [ 1055.210921][T18524] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1055.217127][T18524] ? show_regs_print_info+0x12/0x12 [ 1055.222386][T18524] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1055.228608][T18524] ? dump_stack+0x5/0x12 [ 1055.232912][T18524] sysfs_warn_dup+0x8a/0xa0 [ 1055.237466][T18524] sysfs_do_create_link_sd+0xc0/0x110 [ 1055.242903][T18524] device_add+0x7ed/0xfb0 [ 1055.247345][T18524] wiphy_register+0x1e68/0x2bd0 [ 1055.252285][T18524] ? cfg80211_event_work+0x40/0x40 [ 1055.257453][T18524] ? minstrel_ht_alloc+0x894/0xa20 [ 1055.262633][T18524] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1055.268755][T18524] ieee80211_register_hw+0x2c29/0x38c0 [ 1055.274291][T18524] ? ieee80211_register_hw+0xef1/0x38c0 [ 1055.279905][T18524] ? ieee80211_register_hw+0xef1/0x38c0 [ 1055.285534][T18524] ? ieee80211_tasklet_handler+0x20/0x20 [ 1055.291244][T18524] ? memset+0x1e/0x40 [ 1055.295285][T18524] ? __hrtimer_init+0x186/0x270 [ 1055.300202][T18524] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1055.306011][T18524] hwsim_new_radio_nl+0xafa/0xce0 [ 1055.311110][T18524] genl_family_rcv_msg_doit+0x22e/0x320 [ 1055.317330][T18524] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1055.323555][T18524] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1055.329512][T18524] ? bpf_lsm_capable+0x5/0x10 [ 1055.334246][T18524] ? security_capable+0x85/0xb0 [ 1055.339167][T18524] genl_rcv_msg+0x5f2/0x780 [ 1055.343728][T18524] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1055.349936][T18524] ? genl_bind+0x350/0x350 [ 1055.354486][T18524] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1055.360875][T18524] ? netlink_rcv_skb+0x1bd/0x420 [ 1055.365886][T18524] netlink_rcv_skb+0x1de/0x420 [ 1055.370723][T18524] ? genl_bind+0x350/0x350 [ 1055.375189][T18524] ? netlink_ack+0x1100/0x1100 [ 1055.380033][T18524] ? down_read+0x1a8/0x2d0 [ 1055.384599][T18524] genl_rcv+0x24/0x40 [ 1055.388630][T18524] netlink_unicast+0x74c/0x8c0 [ 1055.393470][T18524] netlink_sendmsg+0x89e/0xbc0 [ 1055.398309][T18524] ? netlink_getsockopt+0x540/0x540 [ 1055.403585][T18524] ? aa_sock_msg_perm+0x94/0x150 [ 1055.408580][T18524] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1055.413918][T18524] ? security_socket_sendmsg+0x7c/0xa0 [ 1055.419433][T18524] ? netlink_getsockopt+0x540/0x540 [ 1055.424696][T18524] ____sys_sendmsg+0x59b/0x970 [ 1055.429532][T18524] ? __sys_sendmsg_sock+0x30/0x30 [ 1055.434623][T18524] ? __import_iovec+0x315/0x500 [ 1055.439538][T18524] ? import_iovec+0x6f/0xa0 [ 1055.444107][T18524] ___sys_sendmsg+0x21c/0x290 [ 1055.448863][T18524] ? __sys_sendmsg+0x270/0x270 [ 1055.453753][T18524] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1055.459560][T18524] ? __fdget+0x17c/0x200 [ 1055.463883][T18524] __se_sys_sendmsg+0x19e/0x270 [ 1055.468809][T18524] ? __x64_sys_sendmsg+0x80/0x80 [ 1055.473824][T18524] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1055.479751][T18524] do_syscall_64+0x4c/0xa0 [ 1055.484197][T18524] ? clear_bhb_loop+0x60/0xb0 [ 1055.488887][T18524] ? clear_bhb_loop+0x60/0xb0 [ 1055.493588][T18524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1055.499510][T18524] RIP: 0033:0x7f926e58e929 [ 1055.503939][T18524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1055.523579][T18524] RSP: 002b:00007f926f3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1055.532034][T18524] RAX: ffffffffffffffda RBX: 00007f926e7b5fa0 RCX: 00007f926e58e929 [ 1055.540028][T18524] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1055.548104][T18524] RBP: 00007f926e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1055.556111][T18524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.564127][T18524] R13: 0000000000000000 R14: 00007f926e7b5fa0 R15: 00007ffcf54ff2f8 [ 1055.572170][T18524] [ 1055.610761][T18529] netlink: 'syz.2.4552': attribute type 10 has an invalid length. [ 1055.763471][T18529] bond0: (slave netdevsim0): Releasing backup interface [ 1055.799216][T18529] device netdevsim0 left promiscuous mode [ 1055.862955][T18529] device netdevsim0 entered promiscuous mode [ 1055.891455][T18529] team0: Port device netdevsim0 added [ 1055.903015][T18536] netlink: 'syz.2.4552': attribute type 10 has an invalid length. [ 1055.911351][T18536] device netdevsim0 left promiscuous mode [ 1055.945167][T18536] team0: Port device netdevsim0 removed [ 1055.964917][T18536] device netdevsim0 entered promiscuous mode [ 1055.983061][T18536] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1056.697534][T18562] netlink: 'syz.2.4562': attribute type 10 has an invalid length. [ 1056.720617][T18562] __nla_validate_parse: 3 callbacks suppressed [ 1056.720683][T18562] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4562'. [ 1056.803828][T18562] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4562'. [ 1057.362818][T18577] netlink: 'syz.0.4566': attribute type 10 has an invalid length. [ 1057.426964][T18579] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4568'. [ 1057.638559][T18577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.674172][T18577] device batadv0 entered promiscuous mode [ 1057.685353][T14491] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1057.695229][T14491] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1057.718061][T18577] team0: Port device batadv0 added [ 1057.790328][T18579] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1057.806338][T18579] CPU: 1 PID: 18579 Comm: syz.3.4568 Not tainted 6.1.141-syzkaller #0 [ 1057.814575][T18579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1057.824660][T18579] Call Trace: [ 1057.827953][T18579] [ 1057.830908][T18579] dump_stack_lvl+0x168/0x22e [ 1057.835651][T18579] ? show_regs_print_info+0x12/0x12 [ 1057.840900][T18579] ? load_image+0x3b0/0x3b0 [ 1057.845478][T18579] sysfs_warn_dup+0x8a/0xa0 [ 1057.850047][T18579] sysfs_do_create_link_sd+0xc0/0x110 [ 1057.855471][T18579] device_add+0x7ed/0xfb0 [ 1057.859840][T18579] wiphy_register+0x1e68/0x2bd0 [ 1057.864731][T18579] ? cfg80211_event_work+0x40/0x40 [ 1057.869868][T18579] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1057.876048][T18579] ieee80211_register_hw+0x2c29/0x38c0 [ 1057.881539][T18579] ? ieee80211_register_hw+0xef1/0x38c0 [ 1057.887110][T18579] ? ieee80211_register_hw+0xef1/0x38c0 [ 1057.892696][T18579] ? ieee80211_tasklet_handler+0x20/0x20 [ 1057.898378][T18579] ? lockdep_hardirqs_on+0x94/0x140 [ 1057.903608][T18579] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1057.909804][T18579] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1057.915650][T18579] hwsim_new_radio_nl+0xafa/0xce0 [ 1057.920703][T18579] genl_family_rcv_msg_doit+0x22e/0x320 [ 1057.926267][T18579] ? end_current_label_crit_section+0x170/0x170 [ 1057.932526][T18579] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1057.938440][T18579] ? bpf_lsm_capable+0x5/0x10 [ 1057.943135][T18579] ? security_capable+0x85/0xb0 [ 1057.948022][T18579] genl_rcv_msg+0x5f2/0x780 [ 1057.952568][T18579] ? genl_bind+0x350/0x350 [ 1057.957015][T18579] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1057.963395][T18579] netlink_rcv_skb+0x1de/0x420 [ 1057.968199][T18579] ? genl_bind+0x350/0x350 [ 1057.972638][T18579] ? netlink_ack+0x1100/0x1100 [ 1057.977454][T18579] ? down_read+0x1a8/0x2d0 [ 1057.981919][T18579] genl_rcv+0x24/0x40 [ 1057.985934][T18579] netlink_unicast+0x74c/0x8c0 [ 1057.990742][T18579] netlink_sendmsg+0x89e/0xbc0 [ 1057.995535][T18579] ? lockdep_hardirqs_on+0x94/0x140 [ 1058.000782][T18579] ? netlink_getsockopt+0x540/0x540 [ 1058.006030][T18579] ? security_socket_sendmsg+0x41/0xa0 [ 1058.011516][T18579] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1058.016828][T18579] ? security_socket_sendmsg+0x7c/0xa0 [ 1058.022306][T18579] ? netlink_getsockopt+0x540/0x540 [ 1058.027536][T18579] ____sys_sendmsg+0x59b/0x970 [ 1058.032361][T18579] ? __sys_sendmsg_sock+0x30/0x30 [ 1058.037428][T18579] ? __import_iovec+0x315/0x500 [ 1058.042310][T18579] ? import_iovec+0x6f/0xa0 [ 1058.046842][T18579] ___sys_sendmsg+0x21c/0x290 [ 1058.051574][T18579] ? __sys_sendmsg+0x270/0x270 [ 1058.056387][T18579] ? ktime_get_real_ts64+0x420/0x420 [ 1058.061709][T18579] ? __fdget+0x17c/0x200 [ 1058.065989][T18579] __se_sys_sendmsg+0x19e/0x270 [ 1058.070869][T18579] ? perf_trace_preemptirq_template+0x287/0x330 [ 1058.077141][T18579] ? __x64_sys_sendmsg+0x80/0x80 [ 1058.082121][T18579] ? lockdep_hardirqs_on+0x94/0x140 [ 1058.087338][T18579] do_syscall_64+0x4c/0xa0 [ 1058.091779][T18579] ? clear_bhb_loop+0x60/0xb0 [ 1058.096471][T18579] ? clear_bhb_loop+0x60/0xb0 [ 1058.101166][T18579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1058.107095][T18579] RIP: 0033:0x7f188538e929 [ 1058.111532][T18579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.131253][T18579] RSP: 002b:00007f18862d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1058.139702][T18579] RAX: ffffffffffffffda RBX: 00007f18855b5fa0 RCX: 00007f188538e929 [ 1058.147716][T18579] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1058.155727][T18579] RBP: 00007f1885410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1058.163717][T18579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.171707][T18579] R13: 0000000000000000 R14: 00007f18855b5fa0 R15: 00007ffea3ac3938 [ 1058.179711][T18579] [ 1058.838821][T18611] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4579'. [ 1058.907752][T18611] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1058.932574][T18611] CPU: 0 PID: 18611 Comm: syz.2.4579 Not tainted 6.1.141-syzkaller #0 [ 1058.940815][T18611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1058.950919][T18611] Call Trace: [ 1058.954242][T18611] [ 1058.957208][T18611] dump_stack_lvl+0x168/0x22e [ 1058.961940][T18611] ? show_regs_print_info+0x12/0x12 [ 1058.967201][T18611] ? load_image+0x3b0/0x3b0 [ 1058.971768][T18611] sysfs_warn_dup+0x8a/0xa0 [ 1058.976329][T18611] sysfs_do_create_link_sd+0xc0/0x110 [ 1058.981851][T18611] device_add+0x7ed/0xfb0 [ 1058.986248][T18611] wiphy_register+0x1e68/0x2bd0 [ 1058.991184][T18611] ? cfg80211_event_work+0x40/0x40 [ 1058.996447][T18611] ? minstrel_ht_alloc+0x894/0xa20 [ 1059.001622][T18611] ? strcmp+0x2d/0xb0 [ 1059.005677][T18611] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1059.011809][T18611] ieee80211_register_hw+0x2c29/0x38c0 [ 1059.017344][T18611] ? ieee80211_register_hw+0xef1/0x38c0 [ 1059.022951][T18611] ? ieee80211_register_hw+0xef1/0x38c0 [ 1059.028556][T18611] ? ieee80211_tasklet_handler+0x20/0x20 [ 1059.034239][T18611] ? lockdep_hardirqs_on+0x94/0x140 [ 1059.039476][T18611] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1059.045685][T18611] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1059.051467][T18611] hwsim_new_radio_nl+0xafa/0xce0 [ 1059.056548][T18611] genl_family_rcv_msg_doit+0x22e/0x320 [ 1059.062139][T18611] ? end_current_label_crit_section+0x170/0x170 [ 1059.068425][T18611] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1059.074369][T18611] ? bpf_lsm_capable+0x5/0x10 [ 1059.079099][T18611] ? security_capable+0x85/0xb0 [ 1059.084007][T18611] genl_rcv_msg+0x5f2/0x780 [ 1059.088561][T18611] ? genl_bind+0x350/0x350 [ 1059.093008][T18611] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1059.099385][T18611] ? lock_acquire+0x20f/0x490 [ 1059.104119][T18611] netlink_rcv_skb+0x1de/0x420 [ 1059.108937][T18611] ? genl_bind+0x350/0x350 [ 1059.113483][T18611] ? netlink_ack+0x1100/0x1100 [ 1059.118309][T18611] ? down_read+0x1a8/0x2d0 [ 1059.122854][T18611] genl_rcv+0x24/0x40 [ 1059.126875][T18611] netlink_unicast+0x74c/0x8c0 [ 1059.131699][T18611] netlink_sendmsg+0x89e/0xbc0 [ 1059.136559][T18611] ? netlink_getsockopt+0x540/0x540 [ 1059.141805][T18611] ? aa_sock_msg_perm+0x94/0x150 [ 1059.146783][T18611] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1059.152134][T18611] ? security_socket_sendmsg+0x7c/0xa0 [ 1059.157629][T18611] ? netlink_getsockopt+0x540/0x540 [ 1059.162872][T18611] ____sys_sendmsg+0x59b/0x970 [ 1059.167692][T18611] ? __sys_sendmsg_sock+0x30/0x30 [ 1059.172761][T18611] ? __import_iovec+0x315/0x500 [ 1059.177660][T18611] ? import_iovec+0x6f/0xa0 [ 1059.182204][T18611] ___sys_sendmsg+0x21c/0x290 [ 1059.186938][T18611] ? __sys_sendmsg+0x270/0x270 [ 1059.191778][T18611] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1059.197564][T18611] ? __fdget+0x17c/0x200 [ 1059.201864][T18611] __se_sys_sendmsg+0x19e/0x270 [ 1059.206770][T18611] ? __x64_sys_sendmsg+0x80/0x80 [ 1059.211883][T18611] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1059.217821][T18611] do_syscall_64+0x4c/0xa0 [ 1059.222282][T18611] ? clear_bhb_loop+0x60/0xb0 [ 1059.226996][T18611] ? clear_bhb_loop+0x60/0xb0 [ 1059.231714][T18611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1059.237659][T18611] RIP: 0033:0x7fa26258e929 [ 1059.242111][T18611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1059.261763][T18611] RSP: 002b:00007fa2634c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1059.270223][T18611] RAX: ffffffffffffffda RBX: 00007fa2627b5fa0 RCX: 00007fa26258e929 [ 1059.278227][T18611] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1059.286227][T18611] RBP: 00007fa262610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1059.294237][T18611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1059.302240][T18611] R13: 0000000000000000 R14: 00007fa2627b5fa0 R15: 00007fff0e21c1b8 [ 1059.310270][T18611] [ 1059.783815][T18627] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4586'. [ 1059.878285][T18627] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1059.920679][T18627] CPU: 0 PID: 18627 Comm: syz.4.4586 Not tainted 6.1.141-syzkaller #0 [ 1059.928925][T18627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1059.939031][T18627] Call Trace: [ 1059.942358][T18627] [ 1059.945329][T18627] dump_stack_lvl+0x168/0x22e [ 1059.950237][T18627] ? show_regs_print_info+0x12/0x12 [ 1059.955494][T18627] ? load_image+0x3b0/0x3b0 [ 1059.960063][T18627] sysfs_warn_dup+0x8a/0xa0 [ 1059.964633][T18627] sysfs_do_create_link_sd+0xc0/0x110 [ 1059.970069][T18627] device_add+0x7ed/0xfb0 [ 1059.974472][T18627] wiphy_register+0x1e68/0x2bd0 [ 1059.979398][T18627] ? cfg80211_event_work+0x40/0x40 [ 1059.984563][T18627] ? minstrel_ht_alloc+0x894/0xa20 [ 1059.989737][T18627] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1059.995858][T18627] ieee80211_register_hw+0x2c29/0x38c0 [ 1060.001388][T18627] ? ieee80211_register_hw+0xef1/0x38c0 [ 1060.007419][T18627] ? ieee80211_register_hw+0xef1/0x38c0 [ 1060.013006][T18627] ? ieee80211_tasklet_handler+0x20/0x20 [ 1060.018693][T18627] ? memset+0x1e/0x40 [ 1060.022703][T18627] ? __hrtimer_init+0x186/0x270 [ 1060.027578][T18627] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1060.033422][T18627] hwsim_new_radio_nl+0xafa/0xce0 [ 1060.038484][T18627] genl_family_rcv_msg_doit+0x22e/0x320 [ 1060.044050][T18627] ? end_current_label_crit_section+0x170/0x170 [ 1060.050448][T18627] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1060.056373][T18627] ? bpf_lsm_capable+0x5/0x10 [ 1060.061079][T18627] ? security_capable+0x85/0xb0 [ 1060.066002][T18627] genl_rcv_msg+0x5f2/0x780 [ 1060.070625][T18627] ? genl_bind+0x350/0x350 [ 1060.075060][T18627] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1060.081426][T18627] netlink_rcv_skb+0x1de/0x420 [ 1060.086233][T18627] ? genl_bind+0x350/0x350 [ 1060.090673][T18627] ? netlink_ack+0x1100/0x1100 [ 1060.095470][T18627] ? down_read+0x1a8/0x2d0 [ 1060.099912][T18627] genl_rcv+0x24/0x40 [ 1060.103919][T18627] netlink_unicast+0x74c/0x8c0 [ 1060.108747][T18627] netlink_sendmsg+0x89e/0xbc0 [ 1060.113553][T18627] ? netlink_getsockopt+0x540/0x540 [ 1060.118784][T18627] ? aa_sock_msg_perm+0x94/0x150 [ 1060.123865][T18627] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1060.129178][T18627] ? security_socket_sendmsg+0x7c/0xa0 [ 1060.134676][T18627] ? netlink_getsockopt+0x540/0x540 [ 1060.139911][T18627] ____sys_sendmsg+0x59b/0x970 [ 1060.144714][T18627] ? __sys_sendmsg_sock+0x30/0x30 [ 1060.149767][T18627] ? __import_iovec+0x315/0x500 [ 1060.154647][T18627] ? import_iovec+0x6f/0xa0 [ 1060.159178][T18627] ___sys_sendmsg+0x21c/0x290 [ 1060.163885][T18627] ? __sys_sendmsg+0x270/0x270 [ 1060.168694][T18627] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1060.174456][T18627] ? __fdget+0x17c/0x200 [ 1060.178824][T18627] __se_sys_sendmsg+0x19e/0x270 [ 1060.183704][T18627] ? ct_nmi_exit+0x145/0x1c0 [ 1060.188321][T18627] ? __x64_sys_sendmsg+0x80/0x80 [ 1060.193321][T18627] ? lockdep_hardirqs_on+0x94/0x140 [ 1060.198567][T18627] do_syscall_64+0x4c/0xa0 [ 1060.203033][T18627] ? clear_bhb_loop+0x60/0xb0 [ 1060.208088][T18627] ? clear_bhb_loop+0x60/0xb0 [ 1060.212793][T18627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1060.218772][T18627] RIP: 0033:0x7f926e58e929 [ 1060.223208][T18627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1060.242838][T18627] RSP: 002b:00007f926f3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1060.251278][T18627] RAX: ffffffffffffffda RBX: 00007f926e7b5fa0 RCX: 00007f926e58e929 [ 1060.259274][T18627] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1060.267266][T18627] RBP: 00007f926e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1060.275446][T18627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1060.283483][T18627] R13: 0000000000000000 R14: 00007f926e7b5fa0 R15: 00007ffcf54ff2f8 [ 1060.291500][T18627] [ 1061.134337][T18655] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4597'. [ 1061.169151][T18655] device caif0 entered promiscuous mode [ 1061.388623][T18665] netlink: 'syz.4.4601': attribute type 21 has an invalid length. [ 1061.398844][T18665] netlink: 'syz.4.4601': attribute type 1 has an invalid length. [ 1061.409216][T18665] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4601'. [ 1061.696843][T18674] netlink: 'syz.4.4602': attribute type 10 has an invalid length. [ 1061.773434][T18674] bond0: (slave netdevsim0): Releasing backup interface [ 1061.829967][T18674] device netdevsim0 left promiscuous mode [ 1062.025592][T18674] device netdevsim0 entered promiscuous mode [ 1062.111743][T18674] team0: Port device netdevsim0 added [ 1062.141022][T18676] netlink: 'syz.4.4602': attribute type 10 has an invalid length. [ 1062.155245][T18676] device netdevsim0 left promiscuous mode [ 1062.240386][T18676] team0: Port device netdevsim0 removed [ 1062.252016][T18676] device netdevsim0 entered promiscuous mode [ 1062.262833][T18676] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1062.290646][T18685] netlink: 'syz.1.4605': attribute type 10 has an invalid length. [ 1062.857543][T18702] delete_channel: no stack [ 1062.928980][T18707] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4614'. [ 1063.033506][T18707] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1063.051838][T18707] CPU: 1 PID: 18707 Comm: syz.4.4614 Not tainted 6.1.141-syzkaller #0 [ 1063.060177][T18707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1063.070287][T18707] Call Trace: [ 1063.073609][T18707] [ 1063.076578][T18707] dump_stack_lvl+0x168/0x22e [ 1063.081319][T18707] ? show_regs_print_info+0x12/0x12 [ 1063.086596][T18707] ? load_image+0x3b0/0x3b0 [ 1063.091164][T18707] sysfs_warn_dup+0x8a/0xa0 [ 1063.095731][T18707] sysfs_do_create_link_sd+0xc0/0x110 [ 1063.101176][T18707] device_add+0x7ed/0xfb0 [ 1063.105580][T18707] wiphy_register+0x1e68/0x2bd0 [ 1063.110510][T18707] ? cfg80211_event_work+0x40/0x40 [ 1063.115754][T18707] ? minstrel_ht_alloc+0x894/0xa20 [ 1063.120943][T18707] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1063.127072][T18707] ieee80211_register_hw+0x2c29/0x38c0 [ 1063.132636][T18707] ? ieee80211_register_hw+0xef1/0x38c0 [ 1063.138245][T18707] ? ieee80211_register_hw+0xef1/0x38c0 [ 1063.143861][T18707] ? ieee80211_tasklet_handler+0x20/0x20 [ 1063.149570][T18707] ? memset+0x1e/0x40 [ 1063.153611][T18707] ? __hrtimer_init+0x186/0x270 [ 1063.158517][T18707] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1063.164311][T18707] hwsim_new_radio_nl+0xafa/0xce0 [ 1063.169406][T18707] genl_family_rcv_msg_doit+0x22e/0x320 [ 1063.175001][T18707] ? end_current_label_crit_section+0x170/0x170 [ 1063.181298][T18707] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1063.187249][T18707] ? bpf_lsm_capable+0x5/0x10 [ 1063.191982][T18707] ? security_capable+0x85/0xb0 [ 1063.196900][T18707] genl_rcv_msg+0x5f2/0x780 [ 1063.201471][T18707] ? genl_bind+0x350/0x350 [ 1063.205941][T18707] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1063.212341][T18707] ? lock_acquire+0x20f/0x490 [ 1063.217080][T18707] netlink_rcv_skb+0x1de/0x420 [ 1063.221905][T18707] ? genl_bind+0x350/0x350 [ 1063.226362][T18707] ? netlink_ack+0x1100/0x1100 [ 1063.231164][T18707] ? down_read+0x1a8/0x2d0 [ 1063.235604][T18707] genl_rcv+0x24/0x40 [ 1063.239603][T18707] netlink_unicast+0x74c/0x8c0 [ 1063.244402][T18707] netlink_sendmsg+0x89e/0xbc0 [ 1063.249308][T18707] ? netlink_getsockopt+0x540/0x540 [ 1063.254549][T18707] ? aa_sock_msg_perm+0x94/0x150 [ 1063.259596][T18707] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1063.264902][T18707] ? security_socket_sendmsg+0x7c/0xa0 [ 1063.270379][T18707] ? netlink_getsockopt+0x540/0x540 [ 1063.275606][T18707] ____sys_sendmsg+0x59b/0x970 [ 1063.280411][T18707] ? __sys_sendmsg_sock+0x30/0x30 [ 1063.285460][T18707] ? __import_iovec+0x315/0x500 [ 1063.290336][T18707] ? import_iovec+0x6f/0xa0 [ 1063.294860][T18707] ___sys_sendmsg+0x21c/0x290 [ 1063.299568][T18707] ? __sys_sendmsg+0x270/0x270 [ 1063.304393][T18707] ? __fdget+0x17c/0x200 [ 1063.308662][T18707] __se_sys_sendmsg+0x19e/0x270 [ 1063.313543][T18707] ? __x64_sys_sendmsg+0x80/0x80 [ 1063.318522][T18707] ? lockdep_hardirqs_on+0x94/0x140 [ 1063.323743][T18707] do_syscall_64+0x4c/0xa0 [ 1063.328191][T18707] ? clear_bhb_loop+0x60/0xb0 [ 1063.332883][T18707] ? clear_bhb_loop+0x60/0xb0 [ 1063.337587][T18707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1063.343512][T18707] RIP: 0033:0x7f926e58e929 [ 1063.347979][T18707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1063.367610][T18707] RSP: 002b:00007f926f3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1063.376049][T18707] RAX: ffffffffffffffda RBX: 00007f926e7b5fa0 RCX: 00007f926e58e929 [ 1063.384045][T18707] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1063.392035][T18707] RBP: 00007f926e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1063.400285][T18707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1063.408280][T18707] R13: 0000000000000000 R14: 00007f926e7b5fa0 R15: 00007ffcf54ff2f8 [ 