last executing test programs: 2.883129428s ago: executing program 4 (id=44700): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x4000) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f0000"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r3) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 2.140312237s ago: executing program 1 (id=44705): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x3, 0x2, 0x8, 0x0) socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180fffffffffffffff000002cd65c", 0x29}, {&(0x7f0000000180)="d5298969a8", 0x5}], 0x2, 0x0, 0x0, 0x39c}, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x509a, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, r2, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='\x00'}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000200000000000"], 0x0, 0x32}, 0x28) socketpair(0xf, 0x3, 0x2, &(0x7f0000000080)) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20048845) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) 1.904928572s ago: executing program 1 (id=44707): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000000200)}, 0x40000041) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.904697352s ago: executing program 2 (id=44708): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbcc, 0xb0000}, 0x10806, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e", 0x23}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 1.810057975s ago: executing program 4 (id=44709): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, 0x0, 0x0}, 0x20) recvmsg(r1, &(0x7f0000000400)={0x0, 0x57, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x8, &(0x7f0000000000)=r3, 0x4) socket$kcm(0x10, 0x4, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) 1.730028747s ago: executing program 2 (id=44712): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000200)="390000001400f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb37367a98ebf5f7d63416353e49110", 0x39}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x1b, &(0x7f0000000240), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000100)) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x78, &(0x7f0000000040)=r4, 0x4) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x82000000}, {0x61}, {0x20, 0x0, 0x0, 0x8}, {0x2}, {0x6, 0xda}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000080)) 1.642360499s ago: executing program 1 (id=44713): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000200)="390000001400f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb37367a98ebf5f7d63416353e49110", 0x39}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x1b, &(0x7f0000000240), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNGETVNETBE(r2, 0x800454df, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x78, &(0x7f0000000040)=r4, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 1.6029451s ago: executing program 3 (id=44714): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000200)}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x1b, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000100)) r3 = socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x78, 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x82000000}, {0x61}, {0x20, 0x0, 0x0, 0x8}, {0x2}, {0x6, 0xda}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000080)) 1.524041772s ago: executing program 2 (id=44716): r0 = perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x10042) syz_open_procfs$namespace(0x0, 0x0) 1.483034553s ago: executing program 0 (id=44717): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000200)="390000001400f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb37367a98ebf5f7d63416353e49110", 0x39}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x1b, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000100)) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x78, &(0x7f0000000040)=r4, 0x4) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x82000000}, {0x61}, {0x20, 0x0, 0x0, 0x8}, {0x2}, {0x6, 0xda}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000080)) 1.451071474s ago: executing program 1 (id=44718): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x3, 0x2, 0x8, 0x0) socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180fffffffffffffff000002cd65c", 0x29}, {&(0x7f0000000180)="d5298969a8", 0x5}], 0x2, 0x0, 0x0, 0x39c}, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x509a, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, r2, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='\x00'}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000200000000000"], 0x0, 0x32}, 0x28) socketpair(0xf, 0x3, 0x2, &(0x7f0000000080)) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20048845) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) 1.367215396s ago: executing program 3 (id=44719): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) close(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket$kcm(0x21, 0x5, 0x2) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[], 0x10b8}, 0x134c58d86b541130) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) r4 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000000000000004003001100000000000000000000001c00000000000000000f00fdffff0700", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f020c000000", @ANYRES32=0x0, @ANYBLOB="a005000000000000000000002400000000000000840000000700000094040000441000000000000000050000000000000000000011000000000000000000011601000000000000000000000003cfaff1a411936940e815b82c26205472b6847265849d913aac5ebe"], 0x98}, 0x4dc) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r3) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)) 1.083610783s ago: executing program 1 (id=44720): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x4000) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f0000"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r3) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 1.069230563s ago: executing program 0 (id=44721): socket$kcm(0xa, 0x2, 0x88) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)}, 0xe900) r1 = socket$kcm(0x2, 0x1, 0x84) close(0x3) sendmsg$inet(r1, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) close(r3) close(r1) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x1, 0x5, 0x3, 0xd, "d3592f0923336ed91ee045f6a5d933692d65bc216c8a4e7883ef744af944be8507453b2f7d5987469406fef035381c334fdebb2d7d9342a0f1f25ad65e3be0", 0x4}, 0x80, 0x0}, 0x80) 963.065706ms ago: executing program 3 (id=44722): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x0, 0x0, 0x0, 0x4, 0xa, 0x3, 0xe000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0xf, 0x80, 0xb, 0x2, 0x7, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000, 0x1}, 0x105440, 0x9, 0x2, 0xd, 0xf, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 786.405711ms ago: executing program 0 (id=44723): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbcc, 0xb0000}, 0x10806, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e", 0x23}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 786.118131ms ago: executing program 4 (id=44724): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x6f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000180), 0x43) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000280)=@can, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000980)=""/14, 0xe}], 0x1, &(0x7f0000000a00)}, 0x2000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x4040081) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000007}, 0x0, 0x3, 0xffffffffffffffff, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)={&(0x7f0000000080)=@abs={0x1}, 0x6e, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) 735.495852ms ago: executing program 3 (id=44725): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) mkdir(&(0x7f0000001a80)='./file0\x00', 0x2) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x401, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800013000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6cc", 0xb8}, {&(0x7f0000000140)="40cd5bdd9aa87174dbc9e7d4f6b995adab3b1f2d39def1114b8ca3a169e2be51171766ccdd117d5310691327cb943eb4068c581ebb019e8efdd3ed2b0cd937bbf0fde8a1d11962", 0x47}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 567.884096ms ago: executing program 2 (id=44726): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000200)="390000001400f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb37367a98ebf5f7d63416353e49110", 0x39}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x1b, &(0x7f0000000240), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000100)) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x78, &(0x7f0000000040)=r4, 0x4) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x82000000}, {0x61}, {0x20, 0x0, 0x0, 0x8}, {0x2}, {0x6, 0xda}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000080)) 532.353747ms ago: executing program 0 (id=44727): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getpid() socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="0d08000000000000000000000000000018120000be140830a980b6822abc7d5df4e1f0f5a120002821c057f2ea221aca32108b06377f25e22ccd758485bb5d9fe46128eb0ec79da3e6a98e74bd24804d39b9282045bc98856419eef2e3e2c409d03a9f482e2c8d4811bafa726044b8adc41bbc1790b2601d05471f361aff11506e766817821909208b8ebfb3a3624188c590556ff9f5b254268cd7", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000ffffffc0850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_devices(r6, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000002a00818a04fb7fec598f866b29924a6f130000005e14060800000000000000000f0000000280a71802dd", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000340)='.d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0xa, 0x5, 0xf8, 0x9, 0x0, 0x6, 0xc0111, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x53, 0x1, @perf_config_ext={0x8000000000000001, 0x2d2}, 0xe200, 0xd088, 0x9, 0x0, 0xfffffffffffffffe, 0x3, 0x5, 0x0, 0x9, 0x0, 0xff}) 473.641628ms ago: executing program 4 (id=44728): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000200)="390000001400f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb37367a98ebf5f7d63416353e49110", 0x39}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x1b, &(0x7f0000000240), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNGETVNETBE(r2, 0x800454df, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x78, &(0x7f0000000040)=r4, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 380.613641ms ago: executing program 0 (id=44729): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000200)}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x1b, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000100)) r3 = socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x78, 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000080)) 346.609141ms ago: executing program 3 (id=44730): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000001400), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x3, 0x2, 0x8, 0x0) socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180fffffffffffffff000002cd65c", 0x29}, {&(0x7f0000000180)="d5298969a8", 0x5}], 0x2, 0x0, 0x0, 0x39c}, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x509a, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, r2, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='\x00'}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000200000000000"], 0x0, 0x32}, 0x28) socketpair(0xf, 0x3, 0x2, &(0x7f0000000080)) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20048845) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) 326.901332ms ago: executing program 4 (id=44731): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000200)="390000001400f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb37367a98ebf5f7d63416353e49110", 0x39}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x1b, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000100)) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x78, &(0x7f0000000040)=r4, 0x4) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x82000000}, {0x61}, {0x20, 0x0, 0x0, 0x8}, {0x2}, {0x6, 0xda}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000080)) 289.192043ms ago: executing program 2 (id=44732): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x6}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x4, 0x84) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x8c0) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = getpid() sendmsg$unix(r1, &(0x7f0000001c80)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000000540)="9a16314ce4862db1eaef40a29de28615882fb22691870c7d7602", 0x1a}, {&(0x7f0000000680)="24c9037f80ade5f4592dbe7470d885794c1474eb9ee276a30e212f5d48d59d9b002d6ea9b2525be05d37e65e5ebc523028510c35a9e5f2d883ed229091b363279971eb65150d17dcf22c905e5cd7db128c503048a5dce8891cd37e22ad6f805ce2ba7ca1c6433329bc1471e36a9a8e2e44f6ecf3301407bfbab266ca4b3816cfcf0428903bf9a231a9bc46598d61da813caa17124fdcc976f91fa8db112d9d458225a48216f3825686ed54a9bc84dd369bd68555b898f4a99e01107e379178de99068921f352e56145c4a2223bd9a98d51a2f77cfdd3fc4640041c46f59ede92068142b36495de4a0341cc0dd8ed65f93b77", 0xf2}, {0x0}, {&(0x7f0000000ac0)}], 0x4, &(0x7f0000001c40)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x4004}, 0x4000440) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x6010, r2}, 0x18) socket$kcm(0x10, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000240)={'veth0\x00', @remote}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x44010) 91.281288ms ago: executing program 0 (id=44733): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) close(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket$kcm(0x21, 0x5, 0x2) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[], 0x10b8}, 0x134c58d86b541130) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) r4 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000000000000004003001100000000000000000000001c00000000000000000f00fdffff0700", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f020c000000", @ANYRES32=0x0, @ANYBLOB="a005000000000000000000002400000000000000840000000700000094040000441000000000000000050000000000000000000011000000000000000000011601000000000000000000000003cfaff1a411936940e815b82c26205472b6847265849d913aac5ebe"], 0x98}, 0x4dc) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r3) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)) 91.088218ms ago: executing program 3 (id=44734): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="996822", 0x3}], 0x1}, 0x844) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 60.138679ms ago: executing program 1 (id=44735): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x0, 0x0, 0x0, 0x4, 0xa, 0x3, 0xe000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0xf, 0x80, 0xb, 0x2, 0x7, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000, 0x1}, 0x105440, 0x9, 0x2, 0xd, 0xf, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 59.951729ms ago: executing program 2 (id=44736): r0 = perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x10042) syz_open_procfs$namespace(0x0, 0x0) 0s ago: executing program 4 (id=44737): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x50) socketpair(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = syz_clone(0x10000000, &(0x7f0000000240)="45dcfdbac200b160136fb70efc2809f277b56d80aa0eacc611e6a041025cbebb230e0d0dfc9c5e61fd3f36e268596a6f5705eed7bc41c63c44895bb1435f1086864d144247d3c37222717ace54c28e8e0d", 0x51, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="1dcf31408ee997f05ce24e14799969cbca4adf90b40f8bfcbe976b916fd8127b7291beb0569c3e716ceb0d7681e06cd932c7fe5c588e2139a761553263") perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x3, 0xa, 0x1, 0x98, 0x0, 0xfffffffffffff42c, 0x8000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xb41c, 0x1, @perf_bp={&(0x7f0000000500), 0x3}, 0x0, 0x6, 0x9, 0x5, 0xffffffffffffffc0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x1}, r3, 0xc, 0xffffffffffffffff, 0x6) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) close(0x3) kernel console output (not intermixed with test programs): attribute type 25 has an invalid length. [ 2193.447330][T32601] netlink: 'syz.2.42842': attribute type 10 has an invalid length. [ 2193.517223][T32603] netlink: 'syz.1.42843': attribute type 10 has an invalid length. [ 2193.536545][T32603] netlink: 40 bytes leftover after parsing attributes in process `syz.1.42843'. [ 2193.547993][T32603] device lo left promiscuous mode [ 2193.578680][T32603] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2193.702871][T32603] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 2193.737734][T32603] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2193.791749][T32603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2193.815691][T32620] netlink: 'syz.2.42847': attribute type 29 has an invalid length. [ 2193.834026][T32620] netlink: 'syz.2.42847': attribute type 29 has an invalid length. [ 2193.937326][T32620] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.42847'. [ 2193.984575][T32620] netlink: zone id is out of range [ 2194.018084][T32620] netlink: zone id is out of range [ 2194.042730][T32620] netlink: zone id is out of range [ 2194.048545][T32620] netlink: del zone limit has 8 unknown bytes [ 2194.219675][T32633] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.42853'. [ 2194.237864][T32635] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.42854'. [ 2194.316217][T32641] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2194.323635][T32641] IPv6: NLM_F_CREATE should be set when creating new route [ 2194.330868][T32641] IPv6: NLM_F_CREATE should be set when creating new route [ 2194.338130][T32641] IPv6: NLM_F_CREATE should be set when creating new route [ 2194.515177][T32643] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.42869'. [ 2194.624116][T32653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2194.850612][T32661] IPv6: ADDRCONF(NETDEV_CHANGE): Q±6ã×\b‹¡Y­4: link becomes ready [ 2194.902322][T32661] IPv6: ADDRCONF(NETDEV_CHANGE): Q±6ã×\b‹¡Y­4: link becomes ready [ 2194.968291][T32661] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 2195.162985][T32680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2195.170404][T32680] IPv6: NLM_F_CREATE should be set when creating new route [ 2195.928386][T32708] __nla_validate_parse: 3 callbacks suppressed [ 2195.928424][T32708] netlink: 125732 bytes leftover after parsing attributes in process `syz.0.42880'. [ 2196.216513][T32721] netlink: 399 bytes leftover after parsing attributes in process `syz.4.42886'. [ 2196.293459][T32724] validate_nla: 9 callbacks suppressed [ 2196.293510][T32724] netlink: 'syz.3.42887': attribute type 10 has an invalid length. [ 2196.352763][T32724] netlink: 40 bytes leftover after parsing attributes in process `syz.3.42887'. [ 2196.392746][T32724] device lo left promiscuous mode [ 2196.408493][T32724] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2196.492359][T32724] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2196.541889][T32724] net_ratelimit: 4 callbacks suppressed [ 2196.541991][T32724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2196.573725][T32730] netlink: 'syz.2.42890': attribute type 39 has an invalid length. [ 2197.118651][T32755] netlink: 'syz.2.42908': attribute type 10 has an invalid length. [ 2197.135657][T32755] netlink: 40 bytes leftover after parsing attributes in process `syz.2.42908'. [ 2197.178392][T32755] device lo left promiscuous mode [ 2197.211126][T32755] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2197.277142][T32755] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2197.353638][T32755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2197.574002][T32767] netlink: 'syz.3.42902': attribute type 29 has an invalid length. [ 2197.599818][T32767] netlink: 'syz.3.42902': attribute type 29 has an invalid length. [ 2197.673075][ T305] netlink: 'syz.3.42902': attribute type 29 has an invalid length. [ 2197.683147][T32767] netlink: 'syz.3.42902': attribute type 29 has an invalid length. [ 2197.700444][ T307] netlink: 'syz.0.42906': attribute type 4 has an invalid length. [ 2197.735854][T32767] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.42902'. [ 2197.743050][ T307] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.42906'. [ 2197.773880][T32767] netlink: zone id is out of range [ 2197.801808][T32767] netlink: zone id is out of range [ 2197.809928][ T309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2197.817636][ T309] IPv6: NLM_F_CREATE should be set when creating new route [ 2197.833292][T32767] netlink: zone id is out of range [ 2197.843569][T32767] netlink: del zone limit has 8 unknown bytes [ 2198.090471][ T322] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.42913'. [ 2198.176031][ T322] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2198.186023][ T322] CPU: 1 PID: 322 Comm: syz.4.42913 Not tainted syzkaller #0 [ 2198.193457][ T322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2198.203540][ T322] Call Trace: [ 2198.206846][ T322] [ 2198.209805][ T322] dump_stack_lvl+0x188/0x250 [ 2198.214543][ T322] ? show_regs_print_info+0x20/0x20 [ 2198.219798][ T322] ? load_image+0x410/0x410 [ 2198.224369][ T322] ? _printk+0x1/0x130 [ 2198.228490][ T322] sysfs_warn_dup+0x8a/0xa0 [ 2198.233033][ T322] sysfs_do_create_link_sd+0xc0/0x110 [ 2198.238546][ T322] device_add+0x83b/0x1050 [ 2198.243035][ T322] wiphy_register+0x1e74/0x2c40 [ 2198.247997][ T322] ? cfg80211_event_work+0x40/0x40 [ 2198.253152][ T322] ? minstrel_ht_alloc+0x807/0x980 [ 2198.258311][ T322] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2198.264433][ T322] ieee80211_register_hw+0x2a03/0x3a60 [ 2198.269948][ T322] ? ieee80211_register_hw+0xae1/0x3a60 [ 2198.275558][ T322] ? ieee80211_tasklet_handler+0x20/0x20 [ 2198.281255][ T322] ? rcu_is_watching+0x11/0xa0 [ 2198.286064][ T322] ? hrtimer_init+0x10c/0x220 [ 2198.290789][ T322] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2198.296564][ T322] hwsim_new_radio_nl+0xa7d/0xc50 [ 2198.301664][ T322] genl_rcv_msg+0xd0b/0xfa0 [ 2198.306235][ T322] ? genl_bind+0x370/0x370 [ 2198.310713][ T322] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2198.316466][ T322] ? verify_lock_unused+0x140/0x140 [ 2198.321698][ T322] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2198.327450][ T322] ? perf_trace_lock+0x301/0x390 [ 2198.332429][ T322] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2198.338810][ T322] netlink_rcv_skb+0x1e9/0x430 [ 2198.343599][ T322] ? genl_bind+0x370/0x370 [ 2198.348041][ T322] ? netlink_ack+0xb10/0xb10 [ 2198.352687][ T322] ? down_read+0x1aa/0x2e0 [ 2198.357135][ T322] genl_rcv+0x24/0x40 [ 2198.361166][ T322] netlink_unicast+0x78f/0x940 [ 2198.366005][ T322] netlink_sendmsg+0x8ba/0xbe0 [ 2198.370823][ T322] ? netlink_getsockopt+0x570/0x570 [ 2198.376036][ T322] ? aa_sock_msg_perm+0x94/0x150 [ 2198.381006][ T322] ? apparmor_socket_sendmsg+0x88/0x230 [ 2198.386579][ T322] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2198.391889][ T322] ? security_socket_sendmsg+0x7c/0xa0 [ 2198.397367][ T322] ? netlink_getsockopt+0x570/0x570 [ 2198.402597][ T322] ____sys_sendmsg+0x5be/0x8f0 [ 2198.407399][ T322] ? __sys_sendmsg_sock+0x30/0x30 [ 2198.412466][ T322] ? import_iovec+0x6f/0xa0 [ 2198.417000][ T322] ___sys_sendmsg+0x236/0x2e0 [ 2198.421722][ T322] ? __sys_sendmsg+0x290/0x290 [ 2198.426596][ T322] __se_sys_sendmsg+0x1b7/0x2a0 [ 2198.431478][ T322] ? __x64_sys_sendmsg+0x80/0x80 [ 2198.436439][ T322] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2198.442470][ T322] ? lockdep_hardirqs_on+0x94/0x140 [ 2198.447705][ T322] do_syscall_64+0x4c/0xa0 [ 2198.452145][ T322] ? clear_bhb_loop+0x30/0x80 [ 2198.456841][ T322] ? clear_bhb_loop+0x30/0x80 [ 2198.461545][ T322] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2198.467459][ T322] RIP: 0033:0x7f986f0f40d9 [ 2198.471905][ T322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2198.491543][ T322] RSP: 002b:00007f986d34c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2198.499992][ T322] RAX: ffffffffffffffda RBX: 00007f986f37bfa0 RCX: 00007f986f0f40d9 [ 2198.507980][ T322] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2198.515976][ T322] RBP: 00007f986f18b024 R08: 0000000000000000 R09: 0000000000000000 [ 2198.523998][ T322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2198.532018][ T322] R13: 00007f986f37c038 R14: 00007f986f37bfa0 R15: 00007ffe98450008 [ 2198.540055][ T322] [ 2198.705668][ T338] netlink: 'syz.3.42918': attribute type 39 has an invalid length. [ 2198.854138][ T340] netlink: 'syz.0.42916': attribute type 10 has an invalid length. [ 2198.890833][ T340] netlink: 40 bytes leftover after parsing attributes in process `syz.0.42916'. [ 2198.927630][ T340] device lo left promiscuous mode [ 2198.956144][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2198.975791][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2198.998231][ T340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2199.089186][ T352] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.42921'. [ 2199.366550][ T367] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.42925'. [ 2199.378272][ T363] device bridge_slave_1 left promiscuous mode [ 2199.391963][ T367] netlink: zone id is out of range [ 2199.398224][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.406801][ T367] netlink: zone id is out of range [ 2199.416158][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 2199.433945][ T367] netlink: zone id is out of range [ 2199.966705][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2200.738780][ T418] device syzkaller0 entered promiscuous mode [ 2201.412651][ T437] bridge0: port 2(bridge_slave_1) entered disabled state [ 2201.425589][ T437] device bridge_slave_0 left promiscuous mode [ 2201.432270][ T437] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.568763][ T438] validate_nla: 7 callbacks suppressed [ 2201.568857][ T438] netlink: 'syz.4.42952': attribute type 10 has an invalid length. [ 2201.584601][ T438] __nla_validate_parse: 3 callbacks suppressed [ 2201.584655][ T438] netlink: 40 bytes leftover after parsing attributes in process `syz.4.42952'. [ 2201.601987][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): Q±6ã×\b‹¡Y­4: link becomes ready [ 2201.649431][ T438] net_ratelimit: 2 callbacks suppressed [ 2201.649522][ T438] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 2201.710615][ T450] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.42957'. [ 2201.813528][ T450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2201.886039][ T456] netlink: 'syz.1.42969': attribute type 10 has an invalid length. [ 2201.904078][ T456] netlink: 40 bytes leftover after parsing attributes in process `syz.1.42969'. [ 2201.947783][ T456] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 2201.958787][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2202.022478][ T456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2204.842050][ T488] netlink: 'syz.0.42972': attribute type 10 has an invalid length. [ 2204.862939][ T488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.42972'. [ 2204.882081][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2204.943133][ T488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2205.086549][ T499] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.42977'. [ 2205.239681][ T509] netlink: 206452 bytes leftover after parsing attributes in process `syz.0.42981'. [ 2205.275633][ T499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2205.284510][ T509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42981'. [ 2208.168629][ T532] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.42990'. [ 2208.259678][ T532] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2208.285678][ T532] CPU: 0 PID: 532 Comm: syz.4.42990 Not tainted syzkaller #0 [ 2208.293103][ T532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2208.303184][ T532] Call Trace: [ 2208.306475][ T532] [ 2208.309416][ T532] dump_stack_lvl+0x188/0x250 [ 2208.314148][ T532] ? show_regs_print_info+0x20/0x20 [ 2208.319411][ T532] ? load_image+0x410/0x410 [ 2208.323961][ T532] sysfs_warn_dup+0x8a/0xa0 [ 2208.328498][ T532] sysfs_do_create_link_sd+0xc0/0x110 [ 2208.333891][ T532] device_add+0x83b/0x1050 [ 2208.338332][ T532] wiphy_register+0x1e74/0x2c40 [ 2208.343218][ T532] ? cfg80211_event_work+0x40/0x40 [ 2208.348337][ T532] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2208.354522][ T532] ? ieee80211_register_hw+0x2964/0x3a60 [ 2208.360193][ T532] ieee80211_register_hw+0x2a03/0x3a60 [ 2208.365682][ T532] ? ieee80211_register_hw+0xae1/0x3a60 [ 2208.371266][ T532] ? ieee80211_tasklet_handler+0x20/0x20 [ 2208.376913][ T532] ? debug_init+0x81/0x1d0 [ 2208.381344][ T532] ? kasan_check_range+0x1af/0x290 [ 2208.386466][ T532] ? rcu_is_watching+0x11/0xa0 [ 2208.391258][ T532] ? hrtimer_init+0x10c/0x220 [ 2208.395972][ T532] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2208.401731][ T532] hwsim_new_radio_nl+0xa7d/0xc50 [ 2208.406794][ T532] genl_rcv_msg+0xd0b/0xfa0 [ 2208.411326][ T532] ? genl_bind+0x370/0x370 [ 2208.415769][ T532] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2208.421761][ T532] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2208.427497][ T532] ? lock_chain_count+0x20/0x20 [ 2208.432368][ T532] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2208.438530][ T532] ? lockdep_hardirqs_on+0x94/0x140 [ 2208.443746][ T532] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2208.449925][ T532] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2208.456278][ T532] ? lock_acquire+0x208/0x400 [ 2208.461013][ T532] netlink_rcv_skb+0x1e9/0x430 [ 2208.465809][ T532] ? genl_bind+0x370/0x370 [ 2208.470249][ T532] ? netlink_ack+0xb10/0xb10 [ 2208.474878][ T532] ? down_read+0x1aa/0x2e0 [ 2208.479326][ T532] genl_rcv+0x24/0x40 [ 2208.483322][ T532] netlink_unicast+0x78f/0x940 [ 2208.488121][ T532] netlink_sendmsg+0x8ba/0xbe0 [ 2208.492895][ T532] ? lockdep_hardirqs_on+0x94/0x140 [ 2208.498112][ T532] ? netlink_getsockopt+0x570/0x570 [ 2208.503343][ T532] ? security_socket_sendmsg+0x33/0xa0 [ 2208.508850][ T532] ? security_socket_sendmsg+0x7c/0xa0 [ 2208.514336][ T532] ? netlink_getsockopt+0x570/0x570 [ 2208.519583][ T532] ____sys_sendmsg+0x5be/0x8f0 [ 2208.524688][ T532] ? __sys_sendmsg_sock+0x30/0x30 [ 2208.529759][ T532] ? import_iovec+0x6f/0xa0 [ 2208.534301][ T532] ___sys_sendmsg+0x236/0x2e0 [ 2208.539021][ T532] ? __sys_sendmsg+0x290/0x290 [ 2208.543829][ T532] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2208.549599][ T532] __se_sys_sendmsg+0x1b7/0x2a0 [ 2208.554479][ T532] ? __x64_sys_sendmsg+0x80/0x80 [ 2208.559459][ T532] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2208.565399][ T532] do_syscall_64+0x4c/0xa0 [ 2208.569839][ T532] ? clear_bhb_loop+0x30/0x80 [ 2208.574542][ T532] ? clear_bhb_loop+0x30/0x80 [ 2208.579245][ T532] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2208.585157][ T532] RIP: 0033:0x7f986f0f40d9 [ 2208.589602][ T532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2208.609224][ T532] RSP: 002b:00007f986d34c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2208.617661][ T532] RAX: ffffffffffffffda RBX: 00007f986f37bfa0 RCX: 00007f986f0f40d9 [ 2208.625676][ T532] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2208.633669][ T532] RBP: 00007f986f18b024 R08: 0000000000000000 R09: 0000000000000000 [ 2208.641649][ T532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2208.649628][ T532] R13: 00007f986f37c038 R14: 00007f986f37bfa0 R15: 00007ffe98450008 [ 2208.657637][ T532] [ 2209.371468][ T546] netlink: 205108 bytes leftover after parsing attributes in process `syz.1.42995'. [ 2209.412246][ T546] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2209.455609][ T546] CPU: 0 PID: 546 Comm: syz.1.42995 Not tainted syzkaller #0 [ 2209.463137][ T546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2209.473250][ T546] Call Trace: [ 2209.476545][ T546] [ 2209.479489][ T546] dump_stack_lvl+0x188/0x250 [ 2209.484225][ T546] ? show_regs_print_info+0x20/0x20 [ 2209.489482][ T546] ? load_image+0x410/0x410 [ 2209.494020][ T546] sysfs_warn_dup+0x8a/0xa0 [ 2209.498576][ T546] sysfs_do_create_link_sd+0xc0/0x110 [ 2209.503973][ T546] device_add+0x83b/0x1050 [ 2209.508425][ T546] wiphy_register+0x1e74/0x2c40 [ 2209.513366][ T546] ? cfg80211_event_work+0x40/0x40 [ 2209.518498][ T546] ? minstrel_ht_alloc+0x807/0x980 [ 2209.523635][ T546] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2209.529731][ T546] ieee80211_register_hw+0x2a03/0x3a60 [ 2209.535230][ T546] ? ieee80211_register_hw+0xae1/0x3a60 [ 2209.540816][ T546] ? ieee80211_tasklet_handler+0x20/0x20 [ 2209.546473][ T546] ? rcu_is_watching+0x11/0xa0 [ 2209.551262][ T546] ? hrtimer_init+0x10c/0x220 [ 2209.555972][ T546] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2209.561730][ T546] hwsim_new_radio_nl+0xa7d/0xc50 [ 2209.566790][ T546] genl_rcv_msg+0xd0b/0xfa0 [ 2209.571335][ T546] ? genl_bind+0x370/0x370 [ 2209.575791][ T546] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 2209.581624][ T546] ? verify_lock_unused+0x140/0x140 [ 2209.586848][ T546] ? perf_trace_lock_acquire+0x341/0x3f0 [ 2209.592508][ T546] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2209.599118][ T546] ? perf_trace_lock+0xe4/0x390 [ 2209.604002][ T546] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2209.610381][ T546] netlink_rcv_skb+0x1e9/0x430 [ 2209.615181][ T546] ? genl_bind+0x370/0x370 [ 2209.619646][ T546] ? netlink_ack+0xb10/0xb10 [ 2209.624290][ T546] ? down_read+0x1aa/0x2e0 [ 2209.628747][ T546] genl_rcv+0x24/0x40 [ 2209.632744][ T546] netlink_unicast+0x78f/0x940 [ 2209.637566][ T546] netlink_sendmsg+0x8ba/0xbe0 [ 2209.642363][ T546] ? netlink_getsockopt+0x570/0x570 [ 2209.647582][ T546] ? aa_sock_msg_perm+0x94/0x150 [ 2209.652543][ T546] ? apparmor_socket_sendmsg+0x88/0x230 [ 2209.658109][ T546] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2209.663416][ T546] ? security_socket_sendmsg+0x7c/0xa0 [ 2209.668908][ T546] ? netlink_getsockopt+0x570/0x570 [ 2209.674134][ T546] ____sys_sendmsg+0x5be/0x8f0 [ 2209.678974][ T546] ? __sys_sendmsg_sock+0x30/0x30 [ 2209.684034][ T546] ? import_iovec+0x6f/0xa0 [ 2209.688564][ T546] ___sys_sendmsg+0x236/0x2e0 [ 2209.693257][ T546] ? __sys_sendmsg+0x290/0x290 [ 2209.698055][ T546] ? trace_event_raw_event_lock+0x250/0x250 [ 2209.703984][ T546] __se_sys_sendmsg+0x1b7/0x2a0 [ 2209.708846][ T546] ? __x64_sys_sendmsg+0x80/0x80 [ 2209.713799][ T546] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2209.719698][ T546] do_syscall_64+0x4c/0xa0 [ 2209.724119][ T546] ? clear_bhb_loop+0x30/0x80 [ 2209.728838][ T546] ? clear_bhb_loop+0x30/0x80 [ 2209.733527][ T546] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2209.739433][ T546] RIP: 0033:0x7f340b4ea0d9 [ 2209.743882][ T546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2209.763503][ T546] RSP: 002b:00007f3409742028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2209.771938][ T546] RAX: ffffffffffffffda RBX: 00007f340b771fa0 RCX: 00007f340b4ea0d9 [ 2209.779923][ T546] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2209.787909][ T546] RBP: 00007f340b581024 R08: 0000000000000000 R09: 0000000000000000 [ 2209.795886][ T546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2209.803858][ T546] R13: 00007f340b772038 R14: 00007f340b771fa0 R15: 00007ffe1a287388 [ 2209.811845][ T546] [ 2210.206187][ T582] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.43016'. [ 2210.221155][ T583] netlink: 'syz.3.43006': attribute type 10 has an invalid length. [ 2210.232560][ T583] netlink: 40 bytes leftover after parsing attributes in process `syz.3.43006'. [ 2210.243506][ T583] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2210.293774][ T583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2210.426527][ T582] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2210.443080][ T582] CPU: 1 PID: 582 Comm: syz.1.43016 Not tainted syzkaller #0 [ 2210.450614][ T582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2210.460691][ T582] Call Trace: [ 2210.464001][ T582] [ 2210.466955][ T582] dump_stack_lvl+0x188/0x250 [ 2210.471671][ T582] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2210.477864][ T582] ? show_regs_print_info+0x20/0x20 [ 2210.483107][ T582] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2210.489326][ T582] sysfs_warn_dup+0x8a/0xa0 [ 2210.493860][ T582] sysfs_do_create_link_sd+0xc0/0x110 [ 2210.499270][ T582] device_add+0x83b/0x1050 [ 2210.503766][ T582] wiphy_register+0x1e74/0x2c40 [ 2210.508704][ T582] ? cfg80211_event_work+0x40/0x40 [ 2210.513860][ T582] ? minstrel_ht_alloc+0x807/0x980 [ 2210.519016][ T582] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2210.525137][ T582] ieee80211_register_hw+0x2a03/0x3a60 [ 2210.530665][ T582] ? ieee80211_register_hw+0xae1/0x3a60 [ 2210.536267][ T582] ? ieee80211_tasklet_handler+0x20/0x20 [ 2210.542002][ T582] ? rcu_is_watching+0x11/0xa0 [ 2210.546821][ T582] ? hrtimer_init+0x10c/0x220 [ 2210.551538][ T582] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2210.557337][ T582] hwsim_new_radio_nl+0xa7d/0xc50 [ 2210.562448][ T582] genl_rcv_msg+0xd0b/0xfa0 [ 2210.567012][ T582] ? genl_bind+0x370/0x370 [ 2210.571486][ T582] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2210.577561][ T582] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2210.583323][ T582] ? lock_chain_count+0x20/0x20 [ 2210.588227][ T582] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2210.594452][ T582] ? lockdep_hardirqs_on+0x94/0x140 [ 2210.599703][ T582] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2210.605894][ T582] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2210.612270][ T582] ? lock_acquire+0x208/0x400 [ 2210.616990][ T582] netlink_rcv_skb+0x1e9/0x430 [ 2210.621822][ T582] ? genl_bind+0x370/0x370 [ 2210.626269][ T582] ? netlink_ack+0xb10/0xb10 [ 2210.630911][ T582] ? down_read+0x1aa/0x2e0 [ 2210.635382][ T582] genl_rcv+0x24/0x40 [ 2210.639401][ T582] netlink_unicast+0x78f/0x940 [ 2210.644246][ T582] netlink_sendmsg+0x8ba/0xbe0 [ 2210.649053][ T582] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2210.655301][ T582] ? netlink_getsockopt+0x570/0x570 [ 2210.660579][ T582] ? apparmor_socket_sendmsg+0x88/0x230 [ 2210.666170][ T582] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2210.671487][ T582] ? security_socket_sendmsg+0x7c/0xa0 [ 2210.676977][ T582] ? netlink_getsockopt+0x570/0x570 [ 2210.682223][ T582] ____sys_sendmsg+0x5be/0x8f0 [ 2210.687045][ T582] ? __sys_sendmsg_sock+0x30/0x30 [ 2210.692124][ T582] ? import_iovec+0x6f/0xa0 [ 2210.696668][ T582] ___sys_sendmsg+0x236/0x2e0 [ 2210.701402][ T582] ? __sys_sendmsg+0x290/0x290 [ 2210.706228][ T582] ? trace_event_raw_event_lock+0x250/0x250 [ 2210.712161][ T582] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2210.718486][ T582] __se_sys_sendmsg+0x1b7/0x2a0 [ 2210.723371][ T582] ? __x64_sys_sendmsg+0x80/0x80 [ 2210.728330][ T582] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2210.734377][ T582] ? lockdep_hardirqs_on+0x94/0x140 [ 2210.739621][ T582] do_syscall_64+0x4c/0xa0 [ 2210.744071][ T582] ? clear_bhb_loop+0x30/0x80 [ 2210.748873][ T582] ? clear_bhb_loop+0x30/0x80 [ 2210.753604][ T582] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2210.759523][ T582] RIP: 0033:0x7f340b4ea0d9 [ 2210.763961][ T582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2210.783590][ T582] RSP: 002b:00007f3409742028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2210.792044][ T582] RAX: ffffffffffffffda RBX: 00007f340b771fa0 RCX: 00007f340b4ea0d9 [ 2210.800038][ T582] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2210.808038][ T582] RBP: 00007f340b581024 R08: 0000000000000000 R09: 0000000000000000 [ 2210.816035][ T582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2210.824071][ T582] R13: 00007f340b772038 R14: 00007f340b771fa0 R15: 00007ffe1a287388 [ 2210.832128][ T582] [ 2211.269128][ T610] netlink: 205108 bytes leftover after parsing attributes in process `syz.4.43018'. [ 2211.339873][ T610] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2211.402828][ T610] CPU: 1 PID: 610 Comm: syz.4.43018 Not tainted syzkaller #0 [ 2211.410267][ T610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2211.420350][ T610] Call Trace: [ 2211.423657][ T610] [ 2211.426617][ T610] dump_stack_lvl+0x188/0x250 [ 2211.431349][ T610] ? show_regs_print_info+0x20/0x20 [ 2211.436591][ T610] ? load_image+0x410/0x410 [ 2211.441178][ T610] sysfs_warn_dup+0x8a/0xa0 [ 2211.445733][ T610] sysfs_do_create_link_sd+0xc0/0x110 [ 2211.451160][ T610] device_add+0x83b/0x1050 [ 2211.455633][ T610] wiphy_register+0x1e74/0x2c40 [ 2211.460583][ T610] ? cfg80211_event_work+0x40/0x40 [ 2211.465761][ T610] ? minstrel_ht_alloc+0x807/0x980 [ 2211.470939][ T610] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2211.477060][ T610] ieee80211_register_hw+0x2a03/0x3a60 [ 2211.482574][ T610] ? ieee80211_register_hw+0xae1/0x3a60 [ 2211.488191][ T610] ? ieee80211_tasklet_handler+0x20/0x20 [ 2211.493880][ T610] ? rcu_is_watching+0x11/0xa0 [ 2211.498696][ T610] ? hrtimer_init+0x10c/0x220 [ 2211.503430][ T610] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2211.509248][ T610] hwsim_new_radio_nl+0xa7d/0xc50 [ 2211.514375][ T610] genl_rcv_msg+0xd0b/0xfa0 [ 2211.518964][ T610] ? genl_bind+0x370/0x370 [ 2211.523465][ T610] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 2211.529316][ T610] ? verify_lock_unused+0x140/0x140 [ 2211.534568][ T610] ? perf_trace_lock_acquire+0x341/0x3f0 [ 2211.540274][ T610] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2211.546908][ T610] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2211.553542][ T610] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2211.559962][ T610] netlink_rcv_skb+0x1e9/0x430 [ 2211.564785][ T610] ? genl_bind+0x370/0x370 [ 2211.569267][ T610] ? netlink_ack+0xb10/0xb10 [ 2211.573941][ T610] ? down_read+0x1aa/0x2e0 [ 2211.578422][ T610] genl_rcv+0x24/0x40 [ 2211.582449][ T610] netlink_unicast+0x78f/0x940 [ 2211.587311][ T610] netlink_sendmsg+0x8ba/0xbe0 [ 2211.592154][ T610] ? netlink_getsockopt+0x570/0x570 [ 2211.597423][ T610] ? aa_sock_msg_perm+0x94/0x150 [ 2211.602412][ T610] ? apparmor_socket_sendmsg+0x88/0x230 [ 2211.608008][ T610] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2211.613330][ T610] ? security_socket_sendmsg+0x7c/0xa0 [ 2211.618827][ T610] ? netlink_getsockopt+0x570/0x570 [ 2211.624087][ T610] ____sys_sendmsg+0x5be/0x8f0 [ 2211.628945][ T610] ? __sys_sendmsg_sock+0x30/0x30 [ 2211.634044][ T610] ? import_iovec+0x6f/0xa0 [ 2211.638599][ T610] ___sys_sendmsg+0x236/0x2e0 [ 2211.643347][ T610] ? __sys_sendmsg+0x290/0x290 [ 2211.648275][ T610] __se_sys_sendmsg+0x1b7/0x2a0 [ 2211.653177][ T610] ? __x64_sys_sendmsg+0x80/0x80 [ 2211.658147][ T610] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2211.664251][ T610] ? lockdep_hardirqs_on+0x94/0x140 [ 2211.669524][ T610] do_syscall_64+0x4c/0xa0 [ 2211.673971][ T610] ? clear_bhb_loop+0x30/0x80 [ 2211.678686][ T610] ? clear_bhb_loop+0x30/0x80 [ 2211.683405][ T610] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2211.689333][ T610] RIP: 0033:0x7f986f0f40d9 [ 2211.693783][ T610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2211.713417][ T610] RSP: 002b:00007f986d34c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2211.721858][ T610] RAX: ffffffffffffffda RBX: 00007f986f37bfa0 RCX: 00007f986f0f40d9 [ 2211.729843][ T610] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2211.737852][ T610] RBP: 00007f986f18b024 R08: 0000000000000000 R09: 0000000000000000 [ 2211.745836][ T610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2211.753820][ T610] R13: 00007f986f37c038 R14: 00007f986f37bfa0 R15: 00007ffe98450008 [ 2211.761842][ T610] [ 2212.547363][ T627] netlink: 36 bytes leftover after parsing attributes in process `syz.3.43024'. [ 2212.580729][ T627] netlink: 'syz.3.43024': attribute type 1 has an invalid length. [ 2212.602306][ T627] netlink: 6 bytes leftover after parsing attributes in process `syz.3.43024'. [ 2213.797183][ T670] netlink: 205108 bytes leftover after parsing attributes in process `syz.0.43037'. [ 2213.833925][ T670] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2213.842141][ T670] CPU: 0 PID: 670 Comm: syz.0.43037 Not tainted syzkaller #0 [ 2213.849553][ T670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2213.859643][ T670] Call Trace: [ 2213.862952][ T670] [ 2213.865916][ T670] dump_stack_lvl+0x188/0x250 [ 2213.870651][ T670] ? show_regs_print_info+0x20/0x20 [ 2213.875895][ T670] ? load_image+0x410/0x410 [ 2213.880476][ T670] sysfs_warn_dup+0x8a/0xa0 [ 2213.885037][ T670] sysfs_do_create_link_sd+0xc0/0x110 [ 2213.890490][ T670] device_add+0x83b/0x1050 [ 2213.894981][ T670] wiphy_register+0x1e74/0x2c40 [ 2213.899905][ T670] ? cfg80211_event_work+0x40/0x40 [ 2213.905043][ T670] ? minstrel_ht_alloc+0x807/0x980 [ 2213.910201][ T670] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2213.916302][ T670] ieee80211_register_hw+0x2a03/0x3a60 [ 2213.921796][ T670] ? ieee80211_register_hw+0xae1/0x3a60 [ 2213.927386][ T670] ? ieee80211_tasklet_handler+0x20/0x20 [ 2213.933053][ T670] ? rcu_is_watching+0x11/0xa0 [ 2213.937855][ T670] ? hrtimer_init+0x10c/0x220 [ 2213.942564][ T670] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2213.948347][ T670] hwsim_new_radio_nl+0xa7d/0xc50 [ 2213.953430][ T670] genl_rcv_msg+0xd0b/0xfa0 [ 2213.957994][ T670] ? genl_bind+0x370/0x370 [ 2213.962462][ T670] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 2213.968309][ T670] ? verify_lock_unused+0x140/0x140 [ 2213.973534][ T670] ? perf_trace_lock_acquire+0x341/0x3f0 [ 2213.979203][ T670] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2213.985819][ T670] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2213.992454][ T670] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2213.998859][ T670] netlink_rcv_skb+0x1e9/0x430 [ 2214.003652][ T670] ? genl_bind+0x370/0x370 [ 2214.008106][ T670] ? netlink_ack+0xb10/0xb10 [ 2214.012749][ T670] ? down_read+0x1aa/0x2e0 [ 2214.017201][ T670] genl_rcv+0x24/0x40 [ 2214.021202][ T670] netlink_unicast+0x78f/0x940 [ 2214.026016][ T670] netlink_sendmsg+0x8ba/0xbe0 [ 2214.030831][ T670] ? netlink_getsockopt+0x570/0x570 [ 2214.036060][ T670] ? aa_sock_msg_perm+0x94/0x150 [ 2214.041035][ T670] ? apparmor_socket_sendmsg+0x88/0x230 [ 2214.046612][ T670] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2214.051917][ T670] ? security_socket_sendmsg+0x7c/0xa0 [ 2214.057413][ T670] ? netlink_getsockopt+0x570/0x570 [ 2214.062653][ T670] ____sys_sendmsg+0x5be/0x8f0 [ 2214.067465][ T670] ? __sys_sendmsg_sock+0x30/0x30 [ 2214.072545][ T670] ? import_iovec+0x6f/0xa0 [ 2214.077087][ T670] ___sys_sendmsg+0x236/0x2e0 [ 2214.081817][ T670] ? __sys_sendmsg+0x290/0x290 [ 2214.086647][ T670] ? lockdep_hardirqs_on+0x94/0x140 [ 2214.091925][ T670] __se_sys_sendmsg+0x1b7/0x2a0 [ 2214.096811][ T670] ? __x64_sys_sendmsg+0x80/0x80 [ 2214.101768][ T670] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2214.107801][ T670] ? lockdep_hardirqs_on+0x94/0x140 [ 2214.113038][ T670] do_syscall_64+0x4c/0xa0 [ 2214.117469][ T670] ? clear_bhb_loop+0x30/0x80 [ 2214.122162][ T670] ? clear_bhb_loop+0x30/0x80 [ 2214.126883][ T670] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2214.132797][ T670] RIP: 0033:0x7f2c180aa0d9 [ 2214.137231][ T670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2214.156856][ T670] RSP: 002b:00007f2c16302028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2214.165298][ T670] RAX: ffffffffffffffda RBX: 00007f2c18331fa0 RCX: 00007f2c180aa0d9 [ 2214.173312][ T670] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2214.181298][ T670] RBP: 00007f2c18141024 R08: 0000000000000000 R09: 0000000000000000 [ 2214.189299][ T670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2214.197301][ T670] R13: 00007f2c18332038 R14: 00007f2c18331fa0 R15: 00007fffb2992718 [ 2214.205461][ T670] [ 2214.489733][ T685] netlink: 36 bytes leftover after parsing attributes in process `syz.1.43044'. [ 2214.512525][ T685] netlink: 'syz.1.43044': attribute type 1 has an invalid length. [ 2214.520883][ T685] netlink: 6 bytes leftover after parsing attributes in process `syz.1.43044'. [ 2214.620379][ T692] netlink: 205108 bytes leftover after parsing attributes in process `syz.3.43059'. [ 2214.684497][ T692] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2214.716808][ T692] CPU: 0 PID: 692 Comm: syz.3.43059 Not tainted syzkaller #0 [ 2214.724251][ T692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2214.734355][ T692] Call Trace: [ 2214.737681][ T692] [ 2214.740676][ T692] dump_stack_lvl+0x188/0x250 [ 2214.745426][ T692] ? show_regs_print_info+0x20/0x20 [ 2214.750666][ T692] ? load_image+0x410/0x410 [ 2214.755251][ T692] sysfs_warn_dup+0x8a/0xa0 [ 2214.759806][ T692] sysfs_do_create_link_sd+0xc0/0x110 [ 2214.765235][ T692] device_add+0x83b/0x1050 [ 2214.769731][ T692] wiphy_register+0x1e74/0x2c40 [ 2214.774695][ T692] ? cfg80211_event_work+0x40/0x40 [ 2214.779861][ T692] ? minstrel_ht_alloc+0x807/0x980 [ 2214.785052][ T692] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2214.791183][ T692] ieee80211_register_hw+0x2a03/0x3a60 [ 2214.796709][ T692] ? ieee80211_register_hw+0xae1/0x3a60 [ 2214.802330][ T692] ? ieee80211_tasklet_handler+0x20/0x20 [ 2214.808030][ T692] ? rcu_is_watching+0x11/0xa0 [ 2214.812875][ T692] ? hrtimer_init+0x10c/0x220 [ 2214.817614][ T692] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2214.823427][ T692] hwsim_new_radio_nl+0xa7d/0xc50 [ 2214.828545][ T692] genl_rcv_msg+0xd0b/0xfa0 [ 2214.833136][ T692] ? genl_bind+0x370/0x370 [ 2214.837620][ T692] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 2214.843494][ T692] ? verify_lock_unused+0x140/0x140 [ 2214.848750][ T692] ? perf_trace_lock_acquire+0x341/0x3f0 [ 2214.854471][ T692] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2214.861128][ T692] ? dev_queue_xmit+0x20/0x20 [ 2214.865842][ T692] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2214.872285][ T692] netlink_rcv_skb+0x1e9/0x430 [ 2214.877096][ T692] ? genl_bind+0x370/0x370 [ 2214.881554][ T692] ? netlink_ack+0xb10/0xb10 [ 2214.886251][ T692] ? down_read+0x1aa/0x2e0 [ 2214.890727][ T692] genl_rcv+0x24/0x40 [ 2214.894757][ T692] netlink_unicast+0x78f/0x940 [ 2214.899610][ T692] netlink_sendmsg+0x8ba/0xbe0 [ 2214.904456][ T692] ? netlink_getsockopt+0x570/0x570 [ 2214.909710][ T692] ? aa_sock_msg_perm+0x94/0x150 [ 2214.914711][ T692] ? apparmor_socket_sendmsg+0x88/0x230 [ 2214.920309][ T692] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2214.925629][ T692] ? security_socket_sendmsg+0x7c/0xa0 [ 2214.931128][ T692] ? netlink_getsockopt+0x570/0x570 [ 2214.936377][ T692] ____sys_sendmsg+0x5be/0x8f0 [ 2214.941211][ T692] ? __sys_sendmsg_sock+0x30/0x30 [ 2214.946302][ T692] ? import_iovec+0x6f/0xa0 [ 2214.950869][ T692] ___sys_sendmsg+0x236/0x2e0 [ 2214.955618][ T692] ? __sys_sendmsg+0x290/0x290 [ 2214.960555][ T692] __se_sys_sendmsg+0x1b7/0x2a0 [ 2214.965460][ T692] ? __x64_sys_sendmsg+0x80/0x80 [ 2214.970441][ T692] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2214.976529][ T692] ? lockdep_hardirqs_on+0x94/0x140 [ 2214.981788][ T692] do_syscall_64+0x4c/0xa0 [ 2214.986243][ T692] ? clear_bhb_loop+0x30/0x80 [ 2214.990959][ T692] ? clear_bhb_loop+0x30/0x80 [ 2214.995682][ T692] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2215.001611][ T692] RIP: 0033:0x7ff2cc7a30d9 [ 2215.006068][ T692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2215.025711][ T692] RSP: 002b:00007ff2ca9fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2215.034168][ T692] RAX: ffffffffffffffda RBX: 00007ff2cca2afa0 RCX: 00007ff2cc7a30d9 [ 2215.042200][ T692] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2215.050214][ T692] RBP: 00007ff2cc83a024 R08: 0000000000000000 R09: 0000000000000000 [ 2215.058216][ T692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2215.066219][ T692] R13: 00007ff2cca2b038 R14: 00007ff2cca2afa0 R15: 00007fff649f1e98 [ 2215.074312][ T692] [ 2215.937044][ T731] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.43073'. [ 2216.101936][ T731] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2216.778162][ T766] netlink: 'syz.4.43078': attribute type 10 has an invalid length. [ 2216.803965][ T766] netlink: 40 bytes leftover after parsing attributes in process `syz.4.43078'. [ 2216.826106][ T766] IPv6: ADDRCONF(NETDEV_CHANGE): Q±6ã×\b‹¡Y­4: link becomes ready [ 2216.878834][ T766] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 2217.069478][ T784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2217.076850][ T784] IPv6: NLM_F_CREATE should be set when creating new route [ 2217.395856][ T802] sctp: [Deprecated]: syz.0.43090 (pid 802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2217.395856][ T802] Use struct sctp_sack_info instead [ 2217.864699][ T820] netlink: 36 bytes leftover after parsing attributes in process `syz.4.43097'. [ 2217.890704][ T820] netlink: 'syz.4.43097': attribute type 1 has an invalid length. [ 2217.899218][ T820] netlink: 6 bytes leftover after parsing attributes in process `syz.4.43097'. [ 2217.910699][ T821] netlink: 'syz.0.43098': attribute type 10 has an invalid length. [ 2217.929475][ T821] netlink: 40 bytes leftover after parsing attributes in process `syz.0.43098'. [ 2217.980202][ T821] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2218.092714][ T821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2218.141985][ T827] netlink: 36 bytes leftover after parsing attributes in process `syz.2.43111'. [ 2218.182268][ T827] netlink: 'syz.2.43111': attribute type 1 has an invalid length. [ 2218.401267][ T843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2218.863082][ T869] __nla_validate_parse: 2 callbacks suppressed [ 2218.863122][ T869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.43115'. [ 2218.894454][ T869] netlink: 'syz.0.43115': attribute type 1 has an invalid length. [ 2218.912635][ T869] netlink: 6 bytes leftover after parsing attributes in process `syz.0.43115'. [ 2219.469249][ T894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2219.476839][ T894] IPv6: NLM_F_CREATE should be set when creating new route [ 2220.232272][ T915] netlink: 205108 bytes leftover after parsing attributes in process `syz.2.43132'. [ 2220.315576][ T915] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2220.335772][ T915] CPU: 1 PID: 915 Comm: syz.2.43132 Not tainted syzkaller #0 [ 2220.343207][ T915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2220.353436][ T915] Call Trace: [ 2220.356749][ T915] [ 2220.359724][ T915] dump_stack_lvl+0x188/0x250 [ 2220.364469][ T915] ? show_regs_print_info+0x20/0x20 [ 2220.369734][ T915] ? load_image+0x410/0x410 [ 2220.374349][ T915] sysfs_warn_dup+0x8a/0xa0 [ 2220.378909][ T915] sysfs_do_create_link_sd+0xc0/0x110 [ 2220.384348][ T915] device_add+0x83b/0x1050 [ 2220.388839][ T915] wiphy_register+0x1e74/0x2c40 [ 2220.393786][ T915] ? cfg80211_event_work+0x40/0x40 [ 2220.398930][ T915] ? minstrel_ht_alloc+0x807/0x980 [ 2220.404085][ T915] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2220.410208][ T915] ieee80211_register_hw+0x2a03/0x3a60 [ 2220.415731][ T915] ? ieee80211_register_hw+0xae1/0x3a60 [ 2220.421330][ T915] ? ieee80211_tasklet_handler+0x20/0x20 [ 2220.427004][ T915] ? rcu_is_watching+0x11/0xa0 [ 2220.431810][ T915] ? hrtimer_init+0x10c/0x220 [ 2220.436521][ T915] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2220.442306][ T915] hwsim_new_radio_nl+0xa7d/0xc50 [ 2220.447408][ T915] genl_rcv_msg+0xd0b/0xfa0 [ 2220.451968][ T915] ? genl_bind+0x370/0x370 [ 2220.456449][ T915] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 2220.462295][ T915] ? verify_lock_unused+0x140/0x140 [ 2220.467538][ T915] ? perf_trace_lock_acquire+0x341/0x3f0 [ 2220.473232][ T915] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2220.479844][ T915] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2220.486460][ T915] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2220.492849][ T915] netlink_rcv_skb+0x1e9/0x430 [ 2220.497660][ T915] ? genl_bind+0x370/0x370 [ 2220.502105][ T915] ? netlink_ack+0xb10/0xb10 [ 2220.506749][ T915] ? down_read+0x1aa/0x2e0 [ 2220.511198][ T915] genl_rcv+0x24/0x40 [ 2220.515206][ T915] netlink_unicast+0x78f/0x940 [ 2220.520031][ T915] netlink_sendmsg+0x8ba/0xbe0 [ 2220.524882][ T915] ? netlink_getsockopt+0x570/0x570 [ 2220.530157][ T915] ? apparmor_socket_sendmsg+0x88/0x230 [ 2220.535750][ T915] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2220.541067][ T915] ? security_socket_sendmsg+0x7c/0xa0 [ 2220.546542][ T915] ? netlink_getsockopt+0x570/0x570 [ 2220.551773][ T915] ____sys_sendmsg+0x5be/0x8f0 [ 2220.556593][ T915] ? __sys_sendmsg_sock+0x30/0x30 [ 2220.561673][ T915] ? import_iovec+0x6f/0xa0 [ 2220.566225][ T915] ___sys_sendmsg+0x236/0x2e0 [ 2220.570952][ T915] ? __sys_sendmsg+0x290/0x290 [ 2220.575866][ T915] __se_sys_sendmsg+0x1b7/0x2a0 [ 2220.580753][ T915] ? __x64_sys_sendmsg+0x80/0x80 [ 2220.585747][ T915] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2220.591725][ T915] do_syscall_64+0x4c/0xa0 [ 2220.596157][ T915] ? clear_bhb_loop+0x30/0x80 [ 2220.600851][ T915] ? clear_bhb_loop+0x30/0x80 [ 2220.605558][ T915] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2220.611471][ T915] RIP: 0033:0x7fb9b22c50d9 [ 2220.615910][ T915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2220.635534][ T915] RSP: 002b:00007fb9b051d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2220.643974][ T915] RAX: ffffffffffffffda RBX: 00007fb9b254cfa0 RCX: 00007fb9b22c50d9 [ 2220.651978][ T915] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2220.659961][ T915] RBP: 00007fb9b235c024 R08: 0000000000000000 R09: 0000000000000000 [ 2220.667976][ T915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2220.675971][ T915] R13: 00007fb9b254d038 R14: 00007fb9b254cfa0 R15: 00007ffec75df448 [ 2220.684011][ T915] [ 2221.147911][ T930] netlink: 'syz.1.43138': attribute type 21 has an invalid length. [ 2221.211480][ T936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2221.537131][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.543537][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.730040][ T964] netlink: 205108 bytes leftover after parsing attributes in process `syz.3.43154'. [ 2221.816306][ T964] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2221.848467][ T964] CPU: 0 PID: 964 Comm: syz.3.43154 Not tainted syzkaller #0 [ 2221.855902][ T964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2221.865992][ T964] Call Trace: [ 2221.869305][ T964] [ 2221.872274][ T964] dump_stack_lvl+0x188/0x250 [ 2221.877019][ T964] ? show_regs_print_info+0x20/0x20 [ 2221.882258][ T964] ? load_image+0x410/0x410 [ 2221.886851][ T964] sysfs_warn_dup+0x8a/0xa0 [ 2221.891487][ T964] sysfs_do_create_link_sd+0xc0/0x110 [ 2221.896902][ T964] device_add+0x83b/0x1050 [ 2221.901401][ T964] wiphy_register+0x1e74/0x2c40 [ 2221.906363][ T964] ? cfg80211_event_work+0x40/0x40 [ 2221.911516][ T964] ? minstrel_ht_alloc+0x807/0x980 [ 2221.916693][ T964] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2221.922820][ T964] ieee80211_register_hw+0x2a03/0x3a60 [ 2221.928363][ T964] ? ieee80211_register_hw+0xae1/0x3a60 [ 2221.933979][ T964] ? ieee80211_tasklet_handler+0x20/0x20 [ 2221.939669][ T964] ? rcu_is_watching+0x11/0xa0 [ 2221.944498][ T964] ? hrtimer_init+0x10c/0x220 [ 2221.949240][ T964] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2221.955077][ T964] hwsim_new_radio_nl+0xa7d/0xc50 [ 2221.960207][ T964] genl_rcv_msg+0xd0b/0xfa0 [ 2221.964799][ T964] ? genl_bind+0x370/0x370 [ 2221.969295][ T964] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 2221.975191][ T964] ? verify_lock_unused+0x140/0x140 [ 2221.980443][ T964] ? perf_trace_lock_acquire+0x341/0x3f0 [ 2221.986142][ T964] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2221.992804][ T964] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2221.999243][ T964] netlink_rcv_skb+0x1e9/0x430 [ 2222.004066][ T964] ? genl_bind+0x370/0x370 [ 2222.008545][ T964] ? netlink_ack+0xb10/0xb10 [ 2222.013221][ T964] ? down_read+0x1aa/0x2e0 [ 2222.017693][ T964] genl_rcv+0x24/0x40 [ 2222.021716][ T964] netlink_unicast+0x78f/0x940 [ 2222.026561][ T964] netlink_sendmsg+0x8ba/0xbe0 [ 2222.031407][ T964] ? netlink_getsockopt+0x570/0x570 [ 2222.036645][ T964] ? aa_sock_msg_perm+0x94/0x150 [ 2222.041634][ T964] ? apparmor_socket_sendmsg+0x88/0x230 [ 2222.047224][ T964] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2222.052555][ T964] ? security_socket_sendmsg+0x7c/0xa0 [ 2222.058079][ T964] ? netlink_getsockopt+0x570/0x570 [ 2222.063338][ T964] ____sys_sendmsg+0x5be/0x8f0 [ 2222.068188][ T964] ? __sys_sendmsg_sock+0x30/0x30 [ 2222.073287][ T964] ? import_iovec+0x6f/0xa0 [ 2222.077847][ T964] ___sys_sendmsg+0x236/0x2e0 [ 2222.082596][ T964] ? __sys_sendmsg+0x290/0x290 [ 2222.087540][ T964] __se_sys_sendmsg+0x1b7/0x2a0 [ 2222.092445][ T964] ? __x64_sys_sendmsg+0x80/0x80 [ 2222.097522][ T964] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2222.103600][ T964] ? lockdep_hardirqs_on+0x94/0x140 [ 2222.108866][ T964] do_syscall_64+0x4c/0xa0 [ 2222.113319][ T964] ? clear_bhb_loop+0x30/0x80 [ 2222.118186][ T964] ? clear_bhb_loop+0x30/0x80 [ 2222.122936][ T964] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2222.128895][ T964] RIP: 0033:0x7ff2cc7a30d9 [ 2222.133353][ T964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2222.152995][ T964] RSP: 002b:00007ff2ca9da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2222.161449][ T964] RAX: ffffffffffffffda RBX: 00007ff2cca2b090 RCX: 00007ff2cc7a30d9 [ 2222.169462][ T964] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2222.177484][ T964] RBP: 00007ff2cc83a024 R08: 0000000000000000 R09: 0000000000000000 [ 2222.185501][ T964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2222.193501][ T964] R13: 00007ff2cca2b128 R14: 00007ff2cca2b090 R15: 00007fff649f1e98 [ 2222.201560][ T964] [ 2222.430040][ T969] netlink: 36 bytes leftover after parsing attributes in process `syz.2.43156'. [ 2222.472599][ T969] netlink: 'syz.2.43156': attribute type 1 has an invalid length. [ 2222.493968][ T969] netlink: 6 bytes leftover after parsing attributes in process `syz.2.43156'. [ 2224.755938][ T978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2224.766635][ T983] sctp: [Deprecated]: syz.2.43162 (pid 983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2224.766635][ T983] Use struct sctp_sack_info instead [ 2225.030562][ T997] mac80211_hwsim hwsim121 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2225.097819][ T999] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.43168'. [ 2225.111407][ T999] netlink: 'syz.0.43168': attribute type 1 has an invalid length. [ 2225.121046][ T999] netlink: 'syz.0.43168': attribute type 2 has an invalid length. [ 2225.129255][ T999] netlink: 96 bytes leftover after parsing attributes in process `syz.0.43168'. [ 2225.308239][ T1011] mac80211_hwsim hwsim117 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2225.319896][ T1006] netlink: 'syz.1.43171': attribute type 17 has an invalid length. [ 2225.366050][ T1014] mac80211_hwsim hwsim125 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2225.716072][ T1028] netlink: 205108 bytes leftover after parsing attributes in process `syz.1.43181'. [ 2225.798227][ T1028] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2225.812769][ T1028] CPU: 1 PID: 1028 Comm: syz.1.43181 Not tainted syzkaller #0 [ 2225.820283][ T1028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2225.830381][ T1028] Call Trace: [ 2225.833691][ T1028] [ 2225.836659][ T1028] dump_stack_lvl+0x188/0x250 [ 2225.841388][ T1028] ? show_regs_print_info+0x20/0x20 [ 2225.846630][ T1028] ? load_image+0x410/0x410 [ 2225.851219][ T1028] sysfs_warn_dup+0x8a/0xa0 [ 2225.855759][ T1028] sysfs_do_create_link_sd+0xc0/0x110 [ 2225.861181][ T1028] device_add+0x83b/0x1050 [ 2225.865663][ T1028] wiphy_register+0x1e74/0x2c40 [ 2225.870614][ T1028] ? cfg80211_event_work+0x40/0x40 [ 2225.875769][ T1028] ? minstrel_ht_alloc+0x807/0x980 [ 2225.880941][ T1028] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2225.887070][ T1028] ieee80211_register_hw+0x2a03/0x3a60 [ 2225.892594][ T1028] ? ieee80211_register_hw+0xae1/0x3a60 [ 2225.898229][ T1028] ? ieee80211_tasklet_handler+0x20/0x20 [ 2225.903966][ T1028] ? rcu_is_watching+0x11/0xa0 [ 2225.908795][ T1028] ? hrtimer_init+0x10c/0x220 [ 2225.913532][ T1028] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2225.919359][ T1028] hwsim_new_radio_nl+0xa7d/0xc50 [ 2225.924488][ T1028] genl_rcv_msg+0xd0b/0xfa0 [ 2225.929096][ T1028] ? genl_bind+0x370/0x370 [ 2225.933586][ T1028] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 2225.939449][ T1028] ? verify_lock_unused+0x140/0x140 [ 2225.944692][ T1028] ? perf_trace_lock_acquire+0x341/0x3f0 [ 2225.950397][ T1028] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2225.957031][ T1028] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2225.963670][ T1028] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2225.970122][ T1028] netlink_rcv_skb+0x1e9/0x430 [ 2225.974955][ T1028] ? genl_bind+0x370/0x370 [ 2225.979431][ T1028] ? netlink_ack+0xb10/0xb10 [ 2225.984111][ T1028] ? down_read+0x1aa/0x2e0 [ 2225.988596][ T1028] genl_rcv+0x24/0x40 [ 2225.992617][ T1028] netlink_unicast+0x78f/0x940 [ 2225.997460][ T1028] netlink_sendmsg+0x8ba/0xbe0 [ 2226.002309][ T1028] ? netlink_getsockopt+0x570/0x570 [ 2226.007550][ T1028] ? aa_sock_msg_perm+0x94/0x150 [ 2226.012538][ T1028] ? apparmor_socket_sendmsg+0x88/0x230 [ 2226.018126][ T1028] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2226.023449][ T1028] ? security_socket_sendmsg+0x7c/0xa0 [ 2226.028980][ T1028] ? netlink_getsockopt+0x570/0x570 [ 2226.034297][ T1028] ____sys_sendmsg+0x5be/0x8f0 [ 2226.039130][ T1028] ? __sys_sendmsg_sock+0x30/0x30 [ 2226.044250][ T1028] ? import_iovec+0x6f/0xa0 [ 2226.048801][ T1028] ___sys_sendmsg+0x236/0x2e0 [ 2226.053519][ T1028] ? __sys_sendmsg+0x290/0x290 [ 2226.058420][ T1028] __se_sys_sendmsg+0x1b7/0x2a0 [ 2226.063302][ T1028] ? __x64_sys_sendmsg+0x80/0x80 [ 2226.068279][ T1028] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2226.074339][ T1028] ? lockdep_hardirqs_on+0x94/0x140 [ 2226.079579][ T1028] do_syscall_64+0x4c/0xa0 [ 2226.084009][ T1028] ? clear_bhb_loop+0x30/0x80 [ 2226.088838][ T1028] ? clear_bhb_loop+0x30/0x80 [ 2226.093559][ T1028] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2226.099478][ T1028] RIP: 0033:0x7f340b4ea0d9 [ 2226.103920][ T1028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2226.123571][ T1028] RSP: 002b:00007f3409742028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2226.132011][ T1028] RAX: ffffffffffffffda RBX: 00007f340b771fa0 RCX: 00007f340b4ea0d9 [ 2226.139998][ T1028] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2226.147985][ T1028] RBP: 00007f340b581024 R08: 0000000000000000 R09: 0000000000000000 [ 2226.155971][ T1028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2226.163952][ T1028] R13: 00007f340b772038 R14: 00007f340b771fa0 R15: 00007ffe1a287388 [ 2226.171995][ T1028] [ 2226.451459][ T1042] sctp: [Deprecated]: syz.1.43185 (pid 1042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2226.451459][ T1042] Use struct sctp_sack_info instead [ 2226.601506][ T1051] mac80211_hwsim hwsim121 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2226.655457][ T1056] mac80211_hwsim hwsim117 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2226.913712][ T1084] netlink: 'syz.2.43198': attribute type 21 has an invalid length. [ 2226.923182][ T1084] netlink: 156 bytes leftover after parsing attributes in process `syz.2.43198'. [ 2227.426717][ T1102] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.43204'. [ 2227.462723][ T1102] netlink: 'syz.3.43204': attribute type 1 has an invalid length. [ 2227.472237][ T1102] netlink: 'syz.3.43204': attribute type 2 has an invalid length. [ 2227.480622][ T1102] netlink: 96 bytes leftover after parsing attributes in process `syz.3.43204'. [ 2227.526675][ T1094] mac80211_hwsim hwsim123 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2228.286383][ T1132] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.43215'. [ 2228.317120][ T1133] mac80211_hwsim hwsim125 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2228.332863][ T1132] netlink: 'syz.1.43215': attribute type 1 has an invalid length. [ 2228.372737][ T1132] netlink: 'syz.1.43215': attribute type 2 has an invalid length. [ 2228.393402][ T1132] netlink: 96 bytes leftover after parsing attributes in process `syz.1.43215'. [ 2228.652983][T19325] wlan1: Trigger new scan to find an IBSS to join [ 2229.808696][ T1153] netlink: 'syz.0.43220': attribute type 21 has an invalid length. [ 2229.826203][ T1153] netlink: 156 bytes leftover after parsing attributes in process `syz.0.43220'. [ 2230.066065][ T1181] mac80211_hwsim hwsim117 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2230.244649][ T1193] netlink: 'syz.3.43241': attribute type 17 has an invalid length. [ 2231.563878][ T1223] netlink: 'syz.1.43244': attribute type 21 has an invalid length. [ 2231.572373][ T1223] netlink: 156 bytes leftover after parsing attributes in process `syz.1.43244'. [ 2231.647811][ T1228] sctp: [Deprecated]: syz.3.43246 (pid 1228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2231.647811][ T1228] Use struct sctp_sack_info instead [ 2232.244521][ T1234] netlink: 'syz.0.43247': attribute type 17 has an invalid length. [ 2232.572609][T26995] wlan1: Trigger new scan to find an IBSS to join [ 2234.050235][ T1264] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2234.390519][ T1282] netlink: 'syz.2.43265': attribute type 17 has an invalid length. [ 2234.435701][ T1285] mac80211_hwsim hwsim125 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2234.572777][T19325] wlan1: Creating new IBSS network, BSSID 4a:5d:0a:37:f0:c1 [ 2234.580581][ T6172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2234.636990][ T1299] mac80211_hwsim hwsim123 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2234.948495][ T1310] netlink: 'syz.0.43280': attribute type 10 has an invalid length. [ 2235.185158][ T1325] netlink: 'syz.0.43296': attribute type 3 has an invalid length. [ 2235.207412][ T1331] netlink: 'syz.4.43286': attribute type 17 has an invalid length. [ 2235.209899][ T1325] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.43296'. [ 2235.967899][ T1357] netlink: 'syz.0.43298': attribute type 10 has an invalid length. [ 2236.012534][ T1357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.43298'. [ 2236.523263][ T1371] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2236.530673][ T1371] IPv6: NLM_F_CREATE should be set when creating new route [ 2236.875864][ T1387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2237.168309][ T1408] netlink: 'syz.1.43317': attribute type 3 has an invalid length. [ 2237.214264][ T1408] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.43317'. [ 2237.914212][ T1435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2238.247530][ T1453] netlink: 'syz.3.43339': attribute type 3 has an invalid length. [ 2238.301316][ T1453] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.43339'. [ 2239.090149][ T1475] netlink: 'syz.4.43348': attribute type 27 has an invalid length. [ 2239.518723][ T1494] netlink: 'syz.2.43355': attribute type 3 has an invalid length. [ 2239.530973][ T1494] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.43355'. [ 2240.526764][ T1524] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.43368'. [ 2240.587722][ T1529] netlink: 'syz.4.43368': attribute type 9 has an invalid length. [ 2240.599675][ T1529] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.43368'. [ 2240.754178][ T1530] netlink: 'syz.1.43370': attribute type 27 has an invalid length. [ 2240.911719][ T1533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2240.948315][ T1524] netlink: 'syz.4.43368': attribute type 9 has an invalid length. [ 2240.989471][ T1524] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.43368'. [ 2242.344257][ T1570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2243.357376][ T1609] netlink: 'syz.4.43399': attribute type 10 has an invalid length. [ 2243.411681][ T1611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2243.518570][ T1616] netlink: 'syz.4.43403': attribute type 16 has an invalid length. [ 2243.560160][ T1616] netlink: 168 bytes leftover after parsing attributes in process `syz.4.43403'. [ 2243.601361][ T1616] netlink: 'syz.4.43403': attribute type 10 has an invalid length. [ 2243.610662][ T1616] netlink: 168 bytes leftover after parsing attributes in process `syz.4.43403'. [ 2243.998913][ T1646] netlink: 'syz.1.43414': attribute type 10 has an invalid length. [ 2244.153588][ T1654] mac80211_hwsim hwsim123 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2244.590353][ T1669] netlink: 'syz.3.43424': attribute type 16 has an invalid length. [ 2244.614571][ T1669] netlink: 168 bytes leftover after parsing attributes in process `syz.3.43424'. [ 2244.641445][ T1672] netlink: 'syz.3.43424': attribute type 10 has an invalid length. [ 2244.658198][ T1672] netlink: 168 bytes leftover after parsing attributes in process `syz.3.43424'. [ 2244.960275][ T1678] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.43439'. [ 2244.993630][ T1680] netlink: 'syz.3.43430': attribute type 10 has an invalid length. [ 2245.010246][ T1685] netlink: 'syz.0.43439': attribute type 9 has