last executing test programs: 12.845204713s ago: executing program 1 (id=2142): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000), 0x6}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x7, 0x1, 0xa, 0x0, 0xa}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x5, 0xfffffffffffff1e3, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) gettid() sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380), 0xffffff65}], 0x1, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) 12.650860818s ago: executing program 1 (id=2143): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) 11.888314456s ago: executing program 1 (id=2157): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 11.615382653s ago: executing program 1 (id=2151): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22ffe7) ioctl$TUNGETVNETLE(r2, 0x4008744b, &(0x7f0000000180)) 10.548941398s ago: executing program 1 (id=2159): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4003, @dev}, 0x10, 0x0}, 0x3000c0c5) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000000), 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) syz_clone(0x4004271f, 0x0, 0x0, 0x0, 0x0, 0x0) 8.044423318s ago: executing program 2 (id=2178): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110805, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0xb3, &(0x7f0000001200)=""/179, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{0x0}], 0x1, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x38}, 0x9fc) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000001780)) 7.591751429s ago: executing program 2 (id=2182): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xb, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) socket$kcm(0x10, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000300), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20048040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x10) 7.159070409s ago: executing program 2 (id=2186): r0 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x800, 0x0, 0x0, 0x8, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) socket$kcm(0x2, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="600000004e007f049e", 0x12}, {&(0x7f0000000180)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c5681", 0x57}], 0x2}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r5, &(0x7f0000000080), &(0x7f00000002c0)=""/21}, 0x20) write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b108b4ab51c"], 0xfe33) 6.27863782s ago: executing program 2 (id=2189): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22ffe7) ioctl$TUNGETVNETLE(r2, 0x4008744b, &(0x7f0000000180)) 5.267144044s ago: executing program 4 (id=2197): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x1b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.982673761s ago: executing program 2 (id=2198): socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffd) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000000)='/proc/t/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x9, 0x0, 0x2, 0x58221, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffdfffa, 0x2, @perf_config_ext={0x4, 0x2}, 0x106a4f, 0x1, 0x6, 0x1, 0x2, 0xffc, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, r0, 0x9) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x4, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000}, 0x0, 0x0, 0x0, 0x0, 0x3ffff}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xd) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x30, &(0x7f0000000100), 0x5000) 4.665660778s ago: executing program 3 (id=2200): r0 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x800, 0x0, 0x0, 0x8, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) socket$kcm(0x2, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="600000004e007f049e", 0x12}, {&(0x7f0000000180)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c5681", 0x57}], 0x2}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r5, &(0x7f0000000080), &(0x7f00000002c0)=""/21}, 0x20) write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b108b4ab51c"], 0xfe33) 4.375751066s ago: executing program 0 (id=2201): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x429, 0x1}, 0x100040, 0x0, 0x10000, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r2, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089061416e0885a0400000000000081009fa788a8", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) recvmsg$kcm(r2, &(0x7f0000002e80)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(r0, 0x0, 0x20000051) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="813e7856", 0x4}, {&(0x7f0000000440)="739135680a1d6fb520a135d74fcb507ba32aad7141e7c84382b075f75900bfba6841728e5b4c8a67abb35cf32dabf4feff1183ecaeead6a4c72e99892e55e2159959e12d4c06b8bb0e3b92a227bcddfc9de9b16bac13757c6dfa3c8764ea3fea50e0664cf70a842c69d3e914d4fcef3d553f0cd60f1ddb1074f8e570e868e2068ca79d988a43bfd31c69e3b1393380bd163b85", 0x93}], 0x2, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) 4.353278016s ago: executing program 4 (id=2202): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000640), 0x4) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbacf01416ac141416440c05114d2f87e5940c05ab940c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/199, 0xc7}], 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0xa1, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.481534577s ago: executing program 4 (id=2203): perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x80, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x4, 0x0, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb1e67bce340dd99e45bcdcadc74f805a09abbf42c5735c0c0bfeb02c6eba50461c506405541b1d81412f4d6e0409c8ed01a24a00c19c619b8189c043fcbfcf7e0dae6fa0409", 0x74}, {&(0x7f0000001b40)="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", 0x4ed}], 0x2}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000400000001000084010000000a0000000200000006000000000000000000000105000000080000010a0000000000000e02000000000000000061002e2e61610061005f"], 0x0, 0x5c}, 0x28) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'virt_wifi0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="0500d0c8b5ae0000711153000000000085100057ca39467c37bc8dfd0980ddcaeb000200000085000000a000000095000000000000009500a50500000000bde7f51ea58f3d6895ace6e1014f81f3861ee32b9481f6483f8919018725beec532aa0ce67a8927ade2e0f0b4de9b5b2248399c91a63a81f627a20e75b03943be74c4da76c1884c2d06993e1fc0e6584c7a86669cd99911c63de2168c604a50fac567d19d1afde13d2e273"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x4, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x49, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x32}}}}], 0x20}, 0x8881) close(0xffffffffffffffff) syz_clone(0x2209100, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) 3.118555806s ago: executing program 3 (id=2204): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110805, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0xb3, &(0x7f0000001200)=""/179, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{0x0}], 0x1, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x38}, 0x9fc) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000001780)) 3.046735627s ago: executing program 0 (id=2205): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000), 0x6}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x7, 0x1, 0xa, 0x0, 0xa}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x5, 0xfffffffffffff1e3, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) gettid() sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380), 0xffffff65}], 0x1, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) 2.900900491s ago: executing program 4 (id=2206): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x36) 2.796975494s ago: executing program 3 (id=2207): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000), 0x6}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x5, 0xfffffffffffff1e3, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x80044943, &(0x7f0000000a00)={r1}) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) gettid() r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380), 0xffffff65}], 0x1, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) 2.593203508s ago: executing program 0 (id=2208): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22ffe7) ioctl$TUNGETVNETLE(r2, 0x4008744b, &(0x7f0000000180)) 2.51707804s ago: executing program 3 (id=2209): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xb, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) socket$kcm(0x10, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000300), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20048040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x10) 1.991500993s ago: executing program 3 (id=2210): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x429, 0x1}, 0x100040, 0x0, 0x10000, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r2, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089061416e0885a0400000000000081009fa788a8", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) recvmsg$kcm(r2, &(0x7f0000002e80)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(r0, 0x0, 0x20000051) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="813e7856", 0x4}, {&(0x7f0000000440)="739135680a1d6fb520a135d74fcb507ba32aad7141e7c84382b075f75900bfba6841728e5b4c8a67abb35cf32dabf4feff1183ecaeead6a4c72e99892e55e2159959e12d4c06b8bb0e3b92a227bcddfc9de9b16bac13757c6dfa3c8764ea3fea50e0664cf70a842c69d3e914d4fcef3d553f0cd60f1ddb1074f8e570e868e2068ca79d988a43bfd31c69e3b1393380bd163b85", 0x93}], 0x2, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) 1.804325737s ago: executing program 4 (id=2211): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) close(0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x18}, 0x18) 1.751922888s ago: executing program 0 (id=2212): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x1}, {0x10000002, 0x10}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a"], 0xfe33) 548.034557ms ago: executing program 0 (id=2213): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 504.398208ms ago: executing program 4 (id=2214): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x0, 0x0, 0x0, 0x4, 0xa, 0x3, 0xe000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0xf, 0x80, 0xb, 0x2, 0x7, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000, 0x1}, 0x105440, 0x9, 0x2, 0xd, 0xf, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 444.701399ms ago: executing program 3 (id=2215): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x429, 0x1}, 0x100040, 0x0, 0x10000, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r2, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089061416e0885a0400000000000081009fa788a8", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) recvmsg$kcm(r2, &(0x7f0000002e80)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(r0, 0x0, 0x20000051) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="813e7856", 0x4}, {&(0x7f0000000440)="739135680a1d6fb520a135d74fcb507ba32aad7141e7c84382b075f75900bfba6841728e5b4c8a67abb35cf32dabf4feff1183ecaeead6a4c72e99892e55e2159959e12d4c06b8bb0e3b92a227bcddfc9de9b16bac13757c6dfa3c8764ea3fea50e0664cf70a842c69d3e914d4fcef3d553f0cd60f1ddb1074f8e570e868e2068ca79d988a43bfd31c69e3b1393380bd163b85", 0x93}], 0x2, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) 15.47435ms ago: executing program 2 (id=2216): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x0, 0x0, 0x40, 0x0, 0x0, 0x309, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1b0000001e006bcd9e3fe3dc6e0800000a0000dd600000007ea608", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x1, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x891a, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a80016000500014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 13.27203ms ago: executing program 0 (id=2226): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 0s ago: executing program 1 (id=2217): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110805, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0xb3, &(0x7f0000001200)=""/179, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{0x0}], 0x1, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x38}, 0x9fc) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000001780)) kernel console output (not intermixed with test programs): nknown bytes. [ 132.881758][ T5310] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.349'. [ 133.005556][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.011942][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.496889][ T5327] device syzkaller0 entered promiscuous mode [ 134.771757][ T5343] netlink: 'syz.4.358': attribute type 10 has an invalid length. [ 134.884718][ T5343] netlink: 209860 bytes leftover after parsing attributes in process `syz.4.358'. [ 134.985845][ T5342] netlink: 'syz.1.356': attribute type 4 has an invalid length. [ 134.995278][ T5343] openvswitch: netlink: Message has 4 unknown bytes. [ 135.032415][ T5342] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.356'. [ 138.359777][ T5385] netlink: 'syz.4.372': attribute type 4 has an invalid length. [ 138.410597][ T5385] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.372'. [ 138.492133][ T5393] netlink: 'syz.1.374': attribute type 10 has an invalid length. [ 138.553558][ T5381] device syzkaller0 entered promiscuous mode [ 138.573835][ T5393] netlink: 209860 bytes leftover after parsing attributes in process `syz.1.374'. [ 138.602785][ T5393] openvswitch: netlink: Message has 4 unknown bytes. [ 138.688933][ T5391] netlink: 'syz.0.373': attribute type 4 has an invalid length. [ 138.714716][ T5391] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.373'. [ 139.133196][ T5396] netlink: 'syz.4.372': attribute type 17 has an invalid length. [ 139.144600][ T5405] netlink: 'syz.0.386': attribute type 4 has an invalid length. [ 139.148591][ T5396] netlink: 148 bytes leftover after parsing attributes in process `syz.4.372'. [ 139.159145][ T5405] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.386'. [ 139.515614][ T5413] device syzkaller0 entered promiscuous mode [ 139.914971][ T5418] netlink: 'syz.3.392': attribute type 4 has an invalid length. [ 139.949966][ T5437] netlink: 'syz.2.387': attribute type 10 has an invalid length. [ 140.025760][ T5437] netlink: 209860 bytes leftover after parsing attributes in process `syz.2.387'. [ 140.040740][ T5437] openvswitch: netlink: Message has 4 unknown bytes. [ 140.082202][ T5418] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.392'. [ 140.530995][ T5445] netlink: 'syz.2.390': attribute type 4 has an invalid length. [ 140.623876][ T5445] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.390'. [ 140.639400][ T5445] netlink: 'syz.2.390': attribute type 17 has an invalid length. [ 140.648687][ T5445] netlink: 148 bytes leftover after parsing attributes in process `syz.2.390'. [ 141.069301][ T5459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.116245][ T5459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.200053][ T5471] device syzkaller0 entered promiscuous mode [ 144.644247][ T5482] device syzkaller0 entered promiscuous mode [ 144.977009][ T5495] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.407'. [ 146.400276][ T5529] netlink: 'syz.3.420': attribute type 4 has an invalid length. [ 146.409860][ T5529] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.420'. [ 146.854443][ T5532] device syzkaller0 entered promiscuous mode [ 147.433245][ T5554] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.440'. [ 148.037712][ T5568] device syzkaller0 entered promiscuous mode [ 151.235110][ T5586] device syzkaller0 entered promiscuous mode [ 151.254948][ T5583] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 151.464056][ T5598] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.445'. [ 151.916515][ T5602] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 152.044373][ T5611] netlink: 160 bytes leftover after parsing attributes in process `syz.0.450'. [ 152.411237][ T5619] netlink: 56 bytes leftover after parsing attributes in process `syz.2.455'. [ 152.501743][ T5619] netlink: 56 bytes leftover after parsing attributes in process `syz.2.455'. [ 154.062335][ T5400] wlan1: Trigger new scan to find an IBSS to join [ 154.232567][ T5638] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.460'. [ 154.676338][ T5647] device syzkaller0 entered promiscuous mode [ 155.078782][ T5660] netlink: 56 bytes leftover after parsing attributes in process `syz.1.469'. [ 155.107029][ T5660] netlink: 56 bytes leftover after parsing attributes in process `syz.1.469'. [ 155.189955][ T5657] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 155.540223][ T5674] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.477'. [ 156.474888][ T5698] netlink: 56 bytes leftover after parsing attributes in process `syz.0.484'. [ 156.582077][ T5698] netlink: 56 bytes leftover after parsing attributes in process `syz.0.484'. [ 159.083181][ T1220] wlan1: Trigger new scan to find an IBSS to join [ 159.650708][ T5710] device syzkaller0 entered promiscuous mode [ 159.975220][ T5400] wlan1: Creating new IBSS network, BSSID 9a:9f:66:f6:24:9c [ 163.141435][ T5754] device syzkaller0 entered promiscuous mode [ 164.151666][ T5775] netlink: 'syz.1.513': attribute type 9 has an invalid length. [ 164.201011][ T5775] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.513'. [ 168.372162][ T5855] netlink: 'syz.2.541': attribute type 4 has an invalid length. [ 168.388130][ T5855] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.541'. [ 168.705513][ T5858] device syzkaller0 entered promiscuous mode [ 168.929311][ T5875] netlink: 132 bytes leftover after parsing attributes in process `syz.1.548'. [ 169.721500][ T5895] netlink: 'syz.0.556': attribute type 4 has an invalid length. [ 169.791842][ T5895] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.556'. [ 170.179617][ T5910] netlink: 132 bytes leftover after parsing attributes in process `syz.3.562'. [ 172.114063][ T5952] netlink: 'syz.1.574': attribute type 4 has an invalid length. [ 172.124849][ T5950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.577'. [ 172.233754][ T5952] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.574'. [ 173.786809][ T5978] netlink: 'syz.3.586': attribute type 10 has an invalid length. [ 173.803182][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.878306][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.057243][ T5978] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 174.484490][ T5996] netlink: 132 bytes leftover after parsing attributes in process `syz.2.590'. [ 175.568150][ T6010] netlink: 'syz.3.592': attribute type 4 has an invalid length. [ 175.633965][ T6010] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.592'. [ 175.803275][ T6015] device sit0 entered promiscuous mode [ 178.767875][ T6069] netlink: 'syz.3.617': attribute type 39 has an invalid length. [ 181.116035][ T6072] netlink: 'syz.1.616': attribute type 10 has an invalid length. [ 181.134783][ T6072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.212964][ T6072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.283756][ T6072] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 182.970066][ T6107] device syzkaller0 entered promiscuous mode [ 183.333885][ T6116] netlink: 'syz.4.629': attribute type 4 has an invalid length. [ 183.407623][ T6116] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.629'. [ 183.676316][ T6121] netlink: 'syz.2.633': attribute type 10 has an invalid length. [ 184.416296][ T6136] device sit0 entered promiscuous mode [ 186.284029][ T4230] Bluetooth: hci0: command 0x0406 tx timeout [ 186.304009][ T4230] Bluetooth: hci1: command 0x0406 tx timeout [ 186.333439][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 186.364086][ T4230] Bluetooth: hci3: command 0x0406 tx timeout [ 186.403345][ T4230] Bluetooth: hci4: command 0x0406 tx timeout [ 187.387026][ T6157] netlink: 'syz.2.644': attribute type 21 has an invalid length. [ 187.397560][ T6157] netlink: 156 bytes leftover after parsing attributes in process `syz.2.644'. [ 187.655719][ T6164] netlink: 132 bytes leftover after parsing attributes in process `syz.1.647'. [ 187.717708][ T6163] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.922473][ T6167] netlink: 'syz.3.649': attribute type 1 has an invalid length. [ 188.005917][ T6167] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.649'. [ 188.213305][ T6167] netlink: 9 bytes leftover after parsing attributes in process `syz.3.649'. [ 190.055119][ T4376] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 190.895074][ T6175] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.662'. [ 191.050170][ T6178] netlink: 'syz.4.651': attribute type 10 has an invalid length. [ 191.152739][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.470602][ T6178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.665373][ T6178] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 191.714838][ T6190] device sit0 entered promiscuous mode [ 192.104482][ T6196] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.657'. [ 192.939179][ T6219] netlink: 'syz.2.668': attribute type 17 has an invalid length. [ 193.136729][ T6223] netlink: 11559 bytes leftover after parsing attributes in process `syz.3.669'. [ 193.169982][ T6223] netlink: 104 bytes leftover after parsing attributes in process `syz.3.669'. [ 193.251037][ T6225] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.658897][ T6237] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.679632][ T6234] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.673'. [ 193.717016][ T6229] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.672'. [ 193.819705][ T6240] device sit0 entered promiscuous mode [ 194.363269][ T6257] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.690'. [ 194.510147][ T6253] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.689'. [ 194.522215][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.529774][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.181430][ T6264] netlink: 'syz.1.680': attribute type 12 has an invalid length. [ 195.199197][ T6264] netlink: 132 bytes leftover after parsing attributes in process `syz.1.680'. [ 195.404507][ T6265] netlink: 'syz.1.680': attribute type 21 has an invalid length. [ 195.412493][ T6265] netlink: 156 bytes leftover after parsing attributes in process `syz.1.680'. [ 196.031357][ T6285] netlink: 'syz.0.692': attribute type 17 has an invalid length. [ 196.216555][ T6288] netlink: 11559 bytes leftover after parsing attributes in process `syz.2.687'. [ 196.269385][ T6288] netlink: 104 bytes leftover after parsing attributes in process `syz.2.687'. [ 197.042345][ T6302] netlink: 'syz.3.695': attribute type 2 has an invalid length. [ 197.052344][ T6302] netlink: 'syz.3.695': attribute type 8 has an invalid length. [ 197.067548][ T6302] netlink: 132 bytes leftover after parsing attributes in process `syz.3.695'. [ 197.111809][ T6310] netlink: 'syz.3.695': attribute type 2 has an invalid length. [ 197.131341][ T6310] netlink: 'syz.3.695': attribute type 8 has an invalid length. [ 197.140757][ T6310] netlink: 132 bytes leftover after parsing attributes in process `syz.3.695'. [ 197.159513][ T6304] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.696'. [ 197.618954][ T6325] netlink: 'syz.3.699': attribute type 21 has an invalid length. [ 197.652516][ T6325] netlink: 156 bytes leftover after parsing attributes in process `syz.3.699'. [ 197.712374][ T6329] netlink: 'syz.3.706': attribute type 17 has an invalid length. [ 198.109465][ T6333] netlink: 11559 bytes leftover after parsing attributes in process `syz.4.708'. [ 198.149531][ T6333] netlink: 104 bytes leftover after parsing attributes in process `syz.4.708'. [ 198.475254][ T6350] netlink: 'syz.2.713': attribute type 2 has an invalid length. [ 198.494583][ T6350] netlink: 'syz.2.713': attribute type 8 has an invalid length. [ 198.503709][ T6350] netlink: 132 bytes leftover after parsing attributes in process `syz.2.713'. [ 198.568518][ T6355] netlink: 'syz.2.713': attribute type 2 has an invalid length. [ 198.610582][ T6355] netlink: 'syz.2.713': attribute type 8 has an invalid length. [ 198.618957][ T6355] netlink: 132 bytes leftover after parsing attributes in process `syz.2.713'. [ 199.078571][ T6374] netlink: 'syz.1.721': attribute type 17 has an invalid length. [ 199.342358][ T6381] netlink: 'syz.4.736': attribute type 17 has an invalid length. [ 199.795964][ T6388] netlink: 'syz.4.739': attribute type 1 has an invalid length. [ 200.984276][ T6410] netlink: 'syz.4.731': attribute type 2 has an invalid length. [ 201.003068][ T6410] netlink: 'syz.4.731': attribute type 8 has an invalid length. [ 201.052113][ T6415] netlink: 'syz.4.731': attribute type 2 has an invalid length. [ 201.227490][ T6415] __nla_validate_parse: 8 callbacks suppressed [ 201.227508][ T6415] netlink: 132 bytes leftover after parsing attributes in process `syz.4.731'. [ 204.062114][ T6455] validate_nla: 1 callbacks suppressed [ 204.062155][ T6455] netlink: 'syz.1.751': attribute type 2 has an invalid length. [ 204.076765][ T6455] netlink: 'syz.1.751': attribute type 8 has an invalid length. [ 204.102313][ T6455] netlink: 132 bytes leftover after parsing attributes in process `syz.1.751'. [ 204.171857][ T6460] netlink: 'syz.1.751': attribute type 2 has an invalid length. [ 204.186675][ T6460] netlink: 'syz.1.751': attribute type 8 has an invalid length. [ 204.205777][ T6460] netlink: 132 bytes leftover after parsing attributes in process `syz.1.751'. [ 210.115713][ T6515] netlink: 'syz.0.768': attribute type 2 has an invalid length. [ 210.137990][ T6515] netlink: 'syz.0.768': attribute type 8 has an invalid length. [ 210.227110][ T6515] netlink: 132 bytes leftover after parsing attributes in process `syz.0.768'. [ 210.319648][ T6519] netlink: 'syz.0.768': attribute type 2 has an invalid length. [ 210.348938][ T6519] netlink: 'syz.0.768': attribute type 8 has an invalid length. [ 210.427739][ T6519] netlink: 132 bytes leftover after parsing attributes in process `syz.0.768'. [ 215.471692][ T6593] netlink: 36 bytes leftover after parsing attributes in process `syz.3.799'. [ 215.539125][ T6593] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 215.549306][ T6593] netlink: 6 bytes leftover after parsing attributes in process `syz.3.799'. [ 215.756285][ T6602] netlink: 14 bytes leftover after parsing attributes in process `syz.1.803'. [ 215.852095][ T6603] netlink: 105940 bytes leftover after parsing attributes in process `syz.4.802'. [ 216.209125][ T6602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.381746][ T6602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.569871][ T6619] netlink: 125732 bytes leftover after parsing attributes in process `syz.4.807'. [ 216.597872][ T6602] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 216.671907][ T6602] bond0 (unregistering): Released all slaves [ 216.749851][ T6625] bridge0: port 3(batadv0) entered blocking state [ 216.790349][ T6625] bridge0: port 3(batadv0) entered disabled state [ 216.822135][ T6625] device batadv0 entered promiscuous mode [ 216.842604][ T6625] bridge0: port 3(batadv0) entered blocking state [ 216.849656][ T6625] bridge0: port 3(batadv0) entered forwarding state [ 216.888401][ T4210] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 216.898542][ T4210] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 218.689253][ T6669] bridge0: port 3(batadv0) entered blocking state [ 218.734495][ T6669] bridge0: port 3(batadv0) entered disabled state [ 218.818549][ T6669] device batadv0 entered promiscuous mode [ 218.838683][ T6669] bridge0: port 3(batadv0) entered blocking state [ 218.845337][ T6669] bridge0: port 3(batadv0) entered forwarding state [ 218.863507][ T6673] netlink: 36 bytes leftover after parsing attributes in process `syz.4.827'. [ 218.882585][ T6673] netlink: 'syz.4.827': attribute type 1 has an invalid length. [ 218.891211][ T6673] netlink: 6 bytes leftover after parsing attributes in process `syz.4.827'. [ 219.007488][ T1220] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 219.017449][ T1220] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 219.872447][ T6703] ÿÿÿÿÿÿ: renamed from vlan1 [ 220.388037][ T6721] netlink: 36 bytes leftover after parsing attributes in process `syz.0.842'. [ 220.427597][ T6721] netlink: 'syz.0.842': attribute type 1 has an invalid length. [ 220.557205][ T6726] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.844'. [ 220.573279][ T6721] netlink: 6 bytes leftover after parsing attributes in process `syz.0.842'. [ 220.729141][ T6728] netlink: 125732 bytes leftover after parsing attributes in process `syz.3.846'. [ 220.745951][ T6726] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 220.995787][ T6737] netlink: 14 bytes leftover after parsing attributes in process `syz.0.849'. [ 221.258796][ T6737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.367013][ T6737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.447749][ T6737] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 221.581329][ T6737] bond0 (unregistering): Released all slaves [ 221.679173][ T6752] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.854'. [ 221.812084][ T6749] device syzkaller0 entered promiscuous mode [ 222.431490][ T6774] device sit0 entered promiscuous mode [ 222.537318][ T6769] netlink: 36 bytes leftover after parsing attributes in process `syz.2.859'. [ 222.554515][ T6769] netlink: 'syz.2.859': attribute type 1 has an invalid length. [ 222.568531][ T6769] netlink: 6 bytes leftover after parsing attributes in process `syz.2.859'. [ 223.051228][ T6780] netlink: 125732 bytes leftover after parsing attributes in process `syz.2.863'. [ 223.861738][ T6799] netlink: 14 bytes leftover after parsing attributes in process `syz.4.869'. [ 223.950897][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.998810][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.022495][ T6799] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 224.036723][ T6799] bond0 (unregistering): Released all slaves [ 224.065987][ T6813] netlink: 36 bytes leftover after parsing attributes in process `syz.1.873'. [ 224.095767][ T6813] netlink: 'syz.1.873': attribute type 1 has an invalid length. [ 225.468315][ T6839] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 225.953511][ T6852] __nla_validate_parse: 3 callbacks suppressed [ 225.953529][ T6852] netlink: 14 bytes leftover after parsing attributes in process `syz.2.887'. [ 226.836962][ T6852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.882940][ T6852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.927120][ T6852] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 226.938515][ T6852] bond0 (unregistering): Released all slaves [ 227.658318][ T6891] netlink: 'syz.4.897': attribute type 29 has an invalid length. [ 227.775618][ T6891] netlink: 'syz.4.897': attribute type 29 has an invalid length. [ 227.809104][ T6893] netlink: 'syz.4.897': attribute type 29 has an invalid length. [ 227.827039][ T6891] netlink: 'syz.4.897': attribute type 29 has an invalid length. [ 227.859251][ T6891] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.897'. [ 227.877650][ T6891] netlink: zone id is out of range [ 227.910746][ T6891] netlink: zone id is out of range [ 227.936807][ T6891] netlink: zone id is out of range [ 227.952010][ T6891] netlink: del zone limit has 8 unknown bytes [ 228.770170][ T6922] netlink: 14 bytes leftover after parsing attributes in process `syz.3.905'. [ 229.262635][ T6922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.421403][ T6922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.490122][ T6922] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 229.520036][ T6922] bond0 (unregistering): Released all slaves [ 229.689415][ T6936] netlink: 'syz.3.915': attribute type 29 has an invalid length. [ 229.761563][ T6935] netlink: 14 bytes leftover after parsing attributes in process `syz.0.923'. [ 229.782306][ T6936] netlink: 'syz.3.915': attribute type 29 has an invalid length. [ 229.799184][ T6943] netlink: 'syz.3.915': attribute type 29 has an invalid length. [ 229.818923][ T6944] netlink: 'syz.3.915': attribute type 29 has an invalid length. [ 229.899099][ T6936] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.915'. [ 229.937448][ T6936] netlink: zone id is out of range [ 229.954052][ T6936] netlink: zone id is out of range [ 229.959410][ T6936] netlink: zone id is out of range [ 229.973849][ T6936] netlink: del zone limit has 8 unknown bytes [ 230.676200][ T6962] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.922'. [ 231.221209][ T6980] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.927'. [ 231.311808][ T6980] netlink: 21192 bytes leftover after parsing attributes in process `syz.4.927'. [ 231.325449][ T6980] tipc: Started in network mode [ 231.330607][ T6980] tipc: Node identity 1a, cluster identity 106 [ 231.337442][ T6980] tipc: Node number set to 26 [ 231.462996][ T6990] netlink: 'syz.2.930': attribute type 29 has an invalid length. [ 231.539268][ T6995] ÿÿÿÿ: port 1(macsec0) entered blocking state [ 231.579045][ T6995] ÿÿÿÿ: port 1(macsec0) entered disabled state [ 231.676263][ T6990] netlink: 'syz.2.930': attribute type 29 has an invalid length. [ 231.712898][ T6989] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.932'. [ 234.972158][ T7026] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.943'. [ 235.024019][ T7026] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 235.125756][ T7031] device sit0 left promiscuous mode [ 235.590719][ T7040] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.946'. [ 236.117159][ T7034] device sit0 entered promiscuous mode [ 236.210016][ T7040] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 236.223285][ T7040] CPU: 1 PID: 7040 Comm: syz.0.946 Not tainted syzkaller #0 [ 236.230753][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.241123][ T7040] Call Trace: [ 236.244438][ T7040] [ 236.247522][ T7040] dump_stack_lvl+0x188/0x250 [ 236.252268][ T7040] ? show_regs_print_info+0x20/0x20 [ 236.257602][ T7040] ? load_image+0x410/0x410 [ 236.262149][ T7040] sysfs_warn_dup+0x8a/0xa0 [ 236.266723][ T7040] sysfs_do_create_link_sd+0xc0/0x110 [ 236.272464][ T7040] device_add+0x83b/0x1050 [ 236.276924][ T7040] wiphy_register+0x1e74/0x2c40 [ 236.281812][ T7040] ? cfg80211_event_work+0x40/0x40 [ 236.287061][ T7040] ? minstrel_ht_alloc+0x807/0x980 [ 236.292283][ T7040] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 236.298368][ T7040] ieee80211_register_hw+0x2a03/0x3a60 [ 236.304029][ T7040] ? ieee80211_register_hw+0xae1/0x3a60 [ 236.309593][ T7040] ? ieee80211_tasklet_handler+0x20/0x20 [ 236.315235][ T7040] ? rcu_is_watching+0x11/0xa0 [ 236.320014][ T7040] ? hrtimer_init+0x10c/0x220 [ 236.324737][ T7040] mac80211_hwsim_new_radio+0x209d/0x4050 [ 236.330486][ T7040] hwsim_new_radio_nl+0xa7d/0xc50 [ 236.335545][ T7040] genl_rcv_msg+0xd0b/0xfa0 [ 236.340064][ T7040] ? genl_bind+0x370/0x370 [ 236.344509][ T7040] ? __dev_queue_xmit+0x1b64/0x2e50 [ 236.349717][ T7040] ? verify_lock_unused+0x140/0x140 [ 236.354921][ T7040] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 236.360741][ T7040] ? perf_trace_lock+0x301/0x390 [ 236.365685][ T7040] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 236.372293][ T7040] netlink_rcv_skb+0x1e9/0x430 [ 236.377394][ T7040] ? genl_bind+0x370/0x370 [ 236.381820][ T7040] ? netlink_ack+0xb10/0xb10 [ 236.386513][ T7040] ? down_read+0x1aa/0x2e0 [ 236.390948][ T7040] genl_rcv+0x24/0x40 [ 236.394934][ T7040] netlink_unicast+0x78f/0x940 [ 236.399716][ T7040] netlink_sendmsg+0x8ba/0xbe0 [ 236.404714][ T7040] ? netlink_getsockopt+0x570/0x570 [ 236.409946][ T7040] ? aa_sock_msg_perm+0x94/0x150 [ 236.415025][ T7040] ? apparmor_socket_sendmsg+0x88/0x230 [ 236.420694][ T7040] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 236.426075][ T7040] ? security_socket_sendmsg+0x7c/0xa0 [ 236.431721][ T7040] ? netlink_getsockopt+0x570/0x570 [ 236.437030][ T7040] ____sys_sendmsg+0x5be/0x8f0 [ 236.442429][ T7040] ? __sys_sendmsg_sock+0x30/0x30 [ 236.447641][ T7040] ? import_iovec+0x6f/0xa0 [ 236.452430][ T7040] ___sys_sendmsg+0x236/0x2e0 [ 236.457487][ T7040] ? __sys_sendmsg+0x290/0x290 [ 236.462398][ T7040] ? trace_event_raw_event_lock+0x250/0x250 [ 236.468409][ T7040] ? __might_fault+0xb3/0x110 [ 236.473126][ T7040] __se_sys_sendmsg+0x1b7/0x2a0 [ 236.478004][ T7040] ? __x64_sys_sendmsg+0x80/0x80 [ 236.482946][ T7040] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 236.488943][ T7040] ? lockdep_hardirqs_on+0x94/0x140 [ 236.494150][ T7040] do_syscall_64+0x4c/0xa0 [ 236.498573][ T7040] ? clear_bhb_loop+0x30/0x80 [ 236.503252][ T7040] ? clear_bhb_loop+0x30/0x80 [ 236.507937][ T7040] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 236.513924][ T7040] RIP: 0033:0x7f993a22e0d9 [ 236.518382][ T7040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.538006][ T7040] RSP: 002b:00007f9938465028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.546446][ T7040] RAX: ffffffffffffffda RBX: 00007f993a4b6090 RCX: 00007f993a22e0d9 [ 236.554433][ T7040] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 236.562508][ T7040] RBP: 00007f993a2c5024 R08: 0000000000000000 R09: 0000000000000000 [ 236.570497][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.579008][ T7040] R13: 00007f993a4b6128 R14: 00007f993a4b6090 R15: 00007ffcfb476128 [ 236.587098][ T7040] [ 236.990144][ T7049] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.949'. [ 238.114721][ T7093] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.963'. [ 238.277889][ T7091] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.962'. [ 238.367607][ T7091] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 239.357119][ T7110] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.969'. [ 240.368723][ T7148] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.980'. [ 240.998271][ T7164] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.984'. [ 243.836112][ T7164] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 243.850724][ T7164] CPU: 1 PID: 7164 Comm: syz.4.984 Not tainted syzkaller #0 [ 243.858466][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.869123][ T7164] Call Trace: [ 243.872524][ T7164] [ 243.875626][ T7164] dump_stack_lvl+0x188/0x250 [ 243.880853][ T7164] ? show_regs_print_info+0x20/0x20 [ 243.886473][ T7164] ? load_image+0x410/0x410 [ 243.891333][ T7164] sysfs_warn_dup+0x8a/0xa0 [ 243.896029][ T7164] sysfs_do_create_link_sd+0xc0/0x110 [ 243.901553][ T7164] device_add+0x83b/0x1050 [ 243.906513][ T7164] wiphy_register+0x1e74/0x2c40 [ 243.911652][ T7164] ? cfg80211_event_work+0x40/0x40 [ 243.917135][ T7164] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 243.923374][ T7164] ieee80211_register_hw+0x2a03/0x3a60 [ 243.928844][ T7164] ? ieee80211_register_hw+0xae1/0x3a60 [ 243.934695][ T7164] ? ieee80211_tasklet_handler+0x20/0x20 [ 243.940560][ T7164] ? rcu_is_watching+0x11/0xa0 [ 243.945517][ T7164] ? hrtimer_init+0x10c/0x220 [ 243.950214][ T7164] mac80211_hwsim_new_radio+0x209d/0x4050 [ 243.955958][ T7164] hwsim_new_radio_nl+0xa7d/0xc50 [ 243.961014][ T7164] genl_rcv_msg+0xd0b/0xfa0 [ 243.965640][ T7164] ? genl_bind+0x370/0x370 [ 243.970443][ T7164] ? swake_up_one+0x6d/0x130 [ 243.975048][ T7164] ? verify_lock_unused+0x140/0x140 [ 243.980535][ T7164] ? rcu_preempt_deferred_qs_irqrestore+0x855/0xbd0 [ 243.987419][ T7164] ? perf_trace_lock+0xe4/0x390 [ 243.992729][ T7164] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 243.999309][ T7164] netlink_rcv_skb+0x1e9/0x430 [ 244.004662][ T7164] ? genl_bind+0x370/0x370 [ 244.009556][ T7164] ? netlink_ack+0xb10/0xb10 [ 244.014626][ T7164] ? down_read+0x1aa/0x2e0 [ 244.019567][ T7164] genl_rcv+0x24/0x40 [ 244.023580][ T7164] netlink_unicast+0x78f/0x940 [ 244.028682][ T7164] netlink_sendmsg+0x8ba/0xbe0 [ 244.034240][ T7164] ? lockdep_hardirqs_on+0x94/0x140 [ 244.039652][ T7164] ? netlink_getsockopt+0x570/0x570 [ 244.044964][ T7164] ? netlink_getsockopt+0x570/0x570 [ 244.050202][ T7164] ____sys_sendmsg+0x5be/0x8f0 [ 244.055455][ T7164] ? __sys_sendmsg_sock+0x30/0x30 [ 244.061561][ T7164] ? import_iovec+0x6f/0xa0 [ 244.066515][ T7164] ___sys_sendmsg+0x236/0x2e0 [ 244.071494][ T7164] ? __sys_sendmsg+0x290/0x290 [ 244.076774][ T7164] __se_sys_sendmsg+0x1b7/0x2a0 [ 244.081825][ T7164] ? __x64_sys_sendmsg+0x80/0x80 [ 244.087146][ T7164] ? lockdep_hardirqs_on+0x94/0x140 [ 244.092492][ T7164] do_syscall_64+0x4c/0xa0 [ 244.097335][ T7164] ? clear_bhb_loop+0x30/0x80 [ 244.102049][ T7164] ? clear_bhb_loop+0x30/0x80 [ 244.106849][ T7164] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.112854][ T7164] RIP: 0033:0x7f4ff8edd0d9 [ 244.118727][ T7164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.140955][ T7164] RSP: 002b:00007f4ff7135028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.150027][ T7164] RAX: ffffffffffffffda RBX: 00007f4ff9164fa0 RCX: 00007f4ff8edd0d9 [ 244.159006][ T7164] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 244.169170][ T7164] RBP: 00007f4ff8f74024 R08: 0000000000000000 R09: 0000000000000000 [ 244.178687][ T7164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.187474][ T7164] R13: 00007f4ff9165038 R14: 00007f4ff9164fa0 R15: 00007ffd1816c268 [ 244.195754][ T7164] [ 244.811514][ T7200] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.999'. [ 244.869984][ T7197] tap0: tun_chr_ioctl cmd 35111 [ 246.325639][ T7220] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1009'. [ 246.475599][ T7220] validate_nla: 1 callbacks suppressed [ 246.475619][ T7220] netlink: 'syz.2.1009': attribute type 1 has an invalid length. [ 246.569593][ T7220] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1009'. [ 246.632258][ T7225] delete_channel: no stack [ 247.226385][ T7241] netlink: 'syz.3.1017': attribute type 10 has an invalid length. [ 247.258588][ T7242] netlink: 'syz.1.1015': attribute type 39 has an invalid length. [ 247.606193][ T7255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.614175][ T7255] IPv6: NLM_F_CREATE should be set when creating new route [ 247.622161][ T7255] IPv6: NLM_F_CREATE should be set when creating new route [ 247.630873][ T7255] IPv6: NLM_F_CREATE should be set when creating new route [ 248.238010][ T7262] delete_channel: no stack [ 249.312508][ T7296] netlink: 'syz.4.1034': attribute type 10 has an invalid length. [ 249.543197][ T7299] netlink: 'syz.0.1037': attribute type 39 has an invalid length. [ 250.441507][ T7303] delete_channel: no stack [ 250.575598][ T7311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.583108][ T7311] IPv6: NLM_F_CREATE should be set when creating new route [ 250.590389][ T7311] IPv6: NLM_F_CREATE should be set when creating new route [ 250.597887][ T7311] IPv6: NLM_F_CREATE should be set when creating new route [ 250.957419][ T7323] tap0: tun_chr_ioctl cmd 35111 [ 251.896171][ T7335] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1049'. [ 251.918237][ T7335] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 251.929840][ T7335] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1049'. [ 252.029300][ T7343] netlink: 'syz.1.1050': attribute type 10 has an invalid length. [ 252.588875][ T7350] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.598860][ T7350] IPv6: NLM_F_CREATE should be set when creating new route [ 252.606408][ T7350] IPv6: NLM_F_CREATE should be set when creating new route [ 252.614033][ T7350] IPv6: NLM_F_CREATE should be set when creating new route [ 252.732192][ T7355] netlink: 'syz.2.1055': attribute type 39 has an invalid length. [ 253.531806][ T7365] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1058'. [ 253.609928][ T7365] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 253.622076][ T7365] CPU: 1 PID: 7365 Comm: syz.0.1058 Not tainted syzkaller #0 [ 253.630061][ T7365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.641466][ T7365] Call Trace: [ 253.645323][ T7365] [ 253.648311][ T7365] dump_stack_lvl+0x188/0x250 [ 253.653849][ T7365] ? show_regs_print_info+0x20/0x20 [ 253.659538][ T7365] ? load_image+0x410/0x410 [ 253.664388][ T7365] sysfs_warn_dup+0x8a/0xa0 [ 253.669543][ T7365] sysfs_do_create_link_sd+0xc0/0x110 [ 253.675147][ T7365] device_add+0x83b/0x1050 [ 253.679792][ T7365] wiphy_register+0x1e74/0x2c40 [ 253.684706][ T7365] ? cfg80211_event_work+0x40/0x40 [ 253.690037][ T7365] ? minstrel_ht_alloc+0x807/0x980 [ 253.695797][ T7365] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 253.703080][ T7365] ieee80211_register_hw+0x2a03/0x3a60 [ 253.708631][ T7365] ? ieee80211_register_hw+0xae1/0x3a60 [ 253.714657][ T7365] ? ieee80211_tasklet_handler+0x20/0x20 [ 253.721580][ T7365] ? rcu_is_watching+0x11/0xa0 [ 253.726618][ T7365] ? hrtimer_init+0x10c/0x220 [ 253.731616][ T7365] mac80211_hwsim_new_radio+0x209d/0x4050 [ 253.738652][ T7365] hwsim_new_radio_nl+0xa7d/0xc50 [ 253.744472][ T7365] genl_rcv_msg+0xd0b/0xfa0 [ 253.749530][ T7365] ? genl_bind+0x370/0x370 [ 253.755468][ T7365] ? verify_lock_unused+0x140/0x140 [ 253.762160][ T7365] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 253.769259][ T7365] ? perf_trace_lock+0x301/0x390 [ 253.774984][ T7365] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 253.784016][ T7365] netlink_rcv_skb+0x1e9/0x430 [ 253.790182][ T7365] ? genl_bind+0x370/0x370 [ 253.796034][ T7365] ? netlink_ack+0xb10/0xb10 [ 253.801777][ T7365] ? down_read+0x1aa/0x2e0 [ 253.806464][ T7365] genl_rcv+0x24/0x40 [ 253.811411][ T7365] netlink_unicast+0x78f/0x940 [ 253.816713][ T7365] netlink_sendmsg+0x8ba/0xbe0 [ 253.822832][ T7365] ? netlink_getsockopt+0x570/0x570 [ 253.828379][ T7365] ? aa_sock_msg_perm+0x94/0x150 [ 253.834413][ T7365] ? apparmor_socket_sendmsg+0x88/0x230 [ 253.841103][ T7365] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 253.849398][ T7365] ? security_socket_sendmsg+0x7c/0xa0 [ 253.857804][ T7365] ? netlink_getsockopt+0x570/0x570 [ 253.867572][ T7365] ____sys_sendmsg+0x5be/0x8f0 [ 253.876403][ T7365] ? __sys_sendmsg_sock+0x30/0x30 [ 253.884728][ T7365] ? import_iovec+0x6f/0xa0 [ 253.891775][ T7365] ___sys_sendmsg+0x236/0x2e0 [ 253.899520][ T7365] ? __sys_sendmsg+0x290/0x290 [ 253.906066][ T7365] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 253.913107][ T7365] __se_sys_sendmsg+0x1b7/0x2a0 [ 253.918996][ T7365] ? __x64_sys_sendmsg+0x80/0x80 [ 253.925217][ T7365] ? syscall_enter_from_user_mode+0x2a/0x70 [ 253.933935][ T7365] do_syscall_64+0x4c/0xa0 [ 253.940375][ T7365] ? clear_bhb_loop+0x30/0x80 [ 253.946669][ T7365] ? clear_bhb_loop+0x30/0x80 [ 253.952014][ T7365] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.958406][ T7365] RIP: 0033:0x7f993a22e0d9 [ 253.963481][ T7365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.985729][ T7365] RSP: 002b:00007f9938486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.995002][ T7365] RAX: ffffffffffffffda RBX: 00007f993a4b5fa0 RCX: 00007f993a22e0d9 [ 254.004662][ T7365] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 254.013309][ T7365] RBP: 00007f993a2c5024 R08: 0000000000000000 R09: 0000000000000000 [ 254.023160][ T7365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.031723][ T7365] R13: 00007f993a4b6038 R14: 00007f993a4b5fa0 R15: 00007ffcfb476128 [ 254.040185][ T7365] [ 254.927562][ T7387] tap0: tun_chr_ioctl cmd 35111 [ 255.574195][ T7407] device bridge_slave_1 left promiscuous mode [ 255.602932][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.104633][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.111445][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.176527][ T7407] device bridge_slave_0 left promiscuous mode [ 256.198441][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.893920][ T7421] delete_channel: no stack [ 257.783471][ T7441] tap0: tun_chr_ioctl cmd 35111 [ 258.347546][ T7457] netlink: 'syz.4.1092': attribute type 10 has an invalid length. [ 258.366725][ T7457] netlink: 'syz.4.1092': attribute type 19 has an invalid length. [ 258.409955][ T7457] netlink: 14536 bytes leftover after parsing attributes in process `syz.4.1092'. [ 258.889617][ T7468] delete_channel: no stack [ 259.351922][ T7490] netlink: 'syz.0.1102': attribute type 10 has an invalid length. [ 260.295471][ T7508] netlink: 'syz.3.1109': attribute type 39 has an invalid length. [ 260.638786][ T7522] delete_channel: no stack [ 260.923905][ T7533] sctp: [Deprecated]: syz.0.1121 (pid 7533) Use of int in max_burst socket option deprecated. [ 260.923905][ T7533] Use struct sctp_assoc_value instead [ 261.266203][ T7542] netlink: 'syz.2.1124': attribute type 10 has an invalid length. [ 261.282309][ T7542] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1124'. [ 261.298765][ T7542] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 261.311135][ T7542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.339341][ T7541] tap0: tun_chr_ioctl cmd 35111 [ 261.956848][ T7556] tap0: tun_chr_ioctl cmd 35111 [ 262.574491][ T7565] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1130'. [ 262.618744][ T7565] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 262.629943][ T7565] CPU: 0 PID: 7565 Comm: syz.2.1130 Not tainted syzkaller #0 [ 262.638800][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.649084][ T7565] Call Trace: [ 262.652435][ T7565] [ 262.655410][ T7565] dump_stack_lvl+0x188/0x250 [ 262.660135][ T7565] ? show_regs_print_info+0x20/0x20 [ 262.665548][ T7565] ? load_image+0x410/0x410 [ 262.670323][ T7565] sysfs_warn_dup+0x8a/0xa0 [ 262.674880][ T7565] sysfs_do_create_link_sd+0xc0/0x110 [ 262.680393][ T7565] device_add+0x83b/0x1050 [ 262.684878][ T7565] wiphy_register+0x1e74/0x2c40 [ 262.689935][ T7565] ? cfg80211_event_work+0x40/0x40 [ 262.695091][ T7565] ? minstrel_ht_alloc+0x807/0x980 [ 262.700395][ T7565] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 262.706689][ T7565] ieee80211_register_hw+0x2a03/0x3a60 [ 262.712384][ T7565] ? ieee80211_register_hw+0xae1/0x3a60 [ 262.718036][ T7565] ? ieee80211_tasklet_handler+0x20/0x20 [ 262.724554][ T7565] ? rcu_is_watching+0x11/0xa0 [ 262.730147][ T7565] ? hrtimer_init+0x10c/0x220 [ 262.735152][ T7565] mac80211_hwsim_new_radio+0x209d/0x4050 [ 262.740968][ T7565] hwsim_new_radio_nl+0xa7d/0xc50 [ 262.746095][ T7565] genl_rcv_msg+0xd0b/0xfa0 [ 262.750856][ T7565] ? genl_bind+0x370/0x370 [ 262.755440][ T7565] ? verify_lock_unused+0x140/0x140 [ 262.760917][ T7565] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 262.766717][ T7565] ? perf_trace_lock+0x301/0x390 [ 262.771714][ T7565] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 262.778125][ T7565] netlink_rcv_skb+0x1e9/0x430 [ 262.783023][ T7565] ? genl_bind+0x370/0x370 [ 262.787587][ T7565] ? netlink_ack+0xb10/0xb10 [ 262.792266][ T7565] ? down_read+0x1aa/0x2e0 [ 262.797190][ T7565] genl_rcv+0x24/0x40 [ 262.801493][ T7565] netlink_unicast+0x78f/0x940 [ 262.806427][ T7565] netlink_sendmsg+0x8ba/0xbe0 [ 262.811276][ T7565] ? netlink_getsockopt+0x570/0x570 [ 262.816524][ T7565] ? aa_sock_msg_perm+0x94/0x150 [ 262.821692][ T7565] ? apparmor_socket_sendmsg+0x88/0x230 [ 262.827379][ T7565] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 262.832909][ T7565] ? security_socket_sendmsg+0x7c/0xa0 [ 262.838730][ T7565] ? netlink_getsockopt+0x570/0x570 [ 262.844278][ T7565] ____sys_sendmsg+0x5be/0x8f0 [ 262.849205][ T7565] ? __sys_sendmsg_sock+0x30/0x30 [ 262.854829][ T7565] ? import_iovec+0x6f/0xa0 [ 262.859660][ T7565] ___sys_sendmsg+0x236/0x2e0 [ 262.864414][ T7565] ? __sys_sendmsg+0x290/0x290 [ 262.869435][ T7565] ? trace_event_raw_event_lock+0x250/0x250 [ 262.875602][ T7565] ? __might_fault+0xb3/0x110 [ 262.880493][ T7565] __se_sys_sendmsg+0x1b7/0x2a0 [ 262.885644][ T7565] ? __x64_sys_sendmsg+0x80/0x80 [ 262.890627][ T7565] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 262.897149][ T7565] ? lockdep_hardirqs_on+0x94/0x140 [ 262.902880][ T7565] do_syscall_64+0x4c/0xa0 [ 262.907402][ T7565] ? clear_bhb_loop+0x30/0x80 [ 262.912210][ T7565] ? clear_bhb_loop+0x30/0x80 [ 262.917224][ T7565] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 262.923360][ T7565] RIP: 0033:0x7f963353b0d9 [ 262.927935][ T7565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.947885][ T7565] RSP: 002b:00007f9631793028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.957254][ T7565] RAX: ffffffffffffffda RBX: 00007f96337c2fa0 RCX: 00007f963353b0d9 [ 262.966105][ T7565] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 262.974777][ T7565] RBP: 00007f96335d2024 R08: 0000000000000000 R09: 0000000000000000 [ 262.983981][ T7565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.993105][ T7565] R13: 00007f96337c3038 R14: 00007f96337c2fa0 R15: 00007ffef1e65988 [ 263.001276][ T7565] [ 263.039452][ T7577] device batadv0 left promiscuous mode [ 263.075961][ T7577] bridge0: port 3(batadv0) entered disabled state [ 263.114568][ T7577] device bridge_slave_1 left promiscuous mode [ 263.154331][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.169857][ T7577] device bridge_slave_0 left promiscuous mode [ 263.179589][ T7577] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.549527][ T7581] netlink: 'syz.4.1134': attribute type 39 has an invalid length. [ 264.986604][ T7618] netlink: 'syz.3.1147': attribute type 10 has an invalid length. [ 265.009821][ T7623] delete_channel: no stack [ 265.015049][ T7618] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1147'. [ 265.048852][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 265.070093][ T7618] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 265.103628][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 265.145615][ T7618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.276523][ T7633] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1152'. [ 265.469188][ T7628] netlink: 'syz.2.1153': attribute type 10 has an invalid length. [ 265.480874][ T7628] netlink: 'syz.2.1153': attribute type 19 has an invalid length. [ 265.502459][ T7628] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.1153'. [ 265.744696][ T7637] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.1155'. [ 266.151802][ T7645] netlink: 'syz.2.1157': attribute type 39 has an invalid length. [ 267.351231][ T7655] delete_channel: no stack [ 267.356753][ T7653] netlink: 'syz.0.1169': attribute type 10 has an invalid length. [ 267.418953][ T7653] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1169'. [ 267.433794][ T7653] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 267.473483][ T7653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.514441][ T7662] delete_channel: no stack [ 267.564593][ T7633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.571985][ T7633] IPv6: NLM_F_CREATE should be set when creating new route [ 267.850817][ T7673] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1166'. [ 268.247578][ T7673] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 268.277971][ T7673] CPU: 0 PID: 7673 Comm: syz.2.1166 Not tainted syzkaller #0 [ 268.285687][ T7673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.295870][ T7673] Call Trace: [ 268.299327][ T7673] [ 268.302284][ T7673] dump_stack_lvl+0x188/0x250 [ 268.307001][ T7673] ? show_regs_print_info+0x20/0x20 [ 268.312237][ T7673] ? load_image+0x410/0x410 [ 268.316808][ T7673] sysfs_warn_dup+0x8a/0xa0 [ 268.321394][ T7673] sysfs_do_create_link_sd+0xc0/0x110 [ 268.326800][ T7673] device_add+0x83b/0x1050 [ 268.331265][ T7673] wiphy_register+0x1e74/0x2c40 [ 268.336527][ T7673] ? cfg80211_event_work+0x40/0x40 [ 268.341755][ T7673] ? minstrel_ht_alloc+0x807/0x980 [ 268.347099][ T7673] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 268.353294][ T7673] ieee80211_register_hw+0x2a03/0x3a60 [ 268.358810][ T7673] ? ieee80211_register_hw+0xae1/0x3a60 [ 268.364495][ T7673] ? ieee80211_tasklet_handler+0x20/0x20 [ 268.370173][ T7673] ? rcu_is_watching+0x11/0xa0 [ 268.374999][ T7673] ? hrtimer_init+0x10c/0x220 [ 268.379714][ T7673] mac80211_hwsim_new_radio+0x209d/0x4050 [ 268.385675][ T7673] hwsim_new_radio_nl+0xa7d/0xc50 [ 268.390776][ T7673] genl_rcv_msg+0xd0b/0xfa0 [ 268.395516][ T7673] ? genl_bind+0x370/0x370 [ 268.400006][ T7673] ? verify_lock_unused+0x140/0x140 [ 268.405245][ T7673] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 268.411378][ T7673] ? perf_trace_lock+0x301/0x390 [ 268.416363][ T7673] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 268.422754][ T7673] netlink_rcv_skb+0x1e9/0x430 [ 268.427641][ T7673] ? genl_bind+0x370/0x370 [ 268.432103][ T7673] ? netlink_ack+0xb10/0xb10 [ 268.436777][ T7673] ? down_read+0x1aa/0x2e0 [ 268.441250][ T7673] genl_rcv+0x24/0x40 [ 268.445261][ T7673] netlink_unicast+0x78f/0x940 [ 268.450443][ T7673] netlink_sendmsg+0x8ba/0xbe0 [ 268.455365][ T7673] ? netlink_getsockopt+0x570/0x570 [ 268.460825][ T7673] ? aa_sock_msg_perm+0x94/0x150 [ 268.465917][ T7673] ? apparmor_socket_sendmsg+0x88/0x230 [ 268.471513][ T7673] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 268.477199][ T7673] ? security_socket_sendmsg+0x7c/0xa0 [ 268.482987][ T7673] ? netlink_getsockopt+0x570/0x570 [ 268.488451][ T7673] ____sys_sendmsg+0x5be/0x8f0 [ 268.493369][ T7673] ? __sys_sendmsg_sock+0x30/0x30 [ 268.498529][ T7673] ? import_iovec+0x6f/0xa0 [ 268.503197][ T7673] ___sys_sendmsg+0x236/0x2e0 [ 268.508089][ T7673] ? __sys_sendmsg+0x290/0x290 [ 268.513035][ T7673] __se_sys_sendmsg+0x1b7/0x2a0 [ 268.517998][ T7673] ? __x64_sys_sendmsg+0x80/0x80 [ 268.523126][ T7673] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 268.529184][ T7673] ? lockdep_hardirqs_on+0x94/0x140 [ 268.535491][ T7673] do_syscall_64+0x4c/0xa0 [ 268.540022][ T7673] ? clear_bhb_loop+0x30/0x80 [ 268.544801][ T7673] ? clear_bhb_loop+0x30/0x80 [ 268.550284][ T7673] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.556276][ T7673] RIP: 0033:0x7f963353b0d9 [ 268.561159][ T7673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.581001][ T7673] RSP: 002b:00007f9631772028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.589903][ T7673] RAX: ffffffffffffffda RBX: 00007f96337c3090 RCX: 00007f963353b0d9 [ 268.598022][ T7673] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 268.606185][ T7673] RBP: 00007f96335d2024 R08: 0000000000000000 R09: 0000000000000000 [ 268.614169][ T7673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.622436][ T7673] R13: 00007f96337c3128 R14: 00007f96337c3090 R15: 00007ffef1e65988 [ 268.630630][ T7673] [ 268.979502][ T7681] netlink: 'syz.4.1178': attribute type 2 has an invalid length. [ 269.028059][ T7681] netlink: 'syz.4.1178': attribute type 3 has an invalid length. [ 269.061073][ T7681] netlink: 11834 bytes leftover after parsing attributes in process `syz.4.1178'. [ 269.075209][ T7687] netlink: 'syz.0.1180': attribute type 39 has an invalid length. [ 269.102024][ T7683] netlink: 'syz.3.1168': attribute type 10 has an invalid length. [ 269.158733][ T7683] netlink: 'syz.3.1168': attribute type 19 has an invalid length. [ 269.171480][ T7683] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.1168'. [ 269.622342][ T7699] delete_channel: no stack [ 269.650923][ T7703] delete_channel: no stack [ 269.788166][ T7705] delete_channel: no stack [ 269.989251][ T7715] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1181'. [ 270.140141][ T7723] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1183'. [ 270.190803][ T7709] delete_channel: no stack [ 270.245046][ T7723] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 270.296540][ T7723] CPU: 0 PID: 7723 Comm: syz.3.1183 Not tainted syzkaller #0 [ 270.307095][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.317795][ T7723] Call Trace: [ 270.321112][ T7723] [ 270.324065][ T7723] dump_stack_lvl+0x188/0x250 [ 270.328789][ T7723] ? show_regs_print_info+0x20/0x20 [ 270.335199][ T7723] ? load_image+0x410/0x410 [ 270.339943][ T7723] sysfs_warn_dup+0x8a/0xa0 [ 270.344569][ T7723] sysfs_do_create_link_sd+0xc0/0x110 [ 270.349995][ T7723] device_add+0x83b/0x1050 [ 270.354434][ T7723] wiphy_register+0x1e74/0x2c40 [ 270.359438][ T7723] ? cfg80211_event_work+0x40/0x40 [ 270.364679][ T7723] ? minstrel_ht_alloc+0x807/0x980 [ 270.369902][ T7723] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 270.376027][ T7723] ieee80211_register_hw+0x2a03/0x3a60 [ 270.381886][ T7723] ? ieee80211_register_hw+0xae1/0x3a60 [ 270.388130][ T7723] ? ieee80211_tasklet_handler+0x20/0x20 [ 270.393812][ T7723] ? rcu_is_watching+0x11/0xa0 [ 270.398869][ T7723] ? hrtimer_init+0x10c/0x220 [ 270.403570][ T7723] mac80211_hwsim_new_radio+0x209d/0x4050 [ 270.409452][ T7723] hwsim_new_radio_nl+0xa7d/0xc50 [ 270.414753][ T7723] genl_rcv_msg+0xd0b/0xfa0 [ 270.419577][ T7723] ? genl_bind+0x370/0x370 [ 270.424684][ T7723] ? __dev_queue_xmit+0x1b64/0x2e50 [ 270.431117][ T7723] ? verify_lock_unused+0x140/0x140 [ 270.436540][ T7723] ? perf_trace_lock+0xe4/0x390 [ 270.442037][ T7723] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 270.449089][ T7723] netlink_rcv_skb+0x1e9/0x430 [ 270.453956][ T7723] ? genl_bind+0x370/0x370 [ 270.458780][ T7723] ? netlink_ack+0xb10/0xb10 [ 270.463648][ T7723] ? down_read+0x1aa/0x2e0 [ 270.468184][ T7723] genl_rcv+0x24/0x40 [ 270.472709][ T7723] netlink_unicast+0x78f/0x940 [ 270.478136][ T7723] netlink_sendmsg+0x8ba/0xbe0 [ 270.482929][ T7723] ? netlink_getsockopt+0x570/0x570 [ 270.488227][ T7723] ? aa_sock_msg_perm+0x94/0x150 [ 270.493174][ T7723] ? apparmor_socket_sendmsg+0x88/0x230 [ 270.498726][ T7723] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 270.504301][ T7723] ? security_socket_sendmsg+0x7c/0xa0 [ 270.510069][ T7723] ? netlink_getsockopt+0x570/0x570 [ 270.515915][ T7723] ____sys_sendmsg+0x5be/0x8f0 [ 270.521123][ T7723] ? __sys_sendmsg_sock+0x30/0x30 [ 270.526530][ T7723] ? import_iovec+0x6f/0xa0 [ 270.531511][ T7723] ___sys_sendmsg+0x236/0x2e0 [ 270.536310][ T7723] ? __sys_sendmsg+0x290/0x290 [ 270.541235][ T7723] ? trace_event_raw_event_lock+0x250/0x250 [ 270.547514][ T7723] ? __might_fault+0xb3/0x110 [ 270.553674][ T7723] __se_sys_sendmsg+0x1b7/0x2a0 [ 270.559825][ T7723] ? __x64_sys_sendmsg+0x80/0x80 [ 270.566878][ T7723] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 270.574360][ T7723] ? lockdep_hardirqs_on+0x94/0x140 [ 270.580717][ T7723] do_syscall_64+0x4c/0xa0 [ 270.585247][ T7723] ? clear_bhb_loop+0x30/0x80 [ 270.590017][ T7723] ? clear_bhb_loop+0x30/0x80 [ 270.594796][ T7723] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.600699][ T7723] RIP: 0033:0x7ff06a22b0d9 [ 270.605214][ T7723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.627321][ T7723] RSP: 002b:00007ff068441028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.636730][ T7723] RAX: ffffffffffffffda RBX: 00007ff06a4b3180 RCX: 00007ff06a22b0d9 [ 270.645298][ T7723] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 270.654556][ T7723] RBP: 00007ff06a2c2024 R08: 0000000000000000 R09: 0000000000000000 [ 270.662903][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.671355][ T7723] R13: 00007ff06a4b3218 R14: 00007ff06a4b3180 R15: 00007ffeee287458 [ 270.679543][ T7723] [ 271.739409][ T7740] delete_channel: no stack [ 271.966127][ T7715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.974923][ T7715] IPv6: NLM_F_CREATE should be set when creating new route [ 272.342600][ T7753] delete_channel: no stack [ 273.281085][ T7760] delete_channel: no stack [ 275.335787][ T7797] delete_channel: no stack [ 275.500615][ T7802] delete_channel: no stack [ 275.791458][ T7811] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1212'. [ 275.845557][ T7811] device bridge_slave_1 entered promiscuous mode [ 275.957378][ T7817] netlink: 'syz.2.1214': attribute type 16 has an invalid length. [ 275.984140][ T7817] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1214'. [ 275.994393][ T7816] delete_channel: no stack [ 276.022470][ T7822] netlink: 'syz.2.1214': attribute type 10 has an invalid length. [ 276.031832][ T7822] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1214'. [ 277.153042][ T7811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.161261][ T7811] IPv6: NLM_F_CREATE should be set when creating new route [ 277.168934][ T7811] IPv6: NLM_F_CREATE should be set when creating new route [ 277.177129][ T7811] IPv6: NLM_F_CREATE should be set when creating new route [ 277.421187][ T7841] delete_channel: no stack [ 277.497980][ T7845] delete_channel: no stack [ 277.595154][ T7847] delete_channel: no stack [ 278.698022][ T7858] delete_channel: no stack [ 279.409575][ T7882] delete_channel: no stack [ 279.410712][ T7878] delete_channel: no stack [ 279.517736][ T7892] netlink: 'syz.1.1242': attribute type 16 has an invalid length. [ 279.570664][ T7892] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1242'. [ 279.651481][ T7893] netlink: 'syz.1.1242': attribute type 10 has an invalid length. [ 279.717615][ T7893] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1242'. [ 280.566237][ T7903] delete_channel: no stack [ 280.764601][ T7919] delete_channel: no stack [ 280.856231][ T7924] delete_channel: no stack [ 281.118837][ T7933] netlink: 'syz.1.1256': attribute type 10 has an invalid length. [ 281.139929][ T7933] netlink: 'syz.1.1256': attribute type 19 has an invalid length. [ 281.153110][ T7933] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.1256'. [ 282.105242][ T7958] delete_channel: no stack [ 282.230763][ T7961] delete_channel: no stack [ 282.306557][ T7963] delete_channel: no stack [ 282.326918][ T7965] netlink: 'syz.3.1271': attribute type 10 has an invalid length. [ 282.341242][ T7965] netlink: 'syz.3.1271': attribute type 19 has an invalid length. [ 282.366716][ T7965] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.1271'. [ 282.575903][ T7979] netlink: 'syz.0.1288': attribute type 10 has an invalid length. [ 282.634874][ T7979] netlink: 'syz.0.1288': attribute type 19 has an invalid length. [ 282.663391][ T7978] delete_channel: no stack [ 282.716041][ T7979] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.1288'. [ 283.299785][ T8001] delete_channel: no stack [ 283.502740][ T8005] delete_channel: no stack [ 283.870196][ T7995] delete_channel: no stack [ 284.399140][ T8015] delete_channel: no stack [ 284.618226][ T8026] netlink: 'syz.4.1296': attribute type 10 has an invalid length. [ 284.654722][ T8026] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1296'. [ 284.762012][ T8026] device team0 entered promiscuous mode [ 284.815836][ T8026] device team_slave_0 entered promiscuous mode [ 284.904134][ T8026] device team_slave_1 entered promiscuous mode [ 284.952689][ T8026] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 285.349652][ T8038] delete_channel: no stack [ 285.585821][ T8044] delete_channel: no stack [ 285.598946][ T8046] delete_channel: no stack [ 285.896707][ T8054] delete_channel: no stack [ 286.685190][ T8071] delete_channel: no stack [ 286.694225][ T8062] delete_channel: no stack [ 287.085179][ T8081] delete_channel: no stack [ 287.152682][ T8084] delete_channel: no stack [ 287.238875][ T8091] sctp: [Deprecated]: syz.1.1321 (pid 8091) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.238875][ T8091] Use struct sctp_sack_info instead [ 288.503754][ T8109] delete_channel: no stack [ 288.636403][ T8116] delete_channel: no stack [ 288.720567][ T8118] delete_channel: no stack [ 289.538039][ T8125] delete_channel: no stack [ 289.602228][ T8127] delete_channel: no stack [ 289.916412][ T8147] delete_channel: no stack [ 290.334659][ T8155] delete_channel: no stack [ 290.345910][ T8159] delete_channel: no stack [ 290.893671][ T8174] delete_channel: no stack [ 290.995998][ T8186] netlink: 'syz.2.1355': attribute type 10 has an invalid length. [ 291.024502][ T8186] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1355'. [ 291.042290][ T8186] device team0 entered promiscuous mode [ 291.051202][ T8186] device team_slave_0 entered promiscuous mode [ 291.083453][ T8186] device team_slave_1 entered promiscuous mode [ 291.134233][ T8186] bridge0: port 3(team0) entered blocking state [ 291.184488][ T8186] bridge0: port 3(team0) entered disabled state [ 291.205500][ T8186] bridge0: port 3(team0) entered blocking state [ 291.206762][ T8182] delete_channel: no stack [ 291.215591][ T8186] bridge0: port 3(team0) entered forwarding state [ 291.754201][ T8197] delete_channel: no stack [ 291.909221][ T8199] delete_channel: no stack [ 292.664518][ T8217] delete_channel: no stack [ 292.957994][ T8231] sctp: [Deprecated]: syz.4.1372 (pid 8231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.957994][ T8231] Use struct sctp_sack_info instead [ 293.534122][ T8243] delete_channel: no stack [ 293.618449][ T8235] delete_channel: no stack [ 293.994958][ T8254] netlink: 