last executing test programs: 11m21.928188972s ago: executing program 0 (id=860): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000f80)=ANY=[@ANYBLOB='b *:* rmw'], 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 11m21.805941864s ago: executing program 2 (id=862): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x3f00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a210, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0xfe33) 11m20.207823755s ago: executing program 0 (id=867): syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x21, 0x19eaf300, 0x3, 0x9, 0x61012, 0xffffffffffffffff, 0x1a3a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 11m19.737544887s ago: executing program 2 (id=868): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a", 0x23}], 0x1}, 0x24000000) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x21, 0x19eaf300, 0x3, 0x9, 0x61012, 0xffffffffffffffff, 0x1a3a, '\x00', r4, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 11m17.207178801s ago: executing program 0 (id=869): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x3f00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a210, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0xfe33) 11m16.185920447s ago: executing program 2 (id=872): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r0 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2, &(0x7f0000001dc0)=""/176, 0xb0}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000800)="f43b", 0x2}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x894b, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x2}) ioctl$TUNGETVNETHDRSZ(r5, 0x400454cc, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x5, 0xa, 0x7, 0x7, 0x0, 0x0, 0x4000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x8f7}, 0x4000, 0x1, 0x0, 0x8, 0x5, 0xa800, 0xff, 0x0, 0x3d98, 0x0, 0x3113}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000014000000000000000000000002", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1400"}) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x4, 0x8, 0x8, 0x4, 0x0, 0x3, 0x33200, 0x15, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140), 0x8}, 0x287, 0x0, 0x5, 0x9, 0x5, 0xffffff75, 0x7, 0x0, 0xffffffff, 0x0, 0x1000}, 0x0, 0xd, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xc5}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x11}, 0x94) 11m13.588518303s ago: executing program 0 (id=875): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000f80)=ANY=[@ANYBLOB='b *:* rmw'], 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 11m13.411949457s ago: executing program 2 (id=877): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000f80)=ANY=[@ANYBLOB='b *:* rmw'], 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 11m11.476272957s ago: executing program 2 (id=879): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x3f00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a210, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) 11m11.403020528s ago: executing program 0 (id=880): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x8000032, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x2cd, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c030002180000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x16, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66ff", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000800007910000000000000c303e0ff0000000095"], &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0x0, 0xfffffffffffffe99}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x891c, 0x0) 11m8.000525265s ago: executing program 2 (id=884): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x3f00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a210, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0xfe33) 11m7.717322972s ago: executing program 0 (id=886): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x3f00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a210, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) 10m52.573550256s ago: executing program 32 (id=886): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x3f00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a210, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) 10m52.477906078s ago: executing program 33 (id=884): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x3f00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a210, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0xfe33) 31.60595404s ago: executing program 1 (id=3185): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000340), &(0x7f0000000140)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc54}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000001f00)=""/4083, 0x0, 0xff3, 0x3}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0xc, 0x3, 0x7, 0xc1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r4, &(0x7f0000000080)="d510e438881c57c9aaa6b7ad", 0x0}, 0x20) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 30.093921707s ago: executing program 1 (id=3188): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x87}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffc}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7a, 0x9c}, [@call={0x25, 0x0, 0x0, 0x98000000}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c}, 0x3f) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0x28040, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x180a2, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000002000000000000000000000007f00000000000000180000000000002000000000000000009500000000000000540300000400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x2}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100"], 0x48) r3 = socket$kcm(0xa, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) 29.067143853s ago: executing program 1 (id=3194): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c31630100000000000000b52f0d6086e274aa97a91fa46cdcefe7534fda04ca542b4c4904446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238403007cb9806b9641253a7b99504c950fcba378fae7ec90b6da825996012194da80cc7621803fe840ccedca203b30524e6258edbfe64d0900cdf79924bfb82ad5cfe25853d4f3a2841f7d7e692bfb1387c1211d00d4cace5a0ae3fad859bc7cb33f20922abe3780b6d07d9dde639e27dc79daef403b188d618ab4928773db8f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 28.482092208s ago: executing program 1 (id=3196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x500}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 25.745353356s ago: executing program 1 (id=3203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000380)={'pim6reg0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 19.266307348s ago: executing program 1 (id=3213): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 19.19588448s ago: executing program 4 (id=3214): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0x109}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x2100000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.278264338s ago: executing program 5 (id=3227): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffffb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.294893713s ago: executing program 5 (id=3228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) 4.901090448s ago: executing program 4 (id=3232): syz_clone(0x40005100, 0x0, 0x0, 0x0, 0x0, 0x0) 4.858225789s ago: executing program 3 (id=3239): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0x109}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x2100000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.060758364s ago: executing program 4 (id=3233): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000071c05"], 0x30}, 0x7e8166965e22236a) 3.060613494s ago: executing program 5 (id=3234): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000001100000008"], 0x50) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000100), 0x5042) 3.058165824s ago: executing program 3 (id=3235): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.888367728s ago: executing program 4 (id=3236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}, 0x1010, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x97e, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2.768754841s ago: executing program 5 (id=3237): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) 2.642863214s ago: executing program 5 (id=3238): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90e", 0x11}], 0x1}, 0x0) 2.566411226s ago: executing program 3 (id=3240): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x13, 0x0, 0x0, 0x900}, 0x0) 2.218480075s ago: executing program 5 (id=3241): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0x109}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x2100000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.218244944s ago: executing program 3 (id=3242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) 2.139340446s ago: executing program 4 (id=3243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffcd, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1.975564681s ago: executing program 4 (id=3244): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x1000000000010009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x3, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x2, 0x80, 0x59, 0x2, 0x8, 0x8, 0x0, 0x8, 0x80800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd, 0x4, @perf_config_ext={0x861, 0x4ad}, 0x481, 0x0, 0x0, 0x5, 0x8, 0x10000, 0x10, 0x0, 0x3, 0x0, 0xded}) 377.050951ms ago: executing program 3 (id=3245): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32=0x0], 0x48) 0s ago: executing program 3 (id=3246): close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc1100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): rsing attributes in process `syz.1.1828'. [ 649.581184][T11509] netlink: 'syz.4.1830': attribute type 3 has an invalid length. [ 649.593229][T11509] netlink: 'syz.4.1830': attribute type 1 has an invalid length. [ 650.272017][ T1086] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 651.319198][T11542] netlink: 'syz.1.1843': attribute type 3 has an invalid length. [ 651.343228][T11542] netlink: 'syz.1.1843': attribute type 1 has an invalid length. [ 652.786223][T11579] netlink: 'syz.1.1856': attribute type 3 has an invalid length. [ 652.819380][T11579] netlink: 'syz.1.1856': attribute type 1 has an invalid length. [ 652.848231][T11579] __nla_validate_parse: 10 callbacks suppressed [ 652.848269][T11579] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1856'. [ 653.804498][T11608] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.1865'. [ 653.817717][T11608] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.1865'. [ 654.272203][T11617] netlink: 'syz.1.1869': attribute type 3 has an invalid length. [ 654.295548][T11617] netlink: 'syz.1.1869': attribute type 1 has an invalid length. [ 654.304237][T11617] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1869'. [ 654.691495][T11622] netlink: 'syz.4.1880': attribute type 3 has an invalid length. [ 654.740482][T11622] netlink: 'syz.4.1880': attribute type 1 has an invalid length. [ 654.867921][T11622] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.1880'. [ 655.590911][T11637] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 656.462411][T11660] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1883'. [ 656.478716][T11660] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.1883'. [ 656.749723][T11665] netlink: 'syz.4.1887': attribute type 3 has an invalid length. [ 656.904443][T11665] netlink: 'syz.4.1887': attribute type 1 has an invalid length. [ 656.912627][T11665] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.1887'. [ 658.333045][T11691] netlink: 'syz.5.1896': attribute type 3 has an invalid length. [ 658.341276][T11691] netlink: 'syz.5.1896': attribute type 1 has an invalid length. [ 658.456887][T11691] netlink: 191376 bytes leftover after parsing attributes in process `syz.5.1896'. [ 658.708009][T11703] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.1900'. [ 658.737034][T11703] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.1900'. [ 659.695798][T11716] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 659.787458][T11723] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 660.046372][T11726] netlink: 'syz.3.1909': attribute type 3 has an invalid length. [ 660.074950][T11726] netlink: 'syz.3.1909': attribute type 1 has an invalid length. [ 660.123088][T11726] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.1909'. [ 661.062291][T11751] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.1916'. [ 661.081064][T11751] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.1916'. [ 661.797547][T11758] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 662.362260][T11771] netlink: 'syz.4.1922': attribute type 3 has an invalid length. [ 662.370249][T11771] netlink: 'syz.4.1922': attribute type 1 has an invalid length. [ 662.379324][T11771] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.1922'. [ 663.805132][T11795] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1932'. [ 663.869818][T11795] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1932'. [ 663.891566][T11794] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 664.382929][T11799] netlink: 'syz.4.1934': attribute type 3 has an invalid length. [ 664.447082][T11799] netlink: 'syz.4.1934': attribute type 1 has an invalid length. [ 664.499163][T11799] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.1934'. [ 665.316911][T11816] netlink: 'syz.4.1946': attribute type 3 has an invalid length. [ 665.364383][T11816] netlink: 'syz.4.1946': attribute type 1 has an invalid length. [ 665.423213][T11816] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.1946'. [ 666.275138][T11838] netlink: 'syz.4.1952': attribute type 3 has an invalid length. [ 666.356711][T11838] netlink: 'syz.4.1952': attribute type 1 has an invalid length. [ 666.396754][T11838] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.1952'. [ 666.775840][T11853] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.1945'. [ 666.829709][T11853] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.1945'. [ 668.287189][T11878] netlink: 'syz.1.1957': attribute type 3 has an invalid length. [ 668.317784][T11878] netlink: 'syz.1.1957': attribute type 1 has an invalid length. [ 668.349599][T11878] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1957'. [ 668.751747][T11881] netlink: 'syz.4.1958': attribute type 3 has an invalid length. [ 668.833416][T11881] netlink: 'syz.4.1958': attribute type 1 has an invalid length. [ 668.842263][T11881] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.1958'. [ 669.403632][T11896] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.1962'. [ 669.416845][T11896] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.1962'. [ 670.222291][T11911] netlink: 'syz.3.1969': attribute type 3 has an invalid length. [ 670.323323][T11911] netlink: 'syz.3.1969': attribute type 1 has an invalid length. [ 670.331698][T11911] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1969'. [ 670.535080][T11916] netlink: 'syz.4.1970': attribute type 10 has an invalid length. [ 670.582192][T11916] netlink: 'syz.4.1970': attribute type 9 has an invalid length. [ 670.593208][T11916] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1970'. [ 670.967845][T11918] netlink: 'syz.1.1972': attribute type 3 has an invalid length. [ 670.990419][T11918] netlink: 'syz.1.1972': attribute type 1 has an invalid length. [ 671.016151][T11918] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1972'. [ 672.070906][T11946] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1980'. [ 672.121257][T11946] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.1980'. [ 672.156104][T11951] netlink: 'syz.5.1983': attribute type 10 has an invalid length. [ 672.210021][T11951] netlink: 'syz.5.1983': attribute type 9 has an invalid length. [ 672.240222][T11951] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1983'. [ 672.240261][T11949] netlink: 'syz.4.1981': attribute type 3 has an invalid length. [ 672.293007][T11949] netlink: 'syz.4.1981': attribute type 1 has an invalid length. [ 672.311011][T11949] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1981'. [ 672.594616][T11959] netlink: 'syz.1.1984': attribute type 3 has an invalid length. [ 672.984480][T11961] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 672.999372][T11961] CPU: 1 PID: 11961 Comm: syz.4.1986 Not tainted syzkaller #0 [ 673.007240][T11961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 673.017441][T11961] Call Trace: [ 673.020951][T11961] [ 673.023948][T11961] dump_stack_lvl+0x18c/0x250 [ 673.029134][T11961] ? show_regs_print_info+0x20/0x20 [ 673.035370][T11961] ? load_image+0x420/0x420 [ 673.040184][T11961] sysfs_warn_dup+0x8e/0xa0 [ 673.044772][T11961] sysfs_do_create_link_sd+0xc0/0x110 [ 673.050213][T11961] device_add_class_symlinks+0x1cf/0x240 [ 673.056014][T11961] device_add+0x4f9/0xc40 [ 673.060500][T11961] wiphy_register+0x1d99/0x2ac0 [ 673.065441][T11961] ? cfg80211_event_work+0x40/0x40 [ 673.070624][T11961] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 673.077757][T11961] ieee80211_register_hw+0x2dd8/0x3b30 [ 673.083342][T11961] ? ieee80211_register_hw+0xfb1/0x3b30 [ 673.088966][T11961] ? ieee80211_tasklet_handler+0x20/0x20 [ 673.094737][T11961] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 673.100816][T11961] ? __debug_object_init+0xec/0x450 [ 673.106354][T11961] ? __asan_memset+0x22/0x40 [ 673.111030][T11961] ? __hrtimer_init+0x189/0x270 [ 673.115938][T11961] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 673.121814][T11961] ? mac80211_hwsim_free+0x220/0x220 [ 673.127264][T11961] ? rcu_is_watching+0x15/0xb0 [ 673.132109][T11961] ? kstrndup+0xbd/0x140 [ 673.136495][T11961] hwsim_new_radio_nl+0xdad/0x1a70 [ 673.141654][T11961] ? __nla_validate+0x50/0x50 [ 673.146383][T11961] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 673.152939][T11961] ? __nla_parse+0x40/0x50 [ 673.157399][T11961] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 673.164026][T11961] genl_family_rcv_msg_doit+0x21a/0x310 [ 673.169597][T11961] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 673.175514][T11961] ? bpf_lsm_capable+0x9/0x10 [ 673.180220][T11961] ? security_capable+0x89/0xb0 [ 673.185210][T11961] genl_rcv_msg+0x611/0x7a0 [ 673.189935][T11961] ? genl_bind+0x360/0x360 [ 673.194487][T11961] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 673.201239][T11961] netlink_rcv_skb+0x235/0x4c0 [ 673.206031][T11961] ? genl_bind+0x360/0x360 [ 673.210500][T11961] ? netlink_ack+0x1160/0x1160 [ 673.215372][T11961] ? __lock_acquire+0x7d80/0x7d80 [ 673.220423][T11961] ? down_read+0x1ac/0x2e0 [ 673.224858][T11961] genl_rcv+0x28/0x40 [ 673.228875][T11961] netlink_unicast+0x7b1/0x930 [ 673.233675][T11961] netlink_sendmsg+0x8d0/0xbf0 [ 673.238479][T11961] ? lockdep_hardirqs_on+0x98/0x150 [ 673.243700][T11961] ? netlink_getsockopt+0x590/0x590 [ 673.248921][T11961] ? netlink_getsockopt+0x590/0x590 [ 673.254240][T11961] ____sys_sendmsg+0x61b/0x980 [ 673.259032][T11961] ? __asan_memset+0x22/0x40 [ 673.263749][T11961] ? __sys_sendmsg_sock+0x30/0x30 [ 673.268877][T11961] ? __import_iovec+0x5f2/0x850 [ 673.273953][T11961] ? import_iovec+0x73/0xa0 [ 673.278577][T11961] ___sys_sendmsg+0x2a6/0x360 [ 673.283294][T11961] ? __sys_sendmsg+0x2b0/0x2b0 [ 673.288119][T11961] __se_sys_sendmsg+0x1d0/0x2c0 [ 673.292997][T11961] ? __x64_sys_sendmsg+0x80/0x80 [ 673.297966][T11961] ? syscall_enter_from_user_mode+0x2e/0x80 [ 673.303893][T11961] do_syscall_64+0x55/0xb0 [ 673.308409][T11961] ? clear_bhb_loop+0x40/0x90 [ 673.313114][T11961] ? clear_bhb_loop+0x40/0x90 [ 673.318529][T11961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 673.324471][T11961] RIP: 0033:0x7f6b8f19e0d9 [ 673.328934][T11961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.348671][T11961] RSP: 002b:00007f6b900a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.358001][T11961] RAX: ffffffffffffffda RBX: 00007f6b8f425fa0 RCX: 00007f6b8f19e0d9 [ 673.366014][T11961] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 673.374105][T11961] RBP: 00007f6b8f235024 R08: 0000000000000000 R09: 0000000000000000 [ 673.382104][T11961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.390132][T11961] R13: 00007f6b8f426038 R14: 00007f6b8f425fa0 R15: 00007fff7d6836e8 [ 673.398145][T11961] [ 674.465301][T11991] __nla_validate_parse: 2 callbacks suppressed [ 674.465339][T11991] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1996'. [ 674.767332][T12004] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.1998'. [ 674.797433][T12004] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.1998'. [ 675.125519][T11999] netlink: 137972 bytes leftover after parsing attributes in process `syz.4.2005'. [ 675.424665][T12009] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2001'. [ 675.542341][T12009] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 675.551883][T12009] CPU: 0 PID: 12009 Comm: syz.3.2001 Not tainted syzkaller #0 [ 675.559510][T12009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 675.569615][T12009] Call Trace: [ 675.572928][T12009] [ 675.576062][T12009] dump_stack_lvl+0x18c/0x250 [ 675.580812][T12009] ? show_regs_print_info+0x20/0x20 [ 675.586080][T12009] ? load_image+0x420/0x420 [ 675.590688][T12009] sysfs_warn_dup+0x8e/0xa0 [ 675.595247][T12009] sysfs_do_create_link_sd+0xc0/0x110 [ 675.600657][T12009] device_add_class_symlinks+0x1cf/0x240 [ 675.606503][T12009] device_add+0x4f9/0xc40 [ 675.610855][T12009] wiphy_register+0x1d99/0x2ac0 [ 675.615744][T12009] ? cfg80211_event_work+0x40/0x40 [ 675.620869][T12009] ? minstrel_ht_alloc+0x88a/0x990 [ 675.626418][T12009] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 675.632549][T12009] ieee80211_register_hw+0x2dd8/0x3b30 [ 675.638057][T12009] ? ieee80211_register_hw+0xfb1/0x3b30 [ 675.643670][T12009] ? ieee80211_tasklet_handler+0x20/0x20 [ 675.649321][T12009] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 675.655243][T12009] ? __debug_object_init+0xec/0x450 [ 675.660469][T12009] ? __asan_memset+0x22/0x40 [ 675.665087][T12009] ? __hrtimer_init+0x189/0x270 [ 675.669971][T12009] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 675.675851][T12009] ? mac80211_hwsim_free+0x220/0x220 [ 675.681315][T12009] ? rcu_is_watching+0x15/0xb0 [ 675.686196][T12009] ? kstrndup+0xbd/0x140 [ 675.690654][T12009] hwsim_new_radio_nl+0xdad/0x1a70 [ 675.695907][T12009] ? __nla_validate+0x50/0x50 [ 675.700925][T12009] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 675.708286][T12009] ? __nla_parse+0x40/0x50 [ 675.712991][T12009] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 675.719554][T12009] genl_family_rcv_msg_doit+0x21a/0x310 [ 675.725412][T12009] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 675.731384][T12009] ? bpf_lsm_capable+0x9/0x10 [ 675.736375][T12009] ? security_capable+0x89/0xb0 [ 675.741383][T12009] genl_rcv_msg+0x611/0x7a0 [ 675.746113][T12009] ? genl_bind+0x360/0x360 [ 675.751198][T12009] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 675.758006][T12009] ? mark_lock+0x94/0x320 [ 675.762367][T12009] netlink_rcv_skb+0x235/0x4c0 [ 675.767155][T12009] ? genl_bind+0x360/0x360 [ 675.771621][T12009] ? netlink_ack+0x1160/0x1160 [ 675.776417][T12009] ? down_read+0x61/0x2e0 [ 675.780782][T12009] ? down_read+0x1ac/0x2e0 [ 675.785222][T12009] genl_rcv+0x28/0x40 [ 675.789223][T12009] netlink_unicast+0x7b1/0x930 [ 675.794579][T12009] netlink_sendmsg+0x8d0/0xbf0 [ 675.800212][T12009] ? apparmor_socket_sendmsg+0x8e/0x330 [ 675.805798][T12009] ? netlink_getsockopt+0x590/0x590 [ 675.811534][T12009] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 675.817102][T12009] ? apparmor_socket_sendmsg+0x8e/0x330 [ 675.823211][T12009] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 675.828604][T12009] ? security_socket_sendmsg+0x80/0xa0 [ 675.834182][T12009] ? netlink_getsockopt+0x590/0x590 [ 675.839633][T12009] ____sys_sendmsg+0x61b/0x980 [ 675.844473][T12009] ? __asan_memset+0x22/0x40 [ 675.849115][T12009] ? __sys_sendmsg_sock+0x30/0x30 [ 675.854285][T12009] ? __import_iovec+0x5f2/0x850 [ 675.859177][T12009] ? import_iovec+0x73/0xa0 [ 675.864487][T12009] ___sys_sendmsg+0x2a6/0x360 [ 675.869275][T12009] ? __sys_sendmsg+0x2b0/0x2b0 [ 675.874209][T12009] __se_sys_sendmsg+0x1d0/0x2c0 [ 675.879076][T12009] ? perf_trace_preemptirq_template+0x269/0x330 [ 675.886672][T12009] ? __x64_sys_sendmsg+0x80/0x80 [ 675.891969][T12009] ? lockdep_hardirqs_on+0x98/0x150 [ 675.897242][T12009] do_syscall_64+0x55/0xb0 [ 675.901720][T12009] ? clear_bhb_loop+0x40/0x90 [ 675.906536][T12009] ? clear_bhb_loop+0x40/0x90 [ 675.911453][T12009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 675.917821][T12009] RIP: 0033:0x7f565259e0d9 [ 675.922432][T12009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.942627][T12009] RSP: 002b:00007f5653451028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.951356][T12009] RAX: ffffffffffffffda RBX: 00007f5652825fa0 RCX: 00007f565259e0d9 [ 675.959932][T12009] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 675.968653][T12009] RBP: 00007f5652635024 R08: 0000000000000000 R09: 0000000000000000 [ 675.976666][T12009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.984661][T12009] R13: 00007f5652826038 R14: 00007f5652825fa0 R15: 00007ffe71640c28 [ 675.992693][T12009] [ 677.563858][T12043] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2012'. [ 677.593716][T12043] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.2012'. [ 677.654977][T12037] validate_nla: 4 callbacks suppressed [ 677.655015][T12037] netlink: 'syz.4.2011': attribute type 3 has an invalid length. [ 677.674420][T12037] netlink: 'syz.4.2011': attribute type 1 has an invalid length. [ 677.684184][T12037] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2011'. [ 677.955818][T12045] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2013'. [ 678.216965][T12045] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 678.253235][T12045] CPU: 1 PID: 12045 Comm: syz.5.2013 Not tainted syzkaller #0 [ 678.261146][T12045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 678.271342][T12045] Call Trace: [ 678.275032][T12045] [ 678.277989][T12045] dump_stack_lvl+0x18c/0x250 [ 678.282710][T12045] ? show_regs_print_info+0x20/0x20 [ 678.287964][T12045] ? load_image+0x420/0x420 [ 678.292519][T12045] sysfs_warn_dup+0x8e/0xa0 [ 678.297052][T12045] sysfs_do_create_link_sd+0xc0/0x110 [ 678.302459][T12045] device_add_class_symlinks+0x1cf/0x240 [ 678.308131][T12045] device_add+0x4f9/0xc40 [ 678.312502][T12045] wiphy_register+0x1d99/0x2ac0 [ 678.317593][T12045] ? __rtnl_unlock+0x18/0xe0 [ 678.322384][T12045] ? cfg80211_event_work+0x40/0x40 [ 678.327557][T12045] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 678.333796][T12045] ieee80211_register_hw+0x2dd8/0x3b30 [ 678.339328][T12045] ? ieee80211_register_hw+0xfb1/0x3b30 [ 678.344986][T12045] ? ieee80211_tasklet_handler+0x20/0x20 [ 678.350680][T12045] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 678.356724][T12045] ? __debug_object_init+0xec/0x450 [ 678.361980][T12045] ? __asan_memset+0x22/0x40 [ 678.366625][T12045] ? __hrtimer_init+0x189/0x270 [ 678.371541][T12045] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 678.377355][T12045] ? mac80211_hwsim_free+0x220/0x220 [ 678.382690][T12045] ? rcu_is_watching+0x15/0xb0 [ 678.387535][T12045] ? kstrndup+0xbd/0x140 [ 678.391810][T12045] hwsim_new_radio_nl+0xdad/0x1a70 [ 678.396975][T12045] ? __nla_validate+0x50/0x50 [ 678.401688][T12045] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 678.408064][T12045] ? __nla_parse+0x24/0x50 [ 678.412518][T12045] ? __nla_parse+0x40/0x50 [ 678.416961][T12045] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 678.423550][T12045] genl_family_rcv_msg_doit+0x21a/0x310 [ 678.429502][T12045] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 678.435455][T12045] ? bpf_lsm_capable+0x9/0x10 [ 678.440852][T12045] ? security_capable+0x89/0xb0 [ 678.445728][T12045] genl_rcv_msg+0x611/0x7a0 [ 678.450266][T12045] ? genl_bind+0x360/0x360 [ 678.454706][T12045] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 678.461053][T12045] ? perf_trace_lock+0xfc/0x3b0 [ 678.465983][T12045] netlink_rcv_skb+0x235/0x4c0 [ 678.470786][T12045] ? genl_bind+0x360/0x360 [ 678.475224][T12045] ? netlink_ack+0x1160/0x1160 [ 678.480198][T12045] ? __lock_acquire+0x7d80/0x7d80 [ 678.485333][T12045] ? down_read+0x1ac/0x2e0 [ 678.489781][T12045] genl_rcv+0x28/0x40 [ 678.493782][T12045] netlink_unicast+0x7b1/0x930 [ 678.498669][T12045] netlink_sendmsg+0x8d0/0xbf0 [ 678.503714][T12045] ? netlink_getsockopt+0x590/0x590 [ 678.509015][T12045] ? apparmor_socket_sendmsg+0x8e/0x330 [ 678.514863][T12045] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 678.520267][T12045] ? security_socket_sendmsg+0x80/0xa0 [ 678.525742][T12045] ? netlink_getsockopt+0x590/0x590 [ 678.531148][T12045] ____sys_sendmsg+0x61b/0x980 [ 678.535936][T12045] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 678.542315][T12045] ? __asan_memset+0x22/0x40 [ 678.547659][T12045] ? __sys_sendmsg_sock+0x30/0x30 [ 678.552906][T12045] ? __import_iovec+0x5f2/0x850 [ 678.557799][T12045] ? import_iovec+0x73/0xa0 [ 678.562415][T12045] ___sys_sendmsg+0x2a6/0x360 [ 678.567153][T12045] ? __sys_sendmsg+0x2b0/0x2b0 [ 678.572416][T12045] __se_sys_sendmsg+0x1d0/0x2c0 [ 678.577428][T12045] ? __x64_sys_sendmsg+0x80/0x80 [ 678.582411][T12045] ? syscall_enter_from_user_mode+0x2e/0x80 [ 678.588341][T12045] do_syscall_64+0x55/0xb0 [ 678.592773][T12045] ? clear_bhb_loop+0x40/0x90 [ 678.597505][T12045] ? clear_bhb_loop+0x40/0x90 [ 678.602222][T12045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.608951][T12045] RIP: 0033:0x7fc25119e0d9 [ 678.613410][T12045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.633138][T12045] RSP: 002b:00007fc252097028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.641581][T12045] RAX: ffffffffffffffda RBX: 00007fc251425fa0 RCX: 00007fc25119e0d9 [ 678.649660][T12045] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 678.657652][T12045] RBP: 00007fc251235024 R08: 0000000000000000 R09: 0000000000000000 [ 678.665639][T12045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.673712][T12045] R13: 00007fc251426038 R14: 00007fc251425fa0 R15: 00007ffc13f9eeb8 [ 678.682884][T12045] [ 679.054942][T12059] netlink: 'syz.3.2017': attribute type 3 has an invalid length. [ 679.069761][T12059] netlink: 'syz.3.2017': attribute type 1 has an invalid length. [ 679.078908][T12059] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2017'. [ 679.449342][T12065] netlink: 'syz.5.2020': attribute type 10 has an invalid length. [ 679.496505][T12065] netlink: 'syz.5.2020': attribute type 9 has an invalid length. [ 679.512883][T12065] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2020'. [ 680.110193][T12082] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2026'. [ 680.142861][T12082] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.2026'. [ 680.158471][T12071] netlink: 'syz.3.2022': attribute type 3 has an invalid length. [ 680.197379][T12071] netlink: 'syz.3.2022': attribute type 1 has an invalid length. [ 680.209616][T12071] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2022'. [ 680.260775][T12078] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2025'. [ 680.423364][T12078] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 680.444647][T12078] CPU: 0 PID: 12078 Comm: syz.5.2025 Not tainted syzkaller #0 [ 680.452214][T12078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 680.462659][T12078] Call Trace: [ 680.465990][T12078] [ 680.468947][T12078] dump_stack_lvl+0x18c/0x250 [ 680.473658][T12078] ? show_regs_print_info+0x20/0x20 [ 680.478876][T12078] ? load_image+0x420/0x420 [ 680.483437][T12078] sysfs_warn_dup+0x8e/0xa0 [ 680.487979][T12078] sysfs_do_create_link_sd+0xc0/0x110 [ 680.493377][T12078] device_add_class_symlinks+0x1cf/0x240 [ 680.499035][T12078] device_add+0x4f9/0xc40 [ 680.503390][T12078] wiphy_register+0x1d99/0x2ac0 [ 680.508284][T12078] ? cfg80211_event_work+0x40/0x40 [ 680.513414][T12078] ? minstrel_ht_alloc+0x88a/0x990 [ 680.518556][T12078] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 680.524651][T12078] ieee80211_register_hw+0x2dd8/0x3b30 [ 680.530140][T12078] ? ieee80211_register_hw+0xfb1/0x3b30 [ 680.535886][T12078] ? ieee80211_tasklet_handler+0x20/0x20 [ 680.541547][T12078] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 680.547494][T12078] ? __debug_object_init+0xec/0x450 [ 680.552744][T12078] ? __asan_memset+0x22/0x40 [ 680.557391][T12078] ? __hrtimer_init+0x189/0x270 [ 680.562361][T12078] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 680.568134][T12078] ? mac80211_hwsim_free+0x220/0x220 [ 680.573437][T12078] ? rcu_is_watching+0x15/0xb0 [ 680.578227][T12078] ? kstrndup+0xbd/0x140 [ 680.582517][T12078] hwsim_new_radio_nl+0xdad/0x1a70 [ 680.587691][T12078] ? __nla_validate+0x50/0x50 [ 680.592499][T12078] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 680.598861][T12078] ? __nla_parse+0x40/0x50 [ 680.603304][T12078] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 680.609748][T12078] genl_family_rcv_msg_doit+0x21a/0x310 [ 680.615326][T12078] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 680.621333][T12078] ? bpf_lsm_capable+0x9/0x10 [ 680.626029][T12078] ? security_capable+0x89/0xb0 [ 680.630903][T12078] genl_rcv_msg+0x611/0x7a0 [ 680.635433][T12078] ? genl_bind+0x360/0x360 [ 680.639868][T12078] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 680.646221][T12078] ? perf_trace_lock+0xfc/0x3b0 [ 680.651105][T12078] netlink_rcv_skb+0x235/0x4c0 [ 680.655884][T12078] ? genl_bind+0x360/0x360 [ 680.660317][T12078] ? netlink_ack+0x1160/0x1160 [ 680.665113][T12078] ? __lock_acquire+0x7d80/0x7d80 [ 680.670163][T12078] ? down_read+0x1ac/0x2e0 [ 680.674601][T12078] genl_rcv+0x28/0x40 [ 680.678598][T12078] netlink_unicast+0x7b1/0x930 [ 680.683398][T12078] netlink_sendmsg+0x8d0/0xbf0 [ 680.688190][T12078] ? lockdep_hardirqs_on+0x98/0x150 [ 680.693509][T12078] ? netlink_getsockopt+0x590/0x590 [ 680.698722][T12078] ? netlink_getsockopt+0x590/0x590 [ 680.703939][T12078] ? netlink_getsockopt+0x590/0x590 [ 680.709159][T12078] ____sys_sendmsg+0x61b/0x980 [ 680.713947][T12078] ? __asan_memset+0x22/0x40 [ 680.718561][T12078] ? __sys_sendmsg_sock+0x30/0x30 [ 680.723689][T12078] ? __import_iovec+0x5f2/0x850 [ 680.728592][T12078] ? import_iovec+0x73/0xa0 [ 680.733121][T12078] ___sys_sendmsg+0x2a6/0x360 [ 680.737820][T12078] ? __sys_sendmsg+0x2b0/0x2b0 [ 680.742601][T12078] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 680.748598][T12078] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 680.755916][T12078] ? lockdep_hardirqs_on+0x98/0x150 [ 680.761154][T12078] ? kasan_check_range+0x97/0x290 [ 680.766210][T12078] __se_sys_sendmsg+0x1d0/0x2c0 [ 680.771111][T12078] ? __x64_sys_sendmsg+0x80/0x80 [ 680.776081][T12078] ? lockdep_hardirqs_on+0x98/0x150 [ 680.781305][T12078] do_syscall_64+0x55/0xb0 [ 680.785743][T12078] ? clear_bhb_loop+0x40/0x90 [ 680.790445][T12078] ? clear_bhb_loop+0x40/0x90 [ 680.795149][T12078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.801054][T12078] RIP: 0033:0x7fc25119e0d9 [ 680.805492][T12078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.825122][T12078] RSP: 002b:00007fc252097028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.833562][T12078] RAX: ffffffffffffffda RBX: 00007fc251425fa0 RCX: 00007fc25119e0d9 [ 680.841547][T12078] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 680.849536][T12078] RBP: 00007fc251235024 R08: 0000000000000000 R09: 0000000000000000 [ 680.857530][T12078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.865686][T12078] R13: 00007fc251426038 R14: 00007fc251425fa0 R15: 00007ffc13f9eeb8 [ 680.873753][T12078] [ 681.303677][ T3481] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 681.860127][T12102] netlink: 'syz.4.2033': attribute type 10 has an invalid length. [ 681.885789][T12102] netlink: 'syz.4.2033': attribute type 9 has an invalid length. [ 681.911259][T12102] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2033'. [ 682.664068][T12108] netlink: 'syz.5.2035': attribute type 3 has an invalid length. [ 682.684079][T12108] netlink: 137972 bytes leftover after parsing attributes in process `syz.5.2035'. [ 682.726290][T12118] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2037'. [ 682.754528][T12118] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.2037'. [ 684.854862][T12147] netlink: 'syz.1.2050': attribute type 3 has an invalid length. [ 684.876206][T12147] netlink: 'syz.1.2050': attribute type 1 has an invalid length. [ 684.902255][T12151] netlink: 'syz.5.2051': attribute type 3 has an invalid length. [ 684.915417][T12151] netlink: 'syz.5.2051': attribute type 1 has an invalid length. [ 684.926455][T12147] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2050'. [ 684.932197][T12149] netlink: 'syz.4.2049': attribute type 3 has an invalid length. [ 684.936828][T12151] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.2051'. [ 684.962392][T12149] netlink: 'syz.4.2049': attribute type 1 has an invalid length. [ 684.971398][T12149] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2049'. [ 685.605705][T12166] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.2054'. [ 685.644742][T12166] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.2054'. [ 685.832126][T12170] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2057'. [ 685.845547][T12170] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.2057'. [ 685.947040][T12172] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2058'. [ 685.956726][T12172] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2058'. [ 686.091483][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.098912][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.408895][T12176] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 686.568541][T12183] netlink: 'syz.5.2062': attribute type 3 has an invalid length. [ 686.685888][T12183] netlink: 'syz.5.2062': attribute type 1 has an invalid length. [ 686.706797][T12183] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.2062'. [ 686.812630][T12186] netlink: 'syz.3.2063': attribute type 3 has an invalid length. [ 688.040966][T12216] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 688.439671][T12221] validate_nla: 1 callbacks suppressed [ 688.439709][T12221] netlink: 'syz.4.2075': attribute type 3 has an invalid length. [ 688.500187][T12218] netlink: 'syz.1.2076': attribute type 3 has an invalid length. [ 688.507319][T12221] netlink: 'syz.4.2075': attribute type 1 has an invalid length. [ 688.586928][T12223] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 688.610477][T12223] CPU: 1 PID: 12223 Comm: syz.5.2077 Not tainted syzkaller #0 [ 688.618384][T12223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 688.631630][T12223] Call Trace: [ 688.634989][T12223] [ 688.637959][T12223] dump_stack_lvl+0x18c/0x250 [ 688.642979][T12223] ? show_regs_print_info+0x20/0x20 [ 688.648315][T12223] ? load_image+0x420/0x420 [ 688.652851][T12223] sysfs_warn_dup+0x8e/0xa0 [ 688.657681][T12223] sysfs_do_create_link_sd+0xc0/0x110 [ 688.663080][T12223] device_add_class_symlinks+0x1cf/0x240 [ 688.668921][T12223] device_add+0x4f9/0xc40 [ 688.673279][T12223] wiphy_register+0x1d99/0x2ac0 [ 688.678171][T12223] ? cfg80211_event_work+0x40/0x40 [ 688.683307][T12223] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 688.689485][T12223] ? ieee80211_register_hw+0x2c1d/0x3b30 [ 688.695136][T12223] ieee80211_register_hw+0x2dd8/0x3b30 [ 688.700632][T12223] ? ieee80211_register_hw+0xfb1/0x3b30 [ 688.706302][T12223] ? ieee80211_tasklet_handler+0x20/0x20 [ 688.712130][T12223] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 688.718139][T12223] ? __debug_object_init+0xec/0x450 [ 688.723381][T12223] ? __asan_memset+0x22/0x40 [ 688.727991][T12223] ? __hrtimer_init+0x189/0x270 [ 688.732863][T12223] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 688.738619][T12223] ? mac80211_hwsim_free+0x220/0x220 [ 688.744108][T12223] hwsim_new_radio_nl+0xdad/0x1a70 [ 688.749245][T12223] ? mark_lock+0x94/0x320 [ 688.753692][T12223] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 688.760040][T12223] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 688.766210][T12223] ? lockdep_hardirqs_on+0x98/0x150 [ 688.771443][T12223] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 688.777631][T12223] genl_family_rcv_msg_doit+0x21a/0x310 [ 688.783212][T12223] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 688.789132][T12223] ? bpf_lsm_capable+0x9/0x10 [ 688.793937][T12223] ? security_capable+0x89/0xb0 [ 688.798836][T12223] genl_rcv_msg+0x611/0x7a0 [ 688.803486][T12223] ? genl_bind+0x360/0x360 [ 688.807966][T12223] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 688.814336][T12223] netlink_rcv_skb+0x235/0x4c0 [ 688.819156][T12223] ? genl_bind+0x360/0x360 [ 688.823592][T12223] ? netlink_ack+0x1160/0x1160 [ 688.828381][T12223] ? __lock_acquire+0x7d80/0x7d80 [ 688.833435][T12223] ? down_read+0x1ac/0x2e0 [ 688.838497][T12223] genl_rcv+0x28/0x40 [ 688.842717][T12223] netlink_unicast+0x7b1/0x930 [ 688.847565][T12223] netlink_sendmsg+0x8d0/0xbf0 [ 688.852980][T12223] ? netlink_getsockopt+0x590/0x590 [ 688.858233][T12223] ? apparmor_socket_sendmsg+0x8e/0x330 [ 688.864715][T12223] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 688.870386][T12223] ? security_socket_sendmsg+0x80/0xa0 [ 688.875890][T12223] ? netlink_getsockopt+0x590/0x590 [ 688.883583][T12223] ____sys_sendmsg+0x61b/0x980 [ 688.888567][T12223] ? __asan_memset+0x22/0x40 [ 688.893421][T12223] ? __sys_sendmsg_sock+0x30/0x30 [ 688.898897][T12223] ? __import_iovec+0x5f2/0x850 [ 688.904313][T12223] ? import_iovec+0x73/0xa0 [ 688.909652][T12223] ___sys_sendmsg+0x2a6/0x360 [ 688.915095][T12223] ? __sys_sendmsg+0x2b0/0x2b0 [ 688.920195][T12223] __se_sys_sendmsg+0x1d0/0x2c0 [ 688.925092][T12223] ? __x64_sys_sendmsg+0x80/0x80 [ 688.930075][T12223] ? syscall_enter_from_user_mode+0x2e/0x80 [ 688.936173][T12223] do_syscall_64+0x55/0xb0 [ 688.941142][T12223] ? clear_bhb_loop+0x40/0x90 [ 688.946356][T12223] ? clear_bhb_loop+0x40/0x90 [ 688.951074][T12223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 688.957075][T12223] RIP: 0033:0x7fc25119e0d9 [ 688.961526][T12223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.981338][T12223] RSP: 002b:00007fc252097028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.990144][T12223] RAX: ffffffffffffffda RBX: 00007fc251425fa0 RCX: 00007fc25119e0d9 [ 688.998765][T12223] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 689.006776][T12223] RBP: 00007fc251235024 R08: 0000000000000000 R09: 0000000000000000 [ 689.015042][T12223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.023209][T12223] R13: 00007fc251426038 R14: 00007fc251425fa0 R15: 00007ffc13f9eeb8 [ 689.032689][T12223] [ 690.167659][T12242] __nla_validate_parse: 12 callbacks suppressed [ 690.167681][T12242] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2084'. [ 690.217726][T12242] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2084'. [ 690.300862][T12246] netlink: 'syz.3.2086': attribute type 3 has an invalid length. [ 690.334046][T12246] netlink: 'syz.3.2086': attribute type 1 has an invalid length. [ 690.393145][T12246] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2086'. [ 690.932443][T12257] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2090'. [ 691.071030][T12257] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 691.097297][T12257] CPU: 1 PID: 12257 Comm: syz.3.2090 Not tainted syzkaller #0 [ 691.104956][T12257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 691.115245][T12257] Call Trace: [ 691.118588][T12257] [ 691.121571][T12257] dump_stack_lvl+0x18c/0x250 [ 691.126814][T12257] ? show_regs_print_info+0x20/0x20 [ 691.132081][T12257] ? load_image+0x420/0x420 [ 691.136665][T12257] sysfs_warn_dup+0x8e/0xa0 [ 691.141219][T12257] sysfs_do_create_link_sd+0xc0/0x110 [ 691.146635][T12257] device_add_class_symlinks+0x1cf/0x240 [ 691.152407][T12257] device_add+0x4f9/0xc40 [ 691.156825][T12257] wiphy_register+0x1d99/0x2ac0 [ 691.161773][T12257] ? cfg80211_event_work+0x40/0x40 [ 691.167211][T12257] ? minstrel_ht_alloc+0x88a/0x990 [ 691.172555][T12257] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 691.179551][T12257] ieee80211_register_hw+0x2dd8/0x3b30 [ 691.185341][T12257] ? ieee80211_register_hw+0xfb1/0x3b30 [ 691.191116][T12257] ? ieee80211_tasklet_handler+0x20/0x20 [ 691.199735][T12257] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 691.205724][T12257] ? __debug_object_init+0xec/0x450 [ 691.211000][T12257] ? __asan_memset+0x22/0x40 [ 691.215657][T12257] ? __hrtimer_init+0x189/0x270 [ 691.220735][T12257] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 691.226990][T12257] ? mac80211_hwsim_free+0x220/0x220 [ 691.232589][T12257] ? rcu_is_watching+0x15/0xb0 [ 691.237483][T12257] ? kstrndup+0xbd/0x140 [ 691.241790][T12257] hwsim_new_radio_nl+0xdad/0x1a70 [ 691.247557][T12257] ? __nla_validate+0x50/0x50 [ 691.253162][T12257] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 691.259652][T12257] ? __nla_parse+0x40/0x50 [ 691.264083][T12257] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 691.270539][T12257] genl_family_rcv_msg_doit+0x21a/0x310 [ 691.276134][T12257] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 691.282066][T12257] ? bpf_lsm_capable+0x9/0x10 [ 691.286920][T12257] ? security_capable+0x89/0xb0 [ 691.291828][T12257] genl_rcv_msg+0x611/0x7a0 [ 691.296465][T12257] ? genl_bind+0x360/0x360 [ 691.300927][T12257] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 691.308202][T12257] netlink_rcv_skb+0x235/0x4c0 [ 691.313779][T12257] ? genl_bind+0x360/0x360 [ 691.319455][T12257] ? netlink_ack+0x1160/0x1160 [ 691.324880][T12257] ? __lock_acquire+0x7d80/0x7d80 [ 691.330141][T12257] ? down_read+0x1ac/0x2e0 [ 691.334710][T12257] genl_rcv+0x28/0x40 [ 691.338858][T12257] netlink_unicast+0x7b1/0x930 [ 691.343723][T12257] netlink_sendmsg+0x8d0/0xbf0 [ 691.348766][T12257] ? netlink_getsockopt+0x590/0x590 [ 691.354408][T12257] ? apparmor_socket_sendmsg+0x8e/0x330 [ 691.360421][T12257] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 691.365852][T12257] ? security_socket_sendmsg+0x80/0xa0 [ 691.371430][T12257] ? netlink_getsockopt+0x590/0x590 [ 691.376769][T12257] ____sys_sendmsg+0x61b/0x980 [ 691.381703][T12257] ? __asan_memset+0x22/0x40 [ 691.386323][T12257] ? __sys_sendmsg_sock+0x30/0x30 [ 691.391457][T12257] ? __import_iovec+0x5f2/0x850 [ 691.396374][T12257] ? import_iovec+0x73/0xa0 [ 691.400957][T12257] ___sys_sendmsg+0x2a6/0x360 [ 691.405697][T12257] ? __sys_sendmsg+0x2b0/0x2b0 [ 691.410585][T12257] __se_sys_sendmsg+0x1d0/0x2c0 [ 691.415569][T12257] ? __x64_sys_sendmsg+0x80/0x80 [ 691.420550][T12257] ? syscall_enter_from_user_mode+0x2e/0x80 [ 691.426494][T12257] do_syscall_64+0x55/0xb0 [ 691.431231][T12257] ? clear_bhb_loop+0x40/0x90 [ 691.436465][T12257] ? clear_bhb_loop+0x40/0x90 [ 691.442880][T12257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 691.449086][T12257] RIP: 0033:0x7f565259e0d9 [ 691.454267][T12257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.475340][T12257] RSP: 002b:00007f5653451028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.483816][T12257] RAX: ffffffffffffffda RBX: 00007f5652825fa0 RCX: 00007f565259e0d9 [ 691.491823][T12257] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 691.499965][T12257] RBP: 00007f5652635024 R08: 0000000000000000 R09: 0000000000000000 [ 691.508251][T12257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.516271][T12257] R13: 00007f5652826038 R14: 00007f5652825fa0 R15: 00007ffe71640c28 [ 691.524712][T12257] [ 693.117664][T12290] netlink: 'syz.3.2101': attribute type 3 has an invalid length. [ 693.154356][T12290] netlink: 'syz.3.2101': attribute type 1 has an invalid length. [ 693.197184][T12290] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2101'. [ 693.569105][T12301] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2104'. [ 693.578876][T12301] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.2104'. [ 694.775987][T12323] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.2121'. [ 694.887322][T12323] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.2121'. [ 695.251039][T12332] netlink: 'syz.1.2116': attribute type 3 has an invalid length. [ 695.263991][T12332] netlink: 'syz.1.2116': attribute type 1 has an invalid length. [ 695.277568][T12332] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2116'. [ 695.829291][T12342] netlink: 'syz.5.2129': attribute type 3 has an invalid length. [ 695.894373][T12342] netlink: 'syz.5.2129': attribute type 1 has an invalid length. [ 695.925911][T12342] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.2129'. [ 696.403488][T12351] netlink: 'syz.1.2123': attribute type 10 has an invalid length. [ 696.452093][T12351] netlink: 'syz.1.2123': attribute type 9 has an invalid length. [ 696.468279][T12351] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2123'. [ 696.564107][T12353] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.2124'. [ 696.581693][T12353] netlink: 21068 bytes leftover after parsing attributes in process `syz.5.2124'. [ 697.331851][T12369] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2130'. [ 697.380249][T12369] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.2130'. [ 698.854496][T12383] netlink: 'syz.1.2134': attribute type 3 has an invalid length. [ 698.875079][T12383] netlink: 'syz.1.2134': attribute type 1 has an invalid length. [ 698.909077][T12383] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2134'. [ 698.962209][T12388] netlink: 'syz.5.2136': attribute type 10 has an invalid length. [ 698.990431][T12388] netlink: 'syz.5.2136': attribute type 9 has an invalid length. [ 699.019070][T12388] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2136'. [ 701.611603][T12423] netlink: 'syz.5.2147': attribute type 10 has an invalid length. [ 701.636355][T12423] netlink: 'syz.5.2147': attribute type 9 has an invalid length. [ 701.698626][T12423] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2147'. [ 702.021934][T12426] netlink: 'syz.1.2148': attribute type 3 has an invalid length. [ 702.046024][T12426] netlink: 'syz.1.2148': attribute type 1 has an invalid length. [ 702.062194][T12426] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2148'. [ 706.003692][T12467] netlink: 'syz.1.2159': attribute