an invalid length. [ 2245.026268][ T1684] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2245.048871][ T1685] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.43439'. [ 2245.244805][ T1678] netlink: 'syz.0.43439': attribute type 9 has an invalid length. [ 2245.283823][ T1678] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.43439'. [ 2246.317067][ T1716] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.43442'. [ 2246.510122][ T1716] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2246.519593][ T1716] CPU: 1 PID: 1716 Comm: syz.1.43442 Not tainted syzkaller #0 [ 2246.527097][ T1716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2246.537179][ T1716] Call Trace: [ 2246.540504][ T1716] [ 2246.543472][ T1716] dump_stack_lvl+0x188/0x250 [ 2246.548174][ T1716] ? show_regs_print_info+0x20/0x20 [ 2246.553409][ T1716] ? load_image+0x410/0x410 [ 2246.557984][ T1716] sysfs_warn_dup+0x8a/0xa0 [ 2246.562516][ T1716] sysfs_do_create_link_sd+0xc0/0x110 [ 2246.567940][ T1716] device_add+0x83b/0x1050 [ 2246.572431][ T1716] wiphy_register+0x1e74/0x2c40 [ 2246.577354][ T1716] ? cfg80211_event_work+0x40/0x40 [ 2246.582520][ T1716] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2246.588643][ T1716] ieee80211_register_hw+0x2a03/0x3a60 [ 2246.594142][ T1716] ? ieee80211_register_hw+0xae1/0x3a60 [ 2246.599787][ T1716] ? ieee80211_tasklet_handler+0x20/0x20 [ 2246.605479][ T1716] ? rcu_is_watching+0x11/0xa0 [ 2246.610271][ T1716] ? hrtimer_init+0x10c/0x220 [ 2246.615009][ T1716] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2246.620825][ T1716] hwsim_new_radio_nl+0xa7d/0xc50 [ 2246.625904][ T1716] genl_rcv_msg+0xd0b/0xfa0 [ 2246.630449][ T1716] ? genl_bind+0x370/0x370 [ 2246.634927][ T1716] ? verify_lock_unused+0x140/0x140 [ 2246.640187][ T1716] ? perf_trace_lock_acquire+0xed/0x3f0 [ 2246.645788][ T1716] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2246.652402][ T1716] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2246.658778][ T1716] netlink_rcv_skb+0x1e9/0x430 [ 2246.663582][ T1716] ? genl_bind+0x370/0x370 [ 2246.668011][ T1716] ? netlink_ack+0xb10/0xb10 [ 2246.672640][ T1716] ? down_read+0x1aa/0x2e0 [ 2246.677132][ T1716] genl_rcv+0x24/0x40 [ 2246.681179][ T1716] netlink_unicast+0x78f/0x940 [ 2246.686007][ T1716] netlink_sendmsg+0x8ba/0xbe0 [ 2246.690826][ T1716] ? netlink_getsockopt+0x570/0x570 [ 2246.696052][ T1716] ? aa_sock_msg_perm+0x94/0x150 [ 2246.701058][ T1716] ? apparmor_socket_sendmsg+0x88/0x230 [ 2246.706659][ T1716] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2246.711990][ T1716] ? security_socket_sendmsg+0x7c/0xa0 [ 2246.717492][ T1716] ? netlink_getsockopt+0x570/0x570 [ 2246.722733][ T1716] ____sys_sendmsg+0x5be/0x8f0 [ 2246.727547][ T1716] ? __sys_sendmsg_sock+0x30/0x30 [ 2246.732621][ T1716] ? import_iovec+0x6f/0xa0 [ 2246.737170][ T1716] ___sys_sendmsg+0x236/0x2e0 [ 2246.741897][ T1716] ? __sys_sendmsg+0x290/0x290 [ 2246.746724][ T1716] ? trace_event_raw_event_lock+0x250/0x250 [ 2246.752710][ T1716] __se_sys_sendmsg+0x1b7/0x2a0 [ 2246.757604][ T1716] ? __x64_sys_sendmsg+0x80/0x80 [ 2246.762579][ T1716] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2246.768630][ T1716] ? lockdep_hardirqs_on+0x94/0x140 [ 2246.773878][ T1716] do_syscall_64+0x4c/0xa0 [ 2246.778318][ T1716] ? clear_bhb_loop+0x30/0x80 [ 2246.783026][ T1716] ? clear_bhb_loop+0x30/0x80 [ 2246.787769][ T1716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2246.793699][ T1716] RIP: 0033:0x7f340b4ea0d9 [ 2246.798163][ T1716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2246.817798][ T1716] RSP: 002b:00007f3409742028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2246.826235][ T1716] RAX: ffffffffffffffda RBX: 00007f340b771fa0 RCX: 00007f340b4ea0d9 [ 2246.834235][ T1716] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2246.842249][ T1716] RBP: 00007f340b581024 R08: 0000000000000000 R09: 0000000000000000 [ 2246.850236][ T1716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2246.858216][ T1716] R13: 00007f340b772038 R14: 00007f340b771fa0 R15: 00007ffe1a287388 [ 2246.866224][ T1716] [ 2247.156582][ T1739] netlink: 'syz.0.43449': attribute type 10 has an invalid length. [ 2247.196334][ T1741] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.43452'. [ 2247.240807][ T1741] netlink: 'syz.2.43452': attribute type 9 has an invalid length. [ 2247.263285][ T1741] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.43452'. [ 2247.572232][ T1747] netlink: 'syz.2.43452': attribute type 9 has an invalid length. [ 2247.811541][ T1765] netlink: 'syz.0.43461': attribute type 16 has an invalid length. [ 2247.824090][ T1765] netlink: 'syz.0.43461': attribute type 10 has an invalid length. [ 2248.769567][ T1811] __nla_validate_parse: 6 callbacks suppressed [ 2248.769616][ T1811] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.43480'. [ 2248.796213][ T1815] netlink: 168 bytes leftover after parsing attributes in process `syz.1.43475'. [ 2248.846306][ T1815] netlink: 168 bytes leftover after parsing attributes in process `syz.1.43475'. [ 2248.989046][ T1823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2249.318076][ T1838] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.43492'. [ 2249.437391][ T1838] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2249.456349][ T1838] CPU: 1 PID: 1838 Comm: syz.2.43492 Not tainted syzkaller #0 [ 2249.463971][ T1838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2249.474140][ T1838] Call Trace: [ 2249.477473][ T1838] [ 2249.480549][ T1838] dump_stack_lvl+0x188/0x250 [ 2249.485289][ T1838] ? show_regs_print_info+0x20/0x20 [ 2249.490535][ T1838] ? load_image+0x410/0x410 [ 2249.495104][ T1838] sysfs_warn_dup+0x8a/0xa0 [ 2249.499655][ T1838] sysfs_do_create_link_sd+0xc0/0x110 [ 2249.505067][ T1838] device_add+0x83b/0x1050 [ 2249.509543][ T1838] wiphy_register+0x1e74/0x2c40 [ 2249.514481][ T1838] ? cfg80211_event_work+0x40/0x40 [ 2249.519660][ T1838] ? minstrel_ht_alloc+0x807/0x980 [ 2249.524841][ T1838] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2249.531080][ T1838] ieee80211_register_hw+0x2a03/0x3a60 [ 2249.536588][ T1838] ? ieee80211_register_hw+0xae1/0x3a60 [ 2249.542189][ T1838] ? ieee80211_tasklet_handler+0x20/0x20 [ 2249.547882][ T1838] ? rcu_is_watching+0x11/0xa0 [ 2249.552697][ T1838] ? hrtimer_init+0x10c/0x220 [ 2249.557411][ T1838] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2249.563177][ T1838] hwsim_new_radio_nl+0xa7d/0xc50 [ 2249.568238][ T1838] genl_rcv_msg+0xd0b/0xfa0 [ 2249.572781][ T1838] ? genl_bind+0x370/0x370 [ 2249.577223][ T1838] ? mark_lock+0x94/0x320 [ 2249.581569][ T1838] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2249.587584][ T1838] ? lock_chain_count+0x20/0x20 [ 2249.592480][ T1838] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2249.598647][ T1838] ? lockdep_hardirqs_on+0x94/0x140 [ 2249.603864][ T1838] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2249.610234][ T1838] netlink_rcv_skb+0x1e9/0x430 [ 2249.615014][ T1838] ? genl_bind+0x370/0x370 [ 2249.619451][ T1838] ? netlink_ack+0xb10/0xb10 [ 2249.624067][ T1838] ? down_read+0x1aa/0x2e0 [ 2249.628497][ T1838] genl_rcv+0x24/0x40 [ 2249.632490][ T1838] netlink_unicast+0x78f/0x940 [ 2249.637289][ T1838] netlink_sendmsg+0x8ba/0xbe0 [ 2249.642080][ T1838] ? netlink_getsockopt+0x570/0x570 [ 2249.647306][ T1838] ? netlink_getsockopt+0x570/0x570 [ 2249.652521][ T1838] ____sys_sendmsg+0x5be/0x8f0 [ 2249.657312][ T1838] ? __sys_sendmsg_sock+0x30/0x30 [ 2249.662377][ T1838] ? import_iovec+0x6f/0xa0 [ 2249.666904][ T1838] ___sys_sendmsg+0x236/0x2e0 [ 2249.671610][ T1838] ? __sys_sendmsg+0x290/0x290 [ 2249.676391][ T1838] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2249.682427][ T1838] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2249.688752][ T1838] ? lockdep_hardirqs_on+0x94/0x140 [ 2249.693984][ T1838] ? __se_sys_sendmsg+0xe2/0x2a0 [ 2249.698942][ T1838] ? kasan_check_range+0x80/0x290 [ 2249.703990][ T1838] __se_sys_sendmsg+0x1b7/0x2a0 [ 2249.708859][ T1838] ? __x64_sys_sendmsg+0x80/0x80 [ 2249.713843][ T1838] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2249.719756][ T1838] do_syscall_64+0x4c/0xa0 [ 2249.724179][ T1838] ? clear_bhb_loop+0x30/0x80 [ 2249.728912][ T1838] ? clear_bhb_loop+0x30/0x80 [ 2249.733618][ T1838] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2249.739524][ T1838] RIP: 0033:0x7fb9b22c50d9 [ 2249.743962][ T1838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2249.763590][ T1838] RSP: 002b:00007fb9b051d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2249.772031][ T1838] RAX: ffffffffffffffda RBX: 00007fb9b254cfa0 RCX: 00007fb9b22c50d9 [ 2249.780020][ T1838] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2249.788011][ T1838] RBP: 00007fb9b235c024 R08: 0000000000000000 R09: 0000000000000000 [ 2249.795993][ T1838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2249.803987][ T1838] R13: 00007fb9b254d038 R14: 00007fb9b254cfa0 R15: 00007ffec75df448 [ 2249.812003][ T1838] [ 2250.308875][ T1864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2250.558936][ T1875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2250.766324][ T1889] validate_nla: 6 callbacks suppressed [ 2250.766353][ T1889] netlink: 'syz.2.43510': attribute type 16 has an invalid length. [ 2250.841245][ T1889] netlink: 168 bytes leftover after parsing attributes in process `syz.2.43510'. [ 2250.920759][ T1889] netlink: 'syz.2.43510': attribute type 10 has an invalid length. [ 2250.970680][ T1889] netlink: 168 bytes leftover after parsing attributes in process `syz.2.43510'. [ 2251.226338][ T1911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2251.745906][ T1936] netlink: 'syz.3.43531': attribute type 16 has an invalid length. [ 2251.766355][ T1936] netlink: 168 bytes leftover after parsing attributes in process `syz.3.43531'. [ 2251.819531][ T1936] netlink: 'syz.3.43531': attribute type 10 has an invalid length. [ 2251.842000][ T1936] netlink: 168 bytes leftover after parsing attributes in process `syz.3.43531'. [ 2251.991532][ T1946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2252.197924][ T1955] netlink: 'syz.3.43539': attribute type 10 has an invalid length. [ 2253.345813][ T2023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2253.373420][ T2025] mac80211_hwsim hwsim123 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2254.069554][ T2053] mac80211_hwsim hwsim121 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2254.153161][ T2054] netlink: 'syz.0.43581': attribute type 16 has an invalid length. [ 2254.172196][ T2054] netlink: 168 bytes leftover after parsing attributes in process `syz.0.43581'. [ 2254.230820][ T2061] netlink: 'syz.0.43581': attribute type 10 has an invalid length. [ 2254.249471][ T2061] netlink: 168 bytes leftover after parsing attributes in process `syz.0.43581'. [ 2254.587994][ T2078] netlink: 'syz.1.43591': attribute type 10 has an invalid length. [ 2254.714064][ T2086] mac80211_hwsim hwsim125 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2255.067399][ T2100] netlink: 'syz.1.43599': attribute type 16 has an invalid length. [ 2255.094874][ T2100] netlink: 168 bytes leftover after parsing attributes in process `syz.1.43599'. [ 2255.141547][ T2103] netlink: 'syz.1.43599': attribute type 10 has an invalid length. [ 2255.150211][ T2103] netlink: 168 bytes leftover after parsing attributes in process `syz.1.43599'. [ 2255.315564][ T2112] netlink: 156 bytes leftover after parsing attributes in process `syz.2.43605'. [ 2255.858523][ T2138] validate_nla: 1 callbacks suppressed [ 2255.858539][ T2138] netlink: 'syz.2.43617': attribute type 10 has an invalid length. [ 2256.122680][ T2146] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.43620'. [ 2256.196658][ T2146] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2256.213777][ T2146] CPU: 1 PID: 2146 Comm: syz.0.43620 Not tainted syzkaller #0 [ 2256.221288][ T2146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2256.231363][ T2146] Call Trace: [ 2256.234664][ T2146] [ 2256.237626][ T2146] dump_stack_lvl+0x188/0x250 [ 2256.242340][ T2146] ? show_regs_print_info+0x20/0x20 [ 2256.247568][ T2146] ? load_image+0x410/0x410 [ 2256.252125][ T2146] sysfs_warn_dup+0x8a/0xa0 [ 2256.256659][ T2146] sysfs_do_create_link_sd+0xc0/0x110 [ 2256.262078][ T2146] device_add+0x83b/0x1050 [ 2256.266529][ T2146] wiphy_register+0x1e74/0x2c40 [ 2256.271416][ T2146] ? cfg80211_event_work+0x40/0x40 [ 2256.276542][ T2146] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2256.282723][ T2146] ? ieee80211_register_hw+0x23d6/0x3a60 [ 2256.288374][ T2146] ieee80211_register_hw+0x2a03/0x3a60 [ 2256.293854][ T2146] ? ieee80211_register_hw+0xae1/0x3a60 [ 2256.299428][ T2146] ? ieee80211_tasklet_handler+0x20/0x20 [ 2256.305143][ T2146] ? rcu_is_watching+0x11/0xa0 [ 2256.309940][ T2146] ? hrtimer_init+0x10c/0x220 [ 2256.314648][ T2146] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2256.320423][ T2146] hwsim_new_radio_nl+0xa7d/0xc50 [ 2256.325478][ T2146] genl_rcv_msg+0xd0b/0xfa0 [ 2256.330013][ T2146] ? genl_bind+0x370/0x370 [ 2256.334463][ T2146] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2256.340208][ T2146] ? verify_lock_unused+0x140/0x140 [ 2256.345453][ T2146] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2256.351190][ T2146] ? perf_trace_lock+0x301/0x390 [ 2256.356153][ T2146] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2256.362515][ T2146] netlink_rcv_skb+0x1e9/0x430 [ 2256.367316][ T2146] ? genl_bind+0x370/0x370 [ 2256.371753][ T2146] ? netlink_ack+0xb10/0xb10 [ 2256.376373][ T2146] ? down_read+0x1aa/0x2e0 [ 2256.380809][ T2146] genl_rcv+0x24/0x40 [ 2256.384806][ T2146] netlink_unicast+0x78f/0x940 [ 2256.389606][ T2146] netlink_sendmsg+0x8ba/0xbe0 [ 2256.394387][ T2146] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2256.400598][ T2146] ? netlink_getsockopt+0x570/0x570 [ 2256.405831][ T2146] ? apparmor_socket_sendmsg+0x88/0x230 [ 2256.411394][ T2146] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2256.416685][ T2146] ? security_socket_sendmsg+0x7c/0xa0 [ 2256.422158][ T2146] ? netlink_getsockopt+0x570/0x570 [ 2256.427370][ T2146] ____sys_sendmsg+0x5be/0x8f0 [ 2256.432155][ T2146] ? __sys_sendmsg_sock+0x30/0x30 [ 2256.437205][ T2146] ? import_iovec+0x6f/0xa0 [ 2256.441728][ T2146] ___sys_sendmsg+0x236/0x2e0 [ 2256.446518][ T2146] ? __sys_sendmsg+0x290/0x290 [ 2256.451358][ T2146] __se_sys_sendmsg+0x1b7/0x2a0 [ 2256.456232][ T2146] ? __x64_sys_sendmsg+0x80/0x80 [ 2256.461174][ T2146] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2256.467188][ T2146] ? lockdep_hardirqs_on+0x94/0x140 [ 2256.472422][ T2146] do_syscall_64+0x4c/0xa0 [ 2256.476939][ T2146] ? clear_bhb_loop+0x30/0x80 [ 2256.481627][ T2146] ? clear_bhb_loop+0x30/0x80 [ 2256.486330][ T2146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2256.492242][ T2146] RIP: 0033:0x7f2c180aa0d9 [ 2256.496678][ T2146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2256.516295][ T2146] RSP: 002b:00007f2c16302028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2256.524728][ T2146] RAX: ffffffffffffffda RBX: 00007f2c18331fa0 RCX: 00007f2c180aa0d9 [ 2256.532717][ T2146] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2256.540708][ T2146] RBP: 00007f2c18141024 R08: 0000000000000000 R09: 0000000000000000 [ 2256.548698][ T2146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2256.556697][ T2146] R13: 00007f2c18332038 R14: 00007f2c18331fa0 R15: 00007fffb2992718 [ 2256.564718][ T2146] [ 2256.652774][ T830] wlan1: Trigger new scan to find an IBSS to join [ 2256.973199][ T2171] netlink: 'syz.1.43629': attribute type 10 has an invalid length. [ 2257.358260][ T2192] netlink: 132 bytes leftover after parsing attributes in process `syz.3.43639'. [ 2257.466986][ T2197] netdevsim netdevsim2: Direct firmware load for Ö failed with error -2 [ 2257.482692][ T2197] netdevsim netdevsim2: Falling back to sysfs fallback for: Ö [ 2257.731080][ T2212] mac80211_hwsim hwsim123 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2257.765049][ T2205] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.43642'. [ 2257.814283][ T2205] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2257.824760][ T2205] CPU: 0 PID: 2205 Comm: syz.3.43642 Not tainted syzkaller #0 [ 2257.832308][ T2205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2257.842395][ T2205] Call Trace: [ 2257.845703][ T2205] [ 2257.848689][ T2205] dump_stack_lvl+0x188/0x250 [ 2257.853437][ T2205] ? show_regs_print_info+0x20/0x20 [ 2257.858680][ T2205] ? load_image+0x410/0x410 [ 2257.863359][ T2205] sysfs_warn_dup+0x8a/0xa0 [ 2257.867898][ T2205] sysfs_do_create_link_sd+0xc0/0x110 [ 2257.873306][ T2205] device_add+0x83b/0x1050 [ 2257.877766][ T2205] wiphy_register+0x1e74/0x2c40 [ 2257.882694][ T2205] ? cfg80211_event_work+0x40/0x40 [ 2257.887842][ T2205] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2257.894137][ T2205] ? ieee80211_register_hw+0x2729/0x3a60 [ 2257.900512][ T2205] ieee80211_register_hw+0x2a03/0x3a60 [ 2257.906029][ T2205] ? ieee80211_register_hw+0xae1/0x3a60 [ 2257.911626][ T2205] ? ieee80211_tasklet_handler+0x20/0x20 [ 2257.917302][ T2205] ? rcu_is_watching+0x11/0xa0 [ 2257.922107][ T2205] ? hrtimer_init+0x10c/0x220 [ 2257.926825][ T2205] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2257.932616][ T2205] hwsim_new_radio_nl+0xa7d/0xc50 [ 2257.937707][ T2205] genl_rcv_msg+0xd0b/0xfa0 [ 2257.942300][ T2205] ? genl_bind+0x370/0x370 [ 2257.946748][ T2205] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 2257.952711][ T2205] ? verify_lock_unused+0x140/0x140 [ 2257.957955][ T2205] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2257.963720][ T2205] ? perf_trace_lock+0x301/0x390 [ 2257.968702][ T2205] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2257.975105][ T2205] netlink_rcv_skb+0x1e9/0x430 [ 2257.979925][ T2205] ? genl_bind+0x370/0x370 [ 2257.984394][ T2205] ? netlink_ack+0xb10/0xb10 [ 2257.989055][ T2205] ? down_read+0x1aa/0x2e0 [ 2257.993514][ T2205] genl_rcv+0x24/0x40 [ 2257.997533][ T2205] netlink_unicast+0x78f/0x940 [ 2258.002354][ T2205] netlink_sendmsg+0x8ba/0xbe0 [ 2258.007177][ T2205] ? netlink_getsockopt+0x570/0x570 [ 2258.012416][ T2205] ? aa_sock_msg_perm+0x94/0x150 [ 2258.017397][ T2205] ? apparmor_socket_sendmsg+0x88/0x230 [ 2258.022983][ T2205] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2258.028299][ T2205] ? security_socket_sendmsg+0x7c/0xa0 [ 2258.033812][ T2205] ? netlink_getsockopt+0x570/0x570 [ 2258.039048][ T2205] ____sys_sendmsg+0x5be/0x8f0 [ 2258.043888][ T2205] ? __sys_sendmsg_sock+0x30/0x30 [ 2258.048967][ T2205] ? import_iovec+0x6f/0xa0 [ 2258.053512][ T2205] ___sys_sendmsg+0x236/0x2e0 [ 2258.058265][ T2205] ? __sys_sendmsg+0x290/0x290 [ 2258.063059][ T2205] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2258.069098][ T2205] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2258.075308][ T2205] ? lockdep_hardirqs_on+0x94/0x140 [ 2258.080723][ T2205] ? __se_sys_sendmsg+0xe2/0x2a0 [ 2258.085719][ T2205] ? kasan_check_range+0x80/0x290 [ 2258.090790][ T2205] __se_sys_sendmsg+0x1b7/0x2a0 [ 2258.095675][ T2205] ? __x64_sys_sendmsg+0x80/0x80 [ 2258.100635][ T2205] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2258.106686][ T2205] ? lockdep_hardirqs_on+0x94/0x140 [ 2258.111966][ T2205] do_syscall_64+0x4c/0xa0 [ 2258.116406][ T2205] ? clear_bhb_loop+0x30/0x80 [ 2258.121107][ T2205] ? clear_bhb_loop+0x30/0x80 [ 2258.125811][ T2205] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2258.131749][ T2205] RIP: 0033:0x7ff2cc7a30d9 [ 2258.136192][ T2205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2258.155831][ T2205] RSP: 002b:00007ff2ca9fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2258.164283][ T2205] RAX: ffffffffffffffda RBX: 00007ff2cca2afa0 RCX: 00007ff2cc7a30d9 [ 2258.172291][ T2205] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2258.180295][ T2205] RBP: 00007ff2cc83a024 R08: 0000000000000000 R09: 0000000000000000 [ 2258.188298][ T2205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2258.196300][ T2205] R13: 00007ff2cca2b038 R14: 00007ff2cca2afa0 R15: 00007fff649f1e98 [ 2258.204353][ T2205] [ 2258.967129][ T2242] netlink: 132 bytes leftover after parsing attributes in process `syz.1.43656'. [ 2259.131973][ T2254] netlink: 'syz.4.43666': attribute type 2 has an invalid length. [ 2259.166304][ T2254] netlink: 14 bytes leftover after parsing attributes in process `syz.4.43666'. [ 2259.306700][ T2262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2259.559297][ T2275] netlink: 132 bytes leftover after parsing attributes in process `syz.2.43676'. [ 2260.003175][ T2295] netlink: 'syz.3.43681': attribute type 2 has an invalid length. [ 2260.055672][ T2291] netlink: 14 bytes leftover after parsing attributes in process `syz.3.43681'. [ 2260.573190][ T6172] wlan1: Trigger new scan to find an IBSS to join [ 2261.136353][ T2322] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.43689'. [ 2261.204985][ T2322] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2261.218802][ T2322] CPU: 1 PID: 2322 Comm: syz.4.43689 Not tainted syzkaller #0 [ 2261.226328][ T2322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2261.236412][ T2322] Call Trace: [ 2261.239723][ T2322] [ 2261.242694][ T2322] dump_stack_lvl+0x188/0x250 [ 2261.247420][ T2322] ? show_regs_print_info+0x20/0x20 [ 2261.252656][ T2322] ? load_image+0x410/0x410 [ 2261.257226][ T2322] sysfs_warn_dup+0x8a/0xa0 [ 2261.261766][ T2322] sysfs_do_create_link_sd+0xc0/0x110 [ 2261.267180][ T2322] device_add+0x83b/0x1050 [ 2261.271638][ T2322] wiphy_register+0x1e74/0x2c40 [ 2261.276526][ T2322] ? cfg80211_event_work+0x40/0x40 [ 2261.281658][ T2322] ? minstrel_ht_alloc+0x807/0x980 [ 2261.286814][ T2322] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2261.292904][ T2322] ieee80211_register_hw+0x2a03/0x3a60 [ 2261.298398][ T2322] ? ieee80211_register_hw+0xae1/0x3a60 [ 2261.304403][ T2322] ? ieee80211_tasklet_handler+0x20/0x20 [ 2261.310075][ T2322] ? rcu_is_watching+0x11/0xa0 [ 2261.314863][ T2322] ? hrtimer_init+0x10c/0x220 [ 2261.319593][ T2322] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2261.325373][ T2322] hwsim_new_radio_nl+0xa7d/0xc50 [ 2261.330434][ T2322] genl_rcv_msg+0xd0b/0xfa0 [ 2261.334972][ T2322] ? genl_bind+0x370/0x370 [ 2261.339432][ T2322] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2261.345186][ T2322] ? verify_lock_unused+0x140/0x140 [ 2261.350412][ T2322] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2261.356154][ T2322] ? perf_trace_lock+0x301/0x390 [ 2261.361141][ T2322] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2261.367508][ T2322] netlink_rcv_skb+0x1e9/0x430 [ 2261.372416][ T2322] ? genl_bind+0x370/0x370 [ 2261.376861][ T2322] ? netlink_ack+0xb10/0xb10 [ 2261.381487][ T2322] ? down_read+0x1aa/0x2e0 [ 2261.385921][ T2322] genl_rcv+0x24/0x40 [ 2261.389913][ T2322] netlink_unicast+0x78f/0x940 [ 2261.394717][ T2322] netlink_sendmsg+0x8ba/0xbe0 [ 2261.400122][ T2322] ? netlink_getsockopt+0x570/0x570 [ 2261.405355][ T2322] ? aa_sock_msg_perm+0x94/0x150 [ 2261.410320][ T2322] ? apparmor_socket_sendmsg+0x88/0x230 [ 2261.415885][ T2322] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2261.421204][ T2322] ? security_socket_sendmsg+0x7c/0xa0 [ 2261.426671][ T2322] ? netlink_getsockopt+0x570/0x570 [ 2261.431888][ T2322] ____sys_sendmsg+0x5be/0x8f0 [ 2261.436681][ T2322] ? __sys_sendmsg_sock+0x30/0x30 [ 2261.441728][ T2322] ? import_iovec+0x6f/0xa0 [ 2261.446252][ T2322] ___sys_sendmsg+0x236/0x2e0 [ 2261.450954][ T2322] ? __sys_sendmsg+0x290/0x290 [ 2261.455768][ T2322] ? trace_event_raw_event_lock+0x250/0x250 [ 2261.461717][ T2322] __se_sys_sendmsg+0x1b7/0x2a0 [ 2261.466594][ T2322] ? __x64_sys_sendmsg+0x80/0x80 [ 2261.471669][ T2322] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2261.477582][ T2322] do_syscall_64+0x4c/0xa0 [ 2261.482011][ T2322] ? clear_bhb_loop+0x30/0x80 [ 2261.486699][ T2322] ? clear_bhb_loop+0x30/0x80 [ 2261.491510][ T2322] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2261.497415][ T2322] RIP: 0033:0x7f986f0f40d9 [ 2261.502420][ T2322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2261.522137][ T2322] RSP: 002b:00007f986d34c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2261.530591][ T2322] RAX: ffffffffffffffda RBX: 00007f986f37bfa0 RCX: 00007f986f0f40d9 [ 2261.538571][ T2322] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2261.546554][ T2322] RBP: 00007f986f18b024 R08: 0000000000000000 R09: 0000000000000000 [ 2261.554545][ T2322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2261.562538][ T2322] R13: 00007f986f37c038 R14: 00007f986f37bfa0 R15: 00007ffe98450008 [ 2261.570543][ T2322] [ 2261.929580][ T2342] netlink: 'syz.0.43702': attribute type 27 has an invalid length. [ 2262.653674][ T6172] wlan1: Trigger new scan to find an IBSS to join [ 2262.703004][ T830] wlan1: Creating new IBSS network, BSSID ce:aa:3d:48:80:c1 [ 2263.359017][ T2403] netlink: 'syz.1.43727': attribute type 2 has an invalid length. [ 2263.406619][ T2403] netlink: 14 bytes leftover after parsing attributes in process `syz.1.43727'. [ 2264.395499][ T2447] netlink: 'syz.2.43749': attribute type 2 has an invalid length. [ 2264.486688][ T2447] netlink: 14 bytes leftover after parsing attributes in process `syz.2.43749'. [ 2264.789066][ T2455] netlink: 'syz.1.43750': attribute type 27 has an invalid length. [ 2265.326610][ T2496] netlink: 'syz.4.43764': attribute type 27 has an invalid length. [ 2265.438605][ T2492] device syzkaller0 entered promiscuous mode [ 2265.909391][ T2524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2266.053497][ T2537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2266.096360][ T2541] netlink: 'syz.3.43779': attribute type 27 has an invalid length. [ 2266.311622][ T2553] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.43784'. [ 2266.389319][ T2553] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2266.398266][ T2553] CPU: 1 PID: 2553 Comm: syz.0.43784 Not tainted syzkaller #0 [ 2266.405764][ T2553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2266.415831][ T2553] Call Trace: [ 2266.419125][ T2553] [ 2266.422069][ T2553] dump_stack_lvl+0x188/0x250 [ 2266.426768][ T2553] ? show_regs_print_info+0x20/0x20 [ 2266.431981][ T2553] ? load_image+0x410/0x410 [ 2266.436517][ T2553] sysfs_warn_dup+0x8a/0xa0 [ 2266.441038][ T2553] sysfs_do_create_link_sd+0xc0/0x110 [ 2266.446427][ T2553] device_add+0x83b/0x1050 [ 2266.450865][ T2553] wiphy_register+0x1e74/0x2c40 [ 2266.455759][ T2553] ? cfg80211_event_work+0x40/0x40 [ 2266.460887][ T2553] ? minstrel_ht_alloc+0x807/0x980 [ 2266.466022][ T2553] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2266.472117][ T2553] ieee80211_register_hw+0x2a03/0x3a60 [ 2266.477598][ T2553] ? ieee80211_register_hw+0xae1/0x3a60 [ 2266.483181][ T2553] ? ieee80211_tasklet_handler+0x20/0x20 [ 2266.488842][ T2553] ? rcu_is_watching+0x11/0xa0 [ 2266.493635][ T2553] ? hrtimer_init+0x10c/0x220 [ 2266.498351][ T2553] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2266.504107][ T2553] hwsim_new_radio_nl+0xa7d/0xc50 [ 2266.509171][ T2553] genl_rcv_msg+0xd0b/0xfa0 [ 2266.513704][ T2553] ? genl_bind+0x370/0x370 [ 2266.518148][ T2553] ? mark_lock+0x94/0x320 [ 2266.522494][ T2553] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2266.528490][ T2553] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2266.534256][ T2553] ? lock_chain_count+0x20/0x20 [ 2266.539146][ T2553] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2266.545332][ T2553] ? lockdep_hardirqs_on+0x94/0x140 [ 2266.550553][ T2553] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2266.556919][ T2553] netlink_rcv_skb+0x1e9/0x430 [ 2266.561790][ T2553] ? genl_bind+0x370/0x370 [ 2266.566234][ T2553] ? netlink_ack+0xb10/0xb10 [ 2266.570853][ T2553] ? down_read+0x1aa/0x2e0 [ 2266.575295][ T2553] genl_rcv+0x24/0x40 [ 2266.579309][ T2553] netlink_unicast+0x78f/0x940 [ 2266.584105][ T2553] netlink_sendmsg+0x8ba/0xbe0 [ 2266.588897][ T2553] ? netlink_getsockopt+0x570/0x570 [ 2266.594104][ T2553] ? aa_sock_msg_perm+0x94/0x150 [ 2266.599067][ T2553] ? apparmor_socket_sendmsg+0x88/0x230 [ 2266.604637][ T2553] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2266.609958][ T2553] ? security_socket_sendmsg+0x7c/0xa0 [ 2266.615447][ T2553] ? netlink_getsockopt+0x570/0x570 [ 2266.620683][ T2553] ____sys_sendmsg+0x5be/0x8f0 [ 2266.625490][ T2553] ? __sys_sendmsg_sock+0x30/0x30 [ 2266.630561][ T2553] ? import_iovec+0x6f/0xa0 [ 2266.635094][ T2553] ___sys_sendmsg+0x236/0x2e0 [ 2266.639810][ T2553] ? __sys_sendmsg+0x290/0x290 [ 2266.644611][ T2553] ? trace_event_raw_event_lock+0x250/0x250 [ 2266.650535][ T2553] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2266.656823][ T2553] __se_sys_sendmsg+0x1b7/0x2a0 [ 2266.661705][ T2553] ? __x64_sys_sendmsg+0x80/0x80 [ 2266.666676][ T2553] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2266.672590][ T2553] do_syscall_64+0x4c/0xa0 [ 2266.677021][ T2553] ? clear_bhb_loop+0x30/0x80 [ 2266.681726][ T2553] ? clear_bhb_loop+0x30/0x80 [ 2266.686415][ T2553] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2266.692321][ T2553] RIP: 0033:0x7f2c180aa0d9 [ 2266.696765][ T2553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2266.716378][ T2553] RSP: 002b:00007f2c16302028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2266.724820][ T2553] RAX: ffffffffffffffda RBX: 00007f2c18331fa0 RCX: 00007f2c180aa0d9 [ 2266.732811][ T2553] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2266.740794][ T2553] RBP: 00007f2c18141024 R08: 0000000000000000 R09: 0000000000000000 [ 2266.748774][ T2553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2266.756756][ T2553] R13: 00007f2c18332038 R14: 00007f2c18331fa0 R15: 00007fffb2992718 [ 2266.764771][ T2553] [ 2267.097454][ T2585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2267.380990][ T2606] netlink: set zone limit has 8 unknown bytes [ 2267.736788][ T2615] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.43808'. [ 2267.796290][ T2623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2267.910246][ T2615] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2267.936195][ T2615] CPU: 0 PID: 2615 Comm: syz.4.43808 Not tainted syzkaller #0 [ 2267.943800][ T2615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2267.953972][ T2615] Call Trace: [ 2267.957279][ T2615] [ 2267.960245][ T2615] dump_stack_lvl+0x188/0x250 [ 2267.964982][ T2615] ? show_regs_print_info+0x20/0x20 [ 2267.970240][ T2615] ? load_image+0x410/0x410 [ 2267.974818][ T2615] sysfs_warn_dup+0x8a/0xa0 [ 2267.979376][ T2615] sysfs_do_create_link_sd+0xc0/0x110 [ 2267.984804][ T2615] device_add+0x83b/0x1050 [ 2267.989275][ T2615] wiphy_register+0x1e74/0x2c40 [ 2267.994233][ T2615] ? cfg80211_event_work+0x40/0x40 [ 2267.999395][ T2615] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2268.005680][ T2615] ieee80211_register_hw+0x2a03/0x3a60 [ 2268.011182][ T2615] ? ieee80211_register_hw+0xae1/0x3a60 [ 2268.016803][ T2615] ? ieee80211_tasklet_handler+0x20/0x20 [ 2268.022480][ T2615] ? rcu_is_watching+0x11/0xa0 [ 2268.027291][ T2615] ? hrtimer_init+0x10c/0x220 [ 2268.032025][ T2615] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2268.037817][ T2615] hwsim_new_radio_nl+0xa7d/0xc50 [ 2268.042901][ T2615] genl_rcv_msg+0xd0b/0xfa0 [ 2268.047462][ T2615] ? genl_bind+0x370/0x370 [ 2268.051927][ T2615] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2268.057944][ T2615] ? lock_chain_count+0x20/0x20 [ 2268.062849][ T2615] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2268.069042][ T2615] ? lockdep_hardirqs_on+0x94/0x140 [ 2268.074282][ T2615] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2268.080485][ T2615] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2268.086862][ T2615] ? lock_acquire+0x208/0x400 [ 2268.091588][ T2615] netlink_rcv_skb+0x1e9/0x430 [ 2268.096405][ T2615] ? genl_bind+0x370/0x370 [ 2268.100869][ T2615] ? netlink_ack+0xb10/0xb10 [ 2268.105523][ T2615] ? down_read+0x1aa/0x2e0 [ 2268.109977][ T2615] genl_rcv+0x24/0x40 [ 2268.114001][ T2615] netlink_unicast+0x78f/0x940 [ 2268.118839][ T2615] netlink_sendmsg+0x8ba/0xbe0 [ 2268.123668][ T2615] ? netlink_getsockopt+0x570/0x570 [ 2268.128897][ T2615] ? aa_sock_msg_perm+0x94/0x150 [ 2268.133869][ T2615] ? apparmor_socket_sendmsg+0x88/0x230 [ 2268.139462][ T2615] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2268.144789][ T2615] ? security_socket_sendmsg+0x7c/0xa0 [ 2268.150285][ T2615] ? netlink_getsockopt+0x570/0x570 [ 2268.155520][ T2615] ____sys_sendmsg+0x5be/0x8f0 [ 2268.160344][ T2615] ? __sys_sendmsg_sock+0x30/0x30 [ 2268.165435][ T2615] ? import_iovec+0x6f/0xa0 [ 2268.169986][ T2615] ___sys_sendmsg+0x236/0x2e0 [ 2268.174729][ T2615] ? __sys_sendmsg+0x290/0x290 [ 2268.179571][ T2615] ? trace_event_raw_event_lock+0x250/0x250 [ 2268.185509][ T2615] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2268.191826][ T2615] __se_sys_sendmsg+0x1b7/0x2a0 [ 2268.196713][ T2615] ? __x64_sys_sendmsg+0x80/0x80 [ 2268.201726][ T2615] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2268.207658][ T2615] do_syscall_64+0x4c/0xa0 [ 2268.212103][ T2615] ? clear_bhb_loop+0x30/0x80 [ 2268.216819][ T2615] ? clear_bhb_loop+0x30/0x80 [ 2268.221530][ T2615] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2268.227450][ T2615] RIP: 0033:0x7f986f0f40d9 [ 2268.231892][ T2615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2268.251520][ T2615] RSP: 002b:00007f986d34c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2268.259967][ T2615] RAX: ffffffffffffffda RBX: 00007f986f37bfa0 RCX: 00007f986f0f40d9 [ 2268.267970][ T2615] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2268.275970][ T2615] RBP: 00007f986f18b024 R08: 0000000000000000 R09: 0000000000000000 [ 2268.283974][ T2615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2268.291975][ T2615] R13: 00007f986f37c038 R14: 00007f986f37bfa0 R15: 00007ffe98450008 [ 2268.300022][ T2615] [ 2268.639847][ T2632] device syzkaller0 entered promiscuous mode [ 2268.677324][ T2639] netlink: 'syz.2.43815': attribute type 12 has an invalid length. [ 2268.693531][ T2639] netlink: 132 bytes leftover after parsing attributes in process `syz.2.43815'. [ 2268.832279][ T2649] netlink: 830 bytes leftover after parsing attributes in process `syz.2.43815'. [ 2268.927291][ T2655] netlink: 'syz.4.43820': attribute type 4 has an invalid length. [ 2268.935713][ T2655] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.43820'. [ 2269.644002][ T2688] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.43830'. [ 2270.051973][ T2690] device syzkaller0 entered promiscuous mode [ 2270.105885][ T2688] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2270.139560][ T2688] CPU: 1 PID: 2688 Comm: syz.3.43830 Not tainted syzkaller #0 [ 2270.147078][ T2688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2270.157171][ T2688] Call Trace: [ 2270.160471][ T2688] [ 2270.163505][ T2688] dump_stack_lvl+0x188/0x250 [ 2270.168213][ T2688] ? show_regs_print_info+0x20/0x20 [ 2270.173445][ T2688] ? load_image+0x410/0x410 [ 2270.177990][ T2688] sysfs_warn_dup+0x8a/0xa0 [ 2270.182541][ T2688] sysfs_do_create_link_sd+0xc0/0x110 [ 2270.187942][ T2688] device_add+0x83b/0x1050 [ 2270.192392][ T2688] wiphy_register+0x1e74/0x2c40 [ 2270.197293][ T2688] ? cfg80211_event_work+0x40/0x40 [ 2270.202430][ T2688] ? minstrel_ht_alloc+0x807/0x980 [ 2270.207573][ T2688] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2270.213677][ T2688] ieee80211_register_hw+0x2a03/0x3a60 [ 2270.219178][ T2688] ? ieee80211_register_hw+0xae1/0x3a60 [ 2270.224775][ T2688] ? ieee80211_tasklet_handler+0x20/0x20 [ 2270.230460][ T2688] ? rcu_is_watching+0x11/0xa0 [ 2270.235278][ T2688] ? hrtimer_init+0x10c/0x220 [ 2270.240031][ T2688] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2270.245827][ T2688] hwsim_new_radio_nl+0xa7d/0xc50 [ 2270.250894][ T2688] genl_rcv_msg+0xd0b/0xfa0 [ 2270.255447][ T2688] ? genl_bind+0x370/0x370 [ 2270.259907][ T2688] ? __dev_queue_xmit+0x1b64/0x2e50 [ 2270.265163][ T2688] ? verify_lock_unused+0x140/0x140 [ 2270.270404][ T2688] ? perf_trace_lock_acquire+0xed/0x3f0 [ 2270.275984][ T2688] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2270.282603][ T2688] ? dev_queue_xmit+0x20/0x20 [ 2270.287316][ T2688] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2270.293688][ T2688] netlink_rcv_skb+0x1e9/0x430 [ 2270.298501][ T2688] ? genl_bind+0x370/0x370 [ 2270.302951][ T2688] ? netlink_ack+0xb10/0xb10 [ 2270.307578][ T2688] ? down_read+0x1aa/0x2e0 [ 2270.312028][ T2688] genl_rcv+0x24/0x40 [ 2270.316029][ T2688] netlink_unicast+0x78f/0x940 [ 2270.320833][ T2688] netlink_sendmsg+0x8ba/0xbe0 [ 2270.325664][ T2688] ? netlink_getsockopt+0x570/0x570 [ 2270.330904][ T2688] ? aa_sock_msg_perm+0x94/0x150 [ 2270.335884][ T2688] ? apparmor_socket_sendmsg+0x88/0x230 [ 2270.341462][ T2688] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2270.346790][ T2688] ? security_socket_sendmsg+0x7c/0xa0 [ 2270.352291][ T2688] ? netlink_getsockopt+0x570/0x570 [ 2270.357520][ T2688] ____sys_sendmsg+0x5be/0x8f0 [ 2270.362444][ T2688] ? __sys_sendmsg_sock+0x30/0x30 [ 2270.367525][ T2688] ? import_iovec+0x6f/0xa0 [ 2270.372056][ T2688] ___sys_sendmsg+0x236/0x2e0 [ 2270.376767][ T2688] ? __sys_sendmsg+0x290/0x290 [ 2270.381599][ T2688] ? __might_fault+0xb3/0x110 [ 2270.386407][ T2688] __se_sys_sendmsg+0x1b7/0x2a0 [ 2270.391286][ T2688] ? __x64_sys_sendmsg+0x80/0x80 [ 2270.396248][ T2688] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2270.402296][ T2688] ? lockdep_hardirqs_on+0x94/0x140 [ 2270.407529][ T2688] do_syscall_64+0x4c/0xa0 [ 2270.411964][ T2688] ? clear_bhb_loop+0x30/0x80 [ 2270.416660][ T2688] ? clear_bhb_loop+0x30/0x80 [ 2270.421361][ T2688] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2270.427275][ T2688] RIP: 0033:0x7ff2cc7a30d9 [ 2270.431709][ T2688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2270.451339][ T2688] RSP: 002b:00007ff2ca9da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2270.459776][ T2688] RAX: ffffffffffffffda RBX: 00007ff2cca2b090 RCX: 00007ff2cc7a30d9 [ 2270.467780][ T2688] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2270.475782][ T2688] RBP: 00007ff2cc83a024 R08: 0000000000000000 R09: 0000000000000000 [ 2270.483807][ T2688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2270.491801][ T2688] R13: 00007ff2cca2b128 R14: 00007ff2cca2b090 R15: 00007fff649f1e98 [ 2270.499837][ T2688] [ 2270.825695][ T2705] device syzkaller0 entered promiscuous mode [ 2270.859721][ T2716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2271.095471][ T2733] netlink: 'syz.1.43845': attribute type 12 has an invalid length. [ 2271.105518][ T2733] netlink: 132 bytes leftover after parsing attributes in process `syz.1.43845'. [ 2271.276241][ T2733] netlink: 830 bytes leftover after parsing attributes in process `syz.1.43845'. [ 2271.557862][ T2753] netlink: set zone limit has 8 unknown bytes [ 2272.053952][ T2778] device syzkaller0 entered promiscuous mode [ 2272.202172][ T2787] netlink: 'syz.1.43864': attribute type 4 has an invalid length. [ 2272.218300][ T2787] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.43864'. [ 2272.306099][ T2795] netlink: 'syz.0.43865': attribute type 2 has an invalid length. [ 2272.324187][ T2795] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.43865'. [ 2272.720209][ T2816] netlink: set zone limit has 8 unknown bytes [ 2272.969875][ T2830] netlink: 'syz.0.43878': attribute type 4 has an invalid length. [ 2273.047032][ T2830] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.43878'. [ 2273.296831][ T2833] device syzkaller0 entered promiscuous mode [ 2273.773856][ T2854] device syzkaller0 entered promiscuous mode [ 2274.233736][ T2879] netlink: set zone limit has 8 unknown bytes [ 2274.363102][ T2881] netlink: 'syz.3.43897': attribute type 4 has an invalid length. [ 2274.402605][ T2881] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.43897'. [ 2274.490047][ T2883] device syzkaller0 entered promiscuous mode [ 2275.121094][ T2900] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.43915'. [ 2275.277144][ T2900] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2275.300839][ T2900] CPU: 1 PID: 2900 Comm: syz.2.43915 Not tainted syzkaller #0 [ 2275.308355][ T2900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2275.318447][ T2900] Call Trace: [ 2275.321759][ T2900] [ 2275.324720][ T2900] dump_stack_lvl+0x188/0x250 [ 2275.329457][ T2900] ? show_regs_print_info+0x20/0x20 [ 2275.334697][ T2900] ? load_image+0x410/0x410 [ 2275.339278][ T2900] sysfs_warn_dup+0x8a/0xa0 [ 2275.343828][ T2900] sysfs_do_create_link_sd+0xc0/0x110 [ 2275.349248][ T2900] device_add+0x83b/0x1050 [ 2275.353719][ T2900] wiphy_register+0x1e74/0x2c40 [ 2275.358658][ T2900] ? cfg80211_event_work+0x40/0x40 [ 2275.363821][ T2900] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2275.370043][ T2900] ieee80211_register_hw+0x2a03/0x3a60 [ 2275.375547][ T2900] ? ieee80211_register_hw+0xae1/0x3a60 [ 2275.381147][ T2900] ? ieee80211_tasklet_handler+0x20/0x20 [ 2275.386830][ T2900] ? rcu_is_watching+0x11/0xa0 [ 2275.391634][ T2900] ? hrtimer_init+0x10c/0x220 [ 2275.396361][ T2900] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2275.402149][ T2900] hwsim_new_radio_nl+0xa7d/0xc50 [ 2275.407271][ T2900] genl_rcv_msg+0xd0b/0xfa0 [ 2275.411870][ T2900] ? genl_bind+0x370/0x370 [ 2275.416335][ T2900] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2275.422352][ T2900] ? perf_trace_buf_alloc+0x24/0x300 [ 2275.427686][ T2900] ? lock_chain_count+0x20/0x20 [ 2275.432586][ T2900] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2275.438783][ T2900] ? lockdep_hardirqs_on+0x94/0x140 [ 2275.444031][ T2900] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2275.450229][ T2900] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2275.456607][ T2900] ? lock_acquire+0x208/0x400 [ 2275.461336][ T2900] netlink_rcv_skb+0x1e9/0x430 [ 2275.466144][ T2900] ? genl_bind+0x370/0x370 [ 2275.470620][ T2900] ? netlink_ack+0xb10/0xb10 [ 2275.475278][ T2900] ? down_read+0x1aa/0x2e0 [ 2275.479752][ T2900] genl_rcv+0x24/0x40 [ 2275.483758][ T2900] netlink_unicast+0x78f/0x940 [ 2275.488576][ T2900] netlink_sendmsg+0x8ba/0xbe0 [ 2275.493382][ T2900] ? lockdep_hardirqs_on+0x94/0x140 [ 2275.498646][ T2900] ? netlink_getsockopt+0x570/0x570 [ 2275.503938][ T2900] ? netlink_getsockopt+0x570/0x570 [ 2275.509170][ T2900] ____sys_sendmsg+0x5be/0x8f0 [ 2275.513984][ T2900] ? __sys_sendmsg_sock+0x30/0x30 [ 2275.519058][ T2900] ? ___sys_sendmsg+0x21b/0x2e0 [ 2275.523982][ T2900] ___sys_sendmsg+0x236/0x2e0 [ 2275.528731][ T2900] ? __sys_sendmsg+0x290/0x290 [ 2275.533565][ T2900] ? trace_event_raw_event_lock+0x250/0x250 [ 2275.539567][ T2900] __se_sys_sendmsg+0x1b7/0x2a0 [ 2275.544465][ T2900] ? __x64_sys_sendmsg+0x80/0x80 [ 2275.549474][ T2900] ? __x64_sys_sendmsg+0x73/0x80 [ 2275.554456][ T2900] do_syscall_64+0x4c/0xa0 [ 2275.558915][ T2900] ? clear_bhb_loop+0x30/0x80 [ 2275.563633][ T2900] ? clear_bhb_loop+0x30/0x80 [ 2275.568353][ T2900] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2275.574285][ T2900] RIP: 0033:0x7fb9b22c50d9 [ 2275.578742][ T2900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2275.598396][ T2900] RSP: 002b:00007fb9b051d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2275.606838][ T2900] RAX: ffffffffffffffda RBX: 00007fb9b254cfa0 RCX: 00007fb9b22c50d9 [ 2275.614830][ T2900] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2275.622828][ T2900] RBP: 00007fb9b235c024 R08: 0000000000000000 R09: 0000000000000000 [ 2275.630809][ T2900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2275.638789][ T2900] R13: 00007fb9b254d038 R14: 00007fb9b254cfa0 R15: 00007ffec75df448 [ 2275.646797][ T2900] [ 2275.919084][ T2914] netlink: 'syz.4.43907': attribute type 2 has an invalid length. [ 2275.932525][ T2914] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.43907'. [ 2276.087940][ T2947] netlink: set zone limit has 8 unknown bytes [ 2276.136859][ T2948] netlink: 'syz.0.43918': attribute type 12 has an invalid length. [ 2276.145455][ T2948] netlink: 132 bytes leftover after parsing attributes in process `syz.0.43918'. [ 2276.262121][ T2948] netlink: 830 bytes leftover after parsing attributes in process `syz.0.43918'. [ 2276.451620][ T2966] netlink: 'syz.2.43921': attribute type 4 has an invalid length. [ 2276.469031][ T2966] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.43921'. [ 2276.494564][ T2972] netlink: set zone limit has 8 unknown bytes [ 2276.578940][ T2975] netlink: 'syz.1.43927': attribute type 10 has an invalid length. [ 2276.587155][ T2975] netlink: 55 bytes leftover after parsing attributes in process `syz.1.43927'. [ 2276.678432][ T2982] netlink: 'syz.3.43930': attribute type 2 has an invalid length. [ 2276.711488][ T2975] device virt_wifi0 left promiscuous mode [ 2276.729664][ T2975] team0: Port device virt_wifi0 removed [ 2276.849832][ T2991] netlink: set zone limit has 8 unknown bytes [ 2277.059120][ T3001] mac80211_hwsim hwsim123 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2277.161062][ T3008] netlink: set zone limit has 8 unknown bytes [ 2277.654223][ T3034] netlink: set zone limit has 8 unknown bytes [ 2277.668683][ T3031] mac80211_hwsim hwsim123 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2277.694792][ T3037] netdevsim netdevsim4: Direct firmware load for Ö failed with error -2 [ 2277.744300][ T3037] netdevsim netdevsim4: Falling back to sysfs fallback for: Ö [ 2278.393305][ T3061] netlink: set zone limit has 8 unknown bytes [ 2278.990337][ T3090] netlink: set zone limit has 8 unknown bytes [ 2279.163845][ T3097] netlink: 'syz.4.43979': attribute type 10 has an invalid length. [ 2279.171814][ T3097] __nla_validate_parse: 1 callbacks suppressed [ 2279.171828][ T3097] netlink: 55 bytes leftover after parsing attributes in process `syz.4.43979'. [ 2279.551368][ T3123] netlink: set zone limit has 8 unknown bytes [ 2279.598827][ T3125] device wlan0 entered promiscuous mode [ 2279.860369][ T3139] netlink: set zone limit has 8 unknown bytes [ 2279.948520][ T3143] mac80211_hwsim hwsim125 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2280.509011][ T3170] device syzkaller0 entered promiscuous mode [ 2280.542434][ T3174] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2280.596927][ T3180] netlink: set zone limit has 8 unknown bytes [ 2280.992684][ T3202] netlink: 'syz.3.44029': attribute type 10 has an invalid length. [ 2281.041879][ T3205] device wlan0 entered promiscuous mode [ 2281.079192][ T3209] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2281.553562][ T3236] device wlan0 entered promiscuous mode [ 2281.660750][ T3242] netlink: 'syz.4.44048': attribute type 10 has an invalid length. [ 2281.684586][ T3246] mac80211_hwsim hwsim121 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2282.302327][ T3285] mac80211_hwsim hwsim125 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2282.580715][ T3297] netlink: 21 bytes leftover after parsing attributes in process `syz.3.44069'. [ 2282.601927][ T3297] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2282.810308][ T3308] netlink: set zone limit has 8 unknown bytes [ 2282.971046][ T3315] mac80211_hwsim hwsim117 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2282.979433][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2282.986687][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.094535][ T3317] device wlan0 entered promiscuous mode [ 2283.810658][ T3364] netlink: set zone limit has 8 unknown bytes [ 2283.849889][ T3360] device wlan0 entered promiscuous mode [ 2284.072991][ T3375] netlink: 21 bytes leftover after parsing attributes in process `syz.1.44101'. [ 2284.084371][ T3375] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2284.250178][ T3381] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2284.529126][ T3400] netlink: set zone limit has 8 unknown bytes [ 2284.683638][ T3412] mac80211_hwsim hwsim121 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2284.752020][ T3411] netlink: 'syz.0.44117': attribute type 10 has an invalid length. [ 2285.123939][ T3432] netlink: set zone limit has 8 unknown bytes [ 2285.766243][ T3470] netlink: 21 bytes leftover after parsing attributes in process `syz.4.44139'. [ 2285.796716][ T3470] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2285.847847][ T3475] netlink: set zone limit has 8 unknown bytes [ 2286.497285][ T3513] netlink: set zone limit has 8 unknown bytes [ 2287.033464][ T3541] mac80211_hwsim hwsim117 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2287.541141][ T3572] mac80211_hwsim hwsim121 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2288.223783][ T3614] netlink: set zone limit has 8 unknown bytes [ 2288.919748][ T3647] netlink: set zone limit has 8 unknown bytes [ 2289.439117][ T3670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2289.622578][T26995] wlan1: Trigger new scan to find an IBSS to join [ 2289.690998][ T3683] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2290.178859][ T3710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2290.250875][ T3715] mac80211_hwsim hwsim10 O3ãc¤±: renamed from wlan1 [ 2290.327625][ T3717] mac80211_hwsim hwsim121 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2291.127270][ T3751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2291.660081][ T3774] netlink: 21 bytes leftover after parsing attributes in process `syz.0.44264'. [ 2291.692576][ T3774] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2292.052890][ T3798] netlink: set zone limit has 8 unknown bytes [ 2292.166075][ T3810] mac80211_hwsim hwsim123 O3ãc¤±: renamed from wlan1 [ 2292.231141][ T3807] netlink: 7295 bytes leftover after parsing attributes in process `syz.2.44278'. [ 2292.346054][ T3819] netlink: set zone limit has 8 unknown bytes [ 2292.517630][ T3828] netlink: 'syz.3.44287': attribute type 27 has an invalid length. [ 2292.530380][ T3830] netlink: 21 bytes leftover after parsing attributes in process `syz.2.44286'. [ 2292.563749][ T3830] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2292.576390][ T378] wlan1: Trigger new scan to find an IBSS to join [ 2292.919167][ T3843] netlink: set zone limit has 8 unknown bytes [ 2293.084968][ T3858] netlink: set zone limit has 8 unknown bytes [ 2293.117948][ T3862] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.44301'. [ 2293.382668][ T3874] netlink: set zone limit has 8 unknown bytes [ 2293.923416][ T3892] netlink: 21 bytes leftover after parsing attributes in process `syz.2.44311'. [ 2294.020496][ T3892] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2294.267997][ T3906] netlink: set zone limit has 8 unknown bytes [ 2294.310862][ T3909] netlink: set zone limit has 8 unknown bytes [ 2294.531895][ T3923] device wlan0 left promiscuous mode [ 2294.553239][ T3927] netlink: 'syz.2.44327': attribute type 10 has an invalid length. [ 2294.564162][ T3923] netlink: 'syz.4.44326': attribute type 9 has an invalid length. [ 2294.572305][ T3923] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.44326'. [ 2294.662674][ T378] wlan1: Trigger new scan to find an IBSS to join [ 2294.868907][ T3929] netlink: 'syz.2.44327': attribute type 9 has an invalid length. [ 2294.885662][ T3937] netlink: set zone limit has 8 unknown bytes [ 2294.917195][ T3929] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.44327'. [ 2295.050006][ T3939] mac80211_hwsim hwsim125 O3ãc¤±: renamed from wlan1 [ 2295.477469][ T3960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2295.589363][ T3966] netlink: set zone limit has 8 unknown bytes [ 2295.738528][ T3972] netlink: 7295 bytes leftover after parsing attributes in process `syz.3.44343'. [ 2296.065268][ T3996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2296.129308][ T4002] netlink: set zone limit has 8 unknown bytes [ 2296.361176][ T4016] netlink: 7295 bytes leftover after parsing attributes in process `syz.4.44361'. [ 2296.394080][ T4019] netlink: set zone limit has 8 unknown bytes [ 2296.735352][ T4038] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.44369'. [ 2297.017522][ T4048] netlink: 7295 bytes leftover after parsing attributes in process `syz.1.44376'. [ 2297.252267][ T4064] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.44383'. [ 2297.291150][ T4066] netlink: 'syz.1.44384': attribute type 27 has an invalid length. [ 2297.706585][ T4085] netlink: 7295 bytes leftover after parsing attributes in process `syz.0.44391'. [ 2297.969298][ T4103] netlink: set zone limit has 8 unknown bytes [ 2298.379757][ T4124] netlink: 7295 bytes leftover after parsing attributes in process `syz.3.44408'. [ 2298.529332][ T4135] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.44412'. [ 2298.652607][ T378] wlan1: Trigger new scan to find an IBSS to join [ 2298.706704][ T378] wlan1: Creating new IBSS network, BSSID 4a:03:a8:43:fe:6c [ 2299.330798][ T4163] netlink: 7295 bytes leftover after parsing attributes in process `syz.3.44425'. [ 2299.346314][ T4169] netlink: 'syz.4.44427': attribute type 10 has an invalid length. [ 2299.492122][ T4180] netlink: 'syz.4.44427': attribute type 9 has an invalid length. [ 2299.562819][ T4180] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.44427'. [ 2300.147816][ T4199] device lo entered promiscuous mode [ 2300.197335][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2300.387764][ T4216] netlink: 'syz.3.44447': attribute type 10 has an invalid length. [ 2300.469402][ T4221] netlink: 'syz.0.44449': attribute type 1 has an invalid length. [ 2300.505955][ T4222] netlink: 'syz.3.44447': attribute type 9 has an invalid length. [ 2300.515867][ T4221] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.44449'. [ 2300.565683][ T4222] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.44447'. [ 2300.632877][ T4227] netlink: set zone limit has 8 unknown bytes [ 2300.648710][ T4226] netlink: 'syz.2.44451': attribute type 4 has an invalid length. [ 2301.415947][ T4243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2301.708975][ T4257] device wlan0 left promiscuous mode [ 2301.778942][ T4257] netlink: 'syz.2.44461': attribute type 9 has an invalid length. [ 2301.799122][ T4257] __nla_validate_parse: 1 callbacks suppressed [ 2301.799164][ T4257] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.44461'. [ 2301.891664][ T4265] netlink: 'syz.4.44463': attribute type 2 has an invalid length. [ 2301.901150][ T4265] netlink: 119 bytes leftover after parsing attributes in process `syz.4.44463'. [ 2301.926544][ T4267] device lo entered promiscuous mode [ 2301.960472][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2302.018244][ T4272] netlink: 'syz.0.44467': attribute type 10 has an invalid length. [ 2302.108383][ T4273] netlink: 'syz.0.44467': attribute type 9 has an invalid length. [ 2302.130070][ T4273] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.44467'. [ 2302.259603][ T4281] netlink: set zone limit has 8 unknown bytes [ 2302.278504][ T4283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2302.596521][ T4293] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.44475'. [ 2302.727083][ T4301] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.44478'. [ 2302.746413][ T4300] device lo entered