1063.416291][T18707] [ 1063.827413][T18731] netlink: 'syz.3.4621': attribute type 10 has an invalid length. [ 1063.897150][T18731] bond0: (slave netdevsim0): Releasing backup interface [ 1063.921683][T18731] device netdevsim0 left promiscuous mode [ 1063.964629][T18731] device netdevsim0 entered promiscuous mode [ 1064.011017][T18731] team0: Port device netdevsim0 added [ 1064.036624][T18727] netlink: 'syz.3.4621': attribute type 10 has an invalid length. [ 1064.086204][T18727] device netdevsim0 left promiscuous mode [ 1064.321417][T18727] team0: Port device netdevsim0 removed [ 1064.994124][T18727] device netdevsim0 entered promiscuous mode [ 1065.001080][T18727] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1065.315750][T18756] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4633'. [ 1065.366582][T18756] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1065.394125][T18756] CPU: 1 PID: 18756 Comm: syz.4.4633 Not tainted 6.1.141-syzkaller #0 [ 1065.402370][T18756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1065.412495][T18756] Call Trace: [ 1065.415807][T18756] [ 1065.418772][T18756] dump_stack_lvl+0x168/0x22e [ 1065.423505][T18756] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1065.429715][T18756] ? show_regs_print_info+0x12/0x12 [ 1065.434964][T18756] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1065.441185][T18756] sysfs_warn_dup+0x8a/0xa0 [ 1065.445748][T18756] sysfs_do_create_link_sd+0xc0/0x110 [ 1065.451179][T18756] device_add+0x7ed/0xfb0 [ 1065.455569][T18756] wiphy_register+0x1e68/0x2bd0 [ 1065.460525][T18756] ? cfg80211_event_work+0x40/0x40 [ 1065.465700][T18756] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1065.471920][T18756] ? ieee80211_register_hw+0x2a4c/0x38c0 [ 1065.477622][T18756] ieee80211_register_hw+0x2c29/0x38c0 [ 1065.483171][T18756] ? ieee80211_register_hw+0xef1/0x38c0 [ 1065.488779][T18756] ? ieee80211_register_hw+0xef1/0x38c0 [ 1065.494479][T18756] ? ieee80211_tasklet_handler+0x20/0x20 [ 1065.500174][T18756] ? lockdep_hardirqs_on+0x94/0x140 [ 1065.505454][T18756] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1065.511655][T18756] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1065.517423][T18756] hwsim_new_radio_nl+0xafa/0xce0 [ 1065.522482][T18756] genl_family_rcv_msg_doit+0x22e/0x320 [ 1065.528053][T18756] ? end_current_label_crit_section+0x170/0x170 [ 1065.534323][T18756] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1065.540249][T18756] ? bpf_lsm_capable+0x5/0x10 [ 1065.544953][T18756] ? security_capable+0x85/0xb0 [ 1065.549833][T18756] genl_rcv_msg+0x5f2/0x780 [ 1065.554378][T18756] ? genl_bind+0x350/0x350 [ 1065.558814][T18756] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1065.565178][T18756] netlink_rcv_skb+0x1de/0x420 [ 1065.569994][T18756] ? genl_bind+0x350/0x350 [ 1065.574446][T18756] ? netlink_ack+0x1100/0x1100 [ 1065.579365][T18756] ? down_read+0x1a8/0x2d0 [ 1065.583817][T18756] genl_rcv+0x24/0x40 [ 1065.587824][T18756] netlink_unicast+0x74c/0x8c0 [ 1065.592629][T18756] netlink_sendmsg+0x89e/0xbc0 [ 1065.597537][T18756] ? netlink_getsockopt+0x540/0x540 [ 1065.602768][T18756] ? aa_sock_msg_perm+0x94/0x150 [ 1065.607733][T18756] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1065.613051][T18756] ? security_socket_sendmsg+0x7c/0xa0 [ 1065.618525][T18756] ? netlink_getsockopt+0x540/0x540 [ 1065.623752][T18756] ____sys_sendmsg+0x59b/0x970 [ 1065.628558][T18756] ? __sys_sendmsg_sock+0x30/0x30 [ 1065.633615][T18756] ? __import_iovec+0x315/0x500 [ 1065.638492][T18756] ? import_iovec+0x6f/0xa0 [ 1065.643021][T18756] ___sys_sendmsg+0x21c/0x290 [ 1065.647730][T18756] ? __sys_sendmsg+0x270/0x270 [ 1065.652543][T18756] ? ktime_get_real_ts64+0x420/0x420 [ 1065.657894][T18756] ? __fdget+0x17c/0x200 [ 1065.662170][T18756] __se_sys_sendmsg+0x19e/0x270 [ 1065.667055][T18756] ? __x64_sys_sendmsg+0x80/0x80 [ 1065.672038][T18756] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1065.677954][T18756] do_syscall_64+0x4c/0xa0 [ 1065.682400][T18756] ? clear_bhb_loop+0x60/0xb0 [ 1065.687100][T18756] ? clear_bhb_loop+0x60/0xb0 [ 1065.691793][T18756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1065.697720][T18756] RIP: 0033:0x7f926e58e929 [ 1065.702172][T18756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1065.721824][T18756] RSP: 002b:00007f926f3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1065.730376][T18756] RAX: ffffffffffffffda RBX: 00007f926e7b5fa0 RCX: 00007f926e58e929 [ 1065.738371][T18756] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1065.746361][T18756] RBP: 00007f926e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1065.754352][T18756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1065.762336][T18756] R13: 0000000000000000 R14: 00007f926e7b5fa0 R15: 00007ffcf54ff2f8 [ 1065.770397][T18756] [ 1066.361770][T18780] netlink: 'syz.3.4639': attribute type 21 has an invalid length. [ 1066.382088][T18780] netlink: 'syz.3.4639': attribute type 1 has an invalid length. [ 1066.393967][T18780] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4639'. [ 1067.095353][T18788] delete_channel: no stack [ 1067.103615][T18793] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4646'. [ 1067.128194][T18791] netlink: 'syz.1.4644': attribute type 10 has an invalid length. [ 1067.260401][T18791] bond0: (slave netdevsim0): Releasing backup interface [ 1067.353989][T18791] device netdevsim0 left promiscuous mode [ 1067.495937][T18791] device netdevsim0 entered promiscuous mode [ 1067.531238][T18791] team0: Port device netdevsim0 added [ 1067.558624][T18793] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1067.579840][T18793] CPU: 1 PID: 18793 Comm: syz.0.4646 Not tainted 6.1.141-syzkaller #0 [ 1067.588080][T18793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1067.598203][T18793] Call Trace: [ 1067.601617][T18793] [ 1067.604593][T18793] dump_stack_lvl+0x168/0x22e [ 1067.609333][T18793] ? show_regs_print_info+0x12/0x12 [ 1067.614685][T18793] ? load_image+0x3b0/0x3b0 [ 1067.619347][T18793] sysfs_warn_dup+0x8a/0xa0 [ 1067.623910][T18793] sysfs_do_create_link_sd+0xc0/0x110 [ 1067.629338][T18793] device_add+0x7ed/0xfb0 [ 1067.633879][T18793] wiphy_register+0x1e68/0x2bd0 [ 1067.638775][T18793] ? cfg80211_event_work+0x40/0x40 [ 1067.643924][T18793] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1067.650023][T18793] ieee80211_register_hw+0x2c29/0x38c0 [ 1067.655524][T18793] ? ieee80211_register_hw+0xef1/0x38c0 [ 1067.661106][T18793] ? ieee80211_register_hw+0xef1/0x38c0 [ 1067.666731][T18793] ? ieee80211_tasklet_handler+0x20/0x20 [ 1067.672418][T18793] ? memset+0x1e/0x40 [ 1067.676454][T18793] ? __hrtimer_init+0x186/0x270 [ 1067.681360][T18793] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1067.687160][T18793] hwsim_new_radio_nl+0xafa/0xce0 [ 1067.692230][T18793] genl_family_rcv_msg_doit+0x22e/0x320 [ 1067.697800][T18793] ? end_current_label_crit_section+0x170/0x170 [ 1067.704062][T18793] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1067.709990][T18793] ? bpf_lsm_capable+0x5/0x10 [ 1067.714697][T18793] ? security_capable+0x85/0xb0 [ 1067.719574][T18793] genl_rcv_msg+0x5f2/0x780 [ 1067.724116][T18793] ? genl_bind+0x350/0x350 [ 1067.728552][T18793] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1067.734914][T18793] netlink_rcv_skb+0x1de/0x420 [ 1067.739736][T18793] ? genl_bind+0x350/0x350 [ 1067.744178][T18793] ? netlink_ack+0x1100/0x1100 [ 1067.748977][T18793] ? down_read+0x1a8/0x2d0 [ 1067.753421][T18793] genl_rcv+0x24/0x40 [ 1067.757419][T18793] netlink_unicast+0x74c/0x8c0 [ 1067.762226][T18793] netlink_sendmsg+0x89e/0xbc0 [ 1067.767029][T18793] ? netlink_getsockopt+0x540/0x540 [ 1067.772260][T18793] ? aa_sock_msg_perm+0x94/0x150 [ 1067.777222][T18793] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1067.782550][T18793] ? security_socket_sendmsg+0x7c/0xa0 [ 1067.788024][T18793] ? netlink_getsockopt+0x540/0x540 [ 1067.793259][T18793] ____sys_sendmsg+0x59b/0x970 [ 1067.798059][T18793] ? __sys_sendmsg_sock+0x30/0x30 [ 1067.803114][T18793] ? ___sys_sendmsg+0x202/0x290 [ 1067.807997][T18793] ___sys_sendmsg+0x21c/0x290 [ 1067.812709][T18793] ? __sys_sendmsg+0x270/0x270 [ 1067.817540][T18793] ? ktime_get_real_ts64+0x420/0x420 [ 1067.822861][T18793] ? __fdget+0x17c/0x200 [ 1067.827135][T18793] __se_sys_sendmsg+0x19e/0x270 [ 1067.832011][T18793] ? ct_nmi_exit+0x145/0x1c0 [ 1067.836619][T18793] ? __x64_sys_sendmsg+0x80/0x80 [ 1067.841697][T18793] ? lockdep_hardirqs_on+0x94/0x140 [ 1067.846920][T18793] do_syscall_64+0x4c/0xa0 [ 1067.851363][T18793] ? clear_bhb_loop+0x60/0xb0 [ 1067.856062][T18793] ? clear_bhb_loop+0x60/0xb0 [ 1067.860761][T18793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1067.866685][T18793] RIP: 0033:0x7fa4bf98e929 [ 1067.871117][T18793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1067.890762][T18793] RSP: 002b:00007fa4c0821038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1067.899208][T18793] RAX: ffffffffffffffda RBX: 00007fa4bfbb5fa0 RCX: 00007fa4bf98e929 [ 1067.907204][T18793] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1067.915194][T18793] RBP: 00007fa4bfa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1067.923180][T18793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1067.931171][T18793] R13: 0000000000000000 R14: 00007fa4bfbb5fa0 R15: 00007ffe7018bd18 [ 1067.939176][T18793] [ 1068.018130][T18800] netlink: 'syz.1.4644': attribute type 10 has an invalid length. [ 1068.028563][T18800] device netdevsim0 left promiscuous mode [ 1068.052757][T18800] team0: Port device netdevsim0 removed [ 1068.060977][T18800] device netdevsim0 entered promiscuous mode [ 1068.069594][T18800] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1068.477367][T18823] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4665'. [ 1068.509455][T18823] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1068.517903][T18823] CPU: 0 PID: 18823 Comm: syz.0.4665 Not tainted 6.1.141-syzkaller #0 [ 1068.526131][T18823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1068.536246][T18823] Call Trace: [ 1068.539557][T18823] [ 1068.542521][T18823] dump_stack_lvl+0x168/0x22e [ 1068.547252][T18823] ? show_regs_print_info+0x12/0x12 [ 1068.552505][T18823] ? load_image+0x3b0/0x3b0 [ 1068.557067][T18823] sysfs_warn_dup+0x8a/0xa0 [ 1068.561632][T18823] sysfs_do_create_link_sd+0xc0/0x110 [ 1068.567062][T18823] device_add+0x7ed/0xfb0 [ 1068.571433][T18823] wiphy_register+0x1e68/0x2bd0 [ 1068.576330][T18823] ? cfg80211_event_work+0x40/0x40 [ 1068.581473][T18823] ? minstrel_ht_alloc+0x894/0xa20 [ 1068.586619][T18823] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1068.592707][T18823] ieee80211_register_hw+0x2c29/0x38c0 [ 1068.598204][T18823] ? ieee80211_register_hw+0xef1/0x38c0 [ 1068.603774][T18823] ? ieee80211_register_hw+0xef1/0x38c0 [ 1068.609355][T18823] ? ieee80211_tasklet_handler+0x20/0x20 [ 1068.615028][T18823] ? memset+0x1e/0x40 [ 1068.619029][T18823] ? __hrtimer_init+0x186/0x270 [ 1068.623898][T18823] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1068.629656][T18823] hwsim_new_radio_nl+0xafa/0xce0 [ 1068.634724][T18823] genl_family_rcv_msg_doit+0x22e/0x320 [ 1068.640292][T18823] ? end_current_label_crit_section+0x170/0x170 [ 1068.646555][T18823] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1068.652473][T18823] ? bpf_lsm_capable+0x5/0x10 [ 1068.657178][T18823] ? security_capable+0x85/0xb0 [ 1068.662080][T18823] genl_rcv_msg+0x5f2/0x780 [ 1068.666613][T18823] ? genl_bind+0x350/0x350 [ 1068.671047][T18823] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1068.677413][T18823] netlink_rcv_skb+0x1de/0x420 [ 1068.682212][T18823] ? genl_bind+0x350/0x350 [ 1068.686648][T18823] ? netlink_ack+0x1100/0x1100 [ 1068.691465][T18823] ? down_read+0x1a8/0x2d0 [ 1068.695931][T18823] genl_rcv+0x24/0x40 [ 1068.699945][T18823] netlink_unicast+0x74c/0x8c0 [ 1068.704756][T18823] netlink_sendmsg+0x89e/0xbc0 [ 1068.709561][T18823] ? netlink_getsockopt+0x540/0x540 [ 1068.714812][T18823] ? aa_sock_msg_perm+0x94/0x150 [ 1068.719802][T18823] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1068.725129][T18823] ? security_socket_sendmsg+0x7c/0xa0 [ 1068.730624][T18823] ? netlink_getsockopt+0x540/0x540 [ 1068.735857][T18823] ____sys_sendmsg+0x59b/0x970 [ 1068.740659][T18823] ? __sys_sendmsg_sock+0x30/0x30 [ 1068.745708][T18823] ? __import_iovec+0x315/0x500 [ 1068.750587][T18823] ? import_iovec+0x6f/0xa0 [ 1068.755115][T18823] ___sys_sendmsg+0x21c/0x290 [ 1068.759827][T18823] ? __sys_sendmsg+0x270/0x270 [ 1068.764654][T18823] ? __fdget+0x17c/0x200 [ 1068.768926][T18823] __se_sys_sendmsg+0x19e/0x270 [ 1068.773817][T18823] ? __x64_sys_sendmsg+0x80/0x80 [ 1068.778886][T18823] do_syscall_64+0x4c/0xa0 [ 1068.783325][T18823] ? clear_bhb_loop+0x60/0xb0 [ 1068.788106][T18823] ? clear_bhb_loop+0x60/0xb0 [ 1068.792809][T18823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1068.798733][T18823] RIP: 0033:0x7fa4bf98e929 [ 1068.803166][T18823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1068.822890][T18823] RSP: 002b:00007fa4c0821038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1068.831326][T18823] RAX: ffffffffffffffda RBX: 00007fa4bfbb5fa0 RCX: 00007fa4bf98e929 [ 1068.839324][T18823] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1068.847312][T18823] RBP: 00007fa4bfa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1068.855310][T18823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1068.863295][T18823] R13: 0000000000000000 R14: 00007fa4bfbb5fa0 R15: 00007ffe7018bd18 [ 1068.871297][T18823] [ 1068.889148][T18822] netlink: 'syz.2.4655': attribute type 21 has an invalid length. [ 1068.902181][T18822] netlink: 'syz.2.4655': attribute type 1 has an invalid length. [ 1068.916542][T18822] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4655'. [ 1068.955106][T18827] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4658'. [ 1068.970210][T18827] device caif0 entered promiscuous mode [ 1069.240706][T18832] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4661'. [ 1069.273124][T18832] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1069.287965][T18832] CPU: 0 PID: 18832 Comm: syz.3.4661 Not tainted 6.1.141-syzkaller #0 [ 1069.296190][T18832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1069.306271][T18832] Call Trace: [ 1069.309567][T18832] [ 1069.312518][T18832] dump_stack_lvl+0x168/0x22e [ 1069.317231][T18832] ? show_regs_print_info+0x12/0x12 [ 1069.322462][T18832] ? load_image+0x3b0/0x3b0 [ 1069.327005][T18832] sysfs_warn_dup+0x8a/0xa0 [ 1069.331537][T18832] sysfs_do_create_link_sd+0xc0/0x110 [ 1069.336935][T18832] device_add+0x7ed/0xfb0 [ 1069.341296][T18832] wiphy_register+0x1e68/0x2bd0 [ 1069.346188][T18832] ? cfg80211_event_work+0x40/0x40 [ 1069.351339][T18832] ? minstrel_ht_alloc+0x894/0xa20 [ 1069.356488][T18832] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1069.362581][T18832] ieee80211_register_hw+0x2c29/0x38c0 [ 1069.368076][T18832] ? ieee80211_register_hw+0xef1/0x38c0 [ 1069.373651][T18832] ? ieee80211_register_hw+0xef1/0x38c0 [ 1069.379253][T18832] ? ieee80211_tasklet_handler+0x20/0x20 [ 1069.384945][T18832] ? memset+0x1e/0x40 [ 1069.388974][T18832] ? __hrtimer_init+0x186/0x270 [ 1069.393853][T18832] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1069.399615][T18832] hwsim_new_radio_nl+0xafa/0xce0 [ 1069.404676][T18832] genl_family_rcv_msg_doit+0x22e/0x320 [ 1069.410267][T18832] ? end_current_label_crit_section+0x170/0x170 [ 1069.416640][T18832] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1069.422575][T18832] ? bpf_lsm_capable+0x5/0x10 [ 1069.427285][T18832] ? security_capable+0x85/0xb0 [ 1069.432170][T18832] genl_rcv_msg+0x5f2/0x780 [ 1069.436707][T18832] ? genl_bind+0x350/0x350 [ 1069.441149][T18832] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1069.447511][T18832] ? lock_acquire+0x20f/0x490 [ 1069.452219][T18832] netlink_rcv_skb+0x1de/0x420 [ 1069.457030][T18832] ? genl_bind+0x350/0x350 [ 1069.461465][T18832] ? netlink_ack+0x1100/0x1100 [ 1069.466282][T18832] ? down_read+0x1a8/0x2d0 [ 1069.470729][T18832] genl_rcv+0x24/0x40 [ 1069.474734][T18832] netlink_unicast+0x74c/0x8c0 [ 1069.479535][T18832] netlink_sendmsg+0x89e/0xbc0 [ 1069.484337][T18832] ? netlink_getsockopt+0x540/0x540 [ 1069.489568][T18832] ? aa_sock_msg_perm+0x94/0x150 [ 1069.494527][T18832] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1069.499833][T18832] ? security_socket_sendmsg+0x7c/0xa0 [ 1069.505491][T18832] ? netlink_getsockopt+0x540/0x540 [ 1069.510721][T18832] ____sys_sendmsg+0x59b/0x970 [ 1069.515609][T18832] ? __sys_sendmsg_sock+0x30/0x30 [ 1069.520665][T18832] ? __import_iovec+0x315/0x500 [ 1069.525565][T18832] ? import_iovec+0x6f/0xa0 [ 1069.530097][T18832] ___sys_sendmsg+0x21c/0x290 [ 1069.534808][T18832] ? __sys_sendmsg+0x270/0x270 [ 1069.539635][T18832] ? __fdget+0x17c/0x200 [ 1069.543911][T18832] __se_sys_sendmsg+0x19e/0x270 [ 1069.548791][T18832] ? ct_nmi_exit+0x145/0x1c0 [ 1069.553409][T18832] ? __x64_sys_sendmsg+0x80/0x80 [ 1069.558396][T18832] ? lockdep_hardirqs_on+0x94/0x140 [ 1069.563618][T18832] do_syscall_64+0x4c/0xa0 [ 1069.568064][T18832] ? clear_bhb_loop+0x60/0xb0 [ 1069.572759][T18832] ? clear_bhb_loop+0x60/0xb0 [ 1069.577457][T18832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1069.583469][T18832] RIP: 0033:0x7f188538e929 [ 1069.587905][T18832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1069.608354][T18832] RSP: 002b:00007f18862d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1069.616887][T18832] RAX: ffffffffffffffda RBX: 00007f18855b5fa0 RCX: 00007f188538e929 [ 1069.624879][T18832] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1069.632874][T18832] RBP: 00007f1885410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1069.640891][T18832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.648892][T18832] R13: 0000000000000000 R14: 00007f18855b5fa0 R15: 00007ffea3ac3938 [ 1069.656902][T18832] [ 1070.536996][T18856] netlink: 'syz.0.4667': attribute type 10 has an invalid length. [ 1070.682135][T18856] bond0: (slave netdevsim0): Releasing backup interface [ 1070.792240][T18856] device netdevsim0 left promiscuous mode [ 1070.817550][T18865] sctp: [Deprecated]: syz.2.4672 (pid 18865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1070.817550][T18865] Use struct sctp_sack_info instead [ 1070.941274][T18856] device netdevsim0 entered promiscuous mode [ 1070.978870][T18856] team0: Port device netdevsim0 added [ 1071.030726][T18858] netlink: 'syz.0.4667': attribute type 10 has an invalid length. [ 1071.047887][T18858] device netdevsim0 left promiscuous mode [ 1071.098028][T18858] team0: Port device netdevsim0 removed [ 1071.109817][T18858] device netdevsim0 entered promiscuous mode [ 1071.118357][T18858] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1071.128990][T18860] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4672'. [ 1071.627094][T18886] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4681'. [ 1071.686637][T18886] device caif0 entered promiscuous mode [ 1072.335042][T18907] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4690'. [ 1072.399110][T18907] sctp: [Deprecated]: syz.0.4690 (pid 18907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1072.399110][T18907] Use struct sctp_sack_info instead [ 1072.711371][T18912] netlink: 'syz.1.4692': attribute type 10 has an invalid length. [ 1072.882093][T18912] bond0: (slave netdevsim0): Releasing backup interface [ 1073.045126][T18912] device netdevsim0 left promiscuous mode [ 1073.111487][T18912] device netdevsim0 entered promiscuous mode [ 1073.152448][T18912] team0: Port device netdevsim0 added [ 1073.171921][T18921] netlink: 'syz.1.4692': attribute type 10 has an invalid length. [ 1073.195612][T18921] device netdevsim0 left promiscuous mode [ 1073.252085][T18921] team0: Port device netdevsim0 removed [ 1073.274578][T18921] device netdevsim0 entered promiscuous mode [ 1073.281768][T18921] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1073.893830][T18956] bridge0: port 4(bond0) entered disabled state [ 1073.921138][T18956] bridge0: port 3(team0) entered disabled state [ 1073.954487][T18956] device bridge_slave_1 left promiscuous mode [ 1073.962327][T18956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.999974][T18956] device bridge_slave_0 left promiscuous mode [ 1074.015233][T18956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.867179][T18973] netlink: 'syz.3.4715': attribute type 10 has an invalid length. [ 1075.197004][T18973] bond0: (slave netdevsim0): Releasing backup interface [ 1075.298305][T18973] device netdevsim0 left promiscuous mode [ 1075.381483][T18973] device netdevsim0 entered promiscuous mode [ 1075.427724][T18973] team0: Port device netdevsim0 added [ 1075.449025][T18980] netlink: 'syz.3.4715': attribute type 10 has an invalid length. [ 1075.459746][T18980] device netdevsim0 left promiscuous mode [ 1075.484614][T18980] team0: Port device netdevsim0 removed [ 1075.498248][T18980] device netdevsim0 entered promiscuous mode [ 1075.505180][T18980] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1075.514442][T18983] netlink: 'syz.1.4714': attribute type 21 has an invalid length. [ 1075.522761][T18983] netlink: 'syz.1.4714': attribute type 1 has an invalid length. [ 1075.530689][T18983] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4714'. [ 1076.156250][T19006] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4723'. [ 1076.241817][T19006] sctp: [Deprecated]: syz.3.4723 (pid 19006) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1076.241817][T19006] Use struct sctp_sack_info instead [ 1076.771272][T19017] netlink: 'syz.1.4726': attribute type 10 has an invalid length. [ 1077.333549][T19035] netlink: 'syz.2.4731': attribute type 10 has an invalid length. [ 1077.393564][T19035] bond0: (slave netdevsim0): Releasing backup interface [ 1077.446113][T19035] device netdevsim0 left promiscuous mode [ 1077.549946][T19035] device netdevsim0 entered promiscuous mode [ 1077.653912][T19035] team0: Port device netdevsim0 added [ 1077.707381][T19038] netlink: 'syz.2.4731': attribute type 10 has an invalid length. [ 1077.741339][T19038] device netdevsim0 left promiscuous mode [ 1077.836880][T19038] team0: Port device netdevsim0 removed [ 1077.888788][T19038] device netdevsim0 entered promiscuous mode [ 1077.936139][T19038] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1079.312240][T19089] netlink: 'syz.3.4750': attribute type 10 has an invalid length. [ 1079.461958][T19091] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4760'. [ 