type 10 has an invalid length. [ 706.100927][T12470] netlink: 'syz.1.2159': attribute type 9 has an invalid length. [ 706.132529][T12470] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2159'. [ 706.815741][T12484] netlink: 'syz.4.2164': attribute type 3 has an invalid length. [ 706.825370][T12484] netlink: 'syz.4.2164': attribute type 1 has an invalid length. [ 706.996994][T12484] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.2164'. [ 710.369602][T12514] netlink: 'syz.3.2172': attribute type 10 has an invalid length. [ 710.391648][T12514] netlink: 'syz.3.2172': attribute type 9 has an invalid length. [ 710.410816][T12514] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2172'. [ 710.634818][T12522] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2182'. [ 710.807913][T12522] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.2182'. [ 712.606572][ T1086] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 713.994151][T12551] netlink: 'syz.1.2185': attribute type 10 has an invalid length. [ 714.045234][T12549] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 714.048401][T12551] netlink: 'syz.1.2185': attribute type 9 has an invalid length. [ 714.065325][T12551] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2185'. [ 714.155138][T12557] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2186'. [ 714.176142][T12557] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.2186'. [ 715.038802][T12564] netlink: 'syz.1.2189': attribute type 3 has an invalid length. [ 715.067182][T12564] netlink: 'syz.1.2189': attribute type 1 has an invalid length. [ 715.124879][T12564] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2189'. [ 717.226464][T12590] netlink: 'syz.5.2197': attribute type 10 has an invalid length. [ 717.376502][T12590] netlink: 'syz.5.2197': attribute type 9 has an invalid length. [ 717.431070][T12590] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2197'. [ 717.750007][T12593] netlink: 'syz.4.2198': attribute type 3 has an invalid length. [ 717.782527][T12593] netlink: 'syz.4.2198': attribute type 1 has an invalid length. [ 717.793622][T12593] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2198'. [ 719.263356][T12612] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 720.219423][T12618] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 720.709142][T12625] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2208'. [ 720.780285][T12627] netlink: 'syz.4.2209': attribute type 10 has an invalid length. [ 720.815655][T12625] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.2208'. [ 720.846396][T12627] netlink: 'syz.4.2209': attribute type 9 has an invalid length. [ 720.919216][T12627] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2209'. [ 721.479145][T12629] netlink: 'syz.1.2210': attribute type 3 has an invalid length. [ 721.513193][T12629] netlink: 'syz.1.2210': attribute type 1 has an invalid length. [ 721.537290][T12629] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.2210'. [ 722.862326][T12652] netlink: 'syz.3.2224': attribute type 3 has an invalid length. [ 722.873284][T12652] netlink: 'syz.3.2224': attribute type 1 has an invalid length. [ 722.881867][T12652] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2224'. [ 722.984538][T12657] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 724.922474][T12673] netlink: 'syz.5.2221': attribute type 10 has an invalid length. [ 725.112049][T12673] netlink: 'syz.5.2221': attribute type 9 has an invalid length. [ 725.133094][T12673] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2221'. [ 725.574484][T12680] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 726.371894][T12691] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 727.944994][T12708] netlink: 'syz.5.2236': attribute type 10 has an invalid length. [ 728.146808][T12708] netlink: 'syz.5.2236': attribute type 9 has an invalid length. [ 728.184284][T12708] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2236'. [ 728.305920][T12710] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2237'. [ 728.332983][T12710] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.2237'. [ 731.872895][T12744] netlink: 'syz.5.2248': attribute type 10 has an invalid length. [ 732.027555][T12744] netlink: 'syz.5.2248': attribute type 9 has an invalid length. [ 732.045938][T12744] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2248'. [ 732.284656][T12750] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2250'. [ 732.301970][T12750] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2250'. [ 732.523190][T12752] netlink: 'syz.5.2251': attribute type 3 has an invalid length. [ 732.531591][T12752] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.2251'. [ 733.175629][T12768] netlink: 'syz.5.2255': attribute type 3 has an invalid length. [ 733.216961][T12768] netlink: 'syz.5.2255': attribute type 1 has an invalid length. [ 733.291590][T12768] netlink: 191376 bytes leftover after parsing attributes in process `syz.5.2255'. [ 733.773397][T12777] netlink: 'syz.1.2259': attribute type 10 has an invalid length. [ 733.788066][T12777] netlink: 'syz.1.2259': attribute type 9 has an invalid length. [ 733.796527][T12777] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2259'. [ 734.313142][T12783] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2261'. [ 734.338475][T12783] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.2261'. [ 735.889252][T12794] netlink: 'syz.3.2265': attribute type 3 has an invalid length. [ 735.920978][T12794] netlink: 137972 bytes leftover after parsing attributes in process `syz.3.2265'. [ 736.263376][T12808] netlink: 'syz.5.2269': attribute type 10 has an invalid length. [ 736.342883][T12808] netlink: 'syz.5.2269': attribute type 9 has an invalid length. [ 736.374374][T12808] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2269'. [ 736.460521][T12811] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2270'. [ 736.472565][T12811] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2270'. [ 738.477691][T12833] netlink: 'syz.5.2276': attribute type 3 has an invalid length. [ 738.823524][T12833] netlink: 'syz.5.2276': attribute type 1 has an invalid length. [ 738.853106][T12833] netlink: 191376 bytes leftover after parsing attributes in process `syz.5.2276'. [ 739.139565][T12846] netlink: 'syz.3.2279': attribute type 10 has an invalid length. [ 739.241295][T12847] netlink: 'syz.3.2279': attribute type 9 has an invalid length. [ 739.267801][T12847] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2279'. [ 741.030735][T12854] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2280'. [ 741.047112][T12854] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2280'. [ 744.140223][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 747.528402][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.535087][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.489481][T12975] netlink: 'syz.5.2316': attribute type 3 has an invalid length. [ 754.868938][T12975] netlink: 'syz.5.2316': attribute type 1 has an invalid length. [ 755.067786][T12975] netlink: 191376 bytes leftover after parsing attributes in process `syz.5.2316'. [ 761.572468][T13027] netlink: 'syz.5.2330': attribute type 3 has an invalid length. [ 761.802389][T13027] netlink: 'syz.5.2330': attribute type 1 has an invalid length. [ 761.899331][T13027] netlink: 191376 bytes leftover after parsing attributes in process `syz.5.2330'. [ 763.874146][T13061] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2339'. [ 763.952106][T13061] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.2339'. [ 768.958187][T13112] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2353'. [ 769.273240][T13112] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2353'. [ 772.568305][T13140] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2361'. [ 772.593164][T13140] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.2361'. [ 773.821358][T13150] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.2364'. [ 773.870999][T13150] netlink: 21068 bytes leftover after parsing attributes in process `syz.5.2364'. [ 774.869657][T13155] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 776.170222][ T3453] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 778.566286][T13194] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2377'. [ 778.575868][T13194] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.2377'. [ 779.809549][T13199] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 780.710604][T13206] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 783.405457][T13231] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2389'. [ 783.632078][T13231] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.2389'. [ 787.704543][T13267] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.2402'. [ 787.841312][T13267] netlink: 21068 bytes leftover after parsing attributes in process `syz.5.2402'. [ 793.907937][T13347] netlink: 'syz.5.2433': attribute type 3 has an invalid length. [ 793.927281][T13347] netlink: 'syz.5.2433': attribute type 1 has an invalid length. [ 793.937081][T13347] netlink: 191376 bytes leftover after parsing attributes in process `syz.5.2433'. [ 796.551621][T13354] netlink: 'syz.4.2442': attribute type 3 has an invalid length. [ 796.793063][T13354] netlink: 137972 bytes leftover after parsing attributes in process `syz.4.2442'. [ 803.800174][T13465] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2474'. [ 803.848361][T13465] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.2474'. [ 804.281214][T13475] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2488'. [ 804.313385][T13475] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.2488'. [ 807.575408][ T1136] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 807.757644][T13538] netlink: 'syz.1.2515': attribute type 3 has an invalid length. [ 807.823447][T13538] netlink: 137972 bytes leftover after parsing attributes in process `syz.1.2515'. [ 808.967755][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.986678][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.961529][T13596] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2528'. [ 812.040634][T13596] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 812.072998][T13596] CPU: 1 PID: 13596 Comm: syz.4.2528 Not tainted syzkaller #0 [ 812.080569][T13596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 812.090758][T13596] Call Trace: [ 812.094083][T13596] [ 812.097053][T13596] dump_stack_lvl+0x18c/0x250 [ 812.101793][T13596] ? show_regs_print_info+0x20/0x20 [ 812.107039][T13596] ? load_image+0x420/0x420 [ 812.111613][T13596] sysfs_warn_dup+0x8e/0xa0 [ 812.116161][T13596] sysfs_do_create_link_sd+0xc0/0x110 [ 812.121586][T13596] device_add_class_symlinks+0x1cf/0x240 [ 812.127277][T13596] device_add+0x4f9/0xc40 [ 812.131664][T13596] wiphy_register+0x1d99/0x2ac0 [ 812.136603][T13596] ? cfg80211_event_work+0x40/0x40 [ 812.141766][T13596] ? minstrel_ht_alloc+0x88a/0x990 [ 812.146954][T13596] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 812.153091][T13596] ieee80211_register_hw+0x2dd8/0x3b30 [ 812.158628][T13596] ? ieee80211_register_hw+0xfb1/0x3b30 [ 812.164251][T13596] ? ieee80211_tasklet_handler+0x20/0x20 [ 812.169938][T13596] ? lockdep_hardirqs_on+0x98/0x150 [ 812.175197][T13596] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 812.181444][T13596] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 812.187257][T13596] ? mac80211_hwsim_free+0x220/0x220 [ 812.192612][T13596] ? rcu_is_watching+0x15/0xb0 [ 812.197435][T13596] ? kstrndup+0xbd/0x140 [ 812.201743][T13596] hwsim_new_radio_nl+0xdad/0x1a70 [ 812.206897][T13596] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 812.212659][T13596] ? mark_lock+0x94/0x320 [ 812.217038][T13596] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 812.223403][T13596] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 812.229591][T13596] ? lockdep_hardirqs_on+0x98/0x150 [ 812.234819][T13596] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 812.241029][T13596] genl_family_rcv_msg_doit+0x21a/0x310 [ 812.246637][T13596] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 812.252566][T13596] ? bpf_lsm_capable+0x9/0x10 [ 812.257269][T13596] ? security_capable+0x89/0xb0 [ 812.262144][T13596] genl_rcv_msg+0x611/0x7a0 [ 812.266670][T13596] ? genl_bind+0x360/0x360 [ 812.271108][T13596] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 812.277483][T13596] ? lockdep_hardirqs_on+0x98/0x150 [ 812.282727][T13596] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 812.288934][T13596] netlink_rcv_skb+0x235/0x4c0 [ 812.293757][T13596] ? genl_bind+0x360/0x360 [ 812.298200][T13596] ? netlink_ack+0x1160/0x1160 [ 812.303077][T13596] ? __lock_acquire+0x7d80/0x7d80 [ 812.308149][T13596] ? down_read+0x1ac/0x2e0 [ 812.312587][T13596] genl_rcv+0x28/0x40 [ 812.316584][T13596] netlink_unicast+0x7b1/0x930 [ 812.321382][T13596] netlink_sendmsg+0x8d0/0xbf0 [ 812.326173][T13596] ? netlink_getsockopt+0x590/0x590 [ 812.331392][T13596] ? netlink_getsockopt+0x590/0x590 [ 812.336614][T13596] ____sys_sendmsg+0x61b/0x980 [ 812.341391][T13596] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 812.347568][T13596] ? __asan_memset+0x22/0x40 [ 812.352187][T13596] ? __sys_sendmsg_sock+0x30/0x30 [ 812.357224][T13596] ? __import_iovec+0x5f2/0x850 [ 812.362110][T13596] ? import_iovec+0x73/0xa0 [ 812.366637][T13596] ___sys_sendmsg+0x2a6/0x360 [ 812.371336][T13596] ? __sys_sendmsg+0x2b0/0x2b0 [ 812.376132][T13596] ? perf_trace_preemptirq_template+0xac/0x330 [ 812.382336][T13596] ? __se_sys_sendmsg+0xd8/0x2c0 [ 812.387313][T13596] __se_sys_sendmsg+0x1d0/0x2c0 [ 812.392267][T13596] ? __x64_sys_sendmsg+0x80/0x80 [ 812.397236][T13596] ? syscall_enter_from_user_mode+0x2e/0x80 [ 812.403153][T13596] do_syscall_64+0x55/0xb0 [ 812.407581][T13596] ? clear_bhb_loop+0x40/0x90 [ 812.412270][T13596] ? clear_bhb_loop+0x40/0x90 [ 812.416960][T13596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 812.422873][T13596] RIP: 0033:0x7f6b8f19e0d9 [ 812.427304][T13596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.446927][T13596] RSP: 002b:00007f6b900a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.455367][T13596] RAX: ffffffffffffffda RBX: 00007f6b8f425fa0 RCX: 00007f6b8f19e0d9 [ 812.463370][T13596] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 812.471377][T13596] RBP: 00007f6b8f235024 R08: 0000000000000000 R09: 0000000000000000 [ 812.479387][T13596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.487385][T13596] R13: 00007f6b8f426038 R14: 00007f6b8f425fa0 R15: 00007fff7d6836e8 [ 812.495388][T13596] [ 812.717404][T13592] netlink: 'syz.1.2527': attribute type 3 has an invalid length. [ 812.773303][T13592] netlink: 137972 bytes leftover after parsing attributes in process `syz.1.2527'. [ 812.821969][T13604] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.2531'. [ 812.838102][T13604] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.2531'. [ 815.333299][T13628] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2540'. [ 815.468082][T13628] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 815.478586][T13628] CPU: 1 PID: 13628 Comm: syz.4.2540 Not tainted syzkaller #0 [ 815.486120][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 815.496225][T13628] Call Trace: [ 815.499542][T13628] [ 815.502504][T13628] dump_stack_lvl+0x18c/0x250 [ 815.507227][T13628] ? show_regs_print_info+0x20/0x20 [ 815.512479][T13628] ? load_image+0x420/0x420 [ 815.517057][T13628] sysfs_warn_dup+0x8e/0xa0 [ 815.521616][T13628] sysfs_do_create_link_sd+0xc0/0x110 [ 815.527025][T13628] device_add_class_symlinks+0x1cf/0x240 [ 815.532701][T13628] device_add+0x4f9/0xc40 [ 815.537070][T13628] wiphy_register+0x1d99/0x2ac0 [ 815.541981][T13628] ? cfg80211_event_work+0x40/0x40 [ 815.547127][T13628] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 815.553341][T13628] ieee80211_register_hw+0x2dd8/0x3b30 [ 815.558846][T13628] ? ieee80211_register_hw+0xfb1/0x3b30 [ 815.564431][T13628] ? ieee80211_tasklet_handler+0x20/0x20 [ 815.570091][T13628] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 815.576026][T13628] ? __debug_object_init+0xec/0x450 [ 815.581263][T13628] ? __asan_memset+0x22/0x40 [ 815.585893][T13628] ? __hrtimer_init+0x189/0x270 [ 815.590775][T13628] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 815.596554][T13628] ? mac80211_hwsim_free+0x220/0x220 [ 815.601961][T13628] ? rcu_is_watching+0x15/0xb0 [ 815.606757][T13628] ? kstrndup+0xbd/0x140 [ 815.611046][T13628] hwsim_new_radio_nl+0xdad/0x1a70 [ 815.616192][T13628] ? __nla_validate+0x50/0x50 [ 815.620926][T13628] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 815.627309][T13628] ? __nla_parse+0x40/0x50 [ 815.631759][T13628] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 815.638123][T13628] genl_family_rcv_msg_doit+0x21a/0x310 [ 815.643707][T13628] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 815.649643][T13628] ? bpf_lsm_capable+0x9/0x10 [ 815.654362][T13628] ? security_capable+0x89/0xb0 [ 815.659253][T13628] genl_rcv_msg+0x611/0x7a0 [ 815.663796][T13628] ? genl_bind+0x360/0x360 [ 815.668239][T13628] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 815.674621][T13628] netlink_rcv_skb+0x235/0x4c0 [ 815.679420][T13628] ? genl_bind+0x360/0x360 [ 815.683867][T13628] ? netlink_ack+0x1160/0x1160 [ 815.688669][T13628] ? __lock_acquire+0x7d80/0x7d80 [ 815.693739][T13628] ? down_read+0x1ac/0x2e0 [ 815.698197][T13628] genl_rcv+0x28/0x40 [ 815.702203][T13628] netlink_unicast+0x7b1/0x930 [ 815.707017][T13628] netlink_sendmsg+0x8d0/0xbf0 [ 815.711816][T13628] ? netlink_getsockopt+0x590/0x590 [ 815.717048][T13628] ? apparmor_socket_sendmsg+0x8e/0x330 [ 815.722643][T13628] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 815.727964][T13628] ? security_socket_sendmsg+0x80/0xa0 [ 815.733450][T13628] ? netlink_getsockopt+0x590/0x590 [ 815.738676][T13628] ____sys_sendmsg+0x61b/0x980 [ 815.743476][T13628] ? __asan_memset+0x22/0x40 [ 815.748099][T13628] ? __sys_sendmsg_sock+0x30/0x30 [ 815.753149][T13628] ? __import_iovec+0x5f2/0x850 [ 815.758045][T13628] ? import_iovec+0x73/0xa0 [ 815.762592][T13628] ___sys_sendmsg+0x2a6/0x360 [ 815.767332][T13628] ? __sys_sendmsg+0x2b0/0x2b0 [ 815.772224][T13628] __se_sys_sendmsg+0x1d0/0x2c0 [ 815.777133][T13628] ? __x64_sys_sendmsg+0x80/0x80 [ 815.782122][T13628] ? syscall_enter_from_user_mode+0x2e/0x80 [ 815.788080][T13628] do_syscall_64+0x55/0xb0 [ 815.792526][T13628] ? clear_bhb_loop+0x40/0x90 [ 815.797233][T13628] ? clear_bhb_loop+0x40/0x90 [ 815.801939][T13628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 815.807857][T13628] RIP: 0033:0x7f6b8f19e0d9 [ 815.812317][T13628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.832040][T13628] RSP: 002b:00007f6b900a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.840484][T13628] RAX: ffffffffffffffda RBX: 00007f6b8f425fa0 RCX: 00007f6b8f19e0d9 [ 815.848489][T13628] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 815.856669][T13628] RBP: 00007f6b8f235024 R08: 0000000000000000 R09: 0000000000000000 [ 815.864670][T13628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.872667][T13628] R13: 00007f6b8f426038 R14: 00007f6b8f425fa0 R15: 00007fff7d6836e8 [ 815.880687][T13628] [ 816.784681][T13647] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2556'. [ 816.828229][T13647] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.2556'. [ 818.909923][T13675] netlink: 'syz.3.2559': attribute type 3 has an invalid length. [ 818.930532][T13675] netlink: 'syz.3.2559': attribute type 1 has an invalid length. [ 818.959589][T13675] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2559'. [ 818.984616][T13678] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2560'. [ 819.073313][T13678] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 819.092332][T13678] CPU: 1 PID: 13678 Comm: syz.4.2560 Not tainted syzkaller #0 [ 819.099873][T13678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 819.109978][T13678] Call Trace: [ 819.113298][T13678] [ 819.116263][T13678] dump_stack_lvl+0x18c/0x250 [ 819.120991][T13678] ? show_regs_print_info+0x20/0x20 [ 819.126235][T13678] ? load_image+0x420/0x420 [ 819.130798][T13678] sysfs_warn_dup+0x8e/0xa0 [ 819.135323][T13678] sysfs_do_create_link_sd+0xc0/0x110 [ 819.140722][T13678] device_add_class_symlinks+0x1cf/0x240 [ 819.146376][T13678] device_add+0x4f9/0xc40 [ 819.150724][T13678] wiphy_register+0x1d99/0x2ac0 [ 819.155612][T13678] ? cfg80211_event_work+0x40/0x40 [ 819.160743][T13678] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 819.166933][T13678] ieee80211_register_hw+0x2dd8/0x3b30 [ 819.172422][T13678] ? ieee80211_register_hw+0xfb1/0x3b30 [ 819.177996][T13678] ? ieee80211_tasklet_handler+0x20/0x20 [ 819.183646][T13678] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 819.189584][T13678] ? __debug_object_init+0xec/0x450 [ 819.194804][T13678] ? __asan_memset+0x22/0x40 [ 819.199416][T13678] ? __hrtimer_init+0x189/0x270 [ 819.204294][T13678] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 819.210085][T13678] ? mac80211_hwsim_free+0x220/0x220 [ 819.215387][T13678] ? rcu_is_watching+0x15/0xb0 [ 819.220170][T13678] ? kstrndup+0xbd/0x140 [ 819.224448][T13678] hwsim_new_radio_nl+0xdad/0x1a70 [ 819.229581][T13678] ? __nla_validate+0x50/0x50 [ 819.234293][T13678] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 819.240660][T13678] ? __nla_parse+0x40/0x50 [ 819.245105][T13678] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 819.251457][T13678] genl_family_rcv_msg_doit+0x21a/0x310 [ 819.257027][T13678] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 819.262960][T13678] ? bpf_lsm_capable+0x9/0x10 [ 819.267660][T13678] ? security_capable+0x89/0xb0 [ 819.272539][T13678] genl_rcv_msg+0x611/0x7a0 [ 819.277068][T13678] ? genl_bind+0x360/0x360 [ 819.281504][T13678] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 819.287856][T13678] ? netlink_rcv_skb+0x214/0x4c0 [ 819.292817][T13678] netlink_rcv_skb+0x235/0x4c0 [ 819.297600][T13678] ? genl_bind+0x360/0x360 [ 819.302029][T13678] ? netlink_ack+0x1160/0x1160 [ 819.306833][T13678] ? down_read+0x1ac/0x2e0 [ 819.311306][T13678] genl_rcv+0x28/0x40 [ 819.315308][T13678] netlink_unicast+0x7b1/0x930 [ 819.320102][T13678] netlink_sendmsg+0x8d0/0xbf0 [ 819.324890][T13678] ? netlink_getsockopt+0x590/0x590 [ 819.330104][T13678] ? apparmor_socket_sendmsg+0x8e/0x330 [ 819.335667][T13678] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 819.340977][T13678] ? security_socket_sendmsg+0x80/0xa0 [ 819.346449][T13678] ? netlink_getsockopt+0x590/0x590 [ 819.351664][T13678] ____sys_sendmsg+0x61b/0x980 [ 819.356478][T13678] ? __asan_memset+0x22/0x40 [ 819.361086][T13678] ? __sys_sendmsg_sock+0x30/0x30 [ 819.366143][T13678] ? __import_iovec+0x5f2/0x850 [ 819.371020][T13678] ? import_iovec+0x73/0xa0 [ 819.375547][T13678] ___sys_sendmsg+0x2a6/0x360 [ 819.380245][T13678] ? __sys_sendmsg+0x2b0/0x2b0 [ 819.385044][T13678] ? ktime_get+0x7f/0x280 [ 819.389420][T13678] __se_sys_sendmsg+0x1d0/0x2c0 [ 819.394287][T13678] ? __x64_sys_sendmsg+0x80/0x80 [ 819.399255][T13678] ? lockdep_hardirqs_on+0x98/0x150 [ 819.404478][T13678] do_syscall_64+0x55/0xb0 [ 819.408913][T13678] ? clear_bhb_loop+0x40/0x90 [ 819.413607][T13678] ? clear_bhb_loop+0x40/0x90 [ 819.418297][T13678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 819.424207][T13678] RIP: 0033:0x7f6b8f19e0d9 [ 819.428656][T13678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.448381][T13678] RSP: 002b:00007f6b900a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.456814][T13678] RAX: ffffffffffffffda RBX: 00007f6b8f425fa0 RCX: 00007f6b8f19e0d9 [ 819.464803][T13678] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 819.472787][T13678] RBP: 00007f6b8f235024 R08: 0000000000000000 R09: 0000000000000000 [ 819.480879][T13678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.488886][T13678] R13: 00007f6b8f426038 R14: 00007f6b8f425fa0 R15: 00007fff7d6836e8 [ 819.496900][T13678] [ 819.799382][T13693] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2564'. [ 819.819806][T13693] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.2564'. [ 821.200851][T13715] netlink: 'syz.4.2572': attribute type 3 has an invalid length. [ 821.248809][T13715] netlink: 'syz.4.2572': attribute type 1 has an invalid length. [ 821.322645][T13715] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2572'. [ 821.515924][T13720] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2574'. [ 821.577572][T13720] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 821.603064][T13720] CPU: 1 PID: 13720 Comm: syz.5.2574 Not tainted syzkaller #0 [ 821.610637][T13720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 821.620718][T13720] Call Trace: [ 821.624016][T13720] [ 821.626963][T13720] dump_stack_lvl+0x18c/0x250 [ 821.631667][T13720] ? show_regs_print_info+0x20/0x20 [ 821.636880][T13720] ? load_image+0x420/0x420 [ 821.641420][T13720] sysfs_warn_dup+0x8e/0xa0 [ 821.645953][T13720] sysfs_do_create_link_sd+0xc0/0x110 [ 821.651348][T13720] device_add_class_symlinks+0x1cf/0x240 [ 821.657009][T13720] device_add+0x4f9/0xc40 [ 821.661355][T13720] wiphy_register+0x1d99/0x2ac0 [ 821.666241][T13720] ? cfg80211_event_work+0x40/0x40 [ 821.671368][T13720] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 821.677554][T13720] ieee80211_register_hw+0x2dd8/0x3b30 [ 821.683045][T13720] ? ieee80211_register_hw+0xfb1/0x3b30 [ 821.688615][T13720] ? ieee80211_tasklet_handler+0x20/0x20 [ 821.694265][T13720] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 821.700183][T13720] ? __debug_object_init+0xec/0x450 [ 821.705401][T13720] ? __asan_memset+0x22/0x40 [ 821.710018][T13720] ? __hrtimer_init+0x189/0x270 [ 821.714889][T13720] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 821.720648][T13720] ? mac80211_hwsim_free+0x220/0x220 [ 821.725945][T13720] ? rcu_is_watching+0x15/0xb0 [ 821.730728][T13720] ? kstrndup+0xbd/0x140 [ 821.735009][T13720] hwsim_new_radio_nl+0xdad/0x1a70 [ 821.740142][T13720] ? __nla_validate+0x50/0x50 [ 821.744865][T13720] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 821.751218][T13720] ? __nla_parse+0x40/0x50 [ 821.755654][T13720] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 821.762009][T13720] genl_family_rcv_msg_doit+0x21a/0x310 [ 821.767585][T13720] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 821.773494][T13720] ? lockdep_hardirqs_on+0x98/0x150 [ 821.778723][T13720] ? genl_rcv_msg+0x5ef/0x7a0 [ 821.783421][T13720] genl_rcv_msg+0x611/0x7a0 [ 821.787972][T13720] ? genl_bind+0x360/0x360 [ 821.792426][T13720] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 821.798877][T13720] ? netlink_rcv_skb+0x1da/0x4c0 [ 821.803856][T13720] netlink_rcv_skb+0x235/0x4c0 [ 821.808638][T13720] ? genl_bind+0x360/0x360 [ 821.813068][T13720] ? netlink_ack+0x1160/0x1160 [ 821.817858][T13720] ? __lock_acquire+0x7d80/0x7d80 [ 821.822909][T13720] ? down_read+0x1ac/0x2e0 [ 821.827367][T13720] genl_rcv+0x28/0x40 [ 821.831366][T13720] netlink_unicast+0x7b1/0x930 [ 821.836162][T13720] netlink_sendmsg+0x8d0/0xbf0 [ 821.840936][T13720] ? lockdep_hardirqs_on+0x98/0x150 [ 821.846184][T13720] ? netlink_getsockopt+0x590/0x590 [ 821.851400][T13720] ? bpf_lsm_socket_sendmsg+0x4/0x10 [ 821.856703][T13720] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 821.862003][T13720] ? security_socket_sendmsg+0x80/0xa0 [ 821.867473][T13720] ? netlink_getsockopt+0x590/0x590 [ 821.872690][T13720] ____sys_sendmsg+0x61b/0x980 [ 821.877476][T13720] ? __asan_memset+0x22/0x40 [ 821.882084][T13720] ? __sys_sendmsg_sock+0x30/0x30 [ 821.887144][T13720] ? __import_iovec+0x5f2/0x850 [ 821.892023][T13720] ? import_iovec+0x73/0xa0 [ 821.896548][T13720] ___sys_sendmsg+0x2a6/0x360 [ 821.901248][T13720] ? __sys_sendmsg+0x2b0/0x2b0 [ 821.906081][T13720] __se_sys_sendmsg+0x1d0/0x2c0 [ 821.910960][T13720] ? __x64_sys_sendmsg+0x80/0x80 [ 821.915957][T13720] ? syscall_enter_from_user_mode+0x2e/0x80 [ 821.921872][T13720] do_syscall_64+0x55/0xb0 [ 821.926302][T13720] ? clear_bhb_loop+0x40/0x90 [ 821.931043][T13720] ? clear_bhb_loop+0x40/0x90 [ 821.935820][T13720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.941723][T13720] RIP: 0033:0x7fc25119e0d9 [ 821.946162][T13720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.965802][T13720] RSP: 002b:00007fc252097028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.974235][T13720] RAX: ffffffffffffffda RBX: 00007fc251425fa0 RCX: 00007fc25119e0d9 [ 821.982218][T13720] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 821.990201][T13720] RBP: 00007fc251235024 R08: 0000000000000000 R09: 0000000000000000 [ 821.998623][T13720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.006722][T13720] R13: 00007fc251426038 R14: 00007fc251425fa0 R15: 00007ffc13f9eeb8 [ 822.014722][T13720] [ 822.296175][T13732] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2580'. [ 822.327130][T13732] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.2580'. [ 823.568141][T13753] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2589'. [ 823.658706][T13753] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 823.710027][T13753] CPU: 1 PID: 13753 Comm: syz.1.2589 Not tainted syzkaller #0 [ 823.717578][T13753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 823.727773][T13753] Call Trace: [ 823.731082][T13753] [ 823.734032][T13753] dump_stack_lvl+0x18c/0x250 [ 823.738768][T13753] ? show_regs_print_info+0x20/0x20 [ 823.743989][T13753] ? load_image+0x420/0x420 [ 823.748527][T13753] sysfs_warn_dup+0x8e/0xa0 [ 823.753050][T13753] sysfs_do_create_link_sd+0xc0/0x110 [ 823.758438][T13753] device_add_class_symlinks+0x1cf/0x240 [ 823.764131][T13753] device_add+0x4f9/0xc40 [ 823.768517][T13753] wiphy_register+0x1d99/0x2ac0 [ 823.773434][T13753] ? cfg80211_event_work+0x40/0x40 [ 823.778584][T13753] ? minstrel_ht_alloc+0x88a/0x990 [ 823.783735][T13753] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 823.789836][T13753] ieee80211_register_hw+0x2dd8/0x3b30 [ 823.795335][T13753] ? ieee80211_register_hw+0xfb1/0x3b30 [ 823.800907][T13753] ? ieee80211_tasklet_handler+0x20/0x20 [ 823.806560][T13753] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 823.812481][T13753] ? __debug_object_init+0xec/0x450 [ 823.817701][T13753] ? __asan_memset+0x22/0x40 [ 823.822319][T13753] ? __hrtimer_init+0x189/0x270 [ 823.827191][T13753] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 823.832960][T13753] ? mac80211_hwsim_free+0x220/0x220 [ 823.838262][T13753] ? rcu_is_watching+0x15/0xb0 [ 823.843095][T13753] ? kstrndup+0xbd/0x140 [ 823.847372][T13753] hwsim_new_radio_nl+0xdad/0x1a70 [ 823.852498][T13753] ? mark_lock+0x94/0x320 [ 823.856852][T13753] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 823.862848][T13753] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 823.870077][T13753] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 823.876456][T13753] ? lockdep_hardirqs_on+0x98/0x150 [ 823.881693][T13753] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 823.887880][T13753] ? genl_family_rcv_msg_doit+0x106/0x310 [ 823.893630][T13753] ? kasan_check_range+0x89/0x290 [ 823.898687][T13753] genl_family_rcv_msg_doit+0x21a/0x310 [ 823.904260][T13753] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 823.910274][T13753] ? bpf_lsm_capable+0x9/0x10 [ 823.914976][T13753] ? security_capable+0x89/0xb0 [ 823.919852][T13753] genl_rcv_msg+0x611/0x7a0 [ 823.924382][T13753] ? genl_bind+0x360/0x360 [ 823.928813][T13753] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 823.935176][T13753] netlink_rcv_skb+0x235/0x4c0 [ 823.939959][T13753] ? genl_bind+0x360/0x360 [ 823.944419][T13753] ? netlink_ack+0x1160/0x1160 [ 823.949237][T13753] ? __lock_acquire+0x7d80/0x7d80 [ 823.954298][T13753] ? down_read+0x1ac/0x2e0 [ 823.958736][T13753] genl_rcv+0x28/0x40 [ 823.962741][T13753] netlink_unicast+0x7b1/0x930 [ 823.967539][T13753] netlink_sendmsg+0x8d0/0xbf0 [ 823.972337][T13753] ? netlink_getsockopt+0x590/0x590 [ 823.977554][T13753] ? apparmor_socket_sendmsg+0x8e/0x330 [ 823.983121][T13753] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 823.988423][T13753] ? security_socket_sendmsg+0x80/0xa0 [ 823.993893][T13753] ? netlink_getsockopt+0x590/0x590 [ 823.999109][T13753] ____sys_sendmsg+0x61b/0x980 [ 824.003898][T13753] ? __asan_memset+0x22/0x40 [ 824.008509][T13753] ? __sys_sendmsg_sock+0x30/0x30 [ 824.013552][T13753] ? __import_iovec+0x5f2/0x850 [ 824.018431][T13753] ? import_iovec+0x73/0xa0 [ 824.022959][T13753] ___sys_sendmsg+0x2a6/0x360 [ 824.027663][T13753] ? irqentry_enter+0x37/0x50 [ 824.032380][T13753] ? __sys_sendmsg+0x2b0/0x2b0 [ 824.037215][T13753] __se_sys_sendmsg+0x1d0/0x2c0 [ 824.042084][T13753] ? perf_trace_preemptirq_template+0x269/0x330 [ 824.048436][T13753] ? __x64_sys_sendmsg+0x80/0x80 [ 824.053408][T13753] ? lockdep_hardirqs_on+0x98/0x150 [ 824.058638][T13753] do_syscall_64+0x55/0xb0 [ 824.063071][T13753] ? clear_bhb_loop+0x40/0x90 [ 824.067763][T13753] ? clear_bhb_loop+0x40/0x90 [ 824.072454][T13753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 824.078362][T13753] RIP: 0033:0x7f073959e0d9 [ 824.082795][T13753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.102438][T13753] RSP: 002b:00007f073a463028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 824.110871][T13753] RAX: ffffffffffffffda RBX: 00007f0739825fa0 RCX: 00007f073959e0d9 [ 824.118857][T13753] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 824.126862][T13753] RBP: 00007f0739635024 R08: 0000000000000000 R09: 0000000000000000 [ 824.134850][T13753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.142831][T13753] R13: 00007f0739826038 R14: 00007f0739825fa0 R15: 00007ffd1d5d60a8 [ 824.150837][T13753] [ 