'syz.1.1380': attribute type 10 has an invalid length. [ 294.059984][ T8254] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1380'. [ 294.129328][ T8254] device team0 entered promiscuous mode [ 294.161799][ T8254] device team_slave_0 entered promiscuous mode [ 294.194506][ T8254] device team_slave_1 entered promiscuous mode [ 294.254105][ T8254] bridge0: port 3(team0) entered blocking state [ 294.286243][ T8254] bridge0: port 3(team0) entered disabled state [ 294.296556][ T8254] bridge0: port 3(team0) entered blocking state [ 294.304603][ T8254] bridge0: port 3(team0) entered forwarding state [ 294.616290][ T8269] delete_channel: no stack [ 294.661411][ T8255] delete_channel: no stack [ 294.851483][ T8272] delete_channel: no stack [ 295.391922][ T8282] delete_channel: no stack [ 296.295942][ T8314] delete_channel: no stack [ 296.471216][ T8318] delete_channel: no stack [ 297.591194][ T8352] delete_channel: no stack [ 297.813541][ T8348] delete_channel: no stack [ 298.200429][ T8380] sctp: [Deprecated]: syz.2.1423 (pid 8380) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.200429][ T8380] Use struct sctp_sack_info instead [ 298.440394][ T8384] delete_channel: no stack [ 298.820993][ T8396] netlink: 205108 bytes leftover after parsing attributes in process `syz.2.1430'. [ 299.350751][ T8396] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 299.363449][ T8396] CPU: 0 PID: 8396 Comm: syz.2.1430 Not tainted syzkaller #0 [ 299.373697][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.386017][ T8396] Call Trace: [ 299.392791][ T8396] [ 299.397056][ T8396] dump_stack_lvl+0x188/0x250 [ 299.403277][ T8396] ? show_regs_print_info+0x20/0x20 [ 299.409118][ T8396] ? load_image+0x410/0x410 [ 299.414637][ T8396] sysfs_warn_dup+0x8a/0xa0 [ 299.420715][ T8396] sysfs_do_create_link_sd+0xc0/0x110 [ 299.426666][ T8396] device_add+0x83b/0x1050 [ 299.431430][ T8396] wiphy_register+0x1e74/0x2c40 [ 299.436587][ T8396] ? cfg80211_event_work+0x40/0x40 [ 299.441959][ T8396] ? ieee80211_register_hw+0x22e1/0x3a60 [ 299.447653][ T8396] ? ieee80211_register_hw+0x2414/0x3a60 [ 299.453353][ T8396] ? kasan_check_range+0x84/0x290 [ 299.458549][ T8396] ieee80211_register_hw+0x2a03/0x3a60 [ 299.464252][ T8396] ? ieee80211_register_hw+0xae1/0x3a60 [ 299.470415][ T8396] ? ieee80211_tasklet_handler+0x20/0x20 [ 299.476189][ T8396] ? rcu_is_watching+0x11/0xa0 [ 299.481034][ T8396] ? hrtimer_init+0x10c/0x220 [ 299.485800][ T8396] mac80211_hwsim_new_radio+0x209d/0x4050 [ 299.491733][ T8396] hwsim_new_radio_nl+0xa7d/0xc50 [ 299.497136][ T8396] genl_rcv_msg+0xd0b/0xfa0 [ 299.501890][ T8396] ? genl_bind+0x370/0x370 [ 299.507112][ T8396] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 299.513251][ T8396] ? verify_lock_unused+0x140/0x140 [ 299.518501][ T8396] ? perf_trace_lock_acquire+0x341/0x3f0 [ 299.524240][ T8396] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 299.531593][ T8396] ? perf_trace_lock+0xe4/0x390 [ 299.536562][ T8396] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 299.542975][ T8396] netlink_rcv_skb+0x1e9/0x430 [ 299.547930][ T8396] ? genl_bind+0x370/0x370 [ 299.552358][ T8396] ? netlink_ack+0xb10/0xb10 [ 299.557351][ T8396] ? down_read+0x1aa/0x2e0 [ 299.561929][ T8396] genl_rcv+0x24/0x40 [ 299.566102][ T8396] netlink_unicast+0x78f/0x940 [ 299.571108][ T8396] netlink_sendmsg+0x8ba/0xbe0 [ 299.576241][ T8396] ? netlink_getsockopt+0x570/0x570 [ 299.581495][ T8396] ? aa_sock_msg_perm+0x94/0x150 [ 299.587004][ T8396] ? apparmor_socket_sendmsg+0x88/0x230 [ 299.592869][ T8396] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 299.600102][ T8396] ? security_socket_sendmsg+0x7c/0xa0 [ 299.606633][ T8396] ? netlink_getsockopt+0x570/0x570 [ 299.613474][ T8396] ____sys_sendmsg+0x5be/0x8f0 [ 299.618468][ T8396] ? __sys_sendmsg_sock+0x30/0x30 [ 299.624109][ T8396] ? import_iovec+0x6f/0xa0 [ 299.628977][ T8396] ___sys_sendmsg+0x236/0x2e0 [ 299.633817][ T8396] ? __sys_sendmsg+0x290/0x290 [ 299.639078][ T8396] ? trace_event_raw_event_lock+0x250/0x250 [ 299.645854][ T8396] __se_sys_sendmsg+0x1b7/0x2a0 [ 299.651630][ T8396] ? __x64_sys_sendmsg+0x80/0x80 [ 299.658033][ T8396] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 299.664251][ T8396] ? lockdep_hardirqs_on+0x94/0x140 [ 299.670004][ T8396] do_syscall_64+0x4c/0xa0 [ 299.674555][ T8396] ? clear_bhb_loop+0x30/0x80 [ 299.679339][ T8396] ? clear_bhb_loop+0x30/0x80 [ 299.684085][ T8396] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 299.690559][ T8396] RIP: 0033:0x7f963353b0d9 [ 299.695548][ T8396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.715390][ T8396] RSP: 002b:00007f9631772028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.723950][ T8396] RAX: ffffffffffffffda RBX: 00007f96337c3090 RCX: 00007f963353b0d9 [ 299.732062][ T8396] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 299.741047][ T8396] RBP: 00007f96335d2024 R08: 0000000000000000 R09: 0000000000000000 [ 299.749353][ T8396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.757433][ T8396] R13: 00007f96337c3128 R14: 00007f96337c3090 R15: 00007ffef1e65988 [ 299.765920][ T8396] [ 299.906232][ T8400] delete_channel: no stack [ 300.234617][ T8417] sctp: [Deprecated]: syz.3.1440 (pid 8417) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.234617][ T8417] Use struct sctp_sack_info instead [ 300.959526][ T8439] delete_channel: no stack [ 301.451543][ T8457] sctp: [Deprecated]: syz.0.1457 (pid 8457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.451543][ T8457] Use struct sctp_sack_info instead [ 301.953592][ T8472] IPv6: pim6reg1: Disabled Multicast RS [ 302.320202][ T8483] delete_channel: no stack [ 302.575021][ T8499] sctp: [Deprecated]: syz.2.1472 (pid 8499) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.575021][ T8499] Use struct sctp_sack_info instead [ 303.786187][ T8514] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 303.946818][ T8525] IPv6: pim6reg1: Disabled Multicast RS [ 304.327375][ T8537] netlink: 'syz.3.1486': attribute type 21 has an invalid length. [ 304.372987][ T8537] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1486'. [ 304.409511][ T8528] delete_channel: no stack [ 304.412663][ T8527] delete_channel: no stack [ 305.256827][ T8549] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1491'. [ 305.273147][ T8549] netlink: 'syz.4.1491': attribute type 1 has an invalid length. [ 305.286650][ T8549] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1491'. [ 305.696184][ T8567] netlink: 'syz.3.1498': attribute type 27 has an invalid length. [ 306.043890][ T4210] wlan1: Trigger new scan to find an IBSS to join [ 306.700804][ T8573] delete_channel: no stack [ 307.852366][ T8607] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1509'. [ 307.875959][ T8607] netlink: 'syz.3.1509': attribute type 1 has an invalid length. [ 307.983229][ T8607] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1509'. [ 308.470876][ T8620] netlink: 205108 bytes leftover after parsing attributes in process `syz.0.1514'. [ 308.787113][ T8620] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 308.823429][ T8620] CPU: 1 PID: 8620 Comm: syz.0.1514 Not tainted syzkaller #0 [ 308.831325][ T8620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.841727][ T8620] Call Trace: [ 308.845045][ T8620] [ 308.848277][ T8620] dump_stack_lvl+0x188/0x250 [ 308.853022][ T8620] ? show_regs_print_info+0x20/0x20 [ 308.858356][ T8620] ? load_image+0x410/0x410 [ 308.862971][ T8620] sysfs_warn_dup+0x8a/0xa0 [ 308.867617][ T8620] sysfs_do_create_link_sd+0xc0/0x110 [ 308.873208][ T8620] device_add+0x83b/0x1050 [ 308.878193][ T8620] wiphy_register+0x1e74/0x2c40 [ 308.883182][ T8620] ? cfg80211_event_work+0x40/0x40 [ 308.888778][ T8620] ? minstrel_ht_alloc+0x807/0x980 [ 308.895478][ T8620] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 308.902522][ T8620] ieee80211_register_hw+0x2a03/0x3a60 [ 308.908600][ T8620] ? ieee80211_register_hw+0xae1/0x3a60 [ 308.914336][ T8620] ? ieee80211_tasklet_handler+0x20/0x20 [ 308.920048][ T8620] ? debug_init+0x62/0x1d0 [ 308.925656][ T8620] ? rcu_is_watching+0x11/0xa0 [ 308.930738][ T8620] ? hrtimer_init+0x10c/0x220 [ 308.935781][ T8620] mac80211_hwsim_new_radio+0x209d/0x4050 [ 308.941999][ T8620] hwsim_new_radio_nl+0xa7d/0xc50 [ 308.947182][ T8620] genl_rcv_msg+0xd0b/0xfa0 [ 308.952339][ T8620] ? genl_bind+0x370/0x370 [ 308.957408][ T8620] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 308.964347][ T8620] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 308.970707][ T8620] ? verify_lock_unused+0x140/0x140 [ 308.976435][ T8620] ? perf_trace_lock_acquire+0x341/0x3f0 [ 308.982740][ T8620] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 308.990085][ T8620] ? perf_trace_lock+0xe4/0x390 [ 308.995592][ T8620] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 309.002663][ T8620] netlink_rcv_skb+0x1e9/0x430 [ 309.008926][ T8620] ? genl_bind+0x370/0x370 [ 309.014537][ T8620] ? netlink_ack+0xb10/0xb10 [ 309.019588][ T8620] ? down_read+0x1aa/0x2e0 [ 309.025163][ T8620] genl_rcv+0x24/0x40 [ 309.029568][ T8620] netlink_unicast+0x78f/0x940 [ 309.035476][ T8620] netlink_sendmsg+0x8ba/0xbe0 [ 309.043653][ T8620] ? netlink_getsockopt+0x570/0x570 [ 309.049379][ T8620] ? aa_sock_msg_perm+0x94/0x150 [ 309.055681][ T8620] ? apparmor_socket_sendmsg+0x88/0x230 [ 309.062385][ T8620] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 309.068619][ T8620] ? security_socket_sendmsg+0x7c/0xa0 [ 309.075523][ T8620] ? netlink_getsockopt+0x570/0x570 [ 309.082076][ T8620] ____sys_sendmsg+0x5be/0x8f0 [ 309.087522][ T8620] ? __sys_sendmsg_sock+0x30/0x30 [ 309.094885][ T8620] ? import_iovec+0x6f/0xa0 [ 309.100418][ T8620] ___sys_sendmsg+0x236/0x2e0 [ 309.105825][ T8620] ? __sys_sendmsg+0x290/0x290 [ 309.112297][ T8620] ? trace_event_raw_event_lock+0x250/0x250 [ 309.123202][ T8620] __se_sys_sendmsg+0x1b7/0x2a0 [ 309.129372][ T8620] ? __x64_sys_sendmsg+0x80/0x80 [ 309.136562][ T8620] ? syscall_enter_from_user_mode+0x2a/0x70 [ 309.146219][ T8620] do_syscall_64+0x4c/0xa0 [ 309.151894][ T8620] ? clear_bhb_loop+0x30/0x80 [ 309.159516][ T8620] ? clear_bhb_loop+0x30/0x80 [ 309.164281][ T8620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.170721][ T8620] RIP: 0033:0x7f993a22e0d9 [ 309.176230][ T8620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.199376][ T8620] RSP: 002b:00007f9938486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.208907][ T8620] RAX: ffffffffffffffda RBX: 00007f993a4b5fa0 RCX: 00007f993a22e0d9 [ 309.217301][ T8620] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 309.226618][ T8620] RBP: 00007f993a2c5024 R08: 0000000000000000 R09: 0000000000000000 [ 309.235688][ T8620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.245614][ T8620] R13: 00007f993a4b6038 R14: 00007f993a4b5fa0 R15: 00007ffcfb476128 [ 309.255130][ T8620] [ 309.455555][ T8624] delete_channel: no stack [ 310.053098][ T4376] wlan1: Trigger new scan to find an IBSS to join [ 310.398157][ T8645] delete_channel: no stack [ 310.551612][ T8651] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1526'. [ 310.643961][ T8651] netlink: 'syz.2.1526': attribute type 1 has an invalid length. [ 310.688621][ T8651] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1526'. [ 311.134689][ T8666] delete_channel: no stack [ 311.803767][ T8688] delete_channel: no stack [ 312.043369][ T8698] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 312.054116][ T1220] wlan1: Creating new IBSS network, BSSID aa:69:35:93:0a:48 [ 312.321306][ T8707] netlink: 'syz.1.1548': attribute type 10 has an invalid length. [ 312.330759][ T8707] netlink: 'syz.1.1548': attribute type 4 has an invalid length. [ 312.344208][ T8707] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1548'. [ 312.399381][ T8707] bridge0: port 3(team0) entered disabled state [ 312.479141][ T8707] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 313.094195][ T8704] delete_channel: no stack [ 313.761177][ T8726] delete_channel: no stack [ 314.663850][ T8740] netlink: 'syz.4.1560': attribute type 21 has an invalid length. [ 314.671921][ T8740] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1560'. [ 314.758781][ T8738] netlink: 205108 bytes leftover after parsing attributes in process `syz.3.1558'. [ 314.971548][ T8738] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 315.033139][ T8738] CPU: 1 PID: 8738 Comm: syz.3.1558 Not tainted syzkaller #0 [ 315.042565][ T8738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.053113][ T8738] Call Trace: [ 315.056447][ T8738] [ 315.059493][ T8738] dump_stack_lvl+0x188/0x250 [ 315.064338][ T8738] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 315.070674][ T8738] ? show_regs_print_info+0x20/0x20 [ 315.076025][ T8738] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 315.082813][ T8738] sysfs_warn_dup+0x8a/0xa0 [ 315.088041][ T8738] sysfs_do_create_link_sd+0xc0/0x110 [ 315.093793][ T8738] device_add+0x83b/0x1050 [ 315.098666][ T8738] wiphy_register+0x1e74/0x2c40 [ 315.104671][ T8738] ? cfg80211_event_work+0x40/0x40 [ 315.110818][ T8738] ? ieee80211_init_rate_ctrl_alg+0x4d9/0x5e0 [ 315.117615][ T8738] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 315.123993][ T8738] ieee80211_register_hw+0x2a03/0x3a60 [ 315.129957][ T8738] ? ieee80211_register_hw+0xae1/0x3a60 [ 315.136447][ T8738] ? ieee80211_tasklet_handler+0x20/0x20 [ 315.143081][ T8738] ? rcu_is_watching+0x11/0xa0 [ 315.148150][ T8738] ? hrtimer_init+0x10c/0x220 [ 315.154195][ T8738] mac80211_hwsim_new_radio+0x209d/0x4050 [ 315.160231][ T8738] hwsim_new_radio_nl+0xa7d/0xc50 [ 315.165667][ T8738] genl_rcv_msg+0xd0b/0xfa0 [ 315.170600][ T8738] ? genl_bind+0x370/0x370 [ 315.175255][ T8738] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 315.181829][ T8738] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 315.188000][ T8738] ? lock_chain_count+0x20/0x20 [ 315.193111][ T8738] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 315.199397][ T8738] ? lockdep_hardirqs_on+0x94/0x140 [ 315.204645][ T8738] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 315.211089][ T8738] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 315.217610][ T8738] ? lock_acquire+0x208/0x400 [ 315.223902][ T8738] netlink_rcv_skb+0x1e9/0x430 [ 315.229166][ T8738] ? genl_bind+0x370/0x370 [ 315.233922][ T8738] ? netlink_ack+0xb10/0xb10 [ 315.238891][ T8738] ? down_read+0x1aa/0x2e0 [ 315.243660][ T8738] genl_rcv+0x24/0x40 [ 315.248103][ T8738] netlink_unicast+0x78f/0x940 [ 315.253099][ T8738] netlink_sendmsg+0x8ba/0xbe0 [ 315.257965][ T8738] ? netlink_getsockopt+0x570/0x570 [ 315.263234][ T8738] ? aa_sock_msg_perm+0x94/0x150 [ 315.268422][ T8738] ? apparmor_socket_sendmsg+0x88/0x230 [ 315.274102][ T8738] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 315.279598][ T8738] ? security_socket_sendmsg+0x7c/0xa0 [ 315.285440][ T8738] ? netlink_getsockopt+0x570/0x570 [ 315.290936][ T8738] ____sys_sendmsg+0x5be/0x8f0 [ 315.296054][ T8738] ? __sys_sendmsg_sock+0x30/0x30 [ 315.301433][ T8738] ? import_iovec+0x6f/0xa0 [ 315.306281][ T8738] ___sys_sendmsg+0x236/0x2e0 [ 315.311211][ T8738] ? __sys_sendmsg+0x290/0x290 [ 315.316369][ T8738] __se_sys_sendmsg+0x1b7/0x2a0 [ 315.321739][ T8738] ? __x64_sys_sendmsg+0x80/0x80 [ 315.326955][ T8738] ? syscall_enter_from_user_mode+0x2a/0x70 [ 315.332908][ T8738] do_syscall_64+0x4c/0xa0 [ 315.337970][ T8738] ? clear_bhb_loop+0x30/0x80 [ 315.343199][ T8738] ? clear_bhb_loop+0x30/0x80 [ 315.348202][ T8738] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 315.354228][ T8738] RIP: 0033:0x7ff06a22b0d9 [ 315.358698][ T8738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.378972][ T8738] RSP: 002b:00007ff068483028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.388393][ T8738] RAX: ffffffffffffffda RBX: 00007ff06a4b2fa0 RCX: 00007ff06a22b0d9 [ 315.398134][ T8738] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 315.406743][ T8738] RBP: 00007ff06a2c2024 R08: 0000000000000000 R09: 0000000000000000 [ 315.417200][ T8738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.428389][ T8738] R13: 00007ff06a4b3038 R14: 00007ff06a4b2fa0 R15: 00007ffeee287458 [ 315.437692][ T8738] [ 315.512222][ T8750] delete_channel: no stack [ 315.635346][ T8760] netlink: 'syz.1.1563': attribute type 27 has an invalid length. [ 316.372081][ T8766] delete_channel: no stack [ 316.560661][ T8775] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1567'. [ 316.603380][ T8775] netlink: 'syz.1.1567': attribute type 1 has an invalid length. [ 316.623389][ T8775] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1567'. [ 316.739435][ T8782] netlink: 'syz.0.1571': attribute type 10 has an invalid length. [ 316.881814][ T8782] netlink: 'syz.0.1571': attribute type 4 has an invalid length. [ 317.073610][ T8782] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1571'. [ 317.224363][ T8782] team0: Device vlan0 failed to change mtu [ 317.328526][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.341352][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.627821][ T8793] delete_channel: no stack [ 318.257655][ T8798] netlink: 205108 bytes leftover after parsing attributes in process `syz.1.1576'. [ 318.880254][ T8798] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 