1079.518638][T19091] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1079.567196][T19091] CPU: 0 PID: 19091 Comm: syz.1.4760 Not tainted 6.1.141-syzkaller #0 [ 1079.575427][T19091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1079.585516][T19091] Call Trace: [ 1079.588839][T19091] [ 1079.591868][T19091] dump_stack_lvl+0x168/0x22e [ 1079.596636][T19091] ? show_regs_print_info+0x12/0x12 [ 1079.601878][T19091] ? load_image+0x3b0/0x3b0 [ 1079.606453][T19091] sysfs_warn_dup+0x8a/0xa0 [ 1079.611022][T19091] sysfs_do_create_link_sd+0xc0/0x110 [ 1079.616457][T19091] device_add+0x7ed/0xfb0 [ 1079.620850][T19091] wiphy_register+0x1e68/0x2bd0 [ 1079.625784][T19091] ? cfg80211_event_work+0x40/0x40 [ 1079.630941][T19091] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1079.637136][T19091] ieee80211_register_hw+0x2c29/0x38c0 [ 1079.642639][T19091] ? ieee80211_register_hw+0xef1/0x38c0 [ 1079.648230][T19091] ? ieee80211_register_hw+0xef1/0x38c0 [ 1079.653813][T19091] ? ieee80211_tasklet_handler+0x20/0x20 [ 1079.659486][T19091] ? memset+0x1e/0x40 [ 1079.663494][T19091] ? __hrtimer_init+0x186/0x270 [ 1079.668370][T19091] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1079.674214][T19091] hwsim_new_radio_nl+0xafa/0xce0 [ 1079.679275][T19091] genl_family_rcv_msg_doit+0x22e/0x320 [ 1079.684848][T19091] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1079.691113][T19091] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1079.697054][T19091] ? bpf_lsm_capable+0x5/0x10 [ 1079.701803][T19091] ? security_capable+0x85/0xb0 [ 1079.706716][T19091] genl_rcv_msg+0x5f2/0x780 [ 1079.711259][T19091] ? genl_bind+0x350/0x350 [ 1079.715710][T19091] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1079.722083][T19091] netlink_rcv_skb+0x1de/0x420 [ 1079.726878][T19091] ? genl_bind+0x350/0x350 [ 1079.731318][T19091] ? netlink_ack+0x1100/0x1100 [ 1079.736148][T19091] ? down_read+0x1a8/0x2d0 [ 1079.740589][T19091] genl_rcv+0x24/0x40 [ 1079.744590][T19091] netlink_unicast+0x74c/0x8c0 [ 1079.749413][T19091] netlink_sendmsg+0x89e/0xbc0 [ 1079.754222][T19091] ? netlink_getsockopt+0x540/0x540 [ 1079.759472][T19091] ? aa_sock_msg_perm+0x94/0x150 [ 1079.764453][T19091] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1079.769761][T19091] ? security_socket_sendmsg+0x7c/0xa0 [ 1079.775254][T19091] ? netlink_getsockopt+0x540/0x540 [ 1079.780657][T19091] ____sys_sendmsg+0x59b/0x970 [ 1079.785507][T19091] ? __sys_sendmsg_sock+0x30/0x30 [ 1079.790648][T19091] ? __import_iovec+0x315/0x500 [ 1079.795559][T19091] ? import_iovec+0x6f/0xa0 [ 1079.800081][T19091] ___sys_sendmsg+0x21c/0x290 [ 1079.804798][T19091] ? __sys_sendmsg+0x270/0x270 [ 1079.809621][T19091] ? __fdget+0x17c/0x200 [ 1079.814005][T19091] __se_sys_sendmsg+0x19e/0x270 [ 1079.818904][T19091] ? __x64_sys_sendmsg+0x80/0x80 [ 1079.823885][T19091] ? lockdep_hardirqs_on+0x94/0x140 [ 1079.829105][T19091] do_syscall_64+0x4c/0xa0 [ 1079.833552][T19091] ? clear_bhb_loop+0x60/0xb0 [ 1079.838254][T19091] ? clear_bhb_loop+0x60/0xb0 [ 1079.842959][T19091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1079.848882][T19091] RIP: 0033:0x7f639bf8e929 [ 1079.853318][T19091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1079.873036][T19091] RSP: 002b:00007f639cd24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1079.881477][T19091] RAX: ffffffffffffffda RBX: 00007f639c1b5fa0 RCX: 00007f639bf8e929 [ 1079.889474][T19091] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1079.897557][T19091] RBP: 00007f639c010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1079.905607][T19091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1079.913648][T19091] R13: 0000000000000000 R14: 00007f639c1b5fa0 R15: 00007ffd6f179248 [ 1079.921663][T19091] [ 1079.959303][T19096] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4752'. [ 1079.982215][T19096] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1079.995604][T19096] CPU: 0 PID: 19096 Comm: syz.4.4752 Not tainted 6.1.141-syzkaller #0 [ 1080.003837][T19096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1080.014041][T19096] Call Trace: [ 1080.017363][T19096] [ 1080.020326][T19096] dump_stack_lvl+0x168/0x22e [ 1080.025066][T19096] ? show_regs_print_info+0x12/0x12 [ 1080.030339][T19096] ? load_image+0x3b0/0x3b0 [ 1080.034904][T19096] sysfs_warn_dup+0x8a/0xa0 [ 1080.039475][T19096] sysfs_do_create_link_sd+0xc0/0x110 [ 1080.045005][T19096] device_add+0x7ed/0xfb0 [ 1080.049404][T19096] wiphy_register+0x1e68/0x2bd0 [ 1080.054378][T19096] ? cfg80211_event_work+0x40/0x40 [ 1080.059546][T19096] ? minstrel_ht_alloc+0x894/0xa20 [ 1080.064723][T19096] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1080.070842][T19096] ieee80211_register_hw+0x2c29/0x38c0 [ 1080.076378][T19096] ? ieee80211_register_hw+0xef1/0x38c0 [ 1080.081982][T19096] ? ieee80211_register_hw+0xef1/0x38c0 [ 1080.087595][T19096] ? ieee80211_tasklet_handler+0x20/0x20 [ 1080.093313][T19096] ? memset+0x1e/0x40 [ 1080.097358][T19096] ? __hrtimer_init+0x186/0x270 [ 1080.102269][T19096] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1080.108060][T19096] hwsim_new_radio_nl+0xafa/0xce0 [ 1080.113143][T19096] genl_family_rcv_msg_doit+0x22e/0x320 [ 1080.118736][T19096] ? end_current_label_crit_section+0x170/0x170 [ 1080.125030][T19096] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1080.130982][T19096] ? bpf_lsm_capable+0x5/0x10 [ 1080.135715][T19096] ? security_capable+0x85/0xb0 [ 1080.140628][T19096] genl_rcv_msg+0x5f2/0x780 [ 1080.145189][T19096] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1080.151418][T19096] ? genl_bind+0x350/0x350 [ 1080.155975][T19096] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1080.162359][T19096] ? netlink_rcv_skb+0x1bd/0x420 [ 1080.167371][T19096] netlink_rcv_skb+0x1de/0x420 [ 1080.172184][T19096] ? genl_bind+0x350/0x350 [ 1080.176639][T19096] ? netlink_ack+0x1100/0x1100 [ 1080.181468][T19096] ? down_read+0x1a8/0x2d0 [ 1080.185957][T19096] genl_rcv+0x24/0x40 [ 1080.189975][T19096] netlink_unicast+0x74c/0x8c0 [ 1080.194804][T19096] netlink_sendmsg+0x89e/0xbc0 [ 1080.199614][T19096] ? lockdep_hardirqs_on+0x94/0x140 [ 1080.204879][T19096] ? netlink_getsockopt+0x540/0x540 [ 1080.210136][T19096] ? audit_tree_destroy_watch+0x20/0x20 [ 1080.215724][T19096] ? security_socket_sendmsg+0x7c/0xa0 [ 1080.221226][T19096] ? netlink_getsockopt+0x540/0x540 [ 1080.226493][T19096] ____sys_sendmsg+0x59b/0x970 [ 1080.231316][T19096] ? __sys_sendmsg_sock+0x30/0x30 [ 1080.236392][T19096] ? __import_iovec+0x315/0x500 [ 1080.241328][T19096] ? import_iovec+0x6f/0xa0 [ 1080.245881][T19096] ___sys_sendmsg+0x21c/0x290 [ 1080.250628][T19096] ? __sys_sendmsg+0x270/0x270 [ 1080.255469][T19096] ? ktime_get_real_ts64+0x420/0x420 [ 1080.260816][T19096] ? __fdget+0x17c/0x200 [ 1080.265118][T19096] __se_sys_sendmsg+0x19e/0x270 [ 1080.270022][T19096] ? __x64_sys_sendmsg+0x80/0x80 [ 1080.275035][T19096] ? lockdep_hardirqs_on+0x94/0x140 [ 1080.280294][T19096] do_syscall_64+0x4c/0xa0 [ 1080.284846][T19096] ? clear_bhb_loop+0x60/0xb0 [ 1080.289566][T19096] ? clear_bhb_loop+0x60/0xb0 [ 1080.294290][T19096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1080.300235][T19096] RIP: 0033:0x7f926e58e929 [ 1080.304713][T19096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1080.324363][T19096] RSP: 002b:00007f926f3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1080.332821][T19096] RAX: ffffffffffffffda RBX: 00007f926e7b5fa0 RCX: 00007f926e58e929 [ 1080.340837][T19096] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1080.349805][T19096] RBP: 00007f926e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1080.357842][T19096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1080.365937][T19096] R13: 0000000000000000 R14: 00007f926e7b5fa0 R15: 00007ffcf54ff2f8 [ 1080.374055][T19096] [ 1080.600198][T19107] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4753'. [ 1080.706836][T19102] sctp: [Deprecated]: syz.1.4753 (pid 19102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1080.706836][T19102] Use struct sctp_sack_info instead [ 1081.269850][T19123] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4762'. [ 1081.728839][T19137] netlink: 'syz.4.4766': attribute type 10 has an invalid length. [ 1081.802210][T19139] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4768'. [ 1081.887326][T19139] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1081.911724][T19139] CPU: 1 PID: 19139 Comm: syz.2.4768 Not tainted 6.1.141-syzkaller #0 [ 1081.919970][T19139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1081.930076][T19139] Call Trace: [ 1081.933396][T19139] [ 1081.936361][T19139] dump_stack_lvl+0x168/0x22e [ 1081.941102][T19139] ? show_regs_print_info+0x12/0x12 [ 1081.946368][T19139] ? load_image+0x3b0/0x3b0 [ 1081.950932][T19139] ? sysfs_warn_dup+0x61/0xa0 [ 1081.955680][T19139] sysfs_warn_dup+0x8a/0xa0 [ 1081.960256][T19139] sysfs_do_create_link_sd+0xc0/0x110 [ 1081.965696][T19139] device_add+0x7ed/0xfb0 [ 1081.970095][T19139] wiphy_register+0x1e68/0x2bd0 [ 1081.975037][T19139] ? cfg80211_event_work+0x40/0x40 [ 1081.980211][T19139] ? minstrel_ht_alloc+0x894/0xa20 [ 1081.985391][T19139] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1081.991512][T19139] ieee80211_register_hw+0x2c29/0x38c0 [ 1081.997047][T19139] ? ieee80211_register_hw+0xef1/0x38c0 [ 1082.002652][T19139] ? ieee80211_register_hw+0xef1/0x38c0 [ 1082.008270][T19139] ? ieee80211_tasklet_handler+0x20/0x20 [ 1082.013986][T19139] ? memset+0x1e/0x40 [ 1082.018026][T19139] ? __hrtimer_init+0x186/0x270 [ 1082.022936][T19139] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1082.028723][T19139] hwsim_new_radio_nl+0xafa/0xce0 [ 1082.033821][T19139] genl_family_rcv_msg_doit+0x22e/0x320 [ 1082.039420][T19139] ? end_current_label_crit_section+0x170/0x170 [ 1082.045719][T19139] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1082.051681][T19139] ? bpf_lsm_capable+0x5/0x10 [ 1082.056422][T19139] ? security_capable+0x85/0xb0 [ 1082.061339][T19139] genl_rcv_msg+0x5f2/0x780 [ 1082.065906][T19139] ? genl_bind+0x350/0x350 [ 1082.070373][T19139] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1082.076761][T19139] ? lock_acquire+0x20f/0x490 [ 1082.081501][T19139] netlink_rcv_skb+0x1de/0x420 [ 1082.086328][T19139] ? genl_bind+0x350/0x350 [ 1082.090797][T19139] ? netlink_ack+0x1100/0x1100 [ 1082.095632][T19139] ? down_read+0x1a8/0x2d0 [ 1082.100098][T19139] genl_rcv+0x24/0x40 [ 1082.104127][T19139] netlink_unicast+0x74c/0x8c0 [ 1082.108966][T19139] netlink_sendmsg+0x89e/0xbc0 [ 1082.113804][T19139] ? netlink_getsockopt+0x540/0x540 [ 1082.119069][T19139] ? aa_sock_msg_perm+0x94/0x150 [ 1082.124073][T19139] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1082.129410][T19139] ? security_socket_sendmsg+0x7c/0xa0 [ 1082.134915][T19139] ? netlink_getsockopt+0x540/0x540 [ 1082.140185][T19139] ____sys_sendmsg+0x59b/0x970 [ 1082.145018][T19139] ? __sys_sendmsg_sock+0x30/0x30 [ 1082.150115][T19139] ? __import_iovec+0x315/0x500 [ 1082.155023][T19139] ? import_iovec+0x6f/0xa0 [ 1082.159575][T19139] ___sys_sendmsg+0x21c/0x290 [ 1082.164321][T19139] ? __sys_sendmsg+0x270/0x270 [ 1082.169131][T19139] ? ct_nmi_exit+0x145/0x1c0 [ 1082.173736][T19139] ? ct_irq_exit_irqson+0xfa/0x160 [ 1082.178908][T19139] __se_sys_sendmsg+0x19e/0x270 [ 1082.183800][T19139] ? ct_nmi_exit+0x145/0x1c0 [ 1082.188439][T19139] ? __x64_sys_sendmsg+0x80/0x80 [ 1082.193571][T19139] ? lockdep_hardirqs_on+0x94/0x140 [ 1082.198836][T19139] do_syscall_64+0x4c/0xa0 [ 1082.203290][T19139] ? clear_bhb_loop+0x60/0xb0 [ 1082.208002][T19139] ? clear_bhb_loop+0x60/0xb0 [ 1082.212720][T19139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1082.218677][T19139] RIP: 0033:0x7fa26258e929 [ 1082.223144][T19139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.242817][T19139] RSP: 002b:00007fa2634c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1082.251314][T19139] RAX: ffffffffffffffda RBX: 00007fa2627b5fa0 RCX: 00007fa26258e929 [ 1082.259349][T19139] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1082.267379][T19139] RBP: 00007fa262610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1082.275403][T19139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.283495][T19139] R13: 0000000000000000 R14: 00007fa2627b5fa0 R15: 00007fff0e21c1b8 [ 1082.291502][T19139] [ 1082.361862][T19142] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4767'. [ 1082.433915][T19142] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1082.451241][T19142] CPU: 1 PID: 19142 Comm: syz.3.4767 Not tainted 6.1.141-syzkaller #0 [ 1082.459484][T19142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1082.469589][T19142] Call Trace: [ 1082.472902][T19142] [ 1082.475879][T19142] dump_stack_lvl+0x168/0x22e [ 1082.480614][T19142] ? show_regs_print_info+0x12/0x12 [ 1082.485872][T19142] ? load_image+0x3b0/0x3b0 [ 1082.490447][T19142] sysfs_warn_dup+0x8a/0xa0 [ 1082.495011][T19142] sysfs_do_create_link_sd+0xc0/0x110 [ 1082.500447][T19142] device_add+0x7ed/0xfb0 [ 1082.504864][T19142] wiphy_register+0x1e68/0x2bd0 [ 1082.509794][T19142] ? cfg80211_event_work+0x40/0x40 [ 1082.515150][T19142] ? minstrel_ht_alloc+0x894/0xa20 [ 1082.520326][T19142] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1082.526449][T19142] ieee80211_register_hw+0x2c29/0x38c0 [ 1082.531976][T19142] ? ieee80211_register_hw+0xef1/0x38c0 [ 1082.537585][T19142] ? ieee80211_register_hw+0xef1/0x38c0 [ 1082.543200][T19142] ? ieee80211_tasklet_handler+0x20/0x20 [ 1082.548898][T19142] ? memset+0x1e/0x40 [ 1082.552935][T19142] ? __hrtimer_init+0x186/0x270 [ 1082.557813][T19142] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1082.563592][T19142] hwsim_new_radio_nl+0xafa/0xce0 [ 1082.568662][T19142] genl_family_rcv_msg_doit+0x22e/0x320 [ 1082.574263][T19142] ? end_current_label_crit_section+0x170/0x170 [ 1082.580545][T19142] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1082.586467][T19142] ? bpf_lsm_capable+0x5/0x10 [ 1082.591174][T19142] ? security_capable+0x85/0xb0 [ 1082.596314][T19142] genl_rcv_msg+0x5f2/0x780 [ 1082.600891][T19142] ? genl_bind+0x350/0x350 [ 1082.605326][T19142] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1082.611695][T19142] netlink_rcv_skb+0x1de/0x420 [ 1082.616486][T19142] ? genl_bind+0x350/0x350 [ 1082.620921][T19142] ? netlink_ack+0x1100/0x1100 [ 1082.625715][T19142] ? down_read+0x1a8/0x2d0 [ 1082.630161][T19142] genl_rcv+0x24/0x40 [ 1082.634162][T19142] netlink_unicast+0x74c/0x8c0 [ 1082.638957][T19142] netlink_sendmsg+0x89e/0xbc0 [ 1082.643758][T19142] ? netlink_getsockopt+0x540/0x540 [ 1082.648987][T19142] ? aa_sock_msg_perm+0x94/0x150 [ 1082.653949][T19142] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1082.659260][T19142] ? security_socket_sendmsg+0x7c/0xa0 [ 1082.664750][T19142] ? netlink_getsockopt+0x540/0x540 [ 1082.669977][T19142] ____sys_sendmsg+0x59b/0x970 [ 1082.674779][T19142] ? __sys_sendmsg_sock+0x30/0x30 [ 1082.679839][T19142] ? __import_iovec+0x315/0x500 [ 1082.684718][T19142] ? import_iovec+0x6f/0xa0 [ 1082.689240][T19142] ___sys_sendmsg+0x21c/0x290 [ 1082.693945][T19142] ? __sys_sendmsg+0x270/0x270 [ 1082.698779][T19142] __se_sys_sendmsg+0x19e/0x270 [ 1082.703752][T19142] ? ct_nmi_exit+0x145/0x1c0 [ 1082.708363][T19142] ? __x64_sys_sendmsg+0x80/0x80 [ 1082.713535][T19142] ? lockdep_hardirqs_on+0x94/0x140 [ 1082.718758][T19142] do_syscall_64+0x4c/0xa0 [ 1082.723207][T19142] ? clear_bhb_loop+0x60/0xb0 [ 1082.727914][T19142] ? clear_bhb_loop+0x60/0xb0 [ 1082.732628][T19142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1082.738557][T19142] RIP: 0033:0x7f188538e929 [ 1082.742985][T19142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.762694][T19142] RSP: 002b:00007f18862d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1082.771155][T19142] RAX: ffffffffffffffda RBX: 00007f18855b5fa0 RCX: 00007f188538e929 [ 1082.779151][T19142] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1082.787142][T19142] RBP: 00007f1885410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1082.795169][T19142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.803156][T19142] R13: 0000000000000000 R14: 00007f18855b5fa0 R15: 00007ffea3ac3938 [ 1082.811160][T19142] [ 1083.423553][T19175] netlink: 'syz.1.4779': attribute type 39 has an invalid length. [ 1083.835007][T19183] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4781'. [ 1083.897105][T19183] device caif0 entered promiscuous mode [ 1084.175512][T19191] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4785'. [ 1084.219791][T19191] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1084.229784][T19191] CPU: 0 PID: 19191 Comm: syz.3.4785 Not tainted 6.1.141-syzkaller #0 [ 1084.237994][T19191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1084.248069][T19191] Call Trace: [ 1084.251367][T19191] [ 1084.254313][T19191] dump_stack_lvl+0x168/0x22e [ 1084.259017][T19191] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1084.265203][T19191] ? show_regs_print_info+0x12/0x12 [ 1084.270434][T19191] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1084.276616][T19191] sysfs_warn_dup+0x8a/0xa0 [ 1084.281149][T19191] sysfs_do_create_link_sd+0xc0/0x110 [ 1084.286555][T19191] device_add+0x7ed/0xfb0 [ 1084.290921][T19191] wiphy_register+0x1e68/0x2bd0 [ 1084.295816][T19191] ? cfg80211_event_work+0x40/0x40 [ 1084.300954][T19191] ? minstrel_ht_alloc+0x894/0xa20 [ 1084.306095][T19191] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1084.312189][T19191] ieee80211_register_hw+0x2c29/0x38c0 [ 1084.317685][T19191] ? ieee80211_register_hw+0xef1/0x38c0 [ 1084.323256][T19191] ? ieee80211_register_hw+0xef1/0x38c0 [ 1084.328836][T19191] ? ieee80211_tasklet_handler+0x20/0x20 [ 1084.334505][T19191] ? memset+0x1e/0x40 [ 1084.338505][T19191] ? __hrtimer_init+0x186/0x270 [ 1084.343386][T19191] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1084.349146][T19191] hwsim_new_radio_nl+0xafa/0xce0 [ 1084.354213][T19191] genl_family_rcv_msg_doit+0x22e/0x320 [ 1084.359781][T19191] ? end_current_label_crit_section+0x170/0x170 [ 1084.366055][T19191] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1084.371976][T19191] ? bpf_lsm_capable+0x5/0x10 [ 1084.376684][T19191] ? security_capable+0x85/0xb0 [ 1084.381565][T19191] genl_rcv_msg+0x5f2/0x780 [ 1084.386097][T19191] ? genl_bind+0x350/0x350 [ 1084.390527][T19191] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1084.396908][T19191] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1084.402926][T19191] netlink_rcv_skb+0x1de/0x420 [ 1084.407749][T19191] ? genl_bind+0x350/0x350 [ 1084.412206][T19191] ? netlink_ack+0x1100/0x1100 [ 1084.417014][T19191] ? genl_bind+0x350/0x350 [ 1084.421454][T19191] genl_rcv+0x24/0x40 [ 1084.425463][T19191] netlink_unicast+0x74c/0x8c0 [ 1084.430267][T19191] netlink_sendmsg+0x89e/0xbc0 [ 1084.435069][T19191] ? netlink_getsockopt+0x540/0x540 [ 1084.440302][T19191] ? aa_sock_msg_perm+0x94/0x150 [ 1084.445280][T19191] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1084.450598][T19191] ? security_socket_sendmsg+0x7c/0xa0 [ 1084.456126][T19191] ? netlink_getsockopt+0x540/0x540 [ 1084.461359][T19191] ____sys_sendmsg+0x59b/0x970 [ 1084.466189][T19191] ? __sys_sendmsg_sock+0x30/0x30 [ 1084.471240][T19191] ? __import_iovec+0x315/0x500 [ 1084.476120][T19191] ? import_iovec+0x6f/0xa0 [ 1084.480659][T19191] ___sys_sendmsg+0x21c/0x290 [ 1084.485365][T19191] ? __sys_sendmsg+0x270/0x270 [ 1084.490197][T19191] ? __fdget+0x17c/0x200 [ 1084.494474][T19191] __se_sys_sendmsg+0x19e/0x270 [ 1084.499619][T19191] ? __x64_sys_sendmsg+0x80/0x80 [ 1084.504598][T19191] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1084.510531][T19191] do_syscall_64+0x4c/0xa0 [ 1084.515062][T19191] ? clear_bhb_loop+0x60/0xb0 [ 1084.519850][T19191] ? clear_bhb_loop+0x60/0xb0 [ 1084.524551][T19191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1084.530501][T19191] RIP: 0033:0x7f188538e929 [ 1084.534946][T19191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.554573][T19191] RSP: 002b:00007f18862d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1084.563530][T19191] RAX: ffffffffffffffda RBX: 00007f18855b5fa0 RCX: 00007f188538e929 [ 1084.571522][T19191] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1084.579528][T19191] RBP: 00007f1885410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1084.587514][T19191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1084.595501][T19191] R13: 0000000000000000 R14: 00007f18855b5fa0 R15: 00007ffea3ac3938 [ 1084.603505][T19191] [ 1085.043757][T19201] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4788'. [ 1085.071644][T19201] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1085.083251][T19201] CPU: 1 PID: 19201 Comm: syz.0.4788 Not tainted 6.1.141-syzkaller #0 [ 1085.091480][T19201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1085.101577][T19201] Call Trace: [ 1085.104914][T19201] [ 1085.107889][T19201] dump_stack_lvl+0x168/0x22e [ 1085.112634][T19201] ? show_regs_print_info+0x12/0x12 [ 1085.117890][T19201] ? load_image+0x3b0/0x3b0 [ 1085.122464][T19201] sysfs_warn_dup+0x8a/0xa0 [ 1085.127058][T19201] sysfs_do_create_link_sd+0xc0/0x110 [ 1085.132491][T19201] device_add+0x7ed/0xfb0 [ 1085.136884][T19201] wiphy_register+0x1e68/0x2bd0 [ 1085.141813][T19201] ? cfg80211_event_work+0x40/0x40 [ 1085.146984][T19201] ? minstrel_ht_alloc+0x894/0xa20 [ 1085.152195][T19201] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1085.158311][T19201] ieee80211_register_hw+0x2c29/0x38c0 [ 1085.163849][T19201] ? ieee80211_register_hw+0xef1/0x38c0 [ 1085.169454][T19201] ? ieee80211_register_hw+0xef1/0x38c0 [ 1085.175063][T19201] ? ieee80211_tasklet_handler+0x20/0x20 [ 1085.180760][T19201] ? memset+0x1e/0x40 [ 1085.184793][T19201] ? __hrtimer_init+0x186/0x270 [ 1085.189705][T19201] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1085.195491][T19201] hwsim_new_radio_nl+0xafa/0xce0 [ 1085.200569][T19201] genl_family_rcv_msg_doit+0x22e/0x320 [ 1085.206165][T19201] ? end_current_label_crit_section+0x170/0x170 [ 1085.212452][T19201] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1085.218408][T19201] ? bpf_lsm_capable+0x5/0x10 [ 1085.223150][T19201] ? security_capable+0x85/0xb0 [ 1085.228061][T19201] genl_rcv_msg+0x5f2/0x780 [ 1085.232617][T19201] ? genl_bind+0x350/0x350 [ 1085.237065][T19201] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1085.243459][T19201] netlink_rcv_skb+0x1de/0x420 [ 1085.248279][T19201] ? genl_bind+0x350/0x350 [ 1085.252742][T19201] ? netlink_ack+0x1100/0x1100 [ 1085.257572][T19201] ? down_read+0x1a8/0x2d0 [ 