824.298268][T13762] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2591'. [ 824.497416][T13762] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.2591'. [ 824.578099][T13758] netlink: 'syz.5.2588': attribute type 3 has an invalid length. [ 824.692562][T13758] netlink: 'syz.5.2588': attribute type 1 has an invalid length. [ 824.732786][T13758] netlink: 191376 bytes leftover after parsing attributes in process `syz.5.2588'. [ 825.833651][T13790] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2601'. [ 825.930922][T13790] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 825.941303][T13790] CPU: 1 PID: 13790 Comm: syz.5.2601 Not tainted syzkaller #0 [ 825.948838][T13790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 825.958961][T13790] Call Trace: [ 825.962295][T13790] [ 825.965265][T13790] dump_stack_lvl+0x18c/0x250 [ 825.970017][T13790] ? show_regs_print_info+0x20/0x20 [ 825.975276][T13790] ? load_image+0x420/0x420 [ 825.979859][T13790] sysfs_warn_dup+0x8e/0xa0 [ 825.984410][T13790] sysfs_do_create_link_sd+0xc0/0x110 [ 825.989829][T13790] device_add_class_symlinks+0x1cf/0x240 [ 825.995511][T13790] device_add+0x4f9/0xc40 [ 825.999896][T13790] wiphy_register+0x1d99/0x2ac0 [ 826.004820][T13790] ? cfg80211_event_work+0x40/0x40 [ 826.009980][T13790] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 826.016207][T13790] ieee80211_register_hw+0x2dd8/0x3b30 [ 826.021730][T13790] ? ieee80211_register_hw+0xfb1/0x3b30 [ 826.027336][T13790] ? ieee80211_tasklet_handler+0x20/0x20 [ 826.033014][T13790] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 826.038970][T13790] ? __debug_object_init+0xec/0x450 [ 826.044234][T13790] ? __asan_memset+0x22/0x40 [ 826.048876][T13790] ? __hrtimer_init+0x189/0x270 [ 826.053778][T13790] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 826.059579][T13790] ? mac80211_hwsim_free+0x220/0x220 [ 826.064903][T13790] ? __kmalloc_node_track_caller+0xf4/0x230 [ 826.070859][T13790] ? kstrndup+0xbd/0x140 [ 826.075177][T13790] hwsim_new_radio_nl+0xdad/0x1a70 [ 826.080352][T13790] ? mark_lock+0x94/0x320 [ 826.084740][T13790] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 826.090775][T13790] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 826.098035][T13790] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 826.104405][T13790] ? lockdep_hardirqs_on+0x98/0x150 [ 826.109652][T13790] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 826.115869][T13790] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 826.122256][T13790] genl_family_rcv_msg_doit+0x21a/0x310 [ 826.127864][T13790] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 826.133829][T13790] ? bpf_lsm_capable+0x9/0x10 [ 826.138563][T13790] ? security_capable+0x89/0xb0 [ 826.143476][T13790] genl_rcv_msg+0x611/0x7a0 [ 826.148035][T13790] ? genl_bind+0x360/0x360 [ 826.152488][T13790] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 826.158857][T13790] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 826.164663][T13790] netlink_rcv_skb+0x235/0x4c0 [ 826.169471][T13790] ? genl_bind+0x360/0x360 [ 826.173930][T13790] ? netlink_ack+0x1160/0x1160 [ 826.178765][T13790] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 826.184976][T13790] ? down_read+0x1ac/0x2e0 [ 826.189441][T13790] genl_rcv+0x28/0x40 [ 826.193464][T13790] netlink_unicast+0x7b1/0x930 [ 826.198299][T13790] netlink_sendmsg+0x8d0/0xbf0 [ 826.203206][T13790] ? netlink_getsockopt+0x590/0x590 [ 826.208445][T13790] ? apparmor_socket_sendmsg+0x8e/0x330 [ 826.214032][T13790] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 826.219364][T13790] ? security_socket_sendmsg+0x80/0xa0 [ 826.224856][T13790] ? netlink_getsockopt+0x590/0x590 [ 826.230095][T13790] ____sys_sendmsg+0x61b/0x980 [ 826.234911][T13790] ? __asan_memset+0x22/0x40 [ 826.239554][T13790] ? __sys_sendmsg_sock+0x30/0x30 [ 826.244630][T13790] ? __import_iovec+0x5f2/0x850 [ 826.249536][T13790] ? import_iovec+0x73/0xa0 [ 826.254086][T13790] ___sys_sendmsg+0x2a6/0x360 [ 826.258812][T13790] ? __sys_sendmsg+0x2b0/0x2b0 [ 826.263710][T13790] __se_sys_sendmsg+0x1d0/0x2c0 [ 826.268613][T13790] ? __x64_sys_sendmsg+0x80/0x80 [ 826.273640][T13790] ? syscall_enter_from_user_mode+0x2e/0x80 [ 826.279592][T13790] do_syscall_64+0x55/0xb0 [ 826.284066][T13790] ? clear_bhb_loop+0x40/0x90 [ 826.288785][T13790] ? clear_bhb_loop+0x40/0x90 [ 826.293588][T13790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 826.299519][T13790] RIP: 0033:0x7fc25119e0d9 [ 826.303951][T13790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.323578][T13790] RSP: 002b:00007fc252097028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.332014][T13790] RAX: ffffffffffffffda RBX: 00007fc251425fa0 RCX: 00007fc25119e0d9 [ 826.340002][T13790] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 826.347985][T13790] RBP: 00007fc251235024 R08: 0000000000000000 R09: 0000000000000000 [ 826.355971][T13790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.363954][T13790] R13: 00007fc251426038 R14: 00007fc251425fa0 R15: 00007ffc13f9eeb8 [ 826.371957][T13790] [ 826.613313][T13800] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2603'. [ 826.644759][T13800] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.2603'. [ 827.060214][T13803] netlink: 'syz.1.2604': attribute type 3 has an invalid length. [ 827.083696][T13803] netlink: 137972 bytes leftover after parsing attributes in process `syz.1.2604'. [ 829.728656][T13825] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2615'. [ 829.831175][T13825] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 829.846355][T13825] CPU: 0 PID: 13825 Comm: syz.5.2615 Not tainted syzkaller #0 [ 829.853909][T13825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 829.864030][T13825] Call Trace: [ 829.867353][T13825] [ 829.870321][T13825] dump_stack_lvl+0x18c/0x250 [ 829.875063][T13825] ? show_regs_print_info+0x20/0x20 [ 829.880308][T13825] ? load_image+0x420/0x420 [ 829.884881][T13825] sysfs_warn_dup+0x8e/0xa0 [ 829.889441][T13825] sysfs_do_create_link_sd+0xc0/0x110 [ 829.894865][T13825] device_add_class_symlinks+0x1cf/0x240 [ 829.900562][T13825] device_add+0x4f9/0xc40 [ 829.904965][T13825] wiphy_register+0x1d99/0x2ac0 [ 829.909883][T13825] ? cfg80211_event_work+0x40/0x40 [ 829.915031][T13825] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 829.921147][T13825] ieee80211_register_hw+0x2dd8/0x3b30 [ 829.926639][T13825] ? ieee80211_register_hw+0xfb1/0x3b30 [ 829.932210][T13825] ? ieee80211_tasklet_handler+0x20/0x20 [ 829.937858][T13825] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 829.943813][T13825] ? __debug_object_init+0xec/0x450 [ 829.949030][T13825] ? __asan_memset+0x22/0x40 [ 829.953654][T13825] ? __hrtimer_init+0x189/0x270 [ 829.958611][T13825] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 829.964368][T13825] ? mac80211_hwsim_free+0x220/0x220 [ 829.969664][T13825] ? rcu_is_watching+0x15/0xb0 [ 829.974450][T13825] ? kstrndup+0xbd/0x140 [ 829.978729][T13825] hwsim_new_radio_nl+0xdad/0x1a70 [ 829.983865][T13825] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 829.989612][T13825] ? mark_lock+0x94/0x320 [ 829.993967][T13825] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 830.000313][T13825] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 830.006485][T13825] ? lockdep_hardirqs_on+0x98/0x150 [ 830.011709][T13825] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 830.017895][T13825] genl_family_rcv_msg_doit+0x21a/0x310 [ 830.023469][T13825] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 830.029386][T13825] ? bpf_lsm_capable+0x9/0x10 [ 830.034132][T13825] ? security_capable+0x89/0xb0 [ 830.039009][T13825] genl_rcv_msg+0x611/0x7a0 [ 830.043535][T13825] ? genl_bind+0x360/0x360 [ 830.047965][T13825] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 830.053964][T13825] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 830.060310][T13825] ? ref_tracker_free+0x686/0x830 [ 830.065358][T13825] netlink_rcv_skb+0x235/0x4c0 [ 830.070136][T13825] ? genl_bind+0x360/0x360 [ 830.074567][T13825] ? netlink_ack+0x1160/0x1160 [ 830.079355][T13825] ? __lock_acquire+0x7d80/0x7d80 [ 830.084415][T13825] ? down_read+0x1ac/0x2e0 [ 830.088860][T13825] genl_rcv+0x28/0x40 [ 830.092860][T13825] netlink_unicast+0x7b1/0x930 [ 830.097658][T13825] netlink_sendmsg+0x8d0/0xbf0 [ 830.102445][T13825] ? netlink_getsockopt+0x590/0x590 [ 830.107662][T13825] ? apparmor_socket_sendmsg+0x8e/0x330 [ 830.113225][T13825] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 830.118526][T13825] ? security_socket_sendmsg+0x80/0xa0 [ 830.123997][T13825] ? netlink_getsockopt+0x590/0x590 [ 830.129212][T13825] ____sys_sendmsg+0x61b/0x980 [ 830.133998][T13825] ? __asan_memset+0x22/0x40 [ 830.138606][T13825] ? __sys_sendmsg_sock+0x30/0x30 [ 830.143642][T13825] ? __import_iovec+0x5f2/0x850 [ 830.148519][T13825] ? import_iovec+0x73/0xa0 [ 830.153048][T13825] ___sys_sendmsg+0x2a6/0x360 [ 830.157745][T13825] ? __sys_sendmsg+0x2b0/0x2b0 [ 830.162572][T13825] __se_sys_sendmsg+0x1d0/0x2c0 [ 830.167448][T13825] ? __x64_sys_sendmsg+0x80/0x80 [ 830.172417][T13825] ? syscall_enter_from_user_mode+0x2e/0x80 [ 830.178336][T13825] do_syscall_64+0x55/0xb0 [ 830.182770][T13825] ? clear_bhb_loop+0x40/0x90 [ 830.187464][T13825] ? clear_bhb_loop+0x40/0x90 [ 830.192160][T13825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 830.198078][T13825] RIP: 0033:0x7fc25119e0d9 [ 830.202510][T13825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.222134][T13825] RSP: 002b:00007fc252097028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.230568][T13825] RAX: ffffffffffffffda RBX: 00007fc251425fa0 RCX: 00007fc25119e0d9 [ 830.238551][T13825] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 830.246534][T13825] RBP: 00007fc251235024 R08: 0000000000000000 R09: 0000000000000000 [ 830.254517][T13825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.262498][T13825] R13: 00007fc251426038 R14: 00007fc251425fa0 R15: 00007ffc13f9eeb8 [ 830.270499][T13825] [ 830.423699][T13834] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2618'. [ 830.444585][T13834] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.2618'. [ 830.999101][T13839] netlink: 'syz.4.2620': attribute type 3 has an invalid length. [ 831.074758][T13839] netlink: 'syz.4.2620': attribute type 1 has an invalid length. [ 831.153278][T13839] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2620'. [ 833.176859][T13866] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2629'. [ 833.269346][T13866] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 833.290341][T13866] CPU: 1 PID: 13866 Comm: syz.3.2629 Not tainted syzkaller #0 [ 833.297880][T13866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 833.307995][T13866] Call Trace: [ 833.311311][T13866] [ 833.314285][T13866] dump_stack_lvl+0x18c/0x250 [ 833.319024][T13866] ? show_regs_print_info+0x20/0x20 [ 833.324282][T13866] ? load_image+0x420/0x420 [ 833.328864][T13866] sysfs_warn_dup+0x8e/0xa0 [ 833.333437][T13866] sysfs_do_create_link_sd+0xc0/0x110 [ 833.338858][T13866] device_add_class_symlinks+0x1cf/0x240 [ 833.344571][T13866] device_add+0x4f9/0xc40 [ 833.348961][T13866] wiphy_register+0x1d99/0x2ac0 [ 833.353908][T13866] ? cfg80211_event_work+0x40/0x40 [ 833.359074][T13866] ? minstrel_ht_alloc+0x88a/0x990 [ 833.364260][T13866] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 833.370417][T13866] ieee80211_register_hw+0x2dd8/0x3b30 [ 833.375996][T13866] ? ieee80211_register_hw+0xfb1/0x3b30 [ 833.381606][T13866] ? ieee80211_tasklet_handler+0x20/0x20 [ 833.387302][T13866] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 833.393269][T13866] ? __debug_object_init+0xec/0x450 [ 833.398494][T13866] ? __asan_memset+0x22/0x40 [ 833.403125][T13866] ? __hrtimer_init+0x189/0x270 [ 833.408011][T13866] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 833.413790][T13866] ? mac80211_hwsim_free+0x220/0x220 [ 833.419122][T13866] ? rcu_is_watching+0x15/0xb0 [ 833.423941][T13866] ? kstrndup+0xbd/0x140 [ 833.428219][T13866] hwsim_new_radio_nl+0xdad/0x1a70 [ 833.433360][T13866] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 833.439101][T13866] ? mark_lock+0x94/0x320 [ 833.443453][T13866] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 833.449805][T13866] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 833.455982][T13866] ? lockdep_hardirqs_on+0x98/0x150 [ 833.461223][T13866] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 833.467494][T13866] genl_family_rcv_msg_doit+0x21a/0x310 [ 833.473070][T13866] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 833.478997][T13866] ? bpf_lsm_capable+0x9/0x10 [ 833.483716][T13866] ? security_capable+0x89/0xb0 [ 833.488599][T13866] genl_rcv_msg+0x611/0x7a0 [ 833.493121][T13866] ? genl_bind+0x360/0x360 [ 833.497570][T13866] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 833.503976][T13866] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 833.509724][T13866] netlink_rcv_skb+0x235/0x4c0 [ 833.514520][T13866] ? genl_bind+0x360/0x360 [ 833.518999][T13866] ? netlink_ack+0x1160/0x1160 [ 833.524018][T13866] ? __lock_acquire+0x7d80/0x7d80 [ 833.529117][T13866] ? down_read+0x1ac/0x2e0 [ 833.533573][T13866] genl_rcv+0x28/0x40 [ 833.537580][T13866] netlink_unicast+0x7b1/0x930 [ 833.542485][T13866] netlink_sendmsg+0x8d0/0xbf0 [ 833.547266][T13866] ? netlink_getsockopt+0x590/0x590 [ 833.552481][T13866] ? apparmor_socket_sendmsg+0x8e/0x330 [ 833.558080][T13866] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 833.563467][T13866] ? security_socket_sendmsg+0x80/0xa0 [ 833.569022][T13866] ? netlink_getsockopt+0x590/0x590 [ 833.574290][T13866] ____sys_sendmsg+0x61b/0x980 [ 833.579079][T13866] ? __asan_memset+0x22/0x40 [ 833.583705][T13866] ? __sys_sendmsg_sock+0x30/0x30 [ 833.588754][T13866] ? __import_iovec+0x5f2/0x850 [ 833.593655][T13866] ? import_iovec+0x73/0xa0 [ 833.598184][T13866] ___sys_sendmsg+0x2a6/0x360 [ 833.602906][T13866] ? __sys_sendmsg+0x2b0/0x2b0 [ 833.607744][T13866] __se_sys_sendmsg+0x1d0/0x2c0 [ 833.612622][T13866] ? __x64_sys_sendmsg+0x80/0x80 [ 833.617597][T13866] ? syscall_enter_from_user_mode+0x2e/0x80 [ 833.623598][T13866] do_syscall_64+0x55/0xb0 [ 833.628080][T13866] ? clear_bhb_loop+0x40/0x90 [ 833.632791][T13866] ? clear_bhb_loop+0x40/0x90 [ 833.637485][T13866] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 833.643399][T13866] RIP: 0033:0x7f565259e0d9 [ 833.647830][T13866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.667580][T13866] RSP: 002b:00007f5653451028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.676058][T13866] RAX: ffffffffffffffda RBX: 00007f5652825fa0 RCX: 00007f565259e0d9 [ 833.684221][T13866] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 833.692211][T13866] RBP: 00007f5652635024 R08: 0000000000000000 R09: 0000000000000000 [ 833.700226][T13866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.708226][T13866] R13: 00007f5652826038 R14: 00007f5652825fa0 R15: 00007ffe71640c28 [ 833.716223][T13866] [ 833.871716][T13874] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.2631'. [ 833.891604][T13874] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.2631'. [ 836.058655][T13909] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2644'. [ 836.286654][T13909] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 836.302045][T13909] CPU: 0 PID: 13909 Comm: syz.3.2644 Not tainted syzkaller #0 [ 836.309595][T13909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 836.319710][T13909] Call Trace: [ 836.323043][T13909] [ 836.326013][T13909] dump_stack_lvl+0x18c/0x250 [ 836.330739][T13909] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 836.336940][T13909] ? show_regs_print_info+0x20/0x20 [ 836.342184][T13909] ? load_image+0x420/0x420 [ 836.346733][T13909] ? sysfs_warn_dup+0x65/0xa0 [ 836.351442][T13909] sysfs_warn_dup+0x8e/0xa0 [ 836.355974][T13909] sysfs_do_create_link_sd+0xc0/0x110 [ 836.361387][T13909] device_add_class_symlinks+0x1cf/0x240 [ 836.367043][T13909] device_add+0x4f9/0xc40 [ 836.371416][T13909] wiphy_register+0x1d99/0x2ac0 [ 836.376307][T13909] ? cfg80211_event_work+0x40/0x40 [ 836.381438][T13909] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 836.387638][T13909] ? rtnl_unlock+0x9/0x10 [ 836.391992][T13909] ieee80211_register_hw+0x2dd8/0x3b30 [ 836.397490][T13909] ? ieee80211_register_hw+0xfb1/0x3b30 [ 836.403070][T13909] ? ieee80211_tasklet_handler+0x20/0x20 [ 836.408811][T13909] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 836.414730][T13909] ? __debug_object_init+0xec/0x450 [ 836.419949][T13909] ? __asan_memset+0x22/0x40 [ 836.424592][T13909] ? __hrtimer_init+0x189/0x270 [ 836.429467][T13909] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 836.435214][T13909] ? lock_chain_count+0x20/0x20 [ 836.440113][T13909] ? mac80211_hwsim_free+0x220/0x220 [ 836.445414][T13909] ? kstrndup+0xaf/0x140 [ 836.449684][T13909] ? kstrndup+0xbd/0x140 [ 