last executing test programs: 4.625389601s ago: executing program 0 (id=9793): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x18, 0x7fe2, 0x1}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000000)=r0, 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000580)=@in6={0xa, 0xce63, 0x0, @loopback={0xffffff7f00000000}}, 0x80, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1818846a0200"/18], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000200), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.78966668s ago: executing program 2 (id=9796): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={0x0, 0x0}, 0x28) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x2, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000022000b0fd25a8c6c8c6f94f920050e614b", 0x15}], 0x1}, 0x4000010) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, @perf_config_ext={0x6, 0x8}, 0x2816, 0x0, 0x8, 0x0, 0x3, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x6, 0x7}, 0x8, 0x7, 0xb, 0x4, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) syz_clone(0x110ac000, &(0x7f0000000580)="7b206ba38e6b3dbeaaff854fc9a0ffe6997b381164ec10ba371726766bc6e69ea947987e05a1387962ff4f67dea6ce83df598d5ae0a8576ea91f0683026b75f8b4c63f68953d90718ce2c76d7991320551cd78a40b0443b02136d08adfa4c1da7eab03b1e34c4f703eb5ec0800dd2f75ffa7373a36513d9dded0d21904ca8ceb", 0x80, &(0x7f00000003c0), &(0x7f0000000200), &(0x7f0000000500)="e3e8f0060f1522aefe7e21659b8979d2d120dc93db317a60159e56eff112cf06afa42b78ce694ca9dfbf8bd335cefbbf4917bc354f7886b6c876d5c9978e3748959b3b4ed981b47bbd5faee6e379fdfb0957305b33d829211447fd7da9cd4badc0623d6200") bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x19) ioctl$TUNSETLINK(r3, 0x400454cd, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x48, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x5, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05000000040000000400000003"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xe, &(0x7f0000000080), 0x4) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x29, 0x5, 0x0) 3.595971578s ago: executing program 0 (id=9797): r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0xff, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8940, &(0x7f0000000080)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex, 0xe, 0x1, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600200ff0f040b067c55a1bc000900080006990300000015000500fe8081780d0015000d6f1da44af5ffa0030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad96067e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f00000002c0)='\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex=r4, 0xffffffffffffffff, 0x11, 0x24, 0x0, @void, @void, @void, @value=r5, r2}, 0x20) 3.35340014s ago: executing program 0 (id=9798): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000101711058000000000095000000001008"], 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0x10, 0x0, &(0x7f0000000180)="2b206d074843b397737ea49da2aabe98", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x0, 0x0, 0x54, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9601"], 0x6e8a) 3.31961416s ago: executing program 3 (id=9799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa020000}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 3.037672665s ago: executing program 2 (id=9802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x901, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x80}, 0xc) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x33, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x14dd}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x0, 0x0, 0x4, 0xb, 0xa, 0x10, 0x8}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x5}]}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40e00, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x1, r2, r3, r4, r5, r6], &(0x7f0000000540)=[{0x5, 0x5, 0xd, 0x2}, {0x1, 0x2, 0x0, 0x3}, {0x5, 0x1, 0xd}, {0x4, 0x5}], 0x10, 0x3}, 0x94) (async) r7 = perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x6, 0x5, 0x6, 0x6, 0x0, 0x8000000000, 0x401, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0x7f}, 0x108198, 0xb8, 0x6, 0x1, 0x6, 0x1, 0xeb, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xa, r6, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x8001) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x27, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r8}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x55, 0x55, 0x6, [@const={0x5, 0x0, 0x0, 0xa, 0x4}, @datasec={0x4, 0x5, 0x0, 0xf, 0x1, [{0x2, 0x2, 0x187f}, {0x1, 0x5, 0x40}, {0x4, 0xff, 0x8}, {0x3, 0x2, 0x5}, {0x2, 0x3, 0x1}], "11"}]}, {0x0, [0x2e, 0x5f, 0x30, 0x0]}}, &(0x7f0000000880)=""/140, 0x76, 0x8c, 0x0, 0x10000, 0x10000, @value=r1}, 0x28) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000980), 0x4) (async) socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f00000009c0)={'full', 0x20, 0x8, 0x20, 0x10001}, 0x2f) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000a00)='^') (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={&(0x7f0000000a40)="d62f95bd56fb013560f4225a55349a35cfda76b4da86256188313cfe2c8a58d4632ab9256602ed73de0e9a7cefcce50906b039b65132205a1878775925569b5e557292f3d6b5145beba9a0487a553873249572d0be90788f4a093a3dc175720a4f9b9a70692b", &(0x7f0000000ac0)=""/239, &(0x7f0000000bc0)="364c52815fc323171fe0057573ee3a9956f06da69314c1da796b468f8cd3cb74053d9a5258a8277f7bd13cb40f149ef9045ab365012a3b870f95021e1aac7151d692bb18304285b746e5680bfea359dc81ca3a58bc8d4b9d3ec84be1a776ff66b6ffe126a994868748177bcd33947b5e4f95dce0a72cac45d1366989b5789b9ce167592f1ea856f6d5b30903353682fb826dddc2f6c3aafec5a7a8bd87f857471b9d08073a7267a0385eb9e80f58645e7c33a323a96b8f599ab7b73ea20625ed434ef862a7cad0", &(0x7f0000000cc0)="5572115f7662ddd9ad4328ecd81396fb8a1a30d59f62a2a2f67c0c378373cef18c113ad26bdcb57c0b0418ee2fd99e79048fe730f6521eea5995c7ff9978a95761791402366d4f3cde49506ca120d2c570655d75a541f008282831f172e7e180b285461016475d077985e28d1372727f2f6dcb53ad18405eef1e5f23cdf9830c1685a81d014bbe0e84e493a946a2180d8f80ddba1ed882ab77cd0e98d83f884d4c5a33fdb259c484fb2c6472e512f5fecc8ceb79f9393c0175a77f1cb012f9bfc02e4ebf22285542e3ae4225a6fb", 0x4fe5a86b, r8}, 0x38) (async) r9 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) close(r9) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000e40)=@generic={&(0x7f0000000e00)='./file0\x00', r5}, 0x18) write$cgroup_pressure(r6, &(0x7f0000000e80)={'full', 0x20, 0x6, 0x20, 0x10}, 0x2f) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001000)={r4, 0x58, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001040)=0xffffffffffffffff, 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001100)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x13, 0x9, &(0x7f0000000ec0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x95}, @generic={0x3, 0x0, 0x2, 0x3, 0x9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}], &(0x7f0000000f40)='syzkaller\x00', 0xf, 0x0, 0x0, 0x1f00, 0x5, '\x00', r10, @fallback=0x1f, r11, 0x8, &(0x7f0000001080)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000010c0)={0x2, 0x9, 0x5, 0x8}, 0x10, r12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001280)={r3, 0x58, &(0x7f0000001200)={0x0, 0x0}}, 0x10) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000012c0)={r13, 0xfe07, 0x18}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001400)={r14, &(0x7f0000001300)="5e7e37716d8d0873b51e38b33b290716709ac40f0ca899938c4a2ffc4b077af6ab6e57b059e749303f54723d8e85d23f088a6c3374765ae05048d7932cf384e1771359447df11983fc55b755d35d5424", &(0x7f0000001380)=""/70}, 0x20) 2.988097349s ago: executing program 1 (id=9803): r0 = socket$kcm(0x10, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000002b00)={&(0x7f0000000340)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0xffff, @mcast2, 0x401}}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000400)="0b2da0c78148947149076b93e5ba5d009f4f045b46bfa9c45f41c3786238840790ea304c4bd278592ff469f036002da0fcb15e125edfb5867ac95ae2b35178fb496f559e87ab3ea931a3c2b5c02a4dc59e1b15b49dcb7f389da5fa74bf65e992f0da11a7e9286ce6527d4044c81c0d", 0x6f}, {&(0x7f0000000480)="88e0746a2e9896909ccac275ec608033793bd587ae3535785ea1", 0x1a}, {&(0x7f00000004c0)="90dfdbf8bcc6d622ed802c6727dcbb30c205636b8e8c756d06c3fb554dd0b5a459bffe4709f2aedf9eef03c1fa5763b7fadd9696ed5632080557e5c8e5b1dde92a311ddc2acdea3b2b359252fb225ae316b09ef5ef4c30e29deb97171a9b9021b9c7d6ce46763f49b3d8f0f34794406ba7a2bb9f382883ef27365b5f252965b863cfa06973295ee0bd12d4d63d4f42302efc341aeaf8b558c851a072ded4145f19a5e465d97fb30abec758456d2c762fb70adc4e7ff93d", 0xb7}, {&(0x7f0000000580)="2e891952d5569de5dfa9e2c276ddfc815721624ac6d304e857f5c2bcd32dd8c4fd575a594402e76b60c2a48e6d33c2ee796dbee313fe68fa0c94c3423565a941e4a150df15c1cd69759d9bb7e575fafb15f31f69ef8fb91cc31880652d6c039c9802570978b3a8e072dea6e55de9da8adfb501189db93984ba7df7b6dcf2fbe355ee68d874b28757caf8d0f81fc7", 0x8e}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="b6faa502082922e7d8cb0500e5983a63fac9a81a00f6e3457ed767365f222e663a322013d241adc76d05bd45f5e4418bb5b4f7e0e733ee207adbe8a69bfec352384ad368082bdf140b7bf44794f0a5a728c83f200589b584a9b28f2d774639ac9f50e31bb723fdf0f44571fc94eb1579a12295f058b39ccb382309bcf62df373c3c7c51b0b2423114ef3cc69fd12f4aa4b60feeff735649f4869e78261391394b4f1da5894ef4679c7c4a6d9fc140e565ab00eebd74063edc89eec36e6d32b563e1fd54096176157c68f2eef2fbe447b5852bb7b8d415eb44a9638434dac27abe907b5af60453caaf2fc0bcd48ecfc03", 0xf0}], 0x6, &(0x7f0000002940)=[{0x18, 0x10f, 0x9, 'Q'}, {0x88, 0x29, 0x9, "e9e83d9a01b8715615f9031bdd5b5b35a23528b85b415bfe72a3c078eac4cc2eb4c855e62eecf1fbde8d75b5318b61550078af2f7916bb6d2d30440fca575010f8d9650e756fd2190ed62b1c78005586194cd108f5dda432b5d0839ff4c2f2828c28b1d47c43143dd79faa11e5d9c92001903feef3dc"}, {0x28, 0x10e, 0x3, "1347b540c0e1d72c49c09d25f4fb2e81d645a399e6ea6f"}, {0x78, 0x116, 0x10001, "fbb59878b34487daa29b740b07bfa3146bbcaf2c37b872759c8bad3c60d0050a3303d9db73ab02d9de8ec454fc4f641c1f61ba290aa1213cb6dd9495d426e466b1f9c28cb56facc47cedae1319761004a53ad7cad387ab6b094caa8dc9e3be7d28bbc6432828d8ce"}, {0x68, 0x1, 0x2, "1452578b42bfa5556b06d7f5659929590e3a4fb15d9bc86e4f7754ed570e395e447e65a1cfa7f688f861613853e2161074aa70ae64340fa6828c814745b1a15f8814b4d933459be72e521e4cb7a12f419efc5dea"}], 0x1a8}, 0x81) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x1, 0x4000000, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x40fff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) 2.75088501s ago: executing program 0 (id=9805): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009faaf2ab32cc617d0000000900200000f4ff000800000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x80047437, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000006c7d10e6c88a78b9c61c020021f2000110001301000000020000007f00000008000000faff6100756f9d8f90377627270754"], &(0x7f0000000400)=""/188, 0x34, 0xbc, 0x1}, 0x28) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r2 = socket$kcm(0x23, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc0) sendmsg$kcm(r2, &(0x7f00000031c0)={&(0x7f0000000340)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x80, 0x0, 0x0, &(0x7f0000001d00)=ANY=[], 0x13a0}, 0x44811) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r1}) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, 0x0, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={0x0, 0x0}, 0x28) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, @perf_bp={0x0, 0x2}, 0x2816, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x8, 0x7, 0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x48, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) 2.75072854s ago: executing program 3 (id=9807): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2010, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000e40)='ns/time\x00') ioctl$SIOCSIFHWADDR(r1, 0x40305839, &(0x7f0000000280)={'lo\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) r2 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0040011004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 1.897734324s ago: executing program 2 (id=9808): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x64317119, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0xa}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x8, 0x10}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = socket$kcm(0x25, 0x5, 0x0) recvmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40002020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], 0x0, 0x5a, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x18}, 0x18) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000feffffff8500000007000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x13, 0x1c, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0x7, 0x5, 0x9, 0x10, 0x10}, @call={0x85, 0x0, 0x0, 0x92}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x401, 0x0, 0x0, 0x41100, 0x8, '\x00', r4, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x2, 0x1}, 0x10, r7, r8, 0x7, &(0x7f0000000880)=[r9], &(0x7f00000008c0)=[{0x0, 0x4, 0x7, 0x4}, {0x3, 0x5, 0xe, 0x8}, {0x1, 0x3, 0x10, 0x5}, {0x4, 0x5, 0x6, 0x1}, {0x0, 0x3, 0x1, 0x9}, {0x5, 0x2, 0x5, 0x2}, {0x1, 0x5, 0x0, 0xc}], 0x10, 0x1}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x1, 0x2}, @ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x3}, @ptr={0x3, 0x0, 0x0, 0x2, 0x5}, @var={0x3, 0x0, 0x0, 0xe, 0x2}, @restrict={0x3, 0x0, 0x0, 0xb, 0x2}, @fwd={0x5}]}, {0x0, [0x0, 0x61, 0x0, 0x30, 0x0]}}, &(0x7f0000001240)=""/123, 0x7f, 0x7b, 0x1, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@bloom_filter={0x1e, 0xa078, 0x0, 0x4, 0x1000, r2, 0x401, '\x00', r6, r10, 0x1, 0x0, 0x5, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b41100000000000061146c000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x6ed43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x4) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) r13 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 1.854054337s ago: executing program 1 (id=9809): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000f8c16509dbfc6a1b030000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={0x0, 0x0}, 0x28) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, @perf_bp={0x0, 0x2}, 0x2816, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x8, 0x7, 0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x48, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x5, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x2c, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xe, &(0x7f0000000080), 0x4) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b04, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.841543781s ago: executing program 4 (id=9810): r0 = socket$kcm(0x1e, 0x7, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000580)="6eee773f1c8e29", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe3}, 0x50) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xff1f, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x11e, &(0x7f0000000200), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.793078115s ago: executing program 3 (id=9811): socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91b24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1}, &(0x7f00000001c0), &(0x7f0000000380)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r3, 0x58, &(0x7f0000000540)}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) close(0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x0) (async) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.566957373s ago: executing program 0 (id=9812): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{0x0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg$kcm(r7, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.44217432s ago: executing program 2 (id=9813): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r3 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x11b, 0x2, &(0x7f0000000900)=r2, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x20}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2000000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201c5", 0x2f}], 0x1}, 0x4000804) 1.377077509s ago: executing program 4 (id=9814): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000300)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000150f00e00000000020086e0040", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002400000000000000000000000700000044140771ac1414aa00000000ac14141d0000000500000000"], 0x48}, 0x200040c4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x11, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000003d80)={&(0x7f0000000540)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x80, &(0x7f0000003d00)=[{&(0x7f00000005c0)="aa84754a07461e407f95002f2d50d96aa98c5539e28de4f3af4541be8d645dc86fbb42f80be6f8bd249885a8177738f4c309f2356ba5b8e37852baed2ac4a9d04aecba5776dc72d972debaa1a24c24f313f9e18156480dcbab5d11122f35cc0091e19ba9cf299a39c10e945f5475ccb56d1070e4c1d06e", 0x77}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="6709d68fa578c476254f3198f1ee319812a6ef66445f81f593fdeec1a9e2b43c7c92a43035a874fd822a", 0x2a}, {&(0x7f0000002bc0)="0b6ed863c99671440cffa50ba2c90e0717db704a", 0x14}, {&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)="8c43ca78f9c8ea3d5a1f109f0b3a7ef8f33a68d7b794f336f822f8013a7c9d6ff2c41fa0e39cc702dae4773970a98841dad43b13c39370c97e07f6421fd9f4bdfc1efea78cb67a490a82cc4317e4d5e1ac8146ae9aa28e672d961b7e0679fea4a400c2f82ce4184beedca24b24a7eb21b074bc5dbf07071a1fe84a2da848c018741210051718a3a841387ec463a620b4865e15085561fd4ebfba27fc757245286652c78732e6c45e59bce574e3608e43d44bdcd27900d97b7a4187c93f4cbe480b36eab95a5ca2ab33", 0xc9}], 0x6}, 0xc000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x10890, 0x80000002, 0xfffffffe, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022000b48f1f403c5c0de7af90124fc60", 0x14}], 0x1}, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e0000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2000, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000680)={'veth1_to_batadv\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0) 1.202949391s ago: executing program 1 (id=9815): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xdfc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.023575045s ago: executing program 4 (id=9816): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa020000}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 955.283225ms ago: executing program 1 (id=9817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$kcm(0x29, 0x7, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r0, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r1, &(0x7f0000000740)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f00000001c0)="1f64897a2e", 0x5}, {&(0x7f0000000200)="ccd700c58f4453", 0x7}, {&(0x7f0000000340)="761e0f0af6b441d108cc1fe9d8026d493e7b13bde4e9a7f18dcb6c3fa4dd72e9bc983dc66947522fed36ef3629b46aa1bdf6a3a77582c51d07018f23e142d41ab05c7f46a673dc35b02fee6d1166480af920c7eb605c002441a6be3a8bfcfc045c8a9f331ba402ba54a7d7886872b415783be451cd054f86c09ec9538512cfc5ffcab35cd4aa675b2208a06f0a670d793710c7261d0cad5cb01fd3c898d1ce22b184a65d2b064d7ef8952796dec37e6162b3896de11c5b3e63bd49168e1f16fccf110f0f3e1dc60b904e98ee6dfea63fcefb5f5275589757a8c4cc925490b0ff9e660c514e9d2014f1e6ef47115b92ca", 0xf0}], 0x3, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @multicast1}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x24, 0x3, 0x0, [{@empty, 0x1ff}, {@local, 0x1}, {@rand_addr=0x64010102, 0x4}, {@remote, 0x6}, {@loopback, 0x2}, {@remote, 0x7}, {@multicast1, 0x3}, {@multicast2, 0x10}]}, @lsrr={0x83, 0x7, 0x3d, [@multicast2]}, @cipso={0x86, 0x12, 0x2, [{0x5, 0xc, "5f0551316197a7710162"}]}]}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x12, 0x1, 0xe, [{@loopback, 0x944}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c841c22}, {@broadcast, 0xb94}, {@private=0xa010101}, {@rand_addr=0x64010102, 0xf}, {@empty, 0x7fff}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x33}}, @ip_ttl={{0x14}}], 0x138}, 0x2028054) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={0x0, 0x0}, 0x28) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, @perf_bp={0x0, 0x2}, 0x2816, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x800, 0xffffffffbf5dc9d2}, 0x8, 0x7, 0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x48, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r6 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xf9, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x3, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000100)={0x5, 0x80, 0x9, 0x8, 0x6, 0x7, 0x0, 0x207, 0x701a0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x401, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x18047, 0x9, 0x1, 0x8, 0x23, 0x2, 0x1, 0x0, 0x7, 0x0, 0xfffffffffffff999}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) close(r5) perf_event_open(0x0, 0x0, 0x5, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xe, &(0x7f0000000080), 0x4) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b04, 0x0) 865.015642ms ago: executing program 2 (id=9818): bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r0 = perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f"], 0x48) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4000, @empty}, 0x10, 0x0}, 0x3000c085) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001980)='+', 0x1}], 0x1}, 0x4044004) (async) sendmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="d0", 0x1}], 0x1}, 0x40041) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) (async) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESDEC=r5, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000071180b000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x8, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa35066b876c3d0000007ea6e763160af36504001ac0080010000500e7daeb660000ef64bc76bd7b6278c206d83f38d833aa516adc24eab556a705251e618294ff0051f60a9553adac000e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2080) (async) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)=""/4110, 0x100e}], 0x1}, 0x10100) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 849.844897ms ago: executing program 4 (id=9819): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x42}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000001480)="0d113311d7af2c7d0a6b8bcc9ab77974", 0x10}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @loopback}}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 778.425138ms ago: executing program 3 (id=9820): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f00000002c0)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) (async) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000aa6000003"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) socket$kcm(0x29, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x12) 606.840059ms ago: executing program 1 (id=9821): socketpair(0x22, 0x2, 0x25, &(0x7f0000000840)) perf_event_open(&(0x7f0000000380)={0x0, 0x43, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2880, 0xc8, 0x0, 0x4, 0x0, 0x40002, 0x0, 0x0, 0xf6d0, 0x0, 0x100000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce22001b2f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0xf, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x22, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000004e0000461282ef28986f043fc41e8f998400"], 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000007000000000500000900000001000000", @ANYRES32, @ANYBLOB="fcffffff000000000000003ba881be73efc69d38000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) socket$kcm(0x11, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f0000000500)=@hci={0x1f, 0xff7f, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x9de8}}], 0x18}, 0x400c00d) r5 = socket$kcm(0x10, 0x1, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) socket$kcm(0x23, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r6 = socket$kcm(0x2, 0x3, 0x84) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x4000, r6}, 0x18) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0xa6200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x1000}, 0xc0, 0x6, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c0000000000000000000000080000"], 0x48}, 0x0) 505.082889ms ago: executing program 4 (id=9822): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f7829abbb904021d0803", 0x14}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$cgroup_devices(r1, 0x0, 0xffdd) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x50}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x8, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r2, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000300)="14000000320081024e81798ead4cb9040c1d0800", 0x14}], 0x1}, 0x20004000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000080), 0x2) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) 504.49919ms ago: executing program 3 (id=9823): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x8, 0x8, 0x140, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000840)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0], 0x0, 0x12, &(0x7f0000000900)=[{}], 0x8, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x1b, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @exit, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x6, 0x2a, &(0x7f0000000800)=""/42, 0x41100, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000bc0)=[r2, r0, r2], &(0x7f0000000c00)=[{0x2, 0x3, 0x9, 0x7}], 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x4a}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x2000003, 0xffdffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee5, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x830d}, 0x0, 0x4, 0xfffffffe, 0x0, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000451000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES16=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) 452.141595ms ago: executing program 0 (id=9824): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) close(r1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) write$cgroup_devices(r2, 0x0, 0xfffffeff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r2, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000540)='%pK \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x0, 0x3, 0x9, 0x200, r3, 0x63, '\x00', 0x0, r2, 0x1, 0x3, 0x3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r5, 0x1d, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x4e, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup, r5, 0x11, 0x20, 0x0, @void, @void, @void, @value=r7, r6}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000600)={0x4, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@ifindex, r0, 0xd, 0x2020, 0x0, @void, @void, @value=r8, @void, r6}, 0x20) r9 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8946, &(0x7f0000000040)={'wlan0\x00', @random='\x00\x00\x00\x00\x00 '}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000000)='\x00') 155.713453ms ago: executing program 4 (id=9825): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000f8c16509dbfc6a1b030000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={0x0, 0x0}, 0x28) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, @perf_bp={0x0, 0x2}, 0x2816, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x8, 0x7, 0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x48, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x5, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x2c, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xe, &(0x7f0000000080), 0x4) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b04, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 154.396074ms ago: executing program 1 (id=9835): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{0x0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) recvmsg$kcm(r6, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 153.085304ms ago: executing program 2 (id=9826): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, r1, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000080)}, 0x624d, 0xffffffffffffffff, 0x80000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70910a44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000fafff64f2929e8e800"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x12) r8 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x20, &(0x7f0000000200)={&(0x7f0000000140)=""/85, 0x55, 0x0, &(0x7f00000001c0)=""/18, 0x12}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808e784fadd0ffe184b000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bfa10000000000000701000000feffffb702000008000000b703000000000000850000002d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x25) 0s ago: executing program 3 (id=9827): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xdfc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1668.834121][ T1769] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7938'. [ 1668.870103][ T1779] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7940'. [ 1669.009602][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.016045][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.041552][ T1779] team0: Port device team_slave_0 removed [ 1669.105456][ T1779] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1669.269141][ T1781] netlink: 'syz.1.7940': attribute type 39 has an invalid length. [ 1669.303583][ T1801] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.7946'. [ 1669.894969][ T1798] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7945'. [ 1669.926377][ T1798] device hsr_slave_0 left promiscuous mode [ 1669.934537][ T1798] device hsr_slave_1 left promiscuous mode [ 1670.391673][ T1816] netlink: 'syz.2.7949': attribute type 2 has an invalid length. [ 1670.408320][ T1816] netlink: 119 bytes leftover after parsing attributes in process `syz.2.7949'. [ 1670.493946][ T1816] netlink: 'syz.2.7949': attribute type 10 has an invalid length. [ 1670.507661][ T1826] netlink: 'syz.0.7950': attribute type 3 has an invalid length. [ 1670.557371][ T1822] netlink: 'syz.3.7951': attribute type 16 has an invalid length. [ 1670.600055][ T1819] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1670.631276][ T1819] CPU: 1 PID: 1819 Comm: syz.2.7949 Not tainted syzkaller #0 [ 1670.638743][ T1819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1670.648853][ T1819] Call Trace: [ 1670.652270][ T1819] [ 1670.655239][ T1819] dump_stack_lvl+0x188/0x24e [ 1670.659981][ T1819] ? show_regs_print_info+0x12/0x12 [ 1670.665234][ T1819] ? load_image+0x410/0x410 [ 1670.669817][ T1819] sysfs_warn_dup+0x8a/0xa0 [ 1670.674396][ T1819] sysfs_do_create_link_sd+0xc0/0x110 [ 1670.679832][ T1819] device_add+0x83b/0x1050 [ 1670.684315][ T1819] wiphy_register+0x1d8b/0x2aa0 [ 1670.689325][ T1819] ? cfg80211_event_work+0x40/0x40 [ 1670.694486][ T1819] ? minstrel_ht_alloc+0x894/0xa20 [ 1670.699657][ T1819] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1670.705784][ T1819] ieee80211_register_hw+0x2d48/0x39f0 [ 1670.711306][ T1819] ? ieee80211_register_hw+0xf41/0x39f0 [ 1670.716899][ T1819] ? ieee80211_register_hw+0xf41/0x39f0 [ 1670.722547][ T1819] ? ieee80211_tasklet_handler+0x20/0x20 [ 1670.728257][ T1819] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1670.734217][ T1819] ? __debug_object_init+0xed/0x440 [ 1670.739475][ T1819] ? memset+0x1e/0x40 [ 1670.743481][ T1819] ? __hrtimer_init+0x189/0x270 [ 1670.748354][ T1819] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1670.754114][ T1819] ? memcpy+0x3c/0x60 [ 1670.758115][ T1819] hwsim_new_radio_nl+0xab7/0xc90 [ 1670.763348][ T1819] genl_family_rcv_msg_doit+0x22f/0x350 [ 1670.768914][ T1819] ? end_current_label_crit_section+0x170/0x170 [ 1670.775180][ T1819] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1670.781183][ T1819] ? bpf_lsm_capable+0x5/0x10 [ 1670.785965][ T1819] ? security_capable+0x85/0xb0 [ 1670.790928][ T1819] genl_rcv_msg+0x601/0x790 [ 1670.795462][ T1819] ? genl_bind+0x360/0x360 [ 1670.799888][ T1819] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1670.806344][ T1819] netlink_rcv_skb+0x1ef/0x440 [ 1670.811122][ T1819] ? genl_bind+0x360/0x360 [ 1670.815556][ T1819] ? netlink_ack+0x1160/0x1160 [ 1670.820349][ T1819] ? down_read+0x1a8/0x2d0 [ 1670.824812][ T1819] genl_rcv+0x24/0x40 [ 1670.828837][ T1819] netlink_unicast+0x7ad/0x920 [ 1670.833657][ T1819] netlink_sendmsg+0x8ad/0xbd0 [ 1670.838463][ T1819] ? netlink_getsockopt+0x550/0x550 [ 1670.843682][ T1819] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1670.849266][ T1819] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1670.854659][ T1819] ? security_socket_sendmsg+0x7c/0xa0 [ 1670.860232][ T1819] ? netlink_getsockopt+0x550/0x550 [ 1670.865468][ T1819] ____sys_sendmsg+0x5ed/0x9a0 [ 1670.870254][ T1819] ? __sys_sendmsg_sock+0x30/0x30 [ 1670.875375][ T1819] ? __import_iovec+0x306/0x510 [ 1670.880426][ T1819] ? import_iovec+0x6f/0xa0 [ 1670.884970][ T1819] ___sys_sendmsg+0x2a2/0x360 [ 1670.890047][ T1819] ? __sys_sendmsg+0x2a0/0x2a0 [ 1670.894865][ T1819] ? trace_call_bpf+0xbf/0x6b0 [ 1670.899688][ T1819] __se_sys_sendmsg+0x1c3/0x2b0 [ 1670.904556][ T1819] ? perf_trace_preemptirq_template+0x268/0x320 [ 1670.911001][ T1819] ? __x64_sys_sendmsg+0x80/0x80 [ 1670.915967][ T1819] ? lockdep_hardirqs_on+0x94/0x140 [ 1670.921192][ T1819] do_syscall_64+0x4c/0xa0 [ 1670.925620][ T1819] ? clear_bhb_loop+0x60/0xb0 [ 1670.930314][ T1819] ? clear_bhb_loop+0x60/0xb0 [ 1670.935025][ T1819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1670.940937][ T1819] RIP: 0033:0x7fe68839e159 [ 1670.945388][ T1819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1670.965016][ T1819] RSP: 002b:00007fe6891d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1670.973618][ T1819] RAX: ffffffffffffffda RBX: 00007fe688626090 RCX: 00007fe68839e159 [ 1670.981599][ T1819] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1670.989582][ T1819] RBP: 00007fe68843506b R08: 0000000000000000 R09: 0000000000000000 [ 1670.997565][ T1819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1671.005545][ T1819] R13: 00007fe688626128 R14: 00007fe688626090 R15: 00007ffcdf812168 [ 1671.013549][ T1819] [ 1671.705640][ T1842] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1671.767344][ T1842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1671.908665][ T1849] netlink: 'syz.1.7958': attribute type 27 has an invalid length. [ 1672.413052][ T1866] netlink: 'syz.2.7964': attribute type 2 has an invalid length. [ 1672.442775][ T1866] __nla_validate_parse: 5 callbacks suppressed [ 1672.442798][ T1866] netlink: 119 bytes leftover after parsing attributes in process `syz.2.7964'. [ 1672.596722][ T1871] netlink: 'syz.1.7963': attribute type 10 has an invalid length. [ 1672.647277][ T1869] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7964'. [ 1672.948774][ T1871] team0: Port device geneve1 added [ 1673.042145][ T1866] netlink: 'syz.2.7964': attribute type 10 has an invalid length. [ 1673.083448][ T1866] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7964'. [ 1673.129770][ T1869] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1673.169871][ T1869] CPU: 1 PID: 1869 Comm: syz.2.7964 Not tainted syzkaller #0 [ 1673.177429][ T1869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1673.187637][ T1869] Call Trace: [ 1673.190957][ T1869] [ 1673.194016][ T1869] dump_stack_lvl+0x188/0x24e [ 1673.198803][ T1869] ? show_regs_print_info+0x12/0x12 [ 1673.204224][ T1869] ? load_image+0x410/0x410 [ 1673.208798][ T1869] sysfs_warn_dup+0x8a/0xa0 [ 1673.213363][ T1869] sysfs_do_create_link_sd+0xc0/0x110 [ 1673.218799][ T1869] device_add+0x83b/0x1050 [ 1673.223279][ T1869] wiphy_register+0x1d8b/0x2aa0 [ 1673.228208][ T1869] ? cfg80211_event_work+0x40/0x40 [ 1673.233419][ T1869] ? minstrel_ht_alloc+0x894/0xa20 [ 1673.238554][ T1869] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1673.244736][ T1869] ieee80211_register_hw+0x2d48/0x39f0 [ 1673.250323][ T1869] ? ieee80211_register_hw+0xf41/0x39f0 [ 1673.255882][ T1869] ? ieee80211_register_hw+0xf41/0x39f0 [ 1673.261449][ T1869] ? ieee80211_tasklet_handler+0x20/0x20 [ 1673.267097][ T1869] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1673.273021][ T1869] ? __debug_object_init+0xed/0x440 [ 1673.278236][ T1869] ? memset+0x1e/0x40 [ 1673.282279][ T1869] ? __hrtimer_init+0x189/0x270 [ 1673.287148][ T1869] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1673.292907][ T1869] ? memcpy+0x3c/0x60 [ 1673.296907][ T1869] hwsim_new_radio_nl+0xab7/0xc90 [ 1673.301973][ T1869] genl_family_rcv_msg_doit+0x22f/0x350 [ 1673.307540][ T1869] ? end_current_label_crit_section+0x170/0x170 [ 1673.313810][ T1869] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1673.319724][ T1869] ? bpf_lsm_capable+0x5/0x10 [ 1673.324675][ T1869] ? security_capable+0x85/0xb0 [ 1673.329544][ T1869] genl_rcv_msg+0x601/0x790 [ 1673.334247][ T1869] ? genl_bind+0x360/0x360 [ 1673.338675][ T1869] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1673.345244][ T1869] netlink_rcv_skb+0x1ef/0x440 [ 1673.350109][ T1869] ? genl_bind+0x360/0x360 [ 1673.354544][ T1869] ? netlink_ack+0x1160/0x1160 [ 1673.359350][ T1869] ? down_read+0x1a8/0x2d0 [ 1673.363807][ T1869] genl_rcv+0x24/0x40 [ 1673.367815][ T1869] netlink_unicast+0x7ad/0x920 [ 1673.372704][ T1869] netlink_sendmsg+0x8ad/0xbd0 [ 1673.377491][ T1869] ? netlink_getsockopt+0x550/0x550 [ 1673.382728][ T1869] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1673.388410][ T1869] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1673.393814][ T1869] ? security_socket_sendmsg+0x7c/0xa0 [ 1673.399385][ T1869] ? netlink_getsockopt+0x550/0x550 [ 1673.404603][ T1869] ____sys_sendmsg+0x5ed/0x9a0 [ 1673.409409][ T1869] ? __sys_sendmsg_sock+0x30/0x30 [ 1673.414446][ T1869] ? __import_iovec+0x306/0x510 [ 1673.419413][ T1869] ? import_iovec+0x6f/0xa0 [ 1673.423934][ T1869] ___sys_sendmsg+0x2a2/0x360 [ 1673.428657][ T1869] ? __sys_sendmsg+0x2a0/0x2a0 [ 1673.433535][ T1869] ? trace_call_bpf+0xbf/0x6b0 [ 1673.438344][ T1869] __se_sys_sendmsg+0x1c3/0x2b0 [ 1673.443312][ T1869] ? perf_trace_preemptirq_template+0x268/0x320 [ 1673.449569][ T1869] ? __x64_sys_sendmsg+0x80/0x80 [ 1673.454530][ T1869] ? lockdep_hardirqs_on+0x94/0x140 [ 1673.459747][ T1869] do_syscall_64+0x4c/0xa0 [ 1673.464344][ T1869] ? clear_bhb_loop+0x60/0xb0 [ 1673.469157][ T1869] ? clear_bhb_loop+0x60/0xb0 [ 1673.473852][ T1869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1673.479768][ T1869] RIP: 0033:0x7fe68839e159 [ 1673.484197][ T1869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1673.503843][ T1869] RSP: 002b:00007fe6891d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1673.512270][ T1869] RAX: ffffffffffffffda RBX: 00007fe688626090 RCX: 00007fe68839e159 [ 1673.520338][ T1869] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1673.528317][ T1869] RBP: 00007fe68843506b R08: 0000000000000000 R09: 0000000000000000 [ 1673.536392][ T1869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1673.544372][ T1869] R13: 00007fe688626128 R14: 00007fe688626090 R15: 00007ffcdf812168 [ 1673.552369][ T1869] [ 1674.021671][ T1879] netlink: 'syz.3.7967': attribute type 3 has an invalid length. [ 1674.041138][ T1879] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7967'. [ 1674.317378][ T1892] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7969'. [ 1674.362145][ T1892] device hsr_slave_0 left promiscuous mode [ 1674.379040][ T1892] device hsr_slave_1 left promiscuous mode [ 1674.637828][ T1895] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7969'. [ 1674.777096][ T1907] netlink: 'syz.0.7982': attribute type 10 has an invalid length. [ 1674.890988][ T1907] netlink: 'syz.0.7982': attribute type 10 has an invalid length. [ 1674.950309][ T1907] device syz_tun entered promiscuous mode [ 1675.054731][ T1907] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1675.172066][ T1919] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.7974'. [ 1675.238267][ T1919] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1675.317702][ T1933] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1675.356875][ T1933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1676.164591][ T1951] netlink: 'syz.2.7983': attribute type 1 has an invalid length. [ 1676.285483][ T1946] netlink: 'syz.4.7981': attribute type 2 has an invalid length. [ 1676.325962][ T1946] netlink: 119 bytes leftover after parsing attributes in process `syz.4.7981'. [ 1676.409979][ T1952] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7984'. [ 1676.432332][ T1948] netlink: 'syz.4.7981': attribute type 10 has an invalid length. [ 1676.500270][ T1946] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7981'. [ 1676.649737][ T1946] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1676.766153][ T1946] CPU: 1 PID: 1946 Comm: syz.4.7981 Not tainted syzkaller #0 [ 1676.773620][ T1946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1676.783721][ T1946] Call Trace: [ 1676.787033][ T1946] [ 1676.789995][ T1946] dump_stack_lvl+0x188/0x24e [ 1676.794722][ T1946] ? show_regs_print_info+0x12/0x12 [ 1676.799999][ T1946] ? load_image+0x410/0x410 [ 1676.804568][ T1946] sysfs_warn_dup+0x8a/0xa0 [ 1676.809128][ T1946] sysfs_do_create_link_sd+0xc0/0x110 [ 1676.814551][ T1946] device_add+0x83b/0x1050 [ 1676.819023][ T1946] wiphy_register+0x1d8b/0x2aa0 [ 1676.824033][ T1946] ? cfg80211_event_work+0x40/0x40 [ 1676.829191][ T1946] ? minstrel_ht_alloc+0x894/0xa20 [ 1676.834342][ T1946] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1676.840579][ T1946] ieee80211_register_hw+0x2d48/0x39f0 [ 1676.846182][ T1946] ? ieee80211_register_hw+0xf41/0x39f0 [ 1676.851759][ T1946] ? ieee80211_register_hw+0xf41/0x39f0 [ 1676.857330][ T1946] ? ieee80211_tasklet_handler+0x20/0x20 [ 1676.862983][ T1946] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1676.868906][ T1946] ? __debug_object_init+0xed/0x440 [ 1676.874217][ T1946] ? memset+0x1e/0x40 [ 1676.878236][ T1946] ? __hrtimer_init+0x189/0x270 [ 1676.883106][ T1946] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1676.888942][ T1946] ? memcpy+0x3c/0x60 [ 1676.892958][ T1946] hwsim_new_radio_nl+0xab7/0xc90 [ 1676.898023][ T1946] genl_family_rcv_msg_doit+0x22f/0x350 [ 1676.903587][ T1946] ? end_current_label_crit_section+0x170/0x170 [ 1676.909851][ T1946] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1676.915769][ T1946] ? bpf_lsm_capable+0x5/0x10 [ 1676.920462][ T1946] ? security_capable+0x85/0xb0 [ 1676.925340][ T1946] genl_rcv_msg+0x601/0x790 [ 1676.929890][ T1946] ? genl_bind+0x360/0x360 [ 1676.934350][ T1946] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1676.940710][ T1946] netlink_rcv_skb+0x1ef/0x440 [ 1676.945668][ T1946] ? genl_bind+0x360/0x360 [ 1676.950552][ T1946] ? netlink_ack+0x1160/0x1160 [ 1676.955432][ T1946] ? down_read+0x1a8/0x2d0 [ 1676.959958][ T1946] genl_rcv+0x24/0x40 [ 1676.964038][ T1946] netlink_unicast+0x7ad/0x920 [ 1676.968845][ T1946] netlink_sendmsg+0x8ad/0xbd0 [ 1676.973656][ T1946] ? netlink_getsockopt+0x550/0x550 [ 1676.978890][ T1946] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1676.984472][ T1946] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1676.989860][ T1946] ? security_socket_sendmsg+0x7c/0xa0 [ 1676.995328][ T1946] ? netlink_getsockopt+0x550/0x550 [ 1677.000542][ T1946] ____sys_sendmsg+0x5ed/0x9a0 [ 1677.005352][ T1946] ? __sys_sendmsg_sock+0x30/0x30 [ 1677.010387][ T1946] ? __import_iovec+0x306/0x510 [ 1677.015263][ T1946] ? import_iovec+0x6f/0xa0 [ 1677.019870][ T1946] ___sys_sendmsg+0x2a2/0x360 [ 1677.024619][ T1946] ? __sys_sendmsg+0x2a0/0x2a0 [ 1677.029439][ T1946] __se_sys_sendmsg+0x1c3/0x2b0 [ 1677.034307][ T1946] ? __x64_sys_sendmsg+0x80/0x80 [ 1677.039267][ T1946] ? lockdep_hardirqs_on+0x94/0x140 [ 1677.044482][ T1946] do_syscall_64+0x4c/0xa0 [ 1677.048909][ T1946] ? clear_bhb_loop+0x60/0xb0 [ 1677.053604][ T1946] ? clear_bhb_loop+0x60/0xb0 [ 1677.058288][ T1946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1677.064202][ T1946] RIP: 0033:0x7fca1999e159 [ 1677.068632][ T1946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.088271][ T1946] RSP: 002b:00007fca1a7af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1677.096699][ T1946] RAX: ffffffffffffffda RBX: 00007fca19c25fa0 RCX: 00007fca1999e159 [ 1677.104685][ T1946] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1677.112708][ T1946] RBP: 00007fca19a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1677.120692][ T1946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1677.128672][ T1946] R13: 00007fca19c26038 R14: 00007fca19c25fa0 R15: 00007fffb6c3ba48 [ 1677.136675][ T1946] [ 1677.574008][ T1967] netlink: 'syz.4.7988': attribute type 9 has an invalid length. [ 1677.662811][ T1967] __nla_validate_parse: 1 callbacks suppressed [ 1677.662834][ T1967] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.7988'. [ 1677.785614][ T1975] netlink: 'syz.2.7990': attribute type 3 has an invalid length. [ 1677.848235][ T1975] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7990'. [ 1678.493055][ T1990] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1678.533551][ T1990] netlink: 'syz.2.7992': attribute type 10 has an invalid length. [ 1678.572801][ T1990] device bridge_slave_1 entered promiscuous mode [ 1678.665156][ T1990] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1678.744278][ T1993] netlink: 'syz.3.7993': attribute type 10 has an invalid length. [ 1678.791852][ T2002] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7994'. [ 1678.859115][ T1993] virt_wifi0: mtu greater than device maximum [ 1679.502224][ T2013] netlink: 'syz.1.7996': attribute type 3 has an invalid length. [ 1679.575150][ T2013] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7996'. [ 1679.746345][ T2018] netlink: 'syz.3.7998': attribute type 2 has an invalid length. [ 1679.754240][ T2018] netlink: 119 bytes leftover after parsing attributes in process `syz.3.7998'. [ 1679.847438][ T2018] netlink: 'syz.3.7998': attribute type 10 has an invalid length. [ 1679.855696][ T2018] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7998'. [ 1679.970035][ T2021] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7998'. [ 1680.024682][ T2021] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1680.046710][ T2021] CPU: 1 PID: 2021 Comm: syz.3.7998 Not tainted syzkaller #0 [ 1680.054170][ T2021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1680.064262][ T2021] Call Trace: [ 1680.067573][ T2021] [ 1680.070539][ T2021] dump_stack_lvl+0x188/0x24e [ 1680.075264][ T2021] ? show_regs_print_info+0x12/0x12 [ 1680.080501][ T2021] ? load_image+0x410/0x410 [ 1680.085065][ T2021] sysfs_warn_dup+0x8a/0xa0 [ 1680.089613][ T2021] sysfs_do_create_link_sd+0xc0/0x110 [ 1680.095048][ T2021] device_add+0x83b/0x1050 [ 1680.099523][ T2021] wiphy_register+0x1d8b/0x2aa0 [ 1680.104440][ T2021] ? cfg80211_event_work+0x40/0x40 [ 1680.109599][ T2021] ? minstrel_ht_alloc+0x894/0xa20 [ 1680.114764][ T2021] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1680.121063][ T2021] ieee80211_register_hw+0x2d48/0x39f0 [ 1680.126570][ T2021] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1680.132957][ T2021] ? ieee80211_register_hw+0xf41/0x39f0 [ 1680.138559][ T2021] ? ieee80211_register_hw+0xf41/0x39f0 [ 1680.144247][ T2021] ? ieee80211_tasklet_handler+0x20/0x20 [ 1680.149943][ T2021] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1680.155867][ T2021] ? __debug_object_init+0xed/0x440 [ 1680.161198][ T2021] ? memset+0x1e/0x40 [ 1680.165275][ T2021] ? __hrtimer_init+0x189/0x270 [ 1680.170143][ T2021] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1680.175918][ T2021] ? memcpy+0x3c/0x60 [ 1680.179923][ T2021] hwsim_new_radio_nl+0xab7/0xc90 [ 1680.184990][ T2021] genl_family_rcv_msg_doit+0x22f/0x350 [ 1680.190572][ T2021] ? end_current_label_crit_section+0x170/0x170 [ 1680.196835][ T2021] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1680.202761][ T2021] ? bpf_lsm_capable+0x5/0x10 [ 1680.207452][ T2021] ? security_capable+0x85/0xb0 [ 1680.212434][ T2021] genl_rcv_msg+0x601/0x790 [ 1680.217139][ T2021] ? genl_bind+0x360/0x360 [ 1680.221568][ T2021] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1680.228021][ T2021] netlink_rcv_skb+0x1ef/0x440 [ 1680.232893][ T2021] ? genl_bind+0x360/0x360 [ 1680.237330][ T2021] ? netlink_ack+0x1160/0x1160 [ 1680.242110][ T2021] ? down_read+0x1a8/0x2d0 [ 1680.246543][ T2021] genl_rcv+0x24/0x40 [ 1680.250534][ T2021] netlink_unicast+0x7ad/0x920 [ 1680.255431][ T2021] netlink_sendmsg+0x8ad/0xbd0 [ 1680.260214][ T2021] ? netlink_getsockopt+0x550/0x550 [ 1680.265424][ T2021] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1680.270995][ T2021] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1680.276293][ T2021] ? security_socket_sendmsg+0x7c/0xa0 [ 1680.281769][ T2021] ? netlink_getsockopt+0x550/0x550 [ 1680.286990][ T2021] ____sys_sendmsg+0x5ed/0x9a0 [ 1680.291867][ T2021] ? __sys_sendmsg_sock+0x30/0x30 [ 1680.296911][ T2021] ? __import_iovec+0x306/0x510 [ 1680.301884][ T2021] ? import_iovec+0x6f/0xa0 [ 1680.306416][ T2021] ___sys_sendmsg+0x2a2/0x360 [ 1680.311197][ T2021] ? __sys_sendmsg+0x2a0/0x2a0 [ 1680.316023][ T2021] __se_sys_sendmsg+0x1c3/0x2b0 [ 1680.320905][ T2021] ? __x64_sys_sendmsg+0x80/0x80 [ 1680.325870][ T2021] ? lockdep_hardirqs_on+0x94/0x140 [ 1680.331087][ T2021] do_syscall_64+0x4c/0xa0 [ 1680.335514][ T2021] ? clear_bhb_loop+0x60/0xb0 [ 1680.340201][ T2021] ? clear_bhb_loop+0x60/0xb0 [ 1680.344890][ T2021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1680.350800][ T2021] RIP: 0033:0x7ff47059e159 [ 1680.355229][ T2021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1680.374883][ T2021] RSP: 002b:00007ff4713ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1680.383322][ T2021] RAX: ffffffffffffffda RBX: 00007ff470826090 RCX: 00007ff47059e159 [ 1680.391309][ T2021] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1680.399387][ T2021] RBP: 00007ff47063506b R08: 0000000000000000 R09: 0000000000000000 [ 1680.407382][ T2021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1680.415547][ T2021] R13: 00007ff470826128 R14: 00007ff470826090 R15: 00007ffcd746fd38 [ 1680.423574][ T2021] [ 1680.477350][ T2036] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8002'. [ 1680.545522][ T2036] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8002'. [ 1680.578847][ T2040] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8002'. [ 1680.792115][ T2041] device syzkaller0 entered promiscuous mode [ 1681.003879][ T2053] netlink: 'syz.4.8005': attribute type 21 has an invalid length. [ 1681.066480][ T2053] netlink: 'syz.4.8005': attribute type 1 has an invalid length. [ 1681.076213][ T2056] netlink: 'syz.2.8007': attribute type 9 has an invalid length. [ 1681.312033][ T2060] netlink: 'syz.3.8009': attribute type 21 has an invalid length. [ 1681.326389][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 1681.385201][ T2060] netlink: 'syz.3.8009': attribute type 4 has an invalid length. [ 1681.453374][ T2060] netlink: 'syz.3.8009': attribute type 5 has an invalid length. [ 1682.331556][ T2094] netlink: 'syz.1.8016': attribute type 2 has an invalid length. [ 1682.463804][ T2094] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1682.489845][ T2094] CPU: 1 PID: 2094 Comm: syz.1.8016 Not tainted syzkaller #0 [ 1682.497396][ T2094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1682.507499][ T2094] Call Trace: [ 1682.510812][ T2094] [ 1682.513782][ T2094] dump_stack_lvl+0x188/0x24e [ 1682.518540][ T2094] ? show_regs_print_info+0x12/0x12 [ 1682.523767][ T2094] ? load_image+0x410/0x410 [ 1682.528311][ T2094] sysfs_warn_dup+0x8a/0xa0 [ 1682.532950][ T2094] sysfs_do_create_link_sd+0xc0/0x110 [ 1682.538469][ T2094] device_add+0x83b/0x1050 [ 1682.542947][ T2094] wiphy_register+0x1d8b/0x2aa0 [ 1682.547876][ T2094] ? cfg80211_event_work+0x40/0x40 [ 1682.553020][ T2094] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1682.559196][ T2094] ? ieee80211_register_hw+0x28d5/0x39f0 [ 1682.564888][ T2094] ieee80211_register_hw+0x2d48/0x39f0 [ 1682.570414][ T2094] ? ieee80211_register_hw+0xf41/0x39f0 [ 1682.576058][ T2094] ? ieee80211_register_hw+0xf41/0x39f0 [ 1682.581619][ T2094] ? ieee80211_tasklet_handler+0x20/0x20 [ 1682.587283][ T2094] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1682.593194][ T2094] ? __debug_object_init+0xed/0x440 [ 1682.598408][ T2094] ? memset+0x1e/0x40 [ 1682.602402][ T2094] ? __hrtimer_init+0x189/0x270 [ 1682.607270][ T2094] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1682.613103][ T2094] ? memcpy+0x3c/0x60 [ 1682.617099][ T2094] hwsim_new_radio_nl+0xab7/0xc90 [ 1682.622152][ T2094] genl_family_rcv_msg_doit+0x22f/0x350 [ 1682.627718][ T2094] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1682.633747][ T2094] ? genl_rcv_msg+0x592/0x790 [ 1682.638443][ T2094] genl_rcv_msg+0x601/0x790 [ 1682.643058][ T2094] ? genl_bind+0x360/0x360 [ 1682.647487][ T2094] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1682.653852][ T2094] netlink_rcv_skb+0x1ef/0x440 [ 1682.658629][ T2094] ? genl_bind+0x360/0x360 [ 1682.663062][ T2094] ? netlink_ack+0x1160/0x1160 [ 1682.667934][ T2094] ? down_read+0x1a8/0x2d0 [ 1682.672645][ T2094] genl_rcv+0x24/0x40 [ 1682.676646][ T2094] netlink_unicast+0x7ad/0x920 [ 1682.681434][ T2094] netlink_sendmsg+0x8ad/0xbd0 [ 1682.686226][ T2094] ? netlink_getsockopt+0x550/0x550 [ 1682.691532][ T2094] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1682.697098][ T2094] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1682.702419][ T2094] ? security_socket_sendmsg+0x7c/0xa0 [ 1682.707889][ T2094] ? netlink_getsockopt+0x550/0x550 [ 1682.713098][ T2094] ____sys_sendmsg+0x5ed/0x9a0 [ 1682.717969][ T2094] ? __sys_sendmsg_sock+0x30/0x30 [ 1682.723011][ T2094] ? __import_iovec+0x306/0x510 [ 1682.727918][ T2094] ? import_iovec+0x6f/0xa0 [ 1682.732442][ T2094] ___sys_sendmsg+0x2a2/0x360 [ 1682.737575][ T2094] ? __sys_sendmsg+0x2a0/0x2a0 [ 1682.742370][ T2094] ? lockdep_hardirqs_on+0x94/0x140 [ 1682.747781][ T2094] __se_sys_sendmsg+0x1c3/0x2b0 [ 1682.752648][ T2094] ? ct_nmi_exit+0x145/0x1c0 [ 1682.757274][ T2094] ? __x64_sys_sendmsg+0x80/0x80 [ 1682.762236][ T2094] ? lockdep_hardirqs_on+0x94/0x140 [ 1682.767539][ T2094] do_syscall_64+0x4c/0xa0 [ 1682.771963][ T2094] ? clear_bhb_loop+0x60/0xb0 [ 1682.776651][ T2094] ? clear_bhb_loop+0x60/0xb0 [ 1682.781344][ T2094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1682.787349][ T2094] RIP: 0033:0x7faf4cd9e159 [ 1682.791816][ T2094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.811525][ T2094] RSP: 002b:00007faf4dcc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1682.820079][ T2094] RAX: ffffffffffffffda RBX: 00007faf4d025fa0 RCX: 00007faf4cd9e159 [ 1682.828065][ T2094] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1682.836048][ T2094] RBP: 00007faf4ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 1682.844025][ T2094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1682.852091][ T2094] R13: 00007faf4d026038 R14: 00007faf4d025fa0 R15: 00007ffd4bee1448 [ 1682.860372][ T2094] [ 1683.110090][ T2102] device 0 entered promiscuous mode [ 1683.156314][ T2099] __nla_validate_parse: 17 callbacks suppressed [ 1683.156334][ T2099] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8018'. [ 1683.413734][ T2112] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8021'. [ 1683.614475][ T2112] netlink: 2782 bytes leftover after parsing attributes in process `syz.2.8021'. [ 1684.500742][ T2118] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8023'. [ 1684.543875][ T2121] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.8025'. [ 1684.564407][ T2118] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8023'. [ 1684.605271][ T2127] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8023'. [ 1684.651657][ T2121] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1684.724535][ T2118] validate_nla: 2 callbacks suppressed [ 1684.724575][ T2118] netlink: 'syz.3.8023': attribute type 21 has an invalid length. [ 1684.789244][ T2118] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8023'. [ 1684.830394][ T2118] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8023'. [ 1685.036257][ T2128] netlink: 'syz.0.8026': attribute type 3 has an invalid length. [ 1685.077371][ T2128] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8026'. [ 1685.546880][ T2141] netlink: 'syz.2.8030': attribute type 2 has an invalid length. [ 1685.811524][ T2141] netlink: 'syz.2.8030': attribute type 10 has an invalid length. [ 1685.839798][ T2148] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1685.866360][ T2148] CPU: 0 PID: 2148 Comm: syz.2.8030 Not tainted syzkaller #0 [ 1685.873848][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1685.884312][ T2148] Call Trace: [ 1685.887643][ T2148] [ 1685.890614][ T2148] dump_stack_lvl+0x188/0x24e [ 1685.895360][ T2148] ? show_regs_print_info+0x12/0x12 [ 1685.900612][ T2148] ? load_image+0x410/0x410 [ 1685.905183][ T2148] sysfs_warn_dup+0x8a/0xa0 [ 1685.909743][ T2148] sysfs_do_create_link_sd+0xc0/0x110 [ 1685.915182][ T2148] device_add+0x83b/0x1050 [ 1685.919771][ T2148] wiphy_register+0x1d8b/0x2aa0 [ 1685.924698][ T2148] ? cfg80211_event_work+0x40/0x40 [ 1685.929859][ T2148] ? minstrel_ht_alloc+0x894/0xa20 [ 1685.935028][ T2148] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1685.941161][ T2148] ieee80211_register_hw+0x2d48/0x39f0 [ 1685.946689][ T2148] ? ieee80211_register_hw+0xf41/0x39f0 [ 1685.952292][ T2148] ? ieee80211_register_hw+0xf41/0x39f0 [ 1685.957986][ T2148] ? ieee80211_tasklet_handler+0x20/0x20 [ 1685.963676][ T2148] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1685.969638][ T2148] ? __debug_object_init+0xed/0x440 [ 1685.974891][ T2148] ? memset+0x1e/0x40 [ 1685.978937][ T2148] ? __hrtimer_init+0x189/0x270 [ 1685.983848][ T2148] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1685.989644][ T2148] ? memcpy+0x3c/0x60 [ 1685.993687][ T2148] hwsim_new_radio_nl+0xab7/0xc90 [ 1685.998804][ T2148] genl_family_rcv_msg_doit+0x22f/0x350 [ 1686.004417][ T2148] ? end_current_label_crit_section+0x170/0x170 [ 1686.010825][ T2148] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1686.016883][ T2148] ? bpf_lsm_capable+0x5/0x10 [ 1686.021608][ T2148] ? security_capable+0x85/0xb0 [ 1686.026531][ T2148] genl_rcv_msg+0x601/0x790 [ 1686.031103][ T2148] ? genl_bind+0x360/0x360 [ 1686.035567][ T2148] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1686.041976][ T2148] netlink_rcv_skb+0x1ef/0x440 [ 1686.046793][ T2148] ? genl_bind+0x360/0x360 [ 1686.051267][ T2148] ? netlink_ack+0x1160/0x1160 [ 1686.056090][ T2148] ? down_read+0x1a8/0x2d0 [ 1686.060558][ T2148] genl_rcv+0x24/0x40 [ 1686.064753][ T2148] netlink_unicast+0x7ad/0x920 [ 1686.069577][ T2148] netlink_sendmsg+0x8ad/0xbd0 [ 1686.074391][ T2148] ? netlink_getsockopt+0x550/0x550 [ 1686.079717][ T2148] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1686.085311][ T2148] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1686.090630][ T2148] ? security_socket_sendmsg+0x7c/0xa0 [ 1686.096127][ T2148] ? netlink_getsockopt+0x550/0x550 [ 1686.101361][ T2148] ____sys_sendmsg+0x5ed/0x9a0 [ 1686.106175][ T2148] ? __sys_sendmsg_sock+0x30/0x30 [ 1686.111228][ T2148] ? __import_iovec+0x306/0x510 [ 1686.116309][ T2148] ? import_iovec+0x6f/0xa0 [ 1686.120946][ T2148] ___sys_sendmsg+0x2a2/0x360 [ 1686.125738][ T2148] ? __lock_acquire+0x7c40/0x7c40 [ 1686.130813][ T2148] ? __sys_sendmsg+0x2a0/0x2a0 [ 1686.135674][ T2148] __se_sys_sendmsg+0x1c3/0x2b0 [ 1686.140551][ T2148] ? ct_nmi_exit+0x145/0x1c0 [ 1686.145179][ T2148] ? __x64_sys_sendmsg+0x80/0x80 [ 1686.150167][ T2148] ? lockdep_hardirqs_on+0x94/0x140 [ 1686.155416][ T2148] do_syscall_64+0x4c/0xa0 [ 1686.159866][ T2148] ? clear_bhb_loop+0x60/0xb0 [ 1686.164569][ T2148] ? clear_bhb_loop+0x60/0xb0 [ 1686.169278][ T2148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1686.175299][ T2148] RIP: 0033:0x7fe68839e159 [ 1686.179834][ T2148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1686.199482][ T2148] RSP: 002b:00007fe6891d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1686.207937][ T2148] RAX: ffffffffffffffda RBX: 00007fe688626090 RCX: 00007fe68839e159 [ 1686.215941][ T2148] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1686.224025][ T2148] RBP: 00007fe68843506b R08: 0000000000000000 R09: 0000000000000000 [ 1686.232113][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1686.240122][ T2148] R13: 00007fe688626128 R14: 00007fe688626090 R15: 00007ffcdf812168 [ 1686.248150][ T2148] [ 1687.214452][ T2166] netlink: 'syz.2.8037': attribute type 9 has an invalid length. [ 1688.867525][ T2198] netlink: 'syz.1.8048': attribute type 2 has an invalid length. [ 1688.875349][ T2198] __nla_validate_parse: 4 callbacks suppressed [ 1688.875373][ T2198] netlink: 119 bytes leftover after parsing attributes in process `syz.1.8048'. [ 1689.023635][ T2198] netlink: 'syz.1.8048': attribute type 10 has an invalid length. [ 1689.041781][ T2198] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8048'. [ 1689.075504][ T2191] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1689.102328][ T2198] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.8048'. [ 1689.220862][ T2205] netlink: 'syz.0.8046': attribute type 10 has an invalid length. [ 1689.345018][ T2205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.445680][ T2205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.543154][ T2212] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8052'. [ 1689.611861][ T2205] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1689.637682][ T2212] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8052'. [ 1689.705597][ T2198] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1689.717392][ T2198] CPU: 0 PID: 2198 Comm: syz.1.8048 Not tainted syzkaller #0 [ 1689.724909][ T2198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1689.735094][ T2198] Call Trace: [ 1689.738408][ T2198] [ 1689.741386][ T2198] dump_stack_lvl+0x188/0x24e [ 1689.746187][ T2198] ? show_regs_print_info+0x12/0x12 [ 1689.751523][ T2198] ? load_image+0x410/0x410 [ 1689.756112][ T2198] sysfs_warn_dup+0x8a/0xa0 [ 1689.760756][ T2198] sysfs_do_create_link_sd+0xc0/0x110 [ 1689.766243][ T2198] device_add+0x83b/0x1050 [ 1689.770698][ T2198] wiphy_register+0x1d8b/0x2aa0 [ 1689.770749][ T2198] ? cfg80211_event_work+0x40/0x40 [ 1689.770771][ T2198] ? minstrel_ht_alloc+0x894/0xa20 [ 1689.770803][ T2198] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1689.770836][ T2198] ieee80211_register_hw+0x2d48/0x39f0 [ 1689.770873][ T2198] ? ieee80211_register_hw+0xf41/0x39f0 [ 1689.770894][ T2198] ? ieee80211_register_hw+0xf41/0x39f0 [ 1689.770925][ T2198] ? ieee80211_tasklet_handler+0x20/0x20 [ 1689.814708][ T2198] ? lockdep_hardirqs_on+0x94/0x140 [ 1689.820198][ T2198] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1689.826419][ T2198] ? ieee80211_register_hw+0x1/0x39f0 [ 1689.831850][ T2198] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1689.837720][ T2198] ? memcpy+0x3c/0x60 [ 1689.841772][ T2198] hwsim_new_radio_nl+0xab7/0xc90 [ 1689.846893][ T2198] genl_family_rcv_msg_doit+0x22f/0x350 [ 1689.852500][ T2198] ? end_current_label_crit_section+0x170/0x170 [ 1689.859154][ T2198] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1689.865290][ T2198] ? bpf_lsm_capable+0x5/0x10 [ 1689.870109][ T2198] ? security_capable+0x85/0xb0 [ 1689.875202][ T2198] genl_rcv_msg+0x601/0x790 [ 1689.879768][ T2198] ? genl_bind+0x360/0x360 [ 1689.884265][ T2198] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1689.890667][ T2198] netlink_rcv_skb+0x1ef/0x440 [ 1689.895482][ T2198] ? genl_bind+0x360/0x360 [ 1689.900033][ T2198] ? netlink_ack+0x1160/0x1160 [ 1689.904858][ T2198] ? down_read+0x1a8/0x2d0 [ 1689.909322][ T2198] genl_rcv+0x24/0x40 [ 1689.913448][ T2198] netlink_unicast+0x7ad/0x920 [ 1689.918272][ T2198] netlink_sendmsg+0x8ad/0xbd0 [ 1689.923090][ T2198] ? netlink_getsockopt+0x550/0x550 [ 1689.928337][ T2198] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1689.934032][ T2198] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1689.939451][ T2198] ? security_socket_sendmsg+0x7c/0xa0 [ 1689.944966][ T2198] ? netlink_getsockopt+0x550/0x550 [ 1689.950210][ T2198] ____sys_sendmsg+0x5ed/0x9a0 [ 1689.955029][ T2198] ? __sys_sendmsg_sock+0x30/0x30 [ 1689.960118][ T2198] ? __import_iovec+0x306/0x510 [ 1689.965118][ T2198] ? import_iovec+0x6f/0xa0 [ 1689.969650][ T2198] ___sys_sendmsg+0x2a2/0x360 [ 1689.974346][ T2198] ? __sys_sendmsg+0x2a0/0x2a0 [ 1689.979175][ T2198] __se_sys_sendmsg+0x1c3/0x2b0 [ 1689.984042][ T2198] ? ct_nmi_exit+0x145/0x1c0 [ 1689.988650][ T2198] ? __x64_sys_sendmsg+0x80/0x80 [ 1689.993612][ T2198] ? lockdep_hardirqs_on+0x94/0x140 [ 1689.998918][ T2198] do_syscall_64+0x4c/0xa0 [ 1690.003374][ T2198] ? clear_bhb_loop+0x60/0xb0 [ 1690.008183][ T2198] ? clear_bhb_loop+0x60/0xb0 [ 1690.012884][ T2198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1690.018799][ T2198] RIP: 0033:0x7faf4cd9e159 [ 1690.023334][ T2198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1690.043155][ T2198] RSP: 002b:00007faf4dcc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1690.051677][ T2198] RAX: ffffffffffffffda RBX: 00007faf4d025fa0 RCX: 00007faf4cd9e159 [ 1690.059847][ T2198] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1690.067834][ T2198] RBP: 00007faf4ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 1690.075990][ T2198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1690.083983][ T2198] R13: 00007faf4d026038 R14: 00007faf4d025fa0 R15: 00007ffd4bee1448 [ 1690.091981][ T2198] [ 1690.252193][ T2218] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8052'. [ 1690.601094][ T2230] netlink: 'syz.1.8056': attribute type 2 has an invalid length. [ 1690.636166][ T2230] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8056'. [ 1690.684102][ T2233] netlink: 'syz.4.8058': attribute type 3 has an invalid length. [ 1690.702442][ T2233] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8058'. [ 1691.101021][ T2250] netlink: 'syz.1.8061': attribute type 2 has an invalid length. [ 1691.249374][ T2250] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.8061'. [ 1691.681309][ T2252] netlink: 'syz.1.8062': attribute type 21 has an invalid length. [ 1691.715975][ T2252] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8062'. [ 1692.157653][ T2259] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1692.213496][ T2265] netlink: 'syz.0.8065': attribute type 2 has an invalid length. [ 1692.266020][ T2271] netlink: 'syz.4.8067': attribute type 2 has an invalid length. [ 1692.310984][ T2265] netlink: 'syz.0.8065': attribute type 10 has an invalid length. [ 1692.350668][ T2265] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1692.394264][ T2265] CPU: 0 PID: 2265 Comm: syz.0.8065 Not tainted syzkaller #0 [ 1692.401810][ T2265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1692.411971][ T2265] Call Trace: [ 1692.415297][ T2265] [ 1692.418265][ T2265] dump_stack_lvl+0x188/0x24e [ 1692.422977][ T2265] ? show_regs_print_info+0x12/0x12 [ 1692.428212][ T2265] ? load_image+0x410/0x410 [ 1692.432787][ T2265] sysfs_warn_dup+0x8a/0xa0 [ 1692.437345][ T2265] sysfs_do_create_link_sd+0xc0/0x110 [ 1692.442862][ T2265] device_add+0x83b/0x1050 [ 1692.447334][ T2265] wiphy_register+0x1d8b/0x2aa0 [ 1692.452265][ T2265] ? cfg80211_event_work+0x40/0x40 [ 1692.457428][ T2265] ? minstrel_ht_alloc+0x894/0xa20 [ 1692.462593][ T2265] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1692.468729][ T2265] ieee80211_register_hw+0x2d48/0x39f0 [ 1692.474237][ T2265] ? ieee80211_register_hw+0xf41/0x39f0 [ 1692.479793][ T2265] ? ieee80211_register_hw+0xf41/0x39f0 [ 1692.485436][ T2265] ? ieee80211_tasklet_handler+0x20/0x20 [ 1692.491096][ T2265] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1692.497030][ T2265] ? __debug_object_init+0xed/0x440 [ 1692.502364][ T2265] ? memset+0x1e/0x40 [ 1692.506618][ T2265] ? __hrtimer_init+0x189/0x270 [ 1692.511496][ T2265] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1692.517249][ T2265] ? memcpy+0x3c/0x60 [ 1692.521447][ T2265] hwsim_new_radio_nl+0xab7/0xc90 [ 1692.526514][ T2265] genl_family_rcv_msg_doit+0x22f/0x350 [ 1692.532188][ T2265] ? end_current_label_crit_section+0x170/0x170 [ 1692.538567][ T2265] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1692.544514][ T2265] ? bpf_lsm_capable+0x5/0x10 [ 1692.549464][ T2265] ? security_capable+0x85/0xb0 [ 1692.554390][ T2265] genl_rcv_msg+0x601/0x790 [ 1692.558916][ T2265] ? genl_bind+0x360/0x360 [ 1692.563349][ T2265] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1692.569707][ T2265] netlink_rcv_skb+0x1ef/0x440 [ 1692.574587][ T2265] ? genl_bind+0x360/0x360 [ 1692.579098][ T2265] ? netlink_ack+0x1160/0x1160 [ 1692.583929][ T2265] ? down_read+0x1a8/0x2d0 [ 1692.588420][ T2265] genl_rcv+0x24/0x40 [ 1692.592438][ T2265] netlink_unicast+0x7ad/0x920 [ 1692.597329][ T2265] netlink_sendmsg+0x8ad/0xbd0 [ 1692.602199][ T2265] ? netlink_getsockopt+0x550/0x550 [ 1692.607448][ T2265] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1692.613141][ T2265] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1692.618449][ T2265] ? security_socket_sendmsg+0x7c/0xa0 [ 1692.623950][ T2265] ? netlink_getsockopt+0x550/0x550 [ 1692.629154][ T2265] ____sys_sendmsg+0x5ed/0x9a0 [ 1692.633925][ T2265] ? __sys_sendmsg_sock+0x30/0x30 [ 1692.638950][ T2265] ? __import_iovec+0x306/0x510 [ 1692.643815][ T2265] ? import_iovec+0x6f/0xa0 [ 1692.648357][ T2265] ___sys_sendmsg+0x2a2/0x360 [ 1692.653091][ T2265] ? __sys_sendmsg+0x2a0/0x2a0 [ 1692.657939][ T2265] __se_sys_sendmsg+0x1c3/0x2b0 [ 1692.662819][ T2265] ? __x64_sys_sendmsg+0x80/0x80 [ 1692.667799][ T2265] ? lockdep_hardirqs_on+0x94/0x140 [ 1692.673063][ T2265] do_syscall_64+0x4c/0xa0 [ 1692.677496][ T2265] ? clear_bhb_loop+0x60/0xb0 [ 1692.682197][ T2265] ? clear_bhb_loop+0x60/0xb0 [ 1692.686898][ T2265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1692.692859][ T2265] RIP: 0033:0x7fbf12b9e159 [ 1692.697316][ T2265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1692.716976][ T2265] RSP: 002b:00007fbf13b43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1692.725438][ T2265] RAX: ffffffffffffffda RBX: 00007fbf12e25fa0 RCX: 00007fbf12b9e159 [ 1692.733448][ T2265] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1692.741513][ T2265] RBP: 00007fbf12c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1692.749660][ T2265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1692.757729][ T2265] R13: 00007fbf12e26038 R14: 00007fbf12e25fa0 R15: 00007ffd929fee28 [ 1692.765734][ T2265] [ 1692.779700][ T2271] netlink: 'syz.4.8067': attribute type 10 has an invalid length. [ 1692.843654][ T2275] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1692.855978][ T2275] CPU: 0 PID: 2275 Comm: syz.4.8067 Not tainted syzkaller #0 [ 1692.863427][ T2275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1692.873534][ T2275] Call Trace: [ 1692.876848][ T2275] [ 1692.879989][ T2275] dump_stack_lvl+0x188/0x24e [ 1692.884696][ T2275] ? show_regs_print_info+0x12/0x12 [ 1692.890181][ T2275] ? load_image+0x410/0x410 [ 1692.894714][ T2275] sysfs_warn_dup+0x8a/0xa0 [ 1692.899332][ T2275] sysfs_do_create_link_sd+0xc0/0x110 [ 1692.904748][ T2275] device_add+0x83b/0x1050 [ 1692.909190][ T2275] wiphy_register+0x1d8b/0x2aa0 [ 1692.914250][ T2275] ? cfg80211_event_work+0x40/0x40 [ 1692.919377][ T2275] ? minstrel_ht_alloc+0x894/0xa20 [ 1692.924539][ T2275] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1692.930629][ T2275] ieee80211_register_hw+0x2d48/0x39f0 [ 1692.936290][ T2275] ? ieee80211_register_hw+0xf41/0x39f0 [ 1692.941848][ T2275] ? ieee80211_register_hw+0xf41/0x39f0 [ 1692.947439][ T2275] ? ieee80211_tasklet_handler+0x20/0x20 [ 1692.953174][ T2275] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1692.959090][ T2275] ? __debug_object_init+0xed/0x440 [ 1692.964304][ T2275] ? memset+0x1e/0x40 [ 1692.968385][ T2275] ? __hrtimer_init+0x189/0x270 [ 1692.973367][ T2275] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1692.979135][ T2275] ? memcpy+0x3c/0x60 [ 1692.983164][ T2275] hwsim_new_radio_nl+0xab7/0xc90 [ 1692.988225][ T2275] genl_family_rcv_msg_doit+0x22f/0x350 [ 1692.993789][ T2275] ? end_current_label_crit_section+0x170/0x170 [ 1693.000317][ T2275] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1693.006342][ T2275] ? bpf_lsm_capable+0x5/0x10 [ 1693.011297][ T2275] ? security_capable+0x85/0xb0 [ 1693.016253][ T2275] genl_rcv_msg+0x601/0x790 [ 1693.020867][ T2275] ? genl_bind+0x360/0x360 [ 1693.025297][ T2275] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1693.031660][ T2275] netlink_rcv_skb+0x1ef/0x440 [ 1693.036447][ T2275] ? genl_bind+0x360/0x360 [ 1693.040970][ T2275] ? netlink_ack+0x1160/0x1160 [ 1693.045755][ T2275] ? down_read+0x1a8/0x2d0 [ 1693.050199][ T2275] genl_rcv+0x24/0x40 [ 1693.054202][ T2275] netlink_unicast+0x7ad/0x920 [ 1693.059012][ T2275] netlink_sendmsg+0x8ad/0xbd0 [ 1693.063813][ T2275] ? netlink_getsockopt+0x550/0x550 [ 1693.069028][ T2275] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1693.074678][ T2275] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1693.079969][ T2275] ? security_socket_sendmsg+0x7c/0xa0 [ 1693.085443][ T2275] ? netlink_getsockopt+0x550/0x550 [ 1693.090661][ T2275] ____sys_sendmsg+0x5ed/0x9a0 [ 1693.095533][ T2275] ? __sys_sendmsg_sock+0x30/0x30 [ 1693.100563][ T2275] ? __import_iovec+0x306/0x510 [ 1693.105440][ T2275] ? import_iovec+0x6f/0xa0 [ 1693.109967][ T2275] ___sys_sendmsg+0x2a2/0x360 [ 1693.114664][ T2275] ? __sys_sendmsg+0x2a0/0x2a0 [ 1693.119489][ T2275] __se_sys_sendmsg+0x1c3/0x2b0 [ 1693.124353][ T2275] ? __x64_sys_sendmsg+0x80/0x80 [ 1693.129322][ T2275] ? lockdep_hardirqs_on+0x94/0x140 [ 1693.134632][ T2275] do_syscall_64+0x4c/0xa0 [ 1693.139432][ T2275] ? clear_bhb_loop+0x60/0xb0 [ 1693.144119][ T2275] ? clear_bhb_loop+0x60/0xb0 [ 1693.148893][ T2275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1693.154807][ T2275] RIP: 0033:0x7fca1999e159 [ 1693.159237][ T2275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1693.179034][ T2275] RSP: 002b:00007fca1a78e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1693.187559][ T2275] RAX: ffffffffffffffda RBX: 00007fca19c26090 RCX: 00007fca1999e159 [ 1693.195630][ T2275] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1693.203697][ T2275] RBP: 00007fca19a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1693.211766][ T2275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1693.219752][ T2275] R13: 00007fca19c26128 R14: 00007fca19c26090 R15: 00007fffb6c3ba48 [ 1693.227751][ T2275] [ 1693.444008][ T2282] netlink: 'syz.2.8070': attribute type 21 has an invalid length. [ 1693.539147][ T2286] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1693.597774][ T2292] netlink: 'syz.1.8069': attribute type 10 has an invalid length. [ 1693.634701][ T2292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.668814][ T2292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.705260][ T2292] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1693.876908][ T2298] __nla_validate_parse: 11 callbacks suppressed [ 1693.876953][ T2298] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8075'. [ 1693.998827][ T2298] bridge0: port 2(veth0_vlan) entered blocking state [ 1694.014979][ T2298] bridge0: port 2(veth0_vlan) entered disabled state [ 1694.074013][ T2313] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.8074'. [ 1694.128909][ T2298] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1694.732061][ T2305] netlink: 119 bytes leftover after parsing attributes in process `syz.4.8074'. [ 1694.792777][ T2307] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8074'. [ 1694.804908][ T2308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.812385][ T2308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.875733][ T2308] bond0: (slave bridge0): Releasing backup interface [ 1694.884025][ T2308] device bridge0 left promiscuous mode [ 1694.901260][ T2308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.908604][ T2308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1694.917509][ T2308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.924808][ T2308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1694.963713][ T2308] team0: Port device bridge0 added [ 1694.980620][ T2313] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1694.998687][ T2313] CPU: 1 PID: 2313 Comm: syz.4.8074 Not tainted syzkaller #0 [ 1695.006230][ T2313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1695.016317][ T2313] Call Trace: [ 1695.019649][ T2313] [ 1695.022593][ T2313] dump_stack_lvl+0x188/0x24e [ 1695.027292][ T2313] ? show_regs_print_info+0x12/0x12 [ 1695.032502][ T2313] ? load_image+0x410/0x410 [ 1695.037065][ T2313] sysfs_warn_dup+0x8a/0xa0 [ 1695.041586][ T2313] sysfs_do_create_link_sd+0xc0/0x110 [ 1695.046984][ T2313] device_add+0x83b/0x1050 [ 1695.051427][ T2313] wiphy_register+0x1d8b/0x2aa0 [ 1695.056306][ T2313] ? cfg80211_event_work+0x40/0x40 [ 1695.061426][ T2313] ? minstrel_ht_alloc+0x894/0xa20 [ 1695.066561][ T2313] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1695.072649][ T2313] ieee80211_register_hw+0x2d48/0x39f0 [ 1695.078141][ T2313] ? ieee80211_register_hw+0xf41/0x39f0 [ 1695.083876][ T2313] ? ieee80211_register_hw+0xf41/0x39f0 [ 1695.089437][ T2313] ? ieee80211_tasklet_handler+0x20/0x20 [ 1695.095172][ T2313] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1695.101087][ T2313] ? __debug_object_init+0xed/0x440 [ 1695.106389][ T2313] ? memset+0x1e/0x40 [ 1695.110381][ T2313] ? __hrtimer_init+0x189/0x270 [ 1695.115248][ T2313] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1695.120991][ T2313] ? memcpy+0x3c/0x60 [ 1695.124994][ T2313] hwsim_new_radio_nl+0xab7/0xc90 [ 1695.130045][ T2313] genl_family_rcv_msg_doit+0x22f/0x350 [ 1695.135600][ T2313] ? end_current_label_crit_section+0x170/0x170 [ 1695.141887][ T2313] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1695.147846][ T2313] ? bpf_lsm_capable+0x5/0x10 [ 1695.152555][ T2313] ? security_capable+0x85/0xb0 [ 1695.157437][ T2313] genl_rcv_msg+0x601/0x790 [ 1695.161974][ T2313] ? genl_bind+0x360/0x360 [ 1695.166404][ T2313] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1695.172763][ T2313] netlink_rcv_skb+0x1ef/0x440 [ 1695.177544][ T2313] ? genl_bind+0x360/0x360 [ 1695.181975][ T2313] ? netlink_ack+0x1160/0x1160 [ 1695.186766][ T2313] ? down_read+0x1a8/0x2d0 [ 1695.191210][ T2313] genl_rcv+0x24/0x40 [ 1695.195207][ T2313] netlink_unicast+0x7ad/0x920 [ 1695.200260][ T2313] netlink_sendmsg+0x8ad/0xbd0 [ 1695.205047][ T2313] ? netlink_getsockopt+0x550/0x550 [ 1695.210259][ T2313] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1695.215832][ T2313] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1695.221134][ T2313] ? security_socket_sendmsg+0x7c/0xa0 [ 1695.226612][ T2313] ? netlink_getsockopt+0x550/0x550 [ 1695.231913][ T2313] ____sys_sendmsg+0x5ed/0x9a0 [ 1695.236698][ T2313] ? __sys_sendmsg_sock+0x30/0x30 [ 1695.241732][ T2313] ? __import_iovec+0x306/0x510 [ 1695.246693][ T2313] ? import_iovec+0x6f/0xa0 [ 1695.251221][ T2313] ___sys_sendmsg+0x2a2/0x360 [ 1695.255917][ T2313] ? __lock_acquire+0x7c40/0x7c40 [ 1695.260960][ T2313] ? __sys_sendmsg+0x2a0/0x2a0 [ 1695.265784][ T2313] __se_sys_sendmsg+0x1c3/0x2b0 [ 1695.270662][ T2313] ? __x64_sys_sendmsg+0x80/0x80 [ 1695.275814][ T2313] ? lockdep_hardirqs_on+0x94/0x140 [ 1695.281033][ T2313] do_syscall_64+0x4c/0xa0 [ 1695.285464][ T2313] ? clear_bhb_loop+0x60/0xb0 [ 1695.290153][ T2313] ? clear_bhb_loop+0x60/0xb0 [ 1695.294853][ T2313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1695.300767][ T2313] RIP: 0033:0x7fca1999e159 [ 1695.305203][ T2313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.324830][ T2313] RSP: 002b:00007fca17bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1695.333256][ T2313] RAX: ffffffffffffffda RBX: 00007fca19c26180 RCX: 00007fca1999e159 [ 1695.341239][ T2313] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1695.349252][ T2313] RBP: 00007fca19a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1695.357236][ T2313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1695.365217][ T2313] R13: 00007fca19c26218 R14: 00007fca19c26180 R15: 00007fffb6c3ba48 [ 1695.373218][ T2313] [ 1695.539011][ T2338] netlink: 119 bytes leftover after parsing attributes in process `syz.3.8084'. [ 1695.677999][ T2338] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8084'. [ 1695.754741][ T2338] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1695.765370][ T2338] CPU: 1 PID: 2338 Comm: syz.3.8084 Not tainted syzkaller #0 [ 1695.772932][ T2338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1695.783057][ T2338] Call Trace: [ 1695.786375][ T2338] [ 1695.789334][ T2338] dump_stack_lvl+0x188/0x24e [ 1695.794053][ T2338] ? show_regs_print_info+0x12/0x12 [ 1695.799368][ T2338] ? load_image+0x410/0x410 [ 1695.803933][ T2338] sysfs_warn_dup+0x8a/0xa0 [ 1695.808485][ T2338] sysfs_do_create_link_sd+0xc0/0x110 [ 1695.813903][ T2338] device_add+0x83b/0x1050 [ 1695.818377][ T2338] wiphy_register+0x1d8b/0x2aa0 [ 1695.823299][ T2338] ? cfg80211_event_work+0x40/0x40 [ 1695.828640][ T2338] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1695.834854][ T2338] ? ieee80211_register_hw+0x2b75/0x39f0 [ 1695.840633][ T2338] ieee80211_register_hw+0x2d48/0x39f0 [ 1695.846136][ T2338] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1695.852359][ T2338] ? ieee80211_register_hw+0xf41/0x39f0 [ 1695.857951][ T2338] ? ieee80211_register_hw+0xf41/0x39f0 [ 1695.863543][ T2338] ? ieee80211_tasklet_handler+0x20/0x20 [ 1695.869229][ T2338] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1695.875346][ T2338] ? __debug_object_init+0xed/0x440 [ 1695.880602][ T2338] ? memset+0x1e/0x40 [ 1695.884627][ T2338] ? __hrtimer_init+0x189/0x270 [ 1695.889650][ T2338] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1695.895434][ T2338] ? memcpy+0x3c/0x60 [ 1695.899566][ T2338] hwsim_new_radio_nl+0xab7/0xc90 [ 1695.904712][ T2338] genl_family_rcv_msg_doit+0x22f/0x350 [ 1695.910340][ T2338] ? end_current_label_crit_section+0x170/0x170 [ 1695.916634][ T2338] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1695.922592][ T2338] ? bpf_lsm_capable+0x5/0x10 [ 1695.927319][ T2338] ? security_capable+0x85/0xb0 [ 1695.932304][ T2338] genl_rcv_msg+0x601/0x790 [ 1695.936880][ T2338] ? genl_bind+0x360/0x360 [ 1695.941338][ T2338] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1695.947753][ T2338] netlink_rcv_skb+0x1ef/0x440 [ 1695.952564][ T2338] ? genl_bind+0x360/0x360 [ 1695.957018][ T2338] ? netlink_ack+0x1160/0x1160 [ 1695.961830][ T2338] ? down_read+0x1a8/0x2d0 [ 1695.966296][ T2338] genl_rcv+0x24/0x40 [ 1695.970325][ T2338] netlink_unicast+0x7ad/0x920 [ 1695.975142][ T2338] netlink_sendmsg+0x8ad/0xbd0 [ 1695.979955][ T2338] ? netlink_getsockopt+0x550/0x550 [ 1695.985215][ T2338] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1695.990905][ T2338] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1695.996410][ T2338] ? security_socket_sendmsg+0x7c/0xa0 [ 1696.001920][ T2338] ? netlink_getsockopt+0x550/0x550 [ 1696.007358][ T2338] ____sys_sendmsg+0x5ed/0x9a0 [ 1696.012193][ T2338] ? __sys_sendmsg_sock+0x30/0x30 [ 1696.017256][ T2338] ? __import_iovec+0x306/0x510 [ 1696.022179][ T2338] ? import_iovec+0x6f/0xa0 [ 1696.026730][ T2338] ___sys_sendmsg+0x2a2/0x360 [ 1696.031456][ T2338] ? __sys_sendmsg+0x2a0/0x2a0 [ 1696.036289][ T2338] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1696.042349][ T2338] __se_sys_sendmsg+0x1c3/0x2b0 [ 1696.047244][ T2338] ? __x64_sys_sendmsg+0x80/0x80 [ 1696.052245][ T2338] ? lockdep_hardirqs_on+0x94/0x140 [ 1696.057585][ T2338] do_syscall_64+0x4c/0xa0 [ 1696.062048][ T2338] ? clear_bhb_loop+0x60/0xb0 [ 1696.066863][ T2338] ? clear_bhb_loop+0x60/0xb0 [ 1696.071684][ T2338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1696.077621][ T2338] RIP: 0033:0x7ff47059e159 [ 1696.082156][ T2338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1696.101808][ T2338] RSP: 002b:00007ff4713ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1696.110269][ T2338] RAX: ffffffffffffffda RBX: 00007ff470825fa0 RCX: 00007ff47059e159 [ 1696.118361][ T2338] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1696.126375][ T2338] RBP: 00007ff47063506b R08: 0000000000000000 R09: 0000000000000000 [ 1696.134465][ T2338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1696.142552][ T2338] R13: 00007ff470826038 R14: 00007ff470825fa0 R15: 00007ffcd746fd38 [ 1696.150584][ T2338] [ 1696.712372][ T2359] dvmrp1: tun_chr_ioctl cmd 1074025694 [ 1696.814219][ T2367] validate_nla: 5 callbacks suppressed [ 1696.814239][ T2367] netlink: 'syz.2.8091': attribute type 19 has an invalid length. [ 1696.881882][ T2367] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8091'. [ 1697.524058][ T2381] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.8094'. [ 1698.640911][ T2432] netlink: 'syz.3.8100': attribute type 2 has an invalid length. [ 1698.690959][ T2432] netlink: 119 bytes leftover after parsing attributes in process `syz.3.8100'. [ 1698.820881][ T2432] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8100'. [ 1698.943508][ T2432] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1698.974380][ T2432] CPU: 0 PID: 2432 Comm: syz.3.8100 Not tainted syzkaller #0 [ 1698.981864][ T2432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1698.992230][ T2432] Call Trace: [ 1698.995541][ T2432] [ 1698.998504][ T2432] dump_stack_lvl+0x188/0x24e [ 1699.003221][ T2432] ? show_regs_print_info+0x12/0x12 [ 1699.008470][ T2432] ? load_image+0x410/0x410 [ 1699.013073][ T2432] sysfs_warn_dup+0x8a/0xa0 [ 1699.017654][ T2432] sysfs_do_create_link_sd+0xc0/0x110 [ 1699.023073][ T2432] device_add+0x83b/0x1050 [ 1699.027551][ T2432] wiphy_register+0x1d8b/0x2aa0 [ 1699.032480][ T2432] ? cfg80211_event_work+0x40/0x40 [ 1699.037645][ T2432] ? minstrel_ht_alloc+0x894/0xa20 [ 1699.042816][ T2432] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1699.048954][ T2432] ieee80211_register_hw+0x2d48/0x39f0 [ 1699.054495][ T2432] ? ieee80211_register_hw+0xf41/0x39f0 [ 1699.060089][ T2432] ? ieee80211_register_hw+0xf41/0x39f0 [ 1699.065696][ T2432] ? ieee80211_tasklet_handler+0x20/0x20 [ 1699.071471][ T2432] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1699.077685][ T2432] ? __debug_object_init+0xed/0x440 [ 1699.082947][ T2432] ? memset+0x1e/0x40 [ 1699.086980][ T2432] ? __hrtimer_init+0x189/0x270 [ 1699.091886][ T2432] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1699.097678][ T2432] ? memcpy+0x3c/0x60 [ 1699.101721][ T2432] hwsim_new_radio_nl+0xab7/0xc90 [ 1699.106923][ T2432] genl_family_rcv_msg_doit+0x22f/0x350 [ 1699.112523][ T2432] ? end_current_label_crit_section+0x170/0x170 [ 1699.118820][ T2432] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1699.124769][ T2432] ? bpf_lsm_capable+0x5/0x10 [ 1699.129507][ T2432] ? security_capable+0x85/0xb0 [ 1699.134403][ T2432] genl_rcv_msg+0x601/0x790 [ 1699.138960][ T2432] ? genl_bind+0x360/0x360 [ 1699.143418][ T2432] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1699.149894][ T2432] netlink_rcv_skb+0x1ef/0x440 [ 1699.154706][ T2432] ? genl_bind+0x360/0x360 [ 1699.159188][ T2432] ? netlink_ack+0x1160/0x1160 [ 1699.164016][ T2432] ? down_read+0x1a8/0x2d0 [ 1699.168484][ T2432] genl_rcv+0x24/0x40 [ 1699.172527][ T2432] netlink_unicast+0x7ad/0x920 [ 1699.177349][ T2432] netlink_sendmsg+0x8ad/0xbd0 [ 1699.182192][ T2432] ? netlink_getsockopt+0x550/0x550 [ 1699.187537][ T2432] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1699.193149][ T2432] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1699.198472][ T2432] ? security_socket_sendmsg+0x7c/0xa0 [ 1699.204239][ T2432] ? netlink_getsockopt+0x550/0x550 [ 1699.209491][ T2432] ____sys_sendmsg+0x5ed/0x9a0 [ 1699.214313][ T2432] ? __sys_sendmsg_sock+0x30/0x30 [ 1699.219908][ T2432] ? __import_iovec+0x306/0x510 [ 1699.225015][ T2432] ? import_iovec+0x6f/0xa0 [ 1699.229574][ T2432] ___sys_sendmsg+0x2a2/0x360 [ 1699.234306][ T2432] ? __sys_sendmsg+0x2a0/0x2a0 [ 1699.239132][ T2432] ? ktime_get+0x7b/0x270 [ 1699.243545][ T2432] __se_sys_sendmsg+0x1c3/0x2b0 [ 1699.248443][ T2432] ? __x64_sys_sendmsg+0x80/0x80 [ 1699.253438][ T2432] ? lockdep_hardirqs_on+0x94/0x140 [ 1699.258685][ T2432] do_syscall_64+0x4c/0xa0 [ 1699.263135][ T2432] ? clear_bhb_loop+0x60/0xb0 [ 1699.267980][ T2432] ? clear_bhb_loop+0x60/0xb0 [ 1699.272703][ T2432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1699.278647][ T2432] RIP: 0033:0x7ff47059e159 [ 1699.283110][ T2432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1699.302940][ T2432] RSP: 002b:00007ff4713ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1699.311416][ T2432] RAX: ffffffffffffffda RBX: 00007ff470825fa0 RCX: 00007ff47059e159 [ 1699.319525][ T2432] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1699.327541][ T2432] RBP: 00007ff47063506b R08: 0000000000000000 R09: 0000000000000000 [ 1699.335553][ T2432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1699.343564][ T2432] R13: 00007ff470826038 R14: 00007ff470825fa0 R15: 00007ffcd746fd38 [ 1699.351601][ T2432] [ 1699.631715][ T2457] netlink: 'syz.0.8106': attribute type 3 has an invalid length. [ 1699.747332][ T2457] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.8106'. [ 1702.542037][ T2504] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8116'. [ 1702.592513][ T2511] netlink: 'syz.0.8118': attribute type 2 has an invalid length. [ 1702.611802][ T2511] netlink: 119 bytes leftover after parsing attributes in process `syz.0.8118'. [ 1702.679893][ T2511] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.8118'. [ 1702.708388][ T2511] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1702.724080][ T2511] CPU: 1 PID: 2511 Comm: syz.0.8118 Not tainted syzkaller #0 [ 1702.731720][ T2511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1702.741914][ T2511] Call Trace: [ 1702.745311][ T2511] [ 1702.748270][ T2511] dump_stack_lvl+0x188/0x24e [ 1702.752991][ T2511] ? show_regs_print_info+0x12/0x12 [ 1702.758297][ T2511] ? load_image+0x410/0x410 [ 1702.762865][ T2511] sysfs_warn_dup+0x8a/0xa0 [ 1702.767408][ T2511] sysfs_do_create_link_sd+0xc0/0x110 [ 1702.772998][ T2511] device_add+0x83b/0x1050 [ 1702.777469][ T2511] wiphy_register+0x1d8b/0x2aa0 [ 1702.782405][ T2511] ? cfg80211_event_work+0x40/0x40 [ 1702.787549][ T2511] ? minstrel_ht_alloc+0x894/0xa20 [ 1702.792711][ T2511] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1702.798909][ T2511] ieee80211_register_hw+0x2d48/0x39f0 [ 1702.804416][ T2511] ? ieee80211_register_hw+0xf41/0x39f0 [ 1702.810083][ T2511] ? ieee80211_register_hw+0xf41/0x39f0 [ 1702.815675][ T2511] ? ieee80211_tasklet_handler+0x20/0x20 [ 1702.821338][ T2511] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1702.827291][ T2511] ? __debug_object_init+0xed/0x440 [ 1702.832543][ T2511] ? memset+0x1e/0x40 [ 1702.836572][ T2511] ? __hrtimer_init+0x189/0x270 [ 1702.841465][ T2511] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1702.847264][ T2511] ? memcpy+0x3c/0x60 [ 1702.851304][ T2511] hwsim_new_radio_nl+0xab7/0xc90 [ 1702.856575][ T2511] genl_family_rcv_msg_doit+0x22f/0x350 [ 1702.862189][ T2511] ? end_current_label_crit_section+0x170/0x170 [ 1702.868662][ T2511] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1702.874608][ T2511] ? bpf_lsm_capable+0x5/0x10 [ 1702.879422][ T2511] ? security_capable+0x85/0xb0 [ 1702.884322][ T2511] genl_rcv_msg+0x601/0x790 [ 1702.888884][ T2511] ? genl_bind+0x360/0x360 [ 1702.893332][ T2511] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1702.899808][ T2511] netlink_rcv_skb+0x1ef/0x440 [ 1702.904617][ T2511] ? genl_bind+0x360/0x360 [ 1702.909070][ T2511] ? netlink_ack+0x1160/0x1160 [ 1702.914043][ T2511] ? down_read+0x1a8/0x2d0 [ 1702.918499][ T2511] genl_rcv+0x24/0x40 [ 1702.922516][ T2511] netlink_unicast+0x7ad/0x920 [ 1702.927325][ T2511] netlink_sendmsg+0x8ad/0xbd0 [ 1702.932136][ T2511] ? netlink_getsockopt+0x550/0x550 [ 1702.937375][ T2511] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1702.942971][ T2511] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1702.948289][ T2511] ? security_socket_sendmsg+0x7c/0xa0 [ 1702.953790][ T2511] ? netlink_getsockopt+0x550/0x550 [ 1702.959031][ T2511] ____sys_sendmsg+0x5ed/0x9a0 [ 1702.963850][ T2511] ? __sys_sendmsg_sock+0x30/0x30 [ 1702.969163][ T2511] ? __import_iovec+0x306/0x510 [ 1702.974069][ T2511] ? import_iovec+0x6f/0xa0 [ 1702.978616][ T2511] ___sys_sendmsg+0x2a2/0x360 [ 1702.983426][ T2511] ? __sys_sendmsg+0x2a0/0x2a0 [ 1702.988381][ T2511] __se_sys_sendmsg+0x1c3/0x2b0 [ 1702.993274][ T2511] ? __x64_sys_sendmsg+0x80/0x80 [ 1702.998615][ T2511] ? lockdep_hardirqs_on+0x94/0x140 [ 1703.003944][ T2511] do_syscall_64+0x4c/0xa0 [ 1703.008481][ T2511] ? clear_bhb_loop+0x60/0xb0 [ 1703.013275][ T2511] ? clear_bhb_loop+0x60/0xb0 [ 1703.017989][ T2511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1703.023978][ T2511] RIP: 0033:0x7fbf12b9e159 [ 1703.028427][ T2511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.048691][ T2511] RSP: 002b:00007fbf13b43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1703.057233][ T2511] RAX: ffffffffffffffda RBX: 00007fbf12e25fa0 RCX: 00007fbf12b9e159 [ 1703.065329][ T2511] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1703.073336][ T2511] RBP: 00007fbf12c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1703.081526][ T2511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1703.089712][ T2511] R13: 00007fbf12e26038 R14: 00007fbf12e25fa0 R15: 00007ffd929fee28 [ 1703.097755][ T2511] [ 1703.210956][ T2518] netlink: 'syz.4.8120': attribute type 2 has an invalid length. [ 1703.218921][ T2518] netlink: 119 bytes leftover after parsing attributes in process `syz.4.8120'. [ 1703.345640][ T2518] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.8120'. [ 1703.371749][ T2518] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1703.387534][ T2518] CPU: 1 PID: 2518 Comm: syz.4.8120 Not tainted syzkaller #0 [ 1703.394965][ T2518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1703.405320][ T2518] Call Trace: [ 1703.408627][ T2518] [ 1703.411586][ T2518] dump_stack_lvl+0x188/0x24e [ 1703.416305][ T2518] ? show_regs_print_info+0x12/0x12 [ 1703.421539][ T2518] ? load_image+0x410/0x410 [ 1703.426093][ T2518] sysfs_warn_dup+0x8a/0xa0 [ 1703.430735][ T2518] sysfs_do_create_link_sd+0xc0/0x110 [ 1703.436252][ T2518] device_add+0x83b/0x1050 [ 1703.440723][ T2518] wiphy_register+0x1d8b/0x2aa0 [ 1703.445717][ T2518] ? cfg80211_event_work+0x40/0x40 [ 1703.450856][ T2518] ? minstrel_ht_alloc+0x894/0xa20 [ 1703.456096][ T2518] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1703.462248][ T2518] ieee80211_register_hw+0x2d48/0x39f0 [ 1703.467753][ T2518] ? ieee80211_register_hw+0xf41/0x39f0 [ 1703.473340][ T2518] ? ieee80211_register_hw+0xf41/0x39f0 [ 1703.478926][ T2518] ? ieee80211_tasklet_handler+0x20/0x20 [ 1703.484592][ T2518] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1703.490529][ T2518] ? __debug_object_init+0xed/0x440 [ 1703.495780][ T2518] ? memset+0x1e/0x40 [ 1703.499803][ T2518] ? __hrtimer_init+0x189/0x270 [ 1703.504690][ T2518] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1703.510462][ T2518] ? memcpy+0x3c/0x60 [ 1703.514572][ T2518] hwsim_new_radio_nl+0xab7/0xc90 [ 1703.519658][ T2518] genl_family_rcv_msg_doit+0x22f/0x350 [ 1703.525326][ T2518] ? end_current_label_crit_section+0x170/0x170 [ 1703.531602][ T2518] ? lockdep_hardirqs_on+0x94/0x140 [ 1703.536842][ T2518] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1703.542770][ T2518] ? bpf_lsm_capable+0x5/0x10 [ 1703.547470][ T2518] ? security_capable+0x85/0xb0 [ 1703.552357][ T2518] genl_rcv_msg+0x601/0x790 [ 1703.556988][ T2518] ? genl_bind+0x360/0x360 [ 1703.561432][ T2518] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1703.567810][ T2518] netlink_rcv_skb+0x1ef/0x440 [ 1703.572692][ T2518] ? genl_bind+0x360/0x360 [ 1703.577229][ T2518] ? netlink_ack+0x1160/0x1160 [ 1703.582207][ T2518] ? down_read+0x1a8/0x2d0 [ 1703.586657][ T2518] genl_rcv+0x24/0x40 [ 1703.590764][ T2518] netlink_unicast+0x7ad/0x920 [ 1703.595571][ T2518] netlink_sendmsg+0x8ad/0xbd0 [ 1703.600372][ T2518] ? netlink_getsockopt+0x550/0x550 [ 1703.605600][ T2518] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1703.611180][ T2518] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1703.616585][ T2518] ? security_socket_sendmsg+0x7c/0xa0 [ 1703.622073][ T2518] ? netlink_getsockopt+0x550/0x550 [ 1703.627301][ T2518] ____sys_sendmsg+0x5ed/0x9a0 [ 1703.632105][ T2518] ? __sys_sendmsg_sock+0x30/0x30 [ 1703.637158][ T2518] ? __import_iovec+0x306/0x510 [ 1703.642053][ T2518] ? import_iovec+0x6f/0xa0 [ 1703.646681][ T2518] ___sys_sendmsg+0x2a2/0x360 [ 1703.651392][ T2518] ? __sys_sendmsg+0x2a0/0x2a0 [ 1703.656243][ T2518] __se_sys_sendmsg+0x1c3/0x2b0 [ 1703.661294][ T2518] ? __x64_sys_sendmsg+0x80/0x80 [ 1703.666272][ T2518] ? lockdep_hardirqs_on+0x94/0x140 [ 1703.671499][ T2518] do_syscall_64+0x4c/0xa0 [ 1703.675947][ T2518] ? clear_bhb_loop+0x60/0xb0 [ 1703.680908][ T2518] ? clear_bhb_loop+0x60/0xb0 [ 1703.685614][ T2518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1703.691630][ T2518] RIP: 0033:0x7fca1999e159 [ 1703.696072][ T2518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.715968][ T2518] RSP: 002b:00007fca1a7af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1703.724419][ T2518] RAX: ffffffffffffffda RBX: 00007fca19c25fa0 RCX: 00007fca1999e159 [ 1703.732415][ T2518] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1703.740523][ T2518] RBP: 00007fca19a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1703.748518][ T2518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1703.756511][ T2518] R13: 00007fca19c26038 R14: 00007fca19c25fa0 R15: 00007fffb6c3ba48 [ 1703.764530][ T2518] [ 1705.208599][ T2564] netlink: 'syz.4.8131': attribute type 2 has an invalid length. [ 1705.235530][ T2564] netlink: 119 bytes leftover after parsing attributes in process `syz.4.8131'. [ 1705.245359][ T2552] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1705.352973][ T2564] netlink: 'syz.4.8131': attribute type 10 has an invalid length. [ 1705.407186][ T2564] netlink: 'syz.4.8131': attribute type 4 has an invalid length. [ 1705.446402][ T2564] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8131'. [ 1705.485306][ T2564] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1705.805266][ T2584] netlink: 'syz.0.8137': attribute type 2 has an invalid length. [ 1705.835519][ T2584] netlink: 119 bytes leftover after parsing attributes in process `syz.0.8137'. [ 1705.887985][ T2584] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.8137'. [ 1705.978084][ T2584] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1706.001726][ T2584] CPU: 0 PID: 2584 Comm: syz.0.8137 Not tainted syzkaller #0 [ 1706.009288][ T2584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1706.019395][ T2584] Call Trace: [ 1706.022698][ T2584] [ 1706.025800][ T2584] dump_stack_lvl+0x188/0x24e [ 1706.030631][ T2584] ? show_regs_print_info+0x12/0x12 [ 1706.035972][ T2584] ? load_image+0x410/0x410 [ 1706.040520][ T2584] sysfs_warn_dup+0x8a/0xa0 [ 1706.045044][ T2584] sysfs_do_create_link_sd+0xc0/0x110 [ 1706.050481][ T2584] device_add+0x83b/0x1050 [ 1706.054925][ T2584] wiphy_register+0x1d8b/0x2aa0 [ 1706.059890][ T2584] ? cfg80211_event_work+0x40/0x40 [ 1706.065015][ T2584] ? minstrel_ht_alloc+0x894/0xa20 [ 1706.070144][ T2584] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1706.076317][ T2584] ieee80211_register_hw+0x2d48/0x39f0 [ 1706.081797][ T2584] ? ieee80211_register_hw+0xf41/0x39f0 [ 1706.087365][ T2584] ? ieee80211_register_hw+0xf41/0x39f0 [ 1706.092940][ T2584] ? ieee80211_tasklet_handler+0x20/0x20 [ 1706.098588][ T2584] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1706.104595][ T2584] ? __debug_object_init+0xed/0x440 [ 1706.109834][ T2584] ? memset+0x1e/0x40 [ 1706.113828][ T2584] ? __hrtimer_init+0x189/0x270 [ 1706.118814][ T2584] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1706.124567][ T2584] ? memcpy+0x3c/0x60 [ 1706.128565][ T2584] hwsim_new_radio_nl+0xab7/0xc90 [ 1706.133620][ T2584] genl_family_rcv_msg_doit+0x22f/0x350 [ 1706.139184][ T2584] ? end_current_label_crit_section+0x170/0x170 [ 1706.145449][ T2584] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1706.151461][ T2584] ? bpf_lsm_capable+0x5/0x10 [ 1706.156153][ T2584] ? security_capable+0x85/0xb0 [ 1706.161019][ T2584] genl_rcv_msg+0x601/0x790 [ 1706.165540][ T2584] ? genl_bind+0x360/0x360 [ 1706.169970][ T2584] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1706.176332][ T2584] netlink_rcv_skb+0x1ef/0x440 [ 1706.181113][ T2584] ? genl_bind+0x360/0x360 [ 1706.185543][ T2584] ? netlink_ack+0x1160/0x1160 [ 1706.190438][ T2584] ? down_read+0x1a8/0x2d0 [ 1706.194877][ T2584] genl_rcv+0x24/0x40 [ 1706.198869][ T2584] netlink_unicast+0x7ad/0x920 [ 1706.203668][ T2584] netlink_sendmsg+0x8ad/0xbd0 [ 1706.208459][ T2584] ? netlink_getsockopt+0x550/0x550 [ 1706.213764][ T2584] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1706.219523][ T2584] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1706.224824][ T2584] ? security_socket_sendmsg+0x7c/0xa0 [ 1706.230302][ T2584] ? netlink_getsockopt+0x550/0x550 [ 1706.235519][ T2584] ____sys_sendmsg+0x5ed/0x9a0 [ 1706.240306][ T2584] ? __sys_sendmsg_sock+0x30/0x30 [ 1706.245342][ T2584] ? __import_iovec+0x306/0x510 [ 1706.250221][ T2584] ? import_iovec+0x6f/0xa0 [ 1706.254745][ T2584] ___sys_sendmsg+0x2a2/0x360 [ 1706.259438][ T2584] ? __sys_sendmsg+0x2a0/0x2a0 [ 1706.264253][ T2584] __se_sys_sendmsg+0x1c3/0x2b0 [ 1706.269121][ T2584] ? __x64_sys_sendmsg+0x80/0x80 [ 1706.274094][ T2584] ? lockdep_hardirqs_on+0x94/0x140 [ 1706.279316][ T2584] do_syscall_64+0x4c/0xa0 [ 1706.284024][ T2584] ? clear_bhb_loop+0x60/0xb0 [ 1706.288711][ T2584] ? clear_bhb_loop+0x60/0xb0 [ 1706.293402][ T2584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1706.299321][ T2584] RIP: 0033:0x7fbf12b9e159 [ 1706.303855][ T2584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1706.323564][ T2584] RSP: 002b:00007fbf13b43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1706.332162][ T2584] RAX: ffffffffffffffda RBX: 00007fbf12e25fa0 RCX: 00007fbf12b9e159 [ 1706.340233][ T2584] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1706.348224][ T2584] RBP: 00007fbf12c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1706.356289][ T2584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1706.364278][ T2584] R13: 00007fbf12e26038 R14: 00007fbf12e25fa0 R15: 00007ffd929fee28 [ 1706.372969][ T2584] [ 1706.410420][ T2596] netlink: 'syz.1.8141': attribute type 3 has an invalid length. [ 1706.445549][ T2596] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8141'. [ 1706.595719][ T2609] netlink: 'syz.2.8143': attribute type 13 has an invalid length. [ 1706.635856][ T2609] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8143'. [ 1706.866796][ T2623] netlink: 'syz.1.8148': attribute type 2 has an invalid length. [ 1706.875105][ T2623] netlink: 119 bytes leftover after parsing attributes in process `syz.1.8148'. [ 1706.954194][ T2623] netlink: 'syz.1.8148': attribute type 10 has an invalid length. [ 1706.976136][ T2623] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8148'. [ 1706.997153][ T2623] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1707.602000][ T2654] validate_nla: 1 callbacks suppressed [ 1707.602020][ T2654] netlink: 'syz.1.8166': attribute type 3 has an invalid length. [ 1707.725727][ T2654] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8166'. [ 1708.332780][ T2664] netlink: 'syz.3.8158': attribute type 5 has an invalid length. [ 1708.721181][ T2676] netlink: 'syz.1.8162': attribute type 2 has an invalid length. [ 1708.782274][ T2676] netlink: 119 bytes leftover after parsing attributes in process `syz.1.8162'. [ 1708.953481][ T2680] netlink: 'syz.0.8161': attribute type 17 has an invalid length. [ 1708.963760][ T2680] netlink: 'syz.0.8161': attribute type 16 has an invalid length. [ 1709.008916][ T2679] netlink: 'syz.1.8162': attribute type 10 has an invalid length. [ 1709.031335][ T2679] netlink: 'syz.1.8162': attribute type 4 has an invalid length. [ 1709.050135][ T2679] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1710.213533][ T2725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1710.259389][ T2725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1710.308230][ T2725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1710.398980][ T2725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1710.502560][ T2739] netlink: 'syz.4.8173': attribute type 3 has an invalid length. [ 1710.559119][ T2739] __nla_validate_parse: 2 callbacks suppressed [ 1710.559160][ T2739] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8173'. [ 1710.970799][ T2750] netlink: 'syz.0.8178': attribute type 2 has an invalid length. [ 1710.997022][ T2750] netlink: 119 bytes leftover after parsing attributes in process `syz.0.8178'. [ 1711.071705][ T2750] netlink: 'syz.0.8178': attribute type 10 has an invalid length. [ 1711.098032][ T2750] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8178'. [ 1711.152067][ T2750] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1711.674285][ T2767] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8179'. [ 1711.685656][ T2767] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1712.101012][ T2795] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8187'. [ 1712.125893][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 1712.289221][ T2806] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8190'. [ 1712.343931][ T2801] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8187'. [ 1712.395079][ T2795] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8187'. [ 1712.480838][ T2806] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1712.526403][ T2806] CPU: 1 PID: 2806 Comm: syz.3.8190 Not tainted syzkaller #0 [ 1712.533858][ T2806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1712.543960][ T2806] Call Trace: [ 1712.547297][ T2806] [ 1712.550269][ T2806] dump_stack_lvl+0x188/0x24e [ 1712.554998][ T2806] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1712.561212][ T2806] ? show_regs_print_info+0x12/0x12 [ 1712.566629][ T2806] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1712.572848][ T2806] sysfs_warn_dup+0x8a/0xa0 [ 1712.577396][ T2806] sysfs_do_create_link_sd+0xc0/0x110 [ 1712.582812][ T2806] device_add+0x83b/0x1050 [ 1712.587274][ T2806] wiphy_register+0x1d8b/0x2aa0 [ 1712.592189][ T2806] ? cfg80211_event_work+0x40/0x40 [ 1712.597336][ T2806] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1712.603537][ T2806] ieee80211_register_hw+0x2d48/0x39f0 [ 1712.609035][ T2806] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1712.615485][ T2806] ? ieee80211_register_hw+0xf41/0x39f0 [ 1712.621153][ T2806] ? ieee80211_register_hw+0xf41/0x39f0 [ 1712.627004][ T2806] ? ieee80211_tasklet_handler+0x20/0x20 [ 1712.632746][ T2806] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1712.638753][ T2806] ? __debug_object_init+0xed/0x440 [ 1712.643979][ T2806] ? memset+0x1e/0x40 [ 1712.648060][ T2806] ? __hrtimer_init+0x189/0x270 [ 1712.653372][ T2806] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1712.659119][ T2806] ? memcpy+0x3c/0x60 [ 1712.663116][ T2806] hwsim_new_radio_nl+0xab7/0xc90 [ 1712.668184][ T2806] genl_family_rcv_msg_doit+0x22f/0x350 [ 1712.673755][ T2806] ? end_current_label_crit_section+0x170/0x170 [ 1712.680024][ T2806] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1712.686190][ T2806] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1712.692105][ T2806] ? bpf_lsm_capable+0x5/0x10 [ 1712.696797][ T2806] ? security_capable+0x85/0xb0 [ 1712.701669][ T2806] genl_rcv_msg+0x601/0x790 [ 1712.706232][ T2806] ? genl_bind+0x360/0x360 [ 1712.710659][ T2806] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1712.717016][ T2806] netlink_rcv_skb+0x1ef/0x440 [ 1712.721928][ T2806] ? genl_bind+0x360/0x360 [ 1712.726363][ T2806] ? netlink_ack+0x1160/0x1160 [ 1712.731156][ T2806] ? down_read+0x1a8/0x2d0 [ 1712.735592][ T2806] genl_rcv+0x24/0x40 [ 1712.739678][ T2806] netlink_unicast+0x7ad/0x920 [ 1712.744477][ T2806] netlink_sendmsg+0x8ad/0xbd0 [ 1712.749331][ T2806] ? netlink_getsockopt+0x550/0x550 [ 1712.754563][ T2806] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1712.760144][ T2806] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1712.765442][ T2806] ? security_socket_sendmsg+0x7c/0xa0 [ 1712.770917][ T2806] ? netlink_getsockopt+0x550/0x550 [ 1712.776135][ T2806] ____sys_sendmsg+0x5ed/0x9a0 [ 1712.780925][ T2806] ? __sys_sendmsg_sock+0x30/0x30 [ 1712.785971][ T2806] ? __import_iovec+0x44b/0x510 [ 1712.790904][ T2806] ? import_iovec+0x6f/0xa0 [ 1712.795462][ T2806] ___sys_sendmsg+0x2a2/0x360 [ 1712.800419][ T2806] ? __sys_sendmsg+0x2a0/0x2a0 [ 1712.805211][ T2806] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1712.811337][ T2806] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1712.817552][ T2806] ? lockdep_hardirqs_on+0x94/0x140 [ 1712.822785][ T2806] ? __sanitizer_cov_trace_pc+0x37/0x60 [ 1712.828359][ T2806] __se_sys_sendmsg+0x1c3/0x2b0 [ 1712.833321][ T2806] ? __x64_sys_sendmsg+0x80/0x80 [ 1712.838289][ T2806] ? lockdep_hardirqs_on+0x94/0x140 [ 1712.843611][ T2806] ? __x64_sys_sendmsg+0x5f/0x80 [ 1712.848575][ T2806] do_syscall_64+0x4c/0xa0 [ 1712.853007][ T2806] ? clear_bhb_loop+0x60/0xb0 [ 1712.857781][ T2806] ? clear_bhb_loop+0x60/0xb0 [ 1712.862486][ T2806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1712.868405][ T2806] RIP: 0033:0x7ff47059e159 [ 1712.872856][ T2806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1712.892664][ T2806] RSP: 002b:00007ff4713ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1712.901184][ T2806] RAX: ffffffffffffffda RBX: 00007ff470825fa0 RCX: 00007ff47059e159 [ 1712.909174][ T2806] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1712.917328][ T2806] RBP: 00007ff47063506b R08: 0000000000000000 R09: 0000000000000000 [ 1712.925306][ T2806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1712.933464][ T2806] R13: 00007ff470826038 R14: 00007ff470825fa0 R15: 00007ffcd746fd38 [ 1712.941484][ T2806] [ 1713.654092][ T2820] FAULT_INJECTION: forcing a failure. [ 1713.654092][ T2820] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.698612][ T2820] CPU: 1 PID: 2820 Comm: syz.1.8192 Not tainted syzkaller #0 [ 1713.706074][ T2820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1713.716175][ T2820] Call Trace: [ 1713.719606][ T2820] [ 1713.722668][ T2820] dump_stack_lvl+0x188/0x24e [ 1713.726829][ T2826] validate_nla: 4 callbacks suppressed [ 1713.726845][ T2826] netlink: 'syz.4.8194': attribute type 2 has an invalid length. [ 1713.727471][ T2820] ? show_regs_print_info+0x12/0x12 [ 1713.733017][ T2826] netlink: 119 bytes leftover after parsing attributes in process `syz.4.8194'. [ 1713.740943][ T2820] ? load_image+0x410/0x410 [ 1713.740982][ T2820] ? __might_sleep+0xd0/0xd0 [ 1713.741001][ T2820] ? __lock_acquire+0x7c40/0x7c40 [ 1713.741031][ T2820] should_fail_ex+0x390/0x4c0 [ 1713.741064][ T2820] should_failslab+0x5/0x20 [ 1713.778866][ T2820] slab_pre_alloc_hook+0x59/0x300 [ 1713.783944][ T2820] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1713.789982][ T2820] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1713.795839][ T2820] __kmem_cache_alloc_node+0x4f/0x270 [ 1713.801262][ T2820] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1713.807111][ T2820] __kmalloc+0xa3/0x240 [ 1713.811314][ T2820] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1713.817060][ T2820] ? tomoyo_domain+0xd2/0x120 [ 1713.821769][ T2820] ? tomoyo_path_number_perm+0x205/0x650 [ 1713.827415][ T2820] tomoyo_path_number_perm+0x22f/0x650 [ 1713.833169][ T2820] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1713.838708][ T2820] ? __fget_files+0x28/0x460 [ 1713.843341][ T2820] security_file_ioctl+0x6c/0xa0 [ 1713.848691][ T2820] __se_sys_ioctl+0x48/0x170 [ 1713.853668][ T2820] do_syscall_64+0x4c/0xa0 [ 1713.858135][ T2820] ? clear_bhb_loop+0x60/0xb0 [ 1713.862944][ T2820] ? clear_bhb_loop+0x60/0xb0 [ 1713.867665][ T2820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1713.873587][ T2820] RIP: 0033:0x7faf4cd9e159 [ 1713.878122][ T2820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1713.897939][ T2820] RSP: 002b:00007faf4dcc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1713.906463][ T2820] RAX: ffffffffffffffda RBX: 00007faf4d025fa0 RCX: 00007faf4cd9e159 [ 1713.914446][ T2820] RDX: 0000200000000000 RSI: 0000000000008b26 RDI: 000000000000000b [ 1713.922518][ T2820] RBP: 00007faf4dcc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1713.930499][ T2820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1713.938483][ T2820] R13: 00007faf4d026038 R14: 00007faf4d025fa0 R15: 00007ffd4bee1448 [ 1713.946569][ T2820] [ 1713.991353][ T2833] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8196'. [ 1714.005315][ T2826] netlink: 'syz.4.8194': attribute type 10 has an invalid length. [ 1714.021520][ T2826] netlink: 'syz.4.8194': attribute type 4 has an invalid length. [ 1714.029973][ T2826] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1714.035942][ T2820] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1714.083281][ T2834] netlink: 'syz.3.8196': attribute type 7 has an invalid length. [ 1714.368438][ T2843] netlink: 'syz.2.8198': attribute type 1 has an invalid length. [ 1715.385269][ T2878] netlink: 'syz.3.8204': attribute type 10 has an invalid length. [ 1715.453867][ T2878] team0: Port device geneve1 added [ 1715.823050][ T2886] __nla_validate_parse: 1 callbacks suppressed [ 1715.823068][ T2886] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8210'. [ 1717.418899][ T2940] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8222'. [ 1717.813412][ T2940] team0: Port device team_slave_0 removed [ 1718.481955][ T2945] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8224'. [ 1718.503637][ T2952] netlink: 'syz.1.8225': attribute type 2 has an invalid length. [ 1718.517480][ T2952] netlink: 119 bytes leftover after parsing attributes in process `syz.1.8225'. [ 1718.542966][ T2948] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8223'. [ 1718.696299][ T2960] netlink: 'syz.1.8225': attribute type 10 has an invalid length. [ 1718.721565][ T2960] netlink: 'syz.1.8225': attribute type 4 has an invalid length. [ 1718.732361][ T2960] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8225'. [ 1718.753190][ T2960] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1719.697203][ T2985] netlink: 'syz.3.8230': attribute type 10 has an invalid length. [ 1722.813070][ T2999] netlink: 'syz.4.8234': attribute type 7 has an invalid length. [ 1723.232698][ T3013] netlink: 'syz.1.8236': attribute type 3 has an invalid length. [ 1723.294295][ T3013] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8236'. [ 1723.421599][ T3028] netlink: 'syz.0.8239': attribute type 2 has an invalid length. [ 1723.429780][ T3028] netlink: 119 bytes leftover after parsing attributes in process `syz.0.8239'. [ 1723.527120][ T3028] netlink: 'syz.0.8239': attribute type 10 has an invalid length. [ 1723.552182][ T3028] netlink: 'syz.0.8239': attribute type 4 has an invalid length. [ 1723.632275][ T3028] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8239'. [ 1723.661289][ T3028] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1723.969080][ T3049] netlink: 'syz.4.8245': attribute type 10 has an invalid length. [ 1725.298137][ T3076] netlink: 'syz.2.8254': attribute type 3 has an invalid length. [ 1725.329856][ T3076] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8254'. [ 1725.379213][ T3079] netlink: 'syz.0.8256': attribute type 2 has an invalid length. [ 1725.403504][ T3079] netlink: 119 bytes leftover after parsing attributes in process `syz.0.8256'. [ 1725.448203][ T3081] netlink: 'syz.4.8257': attribute type 10 has an invalid length. [ 1725.501209][ T3079] netlink: 'syz.0.8256': attribute type 10 has an invalid length. [ 1725.554071][ T3079] netlink: 'syz.0.8256': attribute type 4 has an invalid length. [ 1725.564161][ T3079] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8256'. [ 1725.580834][ T3079] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1725.751034][ T3084] netlink: 'syz.3.8255': attribute type 1 has an invalid length. [ 1725.773723][ T3086] netlink: 'syz.4.8258': attribute type 10 has an invalid length. [ 1725.941940][ T3086] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1726.003300][ T3084] netlink: 'syz.3.8255': attribute type 3 has an invalid length. [ 1726.361617][ T3084] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8255'. [ 1728.107494][ T3114] netlink: 'syz.3.8265': attribute type 3 has an invalid length. [ 1728.120506][ T3114] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8265'. [ 1728.136042][ T3137] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8269'. [ 1728.173172][ T3137] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1728.346848][ T3141] netlink: 119 bytes leftover after parsing attributes in process `syz.0.8270'. [ 1728.404851][ T3150] netlink: 192312 bytes leftover after parsing attributes in process `syz.2.8273'. [ 1728.551316][ T3141] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8270'. [ 1728.561047][ T3141] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1729.091810][ T3179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8278'. [ 1729.150183][ T3180] validate_nla: 7 callbacks suppressed [ 1729.150205][ T3180] netlink: 'syz.2.8278': attribute type 29 has an invalid length. [ 1729.246181][ T3179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8278'. [ 1729.326297][ T3179] netlink: 33 bytes leftover after parsing attributes in process `syz.2.8278'. [ 1729.335361][ T3179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8278'. [ 1729.439392][ T3179] netlink: 33 bytes leftover after parsing attributes in process `syz.2.8278'. [ 1729.501430][ T3179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8278'. [ 1729.556181][ T3179] netlink: 33 bytes leftover after parsing attributes in process `syz.2.8278'. [ 1729.608556][ T3180] netlink: 'syz.2.8278': attribute type 29 has an invalid length. [ 1729.631603][ T3186] netlink: 'syz.1.8280': attribute type 10 has an invalid length. [ 1729.682258][ T3181] netlink: 'syz.2.8278': attribute type 29 has an invalid length. [ 1729.707918][ T3187] netlink: 'syz.2.8278': attribute type 29 has an invalid length. [ 1729.804254][ T3188] netlink: 'syz.2.8278': attribute type 29 has an invalid length. [ 1729.826888][ T3179] netlink: 'syz.2.8278': attribute type 29 has an invalid length. [ 1730.454807][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.461385][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.165873][ T3218] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1732.366189][ T3236] netlink: 'syz.2.8293': attribute type 10 has an invalid length. [ 1732.973528][ T3244] netlink: 'syz.2.8295': attribute type 2 has an invalid length. [ 1732.985667][ T3244] netlink: 'syz.2.8295': attribute type 8 has an invalid length. [ 1733.186321][ T3250] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1733.289789][ T3252] bridge0: port 3(hsr0) entered disabled state [ 1733.296658][ T3252] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.369761][ T3252] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1733.435067][ T3252] bridge0: port 3(hsr0) entered blocking state [ 1733.441500][ T3252] bridge0: port 3(hsr0) entered forwarding state [ 1733.448183][ T3252] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.455372][ T3252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1733.473734][ T3252] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1733.496935][ T3270] syz.3.8303[3270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1733.497264][ T3270] syz.3.8303[3270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1733.564270][ T3268] __nla_validate_parse: 10 callbacks suppressed [ 1733.564290][ T3268] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.8303'. [ 1733.610755][ T3268] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.8303'. [ 1733.677175][ T3268] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.8303'. [ 1733.705834][ T3268] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.8303'. [ 1733.741798][ T3268] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.8303'. [ 1733.770146][ T3278] netlink: 175020 bytes leftover after parsing attributes in process `syz.0.8306'. [ 1733.776366][ T3268] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.8303'. [ 1733.818833][ T3268] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.8303'. [ 1733.881566][ T3268] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.8303'. [ 1733.917919][ T3268] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.8303'. [ 1734.260455][ T3288] validate_nla: 76 callbacks suppressed [ 1734.260500][ T3288] netlink: 'syz.2.8310': attribute type 21 has an invalid length. [ 1734.282347][ T3288] IPv6: NLM_F_CREATE should be specified when creating new route [ 1734.291713][ T3288] IPv6: Can't replace route, no match found [ 1734.372235][ T3288] netlink: 'syz.2.8310': attribute type 1 has an invalid length. [ 1734.382673][ T3296] netlink: 'syz.3.8313': attribute type 2 has an invalid length. [ 1734.467433][ T3296] netlink: 'syz.3.8313': attribute type 10 has an invalid length. [ 1734.499341][ T3296] netlink: 'syz.3.8313': attribute type 4 has an invalid length. [ 1734.521016][ T3296] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1734.863575][ T3311] netlink: 'syz.2.8317': attribute type 3 has an invalid length. [ 1734.907828][ T3313] netlink: 'syz.3.8318': attribute type 10 has an invalid length. [ 1735.935106][ T3336] netlink: 'syz.4.8325': attribute type 21 has an invalid length. [ 1736.231621][ T3351] delete_channel: no stack [ 1736.299459][ T3351] delete_channel: no stack [ 1736.314842][ T3355] netlink: 'syz.1.8328': attribute type 2 has an invalid length. [ 1736.425388][ T3355] netlink: 'syz.1.8328': attribute type 10 has an invalid length. [ 1736.444569][ T3355] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1738.315289][ T3412] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1739.098710][ T3448] __nla_validate_parse: 65 callbacks suppressed [ 