1085.262036][T19201] genl_rcv+0x24/0x40 [ 1085.266057][T19201] netlink_unicast+0x74c/0x8c0 [ 1085.270888][T19201] netlink_sendmsg+0x89e/0xbc0 [ 1085.275725][T19201] ? netlink_getsockopt+0x540/0x540 [ 1085.281067][T19201] ? aa_sock_msg_perm+0x94/0x150 [ 1085.286052][T19201] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1085.291388][T19201] ? security_socket_sendmsg+0x7c/0xa0 [ 1085.296904][T19201] ? netlink_getsockopt+0x540/0x540 [ 1085.302161][T19201] ____sys_sendmsg+0x59b/0x970 [ 1085.306993][T19201] ? __sys_sendmsg_sock+0x30/0x30 [ 1085.312070][T19201] ? __import_iovec+0x315/0x500 [ 1085.316981][T19201] ? import_iovec+0x6f/0xa0 [ 1085.321533][T19201] ___sys_sendmsg+0x21c/0x290 [ 1085.326269][T19201] ? __sys_sendmsg+0x270/0x270 [ 1085.331142][T19201] ? __fdget+0x17c/0x200 [ 1085.335451][T19201] __se_sys_sendmsg+0x19e/0x270 [ 1085.340363][T19201] ? __x64_sys_sendmsg+0x80/0x80 [ 1085.345379][T19201] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1085.351325][T19201] do_syscall_64+0x4c/0xa0 [ 1085.355795][T19201] ? clear_bhb_loop+0x60/0xb0 [ 1085.360510][T19201] ? clear_bhb_loop+0x60/0xb0 [ 1085.365232][T19201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1085.371184][T19201] RIP: 0033:0x7fa4bf98e929 [ 1085.375639][T19201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1085.395298][T19201] RSP: 002b:00007fa4c0821038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1085.403769][T19201] RAX: ffffffffffffffda RBX: 00007fa4bfbb5fa0 RCX: 00007fa4bf98e929 [ 1085.411778][T19201] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1085.419762][T19201] RBP: 00007fa4bfa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1085.427747][T19201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1085.435730][T19201] R13: 0000000000000000 R14: 00007fa4bfbb5fa0 R15: 00007ffe7018bd18 [ 1085.443747][T19201] [ 1085.883890][T19223] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4796'. [ 1085.912555][T19222] netlink: 166 bytes leftover after parsing attributes in process `syz.3.4795'. [ 1085.945026][T19226] netlink: 'syz.3.4795': attribute type 9 has an invalid length. [ 1086.034908][T19226] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4795'. [ 1086.410297][T19233] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4800'. [ 1086.461557][T19233] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1086.480105][T19233] CPU: 0 PID: 19233 Comm: syz.0.4800 Not tainted 6.1.141-syzkaller #0 [ 1086.488350][T19233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1086.498461][T19233] Call Trace: [ 1086.501781][T19233] [ 1086.504743][T19233] dump_stack_lvl+0x168/0x22e [ 1086.509502][T19233] ? show_regs_print_info+0x12/0x12 [ 1086.514759][T19233] ? load_image+0x3b0/0x3b0 [ 1086.519330][T19233] sysfs_warn_dup+0x8a/0xa0 [ 1086.523891][T19233] sysfs_do_create_link_sd+0xc0/0x110 [ 1086.529331][T19233] device_add+0x7ed/0xfb0 [ 1086.533723][T19233] wiphy_register+0x1e68/0x2bd0 [ 1086.538649][T19233] ? cfg80211_event_work+0x40/0x40 [ 1086.543814][T19233] ? minstrel_ht_alloc+0x894/0xa20 [ 1086.548985][T19233] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1086.555113][T19233] ieee80211_register_hw+0x2c29/0x38c0 [ 1086.560617][T19233] ? ieee80211_register_hw+0xef1/0x38c0 [ 1086.566201][T19233] ? ieee80211_register_hw+0xef1/0x38c0 [ 1086.571782][T19233] ? ieee80211_tasklet_handler+0x20/0x20 [ 1086.577457][T19233] ? memset+0x1e/0x40 [ 1086.581477][T19233] ? __hrtimer_init+0x186/0x270 [ 1086.586356][T19233] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1086.592213][T19233] hwsim_new_radio_nl+0xafa/0xce0 [ 1086.597277][T19233] genl_family_rcv_msg_doit+0x22e/0x320 [ 1086.602864][T19233] ? end_current_label_crit_section+0x170/0x170 [ 1086.609130][T19233] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1086.615060][T19233] ? bpf_lsm_capable+0x5/0x10 [ 1086.619767][T19233] ? security_capable+0x85/0xb0 [ 1086.624657][T19233] genl_rcv_msg+0x5f2/0x780 [ 1086.629186][T19233] ? genl_bind+0x350/0x350 [ 1086.633619][T19233] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1086.639971][T19233] ? lock_acquire+0x20f/0x490 [ 1086.644678][T19233] netlink_rcv_skb+0x1de/0x420 [ 1086.649473][T19233] ? genl_bind+0x350/0x350 [ 1086.653910][T19233] ? netlink_ack+0x1100/0x1100 [ 1086.658712][T19233] ? down_read+0x1a8/0x2d0 [ 1086.663154][T19233] genl_rcv+0x24/0x40 [ 1086.667151][T19233] netlink_unicast+0x74c/0x8c0 [ 1086.671946][T19233] netlink_sendmsg+0x89e/0xbc0 [ 1086.676742][T19233] ? netlink_getsockopt+0x540/0x540 [ 1086.681966][T19233] ? __sanitizer_cov_trace_pc+0x32/0x60 [ 1086.687544][T19233] ? aa_sock_msg_perm+0x94/0x150 [ 1086.692500][T19233] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1086.697805][T19233] ? security_socket_sendmsg+0x7c/0xa0 [ 1086.703282][T19233] ? netlink_getsockopt+0x540/0x540 [ 1086.708510][T19233] ____sys_sendmsg+0x59b/0x970 [ 1086.713313][T19233] ? __sys_sendmsg_sock+0x30/0x30 [ 1086.718382][T19233] ? __import_iovec+0x315/0x500 [ 1086.723258][T19233] ? import_iovec+0x6f/0xa0 [ 1086.727784][T19233] ___sys_sendmsg+0x21c/0x290 [ 1086.732494][T19233] ? __sys_sendmsg+0x270/0x270 [ 1086.737303][T19233] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1086.743148][T19233] ? __fdget+0x17c/0x200 [ 1086.747419][T19233] __se_sys_sendmsg+0x19e/0x270 [ 1086.752305][T19233] ? __x64_sys_sendmsg+0x80/0x80 [ 1086.757337][T19233] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1086.763272][T19233] do_syscall_64+0x4c/0xa0 [ 1086.767728][T19233] ? clear_bhb_loop+0x60/0xb0 [ 1086.772434][T19233] ? clear_bhb_loop+0x60/0xb0 [ 1086.777135][T19233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1086.783061][T19233] RIP: 0033:0x7fa4bf98e929 [ 1086.787493][T19233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1086.807120][T19233] RSP: 002b:00007fa4c0821038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1086.815554][T19233] RAX: ffffffffffffffda RBX: 00007fa4bfbb5fa0 RCX: 00007fa4bf98e929 [ 1086.823543][T19233] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1086.831535][T19233] RBP: 00007fa4bfa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1086.839529][T19233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1086.847519][T19233] R13: 0000000000000000 R14: 00007fa4bfbb5fa0 R15: 00007ffe7018bd18 [ 1086.855524][T19233] [ 1087.453056][T19260] netlink: 'syz.0.4806': attribute type 39 has an invalid length. [ 1087.588884][T19262] bridge0: port 4(team0) entered disabled state [ 1087.639188][T19262] bridge0: port 3(bond0) entered disabled state [ 1087.715873][T19262] device bridge_slave_1 left promiscuous mode [ 1087.726238][T19262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.814932][T19262] device bridge_slave_0 left promiscuous mode [ 1087.831037][T19262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.047978][T19266] netlink: 'syz.4.4811': attribute type 10 has an invalid length. [ 1088.268191][T19266] bond0: (slave netdevsim0): Releasing backup interface [ 1088.353959][T19266] device netdevsim0 left promiscuous mode [ 1088.452846][T19266] device netdevsim0 entered promiscuous mode [ 1088.514124][T19266] team0: Port device netdevsim0 added [ 1088.527097][T19269] netlink: 'syz.4.4811': attribute type 10 has an invalid length. [ 1088.553165][T19269] device netdevsim0 left promiscuous mode [ 1088.590666][T19269] team0: Port device netdevsim0 removed [ 1088.608513][T19269] device netdevsim0 entered promiscuous mode [ 1088.616044][T19269] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1088.632888][T19279] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4815'. [ 1088.866914][T19284] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4816'. [ 1088.916889][T19284] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1088.942760][T19284] CPU: 0 PID: 19284 Comm: syz.4.4816 Not tainted 6.1.141-syzkaller #0 [ 1088.951012][T19284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1088.961100][T19284] Call Trace: [ 1088.964397][T19284] [ 1088.967343][T19284] dump_stack_lvl+0x168/0x22e [ 1088.972058][T19284] ? show_regs_print_info+0x12/0x12 [ 1088.977375][T19284] ? load_image+0x3b0/0x3b0 [ 1088.981909][T19284] sysfs_warn_dup+0x8a/0xa0 [ 1088.986445][T19284] sysfs_do_create_link_sd+0xc0/0x110 [ 1088.991857][T19284] device_add+0x7ed/0xfb0 [ 1088.996247][T19284] wiphy_register+0x1e68/0x2bd0 [ 1089.001176][T19284] ? cfg80211_event_work+0x40/0x40 [ 1089.006350][T19284] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1089.012563][T19284] ieee80211_register_hw+0x2c29/0x38c0 [ 1089.018067][T19284] ? ieee80211_register_hw+0xef1/0x38c0 [ 1089.023640][T19284] ? ieee80211_register_hw+0xef1/0x38c0 [ 1089.029218][T19284] ? ieee80211_tasklet_handler+0x20/0x20 [ 1089.034888][T19284] ? memset+0x1e/0x40 [ 1089.038901][T19284] ? __hrtimer_init+0x186/0x270 [ 1089.043774][T19284] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1089.049531][T19284] hwsim_new_radio_nl+0xafa/0xce0 [ 1089.054588][T19284] genl_family_rcv_msg_doit+0x22e/0x320 [ 1089.060161][T19284] ? end_current_label_crit_section+0x170/0x170 [ 1089.066424][T19284] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1089.072349][T19284] ? bpf_lsm_capable+0x5/0x10 [ 1089.077054][T19284] ? security_capable+0x85/0xb0 [ 1089.081931][T19284] genl_rcv_msg+0x5f2/0x780 [ 1089.086460][T19284] ? genl_bind+0x350/0x350 [ 1089.090927][T19284] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1089.097298][T19284] netlink_rcv_skb+0x1de/0x420 [ 1089.102100][T19284] ? genl_bind+0x350/0x350 [ 1089.106537][T19284] ? netlink_ack+0x1100/0x1100 [ 1089.111438][T19284] ? down_read+0x1a8/0x2d0 [ 1089.115881][T19284] genl_rcv+0x24/0x40 [ 1089.119877][T19284] netlink_unicast+0x74c/0x8c0 [ 1089.124685][T19284] netlink_sendmsg+0x89e/0xbc0 [ 1089.129514][T19284] ? netlink_getsockopt+0x540/0x540 [ 1089.134749][T19284] ? aa_sock_msg_perm+0x94/0x150 [ 1089.139707][T19284] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1089.145016][T19284] ? security_socket_sendmsg+0x7c/0xa0 [ 1089.150489][T19284] ? netlink_getsockopt+0x540/0x540 [ 1089.155733][T19284] ____sys_sendmsg+0x59b/0x970 [ 1089.160536][T19284] ? __sys_sendmsg_sock+0x30/0x30 [ 1089.165581][T19284] ? __import_iovec+0x315/0x500 [ 1089.170457][T19284] ? import_iovec+0x6f/0xa0 [ 1089.174977][T19284] ___sys_sendmsg+0x21c/0x290 [ 1089.179687][T19284] ? __sys_sendmsg+0x270/0x270 [ 1089.184491][T19284] ? ktime_get_real_ts64+0x420/0x420 [ 1089.189817][T19284] ? __fdget+0x17c/0x200 [ 1089.194092][T19284] __se_sys_sendmsg+0x19e/0x270 [ 1089.198982][T19284] ? perf_trace_preemptirq_template+0x287/0x330 [ 1089.205346][T19284] ? __x64_sys_sendmsg+0x80/0x80 [ 1089.210326][T19284] ? lockdep_hardirqs_on+0x94/0x140 [ 1089.215552][T19284] do_syscall_64+0x4c/0xa0 [ 1089.219995][T19284] ? clear_bhb_loop+0x60/0xb0 [ 1089.224687][T19284] ? clear_bhb_loop+0x60/0xb0 [ 1089.229383][T19284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1089.235308][T19284] RIP: 0033:0x7f926e58e929 [ 1089.239743][T19284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1089.259377][T19284] RSP: 002b:00007f926f3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1089.267816][T19284] RAX: ffffffffffffffda RBX: 00007f926e7b5fa0 RCX: 00007f926e58e929 [ 1089.275807][T19284] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1089.283798][T19284] RBP: 00007f926e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1089.291789][T19284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.299780][T19284] R13: 0000000000000000 R14: 00007f926e7b5fa0 R15: 00007ffcf54ff2f8 [ 1089.307783][T19284] [ 1090.740520][T19324] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4833'. [ 1090.870326][T19327] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4834'. [ 1090.893842][T19327] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1090.902148][T19327] CPU: 1 PID: 19327 Comm: syz.1.4834 Not tainted 6.1.141-syzkaller #0 [ 1090.910365][T19327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1090.920541][T19327] Call Trace: [ 1090.923849][T19327] [ 1090.926801][T19327] dump_stack_lvl+0x168/0x22e [ 1090.931538][T19327] ? show_regs_print_info+0x12/0x12 [ 1090.936766][T19327] ? load_image+0x3b0/0x3b0 [ 1090.941298][T19327] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1090.947438][T19327] sysfs_warn_dup+0x8a/0xa0 [ 1090.951974][T19327] sysfs_do_create_link_sd+0xc0/0x110 [ 1090.957373][T19327] device_add+0x7ed/0xfb0 [ 1090.961738][T19327] wiphy_register+0x1e68/0x2bd0 [ 1090.966631][T19327] ? cfg80211_event_work+0x40/0x40 [ 1090.971769][T19327] ? minstrel_ht_alloc+0x894/0xa20 [ 1090.976919][T19327] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1090.983016][T19327] ieee80211_register_hw+0x2c29/0x38c0 [ 1090.988512][T19327] ? ieee80211_register_hw+0xef1/0x38c0 [ 1090.994085][T19327] ? ieee80211_register_hw+0xef1/0x38c0 [ 1090.999666][T19327] ? ieee80211_tasklet_handler+0x20/0x20 [ 1091.005334][T19327] ? memset+0x1e/0x40 [ 1091.009346][T19327] ? __hrtimer_init+0x186/0x270 [ 1091.014223][T19327] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1091.019986][T19327] hwsim_new_radio_nl+0xafa/0xce0 [ 1091.025044][T19327] genl_family_rcv_msg_doit+0x22e/0x320 [ 1091.030612][T19327] ? end_current_label_crit_section+0x170/0x170 [ 1091.036874][T19327] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1091.042814][T19327] ? bpf_lsm_capable+0x5/0x10 [ 1091.047518][T19327] ? security_capable+0x85/0xb0 [ 1091.052403][T19327] genl_rcv_msg+0x5f2/0x780 [ 1091.056963][T19327] ? genl_bind+0x350/0x350 [ 1091.061395][T19327] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1091.067762][T19327] netlink_rcv_skb+0x1de/0x420 [ 1091.072568][T19327] ? genl_bind+0x350/0x350 [ 1091.077006][T19327] ? netlink_ack+0x1100/0x1100 [ 1091.081891][T19327] ? down_read+0x1a8/0x2d0 [ 1091.086335][T19327] genl_rcv+0x24/0x40 [ 1091.090354][T19327] netlink_unicast+0x74c/0x8c0 [ 1091.095156][T19327] netlink_sendmsg+0x89e/0xbc0 [ 1091.099950][T19327] ? netlink_getsockopt+0x540/0x540 [ 1091.105175][T19327] ? aa_sock_msg_perm+0x94/0x150 [ 1091.110137][T19327] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1091.115441][T19327] ? security_socket_sendmsg+0x7c/0xa0 [ 1091.120915][T19327] ? netlink_getsockopt+0x540/0x540 [ 1091.126140][T19327] ____sys_sendmsg+0x59b/0x970 [ 1091.130929][T19327] ? rcu_is_watching+0x11/0xa0 [ 1091.135724][T19327] ? __sys_sendmsg_sock+0x30/0x30 [ 1091.140790][T19327] ? ___sys_sendmsg+0x202/0x290 [ 1091.145670][T19327] ___sys_sendmsg+0x21c/0x290 [ 1091.150375][T19327] ? __sys_sendmsg+0x270/0x270 [ 1091.155186][T19327] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1091.161547][T19327] ? __fdget+0x17c/0x200 [ 1091.165822][T19327] __se_sys_sendmsg+0x19e/0x270 [ 1091.170706][T19327] ? __x64_sys_sendmsg+0x80/0x80 [ 1091.175682][T19327] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1091.181598][T19327] do_syscall_64+0x4c/0xa0 [ 1091.186034][T19327] ? clear_bhb_loop+0x60/0xb0 [ 1091.190725][T19327] ? clear_bhb_loop+0x60/0xb0 [ 1091.195422][T19327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1091.201341][T19327] RIP: 0033:0x7f639bf8e929 [ 1091.205781][T19327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1091.225402][T19327] RSP: 002b:00007f639cd24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1091.233832][T19327] RAX: ffffffffffffffda RBX: 00007f639c1b5fa0 RCX: 00007f639bf8e929 [ 1091.241821][T19327] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1091.249804][T19327] RBP: 00007f639c010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1091.257792][T19327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1091.265776][T19327] R13: 0000000000000000 R14: 00007f639c1b5fa0 R15: 00007ffd6f179248 [ 1091.273808][T19327] [ 1091.308959][T19328] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4835'. [ 1091.337040][T19328] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1091.378283][T19328] CPU: 1 PID: 19328 Comm: syz.0.4835 Not tainted 6.1.141-syzkaller #0 [ 1091.386530][T19328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1091.396635][T19328] Call Trace: [ 1091.399954][T19328] [ 1091.403013][T19328] dump_stack_lvl+0x168/0x22e [ 1091.407760][T19328] ? show_regs_print_info+0x12/0x12 [ 1091.413015][T19328] ? load_image+0x3b0/0x3b0 [ 1091.417583][T19328] sysfs_warn_dup+0x8a/0xa0 [ 1091.422143][T19328] sysfs_do_create_link_sd+0xc0/0x110 [ 1091.427577][T19328] device_add+0x7ed/0xfb0 [ 1091.431978][T19328] wiphy_register+0x1e68/0x2bd0 [ 1091.436912][T19328] ? cfg80211_event_work+0x40/0x40 [ 1091.442084][T19328] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1091.448314][T19328] ieee80211_register_hw+0x2c29/0x38c0 [ 1091.453856][T19328] ? ieee80211_register_hw+0xef1/0x38c0 [ 1091.459549][T19328] ? ieee80211_register_hw+0xef1/0x38c0 [ 1091.465169][T19328] ? ieee80211_tasklet_handler+0x20/0x20 [ 1091.470871][T19328] ? memset+0x1e/0x40 [ 1091.474907][T19328] ? __hrtimer_init+0x186/0x270 [ 1091.479808][T19328] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1091.485600][T19328] hwsim_new_radio_nl+0xafa/0xce0 [ 1091.490714][T19328] genl_family_rcv_msg_doit+0x22e/0x320 [ 1091.496326][T19328] ? end_current_label_crit_section+0x170/0x170 [ 1091.502640][T19328] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1091.508599][T19328] ? bpf_lsm_capable+0x5/0x10 [ 1091.513339][T19328] ? security_capable+0x85/0xb0 [ 1091.518262][T19328] genl_rcv_msg+0x5f2/0x780 [ 1091.522825][T19328] ? genl_bind+0x350/0x350 [ 1091.527286][T19328] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1091.533685][T19328] netlink_rcv_skb+0x1de/0x420 [ 1091.538509][T19328] ? genl_bind+0x350/0x350 [ 1091.542978][T19328] ? netlink_ack+0x1100/0x1100 [ 1091.547815][T19328] ? down_read+0x1a8/0x2d0 [ 1091.552296][T19328] genl_rcv+0x24/0x40 [ 1091.556321][T19328] netlink_unicast+0x74c/0x8c0 [ 1091.561121][T19328] netlink_sendmsg+0x89e/0xbc0 [ 1091.565949][T19328] ? netlink_getsockopt+0x540/0x540 [ 1091.571172][T19328] ? tomoyo_socket_sendmsg+0x12/0x30 [ 1091.576488][T19328] ? aa_sock_msg_perm+0x94/0x150 [ 1091.581466][T19328] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1091.586766][T19328] ? security_socket_sendmsg+0x7c/0xa0 [ 1091.592242][T19328] ? netlink_getsockopt+0x540/0x540 [ 1091.597480][T19328] ____sys_sendmsg+0x59b/0x970 [ 1091.602309][T19328] ? __sys_sendmsg_sock+0x30/0x30 [ 1091.607389][T19328] ? __import_iovec+0x315/0x500 [ 1091.612278][T19328] ? import_iovec+0x6f/0xa0 [ 1091.616808][T19328] ___sys_sendmsg+0x21c/0x290 [ 1091.621515][T19328] ? __sys_sendmsg+0x270/0x270 [ 1091.626321][T19328] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1091.632072][T19328] ? __fdget+0x17c/0x200 [ 1091.636348][T19328] __se_sys_sendmsg+0x19e/0x270 [ 1091.641230][T19328] ? __x64_sys_sendmsg+0x80/0x80 [ 1091.646213][T19328] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1091.652126][T19328] do_syscall_64+0x4c/0xa0 [ 1091.656568][T19328] ? clear_bhb_loop+0x60/0xb0 [ 1091.661258][T19328] ? clear_bhb_loop+0x60/0xb0 [ 1091.665949][T19328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1091.671869][T19328] RIP: 0033:0x7fa4bf98e929 [ 1091.676316][T19328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1091.695946][T19328] RSP: 002b:00007fa4c0821038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1091.704390][T19328] RAX: ffffffffffffffda RBX: 00007fa4bfbb5fa0 RCX: 00007fa4bf98e929 [ 1091.712383][T19328] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1091.720372][T19328] RBP: 00007fa4bfa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1091.728360][T19328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1091.736434][T19328] R13: 0000000000000000 R14: 00007fa4bfbb5fa0 R15: 00007ffe7018bd18 [ 1091.744442][T19328] [ 1092.089192][T19342] netlink: 'syz.0.4839': attribute type 10 has an invalid length. [ 1092.097970][T19341] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4849'. [ 1092.152087][T19341] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1092.218236][T19341] CPU: 1 PID: 19341 Comm: syz.3.4849 Not tainted 6.1.141-syzkaller #0 [ 1092.226488][T19341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1092.236590][T19341] Call Trace: [ 1092.239908][T19341] [ 1092.242872][T19341] dump_stack_lvl+0x168/0x22e [ 1092.247609][T19341] ? show_regs_print_info+0x12/0x12 [ 1092.252869][T19341] ? load_image+0x3b0/0x3b0 [ 1092.257431][T19341] sysfs_warn_dup+0x8a/0xa0 [ 1092.261983][T19341] sysfs_do_create_link_sd+0xc0/0x110 [ 1092.267405][T19341] device_add+0x7ed/0xfb0 [ 1092.271793][T19341] wiphy_register+0x1e68/0x2bd0 [ 1092.276727][T19341] ? cfg80211_event_work+0x40/0x40 [ 1092.281888][T19341] ? minstrel_ht_alloc+0x894/0xa20 [ 1092.287056][T19341] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1092.293257][T19341] ieee80211_register_hw+0x2c29/0x38c0 [ 1092.298783][T19341] ? ieee80211_register_hw+0xef1/0x38c0 [ 1092.304383][T19341] ? ieee80211_register_hw+0xef1/0x38c0 [ 1092.309995][T19341] ? ieee80211_tasklet_handler+0x20/0x20 [ 1092.315790][T19341] ? memset+0x1e/0x40 [ 1092.319828][T19341] ? __hrtimer_init+0x186/0x270 [ 1092.324734][T19341] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1092.330526][T19341] hwsim_new_radio_nl+0xafa/0xce0 [ 1092.335619][T19341] genl_family_rcv_msg_doit+0x22e/0x320 [ 1092.341217][T19341] ? end_current_label_crit_section+0x170/0x170 [ 1092.347511][T19341] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1092.353468][T19341] ? bpf_lsm_capable+0x5/0x10 [ 1092.358204][T19341] ? security_capable+0x85/0xb0 [ 1092.363128][T19341] genl_rcv_msg+0x5f2/0x780 [ 1092.367706][T19341] ? genl_bind+0x350/0x350 [ 1092.372169][T19341] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1092.378564][T19341] netlink_rcv_skb+0x1de/0x420 [ 1092.383392][T19341] ? genl_bind+0x350/0x350 [ 1092.387859][T19341] ? netlink_ack+0x1100/0x1100 [ 1092.392704][T19341] ? down_read+0x1a8/0x2d0 [ 1092.397183][T19341] genl_rcv+0x24/0x40 [ 1092.401213][T19341] netlink_unicast+0x74c/0x8c0 [ 1092.406043][T19341] netlink_sendmsg+0x89e/0xbc0 [ 1092.410879][T19341] ? netlink_getsockopt+0x540/0x540 [ 1092.416140][T19341] ? aa_sock_msg_perm+0x94/0x150 [ 1092.421132][T19341] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1092.427174][T19341] ? security_socket_sendmsg+0x7c/0xa0 [ 1092.432691][T19341] ? netlink_getsockopt+0x540/0x540 [ 1092.437958][T19341] ____sys_sendmsg+0x59b/0x970 [ 1092.442797][T19341] ? __sys_sendmsg_sock+0x30/0x30 [ 1092.447904][T19341] ? import_iovec+0x6f/0xa0 [ 1092.452478][T19341] ___sys_sendmsg+0x21c/0x290 [ 1092.457224][T19341] ? __sys_sendmsg+0x270/0x270 [ 1092.462083][T19341] ? lockdep_hardirqs_on+0x94/0x140 [ 1092.467453][T19341] ? __fdget+0x17c/0x200 [ 1092.471761][T19341] __se_sys_sendmsg+0x19e/0x270 [ 1092.476679][T19341] ? __x64_sys_sendmsg+0x80/0x80 [ 1092.481691][T19341] ? lockdep_hardirqs_on+0x94/0x140 [ 1092.486944][T19341] do_syscall_64+0x4c/0xa0 [ 1092.491426][T19341] ? clear_bhb_loop+0x60/0xb0 [ 1092.496155][T19341] ? clear_bhb_loop+0x60/0xb0 [ 1092.500884][T19341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1092.506838][T19341] RIP: 0033:0x7f188538e929 [ 1092.511304][T19341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.530976][T19341] RSP: 002b:00007f18862d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1092.539453][T19341] RAX: ffffffffffffffda RBX: 00007f18855b5fa0 RCX: 00007f188538e929 [ 1092.547478][T19341] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1092.555496][T19341] RBP: 00007f1885410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1092.563514][T19341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.571521][T19341] R13: 0000000000000000 R14: 00007f18855b5fa0 R15: 00007ffea3ac3938 [ 1092.579548][T19341] [ 1093.253728][T19372] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4847'. [ 1093.317193][T19372] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1093.329675][T19372] CPU: 0 PID: 19372 Comm: syz.2.4847 Not tainted 6.1.141-syzkaller #0 [ 1093.337902][T19372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1093.347997][T19372] Call Trace: [ 1093.351298][T19372] [ 1093.354250][T19372] dump_stack_lvl+0x168/0x22e [ 1093.358956][T19372] ? show_regs_print_info+0x12/0x12 [ 1093.364192][T19372] ? load_image+0x3b0/0x3b0 [ 1093.368766][T19372] sysfs_warn_dup+0x8a/0xa0 [ 1093.373382][T19372] sysfs_do_create_link_sd+0xc0/0x110 [ 1093.378815][T19372] device_add+0x7ed/0xfb0 [ 1093.383188][T19372] wiphy_register+0x1e68/0x2bd0 [ 1093.388100][T19372] ? cfg80211_event_work+0x40/0x40 [ 1093.393239][T19372] ? minstrel_ht_alloc+0x894/0xa20 [ 1093.398389][T19372] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1093.404480][T19372] ieee80211_register_hw+0x2c29/0x38c0 [ 1093.409976][T19372] ? ieee80211_register_hw+0xef1/0x38c0 [ 1093.415545][T19372] ? ieee80211_register_hw+0xef1/0x38c0 [ 1093.421123][T19372] ? ieee80211_tasklet_handler+0x20/0x20 [ 1093.426819][T19372] ? memset+0x1e/0x40 [ 1093.430824][T19372] ? __hrtimer_init+0x186/0x270 [ 1093.435695][T19372] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1093.441452][T19372] hwsim_new_radio_nl+0xafa/0xce0 [ 1093.446514][T19372] genl_family_rcv_msg_doit+0x22e/0x320 [ 1093.452172][T19372] ? end_current_label_crit_section+0x170/0x170 [ 1093.458459][T19372] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1093.464386][T19372] ? bpf_lsm_capable+0x5/0x10 [ 1093.469089][T19372] ? security_capable+0x85/0xb0 [ 1093.473968][T19372] genl_rcv_msg+0x5f2/0x780 [ 1093.478502][T19372] ? genl_bind+0x350/0x350 [ 1093.482969][T19372] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1093.489331][T19372] netlink_rcv_skb+0x1de/0x420 [ 1093.494134][T19372] ? genl_bind+0x350/0x350 [ 1093.498606][T19372] ? netlink_ack+0x1100/0x1100 [ 1093.503429][T19372] ? down_read+0x1a8/0x2d0 [ 1093.507871][T19372] genl_rcv+0x24/0x40 [ 1093.511883][T19372] netlink_unicast+0x74c/0x8c0 [ 1093.516772][T19372] netlink_sendmsg+0x89e/0xbc0 [ 1093.521570][T19372] ? netlink_getsockopt+0x540/0x540 [ 1093.526797][T19372] ? aa_sock_msg_perm+0x94/0x150 [ 1093.531752][T19372] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1093.537052][T19372] ? security_socket_sendmsg+0x7c/0xa0 [ 1093.542527][T19372] ? netlink_getsockopt+0x540/0x540 [ 1093.547755][T19372] ____sys_sendmsg+0x59b/0x970 [ 1093.552555][T19372] ? __sys_sendmsg_sock+0x30/0x30 [ 1093.557602][T19372] ? __import_iovec+0x315/0x500 [ 1093.562477][T19372] ? import_iovec+0x6f/0xa0 [ 1093.567002][T19372] ___sys_sendmsg+0x21c/0x290 [ 1093.571706][T19372] ? __sys_sendmsg+0x270/0x270 [ 1093.576512][T19372] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1093.582265][T19372] ? __fdget+0x17c/0x200 [ 1093.586540][T19372] __se_sys_sendmsg+0x19e/0x270 [ 1093.591421][T19372] ? __x64_sys_sendmsg+0x80/0x80 [ 1093.596400][T19372] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1093.602315][T19372] do_syscall_64+0x4c/0xa0 [ 1093.606757][T19372] ? clear_bhb_loop+0x60/0xb0 [ 1093.611450][T19372] ? clear_bhb_loop+0x60/0xb0 [ 1093.616145][T19372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.622064][T19372] RIP: 0033:0x7fa26258e929 [ 1093.626509][T19372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1093.646238][T19372] RSP: 002b:00007fa2634c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1093.654680][T19372] RAX: ffffffffffffffda RBX: 00007fa2627b5fa0 RCX: 00007fa26258e929 [ 1093.662673][T19372] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1093.670659][T19372] RBP: 00007fa262610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1093.678648][T19372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1093.686639][T19372] R13: 0000000000000000 R14: 00007fa2627b5fa0 R15: 00007fff0e21c1b8 [ 1093.694644][T19372] [ 1094.060547][T19382] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4854'. [ 1094.498407][T19395] netlink: 'syz.2.4857': attribute type 10 has an invalid length. [ 1095.174676][T19416] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4866'. [ 1095.235284][T19416] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1095.261810][T19416] CPU: 1 PID: 19416 Comm: syz.4.4866 Not tainted 6.1.141-syzkaller #0 [ 1095.270055][T19416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1095.280344][T19416] Call Trace: [ 1095.283664][T19416] [ 1095.286640][T19416] dump_stack_lvl+0x168/0x22e [ 1095.291382][T19416] ? show_regs_print_info+0x12/0x12 [ 1095.296637][T19416] ? load_image+0x3b0/0x3b0 [ 1095.301203][T19416] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1095.307347][T19416] sysfs_warn_dup+0x8a/0xa0 [ 1095.311918][T19416] sysfs_do_create_link_sd+0xc0/0x110 [ 1095.317370][T19416] device_add+0x7ed/0xfb0 [ 1095.321780][T19416] wiphy_register+0x1e68/0x2bd0 [ 1095.326744][T19416] ? cfg80211_event_work+0x40/0x40 [ 1095.332008][T19416] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1095.338220][T19416] ? ieee80211_register_hw+0x2969/0x38c0 [ 1095.343919][T19416] ieee80211_register_hw+0x2c29/0x38c0 [ 1095.349453][T19416] ? ieee80211_register_hw+0xef1/0x38c0 [ 1095.355067][T19416] ? ieee80211_register_hw+0xef1/0x38c0 [ 1095.360687][T19416] ? ieee80211_tasklet_handler+0x20/0x20 [ 1095.366401][T19416] ? memset+0x1e/0x40 [ 1095.370441][T19416] ? __hrtimer_init+0x186/0x270 [ 1095.375350][T19416] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1095.381150][T19416] hwsim_new_radio_nl+0xafa/0xce0 [ 1095.386259][T19416] genl_family_rcv_msg_doit+0x22e/0x320 [ 1095.391858][T19416] ? end_current_label_crit_section+0x170/0x170 [ 1095.398150][T19416] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1095.404078][T19416] ? bpf_lsm_capable+0x5/0x10 [ 1095.408800][T19416] ? security_capable+0x85/0xb0 [ 1095.413677][T19416] genl_rcv_msg+0x5f2/0x780 [ 1095.418214][T19416] ? genl_bind+0x350/0x350 [ 1095.422644][T19416] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1095.429005][T19416] netlink_rcv_skb+0x1de/0x420 [ 1095.433822][T19416] ? genl_bind+0x350/0x350 [ 1095.438256][T19416] ? netlink_ack+0x1100/0x1100 [ 1095.443050][T19416] ? down_read+0x1a8/0x2d0 [ 1095.447504][T19416] genl_rcv+0x24/0x40 [ 1095.451503][T19416] netlink_unicast+0x74c/0x8c0 [ 1095.456307][T19416] netlink_sendmsg+0x89e/0xbc0 [ 1095.461109][T19416] ? netlink_getsockopt+0x540/0x540 [ 1095.466369][T19416] ? aa_sock_msg_perm+0x94/0x150 [ 1095.471330][T19416] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1095.476642][T19416] ? security_socket_sendmsg+0x7c/0xa0 [ 1095.482116][T19416] ? netlink_getsockopt+0x540/0x540 [ 1095.487340][T19416] ____sys_sendmsg+0x59b/0x970 [ 1095.492146][T19416] ? __sys_sendmsg_sock+0x30/0x30 [ 1095.497196][T19416] ? __import_iovec+0x315/0x500 [ 1095.502072][T19416] ? import_iovec+0x6f/0xa0 [ 1095.506603][T19416] ___sys_sendmsg+0x21c/0x290 [ 1095.511315][T19416] ? __sys_sendmsg+0x270/0x270 [ 1095.516127][T19416] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1095.522320][T19416] ? __fdget+0x17c/0x200 [ 1095.526605][T19416] __se_sys_sendmsg+0x19e/0x270 [ 1095.531482][T19416] ? perf_trace_preemptirq_template+0x287/0x330 [ 1095.537750][T19416] ? __x64_sys_sendmsg+0x80/0x80 [ 1095.542728][T19416] ? lockdep_hardirqs_on+0x94/0x140 [ 1095.547948][T19416] do_syscall_64+0x4c/0xa0 [ 1095.552391][T19416] ? clear_bhb_loop+0x60/0xb0 [ 1095.557086][T19416] ? clear_bhb_loop+0x60/0xb0 [ 1095.561792][T19416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1095.567712][T19416] RIP: 0033:0x7f926e58e929 [ 1095.572147][T19416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1095.591783][T19416] RSP: 002b:00007f926f3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1095.600243][T19416] RAX: ffffffffffffffda RBX: 00007f926e7b5fa0 RCX: 00007f926e58e929 [ 1095.608237][T19416] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1095.616249][T19416] RBP: 00007f926e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1095.624234][T19416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1095.632219][T19416] R13: 0000000000000000 R14: 00007f926e7b5fa0 R15: 00007ffcf54ff2f8 [ 1095.640223][T19416] [ 1095.811304][T19422] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4870'. [ 1096.374110][T19437] netlink: 'syz.3.4877': attribute type 10 has an invalid length. [ 1096.815133][T19451] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4882'. [ 1096.849196][T19451] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1096.871249][T19451] CPU: 0 PID: 19451 Comm: syz.3.4882 Not tainted 6.1.141-syzkaller #0 [ 1096.879503][T19451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1096.889605][T19451] Call Trace: [ 1096.892927][T19451] [ 1096.895892][T19451] dump_stack_lvl+0x168/0x22e [ 1096.900634][T19451] ? show_regs_print_info+0x12/0x12 [ 1096.905882][T19451] ? load_image+0x3b0/0x3b0 [ 1096.910451][T19451] sysfs_warn_dup+0x8a/0xa0 [ 1096.915007][T19451] sysfs_do_create_link_sd+0xc0/0x110 [ 1096.920438][T19451] device_add+0x7ed/0xfb0 [ 1096.924830][T19451] wiphy_register+0x1e68/0x2bd0 [ 1096.929769][T19451] ? cfg80211_event_work+0x40/0x40 [ 1096.934952][T19451] ? minstrel_ht_alloc+0x894/0xa20 [ 1096.940174][T19451] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1096.946305][T19451] ieee80211_register_hw+0x2c29/0x38c0 [ 1096.951840][T19451] ? ieee80211_register_hw+0xef1/0x38c0 [ 1096.957449][T19451] ? ieee80211_register_hw+0xef1/0x38c0 [ 1096.963061][T19451] ? ieee80211_tasklet_handler+0x20/0x20 [ 1096.968757][T19451] ? memset+0x1e/0x40 [ 1096.972782][T19451] ? __hrtimer_init+0x186/0x270 [ 1096.977688][T19451] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1096.983483][T19451] hwsim_new_radio_nl+0xafa/0xce0 [ 1096.988613][T19451] genl_family_rcv_msg_doit+0x22e/0x320 [ 1096.994215][T19451] ? end_current_label_crit_section+0x170/0x170 [ 1097.000692][T19451] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1097.006650][T19451] ? bpf_lsm_capable+0x5/0x10 [ 1097.011384][T19451] ? security_capable+0x85/0xb0 [ 1097.016292][T19451] genl_rcv_msg+0x5f2/0x780 [ 1097.020854][T19451] ? genl_bind+0x350/0x350 [ 1097.025311][T19451] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1097.031703][T19451] netlink_rcv_skb+0x1de/0x420 [ 1097.036528][T19451] ? genl_bind+0x350/0x350 [ 1097.040988][T19451] ? netlink_ack+0x1100/0x1100 [ 1097.045834][T19451] ? down_read+0x1a8/0x2d0 [ 1097.050303][T19451] genl_rcv+0x24/0x40 [ 1097.054326][T19451] netlink_unicast+0x74c/0x8c0 [ 1097.059155][T19451] netlink_sendmsg+0x89e/0xbc0 [ 1097.064015][T19451] ? netlink_getsockopt+0x540/0x540 [ 1097.069304][T19451] ? aa_sock_msg_perm+0x94/0x150 [ 1097.074303][T19451] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1097.079646][T19451] ? security_socket_sendmsg+0x7c/0xa0 [ 1097.085157][T19451] ? netlink_getsockopt+0x540/0x540 [ 1097.090497][T19451] ____sys_sendmsg+0x59b/0x970 [ 1097.095331][T19451] ? __sys_sendmsg_sock+0x30/0x30 [ 1097.100410][T19451] ? __import_iovec+0x315/0x500 [ 1097.105315][T19451] ? import_iovec+0x6f/0xa0 [ 1097.109864][T19451] ___sys_sendmsg+0x21c/0x290 [ 1097.114597][T19451] ? __sys_sendmsg+0x270/0x270 [ 1097.119462][T19451] ? __fdget+0x17c/0x200 [ 1097.123768][T19451] __se_sys_sendmsg+0x19e/0x270 [ 1097.128676][T19451] ? __x64_sys_sendmsg+0x80/0x80 [ 1097.133694][T19451] ? lockdep_hardirqs_on+0x94/0x140 [ 1097.138946][T19451] do_syscall_64+0x4c/0xa0 [ 1097.143423][T19451] ? clear_bhb_loop+0x60/0xb0 [ 1097.148140][T19451] ? clear_bhb_loop+0x60/0xb0 [ 1097.152865][T19451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1097.158817][T19451] RIP: 0033:0x7f188538e929 [ 1097.163271][T19451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.182938][T19451] RSP: 002b:00007f18862d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1097.191407][T19451] RAX: ffffffffffffffda RBX: 00007f18855b5fa0 RCX: 00007f188538e929 [ 1097.199435][T19451] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1097.207464][T19451] RBP: 00007f1885410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1097.215480][T19451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1097.223498][T19451] R13: 0000000000000000 R14: 00007f18855b5fa0 R15: 00007ffea3ac3938 [ 1097.231534][T19451] [ 1097.442863][T19459] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4885'. [ 1097.684265][T19465] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4887'. [ 1097.998237][T19479] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4892'. [ 1098.127512][T19481] netlink: 'syz.4.4894': attribute type 10 has an invalid length. [ 1099.056394][T19501] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4902'. [ 1099.124225][T19505] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4904'. [ 1099.336315][T19514] netlink: 'syz.0.4907': attribute type 39 has an invalid length. [ 1099.841086][T19531] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4914'. [ 1100.130446][T19540] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4918'. [ 1100.212054][T19543] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4919'. [ 1100.997569][T19565] netlink: 'syz.0.4927': attribute type 2 has an invalid length. [ 1101.022102][T19565] netlink: 'syz.0.4927': attribute type 1 has an invalid length. [ 1101.039647][T19565] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4927'. [ 1102.447946][T19596] bond0: (slave bond_slave_0): Releasing backup interface [ 1102.802672][T19608] __nla_validate_parse: 2 callbacks suppressed [ 1102.802713][T19608] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4945'. [ 1103.430022][T19629] device wg2 entered promiscuous mode [ 1103.778788][T19644] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4959'. [ 1104.131913][T19658] netlink: 'syz.1.4964': attribute type 5 has an invalid length. [ 1104.185253][T19654] netlink: 'syz.2.4962': attribute type 2 has an invalid length. [ 1104.244341][T19654] netlink: 'syz.2.4962': attribute type 1 has an invalid length. [ 1104.283719][T19654] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4962'. [ 1105.091098][T19682] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4974'. [ 1105.137709][T19680] device wg2 entered promiscuous mode [ 1105.408479][T19695] netlink: 'syz.1.4977': attribute type 10 has an invalid length. [ 1106.072875][T19716] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4986'. [ 1106.116258][T19718] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4987'. [ 1106.353185][T19723] device wg2 entered promiscuous mode [ 1106.506531][T19732] netlink: 'syz.1.4990': attribute type 39 has an invalid length. [ 1107.122687][T19743] netlink: 'syz.4.4995': attribute type 39 has an invalid length. [ 1107.386887][T19753] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4999'. [ 1107.521996][T19758] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5001'. [ 1108.791126][T19793] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5014'. [ 1108.815998][T19797] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5015'. [ 1108.889193][T19800] netlink: 'syz.0.5018': attribute type 5 has an invalid length. [ 1109.609774][T19817] device wg2 entered promiscuous mode [ 1110.287007][T19843] netlink: 'syz.0.5030': attribute type 39 has an invalid length. [ 1110.365530][T19835] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5031'. [ 1112.282061][T19885] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5045'. [ 1112.310353][T19890] netlink: 'syz.4.5046': attribute type 39 has an invalid length. [ 1113.594002][T19911] device wg2 entered promiscuous mode [ 1116.167042][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.173488][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.802306][T19935] bond0: (slave bond_slave_0): Releasing backup interface [ 1116.869679][T19939] netlink: 'syz.4.5064': attribute type 5 has an invalid length. [ 1117.153271][T19963] device wg2 left promiscuous mode [ 1117.171763][T19961] netlink: 'syz.2.5067': attribute type 39 has an invalid length. [ 1117.418913][T19970] device wg2 entered promiscuous mode [ 1117.768376][T19987] netlink: 'syz.3.5075': attribute type 39 has an invalid length. [ 1118.939375][T20019] device wg2 left promiscuous mode [ 1119.080995][T20019] device wg2 entered promiscuous mode [ 1119.401080][T20033] netlink: 'syz.3.5092': attribute type 39 has an invalid length. [ 1119.578559][T20042] netlink: 'syz.0.5103': attribute type 39 has an invalid length. [ 1120.561055][T20068] device wg2 left promiscuous mode [ 1120.663380][T20072] netlink: 'syz.3.5105': attribute type 5 has an invalid length. [ 1120.674546][T20074] device wg2 entered promiscuous mode [ 1120.681959][T20071] netlink: 'syz.4.5106': attribute type 10 has an invalid length. [ 1120.807631][T20078] netlink: 'syz.2.5107': attribute type 39 has an invalid length. [ 1121.340037][T20087] netlink: 'syz.1.5111': attribute type 39 has an invalid length. [ 1123.028018][T20126] netlink: 'syz.4.5121': attribute type 10 has an invalid length. [ 1123.119139][T20132] netlink: 'syz.3.5123': attribute type 39 has an invalid length. [ 1123.190012][T20130] device wg2 left promiscuous mode [ 1123.284982][T20130] device wg2 entered promiscuous mode [ 1124.500936][T20141] bond0: (slave bond_slave_0): Releasing backup interface [ 1124.616277][T20144] netlink: 'syz.4.5126': attribute type 39 has an invalid length. [ 1125.213612][T20176] netlink: 'syz.2.5137': attribute type 5 has an invalid length. [ 1125.235773][T20179] netlink: 'syz.1.5138': attribute type 39 has an invalid length. [ 1125.658543][T20186] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5142'. [ 1126.287667][T20203] device wg2 left promiscuous mode [ 1126.341085][T20204] netlink: 'syz.2.5148': attribute type 39 has an invalid length. [ 1126.360841][T20206] device wg2 entered promiscuous mode [ 1127.374395][T20215] netlink: 'syz.2.5153': attribute type 10 has an invalid length. [ 1127.662773][T20232] netlink: 'syz.4.5155': attribute type 39 has an invalid length. [ 1127.766168][T20228] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5156'. [ 1128.276889][T20248] netlink: 'syz.3.5163': attribute type 39 has an invalid length. [ 1128.515005][T20254] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5165'. [ 1129.172754][T20275] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5173'. [ 1129.351886][T20281] netlink: 'syz.2.5175': attribute type 5 has an invalid length. [ 1129.865816][T20292] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5180'. [ 1130.183355][T20298] netlink: 'syz.1.5182': attribute type 10 has an invalid length. [ 1130.450249][T20309] netlink: 'syz.4.5186': attribute type 39 has an invalid length. [ 1130.529315][T20314] netlink: 'syz.1.5187': attribute type 10 has an invalid length. [ 1130.670465][T20316] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5188'. [ 1132.094508][T20350] netlink: 'syz.4.5199': attribute type 39 has an invalid length. [ 1132.529151][T20361] netlink: 'syz.1.5202': attribute type 39 has an invalid length. [ 1132.608283][T20359] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5201'. [ 1132.867673][T20363] device wg2 left promiscuous mode [ 1132.928179][T20368] device wg2 entered promiscuous mode [ 1133.098236][T20379] netlink: 'syz.3.5209': attribute type 5 has an invalid length. [ 1133.824631][T20399] netlink: 'syz.1.5214': attribute type 39 has an invalid length. [ 1134.482161][T20412] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5218'. [ 1135.998798][T20454] netlink: 'syz.2.5230': attribute type 39 has an invalid length. [ 1137.027112][T20468] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5235'. [ 1137.383405][T20488] netlink: 'syz.0.5242': attribute type 10 has an invalid length. [ 1138.748563][T20515] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5252'. [ 1140.531474][T20560] netlink: 'syz.1.5262': attribute type 39 has an invalid length. [ 1140.912733][T20569] netlink: 'syz.0.5266': attribute type 39 has an invalid length. [ 1142.004510][T20595] netlink: 'syz.2.5271': attribute type 10 has an invalid length. [ 1142.032978][T20595] device team0 left promiscuous mode [ 1142.049395][T20595] device team_slave_0 left promiscuous mode [ 1142.131439][T20595] device team_slave_1 left promiscuous mode [ 1142.179654][T20595] device geneve1 left promiscuous mode [ 1142.231700][T20595] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.261613][T20595] device team0 entered promiscuous mode [ 1142.274830][T20595] device team_slave_0 entered promiscuous mode [ 1142.286842][T20595] device team_slave_1 entered promiscuous mode [ 1142.300048][T20595] device geneve1 entered promiscuous mode [ 1142.321395][T20595] bond0: (slave team0): Enslaving as an active interface with an up link [ 1142.410490][T20596] netlink: 'syz.2.5271': attribute type 10 has an invalid length. [ 1142.468954][T20596] bond0: (slave team0): Releasing backup interface [ 1142.639250][T20596] device team0 left promiscuous mode [ 1142.667980][T20596] device team_slave_0 left promiscuous mode [ 1142.675043][T20596] device team_slave_1 left promiscuous mode [ 1142.681722][T20596] device geneve1 left promiscuous mode [ 1142.792076][T20599] netlink: 'syz.3.5273': attribute type 10 has an invalid length. [ 1143.315636][T20629] netlink: 'syz.4.5279': attribute type 39 has an invalid length. [ 1144.505922][T20656] netlink: 'syz.2.5289': attribute type 10 has an invalid length. [ 1144.768700][T20665] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5291'. [ 