318.910972][ T8798] CPU: 1 PID: 8798 Comm: syz.1.1576 Not tainted syzkaller #0 [ 318.918646][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.928865][ T8798] Call Trace: [ 318.932183][ T8798] [ 318.935262][ T8798] dump_stack_lvl+0x188/0x250 [ 318.940014][ T8798] ? show_regs_print_info+0x20/0x20 [ 318.945261][ T8798] ? load_image+0x410/0x410 [ 318.950599][ T8798] sysfs_warn_dup+0x8a/0xa0 [ 318.955555][ T8798] sysfs_do_create_link_sd+0xc0/0x110 [ 318.961734][ T8798] device_add+0x83b/0x1050 [ 318.966326][ T8798] wiphy_register+0x1e74/0x2c40 [ 318.971308][ T8798] ? cfg80211_event_work+0x40/0x40 [ 318.976801][ T8798] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 318.983050][ T8798] ? ieee80211_register_hw+0x23d6/0x3a60 [ 318.989465][ T8798] ieee80211_register_hw+0x2a03/0x3a60 [ 318.995125][ T8798] ? ieee80211_register_hw+0xae1/0x3a60 [ 319.002489][ T8798] ? ieee80211_tasklet_handler+0x20/0x20 [ 319.009159][ T8798] ? rcu_is_watching+0x11/0xa0 [ 319.014351][ T8798] ? hrtimer_init+0x10c/0x220 [ 319.019370][ T8798] mac80211_hwsim_new_radio+0x209d/0x4050 [ 319.025293][ T8798] hwsim_new_radio_nl+0xa7d/0xc50 [ 319.030473][ T8798] genl_rcv_msg+0xd0b/0xfa0 [ 319.035433][ T8798] ? genl_bind+0x370/0x370 [ 319.040314][ T8798] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 319.046713][ T8798] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 319.053493][ T8798] ? lock_chain_count+0x20/0x20 [ 319.058716][ T8798] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 319.065023][ T8798] ? lockdep_hardirqs_on+0x94/0x140 [ 319.070668][ T8798] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 319.077665][ T8798] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 319.085250][ T8798] ? lock_acquire+0x208/0x400 [ 319.090655][ T8798] netlink_rcv_skb+0x1e9/0x430 [ 319.096122][ T8798] ? genl_bind+0x370/0x370 [ 319.100929][ T8798] ? netlink_ack+0xb10/0xb10 [ 319.107169][ T8798] ? lockdep_hardirqs_on+0x94/0x140 [ 319.112957][ T8798] ? down_read+0x1aa/0x2e0 [ 319.117843][ T8798] genl_rcv+0x24/0x40 [ 319.123017][ T8798] netlink_unicast+0x78f/0x940 [ 319.129195][ T8798] netlink_sendmsg+0x8ba/0xbe0 [ 319.136273][ T8798] ? netlink_getsockopt+0x570/0x570 [ 319.142648][ T8798] ? aa_sock_msg_perm+0x94/0x150 [ 319.148128][ T8798] ? apparmor_socket_sendmsg+0x88/0x230 [ 319.154918][ T8798] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 319.161258][ T8798] ? security_socket_sendmsg+0x7c/0xa0 [ 319.166942][ T8798] ? netlink_getsockopt+0x570/0x570 [ 319.172489][ T8798] ____sys_sendmsg+0x5be/0x8f0 [ 319.177691][ T8798] ? __sys_sendmsg_sock+0x30/0x30 [ 319.183334][ T8798] ? import_iovec+0x6f/0xa0 [ 319.188993][ T8798] ___sys_sendmsg+0x236/0x2e0 [ 319.194131][ T8798] ? __sys_sendmsg+0x290/0x290 [ 319.199337][ T8798] __se_sys_sendmsg+0x1b7/0x2a0 [ 319.204250][ T8798] ? __x64_sys_sendmsg+0x80/0x80 [ 319.209771][ T8798] ? syscall_enter_from_user_mode+0x2a/0x70 [ 319.216111][ T8798] do_syscall_64+0x4c/0xa0 [ 319.221112][ T8798] ? clear_bhb_loop+0x30/0x80 [ 319.227326][ T8798] ? clear_bhb_loop+0x30/0x80 [ 319.232881][ T8798] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.239814][ T8798] RIP: 0033:0x7f3c1fe210d9 [ 319.244918][ T8798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.267048][ T8798] RSP: 002b:00007f3c1e079028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.275918][ T8798] RAX: ffffffffffffffda RBX: 00007f3c200a8fa0 RCX: 00007f3c1fe210d9 [ 319.284033][ T8798] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 319.292140][ T8798] RBP: 00007f3c1feb8024 R08: 0000000000000000 R09: 0000000000000000 [ 319.300154][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.308260][ T8798] R13: 00007f3c200a9038 R14: 00007f3c200a8fa0 R15: 00007ffcb0fab778 [ 319.316354][ T8798] [ 323.134891][ T8828] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 323.620825][ T8840] delete_channel: no stack [ 323.815605][ T8844] netlink: 'syz.3.1594': attribute type 10 has an invalid length. [ 323.873950][ T8844] netlink: 'syz.3.1594': attribute type 4 has an invalid length. [ 323.924834][ T8844] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1594'. [ 324.009326][ T8844] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 324.043761][ T8836] delete_channel: no stack [ 324.327978][ T8856] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1597'. [ 324.407648][ T8861] netlink: 'syz.4.1598': attribute type 3 has an invalid length. [ 324.424739][ T8862] netlink: 'syz.2.1597': attribute type 9 has an invalid length. [ 324.472331][ T8861] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1598'. [ 324.495418][ T8862] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1597'. [ 324.532573][ T8856] netlink: 'syz.2.1597': attribute type 9 has an invalid length. [ 324.541330][ T8856] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1597'. [ 325.430643][ T8880] delete_channel: no stack [ 325.624599][ T8887] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 325.825530][ T8882] delete_channel: no stack [ 326.025777][ T8898] delete_channel: no stack [ 326.242489][ T8907] netlink: 'syz.1.1614': attribute type 3 has an invalid length. [ 326.420255][ T8907] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1614'. [ 326.492145][ T8906] netlink: 'syz.4.1616': attribute type 10 has an invalid length. [ 326.503831][ T8906] netlink: 'syz.4.1616': attribute type 4 has an invalid length. [ 326.511921][ T8906] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1616'. [ 326.530340][ T8906] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 327.014764][ T4376] wlan1: Trigger new scan to find an IBSS to join [ 327.491355][ T8926] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 327.698402][ T8918] delete_channel: no stack [ 328.032368][ T8937] delete_channel: no stack [ 328.043019][ T4376] wlan1: Trigger new scan to find an IBSS to join [ 328.291097][ T8935] delete_channel: no stack [ 329.016525][ T8961] delete_channel: no stack [ 329.676189][ T8971] netlink: 'syz.3.1637': attribute type 3 has an invalid length. [ 329.699371][ T8971] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1637'. [ 329.876462][ T8978] netlink: 'syz.4.1641': attribute type 27 has an invalid length. [ 330.048091][ T4376] wlan1: Trigger new scan to find an IBSS to join [ 330.053300][ T4210] wlan1: Trigger new scan to find an IBSS to join [ 330.167897][ T8979] delete_channel: no stack [ 330.187650][ T1220] wlan1: Creating new IBSS network, BSSID aa:a4:17:b5:72:bc [ 330.386177][ T8987] netlink: 'syz.2.1643': attribute type 10 has an invalid length. [ 330.403024][ T8987] netlink: 'syz.2.1643': attribute type 4 has an invalid length. [ 330.411039][ T8990] delete_channel: no stack [ 330.449012][ T8987] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1643'. [ 330.496547][ T8987] bridge0: port 3(team0) entered disabled state [ 330.533844][ T8987] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 330.839710][ T8999] delete_channel: no stack [ 331.896289][ T9016] delete_channel: no stack [ 332.054429][ T1220] wlan1: Trigger new scan to find an IBSS to join [ 332.225788][ T9027] netlink: 'syz.4.1658': attribute type 27 has an invalid length. [ 332.448764][ T9029] delete_channel: no stack [ 332.502578][ T9032] netlink: 'syz.0.1659': attribute type 3 has an invalid length. [ 332.513972][ T9032] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1659'. [ 332.764795][ T9039] delete_channel: no stack [ 333.060978][ T9047] delete_channel: no stack [ 334.043035][ T1220] wlan1: Trigger new scan to find an IBSS to join [ 334.053164][ T144] wlan1: Creating new IBSS network, BSSID ae:a8:4c:57:13:06 [ 334.193376][ T9056] device syzkaller0 entered promiscuous mode [ 334.359735][ T9069] delete_channel: no stack [ 334.594158][ T9075] netlink: 'syz.1.1677': attribute type 27 has an invalid length. [ 335.446183][ T9078] delete_channel: no stack [ 336.043331][ T9] wlan1: Creating new IBSS network, BSSID f2:4e:bd:a1:f9:d3 [ 337.063254][ T9087] delete_channel: no stack [ 337.555367][ T9096] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1686'. [ 337.571497][ T9092] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1685'. [ 337.609383][ T9096] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 337.637031][ T9096] CPU: 0 PID: 9096 Comm: syz.1.1686 Not tainted syzkaller #0 [ 337.644468][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.654749][ T9096] Call Trace: [ 337.658326][ T9096] [ 337.661395][ T9096] dump_stack_lvl+0x188/0x250 [ 337.666212][ T9096] ? show_regs_print_info+0x20/0x20 [ 337.672587][ T9096] ? load_image+0x410/0x410 [ 337.677413][ T9096] sysfs_warn_dup+0x8a/0xa0 [ 337.682580][ T9096] sysfs_do_create_link_sd+0xc0/0x110 [ 337.688895][ T9096] device_add+0x83b/0x1050 [ 337.696139][ T9096] wiphy_register+0x1e74/0x2c40 [ 337.701864][ T9096] ? cfg80211_event_work+0x40/0x40 [ 337.707629][ T9096] ? minstrel_ht_alloc+0x807/0x980 [ 337.712889][ T9096] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 337.719655][ T9096] ieee80211_register_hw+0x2a03/0x3a60 [ 337.726587][ T9096] ? ieee80211_register_hw+0xae1/0x3a60 [ 337.732290][ T9096] ? ieee80211_tasklet_handler+0x20/0x20 [ 337.739161][ T9096] ? rcu_is_watching+0x11/0xa0 [ 337.743993][ T9096] ? hrtimer_init+0x10c/0x220 [ 337.748794][ T9096] mac80211_hwsim_new_radio+0x209d/0x4050 [ 337.754774][ T9096] hwsim_new_radio_nl+0xa7d/0xc50 [ 337.759889][ T9096] genl_rcv_msg+0xd0b/0xfa0 [ 337.764536][ T9096] ? genl_bind+0x370/0x370 [ 337.769189][ T9096] ? __dev_queue_xmit+0x1b64/0x2e50 [ 337.774498][ T9096] ? verify_lock_unused+0x140/0x140 [ 337.779744][ T9096] ? perf_trace_lock+0xe4/0x390 [ 337.784719][ T9096] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 337.791270][ T9096] netlink_rcv_skb+0x1e9/0x430 [ 337.796059][ T9096] ? genl_bind+0x370/0x370 [ 337.800594][ T9096] ? netlink_ack+0xb10/0xb10 [ 337.805229][ T9096] ? down_read+0x1aa/0x2e0 [ 337.809770][ T9096] genl_rcv+0x24/0x40 [ 337.813867][ T9096] netlink_unicast+0x78f/0x940 [ 337.818769][ T9096] netlink_sendmsg+0x8ba/0xbe0 [ 337.823836][ T9096] ? netlink_getsockopt+0x570/0x570 [ 337.829055][ T9096] ? aa_sock_msg_perm+0x94/0x150 [ 337.834015][ T9096] ? apparmor_socket_sendmsg+0x88/0x230 [ 337.840240][ T9096] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 337.845666][ T9096] ? security_socket_sendmsg+0x7c/0xa0 [ 337.851172][ T9096] ? netlink_getsockopt+0x570/0x570 [ 337.856405][ T9096] ____sys_sendmsg+0x5be/0x8f0 [ 337.861209][ T9096] ? __sys_sendmsg_sock+0x30/0x30 [ 337.866377][ T9096] ? import_iovec+0x6f/0xa0 [ 337.871726][ T9096] ___sys_sendmsg+0x236/0x2e0 [ 337.876802][ T9096] ? __sys_sendmsg+0x290/0x290 [ 337.881608][ T9096] ? trace_event_raw_event_lock+0x250/0x250 [ 337.889735][ T9096] ? __might_fault+0xb3/0x110 [ 337.894735][ T9096] __se_sys_sendmsg+0x1b7/0x2a0 [ 337.899626][ T9096] ? __x64_sys_sendmsg+0x80/0x80 [ 337.904578][ T9096] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 337.911358][ T9096] ? lockdep_hardirqs_on+0x94/0x140 [ 337.916956][ T9096] do_syscall_64+0x4c/0xa0 [ 337.921411][ T9096] ? clear_bhb_loop+0x30/0x80 [ 337.926477][ T9096] ? clear_bhb_loop+0x30/0x80 [ 337.931481][ T9096] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 337.937398][ T9096] RIP: 0033:0x7f3c1fe210d9 [ 337.941839][ T9096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.961760][ T9096] RSP: 002b:00007f3c1e079028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.970479][ T9096] RAX: ffffffffffffffda RBX: 00007f3c200a8fa0 RCX: 00007f3c1fe210d9 [ 337.978825][ T9096] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 337.987010][ T9096] RBP: 00007f3c1feb8024 R08: 0000000000000000 R09: 0000000000000000 [ 337.995294][ T9096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.003656][ T9096] R13: 00007f3c200a9038 R14: 00007f3c200a8fa0 R15: 00007ffcb0fab778 [ 338.012301][ T9096] [ 338.302699][ T9103] delete_channel: no stack [ 338.527214][ T9113] delete_channel: no stack [ 338.981493][ T9125] netlink: 'syz.3.1695': attribute type 27 has an invalid length. [ 339.155060][ T9138] netlink: 'syz.0.1698': attribute type 39 has an invalid length. [ 339.732564][ T9145] delete_channel: no stack [ 339.857522][ T9151] delete_channel: no stack [ 340.075508][ T9164] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1710'. [ 340.107374][ T9162] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1709'. [ 340.139645][ T9162] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 340.199210][ T9162] CPU: 0 PID: 9162 Comm: syz.4.1709 Not tainted syzkaller #0 [ 340.207028][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.217690][ T9162] Call Trace: [ 340.221100][ T9162] [ 340.224151][ T9162] dump_stack_lvl+0x188/0x250 [ 340.229066][ T9162] ? show_regs_print_info+0x20/0x20 [ 340.234667][ T9162] ? load_image+0x410/0x410 [ 340.239225][ T9162] sysfs_warn_dup+0x8a/0xa0 [ 340.243939][ T9162] sysfs_do_create_link_sd+0xc0/0x110 [ 340.249779][ T9162] device_add+0x83b/0x1050 [ 340.255168][ T9162] wiphy_register+0x1e74/0x2c40 [ 340.260275][ T9162] ? cfg80211_event_work+0x40/0x40 [ 340.265520][ T9162] ? minstrel_ht_alloc+0x807/0x980 [ 340.270996][ T9162] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 340.277457][ T9162] ieee80211_register_hw+0x2a03/0x3a60 [ 340.283341][ T9162] ? ieee80211_register_hw+0xae1/0x3a60 [ 340.289232][ T9162] ? ieee80211_tasklet_handler+0x20/0x20 [ 340.295203][ T9162] ? rcu_is_watching+0x11/0xa0 [ 340.300234][ T9162] ? hrtimer_init+0x10c/0x220 [ 340.305145][ T9162] mac80211_hwsim_new_radio+0x209d/0x4050 [ 340.310956][ T9162] hwsim_new_radio_nl+0xa7d/0xc50 [ 340.316265][ T9162] genl_rcv_msg+0xd0b/0xfa0 [ 340.320904][ T9162] ? genl_bind+0x370/0x370 [ 340.325383][ T9162] ? verify_lock_unused+0x140/0x140 [ 340.330808][ T9162] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 340.337551][ T9162] ? perf_trace_lock+0xe4/0x390 [ 340.342454][ T9162] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 340.348844][ T9162] netlink_rcv_skb+0x1e9/0x430 [ 340.353745][ T9162] ? genl_bind+0x370/0x370 [ 340.358287][ T9162] ? netlink_ack+0xb10/0xb10 [ 340.363417][ T9162] ? down_read+0x1aa/0x2e0 [ 340.367877][ T9162] genl_rcv+0x24/0x40 [ 340.371904][ T9162] netlink_unicast+0x78f/0x940 [ 340.376737][ T9162] netlink_sendmsg+0x8ba/0xbe0 [ 340.381580][ T9162] ? netlink_getsockopt+0x570/0x570 [ 340.387117][ T9162] ? aa_sock_msg_perm+0x94/0x150 [ 340.392713][ T9162] ? apparmor_socket_sendmsg+0x88/0x230 [ 340.399171][ T9162] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 340.404718][ T9162] ? security_socket_sendmsg+0x7c/0xa0 [ 340.410563][ T9162] ? netlink_getsockopt+0x570/0x570 [ 340.415998][ T9162] ____sys_sendmsg+0x5be/0x8f0 [ 340.421091][ T9162] ? __sys_sendmsg_sock+0x30/0x30 [ 340.426399][ T9162] ? import_iovec+0x6f/0xa0 [ 340.431063][ T9162] ___sys_sendmsg+0x236/0x2e0 [ 340.436144][ T9162] ? __sys_sendmsg+0x290/0x290 [ 340.440987][ T9162] ? __might_fault+0xb3/0x110 [ 340.446122][ T9162] __se_sys_sendmsg+0x1b7/0x2a0 [ 340.451211][ T9162] ? __x64_sys_sendmsg+0x80/0x80 [ 340.456443][ T9162] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 340.462723][ T9162] ? lockdep_hardirqs_on+0x94/0x140 [ 340.468330][ T9162] do_syscall_64+0x4c/0xa0 [ 340.472910][ T9162] ? clear_bhb_loop+0x30/0x80 [ 340.477830][ T9162] ? clear_bhb_loop+0x30/0x80 [ 340.482538][ T9162] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 340.488956][ T9162] RIP: 0033:0x7f4ff8edd0d9 [ 340.493403][ T9162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.513925][ T9162] RSP: 002b:00007f4ff70f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.522467][ T9162] RAX: ffffffffffffffda RBX: 00007f4ff9165180 RCX: 00007f4ff8edd0d9 [ 340.530681][ T9162] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 340.538942][ T9162] RBP: 00007f4ff8f74024 R08: 0000000000000000 R09: 0000000000000000 [ 340.547122][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.555236][ T9162] R13: 00007f4ff9165218 R14: 00007f4ff9165180 R15: 00007ffd1816c268 [ 340.563911][ T9162] [ 340.608488][ T9158] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1708'. [ 340.706892][ T9173] netlink: 'syz.1.1711': attribute type 27 has an invalid length. [ 340.727687][ T9164] netlink: 'syz.3.1710': attribute type 9 has an invalid length. [ 340.756652][ T9164] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1710'. [ 340.872942][ T9170] netlink: 'syz.3.1710': attribute type 9 has an invalid length. [ 340.880898][ T9170] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1710'. [ 341.118337][ T9182] netlink: 206452 bytes leftover after parsing attributes in process `syz.2.1715'. [ 341.158443][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1715'. [ 341.225106][ T9190] delete_channel: no stack [ 341.337408][ T9194] delete_channel: no stack [ 341.402424][ T9199] netlink: 'syz.4.1723': attribute type 27 has an invalid length. [ 341.555003][ T9203] netlink: 'syz.3.1724': attribute type 10 has an invalid length. [ 341.596518][ T9203] netlink: 'syz.3.1724': attribute type 4 has an invalid length. [ 341.689302][ T9203] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1724'. [ 341.807104][ T9203] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 341.888842][ T9206] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 