1739.098730][ T3448] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8350'. [ 1739.993553][ T3466] validate_nla: 61 callbacks suppressed [ 1739.993599][ T3466] netlink: 'syz.3.8352': attribute type 10 has an invalid length. [ 1740.084550][ T3466] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8352'. [ 1740.143297][ T3466] device ipvlan1 entered promiscuous mode [ 1740.274893][ T3466] bridge0: port 3(ipvlan1) entered blocking state [ 1740.326368][ T3466] bridge0: port 3(ipvlan1) entered disabled state [ 1740.347554][ T3466] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1740.386191][ T3471] netlink: 'syz.1.8355': attribute type 10 has an invalid length. [ 1740.416031][ T3472] netlink: 'syz.0.8354': attribute type 2 has an invalid length. [ 1740.428060][ T3472] netlink: 119 bytes leftover after parsing attributes in process `syz.0.8354'. [ 1740.466269][ T3474] netlink: 'syz.0.8354': attribute type 10 has an invalid length. [ 1740.480568][ T3474] netlink: 'syz.0.8354': attribute type 4 has an invalid length. [ 1740.506021][ T3474] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8354'. [ 1740.535345][ T3474] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1741.595080][ T3497] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8361'. [ 1743.712877][ T3508] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8363'. [ 1744.093429][ T3517] netlink: 'syz.0.8364': attribute type 13 has an invalid length. [ 1744.232875][ T3517] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8364'. [ 1744.322657][ T3517] erspan0: refused to change device tx_queue_len [ 1744.367313][ T3517] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1744.839957][ T3522] netlink: 'syz.2.8367': attribute type 10 has an invalid length. [ 1745.768065][ T3529] netlink: 'syz.1.8370': attribute type 2 has an invalid length. [ 1745.796819][ T3529] netlink: 119 bytes leftover after parsing attributes in process `syz.1.8370'. [ 1746.042479][ T3538] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8368'. [ 1746.209061][ T3540] netlink: 'syz.1.8370': attribute type 10 has an invalid length. [ 1746.349991][ T3540] netlink: 'syz.1.8370': attribute type 4 has an invalid length. [ 1746.387537][ T3540] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8370'. [ 1746.416045][ T3540] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1747.604790][ T3556] netlink: 'syz.3.8374': attribute type 21 has an invalid length. [ 1747.831620][ T3556] netlink: 'syz.3.8374': attribute type 1 has an invalid length. [ 1747.863523][ T3556] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.8374'. [ 1748.039552][ T3562] netlink: 'syz.0.8378': attribute type 3 has an invalid length. [ 1748.071371][ T3562] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8378'. [ 1748.396316][ T3571] netlink: 'syz.3.8381': attribute type 10 has an invalid length. [ 1748.568297][ T3575] netlink: 'syz.4.8382': attribute type 2 has an invalid length. [ 1748.618005][ T3575] netlink: 119 bytes leftover after parsing attributes in process `syz.4.8382'. [ 1748.748518][ T3575] netlink: 'syz.4.8382': attribute type 10 has an invalid length. [ 1748.807591][ T3575] netlink: 'syz.4.8382': attribute type 4 has an invalid length. [ 1748.848101][ T3575] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8382'. [ 1748.889293][ T3575] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1748.997132][ T3586] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8386'. [ 1749.998120][ T3606] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8391'. [ 1750.099135][ T3603] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8389'. [ 1750.334069][ T3613] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8389'. [ 1750.440855][ T3613] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8389'. [ 1750.467738][ T3629] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8393'. [ 1750.502244][ T3609] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8388'. [ 1751.166894][ T3641] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1751.292204][ T3644] validate_nla: 13 callbacks suppressed [ 1751.292225][ T3644] netlink: 'syz.1.8397': attribute type 2 has an invalid length. [ 1751.339445][ T3644] netlink: 119 bytes leftover after parsing attributes in process `syz.1.8397'. [ 1751.425032][ T3645] netlink: 'syz.1.8397': attribute type 10 has an invalid length. [ 1751.449182][ T3645] netlink: 'syz.1.8397': attribute type 4 has an invalid length. [ 1751.459007][ T3645] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8397'. [ 1751.475434][ T3645] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1751.614554][ T3655] netlink: 'syz.4.8398': attribute type 1 has an invalid length. [ 1751.686272][ T3655] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.8398'. [ 1754.844986][ T3682] netlink: 'syz.1.8402': attribute type 4 has an invalid length. [ 1754.892772][ T3682] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8402'. [ 1755.495593][ T3697] netlink: 'syz.3.8408': attribute type 3 has an invalid length. [ 1755.501770][ T3700] netlink: 'syz.1.8411': attribute type 2 has an invalid length. [ 1755.521347][ T3697] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8408'. [ 1755.541148][ T3700] netlink: 119 bytes leftover after parsing attributes in process `syz.1.8411'. [ 1755.562441][ T3707] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1755.585507][ T3700] netlink: 'syz.1.8411': attribute type 10 has an invalid length. [ 1755.595717][ T3700] netlink: 'syz.1.8411': attribute type 4 has an invalid length. [ 1755.620567][ T3700] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8411'. [ 1755.686319][ T3700] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1755.946645][ T3726] netlink: 'syz.4.8415': attribute type 21 has an invalid length. [ 1755.954782][ T3726] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.8415'. [ 1756.495565][ T3735] netlink: 'syz.0.8418': attribute type 21 has an invalid length. [ 1756.556951][ T3735] netlink: 'syz.0.8418': attribute type 6 has an invalid length. [ 1756.597310][ T3735] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8418'. [ 1756.652627][ T3733] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.8417'. [ 1756.670270][ T3733] device bridge_slave_1 left promiscuous mode [ 1756.979359][ T3741] netlink: 'syz.3.8419': attribute type 21 has an invalid length. [ 1756.999810][ T3741] netlink: 'syz.3.8419': attribute type 1 has an invalid length. [ 1757.021154][ T3741] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8419'. [ 1757.223152][ T3747] device ipvlan1 left promiscuous mode [ 1757.239779][ T3750] netlink: 'syz.0.8422': attribute type 3 has an invalid length. [ 1757.264983][ T3750] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8422'. [ 1757.869570][ T3753] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1757.914508][ T3757] netlink: 'syz.2.8424': attribute type 2 has an invalid length. [ 1757.973477][ T3757] netlink: 119 bytes leftover after parsing attributes in process `syz.2.8424'. [ 1758.007173][ T3759] netlink: 'syz.2.8424': attribute type 10 has an invalid length. [ 1758.046973][ T3759] netlink: 'syz.2.8424': attribute type 4 has an invalid length. [ 1758.066468][ T3759] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8424'. [ 1758.086898][ T3759] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1758.454608][ T3774] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 1758.524022][ T3774] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 1758.977744][ T3796] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1759.324565][ T3800] IPv6: NLM_F_CREATE should be specified when creating new route [ 1759.465212][ T3799] netlink: 'syz.4.8439': attribute type 3 has an invalid length. [ 1759.736635][ T3806] netlink: 'syz.3.8441': attribute type 2 has an invalid length. [ 1760.062585][ T3806] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1760.702722][ T3818] IPv6: NLM_F_CREATE should be specified when creating new route [ 1760.765944][ T3818] __nla_validate_parse: 4 callbacks suppressed [ 1760.765964][ T3818] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8444'. [ 1761.658807][ T3832] FAULT_INJECTION: forcing a failure. [ 1761.658807][ T3832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1761.660658][ T3831] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1761.718062][ T3832] CPU: 1 PID: 3832 Comm: syz.0.8451 Not tainted syzkaller #0 [ 1761.725604][ T3832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1761.735789][ T3832] Call Trace: [ 1761.739099][ T3832] [ 1761.742138][ T3832] dump_stack_lvl+0x188/0x24e [ 1761.746845][ T3832] ? show_regs_print_info+0x12/0x12 [ 1761.752069][ T3832] ? load_image+0x410/0x410 [ 1761.756596][ T3832] ? __lock_acquire+0x7c40/0x7c40 [ 1761.761724][ T3832] should_fail_ex+0x390/0x4c0 [ 1761.766427][ T3832] _copy_from_user+0x2c/0x170 [ 1761.771115][ T3832] ___sys_sendmsg+0x1c3/0x360 [ 1761.775810][ T3832] ? __sys_sendmsg+0x2a0/0x2a0 [ 1761.780635][ T3832] ? __lock_acquire+0x7c40/0x7c40 [ 1761.785704][ T3832] __se_sys_sendmsg+0x1c3/0x2b0 [ 1761.790574][ T3832] ? __x64_sys_sendmsg+0x80/0x80 [ 1761.795707][ T3832] ? lockdep_hardirqs_on+0x94/0x140 [ 1761.800928][ T3832] do_syscall_64+0x4c/0xa0 [ 1761.805359][ T3832] ? clear_bhb_loop+0x60/0xb0 [ 1761.810147][ T3832] ? clear_bhb_loop+0x60/0xb0 [ 1761.814874][ T3832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1761.820893][ T3832] RIP: 0033:0x7fbf12b9e159 [ 1761.825345][ T3832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1761.845162][ T3832] RSP: 002b:00007fbf13b43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1761.853885][ T3832] RAX: ffffffffffffffda RBX: 00007fbf12e25fa0 RCX: 00007fbf12b9e159 [ 1761.862039][ T3832] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000003 [ 1761.870368][ T3832] RBP: 00007fbf13b43090 R08: 0000000000000000 R09: 0000000000000000 [ 1761.878354][ T3832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1761.886353][ T3832] R13: 00007fbf12e26038 R14: 00007fbf12e25fa0 R15: 00007ffd929fee28 [ 1761.894384][ T3832] [ 1762.192435][ T3852] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8456'. [ 1762.220228][ T3852] validate_nla: 2 callbacks suppressed [ 1762.220245][ T3852] netlink: 'syz.2.8456': attribute type 33 has an invalid length. [ 1762.267296][ T3852] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8456'. [ 1762.465223][ T3860] netlink: 'syz.2.8459': attribute type 2 has an invalid length. [ 1762.473410][ T3860] netlink: 119 bytes leftover after parsing attributes in process `syz.2.8459'. [ 1762.543294][ T3860] netlink: 'syz.2.8459': attribute type 10 has an invalid length. [ 1762.573282][ T3862] netlink: 'syz.3.8458': attribute type 3 has an invalid length. [ 1762.575225][ T3860] netlink: 'syz.2.8459': attribute type 4 has an invalid length. [ 1762.607484][ T3860] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8459'. [ 1762.647478][ T3860] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1762.655807][ T3862] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8458'. [ 1762.728243][ T3868] netlink: 26 bytes leftover after parsing attributes in process `syz.1.8461'. [ 1762.998270][ T3880] FAULT_INJECTION: forcing a failure. [ 1762.998270][ T3880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1763.045910][ T3880] CPU: 1 PID: 3880 Comm: syz.1.8465 Not tainted syzkaller #0 [ 1763.053438][ T3880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1763.063532][ T3880] Call Trace: [ 1763.066844][ T3880] [ 1763.069975][ T3880] dump_stack_lvl+0x188/0x24e [ 1763.074687][ T3880] ? show_regs_print_info+0x12/0x12 [ 1763.080012][ T3880] ? load_image+0x410/0x410 [ 1763.084569][ T3880] ? __lock_acquire+0x7c40/0x7c40 [ 1763.089733][ T3880] should_fail_ex+0x390/0x4c0 [ 1763.094475][ T3880] _copy_from_user+0x2c/0x170 [ 1763.099258][ T3880] __copy_msghdr+0x384/0x560 [ 1763.103890][ T3880] ___sys_sendmsg+0x210/0x360 [ 1763.108597][ T3880] ? __sys_sendmsg+0x2a0/0x2a0 [ 1763.113387][ T3880] ? __lock_acquire+0x7c40/0x7c40 [ 1763.118444][ T3880] __se_sys_sendmsg+0x1c3/0x2b0 [ 1763.123326][ T3880] ? __x64_sys_sendmsg+0x80/0x80 [ 1763.128377][ T3880] ? lockdep_hardirqs_on+0x94/0x140 [ 1763.133602][ T3880] do_syscall_64+0x4c/0xa0 [ 1763.138035][ T3880] ? clear_bhb_loop+0x60/0xb0 [ 1763.142809][ T3880] ? clear_bhb_loop+0x60/0xb0 [ 1763.147495][ T3880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1763.153406][ T3880] RIP: 0033:0x7faf4cd9e159 [ 1763.157829][ T3880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1763.177711][ T3880] RSP: 002b:00007faf4dcc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1763.186137][ T3880] RAX: ffffffffffffffda RBX: 00007faf4d025fa0 RCX: 00007faf4cd9e159 [ 1763.194139][ T3880] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000003 [ 1763.202121][ T3880] RBP: 00007faf4dcc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1763.210099][ T3880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1763.218170][ T3880] R13: 00007faf4d026038 R14: 00007faf4d025fa0 R15: 00007ffd4bee1448 [ 1763.226241][ T3880] [ 1763.355959][ T3882] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1764.127501][ T3907] netlink: 'syz.3.8473': attribute type 2 has an invalid length. [ 1764.149887][ T3907] netlink: 119 bytes leftover after parsing attributes in process `syz.3.8473'. [ 1764.362292][ T3907] netlink: 'syz.3.8473': attribute type 10 has an invalid length. [ 1764.382738][ T3907] netlink: 'syz.3.8473': attribute type 4 has an invalid length. [ 1764.401758][ T3907] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8473'. [ 1764.426282][ T3907] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1764.452599][ T3913] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.8475'. [ 1764.583836][ T3914] netlink: 'syz.0.8476': attribute type 10 has an invalid length. [ 1765.125581][ T3930] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1765.364660][ T3943] FAULT_INJECTION: forcing a failure. [ 1765.364660][ T3943] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.382914][ T3943] CPU: 0 PID: 3943 Comm: syz.1.8482 Not tainted syzkaller #0 [ 1765.390355][ T3943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1765.400446][ T3943] Call Trace: [ 1765.403768][ T3943] [ 1765.406736][ T3943] dump_stack_lvl+0x188/0x24e [ 1765.411464][ T3943] ? show_regs_print_info+0x12/0x12 [ 1765.416704][ T3943] ? load_image+0x410/0x410 [ 1765.421254][ T3943] ? __might_sleep+0xd0/0xd0 [ 1765.425968][ T3943] ? __lock_acquire+0x7c40/0x7c40 [ 1765.431040][ T3943] ? __lock_acquire+0x138a/0x7c40 [ 1765.436126][ T3943] should_fail_ex+0x390/0x4c0 [ 1765.440875][ T3943] should_failslab+0x5/0x20 [ 1765.445644][ T3943] slab_pre_alloc_hook+0x59/0x300 [ 1765.450725][ T3943] kmem_cache_alloc_node+0x5a/0x310 [ 1765.456072][ T3943] ? __alloc_skb+0xf9/0x7d0 [ 1765.460708][ T3943] __alloc_skb+0xf9/0x7d0 [ 1765.465093][ T3943] alloc_skb_with_frags+0xa7/0x710 [ 1765.470259][ T3943] sock_alloc_send_pskb+0x87f/0x9a0 [ 1765.475509][ T3943] ? sock_kzfree_s+0x50/0x50 [ 1765.480149][ T3943] ? verify_lock_unused+0x140/0x140 [ 1765.485388][ T3943] ? dev_get_by_index+0x1e/0x2d0 [ 1765.490374][ T3943] ? dev_get_by_index+0x1e/0x2d0 [ 1765.495371][ T3943] packet_sendmsg+0x31b9/0x4c30 [ 1765.500461][ T3943] ? __might_sleep+0xd0/0xd0 [ 1765.505178][ T3943] ? is_bpf_text_address+0x22/0x2a0 [ 1765.510426][ T3943] ? verify_lock_unused+0x140/0x140 [ 1765.515759][ T3943] ? mark_lock+0x94/0x320 [ 1765.520142][ T3943] ? aa_sk_perm+0x81f/0x950 [ 1765.524695][ T3943] ? aa_af_perm+0x340/0x340 [ 1765.529412][ T3943] ? packet_getsockopt+0x980/0x980 [ 1765.534573][ T3943] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1765.540174][ T3943] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1765.545506][ T3943] ? security_socket_sendmsg+0x7c/0xa0 [ 1765.551009][ T3943] ? packet_getsockopt+0x980/0x980 [ 1765.556180][ T3943] ____sys_sendmsg+0x5ed/0x9a0 [ 1765.560988][ T3943] ? __lock_acquire+0x7c40/0x7c40 [ 1765.566077][ T3943] ? __sys_sendmsg_sock+0x30/0x30 [ 1765.571163][ T3943] ? __import_iovec+0x306/0x510 [ 1765.576092][ T3943] ? import_iovec+0x6f/0xa0 [ 1765.580670][ T3943] ___sys_sendmsg+0x2a2/0x360 [ 1765.585397][ T3943] ? __sys_sendmsg+0x2a0/0x2a0 [ 1765.590224][ T3943] ? __lock_acquire+0x7c40/0x7c40 [ 1765.595326][ T3943] __se_sys_sendmsg+0x1c3/0x2b0 [ 1765.600303][ T3943] ? ct_nmi_exit+0x145/0x1c0 [ 1765.604947][ T3943] ? __x64_sys_sendmsg+0x80/0x80 [ 1765.609949][ T3943] ? lockdep_hardirqs_on+0x94/0x140 [ 1765.615198][ T3943] do_syscall_64+0x4c/0xa0 [ 1765.619831][ T3943] ? clear_bhb_loop+0x60/0xb0 [ 1765.624546][ T3943] ? clear_bhb_loop+0x60/0xb0 [ 1765.629264][ T3943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1765.635202][ T3943] RIP: 0033:0x7faf4cd9e159 [ 1765.639760][ T3943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1765.659407][ T3943] RSP: 002b:00007faf4dcc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1765.667872][ T3943] RAX: ffffffffffffffda RBX: 00007faf4d025fa0 RCX: 00007faf4cd9e159 [ 1765.675887][ T3943] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000003 [ 1765.683895][ T3943] RBP: 00007faf4dcc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1765.691885][ T3943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1765.699867][ T3943] R13: 00007faf4d026038 R14: 00007faf4d025fa0 R15: 00007ffd4bee1448 [ 1765.707864][ T3943] [ 1766.539370][ T3958] netlink: 'syz.4.8487': attribute type 2 has an invalid length. [ 1766.581646][ T3958] __nla_validate_parse: 1 callbacks suppressed [ 1766.581667][ T3958] netlink: 119 bytes leftover after parsing attributes in process `syz.4.8487'. [ 1766.714427][ T3958] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8487'. [ 1766.761069][ T3958] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1767.095280][ T3967] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.8490'. [ 1767.100734][ T3968] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.8490'. [ 1767.161655][ T3968] openvswitch: netlink: Key type 386 is out of range max 32 [ 1767.200510][ T3967] openvswitch: netlink: Key type 386 is out of range max 32 [ 1767.220060][ T3964] cgroup: fork rejected by pids controller in /syz2 [ 1767.404998][ T3973] bridge0: port 4(ip6gretap0) entered blocking state [ 1767.461324][ T3973] bridge0: port 4(ip6gretap0) entered disabled state [ 1767.579764][ T3973] device ip6gretap0 entered promiscuous mode [ 1767.612027][ T3973] bridge0: port 4(ip6gretap0) entered blocking state [ 1767.618896][ T3973] bridge0: port 4(ip6gretap0) entered forwarding state [ 1767.675904][ T3982] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1769.187905][ T6142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.235647][ T4027] validate_nla: 2 callbacks suppressed [ 1769.235667][ T4027] netlink: 'syz.1.8503': attribute type 2 has an invalid length. [ 1769.281909][ T4027] netlink: 119 bytes leftover after parsing attributes in process `syz.1.8503'. [ 1769.352961][ T4024] netlink: 'syz.3.8501': attribute type 2 has an invalid length. [ 1769.382796][ T4024] netlink: 119 bytes leftover after parsing attributes in process `syz.3.8501'. [ 1769.403421][ T4032] device hsr0 entered promiscuous mode [ 1769.417350][ T4029] netlink: 'syz.3.8501': attribute type 10 has an invalid length. [ 1769.445996][ T4029] netlink: 'syz.3.8501': attribute type 4 has an invalid length. [ 1769.454919][ T4029] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8501'. [ 1769.474239][ T4029] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1769.563357][ T6142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.621970][ T4033] netlink: 'syz.1.8503': attribute type 10 has an invalid length. [ 1769.631401][ T4033] netlink: 'syz.1.8503': attribute type 4 has an invalid length. [ 1769.655858][ T4033] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8503'. [ 1769.664992][ T4033] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1770.005260][ T6142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.141508][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1770.151597][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1770.161008][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1770.175460][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1770.185112][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1770.192694][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1770.717365][ T6142] bond0: (slave netdevsim0): Releasing backup interface [ 1770.753561][ T6142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.890073][ T4056] netlink: 'syz.1.8508': attribute type 3 has an invalid length. [ 1771.051851][ T4056] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8508'. [ 1771.195211][ T4066] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1771.221691][ T4072] FAULT_INJECTION: forcing a failure. [ 1771.221691][ T4072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1771.235960][ T4072] CPU: 1 PID: 4072 Comm: syz.3.8511 Not tainted syzkaller #0 [ 1771.243373][ T4072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1771.253521][ T4072] Call Trace: [ 1771.256838][ T4072] [ 1771.259865][ T4072] dump_stack_lvl+0x188/0x24e [ 1771.264559][ T4072] ? show_regs_print_info+0x12/0x12 [ 1771.269767][ T4072] ? load_image+0x410/0x410 [ 1771.274289][ T4072] ? __lock_acquire+0x7c40/0x7c40 [ 1771.279362][ T4072] ? snprintf+0xe5/0x140 [ 1771.283881][ T4072] should_fail_ex+0x390/0x4c0 [ 1771.288598][ T4072] _copy_to_user+0x2c/0x130 [ 1771.293136][ T4072] simple_read_from_buffer+0xe3/0x150 [ 1771.298525][ T4072] proc_fail_nth_read+0x1a6/0x220 [ 1771.303591][ T4072] ? proc_fault_inject_write+0x310/0x310 [ 1771.309270][ T4072] ? fsnotify_perm+0x248/0x550 [ 1771.314046][ T4072] ? proc_fault_inject_write+0x310/0x310 [ 1771.319688][ T4072] vfs_read+0x2db/0x960 [ 1771.323862][ T4072] ? kernel_read+0x1e0/0x1e0 [ 1771.328557][ T4072] ? __fget_files+0x28/0x460 [ 1771.333161][ T4072] ? __fget_files+0x3fc/0x460 [ 1771.337867][ T4072] ? __fdget_pos+0x2ae/0x360 [ 1771.342467][ T4072] ? ksys_read+0x70/0x260 [ 1771.346812][ T4072] ksys_read+0x14d/0x260 [ 1771.351069][ T4072] ? vfs_write+0x9a0/0x9a0 [ 1771.355618][ T4072] ? lockdep_hardirqs_on+0x94/0x140 [ 1771.360836][ T4072] do_syscall_64+0x4c/0xa0 [ 1771.365357][ T4072] ? clear_bhb_loop+0x60/0xb0 [ 1771.370050][ T4072] ? clear_bhb_loop+0x60/0xb0 [ 1771.374733][ T4072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1771.380645][ T4072] RIP: 0033:0x7ff47055e98e [ 1771.385067][ T4072] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1771.405040][ T4072] RSP: 002b:00007ff4713eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1771.413471][ T4072] RAX: ffffffffffffffda RBX: 00007ff4713ef6c0 RCX: 00007ff47055e98e [ 1771.421454][ T4072] RDX: 000000000000000f RSI: 00007ff4713ef0a0 RDI: 0000000000000004 [ 1771.429440][ T4072] RBP: 00007ff4713ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1771.437437][ T4072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1771.445444][ T4072] R13: 00007ff470826038 R14: 00007ff470825fa0 R15: 00007ffcd746fd38 [ 1771.453438][ T4072] [ 1771.912886][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 1771.953027][ T6142] device 0 left promiscuous mode [ 1772.082137][ T4095] netlink: 'syz.1.8514': attribute type 2 has an invalid length. [ 1772.090267][ T4095] netlink: 119 bytes leftover after parsing attributes in process `syz.1.8514'. [ 1772.296043][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 1772.374773][ T4095] netlink: 'syz.1.8514': attribute type 10 has an invalid length. [ 1772.420824][ T4095] netlink: 'syz.1.8514': attribute type 4 has an invalid length. [ 1772.444895][ T4112] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.8516'. [ 1772.465925][ T4095] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8514'. [ 1772.555469][ T4095] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1772.867405][ T4096] mac80211_hwsim hwsim250 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1772.925227][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1772.960019][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.974482][ T4044] device bridge_slave_0 entered promiscuous mode [ 1773.279917][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1773.299569][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.358406][ T4044] device bridge_slave_1 entered promiscuous mode [ 1773.670321][ T4134] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.8520'. [ 1773.686834][ T4134] netlink: 4888 bytes leftover after parsing attributes in process `syz.0.8520'. [ 1773.872841][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1774.160951][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1774.363243][ T4044] team0: Port device team_slave_0 added [ 1774.375991][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 1774.529546][ T4044] team0: Port device team_slave_1 added [ 1774.695476][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1774.735964][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1774.812345][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1774.954274][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1774.963665][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1775.066005][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1775.319062][ T4044] device hsr_slave_0 entered promiscuous mode [ 1775.353094][ T4044] device hsr_slave_1 entered promiscuous mode [ 1775.440856][ T4179] validate_nla: 2 callbacks suppressed [ 1775.440901][ T4179] netlink: 'syz.3.8529': attribute type 7 has an invalid length. [ 1775.652209][ T4193] netlink: 'syz.3.8529': attribute type 27 has an invalid length. [ 1775.661172][ T4192] netlink: 'syz.3.8529': attribute type 27 has an invalid length. [ 1776.446195][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 1776.613607][ T6142] device hsr_slave_0 left promiscuous mode [ 1776.630853][ T6142] device hsr_slave_1 left promiscuous mode [ 1776.676276][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1776.702451][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1776.763430][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1776.776098][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1776.794297][ T6142] device bridge_slave_0 left promiscuous mode [ 1776.813933][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.917150][ T6142] device veth1_macvtap left promiscuous mode [ 1776.936233][ T6142] device veth0_macvtap left promiscuous mode [ 1776.959485][ T6142] device veth1_vlan left promiscuous mode [ 1776.965439][ T6142] device veth0_vlan left promiscuous mode [ 1777.082856][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1777.095309][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1777.104157][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1777.115049][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1777.123179][T26929] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1777.132072][T26929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1777.506307][ T6142] team0 (unregistering): Port device geneve1 removed [ 1778.139202][ T6142] team0 (unregistering): Port device team_slave_1 removed [ 1778.189918][ T6142] team0 (unregistering): Port device team_slave_0 removed [ 1778.238519][ T6142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1778.292558][ T6142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1778.341388][ T6142] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1778.535938][T26929] Bluetooth: hci2: command 0x0419 tx timeout [ 1778.603108][ T6142] bond0 (unregistering): Released all slaves [ 1778.734933][ T4203] device hsr0 entered promiscuous mode [ 1779.168715][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 1781.246000][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 1781.564510][ T4244] netlink: 'syz.3.8538': attribute type 1 has an invalid length. [ 1781.726335][ T4244] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.8538'. [ 1782.680063][ T4044] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1782.803469][ T4044] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1782.869475][ T4044] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1782.917584][ T4225] chnl_net:caif_netlink_parms(): no params data found [ 1782.982233][ T4044] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1783.325860][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 1783.456936][ T4263] netlink: 'syz.3.8540': attribute type 2 has an invalid length. [ 1783.471618][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.505885][ T4225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.536028][ T4225] device bridge_slave_0 entered promiscuous mode [ 1783.599466][ T4263] device .*! entered promiscuous mode [ 1783.809113][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.824208][ T4225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1783.837608][ T4225] device bridge_slave_1 entered promiscuous mode [ 1784.129259][ T6142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.203422][ T4225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1784.229434][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1784.269980][ T4225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1784.340948][ T4285] netlink: 'syz.3.8545': attribute type 28 has an invalid length. [ 1784.476515][ T6142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.604351][ T4225] team0: Port device team_slave_0 added [ 1784.648629][ T4225] team0: Port device team_slave_1 added [ 1784.766818][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1784.775021][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1784.901165][ T6142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.978693][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 1785.124708][ T6142] bond0: (slave netdevsim0): Releasing backup interface [ 1785.171013][ T6142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.256513][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1785.271746][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1785.306193][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1785.313448][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1785.366377][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1785.391500][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1785.406192][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 1785.436723][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1785.443922][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1785.466762][ T4225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1785.473800][ T4225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1785.500807][ T4225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1785.524215][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1785.537389][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1785.560850][ T4225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1785.579012][ T4225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1785.633910][ T4225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1785.645529][T26929] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1785.656132][T26929] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1785.664974][T26929] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1785.675460][T26929] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1785.684576][T26929] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1785.692295][T26929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1785.702407][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1785.720249][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1785.734821][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1785.764252][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1785.882339][ T4225] device hsr_slave_0 entered promiscuous mode [ 1785.927860][ T4225] device hsr_slave_1 entered promiscuous mode [ 1785.934745][ T4225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1785.954327][ T4225] Cannot create hsr debugfs directory [ 1785.998837][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1786.024149][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1786.033993][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1786.060387][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1786.091868][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1786.114036][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1786.148772][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1786.431540][ T6142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.621323][ T6142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.775177][ T6142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.025219][ T6142] bond0: (slave netdevsim0): Releasing backup interface [ 1787.069036][ T6142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.130928][ T4309] chnl_net:caif_netlink_parms(): no params data found [ 1787.376626][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1787.397714][ T2899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1787.405432][ T2899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1787.580356][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1787.615879][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.623994][ T4309] device bridge_slave_0 entered promiscuous mode [ 1787.726281][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 1787.848441][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1787.877602][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1787.916434][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.923693][ T4309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.952892][ T4309] device bridge_slave_1 entered promiscuous mode [ 1788.015476][ T6142] bridge0: port 4(ip6gretap0) entered disabled state [ 1788.304127][ T6142] device ip6gretap0 left promiscuous mode [ 1788.315850][ T6142] bridge0: port 4(ip6gretap0) entered disabled state [ 1788.621888][ T4309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1788.679137][ T4309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1788.713230][ T4044] device veth0_vlan entered promiscuous mode [ 1788.749061][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1788.767092][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1788.786835][ T2899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1788.795028][ T2899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1789.060892][ T4044] device veth1_vlan entered promiscuous mode [ 1789.114011][ T4309] team0: Port device team_slave_0 added [ 1789.274578][ T4309] team0: Port device team_slave_1 added [ 1789.548950][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1789.567633][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1789.615518][ T4044] device veth0_macvtap entered promiscuous mode [ 1789.640698][ T4309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1789.648637][ T4309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1789.675192][ T4309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1789.806408][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 1789.828497][ T4044] device veth1_macvtap entered promiscuous mode [ 1789.836663][ T4309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1789.843914][ T4309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1789.898157][ T4309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1789.935943][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1789.944836][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1790.161011][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1790.178367][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1790.188715][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1790.220931][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1790.250216][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1790.285794][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1790.307427][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1790.423364][ T4309] device hsr_slave_0 entered promiscuous mode [ 1790.430940][ T4309] device hsr_slave_1 entered promiscuous mode [ 1790.445182][ T4309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1790.453689][ T4309] Cannot create hsr debugfs directory [ 1790.470027][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1790.493007][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1790.504727][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1790.516206][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1790.526123][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1790.536778][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1790.546760][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1790.557601][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1790.569483][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1790.683240][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1790.704623][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1790.725437][ T4225] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1790.817132][ T4044] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1790.836294][ T4044] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1790.845133][ T4044] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1790.868329][ T4044] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1790.884064][ T4225] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1790.910295][ T4225] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1790.950782][ T4225] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1791.271509][ T2899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1791.291573][ T2899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1791.394359][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1791.409402][ T2900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1791.447492][ T2900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1791.465136][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1791.589331][ T4225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1791.712320][ T6142] bond0: (slave wlan1): Releasing backup interface [ 1791.756194][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1791.775208][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1791.805442][ T4225] 8021q: adding VLAN 0 to HW filter on device team0 [ 1791.892689][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 1791.900687][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.907858][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.126106][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1792.134999][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1792.174731][ T2900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.181949][ T2900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1792.207104][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1792.226761][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1792.251284][ T2900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.258483][ T2900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1792.389972][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1792.414233][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1792.487004][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1792.650916][ T4416] netlink: 'syz.3.8550': attribute type 11 has an invalid length. [ 1792.671646][ T4416] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8550'. [ 1793.260820][ T4411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1793.975968][T26929] Bluetooth: hci4: command 0x0419 tx timeout [ 1795.424800][ T6142] device bridge_slave_0 left promiscuous mode [ 1795.441728][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.456348][ T6142] device hsr_slave_0 left promiscuous mode [ 1795.468734][ T6142] device hsr_slave_1 left promiscuous mode [ 1795.475222][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1795.483377][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1795.491438][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1795.499202][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1795.507441][ T6142] bridge0: port 2(batadv0) entered disabled state [ 1795.515502][ T6142] bridge0: port 3(hsr0) entered disabled state [ 1795.522884][ T6142] device bridge_slave_0 left promiscuous mode [ 1795.529125][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.558539][ T6142] device veth1_macvtap left promiscuous mode [ 1795.564653][ T6142] device veth0_macvtap left promiscuous mode [ 1795.571856][ T6142] device veth0_vlan left promiscuous mode [ 1795.579103][ T6142] device veth1_macvtap left promiscuous mode [ 1795.585134][ T6142] device veth0_macvtap left promiscuous mode [ 1795.591519][ T6142] device veth1_vlan left promiscuous mode [ 1795.597520][ T6142] device veth0_vlan left promiscuous mode [ 1795.872598][ T6142] team0 (unregistering): Port device geneve1 removed [ 1796.352135][ T6142] team0 (unregistering): Port device team_slave_1 removed [ 1796.441314][ T6142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1796.491157][ T6142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1796.538888][ T6142] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1796.820668][ T6142] bond0 (unregistering): Released all slaves [ 1797.469666][ T6142] team0 (unregistering): Port device team_slave_1 removed [ 1797.516959][ T6142] team0 (unregistering): Port device team_slave_0 removed [ 1797.567130][ T6142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1797.617690][ T6142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1797.672934][ T6142] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1797.970449][ T6142] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1797.979391][ T6142] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 1797.990950][ T6142] bond0 (unregistering): Released all slaves [ 1798.094426][ T4403] mac80211_hwsim hwsim250 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1798.108325][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1798.122583][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1798.140195][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1798.157716][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1798.170107][ T4414] netlink: 'syz.3.8550': attribute type 21 has an invalid length. [ 1798.190086][ T4414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8550'. [ 1798.206636][ T4414] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8550'. [ 1798.255591][ T4409] device syzkaller0 entered promiscuous mode [ 1798.797676][ T4431] sctp: [Deprecated]: syz.2.8556 (pid 4431) Use of int in max_burst socket option deprecated. [ 1798.797676][ T4431] Use struct sctp_assoc_value instead [ 1800.334340][ T4446] netlink: 'syz.3.8560': attribute type 2 has an invalid length. [ 1800.350480][ T4446] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.8560'. [ 1801.858785][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1801.869013][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1801.878050][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1801.900405][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1801.914471][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1801.942813][ T4443] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8560'. [ 1802.045279][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1802.054257][ T2899] wlan1: Trigger new scan to find an IBSS to join [ 1802.141924][ T4451] netlink: 'syz.2.8562': attribute type 3 has an invalid length. [ 1802.142883][ T4309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1802.159746][ T4451] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8562'. [ 1802.248943][ T4309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1802.269508][ T4309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1802.312876][ T4309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1802.590278][ T4309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1802.625647][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1802.639185][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1802.660734][ T4309] 8021q: adding VLAN 0 to HW filter on device team0 [ 1802.691652][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1802.707858][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1802.732904][ T2896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1802.740168][ T2896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1802.796889][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1802.807691][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1802.816901][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1802.836695][ T2896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1802.843943][ T2896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1802.876192][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1802.887061][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1802.939092][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1802.958894][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1802.968235][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1802.978601][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1802.987722][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1802.996680][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1803.009649][ T4309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1803.034994][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1803.060380][ T4225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1803.076113][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1803.085021][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1803.098547][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1803.118743][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1803.136162][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1803.694957][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1803.703210][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1803.748296][ T4309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1803.800341][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1803.809679][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1803.840802][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1803.853512][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1803.876982][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1803.885512][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1803.895571][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1803.904169][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1803.913023][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1803.921782][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1803.930725][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1803.939557][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1803.951222][ T4225] device veth0_vlan entered promiscuous mode [ 1803.962429][ T4309] device veth0_vlan entered promiscuous mode [ 1803.972267][ T4225] device veth1_vlan entered promiscuous mode [ 1803.995152][ T4309] device veth1_vlan entered promiscuous mode [ 1804.034238][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1804.043032][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1804.060192][ T4225] device veth0_macvtap entered promiscuous mode [ 1804.079348][ T4225] device veth1_macvtap entered promiscuous mode [ 1804.104878][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1804.117495][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1804.129039][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1804.138167][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1804.153028][ T4225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1804.165337][ T4225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.175487][ T4225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1804.186561][ T4225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.198086][ T4225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1804.209132][ T4225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.220653][ T4225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1804.231945][ T4225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1804.243631][ T4225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.253786][ T4225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1804.265402][ T4225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.275559][ T4225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1804.295375][ T4225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.308058][ T4225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1804.316474][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1804.326206][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1804.335180][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1804.344852][ T2900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1804.354615][ T4309] device veth0_macvtap entered promiscuous mode [ 1804.373229][ T4225] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.389762][ T4225] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.401432][ T4225] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.412788][ T4225] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.432742][ T4309] device veth1_macvtap entered promiscuous mode [ 1804.499241][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1804.513093][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.524869][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1804.539661][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.550009][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1804.560990][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.571302][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1804.582233][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.593604][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1804.613663][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1804.622686][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1804.631515][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1804.640510][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1804.652180][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1804.663410][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.673675][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1804.684313][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.695616][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1804.706490][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.717809][ T4309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1804.728425][ T4309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.740482][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1804.754253][ T4309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.763088][ T4309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.772715][ T4309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.782321][ T4309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1804.792991][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1804.805588][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1804.818679][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1804.827158][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1804.836787][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1804.875523][ T9067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1804.887091][ T9067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1804.898336][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1804.974396][ T9067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1804.992881][ T9067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1805.024021][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1805.038564][ T6136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1805.048232][ T6136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1805.061297][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1805.096410][ T2899] wlan1: Creating new IBSS network, BSSID 6a:f5:21:f6:a9:25 [ 1805.250200][ T4492] netlink: 'syz.0.8573': attribute type 21 has an invalid length. [ 1805.297990][ T4492] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8573'. [ 1805.751593][ T4507] netlink: 'syz.2.8566': attribute type 10 has an invalid length. [ 1805.961471][ T4507] team0: Device hsr_slave_0 failed to register rx_handler [ 1807.489197][ T4541] device syzkaller0 entered promiscuous mode [ 1808.167106][ T4541] mac80211_hwsim hwsim287 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1808.189635][ T4548] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.8575'. [ 1808.215354][ T4548] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 1808.244688][ T4548] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 1808.480105][ T4557] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.8574'. [ 1811.329488][ T4559] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8577'. [ 1811.353723][ T4559] device hsr_slave_0 left promiscuous mode [ 1811.385896][ T4559] device hsr_slave_1 left promiscuous mode [ 1812.074472][ T2896] wlan1: Trigger new scan to find an IBSS to join [ 1812.098850][ T4579] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8584'. [ 1812.117444][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1812.150840][ T4579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1812.662907][ T4600] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.8591'. [ 1812.772931][ T4601] device syzkaller0 entered promiscuous mode [ 1812.926519][ T4602] mac80211_hwsim hwsim289 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1814.056210][ T2896] wlan1: Trigger new scan to find an IBSS to join [ 1815.008857][ T2900] wlan1: Trigger new scan to find an IBSS to join [ 1815.015585][ T6136] wlan1: Trigger new scan to find an IBSS to join [ 1815.976347][ T2899] wlan1: Creating new IBSS network, BSSID 0a:ec:00:99:17:ad [ 1816.054940][ T4635] netlink: 'syz.2.8596': attribute type 12 has an invalid length. [ 1816.063152][ T4635] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.8596'. [ 1817.106656][ T2898] wlan1: Trigger new scan to find an IBSS to join [ 1817.568239][ T4657] netlink: 'syz.4.8602': attribute type 10 has an invalid length. [ 1817.576648][ T4657] netlink: 'syz.4.8602': attribute type 19 has an invalid length. [ 1817.584565][ T4657] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8602'. [ 1817.595040][ T4643] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8600'. [ 1817.776390][ T4674] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.8607'. [ 1818.054796][ T6142] wlan1: Trigger new scan to find an IBSS to join [ 1818.086943][ T4673] netlink: 'syz.2.8608': attribute type 10 has an invalid length. [ 1818.261114][ T4673] team0: Device nlmon0 is of different type [ 1819.097630][ T9067] wlan1: Trigger new scan to find an IBSS to join [ 1820.047347][ T9067] wlan1: Creating new IBSS network, BSSID 2a:43:16:b4:d2:4e [ 1820.155646][ T4733] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8623'. [ 1820.912600][ T4731] netlink: 'syz.1.8632': attribute type 10 has an invalid length. [ 1820.924036][ T4731] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.8632'. [ 1820.961508][ T4733] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8623'. [ 1821.006101][ T4734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8623'. [ 1821.006351][ T6136] wlan1: Trigger new scan to find an IBSS to join [ 1821.110261][ T4740] tap0: tun_chr_ioctl cmd 35108 [ 1821.461670][ T4748] netlink: 'syz.4.8626': attribute type 10 has an invalid length. [ 1821.527657][ T4748] team0: Device nlmon0 is of different type [ 1821.920054][ T4766] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1822.247370][ T4772] IPv6: Can't replace route, no match found [ 1822.971041][ T4790] netlink: 'syz.0.8641': attribute type 1 has an invalid length. [ 1823.151506][ T4796] netlink: 'syz.3.8642': attribute type 15 has an invalid length. [ 1823.206038][ T4796] netlink: 'syz.3.8642': attribute type 7 has an invalid length. [ 1823.234386][ T4796] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8642'. [ 1824.057612][ T6136] wlan1: Trigger new scan to find an IBSS to join [ 1824.057619][ T2898] wlan1: Trigger new scan to find an IBSS to join [ 1824.494763][ T4808] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1825.035292][ T4825] netlink: 'syz.3.8648': attribute type 10 has an invalid length. [ 1825.043991][ T2896] wlan1: Creating new IBSS network, BSSID 5e:77:2b:cb:73:a5 [ 1825.250419][ T4825] team0: Device nlmon0 is of different type [ 1825.327424][ T4820] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8651'. [ 1825.455869][ T4824] netlink: 'syz.1.8652': attribute type 2 has an invalid length. [ 1825.494186][ T4824] netlink: 'syz.1.8652': attribute type 8 has an invalid length. [ 1825.546006][ T4824] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8652'. [ 1825.616299][ T4832] netlink: 'syz.1.8652': attribute type 2 has an invalid length. [ 1825.702980][ T4832] netlink: 'syz.1.8652': attribute type 8 has an invalid length. [ 1825.727338][ T4832] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8652'. [ 1826.130133][ T4852] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8655'. [ 1827.007203][ T6142] wlan1: Trigger new scan to find an IBSS to join [ 1827.124069][ T4873] netlink: 'syz.3.8662': attribute type 7 has an invalid length. [ 1827.166123][ T4873] netlink: 'syz.3.8662': attribute type 6 has an invalid length. [ 1827.435057][ T4883] netlink: 'syz.0.8666': attribute type 16 has an invalid length. [ 1827.507231][ T4883] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8666'. [ 1827.907616][ T4899] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.8670'. [ 1827.947478][ T4899] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.8670'. [ 1827.961569][ T4899] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.8670'. [ 1828.244718][ T4909] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.8673'. [ 1829.179148][ T4926] netlink: 'syz.3.8678': attribute type 10 has an invalid length. [ 1829.291846][ T4926] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8678'. [ 1830.046093][ T2900] wlan1: Trigger new scan to find an IBSS to join [ 1830.589268][ T4963] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 1831.090623][ T6142] wlan1: Trigger new scan to find an IBSS to join [ 1833.163304][ T2896] wlan1: Creating new IBSS network, BSSID 66:d6:e6:c1:8f:2c [ 1833.611946][ T4983] netlink: 'syz.2.8695': attribute type 39 has an invalid length. [ 1835.656782][ T5015] netlink: 'syz.0.8700': attribute type 10 has an invalid length. [ 1835.914711][ T5015] team0: Device nlmon0 is of different type [ 1837.022522][ T6187] wlan1: Trigger new scan to find an IBSS to join [ 1838.060250][ T2898] wlan1: Creating new IBSS network, BSSID 66:95:20:ed:77:18 [ 1838.566944][ T5067] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8714'. [ 1838.595822][ T5067] netlink: 'syz.4.8714': attribute type 1 has an invalid length. [ 1838.633903][ T5067] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8714'. [ 1838.754004][ T5067] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1839.006909][ T6142] wlan1: Trigger new scan to find an IBSS to join [ 1839.135281][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1839.143468][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1839.925101][ T5112] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8726'. [ 1840.384517][ T5123] netlink: 'syz.0.8730': attribute type 39 has an invalid length. [ 1841.261321][ T5145] IPv6: : Disabled Multicast RS [ 1841.512493][ T5151] device netdevsim0 entered promiscuous mode [ 1841.685652][ T5156] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.8738'. [ 1842.054013][ T2900] wlan1: Trigger new scan to find an IBSS to join [ 1842.800139][ T5182] device bridge_slave_1 left promiscuous mode [ 1842.824367][ T5182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.897859][ T5182] device bridge_slave_0 left promiscuous mode [ 1842.904325][ T5182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.208866][ T5172] netlink: 'syz.2.8744': attribute type 21 has an invalid length. [ 1843.224860][ T5172] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8744'. [ 1843.296805][ T5196] device sit0 entered promiscuous mode [ 1844.083774][ T5222] netlink: 'syz.2.8755': attribute type 39 has an invalid length. [ 1845.086010][ T2899] wlan1: Trigger new scan to find an IBSS to join [ 1845.479122][ T5266] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.8767'. [ 1846.393132][ T5279] netlink: 'syz.4.8771': attribute type 10 has an invalid length. [ 1846.446053][ T5279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1846.579310][ T5279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1846.918787][ T5279] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1846.965876][ T5285] netlink: 'syz.1.8773': attribute type 2 has an invalid length. [ 1847.162993][ T5287] IPv6: : Disabled Multicast RS [ 1847.941887][ T5307] sock: sock_timestamping_bind_phc: sock not bind to device [ 1848.045869][ T2896] wlan1: Trigger new scan to find an IBSS to join [ 1848.056054][ T2899] wlan1: Trigger new scan to find an IBSS to join [ 1848.530364][ T5319] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8784'. [ 1849.338830][ T5340] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8791'. [ 1849.362461][ T5340] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8791'. [ 1849.387340][ T5340] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8791'. [ 1849.407792][ T5340] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8791'. [ 1849.428536][ T5340] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8791'. [ 1849.458941][ T5340] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8791'. [ 1849.500334][ T5340] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8791'. [ 1849.538681][ T5340] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8791'. [ 1850.046041][ T6142] wlan1: Trigger new scan to find an IBSS to join [ 1850.667665][ T5371] __nla_validate_parse: 57 callbacks suppressed [ 1850.667688][ T5371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8796'. [ 1851.065492][ T2904] wlan1: Creating new IBSS network, BSSID 1a:6f:72:90:44:56 [ 1853.086148][ T6142] wlan1: Trigger new scan to find an IBSS to join [ 1853.329614][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.336112][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.360300][ T5385] mac80211_hwsim hwsim250 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1853.614263][ T5403] netlink: 'syz.2.8806': attribute type 3 has an invalid length. [ 1853.663516][ T5403] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8806'. [ 1854.037428][ T2904] wlan1: Creating new IBSS network, BSSID 4a:39:3c:10:81:40 [ 1855.467528][ T5438] netlink: 'syz.3.8817': attribute type 40 has an invalid length. [ 1855.634929][ T5442] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8819'. [ 1857.086066][ T2904] wlan1: Trigger new scan to find an IBSS to join [ 1857.411694][ T5479] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8831'. [ 1857.527387][ T5485] netlink: 'syz.0.8832': attribute type 3 has an invalid length. [ 1857.539765][ T5479] netlink: 'syz.3.8831': attribute type 10 has an invalid length. [ 1857.552735][ T5485] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8832'. [ 1857.583055][ T5487] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8834'. [ 1857.607719][ T5479] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8831'. [ 1857.770354][ T5481] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.8833'. [ 1858.049511][ T5493] netlink: 'syz.4.8835': attribute type 10 has an invalid length. [ 1858.131572][ T5493] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1858.415359][ T5508] netlink: 'syz.2.8840': attribute type 1 has an invalid length. [ 1858.436072][ T5508] netlink: 'syz.2.8840': attribute type 1 has an invalid length. [ 1858.474832][ T5508] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.8840'. [ 1860.484041][ T5564] netlink: 'syz.4.8855': attribute type 16 has an invalid length. [ 1860.514337][ T5564] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8855'. [ 1860.904720][ T5573] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8858'. [ 1860.952923][ T5573] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8858'. [ 1861.000335][ T5573] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8858'. [ 1861.081159][ T5577] netlink: 'syz.1.8858': attribute type 10 has an invalid length. [ 1861.103052][ T5573] netlink: 'syz.1.8858': attribute type 12 has an invalid length. [ 1861.467315][ T5585] netlink: 'syz.1.8862': attribute type 12 has an invalid length. [ 1861.540090][ T5587] netlink: 'syz.1.8862': attribute type 12 has an invalid length. [ 1861.790813][ T5593] netlink: 'syz.3.8861': attribute type 2 has an invalid length. [ 1861.849893][ T5593] netlink: 'syz.3.8861': attribute type 8 has an invalid length. [ 1862.045978][ T2893] wlan1: Trigger new scan to find an IBSS to join [ 1864.176984][ T5606] netlink: 'syz.1.8867': attribute type 21 has an invalid length. [ 1864.185309][ T5606] netlink: 'syz.1.8867': attribute type 20 has an invalid length. [ 1866.056040][ T2891] wlan1: Trigger new scan to find an IBSS to join [ 1867.047329][ T5659] wlan1: Creating new IBSS network, BSSID 52:c7:65:75:20:dd [ 1868.811068][ T5705] netlink: 'syz.0.8896': attribute type 27 has an invalid length. [ 1868.828599][ T5700] __nla_validate_parse: 4 callbacks suppressed [ 1868.828719][ T5700] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8894'. [ 1868.840872][ T5705] netlink: 'syz.0.8896': attribute type 3 has an invalid length. [ 1868.962824][ T5705] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8896'. [ 1869.007103][ T5662] wlan1: Trigger new scan to find an IBSS to join [ 1870.575513][ T5729] delete_channel: no stack [ 1870.890118][ T5744] : port 1(ip6gretap0) entered blocking state [ 1871.024600][ T5744] : port 1(ip6gretap0) entered disabled state [ 1871.064925][ T5744] device ip6gretap0 entered promiscuous mode [ 1871.102926][ T5749] netlink: 'syz.0.8910': attribute type 29 has an invalid length. [ 1871.720098][ T5749] netlink: 'syz.0.8910': attribute type 29 has an invalid length. [ 1871.739759][ T5754] netlink: 'syz.2.8909': attribute type 25 has an invalid length. [ 1871.750790][ T5754] netlink: 'syz.2.8909': attribute type 29 has an invalid length. [ 1871.800183][ T5753] netlink: 'syz.0.8910': attribute type 29 has an invalid length. [ 1871.945862][ T5756] netlink: 'syz.3.8911': attribute type 3 has an invalid length. [ 1871.987693][ T5756] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8911'. [ 1872.913974][ T5770] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.8915'. [ 1874.056270][ T5655] wlan1: Trigger new scan to find an IBSS to join [ 1874.741406][ T5807] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8924'. [ 1874.769387][ T5807] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8924'. [ 1874.854110][ T5809] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8924'. [ 1874.925078][ T5810] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8924'. [ 1874.987319][ T5810] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8924'. [ 1875.007163][ T5810] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8924'. [ 1875.031383][ T5810] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8924'. [ 1875.092212][ T5810] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8924'. [ 1875.145106][ T5810] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8924'. [ 1875.161934][ T5810] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8924'. [ 1875.362978][ T5818] netlink: 'syz.2.8925': attribute type 10 has an invalid length. [ 1875.397447][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 1875.429353][ T5818] bond0: (slave team0): Enslaving as an active interface with an up link [ 1875.721362][ T5825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1875.774669][ T5831] netlink: 'syz.3.8929': attribute type 29 has an invalid length. [ 1875.821711][ T5825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1875.855085][ T5825] bond0 (unregistering): (slave team0): Releasing backup interface [ 1875.905619][ T5825] bond0 (unregistering): Released all slaves [ 1875.987148][ T5831] netlink: 'syz.3.8929': attribute type 29 has an invalid length. [ 1876.065158][ T5831] netlink: 'syz.3.8929': attribute type 9 has an invalid length. [ 1876.231243][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1876.272663][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1876.329587][ T5840] bond0 (unregistering): Released all slaves [ 1876.345504][ T5830] netlink: 'syz.3.8929': attribute type 29 has an invalid length. [ 1876.426643][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.434231][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.506705][ T5834] netlink: 'syz.3.8929': attribute type 29 has an invalid length. [ 1880.115988][ T5893] __nla_validate_parse: 16 callbacks suppressed [ 1880.116010][ T5893] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8949'. [ 1880.218065][ T5893] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 1880.262550][ T5893] CPU: 0 PID: 5893 Comm: syz.3.8949 Not tainted syzkaller #0 [ 1880.270011][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1880.280090][ T5893] Call Trace: [ 1880.283384][ T5893] [ 1880.286332][ T5893] dump_stack_lvl+0x188/0x24e [ 1880.291036][ T5893] ? show_regs_print_info+0x12/0x12 [ 1880.296253][ T5893] ? load_image+0x410/0x410 [ 1880.300825][ T5893] sysfs_warn_dup+0x8a/0xa0 [ 1880.305353][ T5893] sysfs_do_create_link_sd+0xc0/0x110 [ 1880.310751][ T5893] device_add+0x83b/0x1050 [ 1880.315202][ T5893] wiphy_register+0x1d8b/0x2aa0 [ 1880.320101][ T5893] ? cfg80211_event_work+0x40/0x40 [ 1880.325226][ T5893] ? minstrel_ht_alloc+0x894/0xa20 [ 1880.330368][ T5893] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1880.336460][ T5893] ieee80211_register_hw+0x2d48/0x39f0 [ 1880.341953][ T5893] ? ieee80211_register_hw+0xf41/0x39f0 [ 1880.347513][ T5893] ? ieee80211_register_hw+0xf41/0x39f0 [ 1880.353084][ T5893] ? ieee80211_tasklet_handler+0x20/0x20 [ 1880.358904][ T5893] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1880.364838][ T5893] ? __debug_object_init+0xed/0x440 [ 1880.370144][ T5893] ? memset+0x1e/0x40 [ 1880.374142][ T5893] ? __hrtimer_init+0x189/0x270 [ 1880.379016][ T5893] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1880.384857][ T5893] ? memcpy+0x3c/0x60 [ 1880.388871][ T5893] hwsim_new_radio_nl+0xab7/0xc90 [ 1880.393936][ T5893] genl_family_rcv_msg_doit+0x22f/0x350 [ 1880.399584][ T5893] ? end_current_label_crit_section+0x170/0x170 [ 1880.405851][ T5893] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1880.411769][ T5893] ? bpf_lsm_capable+0x5/0x10 [ 1880.416465][ T5893] ? security_capable+0x85/0xb0 [ 1880.421346][ T5893] genl_rcv_msg+0x601/0x790 [ 1880.425882][ T5893] ? genl_bind+0x360/0x360 [ 1880.430400][ T5893] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1880.436768][ T5893] netlink_rcv_skb+0x1ef/0x440 [ 1880.441553][ T5893] ? genl_bind+0x360/0x360 [ 1880.445993][ T5893] ? netlink_ack+0x1160/0x1160 [ 1880.450786][ T5893] ? down_read+0x1a8/0x2d0 [ 1880.455228][ T5893] genl_rcv+0x24/0x40 [ 1880.459231][ T5893] netlink_unicast+0x7ad/0x920 [ 1880.464024][ T5893] netlink_sendmsg+0x8ad/0xbd0 [ 1880.468813][ T5893] ? netlink_getsockopt+0x550/0x550 [ 1880.474027][ T5893] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1880.479595][ T5893] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1880.484888][ T5893] ? security_socket_sendmsg+0x7c/0xa0 [ 1880.490362][ T5893] ? netlink_getsockopt+0x550/0x550 [ 1880.495578][ T5893] ____sys_sendmsg+0x5ed/0x9a0 [ 1880.500368][ T5893] ? __sys_sendmsg_sock+0x30/0x30 [ 1880.505403][ T5893] ? __import_iovec+0x306/0x510 [ 1880.510286][ T5893] ? import_iovec+0x6f/0xa0 [ 1880.514812][ T5893] ___sys_sendmsg+0x2a2/0x360 [ 1880.519599][ T5893] ? __sys_sendmsg+0x2a0/0x2a0 [ 1880.524450][ T5893] __se_sys_sendmsg+0x1c3/0x2b0 [ 1880.529320][ T5893] ? __x64_sys_sendmsg+0x80/0x80 [ 1880.534297][ T5893] ? lockdep_hardirqs_on+0x94/0x140 [ 1880.539523][ T5893] do_syscall_64+0x4c/0xa0 [ 1880.544040][ T5893] ? clear_bhb_loop+0x60/0xb0 [ 1880.548732][ T5893] ? clear_bhb_loop+0x60/0xb0 [ 1880.553424][ T5893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1880.559427][ T5893] RIP: 0033:0x7ff47059e159 [ 1880.563873][ T5893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1880.584099][ T5893] RSP: 002b:00007ff4713ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1880.592621][ T5893] RAX: ffffffffffffffda RBX: 00007ff470825fa0 RCX: 00007ff47059e159 [ 1880.600603][ T5893] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1880.608589][ T5893] RBP: 00007ff47063506b R08: 0000000000000000 R09: 0000000000000000 [ 1880.616850][ T5893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1880.624854][ T5893] R13: 00007ff470826038 R14: 00007ff470825fa0 R15: 00007ffcd746fd38 [ 1880.632881][ T5893] [ 1880.952304][ T5904] netlink: 49920 bytes leftover after parsing attributes in process `syz.4.8951'. [ 1881.350230][ T5916] netlink: 'syz.0.8953': attribute type 10 has an invalid length. [ 1881.372145][ T5916] netlink: 55 bytes leftover after parsing attributes in process `syz.0.8953'. [ 1881.536237][ T5926] delete_channel: no stack [ 1881.541801][ T5926] delete_channel: no stack [ 1882.813441][ T5952] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8967'. [ 1882.918506][ T5955] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8965'. [ 1882.949556][ T5952] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8967'. [ 1882.979581][ T5955] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8965'. [ 1883.046237][ T5957] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8967'. [ 1883.077323][ T5955] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8965'. [ 1883.088129][ T2896] wlan1: Trigger new scan to find an IBSS to join [ 1883.136016][ T5959] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8967'. [ 1883.658755][T26929] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1883.668907][T26929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1883.678267][T26929] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1883.693369][T26929] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1883.705165][T26929] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1883.713688][T26929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1883.978587][ T5976] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1883.984659][ T5976] syzkaller1: linktype set to 773 [ 1884.016428][ T5976] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1884.042020][ T2896] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1884.094950][ T5976] syzkaller1: linktype set to 773 [ 1884.129063][ T5976] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1884.135615][ T5976] syzkaller1: linktype set to 773 [ 1884.175153][ T5976] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1884.194205][ T5976] syzkaller1: linktype set to 773 [ 1884.256426][ T5976] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1884.276079][ T5976] syzkaller1: linktype set to 773 [ 1884.344132][ T5976] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1884.358735][ T5976] syzkaller1: linktype set to 773 [ 1884.558451][ T5662] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1884.665238][ T5976] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1884.684851][ T5976] syzkaller1: linktype set to 773 [ 1884.827436][ T5662] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.163871][ T5662] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.332095][ T5662] bond0: (slave netdevsim0): Releasing backup interface [ 1885.368743][ T5662] device netdevsim0 left promiscuous mode [ 1885.433300][ T5662] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.805936][T26929] Bluetooth: hci3: command 0x0409 tx timeout [ 1885.989104][ T5662] device .*! left promiscuous mode [ 1886.194408][ T5966] chnl_net:caif_netlink_parms(): no params data found [ 1886.470783][ T5662] tipc: Left network mode [ 1887.206259][ T6022] netlink: 'syz.4.8982': attribute type 7 has an invalid length. [ 1887.234322][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1887.247751][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1887.280978][ T5966] device bridge_slave_0 entered promiscuous mode [ 1887.491381][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1887.525936][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.553208][ T5966] device bridge_slave_1 entered promiscuous mode [ 1887.887053][T26929] Bluetooth: hci3: command 0x041b tx timeout [ 1887.941586][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1888.081947][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1888.974403][ T6034] netlink: 'syz.4.8986': attribute type 2 has an invalid length. [ 1888.985836][ T6034] __nla_validate_parse: 30 callbacks suppressed [ 1888.985856][ T6034] netlink: 119 bytes leftover after parsing attributes in process `syz.4.8986'. [ 1889.236478][ T5966] team0: Port device team_slave_0 added [ 1889.283920][ T5966] team0: Port device team_slave_1 added [ 1889.374678][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1889.444030][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1889.514225][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1889.750490][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1889.761106][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1889.836135][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1889.966232][T26929] Bluetooth: hci3: command 0x040f tx timeout [ 1890.059738][ T5658] wlan1: Trigger new scan to find an IBSS to join [ 1890.504877][ T5966] device hsr_slave_0 entered promiscuous mode [ 1890.534191][ T5966] device hsr_slave_1 entered promiscuous mode [ 1890.815861][ T6090] netlink: 'syz.1.8998': attribute type 3 has an invalid length. [ 1890.882279][ T6090] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8998'. [ 1891.733338][ T6106] netlink: 'syz.0.9004': attribute type 4 has an invalid length. [ 1892.046014][T26929] Bluetooth: hci3: command 0x0419 tx timeout [ 1892.564361][ T5662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1892.608597][ T5662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1892.625281][ T5662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1892.663165][ T5662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1892.680095][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.711451][ T5662] device bridge_slave_0 left promiscuous mode [ 1892.732365][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.804047][ T5662] device veth1_macvtap left promiscuous mode [ 1892.827734][ T5662] device veth0_macvtap left promiscuous mode [ 1893.134075][ T5662] team0 (unregistering): Port device geneve1 removed [ 1894.046467][ T6142] wlan1: Trigger new scan to find an IBSS to join [ 1894.068140][ T5662] team0 (unregistering): Port device team_slave_1 removed [ 1894.172057][ T5662] team0 (unregistering): Port device team_slave_0 removed [ 1894.267233][ T5662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1894.278522][ T5662] device bond_slave_1 left promiscuous mode [ 1894.839646][ T5662] team0 (unregistering): Port device bridge0 removed [ 1894.904095][ T5662] bond0 (unregistering): Released all slaves [ 1895.087001][ T5658] wlan1: Trigger new scan to find an IBSS to join [ 1895.145479][ T6164] tun0: tun_chr_ioctl cmd 1074812117 [ 1895.168238][ T6180] netlink: 'syz.2.9016': attribute type 21 has an invalid length. [ 1895.464334][ T5966] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1895.559486][ T5966] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1895.601696][ T6204] netlink: 'syz.1.9022': attribute type 13 has an invalid length. [ 1895.621679][ T5966] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1895.748449][ T6212] netlink: 'syz.1.9022': attribute type 13 has an invalid length. [ 1895.809094][ T5966] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1895.833715][ T6201] bridge0: port 3(batadv0) entered blocking state [ 1895.844815][ T6201] bridge0: port 3(batadv0) entered disabled state [ 1895.897204][ T6201] device batadv0 entered promiscuous mode [ 1895.979821][ T6142] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1895.989610][ T6142] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1896.217874][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1896.277899][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1896.300673][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1896.351784][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 1896.365994][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 1896.484366][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1896.541039][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1896.581884][ T2896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1896.589280][ T2896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1896.664187][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1896.703327][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1896.746874][ T6214] delete_channel: no stack [ 1896.759943][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1896.808646][ T2896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1896.816001][ T2896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1896.886462][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1896.927982][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1896.935605][ T6214] delete_channel: no stack [ 1896.956384][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1896.988767][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1897.008633][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1897.052428][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1897.086665][ T5658] wlan1: Trigger new scan to find an IBSS to join [ 1897.100355][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1897.119096][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1897.176354][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1897.213420][ T5966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1897.255313][ T5966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1897.279655][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1897.297572][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1897.351336][ T6255] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9029'. [ 1897.508724][ T6253] netlink: 'syz.2.9030': attribute type 9 has an invalid length. [ 1897.568178][ T6253] netlink: 7679 bytes leftover after parsing attributes in process `syz.2.9030'. [ 1898.102463][ T2899] wlan1: Creating new IBSS network, BSSID 1e:f7:2c:c8:2f:c1 [ 1898.163546][ T6267] device sit0 entered promiscuous mode [ 1898.755159][ T6280] syzkaller1: tun_chr_ioctl cmd 21731 [ 1899.163920][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1899.185225][ T2896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1899.216229][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1899.322489][ T6301] syzkaller: tun_chr_ioctl cmd 1074025677 [ 1899.381939][ T6301] syzkaller: linktype set to 825 [ 1899.435912][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1899.466590][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1899.542085][ T6296] netlink: 'syz.0.9037': attribute type 19 has an invalid length. [ 1899.606218][ T6296] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.9037'. [ 1899.740181][ T5966] device veth0_vlan entered promiscuous mode [ 1899.759406][ T6306] netlink: 'syz.0.9037': attribute type 25 has an invalid length. [ 1899.784331][ T6306] netlink: 'syz.0.9037': attribute type 25 has an invalid length. [ 1899.833114][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1899.858658][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1899.942453][ T5966] device veth1_vlan entered promiscuous mode [ 1899.971632][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1900.000131][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1900.046117][ T2899] wlan1: Trigger new scan to find an IBSS to join [ 1900.097053][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1900.135161][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1900.241188][ T5966] device veth0_macvtap entered promiscuous mode [ 1901.403907][ T5966] device veth1_macvtap entered promiscuous mode [ 1901.423061][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1901.455573][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1901.486299][T26929] Bluetooth: hci0: command 0x0406 tx timeout [ 1901.513187][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1901.524873][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.563337][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1901.614967][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.666383][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1901.750335][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.793535][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1901.842273][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1901.876750][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1901.909781][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1901.935611][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.990019][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1902.035131][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.068266][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1902.127455][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.173413][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1902.230871][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.278172][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1904.046359][ T5655] wlan1: Trigger new scan to find an IBSS to join [ 1904.603411][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1904.633963][ T9067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1904.741783][ T5966] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.754513][ T5966] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.803955][ T5966] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.817250][ T5966] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.131783][ T5655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1905.171232][ T5655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1905.257002][ T6384] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9053'. [ 1905.317961][ T5658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1905.510078][ T2899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1905.547070][ T2899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1905.571406][ T2899] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1905.916984][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1906.035190][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1906.080274][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1906.120555][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1906.176920][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1906.236322][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1906.296768][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1906.338193][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1906.377400][ T6397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1907.006093][ T5658] wlan1: Trigger new scan to find an IBSS to join [ 1907.931525][ T6444] netlink: 'syz.4.9065': attribute type 2 has an invalid length. [ 1908.031805][ T6441] bond0: (slave bond_slave_0): Releasing backup interface [ 1908.897165][ T6458] netlink: 'syz.2.9069': attribute type 4 has an invalid length. [ 1909.086223][ T5655] wlan1: Trigger new scan to find an IBSS to join [ 1910.046680][ T9067] wlan1: Trigger new scan to find an IBSS to join [ 1910.180446][ T6441] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1910.196676][ T6448] netlink: 'syz.1.9067': attribute type 10 has an invalid length. [ 1910.204519][ T6448] netlink: 'syz.1.9067': attribute type 19 has an invalid length. [ 1910.256541][ T6457] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1910.284650][ T6457] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1910.315904][ T6457] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1910.465617][ T6465] device pim6reg1 entered promiscuous mode [ 1911.540524][ T5655] wlan1: Creating new IBSS network, BSSID 8a:01:66:dc:f6:65 [ 1911.675550][ T6480] device wlan1 entered promiscuous mode [ 1911.682945][ T6479] __nla_validate_parse: 62 callbacks suppressed [ 1911.682984][ T6479] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9075'. [ 1911.712005][ T6479] device hsr_slave_0 left promiscuous mode [ 1911.724146][ T6479] device hsr_slave_1 left promiscuous mode [ 1911.736188][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 1911.906775][ T6491] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.9076'. [ 1911.932463][ T6491] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1911.972196][ T6493] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.9077'. [ 1912.013739][ T6486] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1912.026142][ T6486] syzkaller1: linktype set to 773 [ 1912.034952][ T6487] Q6\bY4: renamed from lo [ 1913.957796][ T6540] netlink: 25467 bytes leftover after parsing attributes in process `syz.3.9087'. [ 1913.960100][ T6534] netlink: 17861 bytes leftover after parsing attributes in process `syz.4.9086'. [ 1914.047743][ T5655] wlan1: Trigger new scan to find an IBSS to join [ 1914.771566][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.778091][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.116016][ T2899] wlan1: Trigger new scan to find an IBSS to join [ 1915.146058][ T9067] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1915.298471][ T6579] netlink: 'syz.2.9099': attribute type 10 has an invalid length. [ 1915.677647][ T6579] team0: Device veth0_vlan failed to register rx_handler [ 1915.964211][ T6585] netlink: 91092 bytes leftover after parsing attributes in process `syz.3.9100'. [ 1916.067904][ T6585] netlink: 91092 bytes leftover after parsing attributes in process `syz.3.9100'. [ 1916.132114][ T6585] netlink: 91092 bytes leftover after parsing attributes in process `syz.3.9100'. [ 1916.153935][ T6585] netlink: 91092 bytes leftover after parsing attributes in process `syz.3.9100'. [ 1916.220493][ T6585] netlink: 91092 bytes leftover after parsing attributes in process `syz.3.9100'. [ 1917.088618][ T5655] wlan1: Trigger new scan to find an IBSS to join [ 1917.104945][ T6610] netlink: 'syz.2.9107': attribute type 2 has an invalid length. [ 1917.130603][ T6610] netlink: 'syz.2.9107': attribute type 3 has an invalid length. [ 1917.167182][ T6610] __nla_validate_parse: 51 callbacks suppressed [ 1917.167201][ T6610] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9107'. [ 1917.717896][ T6627] netlink: 'syz.3.9112': attribute type 3 has an invalid length. [ 1917.806924][ T6627] netlink: 'syz.3.9112': attribute type 1 has an invalid length. [ 1917.844099][ T6627] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.9112'. [ 1920.055755][ T9067] wlan1: Trigger new scan to find an IBSS to join [ 1921.762576][ T2899] wlan1: Creating new IBSS network, BSSID 42:6c:ce:71:02:05 [ 1921.773830][ T6142] wlan1: Creating new IBSS network, BSSID 0a:63:4d:29:3d:9c [ 1925.087384][ T5658] wlan1: Trigger new scan to find an IBSS to join [ 1926.499519][ T6717] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9133'. [ 1926.909692][ T6731] netlink: 'syz.2.9138': attribute type 5 has an invalid length. [ 1927.015844][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9138'. [ 1929.987304][ T6756] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.9143'. [ 1930.077039][ T5662] wlan1: Trigger new scan to find an IBSS to join [ 1930.241499][ T6760] device pim6reg1 entered promiscuous mode [ 