1144.983658][T20669] netlink: 'syz.2.5303': attribute type 10 has an invalid length. [ 1145.011761][T20672] netlink: 'syz.1.5292': attribute type 10 has an invalid length. [ 1145.038354][T20672] device team0 left promiscuous mode [ 1145.069703][T20672] device team_slave_0 left promiscuous mode [ 1145.101453][T20672] device team_slave_1 left promiscuous mode [ 1145.222492][T20672] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.315917][T20672] device team0 entered promiscuous mode [ 1145.352778][T20672] device team_slave_0 entered promiscuous mode [ 1145.390621][T20672] device team_slave_1 entered promiscuous mode [ 1145.467548][T20672] bond0: (slave team0): Enslaving as an active interface with an up link [ 1145.533481][T20678] netlink: 'syz.1.5292': attribute type 10 has an invalid length. [ 1146.094551][T20678] bond0: (slave team0): Releasing backup interface [ 1146.186093][T20678] device team0 left promiscuous mode [ 1146.191868][T20678] device team_slave_0 left promiscuous mode [ 1146.197959][T20678] device team_slave_1 left promiscuous mode [ 1148.631249][T20723] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5306'. [ 1148.797560][T20727] netlink: 'syz.0.5308': attribute type 10 has an invalid length. [ 1149.751746][T20759] netlink: 'syz.3.5319': attribute type 10 has an invalid length. [ 1149.913009][T20764] netlink: 'syz.3.5319': attribute type 10 has an invalid length. [ 1149.976589][T20764] bond0: (slave team0): Releasing backup interface [ 1150.008291][T20764] device team0 left promiscuous mode [ 1150.022658][T20764] device team_slave_0 left promiscuous mode [ 1150.043509][T20764] device team_slave_1 left promiscuous mode [ 1150.105777][T20766] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5322'. [ 1150.735416][T20791] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5331'. [ 1151.852316][T20816] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5337'. [ 1151.868049][T20817] netlink: 'syz.4.5338': attribute type 10 has an invalid length. [ 1151.879673][T20817] device team0 left promiscuous mode [ 1151.887272][T20817] device team_slave_0 left promiscuous mode [ 1151.904565][T20817] device team_slave_1 left promiscuous mode [ 1151.939282][T20817] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.964122][T20817] device team0 entered promiscuous mode [ 1151.970472][T20817] device team_slave_0 entered promiscuous mode [ 1151.980606][T20817] device team_slave_1 entered promiscuous mode [ 1151.996989][T20817] bond0: (slave team0): Enslaving as an active interface with an up link [ 1152.054463][T20817] netlink: 'syz.4.5338': attribute type 10 has an invalid length. [ 1152.091161][T20817] bond0: (slave team0): Releasing backup interface [ 1152.110873][T20817] device team0 left promiscuous mode [ 1152.119002][T20817] device team_slave_0 left promiscuous mode [ 1152.125392][T20817] device team_slave_1 left promiscuous mode [ 1152.437369][T20834] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5344'. [ 1152.568622][T20836] netlink: 'syz.3.5343': attribute type 39 has an invalid length. [ 1152.634360][T20841] netlink: 'syz.0.5346': attribute type 10 has an invalid length. [ 1153.237586][T20859] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5350'. [ 1154.371827][T20887] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5358'. [ 1154.449463][T20892] netlink: 'syz.4.5360': attribute type 39 has an invalid length. [ 1156.487496][T20944] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5372'. [ 1157.126985][T20962] netlink: 'syz.0.5373': attribute type 10 has an invalid length. [ 1157.143800][T20962] device team0 left promiscuous mode [ 1157.149918][T20962] device team_slave_0 left promiscuous mode [ 1157.164065][T20962] device team_slave_1 left promiscuous mode [ 1157.171928][T20962] device geneve1 left promiscuous mode [ 1157.186817][T20962] device batadv0 left promiscuous mode [ 1157.316982][T20964] netlink: 'syz.0.5373': attribute type 10 has an invalid length. [ 1158.710146][T20993] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5385'. [ 1159.005740][T20999] netlink: 'syz.1.5387': attribute type 10 has an invalid length. [ 1159.035995][T21001] netlink: 'syz.4.5386': attribute type 10 has an invalid length. [ 1159.172070][T21005] netlink: 'syz.3.5390': attribute type 39 has an invalid length. [ 1160.335260][T21030] netlink: 'syz.4.5398': attribute type 3 has an invalid length. [ 1160.406989][T21030] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5398'. [ 1160.790030][T21040] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5400'. [ 1161.210224][T21047] netlink: 'syz.0.5401': attribute type 3 has an invalid length. [ 1161.290560][T21051] netlink: 'syz.1.5402': attribute type 10 has an invalid length. [ 1161.331794][T21047] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5401'. [ 1162.288560][T21074] netlink: 'syz.0.5411': attribute type 10 has an invalid length. [ 1162.340379][T21074] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5411'. [ 1162.383653][T21072] netlink: 'syz.3.5410': attribute type 3 has an invalid length. [ 1162.407231][T21076] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5412'. [ 1162.464586][T21072] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5410'. [ 1162.498405][T21076] net_ratelimit: 149 callbacks suppressed [ 1162.498430][T21076] netlink: zone id is out of range [ 1162.550245][T21076] netlink: zone id is out of range [ 1162.568774][T21076] netlink: zone id is out of range [ 1162.603056][T21076] netlink: zone id is out of range [ 1162.629287][T21076] netlink: zone id is out of range [ 1162.651312][T21076] netlink: zone id is out of range [ 1162.660702][T21076] netlink: zone id is out of range [ 1162.669601][T21076] netlink: zone id is out of range [ 1162.709420][T21076] netlink: zone id is out of range [ 1162.750145][T21076] netlink: zone id is out of range [ 1164.196809][T21105] netlink: 'syz.0.5421': attribute type 10 has an invalid length. [ 1165.572184][T21137] netlink: 'syz.2.5433': attribute type 39 has an invalid length. [ 1166.027954][T21147] netlink: 'syz.2.5437': attribute type 10 has an invalid length. [ 1166.687012][T21162] netlink: 'syz.0.5441': attribute type 10 has an invalid length. [ 1167.608285][T21171] netlink: 'syz.0.5445': attribute type 10 has an invalid length. [ 1167.657919][T21174] netlink: 'syz.0.5445': attribute type 10 has an invalid length. [ 1167.861168][T21179] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5447'. [ 1168.276064][T21194] netlink: 'syz.2.5452': attribute type 10 has an invalid length. [ 1168.575373][T21204] netlink: 'syz.2.5456': attribute type 3 has an invalid length. [ 1168.625650][T21204] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5456'. [ 1169.609375][T21224] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5462'. [ 1170.238513][T21245] netlink: 'syz.0.5469': attribute type 10 has an invalid length. [ 1170.408120][T21250] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5471'. [ 1170.626964][T21255] netlink: 'syz.0.5473': attribute type 10 has an invalid length. [ 1170.684319][T21258] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5474'. [ 1171.678047][T21285] netlink: 'syz.2.5483': attribute type 10 has an invalid length. [ 1171.694868][T21286] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5484'. [ 1171.944933][T21292] netlink: 'syz.4.5487': attribute type 10 has an invalid length. [ 1171.962188][T21293] netlink: 'syz.1.5486': attribute type 39 has an invalid length. [ 1172.130342][T21297] netlink: 'syz.3.5488': attribute type 2 has an invalid length. [ 1172.140467][T21297] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5488'. [ 1172.257316][T21300] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5489'. [ 1173.381964][T21324] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5498'. [ 1173.471416][T21332] netlink: 'syz.4.5500': attribute type 39 has an invalid length. [ 1173.519144][T21331] netlink: 'syz.2.5499': attribute type 10 has an invalid length. [ 1173.548018][T21331] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5499'. [ 1173.931994][T21337] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5501'. [ 1175.272145][T21384] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5515'. [ 1175.576477][T21390] netlink: 'syz.4.5518': attribute type 10 has an invalid length. [ 1175.602054][T21390] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5518'. [ 1175.641360][T21394] netlink: 'syz.0.5516': attribute type 3 has an invalid length. [ 1175.652909][T21394] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5516'. [ 1175.789860][T21400] netlink: 'syz.1.5520': attribute type 20 has an invalid length. [ 1176.112872][T21408] netlink: 'syz.0.5523': attribute type 2 has an invalid length. [ 1176.178093][T21408] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5523'. [ 1177.196415][T21421] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5528'. [ 1177.442934][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.449436][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.567811][T21432] netlink: 'syz.1.5532': attribute type 10 has an invalid length. [ 1177.590054][T21432] netlink: 'syz.1.5532': attribute type 10 has an invalid length. [ 1177.681766][T21437] netlink: 'syz.3.5533': attribute type 10 has an invalid length. [ 1177.718065][T21437] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5533'. [ 1178.216448][T21448] netlink: 'syz.1.5537': attribute type 3 has an invalid length. [ 1178.231763][T21448] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5537'. [ 1179.012709][T21460] netlink: 'syz.4.5539': attribute type 20 has an invalid length. [ 1179.601223][T21470] netlink: 'syz.2.5541': attribute type 2 has an invalid length. [ 1179.625508][T21470] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5541'. [ 1180.688030][T21488] netlink: 'syz.3.5547': attribute type 10 has an invalid length. [ 1180.736017][T21483] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1180.799327][T21491] netlink: 'syz.3.5547': attribute type 10 has an invalid length. [ 1180.904807][T21483] netlink: 'syz.1.5545': attribute type 21 has an invalid length. [ 1180.932250][T21483] IPv6: NLM_F_CREATE should be specified when creating new route [ 1181.065094][T21494] netlink: 'syz.1.5545': attribute type 21 has an invalid length. [ 1181.088801][T21500] netlink: 'syz.1.5545': attribute type 10 has an invalid length. [ 1181.151478][T21500] device dummy0 entered promiscuous mode [ 1181.158787][T21500] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1181.304289][T21506] netlink: 'syz.0.5563': attribute type 10 has an invalid length. [ 1181.346643][T21504] netlink: 'syz.1.5552': attribute type 3 has an invalid length. [ 1181.362627][T21504] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5552'. [ 1181.367168][T21505] netlink: 'syz.3.5564': attribute type 3 has an invalid length. [ 1181.388219][T21505] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5564'. [ 1181.859409][T21515] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5553'. [ 1183.154852][T21548] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5562'. [ 1184.288884][T21564] validate_nla: 4 callbacks suppressed [ 1184.288927][T21564] netlink: 'syz.2.5570': attribute type 39 has an invalid length. [ 1184.305948][T21559] netlink: 'syz.3.5567': attribute type 10 has an invalid length. [ 1184.350098][T21562] netlink: 'syz.4.5568': attribute type 3 has an invalid length. [ 1184.381928][T21562] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5568'. [ 1184.847252][T21573] netlink: 'syz.4.5573': attribute type 3 has an invalid length. [ 1184.871596][T21576] netlink: 'syz.3.5575': attribute type 10 has an invalid length. [ 1184.911235][T21576] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5575'. [ 1184.918968][T21573] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5573'. [ 1186.852312][T21617] netlink: 'syz.4.5584': attribute type 2 has an invalid length. [ 1186.871507][T21617] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5584'. [ 1187.328492][T21624] device sit0 left promiscuous mode [ 1187.513288][T21626] device sit0 entered promiscuous mode [ 1187.747329][T21627] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1187.785664][T21625] netlink: 'syz.3.5585': attribute type 21 has an invalid length. [ 1187.840423][T21618] netlink: 'syz.3.5585': attribute type 10 has an invalid length. [ 1187.944188][T21618] device dummy0 entered promiscuous mode [ 1187.950634][T21618] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1188.055941][T21638] netlink: 'syz.0.5587': attribute type 10 has an invalid length. [ 1188.089095][T21640] netlink: 'syz.2.5590': attribute type 10 has an invalid length. [ 1188.107893][T21640] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5590'. [ 1188.462096][T21650] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5593'. [ 1188.524650][T21656] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1188.647725][T21659] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5606'. [ 1188.767744][T21660] device dummy0 entered promiscuous mode [ 1188.813402][T21660] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1188.839220][T21656] IPv6: NLM_F_CREATE should be specified when creating new route [ 1189.306420][T21665] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5596'. [ 1189.456598][T21670] validate_nla: 6 callbacks suppressed [ 1189.456638][T21670] netlink: 'syz.0.5599': attribute type 20 has an invalid length. [ 1189.924277][T21684] netlink: 'syz.2.5602': attribute type 39 has an invalid length. [ 1190.260553][T21692] netlink: 'syz.4.5608': attribute type 10 has an invalid length. [ 1190.566366][T21703] netlink: 'syz.0.5612': attribute type 39 has an invalid length. [ 1190.770410][T21700] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5611'. [ 1190.956892][T21709] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5615'. [ 1191.010231][T21707] netlink: 'syz.4.5614': attribute type 10 has an invalid length. [ 1191.019723][T21707] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5614'. [ 1191.038742][T21707] device team0 entered promiscuous mode [ 1191.048619][T21707] device team_slave_0 entered promiscuous mode [ 1191.098800][T21707] device team_slave_1 entered promiscuous mode [ 1191.214539][T21707] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.284195][T21707] net_ratelimit: 15 callbacks suppressed [ 1191.284244][T21707] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1191.598759][T21728] netlink: 'syz.2.5620': attribute type 10 has an invalid length. [ 1191.622674][T21728] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5620'. [ 1191.733369][T21733] netlink: 'syz.4.5622': attribute type 11 has an invalid length. [ 1191.776955][T21733] netlink: 173820 bytes leftover after parsing attributes in process `syz.4.5622'. [ 1191.858894][T21736] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1191.859227][T21731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1193.989586][T21746] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5627'. [ 1194.179683][T21755] netlink: 'syz.2.5628': attribute type 10 has an invalid length. [ 1194.279018][T21756] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5629'. [ 1194.591768][T21765] netlink: 'syz.2.5633': attribute type 39 has an invalid length. [ 1194.765799][T21773] netlink: 'syz.3.5637': attribute type 10 has an invalid length. [ 1194.804156][T21773] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5637'. [ 1195.636442][T21795] netlink: 'syz.3.5645': attribute type 39 has an invalid length. [ 1195.694280][T21799] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5646'. [ 1196.088524][T21815] netlink: 'syz.2.5652': attribute type 10 has an invalid length. [ 1196.980325][T21815] bond0: (slave netdevsim0): Releasing backup interface [ 1196.990440][T21815] device netdevsim0 left promiscuous mode [ 1197.005119][T21815] team0: Port device netdevsim0 added [ 1197.011079][T21810] netlink: 'syz.2.5652': attribute type 10 has an invalid length. [ 1197.028497][T21810] team0: Port device netdevsim0 removed [ 1197.040229][T21810] device netdevsim0 entered promiscuous mode [ 1197.051004][T21810] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1197.077095][T21824] syz.1.5651 (21824) used obsolete PPPIOCDETACH ioctl [ 1197.425541][T21831] netlink: 'syz.2.5655': attribute type 10 has an invalid length. [ 1197.458082][T21831] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5655'. [ 1197.486136][T21838] netlink: 'syz.0.5657': attribute type 10 has an invalid length. [ 1197.556179][T21838] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5657'. [ 1197.696976][T21838] device team0 entered promiscuous mode [ 1197.713382][T21838] device team_slave_0 entered promiscuous mode [ 1197.749605][T21838] device team_slave_1 entered promiscuous mode [ 1197.771361][T21838] device geneve1 entered promiscuous mode [ 1197.795712][T21838] device batadv0 entered promiscuous mode [ 1197.847816][T21838] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1198.189545][T21854] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5664'. [ 1198.221686][T21856] netlink: 'syz.3.5662': attribute type 39 has an invalid length. [ 1198.737699][T21875] netlink: 'syz.0.5671': attribute type 10 has an invalid length. [ 1198.758204][T21875] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5671'. [ 1199.374789][T21889] netlink: 'syz.3.5677': attribute type 10 has an invalid length. [ 1199.398766][T21892] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5678'. [ 1199.764528][T21905] netlink: 'syz.1.5681': attribute type 11 has an invalid length. [ 1199.783146][T21905] netlink: 173820 bytes leftover after parsing attributes in process `syz.1.5681'. [ 1199.834220][T21903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1200.076088][T21918] validate_nla: 1 callbacks suppressed [ 1200.076146][T21918] netlink: 'syz.2.5686': attribute type 10 has an invalid length. [ 1200.091199][T21918] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5686'. [ 1200.518897][T21931] netlink: 'syz.2.5691': attribute type 39 has an invalid length. [ 1200.874262][T21935] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5692'. [ 1201.463346][T21952] netlink: 'syz.0.5699': attribute type 11 has an invalid length. [ 1201.575434][T21952] netlink: 173820 bytes leftover after parsing attributes in process `syz.0.5699'. [ 1201.662216][T21951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1201.773801][T21964] netlink: 'syz.4.5704': attribute type 39 has an invalid length. [ 1202.144306][T21976] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5707'. [ 1203.291963][T21998] netlink: 'syz.3.5715': attribute type 39 has an invalid length. [ 1203.569954][T22009] netlink: 'syz.3.5718': attribute type 10 has an invalid length. [ 1203.598968][T22011] netlink: 'syz.1.5719': attribute type 39 has an invalid length. [ 1204.166486][T22021] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.5723'. [ 1204.517420][T22021] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1204.529189][T22021] CPU: 1 PID: 22021 Comm: syz.4.5723 Not tainted 6.1.141-syzkaller #0 [ 1204.537414][T22021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1204.547514][T22021] Call Trace: [ 1204.550832][T22021] [ 1204.553799][T22021] dump_stack_lvl+0x168/0x22e [ 1204.558534][T22021] ? show_regs_print_info+0x12/0x12 [ 1204.563790][T22021] ? load_image+0x3b0/0x3b0 [ 1204.568372][T22021] sysfs_warn_dup+0x8a/0xa0 [ 1204.572935][T22021] sysfs_do_create_link_sd+0xc0/0x110 [ 1204.578374][T22021] device_add+0x7ed/0xfb0 [ 1204.582768][T22021] wiphy_register+0x1e68/0x2bd0 [ 1204.587704][T22021] ? cfg80211_event_work+0x40/0x40 [ 1204.592869][T22021] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1204.599078][T22021] ? ieee80211_register_hw+0x2a6a/0x38c0 [ 1204.604781][T22021] ieee80211_register_hw+0x2c29/0x38c0 [ 1204.610315][T22021] ? ieee80211_register_hw+0xef1/0x38c0 [ 1204.615937][T22021] ? ieee80211_register_hw+0xef1/0x38c0 [ 1204.621545][T22021] ? ieee80211_tasklet_handler+0x20/0x20 [ 1204.627245][T22021] ? memset+0x1e/0x40 [ 1204.631271][T22021] ? __hrtimer_init+0x186/0x270 [ 1204.636169][T22021] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1204.641964][T22021] hwsim_new_radio_nl+0xafa/0xce0 [ 1204.647053][T22021] genl_family_rcv_msg_doit+0x22e/0x320 [ 1204.652648][T22021] ? end_current_label_crit_section+0x170/0x170 [ 1204.658929][T22021] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1204.664857][T22021] ? bpf_lsm_capable+0x5/0x10 [ 1204.669557][T22021] ? security_capable+0x85/0xb0 [ 1204.674433][T22021] genl_rcv_msg+0x5f2/0x780 [ 1204.678967][T22021] ? genl_bind+0x350/0x350 [ 1204.683402][T22021] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1204.689762][T22021] ? lock_acquire+0x20f/0x490 [ 1204.694470][T22021] netlink_rcv_skb+0x1de/0x420 [ 1204.699272][T22021] ? genl_bind+0x350/0x350 [ 1204.704008][T22021] ? netlink_ack+0x1100/0x1100 [ 1204.708832][T22021] ? down_read+0x1a8/0x2d0 [ 1204.713280][T22021] genl_rcv+0x24/0x40 [ 1204.717287][T22021] netlink_unicast+0x74c/0x8c0 [ 1204.722087][T22021] netlink_sendmsg+0x89e/0xbc0 [ 1204.726888][T22021] ? netlink_getsockopt+0x540/0x540 [ 1204.732124][T22021] ? aa_sock_msg_perm+0x94/0x150 [ 1204.737086][T22021] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1204.742392][T22021] ? security_socket_sendmsg+0x7c/0xa0 [ 1204.747866][T22021] ? netlink_getsockopt+0x540/0x540 [ 1204.753093][T22021] ____sys_sendmsg+0x59b/0x970 [ 1204.757894][T22021] ? __sys_sendmsg_sock+0x30/0x30 [ 1204.762962][T22021] ? __import_iovec+0x315/0x500 [ 1204.767858][T22021] ? import_iovec+0x6f/0xa0 [ 1204.772398][T22021] ___sys_sendmsg+0x21c/0x290 [ 1204.777111][T22021] ? __sys_sendmsg+0x270/0x270 [ 1204.781927][T22021] ? ktime_get_real_ts64+0x420/0x420 [ 1204.787252][T22021] ? __fdget+0x17c/0x200 [ 1204.791522][T22021] __se_sys_sendmsg+0x19e/0x270 [ 1204.796399][T22021] ? ct_nmi_exit+0x145/0x1c0 [ 1204.801008][T22021] ? __x64_sys_sendmsg+0x80/0x80 [ 1204.805982][T22021] ? lockdep_hardirqs_on+0x94/0x140 [ 1204.811218][T22021] do_syscall_64+0x4c/0xa0 [ 1204.815744][T22021] ? clear_bhb_loop+0x60/0xb0 [ 1204.820436][T22021] ? clear_bhb_loop+0x60/0xb0 [ 1204.825135][T22021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1204.831060][T22021] RIP: 0033:0x7f926e58e929 [ 1204.835496][T22021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1204.855124][T22021] RSP: 002b:00007f926f3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1204.863565][T22021] RAX: ffffffffffffffda RBX: 00007f926e7b5fa0 RCX: 00007f926e58e929 [ 1204.871554][T22021] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 1204.879543][T22021] RBP: 00007f926e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1204.887530][T22021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1204.895533][T22021] R13: 0000000000000000 R14: 00007f926e7b5fa0 R15: 00007ffcf54ff2f8 [ 1204.903550][T22021] [ 1205.337211][T22053] netlink: 'syz.1.5729': attribute type 39 has an invalid length. [ 1205.841033][T22060] netlink: 'syz.4.5733': attribute type 39 has an invalid length. [ 1205.916640][T22065] netlink: 'syz.2.5735': attribute type 10 has an invalid length. [ 1206.219442][T22069] netlink: 'syz.1.5738': attribute type 10 has an invalid length. [ 1207.220795][T22106] netlink: 'syz.3.5746': attribute type 39 has an invalid length. [ 1207.240751][T22099] netlink: 'syz.1.5747': attribute type 10 has an invalid length. [ 1207.371929][T22099] bond0: (slave netdevsim0): Releasing backup interface [ 1207.429166][T22099] device netdevsim0 left promiscuous mode [ 1207.535124][T22099] team0: Port device netdevsim0 added [ 1207.551326][T22107] netlink: 'syz.1.5747': attribute type 10 has an invalid length. [ 1207.610019][T22107] team0: Port device netdevsim0 removed [ 1207.624707][T22107] device netdevsim0 entered promiscuous mode [ 1207.632034][T22107] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1207.641414][T22111] netlink: 'syz.2.5750': attribute type 39 has an invalid length. [ 1207.727635][T22115] netlink: 'syz.3.5751': attribute type 10 has an invalid length. [ 1208.079685][T22123] tun0: tun_chr_ioctl cmd 1074025677 [ 1208.100945][T22123] tun0: linktype set to 270 [ 1209.219090][T22160] netlink: 'syz.1.5764': attribute type 39 has an invalid length. [ 1209.315917][T22159] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5765'. [ 1210.297678][T22194] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5775'. [ 1210.435010][T22197] validate_nla: 3 callbacks suppressed [ 1210.435053][T22197] netlink: 'syz.2.5778': attribute type 39 has an invalid length. [ 1210.497562][T22194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5775'. [ 1211.033301][T22194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5775'. [ 1211.047961][T22195] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5775'. [ 1211.065109][T22200] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5775'. [ 1211.303150][T22215] netlink: 'syz.1.5781': attribute type 39 has an invalid length. [ 1211.368845][T22209] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5780'. [ 1212.350768][T22238] netlink: 'syz.4.5790': attribute type 39 has an invalid length. [ 1212.551635][T22244] netlink: 'syz.2.5802': attribute type 10 has an invalid length. [ 1212.705095][T22247] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5804'. [ 1213.208078][T22259] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5796'. [ 1213.259975][T22255] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.5794'. [ 1213.318196][T22255] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1213.326926][T22255] CPU: 0 PID: 22255 Comm: syz.0.5794 Not tainted 6.1.141-syzkaller #0 [ 1213.335131][T22255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1213.345231][T22255] Call Trace: [ 1213.348544][T22255] [ 1213.351510][T22255] dump_stack_lvl+0x168/0x22e [ 1213.356245][T22255] ? show_regs_print_info+0x12/0x12 [ 1213.361504][T22255] ? load_image+0x3b0/0x3b0 [ 1213.366062][T22255] ? memset_erms+0xb/0x10 [ 1213.370448][T22255] sysfs_warn_dup+0x8a/0xa0 [ 1213.375005][T22255] sysfs_do_create_link_sd+0xc0/0x110 [ 1213.380432][T22255] device_add+0x7ed/0xfb0 [ 1213.384823][T22255] wiphy_register+0x1e68/0x2bd0 [ 1213.389746][T22255] ? cfg80211_event_work+0x40/0x40 [ 1213.394906][T22255] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1213.401087][T22255] ? ieee80211_register_hw+0x2a6a/0x38c0 [ 1213.406752][T22255] ieee80211_register_hw+0x2c29/0x38c0 [ 1213.412246][T22255] ? ieee80211_register_hw+0xef1/0x38c0 [ 1213.417823][T22255] ? ieee80211_register_hw+0xef1/0x38c0 [ 1213.423409][T22255] ? ieee80211_tasklet_handler+0x20/0x20 [ 1213.429101][T22255] ? memset+0x1e/0x40 [ 1213.433102][T22255] ? __hrtimer_init+0x186/0x270 [ 1213.437969][T22255] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1213.443727][T22255] hwsim_new_radio_nl+0xafa/0xce0 [ 1213.448778][T22255] genl_family_rcv_msg_doit+0x22e/0x320 [ 1213.454339][T22255] ? end_current_label_crit_section+0x170/0x170 [ 1213.460597][T22255] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1213.466512][T22255] ? bpf_lsm_capable+0x5/0x10 [ 1213.471209][T22255] ? security_capable+0x85/0xb0 [ 1213.476087][T22255] genl_rcv_msg+0x5f2/0x780 [ 1213.480616][T22255] ? genl_bind+0x350/0x350 [ 1213.485047][T22255] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1213.491408][T22255] netlink_rcv_skb+0x1de/0x420 [ 1213.496199][T22255] ? genl_bind+0x350/0x350 [ 1213.500635][T22255] ? netlink_ack+0x1100/0x1100 [ 1213.505431][T22255] ? down_read+0x1a8/0x2d0 [ 1213.509871][T22255] genl_rcv+0x24/0x40 [ 1213.513869][T22255] netlink_unicast+0x74c/0x8c0 [ 1213.518665][T22255] netlink_sendmsg+0x89e/0xbc0 [ 1213.523461][T22255] ? netlink_getsockopt+0x540/0x540 [ 1213.528688][T22255] ? aa_sock_msg_perm+0x94/0x150 [ 1213.533646][T22255] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1213.538948][T22255] ? security_socket_sendmsg+0x7c/0xa0 [ 1213.544425][T22255] ? netlink_getsockopt+0x540/0x540 [ 1213.549647][T22255] ____sys_sendmsg+0x59b/0x970 [ 1213.554445][T22255] ? __sys_sendmsg_sock+0x30/0x30 [ 1213.559489][T22255] ? __import_iovec+0x315/0x500 [ 1213.564364][T22255] ? import_iovec+0x6f/0xa0 [ 1213.568882][T22255] ___sys_sendmsg+0x21c/0x290 [ 1213.573616][T22255] ? __sys_sendmsg+0x270/0x270 [ 1213.578421][T22255] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1213.584173][T22255] ? __fdget+0x17c/0x200 [ 1213.588455][T22255] __se_sys_sendmsg+0x19e/0x270 [ 1213.593339][T22255] ? __x64_sys_sendmsg+0x80/0x80 [ 1213.598316][T22255] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1213.604232][T22255] do_syscall_64+0x4c/0xa0 [ 1213.608675][T22255] ? clear_bhb_loop+0x60/0xb0 [ 1213.613371][T22255] ? clear_bhb_loop+0x60/0xb0 [ 1213.618070][T22255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1213.623994][T22255] RIP: 0033:0x7fa4bf98e929 [ 1213.628424][T22255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1213.648048][T22255] RSP: 002b:00007fa4c0821038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1213.656480][T22255] RAX: ffffffffffffffda RBX: 00007fa4bfbb5fa0 RCX: 00007fa4bf98e929 [ 1213.664477][T22255] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 1213.672558][T22255] RBP: 00007fa4bfa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1213.680551][T22255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1213.688543][T22255] R13: 0000000000000000 R14: 00007fa4bfbb5fa0 R15: 00007ffe7018bd18 [ 1213.696552][T22255] [ 1213.801640][T22265] netlink: 'syz.2.5797': attribute type 39 has an invalid length. [ 1213.936316][T22271] netlink: 'syz.3.5798': attribute type 10 has an invalid length. [ 1214.370156][T22286] netlink: 'syz.3.5807': attribute type 10 has an invalid length. [ 1214.749313][T22287] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5808'. [ 1215.021939][T22299] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5812'. [ 1215.073365][T22301] netlink: 'syz.0.5813': attribute type 39 has an invalid length. [ 1215.226337][T22306] netlink: 'syz.4.5814': attribute type 39 has an invalid length. [ 1215.341974][T22309] netlink: 'syz.1.5817': attribute type 10 has an invalid length. [ 1215.576023][T22319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1215.604155][T22319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1215.636558][T22319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1215.664026][T22319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1215.777658][T22322] netlink: 'syz.1.5821': attribute type 10 has an invalid length. [ 1215.949743][T22332] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5823'. [ 1216.153935][T22336] netlink: 'syz.0.5825': attribute type 10 has an invalid length. [ 1216.235551][T22336] bond0: (slave netdevsim0): Releasing backup interface [ 1216.335718][T22336] device netdevsim0 left promiscuous mode [ 1216.384918][T22336] device netdevsim0 entered promiscuous mode [ 1216.415307][T22336] team0: Port device netdevsim0 added [ 1216.432591][T22339] netlink: 'syz.2.5827': attribute type 39 has an invalid length. [ 1216.440810][T22340] netlink: 'syz.0.5825': attribute type 10 has an invalid length. [ 1216.450257][T22340] device netdevsim0 left promiscuous mode [ 1216.500109][T22340] team0: Port device netdevsim0 removed [ 1216.525760][T22340] device netdevsim0 entered promiscuous mode [ 1216.543491][T22340] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1216.564409][T22343] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5828'. [ 1216.864887][T22358] netlink: 'syz.0.5831': attribute type 39 has an invalid length. [ 1216.886853][T22354] netlink: 'syz.1.5832': attribute type 10 has an invalid length. [ 1217.053331][T22362] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5835'. [ 1217.092744][T22364] netlink: 'syz.4.5836': attribute type 10 has an invalid length. [ 1217.396829][T22373] netlink: 'syz.1.5849': attribute type 39 has an invalid length. [ 1218.024133][T22385] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5842'. [ 1218.530998][T22395] netlink: 'syz.4.5844': attribute type 10 has an invalid length. [ 1218.659169][T22395] bond0: (slave netdevsim0): Releasing backup interface [ 1218.708464][T22395] device netdevsim0 left promiscuous mode [ 1218.742813][T22395] device netdevsim0 entered promiscuous mode [ 1218.764000][T22395] team0: Port device netdevsim0 added [ 1218.795345][T22398] netlink: 'syz.4.5844': attribute type 10 has an invalid length. [ 1218.804646][T22398] device netdevsim0 left promiscuous mode [ 1218.830352][T22398] team0: Port device netdevsim0 removed [ 1218.853727][T22398] device netdevsim0 entered promiscuous mode [ 1218.860815][T22398] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1219.271016][T22414] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5852'. [ 1219.285978][T22420] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5853'. [ 1219.315553][T22420] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 1219.383097][T22420] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.533640][T22420] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 1219.950878][T22414] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1219.970256][T22414] CPU: 0 PID: 22414 Comm: syz.3.5852 Not tainted 6.1.141-syzkaller #0 [ 1219.978506][T22414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1219.988613][T22414] Call Trace: [ 1219.991931][T22414] [ 1219.994914][T22414] dump_stack_lvl+0x168/0x22e [ 1219.999661][T22414] ? show_regs_print_info+0x12/0x12 [ 1220.004918][T22414] ? load_image+0x3b0/0x3b0 [ 1220.009476][T22414] sysfs_warn_dup+0x8a/0xa0 [ 1220.014039][T22414] sysfs_do_create_link_sd+0xc0/0x110 [ 1220.019473][T22414] device_add+0x7ed/0xfb0 [ 1220.023869][T22414] wiphy_register+0x1e68/0x2bd0 [ 1220.028804][T22414] ? cfg80211_event_work+0x40/0x40 [ 1220.033969][T22414] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1220.040164][T22414] ? ieee80211_register_hw+0x27eb/0x38c0 [ 1220.045832][T22414] ieee80211_register_hw+0x2c29/0x38c0 [ 1220.051762][T22414] ? ieee80211_register_hw+0xef1/0x38c0 [ 1220.057341][T22414] ? ieee80211_register_hw+0xef1/0x38c0 [ 1220.062951][T22414] ? ieee80211_tasklet_handler+0x20/0x20 [ 1220.068632][T22414] ? memset+0x1e/0x40 [ 1220.072640][T22414] ? __hrtimer_init+0x186/0x270 [ 1220.077513][T22414] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1220.083386][T22414] hwsim_new_radio_nl+0xafa/0xce0 [ 1220.088443][T22414] genl_family_rcv_msg_doit+0x22e/0x320 [ 1220.094014][T22414] ? end_current_label_crit_section+0x170/0x170 [ 1220.100280][T22414] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1220.106201][T22414] ? bpf_lsm_capable+0x5/0x10 [ 1220.110905][T22414] ? security_capable+0x85/0xb0 [ 1220.115783][T22414] genl_rcv_msg+0x5f2/0x780 [ 1220.120340][T22414] ? genl_bind+0x350/0x350 [ 1220.124805][T22414] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1220.131172][T22414] netlink_rcv_skb+0x1de/0x420 [ 1220.135964][T22414] ? genl_bind+0x350/0x350 [ 1220.140420][T22414] ? netlink_ack+0x1100/0x1100 [ 1220.145222][T22414] ? down_read+0x1a8/0x2d0 [ 1220.149664][T22414] genl_rcv+0x24/0x40 [ 1220.153666][T22414] netlink_unicast+0x74c/0x8c0 [ 1220.158467][T22414] netlink_sendmsg+0x89e/0xbc0 [ 1220.163272][T22414] ? netlink_getsockopt+0x540/0x540 [ 1220.168499][T22414] ? aa_sock_msg_perm+0x94/0x150 [ 1220.173455][T22414] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1220.178764][T22414] ? security_socket_sendmsg+0x7c/0xa0 [ 1220.184242][T22414] ? netlink_getsockopt+0x540/0x540 [ 1220.189469][T22414] ____sys_sendmsg+0x59b/0x970 [ 1220.194269][T22414] ? __sys_sendmsg_sock+0x30/0x30 [ 1220.199339][T22414] ? __import_iovec+0x315/0x500 [ 1220.204240][T22414] ? import_iovec+0x6f/0xa0 [ 1220.208786][T22414] ___sys_sendmsg+0x21c/0x290 [ 1220.213509][T22414] ? __sys_sendmsg+0x270/0x270 [ 1220.218349][T22414] ? __fdget+0x17c/0x200 [ 1220.222710][T22414] __se_sys_sendmsg+0x19e/0x270 [ 1220.227594][T22414] ? __x64_sys_sendmsg+0x80/0x80 [ 1220.232579][T22414] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1220.238508][T22414] do_syscall_64+0x4c/0xa0 [ 1220.242967][T22414] ? clear_bhb_loop+0x60/0xb0 [ 1220.247693][T22414] ? clear_bhb_loop+0x60/0xb0 [ 1220.252422][T22414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1220.258358][T22414] RIP: 0033:0x7f188538e929 [ 1220.262885][T22414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1220.282516][T22414] RSP: 002b:00007f18862d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1220.290956][T22414] RAX: ffffffffffffffda RBX: 00007f18855b5fa0 RCX: 00007f188538e929 [ 1220.298954][T22414] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 1220.306943][T22414] RBP: 00007f1885410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1220.315384][T22414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1220.323384][T22414] R13: 0000000000000000 R14: 00007f18855b5fa0 R15: 00007ffea3ac3938 [ 1220.331395][T22414] [ 1220.458495][T22430] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5855'. [ 1221.332614][T22448] validate_nla: 2 callbacks suppressed [ 1221.332649][T22448] netlink: 'syz.1.5860': attribute type 10 has an invalid length. [ 1221.382285][T22448] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.398509][T22448] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.413119][T22448] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.425868][T22448] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.485234][T22448] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.506899][T22448] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.527000][T22448] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.551258][T22448] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.582009][T22448] team0: Port device geneve1 added [ 1221.613284][T22453] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5861'. [ 1221.769208][T22460] netlink: 'syz.1.5864': attribute type 10 has an invalid length. [ 1221.889148][T22464] netlink: 'syz.4.5866': attribute type 39 has an invalid length. [ 1221.899271][T22464] device veth0_macvtap left promiscuous mode [ 1221.997311][T22466] netlink: 'syz.2.5867': attribute type 3 has an invalid length. [ 1222.041636][T22466] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5867'. [ 1222.103101][T22463] netlink: 'syz.3.5865': attribute type 10 has an invalid length. [ 1222.156643][T22463] bond0: (slave netdevsim0): Releasing backup interface [ 1222.243685][T22463] device netdevsim0 left promiscuous mode [ 1222.365033][T22463] team0: Port device netdevsim0 added [ 1222.381612][T22477] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5869'. [ 1222.558682][T22469] netlink: 'syz.3.5865': attribute type 10 has an invalid length. [ 1222.604817][T22469] team0: Port device netdevsim0 removed [ 1222.671948][T22469] device netdevsim0 entered promiscuous mode [ 1222.694022][T22469] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1222.901755][T22477] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5869'. [ 1222.942445][T22477] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5869'. [ 1222.963761][T22475] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5869'. [ 1223.068336][T22477] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5869'. [ 1223.115093][T22482] netlink: 'syz.4.5871': attribute type 10 has an invalid length. [ 1223.338045][T22493] netlink: 'syz.3.5870': attribute type 10 has an invalid length. [ 1223.393721][T22493] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5870'. [ 1223.441730][T22493] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 1223.455537][T22493] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1223.489564][T22493] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 1223.831900][T22504] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5876'. [ 1224.179231][T22513] netlink: 'syz.2.5878': attribute type 39 has an invalid length. [ 1224.215018][T22512] netlink: 'syz.3.5880': attribute type 10 has an invalid length. [ 1224.519051][T22524] device veth0_macvtap left promiscuous mode [ 1224.855308][T22521] bond0: (slave netdevsim0): Releasing backup interface [ 1224.885833][T22521] device netdevsim0 left promiscuous mode [ 1224.916599][T22521] device netdevsim0 entered promiscuous mode [ 1224.927514][T22521] team0: Port device netdevsim0 added [ 1224.963343][T22528] device netdevsim0 left promiscuous mode [ 1225.028923][T22528] team0: Port device netdevsim0 removed [ 1225.053366][T22528] device netdevsim0 entered promiscuous mode [ 1225.060232][T22528] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1225.927666][T22548] __nla_validate_parse: 2 callbacks suppressed [ 1225.927689][T22548] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5891'. [ 1225.983791][T22548] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1226.651016][T22561] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5895'. [ 1226.805608][T22563] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5896'. [ 1226.956594][T22567] validate_nla: 6 callbacks suppressed [ 1226.956618][T22567] netlink: 'syz.0.5897': attribute type 39 has an invalid length. [ 1226.970393][T22570] netlink: 'syz.1.5898': attribute type 3 has an invalid length. [ 1226.995523][T22567] device veth0_macvtap left promiscuous mode [ 1227.004470][T22570] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5898'. [ 1227.177445][T22575] device sit0 left promiscuous mode [ 1227.367863][T22576] device sit0 entered promiscuous mode [ 1228.200984][T22578] netlink: 'syz.4.5902': attribute type 39 has an invalid length. [ 1228.621244][T22594] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5911'. [ 1228.647350][T22596] netlink: 'syz.2.5908': attribute type 10 has an invalid length. [ 1228.827530][T22607] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1228.995084][T22614] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5913'. [ 1229.993496][T22630] netlink: 'syz.4.5918': attribute type 39 has an invalid length. [ 1230.592250][T22642] netlink: 'syz.3.5920': attribute type 39 has an invalid length. [ 1230.608511][T22642] device veth0_macvtap left promiscuous mode [ 1230.766568][T22639] device sit0 entered promiscuous mode [ 1231.489186][T22651] netlink: 'syz.1.5923': attribute type 10 has an invalid length. [ 1231.530549][T22657] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5925'. [ 1231.782967][T22659] netlink: 'syz.3.5926': attribute type 10 has an invalid length. [ 1232.125015][T22659] bond0: (slave netdevsim0): Releasing backup interface [ 1232.429859][T22659] device netdevsim0 left promiscuous mode [ 1232.490829][T22659] team0: Port device netdevsim0 added [ 1232.509109][T22666] netlink: 'syz.3.5926': attribute type 10 has an invalid length. [ 1232.537984][T22666] team0: Port device netdevsim0 removed [ 1232.601332][T22666] device netdevsim0 entered promiscuous mode [ 1232.610597][T22666] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1232.626791][T22665] netlink: 'syz.1.5929': attribute type 6 has an invalid length. [ 1232.652835][T22665] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5929'. [ 1232.709506][T22672] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5932'. [ 1232.816201][T22678] netlink: 'syz.2.5933': attribute type 39 has an invalid length. [ 1232.849535][T22681] device veth1_macvtap entered promiscuous mode [ 1232.937636][T14501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1233.314138][T22695] device sit0 left promiscuous mode [ 1233.452092][T22699] device sit0 entered promiscuous mode [ 1234.334701][T22697] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5941'. [ 1234.366251][T22708] netlink: 'syz.0.5943': attribute type 4 has an invalid length. [ 1234.399391][T22708] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5943'. [ 1234.757305][T22720] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5947'. [ 1234.795059][T22716] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.5946'. [ 1234.979117][T22722] netlink: 'syz.2.5948': attribute type 10 has an invalid length. [ 1235.061121][T22725] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1235.766012][T22745] netlink: 'syz.2.5954': attribute type 39 has an invalid length. [ 1236.116065][T22757] device sit0 left promiscuous mode [ 1236.279381][T22756] netlink: 'syz.1.5955': attribute type 10 has an invalid length. [ 1236.363843][T22758] device sit0 entered promiscuous mode [ 1237.170595][T22768] netlink: 'syz.1.5959': attribute type 39 has an invalid length. [ 1237.307438][T22770] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5960'. [ 1237.537239][T22778] netlink: 'syz.3.5962': attribute type 10 has an invalid length. [ 1238.078873][T22784] netlink: 'syz.4.5966': attribute type 21 has an invalid length. [ 1238.103029][T22784] netlink: 'syz.4.5966': attribute type 1 has an invalid length. [ 1238.140156][T22788] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5967'. [ 1238.300111][T22795] netlink: 'syz.2.5970': attribute type 10 has an invalid length. [ 1238.578117][T22805] netlink: 'syz.0.5974': attribute type 39 