promiscuous mode [ 2302.798514][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2302.884668][ T4303] device wlan0 left promiscuous mode [ 2302.923255][ T4303] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.44481'. [ 2302.986824][ T4310] netlink: set zone limit has 8 unknown bytes [ 2303.136314][ T4316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2303.247686][ T4320] netlink: set zone limit has 8 unknown bytes [ 2303.373095][ T4331] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.44490'. [ 2303.458027][ T4333] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.44489'. [ 2303.490288][ T4335] netlink: set zone limit has 8 unknown bytes [ 2303.674957][ T4337] netlink: 119 bytes leftover after parsing attributes in process `syz.2.44491'. [ 2303.795312][ T4346] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.44492'. [ 2304.178048][ T4361] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2304.326700][ T4369] netlink: set zone limit has 8 unknown bytes [ 2304.363826][ T4370] device lo entered promiscuous mode [ 2304.381662][ T4372] netlink: set zone limit has 8 unknown bytes [ 2304.440398][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2304.567599][ T4375] netlink: set zone limit has 8 unknown bytes [ 2304.959312][ T4403] netlink: set zone limit has 8 unknown bytes [ 2305.380686][ T4409] validate_nla: 8 callbacks suppressed [ 2305.380724][ T4409] netlink: 'syz.4.44526': attribute type 4 has an invalid length. [ 2305.690912][ T4423] netlink: set zone limit has 8 unknown bytes [ 2305.809437][ T4427] netlink: set zone limit has 8 unknown bytes [ 2306.541953][ T4474] netlink: set zone limit has 8 unknown bytes [ 2308.251127][ T4483] netlink: set zone limit has 8 unknown bytes [ 2308.514732][ T4498] netlink: 'syz.3.44556': attribute type 10 has an invalid length. [ 2308.627898][ T4507] netlink: 'syz.3.44556': attribute type 9 has an invalid length. [ 2308.676660][ T4507] __nla_validate_parse: 1 callbacks suppressed [ 2308.676676][ T4507] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.44556'. [ 2308.911918][ T4523] Ÿë: port 1(gretap0) entered blocking state [ 2308.930995][ T4523] Ÿë: port 1(gretap0) entered disabled state [ 2308.970298][ T4523] device gretap0 entered promiscuous mode [ 2308.996622][ T4524] netdevsim netdevsim1: Direct firmware load for .net/syz1 failed with error -2 [ 2309.007588][ T4524] netdevsim netdevsim1: Falling back to sysfs fallback for: .net/syz1 [ 2309.019460][ T4517] Ÿë: port 2(veth0_to_team) entered blocking state [ 2309.062549][ T4517] Ÿë: port 2(veth0_to_team) entered disabled state [ 2309.174481][ T4517] device veth0_to_team entered promiscuous mode [ 2309.318929][ T4527] netlink: set zone limit has 8 unknown bytes [ 2309.330004][ T4529] netlink: set zone limit has 8 unknown bytes [ 2309.557214][ T4542] device lo left promiscuous mode [ 2309.627494][ T4542] device lo entered promiscuous mode [ 2309.669987][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2309.717606][ T4549] netlink: 'syz.3.44575': attribute type 10 has an invalid length. [ 2309.821461][ T4551] netlink: 'syz.3.44575': attribute type 9 has an invalid length. [ 2309.899575][ T4551] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.44575'. [ 2310.079720][ T4567] netlink: set zone limit has 8 unknown bytes [ 2310.377976][ T4575] netlink: set zone limit has 8 unknown bytes [ 2310.842273][ T4587] netdevsim netdevsim4: Direct firmware load for .net/syz1 failed with error -2 [ 2310.881768][ T4587] netdevsim netdevsim4: Falling back to sysfs fallback for: .net/syz1 [ 2310.984819][ T4592] device lo left promiscuous mode [ 2310.991628][ T4598] netlink: set zone limit has 8 unknown bytes [ 2311.047098][ T4592] device lo entered promiscuous mode [ 2311.110838][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2311.128736][ T4606] netlink: set zone limit has 8 unknown bytes [ 2311.333078][ T4613] device wlan0 left promiscuous mode [ 2311.385065][ T4613] netlink: 'syz.1.44610': attribute type 16 has an invalid length. [ 2311.394023][ T4613] netlink: 'syz.1.44610': attribute type 3 has an invalid length. [ 2311.402751][ T4613] netlink: 132 bytes leftover after parsing attributes in process `syz.1.44610'. [ 2311.576025][ T4617] netlink: 'syz.1.44602': attribute type 2 has an invalid length. [ 2311.584722][ T4617] netlink: 119 bytes leftover after parsing attributes in process `syz.1.44602'. [ 2311.980465][ T4635] netlink: set zone limit has 8 unknown bytes [ 2311.993117][ T4637] device lo left promiscuous mode [ 2312.083476][ T4637] device lo entered promiscuous mode [ 2312.142205][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2312.488016][ T4662] netdevsim netdevsim3: Direct firmware load for .net/syz1 failed with error -2 [ 2312.500710][ T4658] netlink: 'syz.0.44619': attribute type 2 has an invalid length. [ 2312.508913][ T4662] netdevsim netdevsim3: Falling back to sysfs fallback for: .net/syz1 [ 2312.517642][ T4658] netlink: 119 bytes leftover after parsing attributes in process `syz.0.44619'. [ 2312.865975][ T4672] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.44627'. [ 2312.925581][ T4674] netlink: set zone limit has 8 unknown bytes [ 2313.510503][ T4696] netlink: 'syz.3.44637': attribute type 2 has an invalid length. [ 2313.519367][ T4696] netlink: 119 bytes leftover after parsing attributes in process `syz.3.44637'. [ 2313.592307][ T4706] netlink: set zone limit has 8 unknown bytes [ 2313.745567][ T4713] netlink: 'syz.4.44642': attribute type 3 has an invalid length. [ 2313.754163][ T4713] netlink: 'syz.4.44642': attribute type 1 has an invalid length. [ 2313.762297][ T4713] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.44642'. [ 2313.972056][ T4717] netlink: set zone limit has 8 unknown bytes [ 2314.201754][ T4728] netlink: 'syz.0.44647': attribute type 10 has an invalid length. [ 2314.289638][ T4733] netlink: 'syz.0.44647': attribute type 9 has an invalid length. [ 2314.317919][ T4733] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.44647'. [ 2314.912289][ T4740] netlink: set zone limit has 8 unknown bytes [ 2315.080400][ T4737] netlink: 'syz.1.44652': attribute type 2 has an invalid length. [ 2315.092792][ T4737] netlink: 119 bytes leftover after parsing attributes in process `syz.1.44652'. [ 2315.205807][ T4750] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.44657'. [ 2315.263957][ T4748] netlink: 132 bytes leftover after parsing attributes in process `syz.3.44656'. [ 2315.350151][ T4755] netlink: set zone limit has 8 unknown bytes [ 2316.428886][ T4779] netlink: set zone limit has 8 unknown bytes [ 2316.527359][ T4781] netdevsim netdevsim0: Direct firmware load for .net/syz1 failed with error -2 [ 2316.547578][ T4781] netdevsim netdevsim0: Falling back to sysfs fallback for: .net/syz1 [ 2316.694193][ T4788] validate_nla: 2 callbacks suppressed [ 2316.694212][ T4788] netlink: 'syz.4.44673': attribute type 16 has an invalid length. [ 2316.694617][ T4792] netlink: set zone limit has 8 unknown bytes [ 2316.700842][ T4788] netlink: 'syz.4.44673': attribute type 3 has an invalid length. [ 2316.743143][ T4788] netlink: 132 bytes leftover after parsing attributes in process `syz.4.44673'. [ 2316.860358][ T4800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2317.040776][ T4806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2317.481516][ T4814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2317.905534][ T4824] netlink: set zone limit has 8 unknown bytes [ 2318.033240][ T4830] netlink: set zone limit has 8 unknown bytes [ 2318.189495][ T378] tipc: Subscription rejected, illegal request [ 2318.221460][ T4835] Ÿë: port 1(gretap0) entered blocking state [ 2318.242554][ T4835] Ÿë: port 1(gretap0) entered disabled state [ 2318.259031][ T4835] device gretap0 entered promiscuous mode [ 2318.288302][ T4840] Ÿë: port 2(veth0_to_team) entered blocking state [ 2318.305825][ T4840] Ÿë: port 2(veth0_to_team) entered disabled state [ 2318.323144][ T4840] device veth0_to_team entered promiscuous mode [ 2318.334833][ T4837] netlink: 'syz.0.44694': attribute type 2 has an invalid length. [ 2318.351725][ T4837] netlink: 119 bytes leftover after parsing attributes in process `syz.0.44694'. [ 2318.370941][ T4851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2319.284975][ T4875] netlink: set zone limit has 8 unknown bytes [ 2319.319440][ T4880] device lo left promiscuous mode [ 2319.396062][ T4880] device lo entered promiscuous mode [ 2319.440024][ T4880] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2319.515821][ T4884] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.44708'. [ 2319.576177][ T4886] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.44707'. [ 2319.646277][ T4891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2320.125521][ T4911] netlink: set zone limit has 8 unknown bytes [ 2320.676001][ T4923] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.44723'. [ 2320.828260][ T4927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2321.079108][ T4938] netlink: set zone limit has 8 unknown bytes [ 2321.458033][ T378] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 2321.477216][ T378] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2321.507251][ T6172] ------------[ cut here ]------------ [ 2321.517193][ T4958] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.44737'. [ 2321.526894][ T6172] WARNING: CPU: 1 PID: 6172 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 2321.527054][ T6172] Modules linked in: [ 2321.552021][ T6172] CPU: 1 PID: 6172 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 2321.565293][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2321.603206][ T4958] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2321.610834][ T6172] Workqueue: cfg80211 cfg80211_event_work [ 2321.622864][ T4958] CPU: 1 PID: 4958 Comm: syz.4.44737 Not tainted syzkaller #0 [ 2321.630368][ T4958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2321.635832][ T6172] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 2321.640448][ T4958] Call Trace: [ 2321.640462][ T4958] [ 2321.640476][ T4958] dump_stack_lvl+0x188/0x250 [ 2321.640521][ T4958] ? show_regs_print_info+0x20/0x20 [ 2321.640554][ T4958] ? load_image+0x410/0x410 [ 2321.667447][ T4958] sysfs_warn_dup+0x8a/0xa0 [ 2321.672003][ T4958] sysfs_do_create_link_sd+0xc0/0x110 [ 2321.677423][ T4958] device_add+0x83b/0x1050 [ 2321.680932][ T6172] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 bd 3f f8 0f 0b eb bf e8 07 bd 3f f8 <0f> 0b eb b6 e8 fe bc 3f f8 0f 0b e9 82 fd ff ff e8 f2 bc 3f f8 0f [ 2321.701522][ T4958] wiphy_register+0x1e74/0x2c40 [ 2321.701631][ T4958] ? cfg80211_event_work+0x40/0x40 [ 2321.701666][ T4958] ? minstrel_ht_alloc+0x807/0x980 [ 2321.701724][ T4958] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2321.701779][ T4958] ieee80211_register_hw+0x2a03/0x3a60 [ 2321.701832][ T4958] ? ieee80211_register_hw+0xae1/0x3a60 [ 2321.701922][ T4958] ? ieee80211_tasklet_handler+0x20/0x20 [ 2321.739784][ T4958] ? rcu_is_watching+0x11/0xa0 [ 2321.743571][ T6172] RSP: 0018:ffffc900032cfac0 EFLAGS: 00010293 [ 2321.744722][ T4958] ? hrtimer_init+0x10c/0x220 [ 2321.744778][ T4958] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2321.751215][ T6172] [ 2321.755619][ T4958] hwsim_new_radio_nl+0xa7d/0xc50 [ 2321.755699][ T4958] genl_rcv_msg+0xd0b/0xfa0 [ 2321.762253][ T6172] RAX: ffffffff89393fa9 RBX: 1ffff92000659f5c RCX: ffff888045025940 [ 2321.763830][ T4958] ? genl_bind+0x370/0x370 [ 2321.763964][ T4958] ? verify_lock_unused+0x140/0x140 [ 2321.769259][ T6172] RDX: 0000000000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4200 [ 2321.773419][ T4958] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 2321.773474][ T4958] ? perf_trace_lock+0x301/0x390 [ 2321.773529][ T4958] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2321.773710][ T4958] netlink_rcv_skb+0x1e9/0x430 [ 2321.782456][ T6172] RBP: ffffc900032cfb70 R08: ffffffff901ee12f R09: 1ffffffff203dc25 [ 2321.785977][ T4958] ? genl_bind+0x370/0x370 [ 2321.786019][ T4958] ? netlink_ack+0xb10/0xb10 [ 2321.786109][ T4958] ? down_read+0x1aa/0x2e0 [ 2321.798130][ T6172] R10: dffffc0000000000 R11: fffffbfff203dc26 R12: ffff8880468c35f0 [ 2321.799248][ T4958] genl_rcv+0x24/0x40 [ 2321.799276][ T4958] netlink_unicast+0x78f/0x940 [ 2321.811355][ T6172] R13: dffffc0000000000 R14: 000000000000001f R15: ffff888040498c90 [ 2321.816429][ T4958] netlink_sendmsg+0x8ba/0xbe0 [ 2321.816493][ T4958] ? netlink_getsockopt+0x570/0x570 [ 2321.829934][ T6172] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 2321.833671][ T4958] ? aa_sock_msg_perm+0x94/0x150 [ 2321.833717][ T4958] ? apparmor_socket_sendmsg+0x88/0x230 [ 2321.833752][ T4958] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2321.833781][ T4958] ? security_socket_sendmsg+0x7c/0xa0 [ 2321.833809][ T4958] ? netlink_getsockopt+0x570/0x570 [ 2321.841658][ T6172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2321.842838][ T4958] ____sys_sendmsg+0x5be/0x8f0 [ 2321.842899][ T4958] ? __sys_sendmsg_sock+0x30/0x30 [ 2321.842957][ T4958] ? import_iovec+0x6f/0xa0 [ 2321.842998][ T4958] ___sys_sendmsg+0x236/0x2e0 [ 2321.843052][ T4958] ? __sys_sendmsg+0x290/0x290 [ 2321.843324][ T4958] __se_sys_sendmsg+0x1b7/0x2a0 [ 2321.948432][ T4958] ? __x64_sys_sendmsg+0x80/0x80 [ 2321.949303][ T6172] CR2: 0000001b2f323ffc CR3: 0000000049344000 CR4: 00000000003506f0 [ 2321.953417][ T4958] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2321.953510][ T4958] ? lockdep_hardirqs_on+0x94/0x140 [ 2321.953583][ T4958] do_syscall_64+0x4c/0xa0 [ 2321.977159][ T4958] ? clear_bhb_loop+0x30/0x80 [ 2321.981876][ T4958] ? clear_bhb_loop+0x30/0x80 [ 2321.986608][ T4958] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2321.992539][ T4958] RIP: 0033:0x7f986f0f40d9 [ 2321.996991][ T4958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2322.001759][ T6172] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 2322.016625][ T4958] RSP: 002b:00007f986d34c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2322.016658][ T4958] RAX: ffffffffffffffda RBX: 00007f986f37bfa0 RCX: 00007f986f0f40d9 [ 2322.016677][ T4958] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2322.016694][ T4958] RBP: 00007f986f18b024 R08: 0000000000000000 R09: 0000000000000000 [ 2322.016711][ T4958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2322.016727][ T4958] R13: 00007f986f37c038 R14: 00007f986f37bfa0 R15: 00007ffe98450008 [ 2322.016823][ T4958] [ 2322.079125][ T6172] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2322.087815][ T6172] Call Trace: [ 2322.092235][ T6172] [ 2322.097945][ T6172] ? trace_rdev_return_void+0x1c0/0x1c0 [ 2322.106290][ T6172] cfg80211_process_wdev_events+0x373/0x490 [ 2322.146178][ T6172] cfg80211_process_rdev_events+0x9d/0x110 [ 2322.155881][ T4962] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.44738'. [ 2322.182485][ T6172] cfg80211_event_work+0x2b/0x40 [ 2322.193266][ T6172] process_one_work+0x867/0xff0 [ 2322.200794][ T6172] ? worker_detach_from_pool+0x240/0x240 [ 2322.212362][ T6172] ? lockdep_hardirqs_off+0x70/0x100 [ 2322.219365][ T6172] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2322.224636][ T6172] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2322.230401][ T6172] ? wq_worker_running+0x97/0x170 [ 2322.235615][ T6172] worker_thread+0xad7/0x12a0 [ 2322.241307][ T6172] kthread+0x42e/0x520 [ 2322.245900][ T6172] ? rcu_lock_release+0x20/0x20 [ 2322.250839][ T6172] ? kthread_blkcg+0xd0/0xd0 [ 2322.255660][ T6172] ret_from_fork+0x1f/0x30 [ 2322.260212][ T6172] [ 2322.263407][ T6172] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2322.270700][ T6172] CPU: 0 PID: 6172 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 2322.278256][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2322.288325][ T6172] Workqueue: cfg80211 cfg80211_event_work [ 2322.294065][ T6172] Call Trace: [ 2322.297346][ T6172] [ 2322.300281][ T6172] dump_stack_lvl+0x188/0x250 [ 2322.304973][ T6172] ? show_regs_print_info+0x20/0x20 [ 2322.310184][ T6172] ? load_image+0x410/0x410 [ 2322.314706][ T6172] panic+0x2f8/0x850 [ 2322.318616][ T6172] ? bpf_jit_dump+0xd0/0xd0 [ 2322.323129][ T6172] ? ret_from_fork+0x1f/0x30 [ 2322.327722][ T6172] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 2322.333283][ T6172] __warn+0x248/0x2b0 [ 2322.337279][ T6172] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 2322.342831][ T6172] report_bug+0x1b9/0x2e0 [ 2322.347220][ T6172] handle_bug+0x3a/0x70 [ 2322.351378][ T6172] exc_invalid_op+0x16/0x40 [ 2322.355887][ T6172] asm_exc_invalid_op+0x16/0x20 [ 2322.360743][ T6172] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 2322.366904][ T6172] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 bd 3f f8 0f 0b eb bf e8 07 bd 3f f8 <0f> 0b eb b6 e8 fe bc 3f f8 0f 0b e9 82 fd ff ff e8 f2 bc 3f f8 0f [ 2322.386510][ T6172] RSP: 0018:ffffc900032cfac0 EFLAGS: 00010293 [ 2322.392586][ T6172] RAX: ffffffff89393fa9 RBX: 1ffff92000659f5c RCX: ffff888045025940 [ 2322.400573][ T6172] RDX: 0000000000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4200 [ 2322.408553][ T6172] RBP: ffffc900032cfb70 R08: ffffffff901ee12f R09: 1ffffffff203dc25 [ 2322.416534][ T6172] R10: dffffc0000000000 R11: fffffbfff203dc26 R12: ffff8880468c35f0 [ 2322.424512][ T6172] R13: dffffc0000000000 R14: 000000000000001f R15: ffff888040498c90 [ 2322.432505][ T6172] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 2322.438072][ T6172] ? trace_rdev_return_void+0x1c0/0x1c0 [ 2322.443626][ T6172] cfg80211_process_wdev_events+0x373/0x490 [ 2322.449537][ T6172] cfg80211_process_rdev_events+0x9d/0x110 [ 2322.455358][ T6172] cfg80211_event_work+0x2b/0x40 [ 2322.460335][ T6172] process_one_work+0x867/0xff0 [ 2322.465206][ T6172] ? worker_detach_from_pool+0x240/0x240 [ 2322.470852][ T6172] ? lockdep_hardirqs_off+0x70/0x100 [ 2322.476157][ T6172] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2322.481186][ T6172] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2322.486732][ T6172] ? wq_worker_running+0x97/0x170 [ 2322.491760][ T6172] worker_thread+0xad7/0x12a0 [ 2322.496457][ T6172] kthread+0x42e/0x520 [ 2322.500529][ T6172] ? rcu_lock_release+0x20/0x20 [ 2322.505393][ T6172] ? kthread_blkcg+0xd0/0xd0 [ 2322.510003][ T6172] ret_from_fork+0x1f/0x30 [ 2322.514445][ T6172] [ 2322.517738][ T6172] Kernel Offset: disabled [ 2322.522386][ T6172] Rebooting in 86400 seconds..