341.902646][ T9206] CPU: 0 PID: 9206 Comm: syz.2.1725 Not tainted syzkaller #0 [ 341.910190][ T9206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.921072][ T9206] Call Trace: [ 341.924476][ T9206] [ 341.927417][ T9206] dump_stack_lvl+0x188/0x250 [ 341.932123][ T9206] ? show_regs_print_info+0x20/0x20 [ 341.937947][ T9206] ? load_image+0x410/0x410 [ 341.942927][ T9206] sysfs_warn_dup+0x8a/0xa0 [ 341.947447][ T9206] sysfs_do_create_link_sd+0xc0/0x110 [ 341.952840][ T9206] device_add+0x83b/0x1050 [ 341.957287][ T9206] wiphy_register+0x1e74/0x2c40 [ 341.962472][ T9206] ? cfg80211_event_work+0x40/0x40 [ 341.968130][ T9206] ? minstrel_ht_alloc+0x807/0x980 [ 341.973558][ T9206] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 341.980040][ T9206] ieee80211_register_hw+0x2a03/0x3a60 [ 341.985700][ T9206] ? ieee80211_register_hw+0xae1/0x3a60 [ 341.992063][ T9206] ? ieee80211_tasklet_handler+0x20/0x20 [ 341.997897][ T9206] ? rcu_is_watching+0x11/0xa0 [ 342.002861][ T9206] ? hrtimer_init+0x10c/0x220 [ 342.007747][ T9206] mac80211_hwsim_new_radio+0x209d/0x4050 [ 342.013536][ T9206] hwsim_new_radio_nl+0xa7d/0xc50 [ 342.018780][ T9206] genl_rcv_msg+0xd0b/0xfa0 [ 342.023324][ T9206] ? genl_bind+0x370/0x370 [ 342.027844][ T9206] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 342.033955][ T9206] ? verify_lock_unused+0x140/0x140 [ 342.039254][ T9206] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 342.045088][ T9206] ? perf_trace_lock+0x301/0x390 [ 342.050334][ T9206] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 342.057469][ T9206] netlink_rcv_skb+0x1e9/0x430 [ 342.062687][ T9206] ? genl_bind+0x370/0x370 [ 342.068128][ T9206] ? netlink_ack+0xb10/0xb10 [ 342.072793][ T9206] ? down_read+0x1aa/0x2e0 [ 342.077350][ T9206] genl_rcv+0x24/0x40 [ 342.081473][ T9206] netlink_unicast+0x78f/0x940 [ 342.086279][ T9206] netlink_sendmsg+0x8ba/0xbe0 [ 342.091083][ T9206] ? netlink_getsockopt+0x570/0x570 [ 342.096558][ T9206] ? aa_sock_msg_perm+0x94/0x150 [ 342.101555][ T9206] ? apparmor_socket_sendmsg+0x88/0x230 [ 342.107378][ T9206] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 342.112676][ T9206] ? security_socket_sendmsg+0x7c/0xa0 [ 342.118323][ T9206] ? netlink_getsockopt+0x570/0x570 [ 342.123641][ T9206] ____sys_sendmsg+0x5be/0x8f0 [ 342.128884][ T9206] ? __sys_sendmsg_sock+0x30/0x30 [ 342.135471][ T9206] ? import_iovec+0x6f/0xa0 [ 342.140894][ T9206] ___sys_sendmsg+0x236/0x2e0 [ 342.146163][ T9206] ? __sys_sendmsg+0x290/0x290 [ 342.151067][ T9206] ? trace_event_raw_event_lock+0x250/0x250 [ 342.157421][ T9206] ? __might_fault+0xb3/0x110 [ 342.162155][ T9206] __se_sys_sendmsg+0x1b7/0x2a0 [ 342.167109][ T9206] ? __x64_sys_sendmsg+0x80/0x80 [ 342.173594][ T9206] ? syscall_enter_from_user_mode+0x2a/0x70 [ 342.179597][ T9206] do_syscall_64+0x4c/0xa0 [ 342.184109][ T9206] ? clear_bhb_loop+0x30/0x80 [ 342.188903][ T9206] ? clear_bhb_loop+0x30/0x80 [ 342.193873][ T9206] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 342.199967][ T9206] RIP: 0033:0x7f963353b0d9 [ 342.204519][ T9206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.224928][ T9206] RSP: 002b:00007f9631793028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.233712][ T9206] RAX: ffffffffffffffda RBX: 00007f96337c2fa0 RCX: 00007f963353b0d9 [ 342.241783][ T9206] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 342.250371][ T9206] RBP: 00007f96335d2024 R08: 0000000000000000 R09: 0000000000000000 [ 342.258796][ T9206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.267297][ T9206] R13: 00007f96337c3038 R14: 00007f96337c2fa0 R15: 00007ffef1e65988 [ 342.275671][ T9206] [ 343.174355][ T9225] delete_channel: no stack [ 343.396904][ T9232] delete_channel: no stack [ 343.814244][ T9247] netlink: 'syz.3.1738': attribute type 39 has an invalid length. [ 344.021326][ T9248] __nla_validate_parse: 2 callbacks suppressed [ 344.021367][ T9248] netlink: 206452 bytes leftover after parsing attributes in process `syz.1.1740'. [ 344.053911][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'. [ 344.501330][ T9261] delete_channel: no stack [ 344.606996][ T9264] delete_channel: no stack [ 344.711242][ T9271] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1749'. [ 344.851497][ T9271] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 344.881120][ T9271] CPU: 1 PID: 9271 Comm: syz.3.1749 Not tainted syzkaller #0 [ 344.890660][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.908956][ T9271] Call Trace: [ 344.913566][ T9271] [ 344.918242][ T9271] dump_stack_lvl+0x188/0x250 [ 344.924554][ T9271] ? show_regs_print_info+0x20/0x20 [ 344.934350][ T9271] ? load_image+0x410/0x410 [ 344.939930][ T9271] sysfs_warn_dup+0x8a/0xa0 [ 344.945009][ T9271] sysfs_do_create_link_sd+0xc0/0x110 [ 344.951496][ T9271] device_add+0x83b/0x1050 [ 344.956930][ T9271] wiphy_register+0x1e74/0x2c40 [ 344.962153][ T9271] ? cfg80211_event_work+0x40/0x40 [ 344.968356][ T9271] ? minstrel_ht_alloc+0x807/0x980 [ 344.974784][ T9271] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 344.982508][ T9271] ieee80211_register_hw+0x2a03/0x3a60 [ 344.990117][ T9271] ? ieee80211_register_hw+0xae1/0x3a60 [ 344.998915][ T9271] ? ieee80211_tasklet_handler+0x20/0x20 [ 345.006206][ T9271] ? rcu_is_watching+0x11/0xa0 [ 345.012107][ T9271] ? hrtimer_init+0x10c/0x220 [ 345.018964][ T9271] mac80211_hwsim_new_radio+0x209d/0x4050 [ 345.026591][ T9271] hwsim_new_radio_nl+0xa7d/0xc50 [ 345.032657][ T9271] genl_rcv_msg+0xd0b/0xfa0 [ 345.037976][ T9271] ? genl_bind+0x370/0x370 [ 345.042896][ T9271] ? __dev_queue_xmit+0x1b64/0x2e50 [ 345.049034][ T9271] ? verify_lock_unused+0x140/0x140 [ 345.054958][ T9271] ? dev_queue_xmit+0x20/0x20 [ 345.060042][ T9271] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 345.066592][ T9271] netlink_rcv_skb+0x1e9/0x430 [ 345.072542][ T9271] ? genl_bind+0x370/0x370 [ 345.077046][ T9271] ? netlink_ack+0xb10/0xb10 [ 345.082283][ T9271] ? down_read+0x1aa/0x2e0 [ 345.086712][ T9271] genl_rcv+0x24/0x40 [ 345.090705][ T9271] netlink_unicast+0x78f/0x940 [ 345.095662][ T9271] netlink_sendmsg+0x8ba/0xbe0 [ 345.100854][ T9271] ? netlink_getsockopt+0x570/0x570 [ 345.107463][ T9271] ? aa_sock_msg_perm+0x94/0x150 [ 345.113131][ T9271] ? apparmor_socket_sendmsg+0x88/0x230 [ 345.118878][ T9271] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 345.124276][ T9271] ? security_socket_sendmsg+0x7c/0xa0 [ 345.130525][ T9271] ? netlink_getsockopt+0x570/0x570 [ 345.136930][ T9271] ____sys_sendmsg+0x5be/0x8f0 [ 345.141739][ T9271] ? __sys_sendmsg_sock+0x30/0x30 [ 345.147414][ T9271] ? import_iovec+0x6f/0xa0 [ 345.152067][ T9271] ___sys_sendmsg+0x236/0x2e0 [ 345.157129][ T9271] ? __sys_sendmsg+0x290/0x290 [ 345.162124][ T9271] __se_sys_sendmsg+0x1b7/0x2a0 [ 345.167258][ T9271] ? __x64_sys_sendmsg+0x80/0x80 [ 345.173059][ T9271] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 345.179340][ T9271] ? lockdep_hardirqs_on+0x94/0x140 [ 345.184816][ T9271] do_syscall_64+0x4c/0xa0 [ 345.189507][ T9271] ? clear_bhb_loop+0x30/0x80 [ 345.194680][ T9271] ? clear_bhb_loop+0x30/0x80 [ 345.199374][ T9271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.205364][ T9271] RIP: 0033:0x7ff06a22b0d9 [ 345.209885][ T9271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.230884][ T9271] RSP: 002b:00007ff068462028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.239312][ T9271] RAX: ffffffffffffffda RBX: 00007ff06a4b3090 RCX: 00007ff06a22b0d9 [ 345.247514][ T9271] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 345.255680][ T9271] RBP: 00007ff06a2c2024 R08: 0000000000000000 R09: 0000000000000000 [ 345.263753][ T9271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.271765][ T9271] R13: 00007ff06a4b3128 R14: 00007ff06a4b3090 R15: 00007ffeee287458 [ 345.280821][ T9271] [ 345.715952][ T9281] netlink: 206452 bytes leftover after parsing attributes in process `syz.4.1753'. [ 345.799304][ T9285] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1752'. [ 345.838489][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1753'. [ 345.877113][ T9286] netlink: 'syz.1.1754': attribute type 39 has an invalid length. [ 346.146093][ T9282] delete_channel: no stack [ 346.537335][ T9304] delete_channel: no stack [ 347.025019][ T9318] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1764'. [ 347.120331][ T9318] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 347.199953][ T9318] CPU: 0 PID: 9318 Comm: syz.0.1764 Not tainted syzkaller #0 [ 347.208431][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.218702][ T9318] Call Trace: [ 347.222093][ T9318] [ 347.225327][ T9318] dump_stack_lvl+0x188/0x250 [ 347.230139][ T9318] ? show_regs_print_info+0x20/0x20 [ 347.235807][ T9318] ? load_image+0x410/0x410 [ 347.240907][ T9318] sysfs_warn_dup+0x8a/0xa0 [ 347.245598][ T9318] sysfs_do_create_link_sd+0xc0/0x110 [ 347.251049][ T9318] device_add+0x83b/0x1050 [ 347.255617][ T9318] wiphy_register+0x1e74/0x2c40 [ 347.260637][ T9318] ? cfg80211_event_work+0x40/0x40 [ 347.265792][ T9318] ? minstrel_ht_alloc+0x807/0x980 [ 347.271096][ T9318] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 347.277408][ T9318] ieee80211_register_hw+0x2a03/0x3a60 [ 347.283111][ T9318] ? ieee80211_register_hw+0xae1/0x3a60 [ 347.288812][ T9318] ? ieee80211_tasklet_handler+0x20/0x20 [ 347.294512][ T9318] ? rcu_is_watching+0x11/0xa0 [ 347.299361][ T9318] ? hrtimer_init+0x10c/0x220 [ 347.304515][ T9318] mac80211_hwsim_new_radio+0x209d/0x4050 [ 347.310432][ T9318] hwsim_new_radio_nl+0xa7d/0xc50 [ 347.315631][ T9318] genl_rcv_msg+0xd0b/0xfa0 [ 347.320207][ T9318] ? genl_bind+0x370/0x370 [ 347.324787][ T9318] ? __dev_queue_xmit+0x1b64/0x2e50 [ 347.330150][ T9318] ? verify_lock_unused+0x140/0x140 [ 347.335393][ T9318] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 347.341334][ T9318] ? perf_trace_lock+0x301/0x390 [ 347.346325][ T9318] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 347.352750][ T9318] netlink_rcv_skb+0x1e9/0x430 [ 347.357755][ T9318] ? genl_bind+0x370/0x370 [ 347.362496][ T9318] ? netlink_ack+0xb10/0xb10 [ 347.367162][ T9318] ? down_read+0x1aa/0x2e0 [ 347.371748][ T9318] genl_rcv+0x24/0x40 [ 347.375783][ T9318] netlink_unicast+0x78f/0x940 [ 347.380629][ T9318] netlink_sendmsg+0x8ba/0xbe0 [ 347.385654][ T9318] ? netlink_getsockopt+0x570/0x570 [ 347.391162][ T9318] ? aa_sock_msg_perm+0x94/0x150 [ 347.398684][ T9318] ? apparmor_socket_sendmsg+0x88/0x230 [ 347.404276][ T9318] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 347.409968][ T9318] ? security_socket_sendmsg+0x7c/0xa0 [ 347.415656][ T9318] ? netlink_getsockopt+0x570/0x570 [ 347.420925][ T9318] ____sys_sendmsg+0x5be/0x8f0 [ 347.425840][ T9318] ? __sys_sendmsg_sock+0x30/0x30 [ 347.430923][ T9318] ? import_iovec+0x6f/0xa0 [ 347.436625][ T9318] ___sys_sendmsg+0x236/0x2e0 [ 347.441574][ T9318] ? __sys_sendmsg+0x290/0x290 [ 347.446584][ T9318] ? trace_event_raw_event_lock+0x250/0x250 [ 347.452502][ T9318] ? __might_fault+0xb3/0x110 [ 347.457467][ T9318] __se_sys_sendmsg+0x1b7/0x2a0 [ 347.462533][ T9318] ? __x64_sys_sendmsg+0x80/0x80 [ 347.467528][ T9318] ? lockdep_hardirqs_on+0x94/0x140 [ 347.473294][ T9318] do_syscall_64+0x4c/0xa0 [ 347.477829][ T9318] ? clear_bhb_loop+0x30/0x80 [ 347.483586][ T9318] ? clear_bhb_loop+0x30/0x80 [ 347.488505][ T9318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.494473][ T9318] RIP: 0033:0x7f993a22e0d9 [ 347.499124][ T9318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.520823][ T9318] RSP: 002b:00007f9938486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.530778][ T9318] RAX: ffffffffffffffda RBX: 00007f993a4b5fa0 RCX: 00007f993a22e0d9 [ 347.539395][ T9318] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 347.547848][ T9318] RBP: 00007f993a2c5024 R08: 0000000000000000 R09: 0000000000000000 [ 347.555879][ T9318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.564403][ T9318] R13: 00007f993a4b6038 R14: 00007f993a4b5fa0 R15: 00007ffcfb476128 [ 347.572949][ T9318] [ 348.404205][ T9340] netlink: 'syz.2.1769': attribute type 39 has an invalid length. [ 348.430544][ T9334] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1770'. [ 349.216960][ T9357] delete_channel: no stack [ 349.421673][ T9354] delete_channel: no stack [ 349.469367][ T9366] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1783'. [ 349.702157][ T9366] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 349.713078][ T9366] CPU: 0 PID: 9366 Comm: syz.1.1783 Not tainted syzkaller #0 [ 349.720535][ T9366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.730711][ T9366] Call Trace: [ 349.734530][ T9366] [ 349.737494][ T9366] dump_stack_lvl+0x188/0x250 [ 349.742445][ T9366] ? show_regs_print_info+0x20/0x20 [ 349.748052][ T9366] ? load_image+0x410/0x410 [ 349.752821][ T9366] sysfs_warn_dup+0x8a/0xa0 [ 349.757529][ T9366] sysfs_do_create_link_sd+0xc0/0x110 [ 349.763635][ T9366] device_add+0x83b/0x1050 [ 349.768232][ T9366] wiphy_register+0x1e74/0x2c40 [ 349.773748][ T9366] ? cfg80211_event_work+0x40/0x40 [ 349.779007][ T9366] ? minstrel_ht_alloc+0x807/0x980 [ 349.784453][ T9366] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 349.790640][ T9366] ieee80211_register_hw+0x2a03/0x3a60 [ 349.796375][ T9366] ? ieee80211_register_hw+0xae1/0x3a60 [ 349.802093][ T9366] ? ieee80211_tasklet_handler+0x20/0x20 [ 349.807783][ T9366] ? rcu_is_watching+0x11/0xa0 [ 349.812714][ T9366] ? hrtimer_init+0x10c/0x220 [ 349.817496][ T9366] mac80211_hwsim_new_radio+0x209d/0x4050 [ 349.823443][ T9366] hwsim_new_radio_nl+0xa7d/0xc50 [ 349.828663][ T9366] genl_rcv_msg+0xd0b/0xfa0 [ 349.833540][ T9366] ? genl_bind+0x370/0x370 [ 349.838818][ T9366] ? verify_lock_unused+0x140/0x140 [ 349.844291][ T9366] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 349.850791][ T9366] ? perf_trace_lock+0x301/0x390 [ 349.855869][ T9366] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 349.862289][ T9366] netlink_rcv_skb+0x1e9/0x430 [ 349.867180][ T9366] ? genl_bind+0x370/0x370 [ 349.871907][ T9366] ? netlink_ack+0xb10/0xb10 [ 349.876822][ T9366] ? down_read+0x1aa/0x2e0 [ 349.881367][ T9366] genl_rcv+0x24/0x40 [ 349.885552][ T9366] netlink_unicast+0x78f/0x940 [ 349.890481][ T9366] netlink_sendmsg+0x8ba/0xbe0 [ 349.895487][ T9366] ? netlink_getsockopt+0x570/0x570 [ 349.900713][ T9366] ? aa_sock_msg_perm+0x94/0x150 [ 349.905735][ T9366] ? apparmor_socket_sendmsg+0x88/0x230 [ 349.911315][ T9366] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 349.916690][ T9366] ? security_socket_sendmsg+0x7c/0xa0 [ 349.922592][ T9366] ? netlink_getsockopt+0x570/0x570 [ 349.928035][ T9366] ____sys_sendmsg+0x5be/0x8f0 [ 349.933060][ T9366] ? __sys_sendmsg_sock+0x30/0x30 [ 349.938472][ T9366] ? import_iovec+0x6f/0xa0 [ 349.943298][ T9366] ___sys_sendmsg+0x236/0x2e0 [ 349.948043][ T9366] ? __sys_sendmsg+0x290/0x290 [ 349.952908][ T9366] ? trace_event_raw_event_lock+0x250/0x250 [ 349.960255][ T9366] ? __might_fault+0xb3/0x110 [ 349.965350][ T9366] __se_sys_sendmsg+0x1b7/0x2a0 [ 349.970614][ T9366] ? __x64_sys_sendmsg+0x80/0x80 [ 349.975728][ T9366] ? syscall_enter_from_user_mode+0x2a/0x70 [ 349.982015][ T9366] do_syscall_64+0x4c/0xa0 [ 349.986574][ T9366] ? clear_bhb_loop+0x30/0x80 [ 349.991501][ T9366] ? clear_bhb_loop+0x30/0x80 [ 349.996318][ T9366] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 350.002609][ T9366] RIP: 0033:0x7f3c1fe210d9 [ 350.007078][ T9366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.027782][ T9366] RSP: 002b:00007f3c1e079028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.036320][ T9366] RAX: ffffffffffffffda RBX: 00007f3c200a8fa0 RCX: 00007f3c1fe210d9 [ 350.044321][ T9366] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 350.052425][ T9366] RBP: 00007f3c1feb8024 R08: 0000000000000000 R09: 0000000000000000 [ 350.060784][ T9366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.069159][ T9366] R13: 00007f3c200a9038 R14: 00007f3c200a8fa0 R15: 00007ffcb0fab778 [ 350.077547][ T9366] [ 350.727015][ T9385] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1788'. [ 351.295318][ T9394] delete_channel: no stack [ 351.452932][ T9398] delete_channel: no stack [ 352.025324][ T9401] delete_channel: no stack [ 352.263031][ T9419] netlink: 206452 bytes leftover after parsing attributes in process `syz.3.1804'. [ 352.274413][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1804'. [ 353.020209][ T9421] delete_channel: no stack [ 353.914712][ T9450] delete_channel: no stack [ 354.279751][ T9464] netlink: 'syz.1.1820': attribute type 21 has an invalid length. [ 354.532536][ T9468] netlink: 206452 bytes leftover after parsing attributes in process `syz.0.1819'. [ 354.579473][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1819'. [ 354.898940][ T9471] delete_channel: no stack [ 355.932278][ T9509] netlink: 'syz.3.1836': attribute type 21 has an invalid length. [ 356.580860][ T9522] netlink: 206452 bytes leftover after parsing attributes in process `syz.1.1839'. [ 356.617624][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1839'. [ 356.619608][ T9517] delete_channel: no stack [ 356.631703][ T9515] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1840'. [ 356.688007][ T9515] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 356.698566][ T9515] CPU: 0 PID: 9515 Comm: syz.4.1840 Not tainted syzkaller #0 [ 356.706440][ T9515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.717430][ T9515] Call Trace: [ 356.721236][ T9515] [ 356.724827][ T9515] dump_stack_lvl+0x188/0x250 [ 356.730132][ T9515] ? show_regs_print_info+0x20/0x20 [ 356.737164][ T9515] ? load_image+0x410/0x410 [ 356.742542][ T9515] sysfs_warn_dup+0x8a/0xa0 [ 356.749185][ T9515] sysfs_do_create_link_sd+0xc0/0x110 [ 356.755443][ T9515] device_add+0x83b/0x1050 [ 356.761752][ T9515] wiphy_register+0x1e74/0x2c40 [ 356.767598][ T9515] ? cfg80211_event_work+0x40/0x40 [ 356.772769][ T9515] ? minstrel_ht_alloc+0x807/0x980 [ 356.778266][ T9515] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 356.785407][ T9515] ieee80211_register_hw+0x2a03/0x3a60 [ 356.793138][ T9515] ? ieee80211_register_hw+0xae1/0x3a60 [ 356.801223][ T9515] ? ieee80211_tasklet_handler+0x20/0x20 [ 356.808178][ T9515] ? rcu_is_watching+0x11/0xa0 [ 356.814082][ T9515] ? hrtimer_init+0x10c/0x220 [ 356.819579][ T9515] mac80211_hwsim_new_radio+0x209d/0x4050 [ 356.827320][ T9515] hwsim_new_radio_nl+0xa7d/0xc50 [ 356.834718][ T9515] genl_rcv_msg+0xd0b/0xfa0 [ 356.840910][ T9515] ? genl_bind+0x370/0x370 [ 356.845675][ T9515] ? __dev_queue_xmit+0x1b64/0x2e50 [ 356.851611][ T9515] ? verify_lock_unused+0x140/0x140 [ 356.859975][ T9515] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 356.866917][ T9515] ? perf_trace_lock+0x301/0x390 [ 356.873020][ T9515] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 356.880643][ T9515] netlink_rcv_skb+0x1e9/0x430 [ 356.887646][ T9515] ? genl_bind+0x370/0x370 [ 356.892920][ T9515] ? netlink_ack+0xb10/0xb10 [ 356.900326][ T9515] ? down_read+0x1aa/0x2e0 [ 356.907836][ T9515] genl_rcv+0x24/0x40 [ 356.912421][ T9515] netlink_unicast+0x78f/0x940 [ 356.917853][ T9515] netlink_sendmsg+0x8ba/0xbe0 [ 356.923566][ T9515] ? lockdep_hardirqs_on+0x94/0x140 [ 356.929786][ T9515] ? netlink_getsockopt+0x570/0x570 [ 356.935913][ T9515] ? aa_sock_msg_perm+0x94/0x150 [ 356.941312][ T9515] ? apparmor_socket_sendmsg+0x88/0x230 [ 356.947947][ T9515] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 356.953529][ T9515] ? security_socket_sendmsg+0x7c/0xa0 [ 356.959779][ T9515] ? netlink_getsockopt+0x570/0x570 [ 356.966114][ T9515] ____sys_sendmsg+0x5be/0x8f0 [ 356.973898][ T9515] ? __sys_sendmsg_sock+0x30/0x30 [ 356.980461][ T9515] ? import_iovec+0x6f/0xa0 [ 356.986502][ T9515] ___sys_sendmsg+0x236/0x2e0 [ 356.993138][ T9515] ? __sys_sendmsg+0x290/0x290 [ 356.999943][ T9515] __se_sys_sendmsg+0x1b7/0x2a0 [ 357.006387][ T9515] ? __x64_sys_sendmsg+0x80/0x80 [ 357.014358][ T9515] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 357.021990][ T9515] ? lockdep_hardirqs_on+0x94/0x140 [ 357.028151][ T9515] do_syscall_64+0x4c/0xa0 [ 357.035407][ T9515] ? clear_bhb_loop+0x30/0x80 [ 357.040452][ T9515] ? clear_bhb_loop+0x30/0x80 [ 357.045647][ T9515] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 357.053031][ T9515] RIP: 0033:0x7f4ff8edd0d9 [ 357.057773][ T9515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.079923][ T9515] RSP: 002b:00007f4ff7135028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.088916][ T9515] RAX: ffffffffffffffda RBX: 00007f4ff9164fa0 RCX: 00007f4ff8edd0d9 [ 357.097794][ T9515] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 357.106903][ T9515] RBP: 00007f4ff8f74024 R08: 0000000000000000 R09: 0000000000000000 [ 357.115747][ T9515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.124649][ T9515] R13: 00007f4ff9165038 R14: 00007f4ff9164fa0 R15: 00007ffd1816c268 [ 357.137630][ T9515] [ 358.351117][ T9554] delete_channel: no stack [ 358.698694][ T9561] delete_channel: no stack [ 359.363706][ T9593] netlink: 'syz.0.1867': attribute type 27 has an invalid length. [ 359.524994][ T9588] delete_channel: no stack [ 360.326892][ T9607] delete_channel: no stack [ 360.879961][ T9610] delete_channel: no stack [ 361.186985][ T9632] netlink: 206452 bytes leftover after parsing attributes in process `syz.2.1880'. [ 361.196342][ T9622] delete_channel: no stack [ 361.225666][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1880'. [ 361.406587][ T9641] netlink: 'syz.2.1884': attribute type 27 has an invalid length. [ 362.129310][ T9645] delete_channel: no stack [ 362.558506][ T9654] delete_channel: no stack [ 363.889141][ T9681] delete_channel: no stack [ 364.672497][ T9698] delete_channel: no stack [ 364.934587][ T9702] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 365.863659][ T9719] delete_channel: no stack [ 366.940654][ T9735] delete_channel: no stack [ 367.098367][ T4210] wlan1: Trigger new scan to find an IBSS to join [ 367.354379][ T9757] delete_channel: no stack [ 367.531888][ T9766] netlink: 'syz.0.1928': attribute type 21 has an invalid length. [ 368.494115][ T9784] delete_channel: no stack [ 368.537026][ T9792] delete_channel: no stack [ 368.729402][ T9799] netlink: 'syz.4.1942': attribute type 27 has an invalid length. [ 371.014328][ T9] wlan1: Trigger new scan to find an IBSS to join [ 372.164839][ T9] wlan1: Creating new IBSS network, BSSID 76:4c:da:27:27:17 [ 372.387402][ T9828] netlink: 'syz.0.1956': attribute type 27 has an invalid length. [ 372.515095][ T9821] delete_channel: no stack [ 372.697165][ T9830] device syzkaller0 entered promiscuous mode [ 373.372384][ T9857] netlink: 'syz.1.1968': attribute type 27 has an invalid length. [ 373.771550][ T9866] delete_channel: no stack [ 373.844119][ T9869] device syzkaller0 entered promiscuous mode [ 374.490011][ T9877] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 374.541077][ T9882] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.1976'. [ 374.560971][ T9882] netlink: 'syz.3.1976': attribute type 1 has an invalid length. [ 374.584272][ T9882] netlink: 'syz.3.1976': attribute type 2 has an invalid length. [ 374.599982][ T9882] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1976'. [ 374.714504][ T9892] netlink: 'syz.1.1981': attribute type 27 has an invalid length. [ 374.898667][ T9899] delete_channel: no stack [ 375.807032][ T9930] netlink: 'syz.1.1995': attribute type 27 has an invalid length. [ 375.935328][ T9937] delete_channel: no stack [ 375.971872][ T9934] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 376.902088][ T9971] netlink: 'syz.4.2010': attribute type 27 has an invalid length. [ 377.013760][ T4376] wlan1: Trigger new scan to find an IBSS to join [ 377.243835][ T9974] delete_channel: no stack [ 377.620023][ T9982] delete_channel: no stack [ 377.634152][ T9988] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.2015'. [ 377.683534][ T9988] netlink: 'syz.2.2015': attribute type 1 has an invalid length. [ 377.707896][ T9988] netlink: 'syz.2.2015': attribute type 2 has an invalid length. [ 377.753144][ T9988] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2015'. [ 378.055133][ T4376] wlan1: Trigger new scan to find an IBSS to join [ 378.481941][ T9991] delete_channel: no stack [ 378.766620][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.773113][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.092494][ T4210] wlan1: Trigger new scan to find an IBSS to join [ 381.357937][T10013] netlink: 'syz.2.2025': attribute type 27 has an invalid length. [ 381.647307][T10020] delete_channel: no stack [ 382.053532][ T9] wlan1: Trigger new scan to find an IBSS to join [ 382.859984][T10037] delete_channel: no stack [ 383.090556][ T9] wlan1: Creating new IBSS network, BSSID 1e:76:11:0c:b3:77 [ 383.154716][T10033] delete_channel: no stack [ 383.227977][T10047] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.2040'. [ 383.313098][T10047] netlink: 'syz.0.2040': attribute type 1 has an invalid length. [ 383.389945][T10047] netlink: 'syz.0.2040': attribute type 2 has an invalid length. [ 383.440250][T10047] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2040'. [ 383.747648][T10055] netlink: 'syz.2.2042': attribute type 27 has an invalid length. [ 383.928033][T10059] netlink: 'syz.0.2053': attribute type 27 has an invalid length. [ 384.063427][T10058] delete_channel: no stack [ 385.009543][T10082] delete_channel: no stack [ 385.085231][ T9] wlan1: Trigger new scan to find an IBSS to join [ 385.196063][ T4210] wlan1: Creating new IBSS network, BSSID 02:bc:44:95:db:36 [ 385.307502][T10089] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.2054'. [ 385.400896][T10089] netlink: 'syz.4.2054': attribute type 1 has an invalid length. [ 385.430717][T10089] netlink: 'syz.4.2054': attribute type 2 has an invalid length. [ 385.453060][T10089] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2054'. [ 385.829102][T10099] netlink: 'syz.4.2058': attribute type 27 has an invalid length. [ 386.116163][T10100] delete_channel: no stack [ 387.014860][T10116] delete_channel: no stack [ 388.702611][T10138] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.2069'. [ 388.801866][T10132] delete_channel: no stack [ 388.827282][T10138] netlink: 'syz.1.2069': attribute type 1 has an invalid length. [ 388.842879][T10138] netlink: 'syz.1.2069': attribute type 2 has an invalid length. [ 388.921412][T10138] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2069'. [ 389.219408][T10140] delete_channel: no stack [ 389.992386][T10162] delete_channel: no stack [ 390.980411][T10173] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.2088'. [ 391.001076][T10173] netlink: 'syz.1.2088': attribute type 1 has an invalid length. [ 391.038862][T10173] netlink: 'syz.1.2088': attribute type 2 has an invalid length. [ 391.087483][T10173] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2088'. [ 391.118900][T10174] delete_channel: no stack [ 392.539732][T10196] delete_channel: no stack [ 393.369179][T10211] delete_channel: no stack [ 394.335827][T10237] delete_channel: no stack [ 395.074859][T10246] delete_channel: no stack [ 395.540576][T10263] netlink: 'syz.3.2115': attribute type 17 has an invalid length. [ 395.694646][T10259] delete_channel: no stack [ 396.241937][T10269] netlink: 'syz.0.2117': attribute type 27 has an invalid length. [ 397.134622][T10286] delete_channel: no stack [ 397.648232][T10303] delete_channel: no stack [ 398.004918][T10315] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2135'. [ 398.022680][T10315] tc_dump_action: action bad kind [ 399.669640][T10355] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2149'. [ 399.700000][T10355] tc_dump_action: action bad kind [ 400.204143][T10374] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2155'. [ 401.418788][T10394] device syzkaller0 entered promiscuous mode [ 401.497256][T10398] netlink: 'syz.0.2164': attribute type 10 has an invalid length. [ 401.509261][T10398] bridge0: port 3(batadv0) entered disabled state [ 401.517898][T10398] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.526246][T10398] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.967279][T10410] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2166'. [ 402.002142][T10410] tc_dump_action: action bad kind [ 402.930245][T10425] device syzkaller0 entered promiscuous mode [ 404.324990][T10459] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2186'. [ 405.283507][T10470] device syzkaller0 entered promiscuous mode [ 405.958681][T10489] delete_channel: no stack [ 406.120266][T10493] netlink: 'syz.0.2195': attribute type 17 has an invalid length. [ 407.296673][T10507] netlink: 'syz.4.2202': attribute type 10 has an invalid length. [ 407.344427][T10504] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2200'. [ 408.624463][T10525] delete_channel: no stack [ 408.804972][T10522] device syzkaller0 entered promiscuous mode [ 411.083598][ T144] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 411.102270][ T144] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 411.850614][ T4210] ------------[ cut here ]------------ [ 411.862438][ T4210] WARNING: CPU: 0 PID: 4210 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 411.875834][ T4210] Modules linked in: [ 411.880883][ T4210] CPU: 0 PID: 4210 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 411.908274][T10560] netlink: 'syz.2.2216': attribute type 17 has an invalid length. [ 411.918680][ T4210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 411.941837][ T4210] Workqueue: cfg80211 cfg80211_event_work [ 411.956941][ T4210] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 411.980739][ T4210] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 bd 3f f8 0f 0b eb bf e8 07 bd 3f f8 <0f> 0b eb b6 e8 fe bc 3f f8 0f 0b e9 82 fd ff ff e8 f2 bc 3f f8 0f [ 412.016184][ T4210] RSP: 0018:ffffc9000304fac0 EFLAGS: 00010293 [ 412.036935][ T4210] RAX: ffffffff89393fa9 RBX: 1ffff92000609f5c RCX: ffff888078f43b80 [ 412.058941][ T4210] RDX: 0000000000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4200 [ 412.085995][ T4210] RBP: ffffc9000304fb70 R08: ffffffff901ee12f R09: 1ffffffff203dc25 [ 412.098314][ T4210] R10: dffffc0000000000 R11: fffffbfff203dc26 R12: ffff88807e5335f0 [ 412.107412][ T4210] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88805f680c90 [ 412.135375][ T4210] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 412.145170][ T4210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.151826][ T4210] CR2: 00007ff06a47c2f8 CR3: 0000000063904000 CR4: 00000000003506f0 [ 412.160924][ T4210] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 412.169560][ T4210] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 412.177903][ T4210] Call Trace: [ 412.181284][ T4210] [ 412.184393][ T4210] ? trace_rdev_return_void+0x1c0/0x1c0 [ 412.190003][ T4210] cfg80211_process_wdev_events+0x373/0x490 [ 412.196166][ T4210] cfg80211_process_rdev_events+0x9d/0x110 [ 412.202062][ T4210] cfg80211_event_work+0x2b/0x40 [ 412.212672][ T4210] process_one_work+0x867/0xff0 [ 412.218361][ T4210] ? worker_detach_from_pool+0x240/0x240 [ 412.225196][ T4210] ? lockdep_hardirqs_off+0x70/0x100 [ 412.230528][ T4210] ? _raw_spin_lock_irq+0xb7/0xf0 [ 412.235622][ T4210] ? _raw_spin_lock_irqsave+0x100/0x100 [ 412.241197][ T4210] ? wq_worker_running+0x97/0x170 [ 412.246306][ T4210] worker_thread+0xad7/0x12a0 [ 412.251013][ T4210] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 412.257113][ T4210] kthread+0x42e/0x520 [ 412.261624][ T4210] ? rcu_lock_release+0x20/0x20 [ 412.266741][ T4210] ? kthread_blkcg+0xd0/0xd0 [ 412.271393][ T4210] ret_from_fork+0x1f/0x30 [ 412.276145][ T4210] [ 412.279379][ T4210] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 412.287102][ T4210] CPU: 0 PID: 4210 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 412.294772][ T4210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.305800][ T4210] Workqueue: cfg80211 cfg80211_event_work [ 412.311618][ T4210] Call Trace: [ 412.314984][ T4210] [ 412.318007][ T4210] dump_stack_lvl+0x188/0x250 [ 412.323177][ T4210] ? show_regs_print_info+0x20/0x20 [ 412.328601][ T4210] ? load_image+0x410/0x410 [ 412.333139][ T4210] panic+0x2f8/0x850 [ 412.337086][ T4210] ? bpf_jit_dump+0xd0/0xd0 [ 412.341624][ T4210] ? ret_from_fork+0x1f/0x30 [ 412.346228][ T4210] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 412.352001][ T4210] __warn+0x248/0x2b0 [ 412.356028][ T4210] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 412.361872][ T4210] report_bug+0x1b9/0x2e0 [ 412.366271][ T4210] handle_bug+0x3a/0x70 [ 412.370614][ T4210] exc_invalid_op+0x16/0x40 [ 412.375229][ T4210] asm_exc_invalid_op+0x16/0x20 [ 412.380074][ T4210] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 412.386326][ T4210] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 bd 3f f8 0f 0b eb bf e8 07 bd 3f f8 <0f> 0b eb b6 e8 fe bc 3f f8 0f 0b e9 82 fd ff ff e8 f2 bc 3f f8 0f [ 412.406318][ T4210] RSP: 0018:ffffc9000304fac0 EFLAGS: 00010293 [ 412.412838][ T4210] RAX: ffffffff89393fa9 RBX: 1ffff92000609f5c RCX: ffff888078f43b80 [ 412.421988][ T4210] RDX: 0000000000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4200 [ 412.431633][ T4210] RBP: ffffc9000304fb70 R08: ffffffff901ee12f R09: 1ffffffff203dc25 [ 412.440735][ T4210] R10: dffffc0000000000 R11: fffffbfff203dc26 R12: ffff88807e5335f0 [ 412.448743][ T4210] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88805f680c90 [ 412.457159][ T4210] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 412.463039][ T4210] ? trace_rdev_return_void+0x1c0/0x1c0 [ 412.468818][ T4210] cfg80211_process_wdev_events+0x373/0x490 [ 412.474878][ T4210] cfg80211_process_rdev_events+0x9d/0x110 [ 412.480888][ T4210] cfg80211_event_work+0x2b/0x40 [ 412.485859][ T4210] process_one_work+0x867/0xff0 [ 412.491016][ T4210] ? worker_detach_from_pool+0x240/0x240 [ 412.496660][ T4210] ? lockdep_hardirqs_off+0x70/0x100 [ 412.502046][ T4210] ? _raw_spin_lock_irq+0xb7/0xf0 [ 412.507171][ T4210] ? _raw_spin_lock_irqsave+0x100/0x100 [ 412.512727][ T4210] ? wq_worker_running+0x97/0x170 [ 412.517933][ T4210] worker_thread+0xad7/0x12a0 [ 412.522798][ T4210] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 412.529201][ T4210] kthread+0x42e/0x520 [ 412.533477][ T4210] ? rcu_lock_release+0x20/0x20 [ 412.538526][ T4210] ? kthread_blkcg+0xd0/0xd0 [ 412.543270][ T4210] ret_from_fork+0x1f/0x30 [ 412.547818][ T4210] [ 412.550961][ T4210] Kernel Offset: disabled [ 412.555672][ T4210] Rebooting in 86400 seconds..