836.453958][T13909] hwsim_new_radio_nl+0xdad/0x1a70 [ 836.459100][T13909] ? __nla_validate+0x50/0x50 [ 836.463814][T13909] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 836.470164][T13909] ? __nla_parse+0x24/0x50 [ 836.474632][T13909] ? __nla_parse+0x40/0x50 [ 836.479075][T13909] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 836.485427][T13909] genl_family_rcv_msg_doit+0x21a/0x310 [ 836.490997][T13909] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 836.496916][T13909] ? bpf_lsm_capable+0x9/0x10 [ 836.501613][T13909] ? security_capable+0x89/0xb0 [ 836.506490][T13909] genl_rcv_msg+0x611/0x7a0 [ 836.511024][T13909] ? genl_bind+0x360/0x360 [ 836.515455][T13909] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 836.521819][T13909] netlink_rcv_skb+0x235/0x4c0 [ 836.526599][T13909] ? genl_bind+0x360/0x360 [ 836.531034][T13909] ? netlink_ack+0x1160/0x1160 [ 836.535849][T13909] ? genl_bind+0x360/0x360 [ 836.540300][T13909] genl_rcv+0x28/0x40 [ 836.544299][T13909] netlink_unicast+0x7b1/0x930 [ 836.549201][T13909] netlink_sendmsg+0x8d0/0xbf0 [ 836.553992][T13909] ? netlink_getsockopt+0x590/0x590 [ 836.559213][T13909] ? apparmor_socket_sendmsg+0x8e/0x330 [ 836.564774][T13909] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 836.570081][T13909] ? security_socket_sendmsg+0x80/0xa0 [ 836.575568][T13909] ? netlink_getsockopt+0x590/0x590 [ 836.580780][T13909] ____sys_sendmsg+0x61b/0x980 [ 836.585566][T13909] ? __asan_memset+0x22/0x40 [ 836.590174][T13909] ? __sys_sendmsg_sock+0x30/0x30 [ 836.595212][T13909] ? __import_iovec+0x5f2/0x850 [ 836.600094][T13909] ? import_iovec+0x73/0xa0 [ 836.604620][T13909] ___sys_sendmsg+0x2a6/0x360 [ 836.609319][T13909] ? __sys_sendmsg+0x2b0/0x2b0 [ 836.614158][T13909] __se_sys_sendmsg+0x1d0/0x2c0 [ 836.619030][T13909] ? __x64_sys_sendmsg+0x80/0x80 [ 836.624004][T13909] ? syscall_enter_from_user_mode+0x2e/0x80 [ 836.629920][T13909] do_syscall_64+0x55/0xb0 [ 836.634349][T13909] ? clear_bhb_loop+0x40/0x90 [ 836.639042][T13909] ? clear_bhb_loop+0x40/0x90 [ 836.643739][T13909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 836.649647][T13909] RIP: 0033:0x7f565259e0d9 [ 836.654077][T13909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.673697][T13909] RSP: 002b:00007f5653451028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.682129][T13909] RAX: ffffffffffffffda RBX: 00007f5652825fa0 RCX: 00007f565259e0d9 [ 836.690120][T13909] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 836.698108][T13909] RBP: 00007f5652635024 R08: 0000000000000000 R09: 0000000000000000 [ 836.706091][T13909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.714159][T13909] R13: 00007f5652826038 R14: 00007f5652825fa0 R15: 00007ffe71640c28 [ 836.722159][T13909] [ 836.792595][T13912] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2645'. [ 836.815220][T13912] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.2645'. [ 837.122002][T13921] netlink: 'syz.3.2648': attribute type 3 has an invalid length. [ 837.143060][T13921] netlink: 'syz.3.2648': attribute type 1 has an invalid length. [ 837.195460][T13921] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2648'. [ 839.640474][T13951] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2658'. [ 839.678040][T13951] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.2658'. [ 839.866123][T13562] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 840.964113][T13966] netlink: 'syz.3.2665': attribute type 3 has an invalid length. [ 841.018484][T13966] netlink: 137972 bytes leftover after parsing attributes in process `syz.3.2665'. [ 843.308197][T13998] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2676'. [ 843.333742][T13998] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.2676'. [ 844.527389][T14017] netlink: 'syz.3.2685': attribute type 3 has an invalid length. [ 844.537487][T14017] netlink: 'syz.3.2685': attribute type 1 has an invalid length. [ 844.560782][T14017] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2685'. [ 845.316297][T14040] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.2694'. [ 845.346367][T14040] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.2694'. [ 847.638308][T14048] netlink: 'syz.1.2704': attribute type 3 has an invalid length. [ 847.719116][T14048] netlink: 'syz.1.2704': attribute type 1 has an invalid length. [ 847.785963][T14048] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.2704'. [ 849.454598][T14074] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2707'. [ 849.472878][T14074] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.2707'. [ 851.271268][T14093] netlink: 'syz.4.2713': attribute type 3 has an invalid length. [ 851.288442][T14093] netlink: 137972 bytes leftover after parsing attributes in process `syz.4.2713'. [ 851.787408][T14116] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.2722'. [ 851.802378][T14116] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.2722'. [ 854.448106][T14142] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2732'. [ 854.467255][T14142] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.2732'. [ 855.019056][T14152] netlink: 'syz.5.2735': attribute type 3 has an invalid length. [ 855.120539][T14152] netlink: 'syz.5.2735': attribute type 1 has an invalid length. [ 855.228814][T14152] netlink: 191376 bytes leftover after parsing attributes in process `syz.5.2735'. [ 857.286302][T14166] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2746'. [ 857.332044][T14166] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.2746'. [ 858.779999][T14191] netlink: 'syz.3.2749': attribute type 3 has an invalid length. [ 858.841769][T14191] netlink: 'syz.3.2749': attribute type 1 has an invalid length. [ 858.913591][T14191] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2749'. [ 861.616870][T14223] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2758'. [ 861.674074][T14223] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.2758'. [ 863.290137][T14250] netlink: 'syz.5.2769': attribute type 3 has an invalid length. [ 863.348354][T14250] netlink: 'syz.5.2769': attribute type 1 has an invalid length. [ 863.409234][T14250] netlink: 191376 bytes leftover after parsing attributes in process `syz.5.2769'. [ 863.644733][T14262] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2774'. [ 863.693467][T14262] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.2774'. [ 865.623152][T14290] netlink: 'syz.4.2785': attribute type 3 has an invalid length. [ 865.631498][T14290] netlink: 137972 bytes leftover after parsing attributes in process `syz.4.2785'. [ 866.307939][T14310] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2789'. [ 866.347097][T14310] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.2789'. [ 867.664014][T14333] netlink: 'syz.5.2800': attribute type 3 has an invalid length. [ 867.691287][T14333] netlink: 'syz.5.2800': attribute type 1 has an invalid length. [ 867.701533][T14333] netlink: 191376 bytes leftover after parsing attributes in process `syz.5.2800'. [ 870.151240][T14360] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.2806'. [ 870.671074][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.677525][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.932550][T14360] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.2806'. [ 872.080703][T14383] netlink: 'syz.3.2813': attribute type 3 has an invalid length. [ 872.092730][T14383] netlink: 'syz.3.2813': attribute type 1 has an invalid length. [ 872.101948][T14383] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2813'. [ 872.574785][T14394] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2817'. [ 872.622877][T14394] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.2817'. [ 872.891999][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 876.171745][T14424] netlink: 'syz.4.2828': attribute type 3 has an invalid length. [ 876.187011][T14424] netlink: 'syz.4.2828': attribute type 1 has an invalid length. [ 876.247479][T14424] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2828'. [ 876.387403][T14433] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.2830'. [ 876.417520][T14433] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.2830'. [ 878.783637][T14445] netlink: 'syz.4.2843': attribute type 3 has an invalid length. [ 878.794198][T14445] netlink: 137972 bytes leftover after parsing attributes in process `syz.4.2843'. [ 881.655494][T14468] netlink: 'syz.4.2850': attribute type 3 has an invalid length. [ 881.696970][T14468] netlink: 'syz.4.2850': attribute type 1 has an invalid length. [ 881.721601][T14468] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2850'. [ 883.091948][T14491] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2845'. [ 883.182849][T14491] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.2845'. [ 885.098682][T14510] netlink: 'syz.4.2855': attribute type 3 has an invalid length. [ 885.203123][T14510] netlink: 'syz.4.2855': attribute type 1 has an invalid length. [ 885.211330][T14510] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2855'. [ 885.501820][T14526] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2859'. [ 885.540678][T14526] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.2859'. [ 889.368862][T14555] netlink: 'syz.3.2870': attribute type 3 has an invalid length. [ 889.397651][T14555] netlink: 'syz.3.2870': attribute type 1 has an invalid length. [ 889.432244][T14555] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2870'. [ 889.578791][T14565] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2872'. [ 889.623352][T14565] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.2872'. [ 893.598137][T14597] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2885'. [ 893.906938][T14597] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.2885'. [ 894.676267][T14602] netlink: 'syz.5.2887': attribute type 3 has an invalid length. [ 894.743237][T14602] netlink: 'syz.5.2887': attribute type 1 has an invalid length. [ 894.839996][T14602] netlink: 191376 bytes leftover after parsing attributes in process `syz.5.2887'. [ 896.491669][T14635] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.2897'. [ 896.518843][T14635] netlink: 22856 bytes leftover after parsing attributes in process `syz.5.2897'. [ 897.508841][T14646] netlink: 'syz.5.2900': attribute type 3 has an invalid length. [ 897.541428][T14646] netlink: 'syz.5.2900': attribute type 1 has an invalid length. [ 897.565938][T14646] netlink: 191376 bytes leftover after parsing attributes in process `syz.5.2900'. [ 898.644712][T14672] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2909'. [ 898.671484][T14672] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.2909'. [ 904.114250][T14694] netlink: 'syz.1.2915': attribute type 3 has an invalid length. [ 904.316643][T14694] netlink: 'syz.1.2915': attribute type 1 has an invalid length. [ 904.433379][T14694] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.2915'. [ 904.453850][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 905.942347][T14708] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2920'. [ 906.002112][T14708] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.2920'. [ 907.733886][T14723] netlink: 'syz.5.2926': attribute type 3 has an invalid length. [ 907.742316][T14723] netlink: 137972 bytes leftover after parsing attributes in process `syz.5.2926'. [ 911.209833][T14741] netlink: 'syz.4.2937': attribute type 3 has an invalid length. [ 911.272964][T14741] netlink: 'syz.4.2937': attribute type 1 has an invalid length. [ 911.280771][T14741] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2937'. [ 911.657866][T14745] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2930'. [ 911.780343][T14745] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.2930'. [ 915.727623][T14781] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2942'. [ 915.783830][T14781] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.2942'. [ 916.010092][T14778] netlink: 'syz.4.2941': attribute type 3 has an invalid length. [ 916.094747][T14778] netlink: 137972 bytes leftover after parsing attributes in process `syz.4.2941'. [ 918.739619][T14820] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2952'. [ 918.822886][T14820] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.2952'. [ 919.429781][T14825] netlink: 'syz.1.2956': attribute type 3 has an invalid length. [ 919.453009][T14825] netlink: 137972 bytes leftover after parsing attributes in process `syz.1.2956'. [ 921.515830][T14861] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2965'. [ 921.543382][T14861] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.2965'. [ 922.268405][T14875] netlink: 'syz.5.2970': attribute type 3 has an invalid length. [ 922.285785][T14875] netlink: 'syz.5.2970': attribute type 1 has an invalid length. [ 922.313317][T14875] netlink: 191376 bytes leftover after parsing attributes in process `syz.5.2970'. [ 923.739902][T14895] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2978'. [ 923.751061][T14895] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.2978'. [ 925.086083][T14914] netlink: 'syz.3.2985': attribute type 3 has an invalid length. [ 925.260924][T14914] netlink: 'syz.3.2985': attribute type 1 has an invalid length. [ 925.276319][T14914] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2985'. [ 925.806656][T14931] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2990'. [ 925.821310][T14931] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.2990'. [ 927.785734][T14933] netlink: 'syz.4.2999': attribute type 3 has an invalid length. [ 927.798009][T14933] netlink: 'syz.4.2999': attribute type 1 has an invalid length. [ 927.808859][T14933] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2999'. [ 932.483320][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.493092][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.455392][T14973] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3002'. [ 934.509208][T14973] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.3002'. [ 935.591342][T14988] netlink: 'syz.4.3007': attribute type 3 has an invalid length. [ 935.628435][T14988] netlink: 'syz.4.3007': attribute type 1 has an invalid length. [ 935.693070][T14988] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.3007'. [ 935.978175][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 967.387069][T13552] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 993.561308][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.567904][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.847179][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1007.051921][T15510] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1007.062994][T15510] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1007.087549][T15510] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1007.110811][T15510] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1007.128234][T15510] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1007.146219][T15510] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1007.606137][ T1086] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.778768][ T1086] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.280513][ T1086] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.428761][ T1086] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.139512][T15509] chnl_net:caif_netlink_parms(): no params data found [ 1009.202914][ T5786] Bluetooth: hci0: command tx timeout [ 1009.419502][ T1086] tipc: Left network mode [ 1011.282839][ T5786] Bluetooth: hci0: command tx timeout [ 1012.178958][T15509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.192471][T15509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.205918][T15509] bridge_slave_0: entered allmulticast mode [ 1012.214495][T15509] bridge_slave_0: entered promiscuous mode [ 1012.384372][T15509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.396917][T15509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.416157][T15509] bridge_slave_1: entered allmulticast mode [ 1012.426015][T15509] bridge_slave_1: entered promiscuous mode [ 1012.913906][T15509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.092904][T15509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.335518][T15509] team0: Port device team_slave_0 added [ 1013.362994][ T5786] Bluetooth: hci0: command tx timeout [ 1013.507828][T15509] team0: Port device team_slave_1 added [ 1014.035906][T15509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.071196][T15599] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1014.088857][T15509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.172941][T15509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.207843][T15509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.220256][T15509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.250062][T15509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.290269][T15599] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1014.787595][T15608] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3171'. [ 1015.192913][T15509] hsr_slave_0: entered promiscuous mode [ 1015.412344][T15509] hsr_slave_1: entered promiscuous mode [ 1015.442881][ T5786] Bluetooth: hci0: command tx timeout [ 1015.604017][T15608] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3171'. [ 1015.886618][T15622] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3172'. [ 1016.403114][T15622] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3172'. [ 1016.957131][T15642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3174'. [ 1016.988138][T15642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3174'. [ 1017.146558][T15644] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3176'. [ 1017.192910][T15644] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3176'. [ 1018.538597][ T1086] hsr_slave_0: left promiscuous mode [ 1018.551228][ T1086] hsr_slave_1: left promiscuous mode [ 1018.602051][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1018.654726][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.698151][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1018.773495][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.844374][ T1086] batadv0: left allmulticast mode [ 1018.849502][ T1086] batadv0: left promiscuous mode [ 1018.889139][ T1086] bridge0: port 3(batadv0) entered disabled state [ 1018.917770][ T1086] bridge_slave_1: left allmulticast mode [ 1018.942855][ T1086] bridge_slave_1: left promiscuous mode [ 1018.948693][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.986475][ T1086] bridge_slave_0: left allmulticast mode [ 1018.992233][ T1086] bridge_slave_0: left promiscuous mode [ 1019.020119][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.107702][ T1086] veth1_macvtap: left promiscuous mode [ 1019.119144][ T1086] veth0_macvtap: left promiscuous mode [ 1019.128339][ T1086] veth1_vlan: left promiscuous mode [ 1019.138232][ T1086] veth0_vlan: left promiscuous mode [ 1019.932417][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.983669][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.310348][ T1086] bond0 (unregistering): Released all slaves [ 1020.563690][T15509] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1020.627204][T15509] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1020.729424][T15509] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1020.767152][T15509] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1021.017733][T15509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.279915][T15509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1022.345100][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.352300][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.375113][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.382344][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.500468][T15714] __nla_validate_parse: 2 callbacks suppressed [ 1022.500487][T15714] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3189'. [ 1022.690642][T15714] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3189'. [ 1023.600254][T15509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.828264][T15509] veth0_vlan: entered promiscuous mode [ 1023.950762][T15509] veth1_vlan: entered promiscuous mode [ 1024.086200][T15509] veth0_macvtap: entered promiscuous mode [ 1024.128950][T15509] veth1_macvtap: entered promiscuous mode [ 1024.363573][T15762] netlink: 'syz.4.3200': attribute type 1 has an invalid length. [ 1024.376774][T15762] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.3200'. [ 1024.448395][T15509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.472703][T15509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.491252][T15509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.508521][T15509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.521681][T15509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.536363][T15509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1024.551511][T15509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1026.525014][T15769] IPv6: Can't replace route, no match found [ 1026.556216][T15509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.602959][T15509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.647087][T15509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.675386][T15509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.707995][T15509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.728865][T15509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.756673][T15509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.774856][T15509] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.791255][T15509] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.803895][T15509] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.820595][T15509] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.969028][T15799] syzkaller0: entered promiscuous mode [ 1026.978757][T15799] syzkaller0: entered allmulticast mode [ 1033.030738][T15841] netlink: 'syz.4.3209': attribute type 6 has an invalid length. [ 1033.045730][T15841] netlink: 'syz.4.3209': attribute type 1 has an invalid length. [ 1033.069918][T15841] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.3209'. [ 1033.081982][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.101536][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.178584][T15849] netlink: 'syz.1.3213': attribute type 39 has an invalid length. [ 1033.321649][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.348008][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.580615][T15510] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1040.595649][T15510] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1040.604131][T15510] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1040.615127][T15510] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1040.632238][T15510] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1040.639799][T15510] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1042.971330][ T5786] Bluetooth: hci2: command tx timeout [ 1043.216747][T15877] netlink: 'syz.5.3222': attribute type 6 has an invalid length. [ 1043.245154][T15877] netlink: 'syz.5.3222': attribute type 1 has an invalid length. [ 1043.267791][T15877] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.3222'. [ 1043.954690][T15867] chnl_net:caif_netlink_parms(): no params data found [ 1044.592997][T15891] netlink: 'syz.3.3225': attribute type 39 has an invalid length. [ 1045.052993][ T5786] Bluetooth: hci2: command tx timeout [ 1045.260826][T15867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.785284][T15867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.839744][T15867] bridge_slave_0: entered allmulticast mode [ 1045.914846][T15867] bridge_slave_0: entered promiscuous mode [ 1046.651122][T15867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.673497][T15867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.697399][T15867] bridge_slave_1: entered allmulticast mode [ 1046.743126][T15867] bridge_slave_1: entered promiscuous mode [ 1046.777211][T15905] netlink: 'syz.3.3230': attribute type 1 has an invalid length. [ 1046.843438][T15905] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3230'. [ 1046.994086][T15867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.148832][ T5786] Bluetooth: hci2: command tx timeout [ 1047.165482][T15867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.385518][T15867] team0: Port device team_slave_0 added [ 1047.478638][T15867] team0: Port device team_slave_1 added [ 1047.657407][T13559] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.829962][T15867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.858839][T15867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.959679][T15867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.107402][T13559] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.167360][T15867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.187462][T15867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.223691][T15867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.263501][T13559] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.394119][T13559] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.431006][T15867] hsr_slave_0: entered promiscuous mode [ 1048.453972][T15867] hsr_slave_1: entered promiscuous mode [ 1048.481844][T15867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1048.499825][T15867] Cannot create hsr debugfs directory [ 1048.832840][T13559] tipc: Left network mode [ 1049.202716][ T5786] Bluetooth: hci2: command tx timeout [ 1049.471308][T15928] netlink: 'syz.3.3235': attribute type 10 has an invalid length. [ 1049.496977][T15928] team0: Port device netdevsim0 added [ 1049.588554][T15934] netlink: 'syz.3.3235': attribute type 10 has an invalid length. [ 1049.675913][T15934] team0: Port device netdevsim0 removed [ 1049.707267][T15934] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1053.381959][T15867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1053.392991][T15947] ------------[ cut here ]------------ [ 1053.395916][T15867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1053.399072][T15947] WARNING: CPU: 1 PID: 15947 at kernel/events/core.c:6800 perf_pending_task+0x357/0x480 [ 1053.415669][T15947] Modules linked in: [ 1053.420533][T15947] CPU: 1 PID: 15947 Comm: syz.5.3241 Not tainted syzkaller #0 [ 1053.428204][T15947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1053.438443][T15947] RIP: 0010:perf_pending_task+0x357/0x480 [ 1053.445425][T15947] Code: e8 1e c9 d5 ff 84 db 75 10 e8 85 c6 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 75 c6 d5 ff e8 20 f2 4e ff eb e9 e8 69 c6 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1053.465363][T15947] RSP: 0018:ffffc900033b79c8 EFLAGS: 00010293 [ 1053.471498][T15947] RAX: ffffffff81b1ab17 RBX: ffff88802a972f10 RCX: ffff888028001e00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1053.479580][T15947] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1053.487712][T15947] RBP: ffff88802a972cd0 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 1053.495798][T15947] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffff888028001e00 [ 1053.503843][T15947] R13: ffff88805ed80930 R14: 0000000000000000 R15: 1ffff1100552e59a [ 1053.511880][T15947] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1053.520909][T15947] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1053.528371][T15947] CR2: 0000001b2dd13ff8 CR3: 000000001ca76000 CR4: 00000000003506e0 [ 1053.536735][T15947] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1053.544829][T15947] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1053.552956][T15947] Call Trace: [ 1053.556275][T15947] [ 1053.559246][T15947] task_work_run+0x1d4/0x260 [ 1053.564126][T15947] ? task_work_cancel+0x220/0x220 [ 1053.569234][T15947] do_exit+0x986/0x2530 [ 1053.573551][T15947] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1053.579592][T15947] ? put_task_struct+0xc0/0xc0 [ 1053.584479][T15947] ? asm_sysvec_irq_work+0x1a/0x20 [ 1053.589642][T15947] ? lockdep_hardirqs_on+0x98/0x150 [ 1053.594986][T15947] ? asm_sysvec_irq_work+0x1a/0x20 [ 1053.600172][T15947] do_group_exit+0x22d/0x2f0 [ 1053.604966][T15947] ? _raw_spin_unlock_irq+0x29/0x50 [ 1053.610222][T15947] get_signal+0x12a6/0x1390 [ 1053.614846][T15947] arch_do_signal_or_restart+0xc2/0x7b0 [ 1053.620491][T15947] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1053.627155][T15947] ? get_sigframe_size+0x20/0x20 [ 1053.632157][T15947] ? asm_sysvec_irq_work+0x1a/0x20 [ 1053.637489][T15947] ? exit_to_user_mode_loop+0x3b/0x110 [ 1053.643101][T15947] exit_to_user_mode_loop+0x70/0x110 [ 1053.648442][T15947] exit_to_user_mode_prepare+0xee/0x180 [ 1053.654107][T15947] syscall_exit_to_user_mode+0x1a/0x50 [ 1053.659612][T15947] do_syscall_64+0x61/0xb0 [ 1053.664158][T15947] ? clear_bhb_loop+0x40/0x90 [ 1053.668880][T15947] ? clear_bhb_loop+0x40/0x90 [ 1053.673730][T15947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.679681][T15947] RIP: 0033:0x7fc25119e0d9 [ 1053.684239][T15947] Code: Unable to access opcode bytes at 0x7fc25119e0af. [ 1053.691361][T15947] RSP: 002b:00007fc2520970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1053.699909][T15947] RAX: fffffffffffffe00 RBX: 00007fc251425fa8 RCX: 00007fc25119e0d9 [ 1053.708010][T15947] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc251425fa8 [ 1053.716112][T15947] RBP: 00007fc251425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.724162][T15947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.732816][T15947] R13: 00007fc251426038 R14: 00007ffc13f9edd0 R15: 00007ffc13f9eeb8 [ 1053.740853][T15947] [ 1053.744138][T15947] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1053.751445][T15947] CPU: 1 PID: 15947 Comm: syz.5.3241 Not tainted syzkaller #0 [ 1053.758941][T15947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1053.769039][T15947] Call Trace: [ 1053.772343][T15947] [ 1053.775298][T15947] dump_stack_lvl+0x18c/0x250 [ 1053.780020][T15947] ? show_regs_print_info+0x20/0x20 [ 1053.785273][T15947] ? load_image+0x420/0x420 [ 1053.789845][T15947] panic+0x2ca/0x720 [ 1053.793811][T15947] ? bpf_jit_dump+0xd0/0xd0 [ 1053.798375][T15947] __warn+0x2e0/0x470 [ 1053.802405][T15947] ? perf_pending_task+0x357/0x480 [ 1053.807564][T15947] ? perf_pending_task+0x357/0x480 [ 1053.812715][T15947] report_bug+0x2be/0x4f0 [ 1053.817123][T15947] ? perf_pending_task+0x357/0x480 [ 1053.822236][T15947] ? perf_pending_task+0x357/0x480 [ 1053.827352][T15947] ? perf_pending_task+0x359/0x480 [ 1053.832505][T15947] handle_bug+0xcf/0x120 [ 1053.836763][T15947] exc_invalid_op+0x1a/0x50 [ 1053.841279][T15947] asm_exc_invalid_op+0x1a/0x20 [ 1053.846140][T15947] RIP: 0010:perf_pending_task+0x357/0x480 [ 1053.851877][T15947] Code: e8 1e c9 d5 ff 84 db 75 10 e8 85 c6 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 75 c6 d5 ff e8 20 f2 4e ff eb e9 e8 69 c6 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1053.871584][T15947] RSP: 0018:ffffc900033b79c8 EFLAGS: 00010293 [ 1053.877667][T15947] RAX: ffffffff81b1ab17 RBX: ffff88802a972f10 RCX: ffff888028001e00 [ 1053.885652][T15947] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1053.893633][T15947] RBP: ffff88802a972cd0 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 1053.901621][T15947] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffff888028001e00 [ 1053.909603][T15947] R13: ffff88805ed80930 R14: 0000000000000000 R15: 1ffff1100552e59a [ 1053.917594][T15947] ? perf_pending_task+0x357/0x480 [ 1053.922732][T15947] ? perf_pending_task+0x357/0x480 [ 1053.927864][T15947] task_work_run+0x1d4/0x260 [ 1053.932473][T15947] ? task_work_cancel+0x220/0x220 [ 1053.937525][T15947] do_exit+0x986/0x2530 [ 1053.941701][T15947] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1053.947699][T15947] ? put_task_struct+0xc0/0xc0 [ 1053.952479][T15947] ? asm_sysvec_irq_work+0x1a/0x20 [ 1053.957601][T15947] ? lockdep_hardirqs_on+0x98/0x150 [ 1053.962824][T15947] ? asm_sysvec_irq_work+0x1a/0x20 [ 1053.967956][T15947] do_group_exit+0x22d/0x2f0 [ 1053.972590][T15947] ? _raw_spin_unlock_irq+0x29/0x50 [ 1053.977819][T15947] get_signal+0x12a6/0x1390 [ 1053.982379][T15947] arch_do_signal_or_restart+0xc2/0x7b0 [ 1053.987944][T15947] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1053.993856][T15947] ? get_sigframe_size+0x20/0x20 [ 1053.998820][T15947] ? asm_sysvec_irq_work+0x1a/0x20 [ 1054.003956][T15947] ? exit_to_user_mode_loop+0x3b/0x110 [ 1054.009523][T15947] exit_to_user_mode_loop+0x70/0x110 [ 1054.014827][T15947] exit_to_user_mode_prepare+0xee/0x180 [ 1054.020390][T15947] syscall_exit_to_user_mode+0x1a/0x50 [ 1054.025883][T15947] do_syscall_64+0x61/0xb0 [ 1054.030335][T15947] ? clear_bhb_loop+0x40/0x90 [ 1054.035034][T15947] ? clear_bhb_loop+0x40/0x90 [ 1054.039727][T15947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.045636][T15947] RIP: 0033:0x7fc25119e0d9 [ 1054.050061][T15947] Code: Unable to access opcode bytes at 0x7fc25119e0af. [ 1054.057084][T15947] RSP: 002b:00007fc2520970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1054.065509][T15947] RAX: fffffffffffffe00 RBX: 00007fc251425fa8 RCX: 00007fc25119e0d9 [ 1054.073488][T15947] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc251425fa8 [ 1054.081463][T15947] RBP: 00007fc251425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1054.089447][T15947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.097434][T15947] R13: 00007fc251426038 R14: 00007ffc13f9edd0 R15: 00007ffc13f9eeb8 [ 1054.105432][T15947] [ 1054.108723][T15947] Kernel Offset: disabled [ 1054.113054][T15947] Rebooting in 86400 seconds..