1931.168255][ T2899] wlan1: Creating new IBSS network, BSSID 7e:2f:d9:a8:02:fe [ 1931.931336][ T6794] netlink: 'syz.2.9154': attribute type 2 has an invalid length. [ 1932.044730][ T6794] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.9154'. [ 1933.130115][ T5662] wlan1: Trigger new scan to find an IBSS to join [ 1935.003502][ T6832] netlink: 'syz.4.9162': attribute type 9 has an invalid length. [ 1935.144041][ T6832] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9162'. [ 1935.675478][ T6846] netlink: 3529 bytes leftover after parsing attributes in process `syz.2.9165'. [ 1935.775788][ T6846] netlink: 52477 bytes leftover after parsing attributes in process `syz.2.9165'. [ 1935.785071][ T6846] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.9165'. [ 1937.099373][ T2899] wlan1: Trigger new scan to find an IBSS to join [ 1937.106101][ T9067] wlan1: Trigger new scan to find an IBSS to join [ 1938.134016][ T5662] wlan1: Creating new IBSS network, BSSID 96:22:87:8d:3a:c6 [ 1940.666437][ T6891] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9177'. [ 1940.959850][ T6897] netlink: 'syz.2.9179': attribute type 21 has an invalid length. [ 1940.990843][ T6897] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9179'. [ 1942.056814][ T5662] wlan1: Trigger new scan to find an IBSS to join [ 1943.110171][ T2899] wlan1: Creating new IBSS network, BSSID 3e:f9:37:25:83:b2 [ 1943.624680][ T6968] netlink: 'syz.2.9194': attribute type 10 has an invalid length. [ 1944.062189][ T5655] wlan1: Trigger new scan to find an IBSS to join [ 1944.923531][ T6968] device bridge_slave_1 left promiscuous mode [ 1945.056346][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1945.715891][ T6975] netlink: 14577 bytes leftover after parsing attributes in process `syz.2.9194'. [ 1945.757734][ T6969] netlink: 14577 bytes leftover after parsing attributes in process `syz.2.9194'. [ 1945.838867][ T6982] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.9195'. [ 1945.942173][ T6984] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.9195'. [ 1946.559322][ T7007] netlink: 'syz.0.9202': attribute type 2 has an invalid length. [ 1946.646007][ T7007] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9202'. [ 1946.809105][ T7012] netlink: 'syz.4.9204': attribute type 10 has an invalid length. [ 1947.047402][ T7012] team0: Device hsr_slave_0 failed to register rx_handler [ 1947.329737][ T7022] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.9206'. [ 1947.687621][ T7044] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.9210'. [ 1949.304394][ T7078] netlink: 'syz.3.9219': attribute type 21 has an invalid length. [ 1949.346143][ T7078] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9219'. [ 1949.549396][ T7090] netlink: 'syz.2.9216': attribute type 1 has an invalid length. [ 1949.625969][ T7092] netlink: 'syz.0.9221': attribute type 1 has an invalid length. [ 1949.675854][ T7090] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.9216'. [ 1949.685456][ T7094] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9222'. [ 1949.708226][ T7092] netlink: 'syz.0.9221': attribute type 4 has an invalid length. [ 1950.046834][ T2772] wlan1: Trigger new scan to find an IBSS to join [ 1951.023430][ T2772] wlan1: Trigger new scan to find an IBSS to join [ 1951.341069][ T7109] device hsr0 entered promiscuous mode [ 1954.873839][ T7141] netlink: 'syz.1.9234': attribute type 21 has an invalid length. [ 1954.946686][ T7141] __nla_validate_parse: 1 callbacks suppressed [ 1954.946725][ T7141] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9234'. [ 1955.005974][ T5656] wlan1: Trigger new scan to find an IBSS to join [ 1955.006091][ T2898] wlan1: Trigger new scan to find an IBSS to join [ 1955.292264][ T7155] netlink: 'syz.4.9238': attribute type 29 has an invalid length. [ 1955.316144][ T7155] netlink: 'syz.4.9238': attribute type 3 has an invalid length. [ 1955.361644][ T7155] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9238'. [ 1955.428790][ T7165] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9242'. [ 1956.254188][ T2898] wlan1: Creating new IBSS network, BSSID f2:85:9a:60:52:33 [ 1956.262462][ T7066] wlan1: Creating new IBSS network, BSSID 4a:d6:f2:71:5a:38 [ 1956.270359][ T7165] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9242'. [ 1956.310400][ T7169] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9242'. [ 1957.618193][ T7206] netlink: 'syz.0.9255': attribute type 3 has an invalid length. [ 1957.852991][ T7206] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.9255'. [ 1958.150728][ T7209] netlink: 'syz.0.9255': attribute type 3 has an invalid length. [ 1958.290227][ T7213] netlink: 'syz.0.9255': attribute type 3 has an invalid length. [ 1958.355919][ T7209] netlink: 'syz.0.9255': attribute type 1 has an invalid length. [ 1958.363765][ T7209] netlink: 149016 bytes leftover after parsing attributes in process `syz.0.9255'. [ 1958.640208][ T7213] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.9255'. [ 1959.076961][ T7222] netlink: 763 bytes leftover after parsing attributes in process `syz.1.9252'. [ 1961.142204][ T7291] netlink: 'syz.4.9277': attribute type 3 has an invalid length. [ 1961.221552][ T7291] netlink: 163968 bytes leftover after parsing attributes in process `syz.4.9277'. [ 1962.641290][ T7318] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9285'. [ 1962.656272][ T7318] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9285'. [ 1962.672524][ T7316] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9285'. [ 1962.704633][ T7318] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9285'. [ 1962.722733][ T7318] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9285'. [ 1962.745838][ T7316] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9285'. [ 1962.785112][ T7318] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9285'. [ 1962.810558][ T7318] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9285'. [ 1962.832864][ T7316] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9285'. [ 1964.047694][ T7066] wlan1: Trigger new scan to find an IBSS to join [ 1964.336503][ T7377] netlink: 'syz.0.9303': attribute type 11 has an invalid length. [ 1964.351281][ T7379] netlink: zone id is out of range [ 1964.364822][ T7379] netlink: del zone limit has 4 unknown bytes [ 1967.006043][ T7066] wlan1: Trigger new scan to find an IBSS to join [ 1967.704218][ T7463] netlink: 'syz.3.9327': attribute type 29 has an invalid length. [ 1967.721798][ T7463] netlink: 'syz.3.9327': attribute type 3 has an invalid length. [ 1967.786624][ T7463] __nla_validate_parse: 5 callbacks suppressed [ 1967.786643][ T7463] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9327'. [ 1968.525523][ T7482] netlink: 'syz.2.9334': attribute type 10 has an invalid length. [ 1968.904400][ T7492] bridge0: port 3(batadv0) entered blocking state [ 1968.911403][ T4286] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1968.918900][ T7492] bridge0: port 3(batadv0) entered disabled state [ 1968.920086][ T7492] device batadv0 entered promiscuous mode [ 1969.020455][ T7492] bridge0: port 3(batadv0) entered blocking state [ 1969.027395][ T7492] bridge0: port 3(batadv0) entered forwarding state [ 1969.129813][ T2893] wlan1: Trigger new scan to find an IBSS to join [ 1969.427162][ T6123] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1969.436536][ T6123] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1969.564681][ T7506] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9340'. [ 1969.978627][ T7521] netlink: 'syz.0.9344': attribute type 29 has an invalid length. [ 1970.001027][ T7521] netlink: 'syz.0.9344': attribute type 3 has an invalid length. [ 1970.026349][ T7521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9344'. [ 1971.016361][ T4286] Bluetooth: hci0: command 0x2016 tx timeout [ 1971.279222][ T7548] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9353'. [ 1971.310261][ T7553] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1971.321546][ T7553] syzkaller1: linktype set to 0 [ 1971.930119][ T7556] netlink: 'syz.0.9365': attribute type 1 has an invalid length. [ 1971.960173][ T7556] netlink: 'syz.0.9365': attribute type 4 has an invalid length. [ 1971.983106][ T7556] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.9365'. [ 1972.025313][ T7565] : port 1(team0) entered blocking state [ 1972.060436][ T2898] wlan1: Trigger new scan to find an IBSS to join [ 1972.081873][ T7565] : port 1(team0) entered disabled state [ 1972.132611][ T7565] device team0 entered promiscuous mode [ 1972.197297][ T7565] device team_slave_0 entered promiscuous mode [ 1972.248160][ T7565] device team_slave_1 entered promiscuous mode [ 1972.315941][ T7566] device team0 left promiscuous mode [ 1972.382496][ T7566] device team_slave_0 left promiscuous mode [ 1972.389168][ T7566] device team_slave_1 left promiscuous mode [ 1972.407215][ T7566] : port 1(team0) entered disabled state [ 1972.477319][ T7576] netlink: 'syz.4.9360': attribute type 33 has an invalid length. [ 1972.496028][ T7576] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9360'. [ 1972.773257][ T7582] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9363'. [ 1972.941352][ T7582] openvswitch: netlink: Message has 6 unknown bytes. [ 1973.386697][ T2893] wlan1: Trigger new scan to find an IBSS to join [ 1973.789117][ T7596] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9367'. [ 1973.823931][ T7605] netlink: 'syz.3.9370': attribute type 39 has an invalid length. [ 1974.141502][ T7605] device hsr_slave_1 left promiscuous mode [ 1974.290154][ T2899] wlan1: Creating new IBSS network, BSSID 96:cf:2c:af:78:44 [ 1974.497640][ T7616] netlink: 'syz.4.9372': attribute type 2 has an invalid length. [ 1974.539109][ T7616] netlink: 'syz.4.9372': attribute type 4 has an invalid length. [ 1974.567071][ T7616] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9372'. [ 1976.048396][ T2899] wlan1: Trigger new scan to find an IBSS to join [ 1976.212088][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.218658][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.739156][ T7659] netlink: 'syz.1.9387': attribute type 1 has an invalid length. [ 1977.243238][ T7677] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.9394'. [ 1977.349459][ T7679] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9396'. [ 1977.387758][ T7679] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1977.476637][ T7679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1979.005915][ T2893] wlan1: Trigger new scan to find an IBSS to join [ 1979.902889][ T6123] wlan1: Creating new IBSS network, BSSID d2:1c:89:dd:b7:c8 [ 1980.790015][ T7722] netlink: 'syz.1.9404': attribute type 10 has an invalid length. [ 1981.539169][ T7736] netlink: 'syz.4.9411': attribute type 21 has an invalid length. [ 1981.586742][ T7736] IPv6: NLM_F_CREATE should be specified when creating new route [ 1981.638091][ T7736] IPv6: Can't replace route, no match found [ 1981.685973][ T7739] netlink: 'syz.4.9411': attribute type 1 has an invalid length. [ 1981.694253][ T7739] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.9411'. [ 1981.913023][ T7736] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9411'. [ 1982.078404][ T6123] wlan1: Trigger new scan to find an IBSS to join [ 1983.368943][ T7761] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1983.374807][ T7761] pim6reg0: linktype set to 780 [ 1983.785621][ T7775] netlink: 'syz.4.9420': attribute type 39 has an invalid length. [ 1983.995361][ T7775] device hsr_slave_1 left promiscuous mode [ 1985.099253][ T2893] wlan1: Trigger new scan to find an IBSS to join [ 1986.058512][ T2893] wlan1: Trigger new scan to find an IBSS to join [ 1987.035455][ T7869] netlink: 'syz.2.9445': attribute type 29 has an invalid length. [ 1987.129567][ T7869] netlink: 'syz.2.9445': attribute type 29 has an invalid length. [ 1987.178598][ T7870] netlink: 'syz.2.9445': attribute type 29 has an invalid length. [ 1987.209521][ T7871] netlink: 'syz.2.9445': attribute type 29 has an invalid length. [ 1987.244486][ T7872] netlink: 'syz.2.9445': attribute type 29 has an invalid length. [ 1987.326205][ T7873] netlink: 'syz.2.9445': attribute type 29 has an invalid length. [ 1988.339851][ T6123] wlan1: Creating new IBSS network, BSSID da:ce:a6:bc:9a:71 [ 1988.549313][ T7888] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.9450'. [ 1988.747006][ T7890] netlink: 'syz.1.9451': attribute type 3 has an invalid length. [ 1988.875572][ T7890] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9451'. [ 1989.661795][ T7907] netlink: 'syz.0.9456': attribute type 21 has an invalid length. [ 1989.713329][ T7907] IPv6: NLM_F_CREATE should be specified when creating new route [ 1989.752183][ T7915] netlink: 'syz.0.9456': attribute type 1 has an invalid length. [ 1989.770283][ T7907] IPv6: Can't replace route, no match found [ 1989.852693][ T7915] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.9456'. [ 1989.902174][ T7907] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9456'. [ 1990.047762][ T7066] wlan1: Trigger new scan to find an IBSS to join [ 1990.829528][ T7914] netlink: 'syz.4.9457': attribute type 16 has an invalid length. [ 1990.872427][ T7914] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9457'. [ 1991.188691][ T2898] wlan1: Creating new IBSS network, BSSID 52:68:08:f3:3a:10 [ 1992.904107][ T7982] netlink: 'syz.3.9472': attribute type 3 has an invalid length. [ 1992.955746][ T7982] netlink: 'syz.3.9472': attribute type 1 has an invalid length. [ 1993.035359][ T7982] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.9472'. [ 1993.391409][ T7987] netlink: 'syz.4.9474': attribute type 7 has an invalid length. [ 1993.464641][ T7994] netlink: 'syz.2.9475': attribute type 21 has an invalid length. [ 1993.505870][ T7994] IPv6: NLM_F_CREATE should be specified when creating new route [ 1993.557511][ T7994] IPv6: Can't replace route, no match found [ 1993.578512][ T7992] netlink: 'syz.2.9475': attribute type 1 has an invalid length. [ 1993.595741][ T7992] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.9475'. [ 1993.645139][ T7992] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9475'. [ 1995.223454][ T8025] netlink: 'syz.1.9488': attribute type 9 has an invalid length. [ 1995.235848][ T8025] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.9488'. [ 1995.624943][ T8039] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9494'. [ 1995.776267][ T8046] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9494'. [ 1995.892972][ T8051] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.9497'. [ 1997.342608][ T8076] netlink: 60519 bytes leftover after parsing attributes in process `syz.0.9505'. [ 1997.403168][ T8078] netlink: 'syz.2.9506': attribute type 1 has an invalid length. [ 1997.417875][ T8078] netlink: 'syz.2.9506': attribute type 4 has an invalid length. [ 1997.439106][ T8078] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.9506'. [ 1998.532150][ T8115] netlink: 'syz.0.9516': attribute type 2 has an invalid length. [ 1998.545170][ T8115] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.9516'. [ 1999.176171][ T8138] netlink: 'syz.0.9521': attribute type 1 has an invalid length. [ 1999.186077][ T8138] netlink: 'syz.0.9521': attribute type 4 has an invalid length. [ 1999.249593][ T8138] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.9521'. [ 1999.539065][ T8141] can: request_module (can-proto-0) failed. [ 2000.156809][ T8158] netlink: 'syz.4.9525': attribute type 1 has an invalid length. [ 2000.169461][ T8158] netlink: 'syz.4.9525': attribute type 4 has an invalid length. [ 2000.179092][ T8158] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.9525'. [ 2000.256901][ T8168] netlink: 'syz.0.9527': attribute type 2 has an invalid length. [ 2000.282050][ T8168] netlink: 'syz.0.9527': attribute type 8 has an invalid length. [ 2000.325092][ T8168] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9527'. [ 2000.342154][ T8170] netlink: 'syz.0.9527': attribute type 2 has an invalid length. [ 2000.354699][ T8170] netlink: 'syz.0.9527': attribute type 8 has an invalid length. [ 2000.366183][ T8170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9527'. [ 2000.386481][ T8162] netlink: 'syz.0.9527': attribute type 2 has an invalid length. [ 2000.397062][ T8162] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9527'. [ 2003.528806][ T8181] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9530'. [ 2003.613553][ T8181] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2003.689494][ T8181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2003.801898][ T8187] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.9533'. [ 2004.298266][ T8200] validate_nla: 1 callbacks suppressed [ 2004.298310][ T8200] netlink: 'syz.3.9536': attribute type 1 has an invalid length. [ 2004.405941][ T8200] netlink: 'syz.3.9536': attribute type 4 has an invalid length. [ 2004.425160][ T8200] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.9536'. [ 2004.485180][ T8214] netlink: 'syz.0.9546': attribute type 12 has an invalid length. [ 2004.515880][ T8214] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9546'. [ 2004.588501][ T8199] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.9546'. [ 2004.650256][ T8217] netlink: 'syz.1.9537': attribute type 10 has an invalid length. [ 2004.685924][ T8217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9537'. [ 2004.780776][ T8217] batman_adv: batadv0: Adding interface: virt_wifi0 [ 2004.826419][ T8217] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2004.874594][ T8209] can: request_module (can-proto-0) failed. [ 2004.888656][ T8217] batman_adv: batadv0: Interface activated: virt_wifi0 [ 2004.911819][ T8223] netlink: 'syz.2.9540': attribute type 1 has an invalid length. [ 2004.926117][ T8223] netlink: 'syz.2.9540': attribute type 4 has an invalid length. [ 2005.009014][ T2898] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2005.019891][ T8223] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.9540'. [ 2007.462914][ T8279] netlink: 'syz.3.9556': attribute type 1 has an invalid length. [ 2007.512312][ T8279] netlink: 'syz.3.9556': attribute type 4 has an invalid length. [ 2007.564302][ T8279] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.9556'. [ 2007.633798][ T8262] netlink: 'syz.1.9553': attribute type 21 has an invalid length. [ 2007.692310][ T8262] netlink: 'syz.1.9553': attribute type 1 has an invalid length. [ 2007.739613][ T8262] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9553'. [ 2007.794622][ T8264] bridge0: port 1(bridge_slave_0) entered disabled state [ 2008.103378][ T8294] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.9560'. [ 2008.153075][ T8296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9559'. [ 2008.194376][ T8296] batman_adv: batadv0: Adding interface: virt_wifi0 [ 2008.264121][ T8296] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2008.356057][ T8296] batman_adv: batadv0: Interface activated: virt_wifi0 [ 2008.774722][ T8319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9564'. [ 2009.006165][T26929] Bluetooth: hci3: command 0x0406 tx timeout [ 2009.503615][ T8333] validate_nla: 8 callbacks suppressed [ 2009.503685][ T8333] netlink: 'syz.4.9570': attribute type 2 has an invalid length. [ 2010.034406][ T8341] bridge0: port 3(batadv0) entered disabled state [ 2010.041296][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.048830][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.166945][ T8341] device batadv0 left promiscuous mode [ 2010.213378][ T8341] bridge0: port 3(batadv0) entered disabled state [ 2010.238451][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.391864][ T8341] device bridge_slave_0 left promiscuous mode [ 2010.429452][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.772101][ T8371] IPv6: NLM_F_CREATE should be specified when creating new route [ 2010.815915][ T8371] __nla_validate_parse: 1 callbacks suppressed [ 2010.815935][ T8371] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9579'. [ 2011.194747][ T8387] netlink: 'syz.2.9584': attribute type 1 has an invalid length. [ 2011.212276][ T8387] netlink: 'syz.2.9584': attribute type 4 has an invalid length. [ 2011.236785][ T8387] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.9584'. [ 2012.240714][ T8401] netlink: 'syz.3.9588': attribute type 1 has an invalid length. [ 2012.287661][ T8401] netlink: 'syz.3.9588': attribute type 4 has an invalid length. [ 2012.326795][ T8401] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.9588'. [ 2012.521838][ T8413] netlink: 'syz.0.9592': attribute type 3 has an invalid length. [ 2012.558279][ T8411] netlink: 'syz.4.9589': attribute type 21 has an invalid length. [ 2012.618594][ T8413] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9592'. [ 2012.667539][ T8411] netlink: 'syz.4.9589': attribute type 1 has an invalid length. [ 2012.691662][ T8411] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9589'. [ 2013.064270][ T8439] netlink: 'syz.2.9597': attribute type 1 has an invalid length. [ 2013.086214][ T8439] netlink: 'syz.2.9597': attribute type 4 has an invalid length. [ 2013.115482][ T8439] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.9597'. [ 2014.415221][ T8472] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9606'. [ 2014.421338][ T8470] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9608'. [ 2014.448472][ T8468] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9605'. [ 2014.453976][ T8473] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9606'. [ 2014.614570][ T8481] delete_channel: no stack [ 2014.652948][ T8481] delete_channel: no stack [ 2015.046194][ T8492] validate_nla: 4 callbacks suppressed [ 2015.046212][ T8492] netlink: 'syz.1.9612': attribute type 10 has an invalid length. [ 2015.113242][ T8492] team0: Port device netdevsim0 added [ 2015.146715][ T8489] netlink: 'syz.4.9611': attribute type 2 has an invalid length. [ 2015.246635][ T8494] netlink: 'syz.0.9613': attribute type 1 has an invalid length. [ 2015.259004][ T8494] netlink: 'syz.0.9613': attribute type 4 has an invalid length. [ 2016.957524][ T8514] __nla_validate_parse: 3 callbacks suppressed [ 2016.957545][ T8514] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9618'. [ 2016.995842][ T8514] ksmbd: Unknown IPC event: 10, ignore. [ 2018.363311][ T2898] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2018.578033][ T8520] FAULT_INJECTION: forcing a failure. [ 2018.578033][ T8520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2018.621128][ T8520] CPU: 1 PID: 8520 Comm: syz.0.9620 Not tainted syzkaller #0 [ 2018.628628][ T8520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2018.638724][ T8520] Call Trace: [ 2018.642035][ T8520] [ 2018.644992][ T8520] dump_stack_lvl+0x188/0x24e [ 2018.649715][ T8520] ? show_regs_print_info+0x12/0x12 [ 2018.654963][ T8520] ? load_image+0x410/0x410 [ 2018.659527][ T8520] ? __lock_acquire+0x7c40/0x7c40 [ 2018.664617][ T8520] ? snprintf+0xe5/0x140 [ 2018.668922][ T8520] should_fail_ex+0x390/0x4c0 [ 2018.673657][ T8520] _copy_to_user+0x2c/0x130 [ 2018.678212][ T8520] simple_read_from_buffer+0xe3/0x150 [ 2018.683719][ T8520] proc_fail_nth_read+0x1a6/0x220 [ 2018.688793][ T8520] ? proc_fault_inject_write+0x310/0x310 [ 2018.694483][ T8520] ? proc_fault_inject_write+0x310/0x310 [ 2018.700257][ T8520] vfs_read+0x2db/0x960 [ 2018.704483][ T8520] ? kernel_read+0x1e0/0x1e0 [ 2018.709122][ T8520] ? __fget_files+0x28/0x460 [ 2018.713754][ T8520] ? __fget_files+0x3fc/0x460 [ 2018.718483][ T8520] ? __fdget_pos+0x2ae/0x360 [ 2018.723111][ T8520] ? ksys_read+0x70/0x260 [ 2018.727494][ T8520] ksys_read+0x14d/0x260 [ 2018.731807][ T8520] ? vfs_write+0x9a0/0x9a0 [ 2018.736275][ T8520] ? lockdep_hardirqs_on+0x94/0x140 [ 2018.741526][ T8520] do_syscall_64+0x4c/0xa0 [ 2018.746062][ T8520] ? clear_bhb_loop+0x60/0xb0 [ 2018.750768][ T8520] ? clear_bhb_loop+0x60/0xb0 [ 2018.755482][ T8520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2018.761421][ T8520] RIP: 0033:0x7fbf12b5e98e [ 2018.765868][ T8520] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2018.785598][ T8520] RSP: 002b:00007fbf13b42fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2018.794055][ T8520] RAX: ffffffffffffffda RBX: 00007fbf13b436c0 RCX: 00007fbf12b5e98e [ 2018.802150][ T8520] RDX: 000000000000000f RSI: 00007fbf13b430a0 RDI: 000000000000000a [ 2018.810151][ T8520] RBP: 00007fbf13b43090 R08: 0000000000000000 R09: 0000000000000000 [ 2018.818155][ T8520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2018.826178][ T8520] R13: 00007fbf12e26038 R14: 00007fbf12e25fa0 R15: 00007ffd929fee28 [ 2018.834210][ T8520] [ 2019.306623][ T8529] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9622'. [ 2019.392634][ T8529] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2019.531315][ T8536] netlink: 'syz.0.9625': attribute type 11 has an invalid length. [ 2019.627592][ T8536] netlink: 'syz.0.9625': attribute type 6 has an invalid length. [ 2019.635598][ T8536] netlink: 125060 bytes leftover after parsing attributes in process `syz.0.9625'. [ 2020.069906][ T8554] netlink: 'syz.1.9630': attribute type 1 has an invalid length. [ 2020.101429][ T8554] netlink: 'syz.1.9630': attribute type 4 has an invalid length. [ 2020.144556][ T8554] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.9630'. [ 2021.220912][ T2893] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2023.285990][ T8574] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9634'. [ 2023.336460][ T8574] device hsr_slave_0 left promiscuous mode [ 2023.407875][ T8570] netlink: 'syz.2.9633': attribute type 3 has an invalid length. [ 2023.445945][ T8570] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9633'. [ 2023.877339][ T8585] device syzkaller0 entered promiscuous mode [ 2025.314608][ T8630] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9651'. [ 2028.849476][ T8619] netlink: 'syz.4.9647': attribute type 1 has an invalid length. [ 2028.857430][ T8619] netlink: 'syz.4.9647': attribute type 4 has an invalid length. [ 2028.865168][ T8619] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.9647'. [ 2028.875773][ T8623] netlink: 'syz.2.9648': attribute type 10 has an invalid length. [ 2028.883654][ T8623] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9648'. [ 2028.915750][ T8631] netlink: 'syz.3.9651': attribute type 17 has an invalid length. [ 2029.148944][ T8648] netlink: 279 bytes leftover after parsing attributes in process `syz.2.9655'. [ 2029.209479][ T8650] netlink: 197348 bytes leftover after parsing attributes in process `syz.4.9654'. [ 2029.275981][ T8652] netlink: 197348 bytes leftover after parsing attributes in process `syz.4.9654'. [ 2029.506242][ T8650] netlink: 'syz.4.9654': attribute type 10 has an invalid length. [ 2029.737273][ T8660] netlink: 'syz.0.9657': attribute type 2 has an invalid length. [ 2029.795766][ T8660] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9657'. [ 2029.872860][ T8665] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9658'. [ 2029.931039][ T8665] : renamed from caif0 [ 2029.953071][ T8665] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 2030.569440][ T8691] netlink: 'syz.1.9664': attribute type 1 has an invalid length. [ 2030.676003][ T8691] netlink: 'syz.1.9664': attribute type 4 has an invalid length. [ 2030.800358][ T8691] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.9664'. [ 2030.899996][ T8692] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.9656'. [ 2031.010307][ T8692] mac80211_hwsim hwsim294 : renamed from wlan0 [ 2033.936613][ T8722] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2033.976115][ T8722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2034.291923][ T8722] netlink: 'syz.4.9668': attribute type 12 has an invalid length. [ 2034.322268][ T8722] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9668'. [ 2035.403145][ T8751] netlink: 'syz.3.9675': attribute type 4 has an invalid length. [ 2035.428750][ T8751] netlink: 134728 bytes leftover after parsing attributes in process `syz.3.9675'. [ 2036.271419][ T8756] netlink: 'syz.1.9678': attribute type 1 has an invalid length. [ 2036.327023][ T8756] netlink: 'syz.1.9678': attribute type 4 has an invalid length. [ 2036.350745][ T8756] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.9678'. [ 2036.373696][ T6123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2037.788186][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.794634][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.513547][ T8754] sctp: [Deprecated]: syz.2.9677 (pid 8754) Use of int in max_burst socket option deprecated. [ 2038.513547][ T8754] Use struct sctp_assoc_value instead [ 2040.762824][ T8802] netlink: 'syz.1.9689': attribute type 4 has an invalid length. [ 2040.785883][ T8802] netlink: 134728 bytes leftover after parsing attributes in process `syz.1.9689'. [ 2043.727134][ T8810] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9695'. [ 2043.924953][ T8817] netlink: 'syz.2.9694': attribute type 3 has an invalid length. [ 2044.105353][ T8817] netlink: 163968 bytes leftover after parsing attributes in process `syz.2.9694'. [ 2044.384451][ T8821] netlink: 'syz.2.9694': attribute type 3 has an invalid length. [ 2044.405976][ T8821] netlink: 163968 bytes leftover after parsing attributes in process `syz.2.9694'. [ 2044.583210][ T8820] netlink: 'syz.0.9696': attribute type 39 has an invalid length. [ 2044.616437][ T8811] netlink: 'syz.3.9693': attribute type 1 has an invalid length. [ 2044.636590][ T8811] netlink: 'syz.3.9693': attribute type 4 has an invalid length. [ 2044.644482][ T8811] netlink: 682 bytes leftover after parsing attributes in process `syz.3.9693'. [ 2045.116214][ T8808] sctp: [Deprecated]: syz.1.9692 (pid 8808) Use of int in max_burst socket option deprecated. [ 2045.116214][ T8808] Use struct sctp_assoc_value instead [ 2045.911856][ T8856] netlink: 'syz.2.9703': attribute type 4 has an invalid length. [ 2045.954160][ T8856] netlink: 134728 bytes leftover after parsing attributes in process `syz.2.9703'. [ 2046.331916][ T8859] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.9705'. [ 2046.420481][ T8867] netlink: 'syz.2.9708': attribute type 1 has an invalid length. [ 2046.429760][ T8867] netlink: 'syz.2.9708': attribute type 4 has an invalid length. [ 2046.440133][ T8867] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.9708'. [ 2046.454864][ T8866] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9707'. serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.