has an invalid length. [ 1238.874530][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.880872][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.017003][T22809] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5976'. [ 1239.073912][T22818] device sit0 left promiscuous mode [ 1239.174743][T22820] device sit0 entered promiscuous mode [ 1240.092464][T22823] netlink: 'syz.4.5979': attribute type 10 has an invalid length. [ 1240.118599][T22827] netlink: 'syz.2.5980': attribute type 10 has an invalid length. [ 1240.349921][T22836] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5982'. [ 1240.564414][T22842] netlink: 'syz.2.5984': attribute type 21 has an invalid length. [ 1240.591390][T22842] netlink: 'syz.2.5984': attribute type 1 has an invalid length. [ 1240.625508][T22847] netlink: 'syz.1.5988': attribute type 39 has an invalid length. [ 1240.875350][T22856] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5992'. [ 1241.029418][T22864] device sit0 left promiscuous mode [ 1241.222248][T22864] device sit0 entered promiscuous mode [ 1242.789146][T22884] validate_nla: 3 callbacks suppressed [ 1242.789210][T22884] netlink: 'syz.3.6002': attribute type 39 has an invalid length. [ 1243.021416][T22893] netlink: 'syz.3.6006': attribute type 21 has an invalid length. [ 1243.121346][T22893] netlink: 'syz.3.6006': attribute type 1 has an invalid length. [ 1243.651530][T22913] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6009'. [ 1244.003359][T22922] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6012'. [ 1244.058974][T22924] netlink: 'syz.3.6014': attribute type 10 has an invalid length. [ 1244.974710][T22937] netlink: 'syz.1.6015': attribute type 3 has an invalid length. [ 1245.030309][T22937] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6015'. [ 1245.072235][T22934] netlink: 'syz.2.6016': attribute type 39 has an invalid length. [ 1245.917020][T22961] netlink: 'syz.0.6019': attribute type 21 has an invalid length. [ 1245.926835][T22961] netlink: 'syz.0.6019': attribute type 1 has an invalid length. [ 1245.938828][T22962] netlink: 'syz.3.6023': attribute type 39 has an invalid length. [ 1246.406189][T22977] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1246.443182][T22980] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6027'. [ 1246.671572][T22986] netlink: 'syz.4.6029': attribute type 39 has an invalid length. [ 1248.353760][T23025] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6042'. [ 1248.584442][T23032] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1248.810705][T23038] validate_nla: 1 callbacks suppressed [ 1248.810743][T23038] netlink: 'syz.2.6044': attribute type 10 has an invalid length. [ 1249.512961][T23058] netlink: 'syz.1.6051': attribute type 39 has an invalid length. [ 1250.386225][T23067] delete_channel: no stack [ 1250.391022][T23067] delete_channel: no stack [ 1250.528209][T23072] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6054'. [ 1251.032608][T23067] netlink: 'syz.0.6053': attribute type 29 has an invalid length. [ 1251.434916][T23067] netlink: 'syz.0.6053': attribute type 29 has an invalid length. [ 1251.968253][T23092] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1252.190402][T23099] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6059'. [ 1252.447966][T23107] netlink: 'syz.0.6061': attribute type 39 has an invalid length. [ 1252.704986][T23111] netlink: 'syz.2.6064': attribute type 10 has an invalid length. [ 1252.940892][T23119] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6067'. [ 1253.025048][T23123] netlink: 'syz.1.6068': attribute type 39 has an invalid length. [ 1253.275616][T23130] netlink: 'syz.3.6073': attribute type 10 has an invalid length. [ 1253.458289][T23133] netlink: 'syz.1.6085': attribute type 39 has an invalid length. [ 1253.504467][T23137] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1253.958767][T23150] netlink: 'syz.0.6078': attribute type 39 has an invalid length. [ 1254.200246][T23160] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6082'. [ 1254.250259][T23156] netlink: 'syz.3.6086': attribute type 10 has an invalid length. [ 1254.325354][T23162] netlink: 'syz.0.6087': attribute type 10 has an invalid length. [ 1254.455214][T23171] netlink: 'syz.1.6089': attribute type 39 has an invalid length. [ 1255.661805][T23195] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6097'. [ 1255.842927][T23199] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6099'. [ 1256.025615][T23207] netlink: 'syz.3.6102': attribute type 39 has an invalid length. [ 1256.042867][T23204] netlink: 'syz.0.6101': attribute type 10 has an invalid length. [ 1256.277028][T23210] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6103'. [ 1256.958658][T23229] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1257.266547][T23238] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6113'. [ 1257.683657][T23249] netlink: 'syz.2.6116': attribute type 39 has an invalid length. [ 1258.199866][T23257] delete_channel: no stack [ 1258.213231][T23257] delete_channel: no stack [ 1258.698876][T23264] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6122'. [ 1259.434481][T23283] netlink: 'syz.3.6130': attribute type 39 has an invalid length. [ 1259.637402][T23293] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6132'. [ 1259.792716][T23296] netlink: 'syz.3.6133': attribute type 39 has an invalid length. [ 1260.455303][T23313] netlink: 'syz.1.6141': attribute type 10 has an invalid length. [ 1260.562948][T23323] netlink: 'syz.0.6144': attribute type 39 has an invalid length. [ 1260.752067][T23326] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1260.990703][T23332] netlink: 'syz.0.6147': attribute type 39 has an invalid length. [ 1261.034763][T23329] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6146'. [ 1261.753058][T23356] netlink: 'syz.3.6157': attribute type 10 has an invalid length. [ 1261.941346][T23362] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1262.008823][T23363] netlink: 'syz.1.6158': attribute type 39 has an invalid length. [ 1262.366029][T23372] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6163'. [ 1262.634953][T23378] netlink: 'syz.0.6165': attribute type 39 has an invalid length. [ 1263.286415][T23398] netlink: 'syz.3.6174': attribute type 39 has an invalid length. [ 1263.328316][T23401] netlink: 'syz.0.6173': attribute type 10 has an invalid length. [ 1264.481279][T23440] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6187'. [ 1264.658095][T23444] netlink: 'syz.1.6188': attribute type 39 has an invalid length. [ 1265.008867][T23451] netlink: 'syz.1.6190': attribute type 10 has an invalid length. [ 1265.236444][T23460] delete_channel: no stack [ 1265.263190][T23460] delete_channel: no stack [ 1265.535272][T23463] netlink: 'syz.4.6193': attribute type 29 has an invalid length. [ 1265.586010][T23463] netlink: 'syz.4.6193': attribute type 29 has an invalid length. [ 1265.624580][T23465] netlink: 'syz.4.6193': attribute type 29 has an invalid length. [ 1265.664570][T23460] netlink: 'syz.4.6193': attribute type 29 has an invalid length. [ 1265.790810][T23460] netlink: 'syz.4.6193': attribute type 29 has an invalid length. [ 1266.937124][T23478] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6198'. [ 1267.099400][T23483] netlink: 'syz.2.6200': attribute type 39 has an invalid length. [ 1267.586223][T23498] netlink: 'syz.3.6207': attribute type 10 has an invalid length. [ 1268.395854][T23518] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6215'. [ 1268.555295][T23526] netlink: 'syz.4.6218': attribute type 39 has an invalid length. [ 1268.577206][T23524] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6217'. [ 1268.817217][T23535] syz.2.6222[23535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1268.817329][T23535] syz.2.6222[23535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1269.656868][T23566] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6234'. [ 1269.936702][T23580] validate_nla: 1 callbacks suppressed [ 1269.936739][T23580] netlink: 'syz.1.6241': attribute type 10 has an invalid length. [ 1272.160248][T23638] delete_channel: no stack [ 1272.203389][T23638] delete_channel: no stack [ 1272.572685][T23635] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6260'. [ 1272.858601][T23638] netlink: 'syz.1.6257': attribute type 29 has an invalid length. [ 1272.899806][T23638] netlink: 'syz.1.6257': attribute type 29 has an invalid length. [ 1272.915942][T23643] netlink: 'syz.1.6257': attribute type 29 has an invalid length. [ 1272.925423][T23645] netlink: 'syz.1.6257': attribute type 29 has an invalid length. [ 1272.948747][T23647] netlink: 'syz.1.6257': attribute type 29 has an invalid length. [ 1273.150736][T23654] netlink: 'syz.2.6265': attribute type 10 has an invalid length. [ 1273.233167][T23658] netlink: 'syz.0.6266': attribute type 10 has an invalid length. [ 1273.242783][T23658] device veth1_macvtap left promiscuous mode [ 1273.746078][T23675] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6273'. [ 1274.760119][T23683] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6275'. [ 1275.044820][T23693] netlink: 'syz.2.6280': attribute type 10 has an invalid length. [ 1275.450110][T23711] netlink: 'syz.4.6288': attribute type 10 has an invalid length. [ 1275.509113][T23715] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6290'. [ 1275.654708][T23718] netlink: 'syz.1.6291': attribute type 39 has an invalid length. [ 1275.790750][T23722] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6294'. [ 1275.926635][T23730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1275.934030][T23730] IPv6: NLM_F_CREATE should be set when creating new route [ 1275.941347][T23730] IPv6: NLM_F_CREATE should be set when creating new route [ 1275.948662][T23730] IPv6: NLM_F_CREATE should be set when creating new route [ 1276.446161][T23748] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6304'. [ 1276.955591][T23764] netlink: 'syz.1.6311': attribute type 39 has an invalid length. [ 1277.151124][T23772] netlink: 'syz.0.6323': attribute type 33 has an invalid length. [ 1277.647955][T23786] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6319'. [ 1278.099379][T23802] netlink: 'syz.0.6326': attribute type 10 has an invalid length. [ 1278.220073][T23806] netlink: 'syz.4.6328': attribute type 10 has an invalid length. [ 1278.786802][T23817] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1278.853098][T23817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1279.425730][T23824] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6335'. [ 1279.480011][T23827] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6336'. [ 1279.495944][T23832] netlink: 'syz.3.6337': attribute type 39 has an invalid length. [ 1280.045748][T23844] netlink: 'syz.2.6343': attribute type 10 has an invalid length. [ 1280.552615][T23864] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6352'. [ 1281.118578][T23888] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6360'. [ 1281.150041][T23887] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1281.171942][T23887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1281.248774][T23888] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6360'. [ 1281.286214][T23885] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6360'. [ 1281.760300][T23908] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6368'. [ 1281.995364][T23915] netlink: 'syz.2.6370': attribute type 39 has an invalid length. [ 1282.040675][T23912] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6369'. [ 1282.229379][T23926] sctp: [Deprecated]: syz.3.6377 (pid 23926) Use of int in maxseg socket option. [ 1282.229379][T23926] Use struct sctp_assoc_value instead [ 1282.376648][T23934] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6380'. [ 1282.735486][T23944] __nla_validate_parse: 1 callbacks suppressed [ 1282.735525][T23944] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6385'. [ 1282.971559][T23951] netlink: 'syz.0.6388': attribute type 39 has an invalid length. [ 1283.056711][T23957] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6392'. [ 1283.144494][T23956] netlink: 'syz.1.6391': attribute type 10 has an invalid length. [ 1283.397662][T23966] netlink: 'syz.2.6396': attribute type 29 has an invalid length. [ 1283.410047][T23966] netlink: 'syz.2.6396': attribute type 29 has an invalid length. [ 1283.421099][T23966] netlink: 'syz.2.6396': attribute type 29 has an invalid length. [ 1284.136231][T23984] netlink: 'syz.4.6403': attribute type 10 has an invalid length. [ 1284.433430][T23994] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6405'. [ 1284.458469][T23994] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6405'. [ 1284.481105][T23990] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6405'. [ 1284.762835][T24004] netlink: 'syz.3.6411': attribute type 10 has an invalid length. [ 1285.166999][T24019] netlink: 'syz.2.6418': attribute type 39 has an invalid length. [ 1285.221164][T24020] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6419'. [ 1285.460228][T24028] netlink: 'syz.2.6421': attribute type 10 has an invalid length. [ 1285.519694][T24032] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6423'. [ 1285.581600][T24032] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6423'. [ 1285.594630][T24031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6423'. [ 1286.385357][T24058] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6435'. [ 1287.322806][T24093] validate_nla: 2 callbacks suppressed [ 1287.322845][T24093] netlink: 'syz.2.6461': attribute type 10 has an invalid length. [ 1287.367762][T24098] netlink: 'syz.4.6452': attribute type 29 has an invalid length. [ 1287.387222][T24098] netlink: 'syz.4.6452': attribute type 29 has an invalid length. [ 1287.400615][T24098] netlink: 'syz.4.6452': attribute type 29 has an invalid length. [ 1287.624221][T24105] netlink: 'syz.4.6454': attribute type 39 has an invalid length. [ 1287.738229][T24108] netlink: 'syz.0.6455': attribute type 39 has an invalid length. [ 1287.980613][T24110] netlink: 'syz.4.6457': attribute type 10 has an invalid length. [ 1288.436776][T24129] netlink: 'syz.1.6466': attribute type 10 has an invalid length. [ 1289.433272][T24163] netlink: 'syz.0.6483': attribute type 10 has an invalid length. [ 1289.470026][T24166] netlink: 'syz.3.6482': attribute type 39 has an invalid length. [ 1290.350404][T24203] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6497'. [ 1290.369978][T24203] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6497'. [ 1290.410813][T24199] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6497'. [ 1291.242584][T24240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6515'. [ 1291.261366][T24240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6515'. [ 1291.281151][T24238] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6515'. [ 1292.598170][T24292] validate_nla: 8 callbacks suppressed [ 1292.598189][T24292] netlink: 'syz.2.6537': attribute type 39 has an invalid length. [ 1293.201963][T24320] netlink: 'syz.2.6552': attribute type 2 has an invalid length. [ 1293.223167][T24320] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6552'. [ 1293.425934][T24331] netlink: 'syz.3.6557': attribute type 10 has an invalid length. [ 1293.679019][T24340] netlink: 'syz.1.6563': attribute type 9 has an invalid length. [ 1293.720143][T24340] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.6563'. [ 1294.580666][T24375] netlink: 'syz.2.6574': attribute type 9 has an invalid length. [ 1294.605361][T24375] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.6574'. [ 1294.891449][T24385] netlink: 'syz.3.6579': attribute type 10 has an invalid length. [ 1295.157629][T24391] netlink: 'syz.1.6582': attribute type 10 has an invalid length. [ 1295.353168][T24396] netlink: 'syz.2.6584': attribute type 39 has an invalid length. [ 1295.582246][T24410] netlink: 'syz.3.6589': attribute type 9 has an invalid length. [ 1295.597282][T24410] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.6589'. [ 1295.786459][T24416] netlink: 'syz.4.6593': attribute type 39 has an invalid length. [ 1296.400909][T24441] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6605'. [ 1297.764455][T24468] validate_nla: 4 callbacks suppressed [ 1297.764489][T24468] netlink: 'syz.2.6616': attribute type 39 has an invalid length. [ 1297.979730][T24479] netlink: 'syz.3.6623': attribute type 29 has an invalid length. [ 1298.044036][T24479] netlink: 'syz.3.6623': attribute type 29 has an invalid length. [ 1298.072734][T24480] netlink: 'syz.3.6623': attribute type 29 has an invalid length. [ 1298.158903][T24488] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6625'. [ 1298.494431][T24499] netlink: 'syz.1.6630': attribute type 10 has an invalid length. [ 1298.516543][T24505] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6631'. [ 1298.553467][T24505] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6631'. [ 1298.692555][T24501] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6631'. [ 1298.967558][T24514] netlink: 'syz.1.6636': attribute type 39 has an invalid length. [ 1299.291026][T24521] netlink: 'syz.1.6639': attribute type 29 has an invalid length. [ 1299.322690][T24521] netlink: 'syz.1.6639': attribute type 29 has an invalid length. [ 1299.371542][T24528] netlink: 'syz.1.6639': attribute type 29 has an invalid length. [ 1299.526612][T24533] netlink: 'syz.2.6644': attribute type 29 has an invalid length. [ 1299.790313][T24548] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6648'. [ 1299.850908][T24548] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6648'. [ 1299.868599][T24545] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6648'. [ 1300.322524][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.329177][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.375764][T24567] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6657'. [ 1300.546615][T24573] IPv6: Can't replace route, no match found [ 1303.256798][T14491] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.377489][T14491] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.453913][T14491] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.587554][T14491] bond0: (slave netdevsim0): Releasing backup interface [ 1303.599032][T14491] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.227448][T14491] GPL: port 1(erspan0) entered disabled state [ 1304.248971][T14491] device erspan0 left promiscuous mode [ 1304.255320][T14491] GPL: port 1(erspan0) entered disabled state [ 1304.826071][T14491] bond0: (slave wlan1): Releasing backup interface [ 1305.070815][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1305.079332][T14491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.092516][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1305.099969][T14491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.297402][T14491] device geneve1 left promiscuous mode [ 1305.309735][T14491] team0 (unregistering): Port device geneve1 removed [ 1305.574993][T14491] device team_slave_1 left promiscuous mode [ 1305.582454][T14491] team0 (unregistering): Port device team_slave_1 removed [ 1305.630523][T14491] device team_slave_0 left promiscuous mode [ 1305.638079][T14491] team0 (unregistering): Port device team_slave_0 removed [ 1305.679294][T14491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.858760][T14491] device batadv0 left promiscuous mode [ 1305.866947][T14491] team0 (unregistering): Port device batadv0 removed [ 1306.116325][T14491] bond0 (unregistering): Released all slaves [ 1306.701098][T14491] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.777178][T14491] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.829983][T14491] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.890657][T14491] bond0: (slave netdevsim0): Releasing backup interface [ 1306.901638][T14491] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.059924][T14491] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.120990][T14491] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.182805][T14491] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.246926][T14491] bond0: (slave netdevsim0): Releasing backup interface [ 1307.258159][T14491] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.398458][T14491] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.475391][T14491] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.545599][T14491] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.608818][T14491] bond0: (slave netdevsim0): Releasing backup interface [ 1307.622512][T14491] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.771846][T14491] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.833349][T14491] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.891499][T14491] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.980598][T14491] bond0: (slave netdevsim0): Releasing backup interface [ 1307.995508][T14491] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.256108][T14491] GPL: port 1(erspan0) entered disabled state [ 1309.319290][T14491] device erspan0 left promiscuous mode [ 1309.325006][T14491] GPL: port 1(erspan0) entered disabled state [ 1309.953825][T14491] bond0: (slave wlan1): Releasing backup interface [ 1310.852776][T14491] bond0: (slave wlan1): Releasing backup interface [ 1311.335630][T14491] bond0: (slave wlan1): Releasing backup interface [ 1311.523737][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1311.531648][T14491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.543264][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.550775][T14491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.562976][T14491] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1311.570177][T14491] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1311.584388][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1311.591857][T14491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.603633][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.611090][T14491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.620554][T14491] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1311.629191][T14491] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1312.254529][T14491] team0 (unregistering): Port device team_slave_1 removed [ 1312.293527][T14491] team0 (unregistering): Port device team_slave_0 removed [ 1312.332017][T14491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface