last executing test programs: 8.260111619s ago: executing program 3 (id=2279): socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x29, 0x37, "1e"}], 0x18}, 0x97) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$kcm(0x2, 0x1, 0x84) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, 0x0}, 0x20) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)='\x00Di', 0x3}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'hsr0\x00'}) 8.068816254s ago: executing program 3 (id=2281): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 7.962778166s ago: executing program 3 (id=2284): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000007001000040000002100000001000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32, @ANYBLOB="0000000000000019f0000000000000"], 0x50) socket$kcm(0xa, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x1, 0x0) sendmsg$kcm(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9f001810000000000000140000001400000006ddffff0e0000000100000000000000000000000000000000004072965e17b81d0fadf08a19b971085dda4e51ae9d024c22a1cb1e7bc4f691ff091b0436d18b82a547f70c9417b154c0a238d7842d2d389391303caa251ed56fd5b6fccfebaab82c364afad59d45e8c3763c7a8ede615098cec3adf24c7feccf26c0d248d7efc1dbdb52047851d095485ae2ee48c27f503e1cc92da938f67a6f54623b1ccacb888233d0ced8e83a730498aa30b6071ebf8272f00c93084f2ac0"], &(0x7f0000000280)=""/42, 0x2e, 0x2a, 0x1, 0x3}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0x20, &(0x7f0000000ac0)=ANY=[@ANYBLOB="8759b634000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800008f0500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001801000020696c2500000000002020207b1af8ff0000", @ANYRES32=r6, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000270500008500000006000000"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x97, &(0x7f0000000680)=""/151, 0x41000, 0x48, '\x00', r9, @cgroup_sysctl=0x12, r6, 0x8, &(0x7f0000000800)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x6, 0x3, 0x6}, 0x10, 0x0, r5, 0x9, 0x0, &(0x7f0000000880)=[{0x0, 0x5, 0x6, 0x7}, {0x1, 0x5, 0x1, 0x1}, {0x2, 0x3, 0x5, 0x4}, {0x4, 0x3, 0xb}, {0x1, 0x2, 0xd, 0x9}, {0x1, 0x2, 0x3, 0xa}, {0x2, 0x4, 0x8, 0x1}, {0x1, 0x3, 0xc, 0x5}, {0x0, 0x4, 0x0, 0xc}], 0x10, 0x7fff}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x1808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0xffffffffffffffcb) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) 7.595626264s ago: executing program 3 (id=2287): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) 7.34212373s ago: executing program 3 (id=2290): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000007c0)={'netdevsim0\x00', @broadcast}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) recvmsg(r0, &(0x7f0000002dc0)={&(0x7f00000001c0)=@phonet, 0x80, &(0x7f0000002d00)=[{&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000000580)=""/144, 0x90}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/225, 0xe1}, {&(0x7f0000002a80)=""/136, 0x88}, {&(0x7f0000002b40)=""/130, 0x82}, {&(0x7f0000002c00)=""/91, 0x5b}, {&(0x7f0000002c80)=""/74, 0x4a}], 0xa}, 0x40000100) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 6.426998929s ago: executing program 3 (id=2295): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 2.903109467s ago: executing program 2 (id=2317): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 2.139706714s ago: executing program 2 (id=2323): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0xb, [@restrict={0x6}, @enum={0x10, 0x7, 0x0, 0x6, 0x4, [{0x9, 0x1}, {0x9, 0xfffffff5}, {0x4, 0x2}, {0xc, 0x13}, {0x10, 0x9}, {0xb, 0xfffffff7}, {0x9, 0x7}]}, @const={0x8, 0x0, 0x0, 0xa, 0x4}, @enum={0x10, 0x9, 0x0, 0x6, 0x4, [{0x7, 0x8}, {0x2, 0xfffffff9}, {0x2, 0x4}, {0x10}, {0x5, 0x40}, {0x8, 0x3}, {0x1, 0x8}, {0x1, 0x9}, {0x7, 0x10001}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x1}, @enum64={0x10, 0x5, 0x0, 0x13, 0x1, 0x3, [{0x10, 0x0, 0xffffffff}, {0x8, 0x1ff, 0xdcc}, {0x4, 0x9, 0x7}, {0xb, 0x5, 0x5}, {0x1, 0x10, 0x3}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x0, 0x30, 0x0, 0x61, 0x2e, 0x0]}}, &(0x7f00000006c0)=""/9, 0x127, 0x9, 0x0, 0x66, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x3, 0x6c99e481}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000380fc0b09000300", 0x33fe0}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000010000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r0], 0x9a) 1.984700857s ago: executing program 0 (id=2324): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001f80)={@fallback=r0, r1, 0x2f, 0x28, 0x4}, 0x20) 1.872624239s ago: executing program 2 (id=2325): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 1.747864362s ago: executing program 0 (id=2326): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000007001000040000002100000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000019f0000000000000"], 0x50) socket$kcm(0xa, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x1, 0x0) sendmsg$kcm(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9f001810000000000000140000001400000006ddffff0e0000000100000000000000000000000000000000004072965e17b81d0fadf08a19b971085dda4e51ae9d024c22a1cb1e7bc4f691ff091b0436d18b82a547f70c9417b154c0a238d7842d2d389391303caa251ed56fd5b6fccfebaab82c364afad59d45e8c3763c7a8ede615098cec3adf24c7feccf26c0d248d7efc1dbdb52047851d095485ae2ee48c27f503e1cc92da938f67a6f54623b1ccacb888233d0ced8e83a730498aa30b6071ebf8272f00c93084f2ac0"], &(0x7f0000000280)=""/42, 0x2e, 0x2a, 0x1, 0x3}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0x20, &(0x7f0000000ac0)=ANY=[@ANYBLOB="8759b634000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800008f0500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001801000020696c2500000000002020207b1af8ff0000", @ANYRES32=r6, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000270500008500000006000000"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x97, &(0x7f0000000680)=""/151, 0x41000, 0x48, '\x00', r9, @cgroup_sysctl=0x12, r6, 0x8, &(0x7f0000000800)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x6, 0x3, 0x6}, 0x10, 0x0, r5, 0x9, 0x0, &(0x7f0000000880)=[{0x0, 0x5, 0x6, 0x7}, {0x1, 0x5, 0x1, 0x1}, {0x2, 0x3, 0x5, 0x4}, {0x4, 0x3, 0xb}, {0x1, 0x2, 0xd, 0x9}, {0x1, 0x2, 0x3, 0xa}, {0x2, 0x4, 0x8, 0x1}, {0x1, 0x3, 0xc, 0x5}, {0x0, 0x4, 0x0, 0xc}], 0x10, 0x7fff}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x1808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0xffffffffffffffcb) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) 1.679592193s ago: executing program 1 (id=2327): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c9", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 1.567646966s ago: executing program 1 (id=2328): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1000000000) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x20000000000000a, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0xa4091, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x10805, 0x7, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10000000, 0xfffffffe, 0x0, 0x4}, {0x10000002, 0xfffffffc, 0x0, 0x6}], 0x10, 0x1}, 0x94) r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu~\"\"\nt\x00') sendmsg$kcm(r2, &(0x7f0000000840)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty, 0x3}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)="878fd57448431964be7777e5881af64b0e62f3cf98de9afdd3cb5fedbb0d44c8e537413c3616b802d17fa09b239ea26985fa86d57d7cec7640c11288e3561488084d0a1d27add733f75f3a5547e2", 0x4e}, {&(0x7f0000000400)="84c33d0ef48ea83cad1a5475aba2f32e4692e0fedae613dc1650e6343caba2f7a37f270f516e8a8f408150b469d9b5fbee4bd1dfe63aa04f35459e9b88e686ef26915fbf504e3b7dc2f8e016b4fc557a8f6f7de266bdf358f147901b48421c54b1286f71c30f44564572807bc77884908de11cefc6de90b0f0d6efd12bddc0288ecdf26696688da4bba9ad9be3e8a46ae84ab75bd068bd0886591798d0167b9f5ee9baa24a5565ec2cf7a9cd6e220b51ba8cb8718e08c4030fdb015509ae5348d8dd1622e2", 0xc5}, {&(0x7f0000000600)="9267f7f10af80a65458e416e2c96b5f0d0cecf1cac5cf1b023e031137658e81908ed5ece3a049715629695903141f8294563a70f1dbcfb49e392c394618b3a89d3e01e142e050b80e34b3c2c0da5d1a1bb2d964a4a228c8dbab1833d7c163584", 0x60}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="c270b66bb4404ab0f14d39a3dfa7e0b99db8f4fe41c1290efac39e5f97f3443610b8adfc3f141c8d0a7fa7e450d43d4f45d1943f3431c0704dcb4d1066e8301b1094804214455b901b84b65088a11899f3a7b4110f0d0beab4", 0x59}, {&(0x7f0000000740)="24c7b8dd75c6cf0e352a7d27af5fb9e757", 0x11}], 0x6, &(0x7f0000000800)=[{0x18, 0x115, 0xd01, "cf081dea2b0c5c5a"}], 0x18}, 0x20008000) close(0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r3, 0x1, 0x28, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000", 0x4}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.441106379s ago: executing program 2 (id=2329): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 1.38884647s ago: executing program 0 (id=2330): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000380fc0b09000300", 0x33fe0}], 0x1}, 0x0) 1.221142954s ago: executing program 0 (id=2331): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000007001000040000002100000001000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) socket$kcm(0xa, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x1, 0x0) sendmsg$kcm(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9f001810000000000000140000001400000006ddffff0e0000000100000000000000000000000000000000004072965e17b81d0fadf08a19b971085dda4e51ae9d024c22a1cb1e7bc4f691ff091b0436d18b82a547f70c9417b154c0a238d7842d2d389391303caa251ed56fd5b6fccfebaab82c364afad59d45e8c3763c7a8ede615098cec3adf24c7feccf26c0d248d7efc1dbdb52047851d095485ae2ee48c27f503e1cc92da938f67a6f54623b1ccacb888233d0ced8e83a730498aa30b6071ebf8272f00c93084f2ac0"], &(0x7f0000000280)=""/42, 0x2e, 0x2a, 0x1, 0x3}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0x20, &(0x7f0000000ac0)=ANY=[@ANYBLOB="8759b634000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800008f0500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001801000020696c2500000000002020207b1af8ff0000", @ANYRES32=r6, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000270500008500000006000000"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x97, &(0x7f0000000680)=""/151, 0x41000, 0x48, '\x00', r9, @cgroup_sysctl=0x12, r6, 0x8, &(0x7f0000000800)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x6, 0x3, 0x6}, 0x10, 0x0, r5, 0x9, 0x0, &(0x7f0000000880)=[{0x0, 0x5, 0x6, 0x7}, {0x1, 0x5, 0x1, 0x1}, {0x2, 0x3, 0x5, 0x4}, {0x4, 0x3, 0xb}, {0x1, 0x2, 0xd, 0x9}, {0x1, 0x2, 0x3, 0xa}, {0x2, 0x4, 0x8, 0x1}, {0x1, 0x3, 0xc, 0x5}, {0x0, 0x4, 0x0, 0xc}], 0x10, 0x7fff}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x1808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0xffffffffffffffcb) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) 1.175515075s ago: executing program 1 (id=2332): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200fc"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000380)='\xb0\xe0p\xfc\xc5\fPd\xe2\xc6n\xe9\v(\xdd\xe1]\x10\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24023, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x100, 0x0, 0xa482, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r5 = openat$cgroup_ro(r3, &(0x7f0000000800)='memory.stat\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x29c3, 0x119, 0x0, 0x48408, 0x1, 0x0, '\x00', 0x0, r5, 0x3, 0x5, 0x5, 0x6, @value=r5}, 0x50) r6 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0xd, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.126523736s ago: executing program 2 (id=2333): socket$kcm(0x1e, 0x1, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff808500000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x9c, @mcast1, 0x4, 0xffffffff}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x541b, &(0x7f0000000240)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x10, 0x3, 0x10) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000180000000642fef781f5b2e3000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xcf3057cc26d802ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 823.180483ms ago: executing program 1 (id=2334): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0xb, [@restrict={0x6}, @enum={0x10, 0x7, 0x0, 0x6, 0x4, [{0x9, 0x1}, {0x9, 0xfffffff5}, {0x4, 0x2}, {0xc, 0x13}, {0x10, 0x9}, {0xb, 0xfffffff7}, {0x9, 0x7}]}, @const={0x8, 0x0, 0x0, 0xa, 0x4}, @enum={0x10, 0x9, 0x0, 0x6, 0x4, [{0x7, 0x8}, {0x2, 0xfffffff9}, {0x2, 0x4}, {0x10}, {0x5, 0x40}, {0x8, 0x3}, {0x1, 0x8}, {0x1, 0x9}, {0x7, 0x10001}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x1}, @enum64={0x10, 0x5, 0x0, 0x13, 0x1, 0x3, [{0x10, 0x0, 0xffffffff}, {0x8, 0x1ff, 0xdcc}, {0x4, 0x9, 0x7}, {0xb, 0x5, 0x5}, {0x1, 0x10, 0x3}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x0, 0x30, 0x0, 0x61, 0x2e, 0x0]}}, &(0x7f00000006c0)=""/9, 0x127, 0x9, 0x0, 0x66, 0x10000}, 0x28) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x3, 0x6c99e481}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000380fc0b09000300", 0x33fe0}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000010000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r0], 0x9a) 644.157207ms ago: executing program 1 (id=2335): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 547.446138ms ago: executing program 0 (id=2336): socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x29, 0x37, "1e"}], 0x18}, 0x97) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$kcm(0x2, 0x1, 0x84) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, 0x0}, 0x20) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)='\x00Di', 0x3}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'hsr0\x00'}) 509.545779ms ago: executing program 2 (id=2337): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000007001000040000002100000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000019f0000000000000"], 0x50) socket$kcm(0xa, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x1, 0x0) sendmsg$kcm(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9f001810000000000000140000001400000006ddffff0e0000000100000000000000000000000000000000004072965e17b81d0fadf08a19b971085dda4e51ae9d024c22a1cb1e7bc4f691ff091b0436d18b82a547f70c9417b154c0a238d7842d2d389391303caa251ed56fd5b6fccfebaab82c364afad59d45e8c3763c7a8ede615098cec3adf24c7feccf26c0d248d7efc1dbdb52047851d095485ae2ee48c27f503e1cc92da938f67a6f54623b1ccacb888233d0ced8e83a730498aa30b6071ebf8272f00c93084f2ac0"], &(0x7f0000000280)=""/42, 0x2e, 0x2a, 0x1, 0x3}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0x20, &(0x7f0000000ac0)=ANY=[@ANYBLOB="8759b634000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800008f0500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001801000020696c2500000000002020207b1af8ff0000", @ANYRES32=r6, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000270500008500000006000000"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x97, &(0x7f0000000680)=""/151, 0x41000, 0x48, '\x00', r9, @cgroup_sysctl=0x12, r6, 0x8, &(0x7f0000000800)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x6, 0x3, 0x6}, 0x10, 0x0, r5, 0x9, 0x0, &(0x7f0000000880)=[{0x0, 0x5, 0x6, 0x7}, {0x1, 0x5, 0x1, 0x1}, {0x2, 0x3, 0x5, 0x4}, {0x4, 0x3, 0xb}, {0x1, 0x2, 0xd, 0x9}, {0x1, 0x2, 0x3, 0xa}, {0x2, 0x4, 0x8, 0x1}, {0x1, 0x3, 0xc, 0x5}, {0x0, 0x4, 0x0, 0xc}], 0x10, 0x7fff}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x1808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0xffffffffffffffcb) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) 49.256989ms ago: executing program 0 (id=2338): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)}], 0x1}, 0x8040) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="ff", 0x1}], 0x1}, 0x41) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, 0x0, 0x0) 0s ago: executing program 1 (id=2339): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1000000000) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x20000000000000a, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10000000, 0xfffffffe, 0x0, 0x4}, {0x10000002, 0xfffffffc, 0x0, 0x6}], 0x10, 0x1}, 0x94) r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu~\"\"\nt\x00') sendmsg$kcm(r2, &(0x7f0000000840)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty, 0x3}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)="878fd57448431964be7777e5881af64b0e62f3cf98de9afdd3cb5fedbb0d44c8e537413c3616b802d17fa09b239ea26985fa86d57d7cec7640c11288e3561488084d0a1d27add733f75f3a5547e2", 0x4e}, {&(0x7f0000000400)="84c33d0ef48ea83cad1a5475aba2f32e4692e0fedae613dc1650e6343caba2f7a37f270f516e8a8f408150b469d9b5fbee4bd1dfe63aa04f35459e9b88e686ef26915fbf504e3b7dc2f8e016b4fc557a8f6f7de266bdf358f147901b48421c54b1286f71c30f44564572807bc77884908de11cefc6de90b0f0d6efd12bddc0288ecdf26696688da4bba9ad9be3e8a46ae84ab75bd068bd0886591798d0167b9f5ee9baa24a5565ec2cf7a9cd6e220b51ba8cb8718e08c4030fdb015509ae5348d8dd1622e2", 0xc5}, {&(0x7f0000000600)="9267f7f10af80a65458e416e2c96b5f0d0cecf1cac5cf1b023e031137658e81908ed5ece3a049715629695903141f8294563a70f1dbcfb49e392c394618b3a89d3e01e142e050b80e34b3c2c0da5d1a1bb2d964a4a228c8dbab1833d7c163584", 0x60}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="c270b66bb4404ab0f14d39a3dfa7e0b99db8f4fe41c1290efac39e5f97f3443610b8adfc3f141c8d0a7fa7e450d43d4f45d1943f3431c0704dcb4d1066e8301b1094804214455b901b84b65088a11899f3a7b4110f0d0beab4", 0x59}, {&(0x7f0000000740)="24c7b8dd75c6cf0e352a7d27af5fb9e757", 0x11}], 0x6, &(0x7f0000000800)=[{0x18, 0x115, 0xd01, "cf081dea2b0c5c5a"}], 0x18}, 0x20008000) close(0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r3, 0x1, 0x28, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000", 0x4}], 0x1, 0x0, 0x0, 0x7400}, 0x0) kernel console output (not intermixed with test programs): 70] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.742962][T10570] RSP: 002b:00007f11ed54e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 328.751408][T10570] RAX: ffffffffffffffda RBX: 00007f11ec825fa0 RCX: 00007f11ec59de59 [ 328.760895][T10570] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 328.769049][T10570] RBP: 00007f11ed54e090 R08: 0000000000000000 R09: 0000000000000000 [ 328.777040][T10570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 328.785031][T10570] R13: 00007f11ec826038 R14: 00007f11ec825fa0 R15: 00007ffe9bc1ad18 [ 328.793063][T10570] [ 329.163898][T10572] syz_tun: entered allmulticast mode [ 330.446500][T10591] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1590'. [ 330.477992][T10591] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1590'. [ 330.488237][T10591] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1590'. [ 330.521067][T10591] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1590'. [ 330.586248][T10593] FAULT_INJECTION: forcing a failure. [ 330.586248][T10593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.636004][T10593] CPU: 1 PID: 10593 Comm: syz.1.1592 Not tainted syzkaller #0 [ 330.643556][T10593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 330.653644][T10593] Call Trace: [ 330.656967][T10593] [ 330.659945][T10593] dump_stack_lvl+0x18c/0x250 [ 330.664708][T10593] ? show_regs_print_info+0x20/0x20 [ 330.669956][T10593] ? load_image+0x420/0x420 [ 330.674503][T10593] ? __might_fault+0xaa/0x120 [ 330.679296][T10593] ? __lock_acquire+0x7d80/0x7d80 [ 330.684425][T10593] ? unix_ioctl+0x259/0x6b0 [ 330.688984][T10593] should_fail_ex+0x394/0x4c0 [ 330.693697][T10593] _copy_from_user+0x2f/0xe0 [ 330.698302][T10593] sock_do_ioctl+0x190/0x310 [ 330.702904][T10593] ? sock_show_fdinfo+0xb0/0xb0 [ 330.707794][T10593] sock_ioctl+0x5be/0x7e0 [ 330.712196][T10593] ? sock_poll+0x3e0/0x3e0 [ 330.716633][T10593] ? bpf_lsm_file_ioctl+0x9/0x10 [ 330.721586][T10593] ? security_file_ioctl+0x80/0xa0 [ 330.726748][T10593] ? sock_poll+0x3e0/0x3e0 [ 330.731175][T10593] __se_sys_ioctl+0xfd/0x170 [ 330.735785][T10593] do_syscall_64+0x55/0xb0 [ 330.740214][T10593] ? clear_bhb_loop+0x40/0x90 [ 330.744899][T10593] ? clear_bhb_loop+0x40/0x90 [ 330.749616][T10593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.755556][T10593] RIP: 0033:0x7faf1159de59 [ 330.759979][T10593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.779683][T10593] RSP: 002b:00007faf1251a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.788197][T10593] RAX: ffffffffffffffda RBX: 00007faf11825fa0 RCX: 00007faf1159de59 [ 330.796356][T10593] RDX: 0000200000000500 RSI: 0000000000008914 RDI: 0000000000000004 [ 330.804342][T10593] RBP: 00007faf1251a090 R08: 0000000000000000 R09: 0000000000000000 [ 330.812431][T10593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.820415][T10593] R13: 00007faf11826038 R14: 00007faf11825fa0 R15: 00007ffc77750878 [ 330.828411][T10593] [ 332.001838][T10608] FAULT_INJECTION: forcing a failure. [ 332.001838][T10608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.130136][T10608] CPU: 0 PID: 10608 Comm: syz.2.1596 Not tainted syzkaller #0 [ 332.137678][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 332.147772][T10608] Call Trace: [ 332.151080][T10608] [ 332.154040][T10608] dump_stack_lvl+0x18c/0x250 [ 332.158767][T10608] ? show_regs_print_info+0x20/0x20 [ 332.164017][T10608] ? load_image+0x420/0x420 [ 332.168651][T10608] ? __might_fault+0xaa/0x120 [ 332.173369][T10608] ? __lock_acquire+0x7d80/0x7d80 [ 332.178442][T10608] should_fail_ex+0x394/0x4c0 [ 332.183161][T10608] _copy_from_iter+0x1cd/0x1290 [ 332.188110][T10608] ? lock_chain_count+0x20/0x20 [ 332.193033][T10608] ? copyout_mc+0x70/0x70 [ 332.197380][T10608] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.203599][T10608] ? lockdep_hardirqs_on+0x98/0x150 [ 332.208815][T10608] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.214995][T10608] ? page_copy_sane+0x4e/0x270 [ 332.219778][T10608] copy_page_from_iter+0x7b/0x100 [ 332.224812][T10608] pipe_write+0x758/0x1b20 [ 332.229281][T10608] ? strlen+0x2e/0x70 [ 332.233316][T10608] ? pipe_read+0x1330/0x1330 [ 332.237935][T10608] ? end_current_label_crit_section+0x149/0x170 [ 332.244192][T10608] ? common_file_perm+0x198/0x1f0 [ 332.249231][T10608] vfs_write+0x474/0x9a0 [ 332.253492][T10608] ? file_end_write+0x250/0x250 [ 332.258376][T10608] ? __fget_files+0x3fc/0x460 [ 332.263068][T10608] ? __fdget_pos+0x1d8/0x330 [ 332.267664][T10608] ? ksys_write+0x74/0x260 [ 332.272108][T10608] ksys_write+0x151/0x260 [ 332.276507][T10608] ? __ia32_sys_read+0x90/0x90 [ 332.281550][T10608] ? lockdep_hardirqs_on+0x98/0x150 [ 332.286853][T10608] do_syscall_64+0x55/0xb0 [ 332.291402][T10608] ? clear_bhb_loop+0x40/0x90 [ 332.296140][T10608] ? clear_bhb_loop+0x40/0x90 [ 332.300845][T10608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.306849][T10608] RIP: 0033:0x7faedd59de59 [ 332.311292][T10608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.331112][T10608] RSP: 002b:00007faede42c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 332.339537][T10608] RAX: ffffffffffffffda RBX: 00007faedd825fa0 RCX: 00007faedd59de59 [ 332.347521][T10608] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 332.355511][T10608] RBP: 00007faede42c090 R08: 0000000000000000 R09: 0000000000000000 [ 332.363489][T10608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.372249][T10608] R13: 00007faedd826038 R14: 00007faedd825fa0 R15: 00007ffe1afcd428 [ 332.380342][T10608] [ 332.529994][T10610] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 332.558183][T10610] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 332.598189][T10610] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 332.644824][T10610] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 334.392744][T10636] netlink: 'syz.0.1607': attribute type 29 has an invalid length. [ 334.424778][T10636] netlink: 'syz.0.1607': attribute type 29 has an invalid length. [ 334.445427][T10638] netlink: 'syz.0.1607': attribute type 29 has an invalid length. [ 334.536630][T10639] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1608'. [ 334.643352][T10641] netlink: 'syz.3.1609': attribute type 10 has an invalid length. [ 334.663365][T10641] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1609'. [ 335.221017][T10655] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 335.264265][T10655] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 335.327960][T10658] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 335.366517][T10658] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 336.268741][T10677] netlink: 'syz.1.1623': attribute type 3 has an invalid length. [ 336.276595][T10677] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1623'. [ 336.372185][T10680] netlink: 'syz.2.1622': attribute type 1 has an invalid length. [ 336.427861][T10680] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1622'. [ 336.499267][T10682] netlink: 'syz.1.1624': attribute type 21 has an invalid length. [ 336.518597][T10682] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1624'. [ 336.580705][T10687] FAULT_INJECTION: forcing a failure. [ 336.580705][T10687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.607856][T10687] CPU: 0 PID: 10687 Comm: syz.3.1626 Not tainted syzkaller #0 [ 336.615392][T10687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 336.625472][T10687] Call Trace: [ 336.628776][T10687] [ 336.631715][T10687] dump_stack_lvl+0x18c/0x250 [ 336.636428][T10687] ? show_regs_print_info+0x20/0x20 [ 336.641680][T10687] ? load_image+0x420/0x420 [ 336.646222][T10687] ? __lock_acquire+0x7d80/0x7d80 [ 336.651296][T10687] should_fail_ex+0x394/0x4c0 [ 336.656003][T10687] _copy_from_user+0x2f/0xe0 [ 336.660620][T10687] bpf_prog_test_run_skb+0x267/0x18f0 [ 336.666018][T10687] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 336.672201][T10687] ? lockdep_hardirqs_on+0x98/0x150 [ 336.677432][T10687] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 336.683693][T10687] ? cpu_online+0x60/0x60 [ 336.688053][T10687] ? cpu_online+0x60/0x60 [ 336.692405][T10687] bpf_prog_test_run+0x31f/0x390 [ 336.697360][T10687] __sys_bpf+0x49d/0x890 [ 336.701615][T10687] ? read_tsc+0x9/0x20 [ 336.705717][T10687] ? bpf_link_show_fdinfo+0x390/0x390 [ 336.711120][T10687] ? lock_chain_count+0x20/0x20 [ 336.715982][T10687] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 336.721991][T10687] __x64_sys_bpf+0x7c/0x90 [ 336.726425][T10687] do_syscall_64+0x55/0xb0 [ 336.730861][T10687] ? clear_bhb_loop+0x40/0x90 [ 336.735578][T10687] ? clear_bhb_loop+0x40/0x90 [ 336.740271][T10687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.746282][T10687] RIP: 0033:0x7f6283b9de59 [ 336.750709][T10687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.770335][T10687] RSP: 002b:00007f6284b39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 336.778790][T10687] RAX: ffffffffffffffda RBX: 00007f6283e25fa0 RCX: 00007f6283b9de59 [ 336.786779][T10687] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 336.794765][T10687] RBP: 00007f6284b39090 R08: 0000000000000000 R09: 0000000000000000 [ 336.802843][T10687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.810847][T10687] R13: 00007f6283e26038 R14: 00007f6283e25fa0 R15: 00007ffcc7b38818 [ 336.818856][T10687] [ 336.899019][T10689] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1628'. [ 336.963559][T10689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.089263][T10691] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 337.142480][T10691] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 337.228550][T10694] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 337.235604][T10694] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 337.365101][T10700] FAULT_INJECTION: forcing a failure. [ 337.365101][T10700] name failslab, interval 1, probability 0, space 0, times 0 [ 337.384065][T10700] CPU: 0 PID: 10700 Comm: syz.0.1631 Not tainted syzkaller #0 [ 337.391603][T10700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 337.401868][T10700] Call Trace: [ 337.405341][T10700] [ 337.408513][T10700] dump_stack_lvl+0x18c/0x250 [ 337.413251][T10700] ? show_regs_print_info+0x20/0x20 [ 337.418517][T10700] ? load_image+0x420/0x420 [ 337.423074][T10700] ? __might_sleep+0xe0/0xe0 [ 337.427705][T10700] ? __lock_acquire+0x7d80/0x7d80 [ 337.432801][T10700] should_fail_ex+0x394/0x4c0 [ 337.437528][T10700] should_failslab+0x9/0x20 [ 337.442072][T10700] slab_pre_alloc_hook+0x59/0x300 [ 337.447157][T10700] kmem_cache_alloc+0x5a/0x2c0 [ 337.452012][T10700] ? sk_prot_alloc+0x57/0x210 [ 337.456727][T10700] sk_prot_alloc+0x57/0x210 [ 337.461268][T10700] ? sk_alloc+0x24/0x350 [ 337.465560][T10700] sk_alloc+0x3a/0x350 [ 337.469775][T10700] inet_create+0x7a9/0xfe0 [ 337.474235][T10700] ? inet_create+0x9d/0xfe0 [ 337.478815][T10700] __sock_create+0x49e/0x940 [ 337.483448][T10700] __sys_socketpair+0x1c1/0x550 [ 337.488452][T10700] __x64_sys_socketpair+0x9b/0xb0 [ 337.493496][T10700] do_syscall_64+0x55/0xb0 [ 337.497922][T10700] ? clear_bhb_loop+0x40/0x90 [ 337.502706][T10700] ? clear_bhb_loop+0x40/0x90 [ 337.507477][T10700] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.513423][T10700] RIP: 0033:0x7f11ec59de59 [ 337.517869][T10700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.537581][T10700] RSP: 002b:00007f11ed54e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 337.546111][T10700] RAX: ffffffffffffffda RBX: 00007f11ec825fa0 RCX: 00007f11ec59de59 [ 337.555331][T10700] RDX: 0000000000000073 RSI: 0000000000000002 RDI: 0000000000000002 [ 337.564879][T10700] RBP: 00007f11ed54e090 R08: 0000000000000000 R09: 0000000000000000 [ 337.573997][T10700] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.582355][T10700] R13: 00007f11ec826038 R14: 00007f11ec825fa0 R15: 00007ffe9bc1ad18 [ 337.590550][T10700] [ 337.984393][ T5082] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 338.378750][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'. [ 338.432082][T10717] netlink: 'syz.0.1636': attribute type 10 has an invalid length. [ 338.488359][T10717] bond0: (slave bond_slave_0): Releasing backup interface [ 338.553167][T10729] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1640'. [ 338.819599][T10735] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1642'. [ 338.868547][T10737] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1644'. [ 338.926745][T10735] syz.2.1642[10735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.938351][T10735] syz.2.1642[10735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.014900][T10741] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 339.041348][T10741] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 339.048705][ T5082] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 339.178123][T10743] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 339.185888][T10743] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 339.938137][T10764] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1651'. [ 340.008783][T10766] FAULT_INJECTION: forcing a failure. [ 340.008783][T10766] name failslab, interval 1, probability 0, space 0, times 0 [ 340.038680][T10766] CPU: 1 PID: 10766 Comm: syz.0.1652 Not tainted syzkaller #0 [ 340.046222][T10766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 340.056309][T10766] Call Trace: [ 340.059613][T10766] [ 340.062567][T10766] dump_stack_lvl+0x18c/0x250 [ 340.067322][T10766] ? sctp_sendmsg+0x1519/0x27b0 [ 340.072213][T10766] ? ___sys_sendmsg+0x2a6/0x360 [ 340.077193][T10766] ? show_regs_print_info+0x20/0x20 [ 340.082440][T10766] ? load_image+0x420/0x420 [ 340.086993][T10766] should_fail_ex+0x394/0x4c0 [ 340.091716][T10766] should_failslab+0x9/0x20 [ 340.096253][T10766] slab_pre_alloc_hook+0x59/0x300 [ 340.101336][T10766] ? sctp_add_bind_addr+0x8c/0x360 [ 340.106484][T10766] __kmem_cache_alloc_node+0x53/0x250 [ 340.111996][T10766] ? sctp_add_bind_addr+0x8c/0x360 [ 340.117163][T10766] kmalloc_trace+0x2a/0xe0 [ 340.121623][T10766] sctp_add_bind_addr+0x8c/0x360 [ 340.126603][T10766] sctp_copy_local_addr_list+0x31b/0x4e0 [ 340.132276][T10766] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 340.138082][T10766] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 340.144195][T10766] ? sctp_v4_is_any+0x35/0x60 [ 340.148910][T10766] ? sctp_copy_one_addr+0x8c/0x350 [ 340.154104][T10766] sctp_bind_addr_copy+0xb3/0x3c0 [ 340.159208][T10766] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 340.165586][T10766] sctp_connect_new_asoc+0x2f9/0x6a0 [ 340.170917][T10766] ? __sctp_connect+0xd80/0xd80 [ 340.175802][T10766] ? __local_bh_enable_ip+0x13a/0x1c0 [ 340.181323][T10766] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 340.186910][T10766] ? security_sctp_bind_connect+0x89/0xb0 [ 340.192675][T10766] sctp_sendmsg+0x1519/0x27b0 [ 340.197401][T10766] ? sctp_getsockopt+0xb60/0xb60 [ 340.202387][T10766] ? aa_af_perm+0x330/0x330 [ 340.206938][T10766] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 340.213402][T10766] ? sock_rps_record_flow+0x19/0x3f0 [ 340.218782][T10766] ? inet_sendmsg+0xce/0x2a0 [ 340.223428][T10766] ? inet_send_prepare+0x250/0x250 [ 340.228599][T10766] ____sys_sendmsg+0x61b/0x980 [ 340.233416][T10766] ? __asan_memset+0x22/0x40 [ 340.238044][T10766] ? __sys_sendmsg_sock+0x30/0x30 [ 340.243108][T10766] ? __import_iovec+0x5f2/0x850 [ 340.248056][T10766] ? import_iovec+0x73/0xa0 [ 340.252614][T10766] ___sys_sendmsg+0x2a6/0x360 [ 340.257513][T10766] ? __sys_sendmsg+0x2b0/0x2b0 [ 340.262344][T10766] ? ktime_get+0x7f/0x280 [ 340.266719][T10766] ? trace_call_bpf+0xc3/0x6c0 [ 340.271557][T10766] __se_sys_sendmsg+0x1d0/0x2c0 [ 340.276452][T10766] ? perf_trace_preemptirq_template+0x269/0x330 [ 340.282739][T10766] ? __x64_sys_sendmsg+0x80/0x80 [ 340.287739][T10766] ? lockdep_hardirqs_on+0x98/0x150 [ 340.292982][T10766] do_syscall_64+0x55/0xb0 [ 340.297450][T10766] ? clear_bhb_loop+0x40/0x90 [ 340.302162][T10766] ? clear_bhb_loop+0x40/0x90 [ 340.306961][T10766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.312906][T10766] RIP: 0033:0x7f11ec59de59 [ 340.317373][T10766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.337544][T10766] RSP: 002b:00007f11ed54e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.346000][T10766] RAX: ffffffffffffffda RBX: 00007f11ec825fa0 RCX: 00007f11ec59de59 [ 340.354003][T10766] RDX: 0000000004000040 RSI: 00002000000010c0 RDI: 0000000000000005 [ 340.362008][T10766] RBP: 00007f11ed54e090 R08: 0000000000000000 R09: 0000000000000000 [ 340.370009][T10766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.378011][T10766] R13: 00007f11ec826038 R14: 00007f11ec825fa0 R15: 00007ffe9bc1ad18 [ 340.386031][T10766] [ 340.769834][T10781] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 340.784673][T10781] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 340.829878][T10781] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 340.837199][T10781] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 341.057429][T10789] FAULT_INJECTION: forcing a failure. [ 341.057429][T10789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.109071][T10792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1662'. [ 341.121661][T10789] CPU: 1 PID: 10789 Comm: syz.3.1660 Not tainted syzkaller #0 [ 341.129193][T10789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 341.139284][T10789] Call Trace: [ 341.142591][T10789] [ 341.145547][T10789] dump_stack_lvl+0x18c/0x250 [ 341.150271][T10789] ? show_regs_print_info+0x20/0x20 [ 341.155507][T10789] ? load_image+0x420/0x420 [ 341.160048][T10789] ? __might_fault+0xaa/0x120 [ 341.165025][T10789] ? __lock_acquire+0x7d80/0x7d80 [ 341.170090][T10789] ? __virt_addr_valid+0x10c/0x380 [ 341.175240][T10789] should_fail_ex+0x394/0x4c0 [ 341.179971][T10789] _copy_from_user+0x2f/0xe0 [ 341.184604][T10789] ___bpf_copy_key+0xb0/0x100 [ 341.189319][T10789] map_update_elem+0x265/0x710 [ 341.194115][T10789] __sys_bpf+0x6b5/0x890 [ 341.198396][T10789] ? bpf_link_show_fdinfo+0x390/0x390 [ 341.203967][T10789] ? lock_chain_count+0x20/0x20 [ 341.208941][T10789] __x64_sys_bpf+0x7c/0x90 [ 341.213370][T10789] do_syscall_64+0x55/0xb0 [ 341.217798][T10789] ? clear_bhb_loop+0x40/0x90 [ 341.222486][T10789] ? clear_bhb_loop+0x40/0x90 [ 341.227168][T10789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.233075][T10789] RIP: 0033:0x7f6283b9de59 [ 341.237535][T10789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.257152][T10789] RSP: 002b:00007f6284b39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 341.265578][T10789] RAX: ffffffffffffffda RBX: 00007f6283e25fa0 RCX: 00007f6283b9de59 [ 341.273558][T10789] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000002 [ 341.281739][T10789] RBP: 00007f6284b39090 R08: 0000000000000000 R09: 0000000000000000 [ 341.289808][T10789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.297783][T10789] R13: 00007f6283e26038 R14: 00007f6283e25fa0 R15: 00007ffcc7b38818 [ 341.305776][T10789] [ 341.310796][T10792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1662'. [ 341.339853][T10794] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1662'. [ 341.389606][T10792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1662'. [ 341.509292][T10793] netlink: 'syz.0.1661': attribute type 10 has an invalid length. [ 341.519570][T10793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1661'. [ 341.961792][T10814] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 341.970814][T10814] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 342.000496][T10814] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 342.008357][T10814] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 342.679844][T10817] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 342.695030][T10817] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 342.746181][T10817] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 342.763702][T10817] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 343.055229][T10828] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1674'. [ 343.065444][T10828] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1674'. [ 343.096607][T10827] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 343.116898][T10827] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 343.168218][T10828] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1674'. [ 343.178316][T10830] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 343.187161][T10830] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 343.200083][T10829] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1674'. [ 343.835285][T10841] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 343.843057][T10841] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 343.865969][T10845] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 343.873998][T10845] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 343.885207][T10846] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 343.894030][T10846] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 343.903459][T10844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1677'. [ 343.914703][T10848] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 343.922160][T10848] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 344.147201][T10855] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 344.154774][T10855] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 344.185755][T10855] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 344.193653][T10855] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 345.294790][T10870] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1686'. [ 345.698609][T10879] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 345.705918][T10879] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 345.728904][T10881] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 345.736740][T10881] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 345.757182][T10879] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 345.764872][T10879] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 345.777044][T10881] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 345.787859][T10881] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 346.335217][T10894] netlink: 'syz.0.1698': attribute type 10 has an invalid length. [ 346.346979][T10894] syz_tun: entered promiscuous mode [ 346.462932][T10894] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 346.481604][T10897] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 346.494923][T10897] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 346.536707][T10897] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 346.544633][T10897] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 346.784232][T10902] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 346.792312][T10902] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 346.828536][T10902] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 346.836280][T10902] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 346.907225][T10907] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 346.915899][T10907] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 346.973374][T10907] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 346.982296][T10907] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 347.876521][T10923] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 347.887278][T10923] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 347.935328][T10924] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 347.966372][T10924] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 348.465496][T10932] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 348.502787][T10932] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 348.523033][T10939] __nla_validate_parse: 4 callbacks suppressed [ 348.523054][T10939] netlink: 16046 bytes leftover after parsing attributes in process `syz.0.1713'. [ 348.565369][T10938] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 348.597487][T10938] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 348.914730][T10943] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 348.930814][T10943] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 348.986418][T10944] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 349.010857][T10944] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 349.508918][T10949] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 349.523758][T10949] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 349.588127][T10953] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 349.595292][T10953] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 349.626450][T10952] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 349.637150][T10952] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 349.673145][T10952] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 349.687900][T10952] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 349.928855][T10960] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 349.936356][T10960] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 350.046473][T10960] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 350.056973][T10960] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 350.090293][T10963] netlink: 'syz.2.1719': attribute type 10 has an invalid length. [ 350.466125][T10970] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 350.485705][T10970] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 350.507915][T10974] netlink: 'syz.2.1723': attribute type 21 has an invalid length. [ 350.516990][T10974] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1723'. [ 350.543766][T10970] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 350.557846][T10970] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 351.379048][T10990] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.1730'. [ 351.513104][T10994] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 351.528332][T10994] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 351.584467][T10996] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 351.608884][T10996] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 352.222246][T10999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1732'. [ 352.338148][T11001] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 352.345404][T11001] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 352.415579][T11002] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 352.477664][T11002] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 353.154441][T11014] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 353.163328][T11014] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 353.223852][T11017] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 353.239372][T11017] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 353.276183][T11016] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 353.313259][T11016] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 353.371990][T11020] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 353.379790][T11020] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 353.431366][T11019] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 353.449422][T11019] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 353.508521][T11019] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 353.542377][T11019] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 353.594242][T11023] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 353.615821][T11023] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 353.722225][T11026] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 353.807838][T11026] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 354.198805][T11035] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 354.206296][T11035] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 354.274046][T11040] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 354.303572][T11040] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 354.570453][T11039] netlink: 'syz.0.1748': attribute type 10 has an invalid length. [ 354.580805][T11039] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1748'. [ 354.598017][T11039] hsr0: entered promiscuous mode [ 354.607359][T11039] bridge0: port 2(hsr0) entered blocking state [ 354.625301][T11039] bridge0: port 2(hsr0) entered disabled state [ 354.640298][T11039] hsr0: entered allmulticast mode [ 354.648302][T11039] hsr_slave_0: entered allmulticast mode [ 354.659181][T11039] hsr_slave_1: entered allmulticast mode [ 354.689212][T11039] bridge0: port 2(hsr0) entered blocking state [ 354.695967][T11039] bridge0: port 2(hsr0) entered forwarding state [ 355.118228][T11054] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 355.135249][T11054] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 355.253287][T11057] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 355.268911][T11057] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 355.361751][T11059] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 355.372409][T11059] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 355.406807][T11060] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 355.420009][T11060] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 355.573157][T11062] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 355.594548][T11062] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 355.630323][T11066] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1757'. [ 355.647896][T11066] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 355.691755][T11066] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 355.834129][T11067] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 355.858037][T11067] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 356.056153][T11072] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 356.089426][T11072] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 356.154651][T11076] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 356.180929][T11076] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 357.428082][T11088] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 357.434928][T11088] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 357.452834][T11085] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 357.460957][T11085] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 357.683951][T11093] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 357.695757][T11093] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 357.730568][T11093] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 357.740572][T11093] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 358.308378][T11109] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1771'. [ 358.681309][T11109] netlink: 'syz.0.1771': attribute type 10 has an invalid length. [ 358.720753][T11109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1771'. [ 358.784789][T11109] team0: entered promiscuous mode [ 358.804779][T11109] team_slave_1: entered promiscuous mode [ 358.837611][T11109] team0: entered allmulticast mode [ 358.843820][T11109] team_slave_1: entered allmulticast mode [ 358.957800][T11109] bond0: (slave team0): Releasing backup interface [ 359.094994][T11109] bridge0: port 3(team0) entered blocking state [ 359.146785][T11109] bridge0: port 3(team0) entered disabled state [ 359.297151][T11113] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.1773'. [ 359.685955][T11125] netlink: 'syz.0.1777': attribute type 4 has an invalid length. [ 359.702486][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1777'. [ 359.833557][T11127] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 359.877402][T11127] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 359.938001][T11131] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 359.967233][T11131] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 360.424932][T11139] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 360.431854][T11139] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 360.451487][T11140] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 360.461560][T11140] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 360.775622][T11147] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 360.783823][T11147] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 360.799637][T11145] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1781'. [ 360.825396][T11145] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1781'. [ 360.836690][T11149] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 360.845068][T11149] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 360.855835][T11145] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1781'. [ 360.878767][T11145] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1781'. [ 361.072453][T11155] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 361.088440][T11155] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 361.182601][T11158] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.1786'. [ 361.185874][T11159] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 361.207877][T11159] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 361.330957][T11162] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 361.346641][T11162] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 361.433028][T11164] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 361.440163][T11164] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 361.462842][T11164] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 361.470373][T11164] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 361.643754][T11168] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 361.662823][T11168] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 361.675795][T11169] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1790'. [ 361.705951][T11169] netlink: zone id is out of range [ 361.723603][T11169] netlink: zone id is out of range [ 361.742629][T11169] netlink: zone id is out of range [ 361.750265][T11169] netlink: zone id is out of range [ 361.755644][T11169] netlink: zone id is out of range [ 361.770071][T11169] netlink: zone id is out of range [ 361.775445][T11169] netlink: zone id is out of range [ 361.792470][T11169] netlink: zone id is out of range [ 361.802755][T11169] netlink: zone id is out of range [ 361.812142][T11169] netlink: zone id is out of range [ 361.826815][T11175] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 361.849804][T11175] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 361.884572][T11179] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 361.898780][T11179] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 362.186862][T11187] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 362.196866][T11187] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 362.216499][T11187] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 362.226510][T11187] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 362.742332][T11195] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 362.761313][T11195] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 362.797870][T11195] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 362.805535][T11195] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 363.140527][T11207] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 363.148673][T11207] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 363.249758][T11209] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 363.257968][T11209] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 363.378119][T11213] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 363.395504][T11213] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 363.415587][T11217] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 363.436410][T11217] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 363.676853][T11223] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 363.697480][T11219] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1802'. [ 363.708403][T11223] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 363.735481][T11226] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 363.742937][T11226] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 363.762336][T11222] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 363.771612][T11222] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 363.802557][T11227] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 363.811792][T11227] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 364.054893][T11229] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 364.074758][T11229] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 364.126556][T11235] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 364.138377][T11235] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 364.207038][T11238] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 364.214881][T11238] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 364.224114][T11229] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 364.232002][T11229] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 364.516065][T11245] netlink: 'syz.3.1819': attribute type 4 has an invalid length. [ 364.526013][T11245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1819'. [ 364.743215][T11248] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1811'. [ 365.145163][T11248] netlink: 'syz.1.1811': attribute type 10 has an invalid length. [ 365.158152][T11248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1811'. [ 365.304817][T11258] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1817'. [ 365.336717][T11260] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 365.344456][T11260] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 365.374209][T11260] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 365.384475][T11260] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 365.603245][T11267] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 365.735978][T11269] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1822'. [ 365.751611][T11269] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 369.005467][T11286] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1830'. [ 369.115886][T11284] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1828'. [ 369.130623][T11287] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 369.143126][T11287] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 369.153008][T11284] net_ratelimit: 734 callbacks suppressed [ 369.153042][T11284] netlink: zone id is out of range [ 369.168426][T11284] netlink: zone id is out of range [ 369.194846][T11284] netlink: zone id is out of range [ 369.239076][T11284] netlink: zone id is out of range [ 369.251703][T11284] netlink: zone id is out of range [ 369.268806][T11284] netlink: zone id is out of range [ 369.280317][T11291] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 369.292429][T11284] netlink: zone id is out of range [ 369.307878][T11291] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 369.314917][T11284] netlink: zone id is out of range [ 369.329263][T11284] netlink: zone id is out of range [ 369.338211][T11284] netlink: zone id is out of range [ 369.345000][T11286] netlink: 'syz.2.1830': attribute type 10 has an invalid length. [ 369.355001][T11286] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1830'. [ 369.365210][T11286] team0: entered promiscuous mode [ 369.373960][T11286] C: entered promiscuous mode [ 369.380363][T11286] team_slave_1: entered promiscuous mode [ 369.387349][T11286] netdevsim netdevsim2 ÿÿÿÿÿÿ: entered promiscuous mode [ 369.397321][T11286] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 369.412566][T11286] team0: entered allmulticast mode [ 369.419737][T11286] C: entered allmulticast mode [ 369.432612][T11286] team_slave_1: entered allmulticast mode [ 369.440374][T11286] netdevsim netdevsim2 ÿÿÿÿÿÿ: entered allmulticast mode [ 369.458402][T11286] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 369.480093][T11286] bridge0: port 3(team0) entered blocking state [ 369.495338][T11286] bridge0: port 3(team0) entered disabled state [ 369.530194][T11286] bridge0: port 3(team0) entered blocking state [ 369.536956][T11286] bridge0: port 3(team0) entered forwarding state [ 369.750925][T11297] À: port 1(vlan0) entered blocking state [ 369.757314][T11297] À: port 1(vlan0) entered disabled state [ 369.773843][T11297] vlan0: entered allmulticast mode [ 369.783692][T11297] veth0_vlan: entered allmulticast mode [ 369.801474][T11297] vlan0: entered promiscuous mode [ 370.570247][T11309] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 370.583418][T11307] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 370.592626][T11307] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 370.623858][T11307] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 370.635381][T11307] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 370.689387][T11310] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1835'. [ 370.702729][T11310] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 370.714018][T11310] CPU: 0 PID: 11310 Comm: syz.1.1835 Not tainted syzkaller #0 [ 370.721567][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 370.731896][T11310] Call Trace: [ 370.735190][T11310] [ 370.738129][T11310] dump_stack_lvl+0x18c/0x250 [ 370.742955][T11310] ? show_regs_print_info+0x20/0x20 [ 370.748164][T11310] ? load_image+0x420/0x420 [ 370.752718][T11310] sysfs_warn_dup+0x8e/0xa0 [ 370.757560][T11310] sysfs_do_create_link_sd+0xc0/0x110 [ 370.762983][T11310] device_add_class_symlinks+0x1cf/0x240 [ 370.768685][T11310] device_add+0x4f9/0xc40 [ 370.773173][T11310] wiphy_register+0x1d99/0x2ac0 [ 370.778191][T11310] ? cfg80211_event_work+0x40/0x40 [ 370.783318][T11310] ? minstrel_ht_alloc+0x88a/0x990 [ 370.788529][T11310] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 370.794722][T11310] ieee80211_register_hw+0x2dd8/0x3b30 [ 370.800373][T11310] ? ieee80211_register_hw+0xef1/0x3b30 [ 370.805965][T11310] ? ieee80211_tasklet_handler+0x20/0x20 [ 370.811627][T11310] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 370.817648][T11310] ? __debug_object_init+0xec/0x450 [ 370.822940][T11310] ? __asan_memset+0x22/0x40 [ 370.827617][T11310] ? __hrtimer_init+0x189/0x270 [ 370.832544][T11310] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 370.838348][T11310] ? mac80211_hwsim_free+0x220/0x220 [ 370.843648][T11310] ? rcu_is_watching+0x15/0xb0 [ 370.848418][T11310] ? kstrndup+0xbd/0x140 [ 370.852698][T11310] hwsim_new_radio_nl+0xdad/0x1a70 [ 370.857835][T11310] ? __nla_validate+0x50/0x50 [ 370.862584][T11310] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 370.868969][T11310] ? __nla_parse+0x40/0x50 [ 370.873426][T11310] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 370.879906][T11310] genl_family_rcv_msg_doit+0x21a/0x310 [ 370.885571][T11310] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 370.891506][T11310] ? bpf_lsm_capable+0x9/0x10 [ 370.896208][T11310] ? security_capable+0x89/0xb0 [ 370.901125][T11310] genl_rcv_msg+0x611/0x7a0 [ 370.905646][T11310] ? genl_bind+0x360/0x360 [ 370.910084][T11310] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 370.916450][T11310] ? ref_tracker_free+0x686/0x830 [ 370.921495][T11310] ? __kasan_kmalloc_large+0x8b/0xa0 [ 370.926859][T11310] netlink_rcv_skb+0x235/0x4c0 [ 370.931648][T11310] ? genl_bind+0x360/0x360 [ 370.936093][T11310] ? netlink_ack+0x1160/0x1160 [ 370.940978][T11310] ? __lock_acquire+0x7d80/0x7d80 [ 370.946035][T11310] ? down_read+0x1ac/0x2e0 [ 370.950488][T11310] genl_rcv+0x28/0x40 [ 370.954501][T11310] netlink_unicast+0x7b1/0x930 [ 370.959285][T11310] netlink_sendmsg+0x8d0/0xbf0 [ 370.964066][T11310] ? netlink_getsockopt+0x590/0x590 [ 370.969303][T11310] ? apparmor_socket_sendmsg+0x8e/0x330 [ 370.974959][T11310] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 370.980297][T11310] ? security_socket_sendmsg+0x80/0xa0 [ 370.985765][T11310] ? netlink_getsockopt+0x590/0x590 [ 370.990981][T11310] ____sys_sendmsg+0x61b/0x980 [ 370.995884][T11310] ? __asan_memset+0x22/0x40 [ 371.000490][T11310] ? __sys_sendmsg_sock+0x30/0x30 [ 371.005528][T11310] ? __import_iovec+0x5f2/0x850 [ 371.010409][T11310] ? import_iovec+0x73/0xa0 [ 371.014954][T11310] ___sys_sendmsg+0x2a6/0x360 [ 371.019668][T11310] ? __sys_sendmsg+0x2b0/0x2b0 [ 371.024584][T11310] ? trace_call_bpf+0xc3/0x6c0 [ 371.029423][T11310] __se_sys_sendmsg+0x1d0/0x2c0 [ 371.034331][T11310] ? perf_trace_preemptirq_template+0x269/0x330 [ 371.040598][T11310] ? __x64_sys_sendmsg+0x80/0x80 [ 371.045558][T11310] ? lockdep_hardirqs_on+0x98/0x150 [ 371.050767][T11310] do_syscall_64+0x55/0xb0 [ 371.055188][T11310] ? clear_bhb_loop+0x40/0x90 [ 371.059946][T11310] ? clear_bhb_loop+0x40/0x90 [ 371.064629][T11310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.070635][T11310] RIP: 0033:0x7faf1159de59 [ 371.075079][T11310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.094696][T11310] RSP: 002b:00007faf124f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.103119][T11310] RAX: ffffffffffffffda RBX: 00007faf11826090 RCX: 00007faf1159de59 [ 371.111134][T11310] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 371.119127][T11310] RBP: 00007faf11633e6f R08: 0000000000000000 R09: 0000000000000000 [ 371.127125][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.135108][T11310] R13: 00007faf11826128 R14: 00007faf11826090 R15: 00007ffc77750878 [ 371.143108][T11310] [ 371.672390][T11320] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1839'. [ 372.080843][T11322] netlink: 'syz.2.1838': attribute type 10 has an invalid length. [ 372.089329][T11322] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1838'. [ 372.983868][T11342] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 373.115408][T11344] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1847'. [ 373.142357][T11344] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 373.806973][T11347] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 373.820699][T11347] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 373.855419][T11351] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 373.884225][T11351] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 374.114975][T11358] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1853'. [ 374.297020][T11365] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1865'. [ 375.227292][T11367] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1868'. [ 375.244953][T11367] net_ratelimit: 238 callbacks suppressed [ 375.244973][T11367] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 375.309109][ T5082] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 375.327358][T11367] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 375.406555][T11374] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 375.413868][T11374] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 375.436487][T11374] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 375.444309][T11374] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 375.601905][T11380] netlink: 'syz.1.1860': attribute type 21 has an invalid length. [ 375.614015][T11380] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1860'. [ 377.155749][T11401] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1871'. [ 377.203981][T11401] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 377.222667][T11401] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 377.985113][T11416] netlink: 'syz.1.1872': attribute type 10 has an invalid length. [ 378.174518][T11416] syz_tun: left allmulticast mode [ 378.206082][T11416] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 378.296488][T11420] netlink: 'syz.0.1875': attribute type 21 has an invalid length. [ 378.318385][T11420] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1875'. [ 378.938717][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.945181][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.441818][T11481] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1901'. [ 381.551456][T11481] syz.1.1901[11481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 381.552474][T11481] syz.1.1901[11481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.126255][T11495] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 382.168738][T11495] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 382.207957][T11501] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 382.215450][T11501] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 383.064690][T11520] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 383.077926][T11520] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 383.139408][T11523] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 383.146512][T11523] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 384.134947][T11555] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 384.152864][T11555] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 384.209721][T11557] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 384.222868][T11557] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 384.231995][ T5082] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 385.696907][T11585] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 385.711851][T11585] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 385.741632][T11585] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 385.760954][T11585] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 387.151865][T11612] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 387.159759][T11612] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 387.193158][T11612] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 387.207619][T11612] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 387.504031][T11615] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 387.519918][T11615] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 387.593287][T11623] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 387.613552][T11623] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 389.523454][T11672] netlink: 'syz.3.1977': attribute type 10 has an invalid length. [ 389.537930][T11672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1977'. [ 391.580321][T11728] netlink: 'syz.2.1994': attribute type 10 has an invalid length. [ 391.596698][T11728] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1994'. [ 392.352661][T11749] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2007'. [ 392.374225][T11749] netlink: del zone limit has 8 unknown bytes [ 392.560756][ T5082] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 392.966710][T11765] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 392.974515][T11765] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 393.006322][T11765] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 393.015609][T11765] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 393.495844][T11782] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2019'. [ 393.522926][T11782] netlink: del zone limit has 8 unknown bytes [ 393.907025][T11793] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 393.927895][T11793] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 393.960253][T11793] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 393.972465][T11793] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 394.561317][T11806] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2029'. [ 394.583772][T11806] netlink: del zone limit has 8 unknown bytes [ 394.857816][ T5082] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 395.617337][T11837] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2042'. [ 395.628296][T11837] netlink: zone id is out of range [ 395.633753][T11837] netlink: zone id is out of range [ 395.640335][T11837] netlink: zone id is out of range [ 395.647056][T11837] netlink: zone id is out of range [ 395.658528][T11837] netlink: zone id is out of range [ 395.664089][T11837] netlink: zone id is out of range [ 395.670311][T11837] netlink: zone id is out of range [ 396.328824][ T5082] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 396.809528][T11858] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2051'. [ 397.217289][T11866] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 397.240100][T11866] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 397.285937][T11875] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 397.303208][T11875] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 397.995499][T11900] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2063'. [ 398.005847][T11900] net_ratelimit: 489 callbacks suppressed [ 398.005863][T11900] netlink: zone id is out of range [ 398.017652][T11900] netlink: zone id is out of range [ 398.022929][T11900] netlink: zone id is out of range [ 398.032467][T11900] netlink: zone id is out of range [ 398.039517][T11900] netlink: zone id is out of range [ 398.044836][T11900] netlink: zone id is out of range [ 398.051116][T11900] netlink: zone id is out of range [ 398.056437][T11900] netlink: zone id is out of range [ 398.066353][T11900] netlink: zone id is out of range [ 398.077308][T11900] netlink: zone id is out of range [ 399.004037][T11926] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2072'. [ 399.032380][T11926] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 399.045378][T11926] CPU: 1 PID: 11926 Comm: syz.3.2072 Not tainted syzkaller #0 [ 399.052909][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 399.063441][T11926] Call Trace: [ 399.066732][T11926] [ 399.069675][T11926] dump_stack_lvl+0x18c/0x250 [ 399.074416][T11926] ? show_regs_print_info+0x20/0x20 [ 399.079638][T11926] ? load_image+0x420/0x420 [ 399.084178][T11926] sysfs_warn_dup+0x8e/0xa0 [ 399.088718][T11926] sysfs_do_create_link_sd+0xc0/0x110 [ 399.094138][T11926] device_add_class_symlinks+0x1cf/0x240 [ 399.099799][T11926] device_add+0x4f9/0xc40 [ 399.104185][T11926] wiphy_register+0x1d99/0x2ac0 [ 399.109100][T11926] ? cfg80211_event_work+0x40/0x40 [ 399.114230][T11926] ? minstrel_ht_alloc+0x88a/0x990 [ 399.119378][T11926] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 399.125498][T11926] ieee80211_register_hw+0x2dd8/0x3b30 [ 399.130992][T11926] ? ieee80211_register_hw+0xef1/0x3b30 [ 399.136588][T11926] ? ieee80211_tasklet_handler+0x20/0x20 [ 399.142250][T11926] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 399.148349][T11926] ? __debug_object_init+0xec/0x450 [ 399.153578][T11926] ? __asan_memset+0x22/0x40 [ 399.158235][T11926] ? __hrtimer_init+0x189/0x270 [ 399.163114][T11926] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 399.168916][T11926] ? mac80211_hwsim_free+0x220/0x220 [ 399.174259][T11926] ? rcu_is_watching+0x15/0xb0 [ 399.179079][T11926] ? kstrndup+0xbd/0x140 [ 399.183379][T11926] hwsim_new_radio_nl+0xdad/0x1a70 [ 399.188521][T11926] ? __nla_validate+0x50/0x50 [ 399.193356][T11926] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 399.199987][T11926] ? __nla_parse+0x40/0x50 [ 399.204456][T11926] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 399.210824][T11926] genl_family_rcv_msg_doit+0x21a/0x310 [ 399.216411][T11926] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 399.222343][T11926] ? bpf_lsm_capable+0x9/0x10 [ 399.227049][T11926] ? security_capable+0x89/0xb0 [ 399.231957][T11926] genl_rcv_msg+0x611/0x7a0 [ 399.236516][T11926] ? genl_bind+0x360/0x360 [ 399.240984][T11926] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 399.247365][T11926] ? ref_tracker_free+0x686/0x830 [ 399.252440][T11926] ? __kasan_kmalloc_large+0x8b/0xa0 [ 399.257843][T11926] netlink_rcv_skb+0x235/0x4c0 [ 399.262637][T11926] ? genl_bind+0x360/0x360 [ 399.267081][T11926] ? netlink_ack+0x1160/0x1160 [ 399.271883][T11926] ? __lock_acquire+0x7d80/0x7d80 [ 399.276938][T11926] ? down_read+0x1ac/0x2e0 [ 399.281407][T11926] genl_rcv+0x28/0x40 [ 399.285606][T11926] netlink_unicast+0x7b1/0x930 [ 399.290440][T11926] netlink_sendmsg+0x8d0/0xbf0 [ 399.295241][T11926] ? netlink_getsockopt+0x590/0x590 [ 399.300569][T11926] ? apparmor_socket_sendmsg+0x8e/0x330 [ 399.306222][T11926] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 399.311544][T11926] ? security_socket_sendmsg+0x80/0xa0 [ 399.317122][T11926] ? netlink_getsockopt+0x590/0x590 [ 399.322341][T11926] ____sys_sendmsg+0x61b/0x980 [ 399.327134][T11926] ? __asan_memset+0x22/0x40 [ 399.331744][T11926] ? __sys_sendmsg_sock+0x30/0x30 [ 399.336800][T11926] ? __import_iovec+0x5f2/0x850 [ 399.341680][T11926] ? import_iovec+0x73/0xa0 [ 399.346204][T11926] ___sys_sendmsg+0x2a6/0x360 [ 399.350912][T11926] ? __sys_sendmsg+0x2b0/0x2b0 [ 399.355713][T11926] ? trace_call_bpf+0xc3/0x6c0 [ 399.360525][T11926] __se_sys_sendmsg+0x1d0/0x2c0 [ 399.365400][T11926] ? perf_trace_preemptirq_template+0x269/0x330 [ 399.371666][T11926] ? __x64_sys_sendmsg+0x80/0x80 [ 399.376642][T11926] ? lockdep_hardirqs_on+0x98/0x150 [ 399.381868][T11926] do_syscall_64+0x55/0xb0 [ 399.386335][T11926] ? clear_bhb_loop+0x40/0x90 [ 399.391030][T11926] ? clear_bhb_loop+0x40/0x90 [ 399.395727][T11926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.401674][T11926] RIP: 0033:0x7f6283b9de59 [ 399.406127][T11926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.425760][T11926] RSP: 002b:00007f6284b39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.434195][T11926] RAX: ffffffffffffffda RBX: 00007f6283e25fa0 RCX: 00007f6283b9de59 [ 399.442182][T11926] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 399.450170][T11926] RBP: 00007f6283c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 399.458326][T11926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.466414][T11926] R13: 00007f6283e26038 R14: 00007f6283e25fa0 R15: 00007ffcc7b38818 [ 399.474417][T11926] [ 399.782565][T11937] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 399.790323][T11937] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 399.821825][T11937] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 399.829628][T11937] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 400.170367][T11947] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2088'. [ 400.192708][T11947] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 400.204841][T11947] CPU: 1 PID: 11947 Comm: syz.0.2088 Not tainted syzkaller #0 [ 400.212381][T11947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 400.222545][T11947] Call Trace: [ 400.225835][T11947] [ 400.228775][T11947] dump_stack_lvl+0x18c/0x250 [ 400.233517][T11947] ? show_regs_print_info+0x20/0x20 [ 400.238740][T11947] ? load_image+0x420/0x420 [ 400.243274][T11947] sysfs_warn_dup+0x8e/0xa0 [ 400.247791][T11947] sysfs_do_create_link_sd+0xc0/0x110 [ 400.253269][T11947] device_add_class_symlinks+0x1cf/0x240 [ 400.259017][T11947] device_add+0x4f9/0xc40 [ 400.263540][T11947] wiphy_register+0x1d99/0x2ac0 [ 400.268420][T11947] ? cfg80211_event_work+0x40/0x40 [ 400.273570][T11947] ? minstrel_ht_alloc+0x88a/0x990 [ 400.278718][T11947] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 400.284894][T11947] ieee80211_register_hw+0x2dd8/0x3b30 [ 400.290374][T11947] ? ieee80211_register_hw+0xef1/0x3b30 [ 400.296224][T11947] ? ieee80211_tasklet_handler+0x20/0x20 [ 400.301895][T11947] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 400.307819][T11947] ? __debug_object_init+0xec/0x450 [ 400.313067][T11947] ? __asan_memset+0x22/0x40 [ 400.317696][T11947] ? __hrtimer_init+0x189/0x270 [ 400.322590][T11947] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 400.328358][T11947] ? mac80211_hwsim_free+0x220/0x220 [ 400.333681][T11947] ? rcu_is_watching+0x15/0xb0 [ 400.338471][T11947] ? kstrndup+0xbd/0x140 [ 400.342745][T11947] hwsim_new_radio_nl+0xdad/0x1a70 [ 400.347894][T11947] ? __nla_validate+0x50/0x50 [ 400.352613][T11947] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 400.358979][T11947] ? __nla_parse+0x40/0x50 [ 400.363417][T11947] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 400.369767][T11947] genl_family_rcv_msg_doit+0x21a/0x310 [ 400.375347][T11947] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 400.381730][T11947] ? bpf_lsm_capable+0x9/0x10 [ 400.386429][T11947] ? security_capable+0x89/0xb0 [ 400.391301][T11947] genl_rcv_msg+0x611/0x7a0 [ 400.395837][T11947] ? genl_bind+0x360/0x360 [ 400.400272][T11947] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 400.406727][T11947] netlink_rcv_skb+0x235/0x4c0 [ 400.411517][T11947] ? genl_bind+0x360/0x360 [ 400.415965][T11947] ? netlink_ack+0x1160/0x1160 [ 400.420781][T11947] ? __lock_acquire+0x7d80/0x7d80 [ 400.425919][T11947] ? net_generic+0x1e/0x240 [ 400.430454][T11947] ? down_read+0x1ac/0x2e0 [ 400.434928][T11947] genl_rcv+0x28/0x40 [ 400.438953][T11947] netlink_unicast+0x7b1/0x930 [ 400.443749][T11947] netlink_sendmsg+0x8d0/0xbf0 [ 400.448573][T11947] ? netlink_getsockopt+0x590/0x590 [ 400.453805][T11947] ? apparmor_socket_sendmsg+0x8e/0x330 [ 400.459380][T11947] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 400.464687][T11947] ? security_socket_sendmsg+0x80/0xa0 [ 400.470192][T11947] ? netlink_getsockopt+0x590/0x590 [ 400.475419][T11947] ____sys_sendmsg+0x61b/0x980 [ 400.480239][T11947] ? __asan_memset+0x22/0x40 [ 400.484845][T11947] ? __sys_sendmsg_sock+0x30/0x30 [ 400.489887][T11947] ? __import_iovec+0x5f2/0x850 [ 400.494764][T11947] ? import_iovec+0x73/0xa0 [ 400.499305][T11947] ___sys_sendmsg+0x2a6/0x360 [ 400.504004][T11947] ? __sys_sendmsg+0x2b0/0x2b0 [ 400.508803][T11947] ? trace_call_bpf+0xc3/0x6c0 [ 400.513628][T11947] __se_sys_sendmsg+0x1d0/0x2c0 [ 400.518523][T11947] ? perf_trace_preemptirq_template+0x269/0x330 [ 400.524812][T11947] ? __x64_sys_sendmsg+0x80/0x80 [ 400.529874][T11947] ? lockdep_hardirqs_on+0x98/0x150 [ 400.535122][T11947] do_syscall_64+0x55/0xb0 [ 400.539563][T11947] ? clear_bhb_loop+0x40/0x90 [ 400.544249][T11947] ? clear_bhb_loop+0x40/0x90 [ 400.548956][T11947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.554882][T11947] RIP: 0033:0x7f11ec59de59 [ 400.559309][T11947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.579024][T11947] RSP: 002b:00007f11ed54e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.587458][T11947] RAX: ffffffffffffffda RBX: 00007f11ec825fa0 RCX: 00007f11ec59de59 [ 400.595460][T11947] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 400.603462][T11947] RBP: 00007f11ec633e6f R08: 0000000000000000 R09: 0000000000000000 [ 400.611451][T11947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.619443][T11947] R13: 00007f11ec826038 R14: 00007f11ec825fa0 R15: 00007ffe9bc1ad18 [ 400.627625][T11947] [ 401.043128][T11966] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 401.058599][T11966] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 401.086579][T11968] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 401.110005][T11968] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 401.166710][T11966] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 401.188720][T11966] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 401.204555][T11971] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 401.223876][T11971] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 401.536707][T11987] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2097'. [ 402.125108][T12002] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 402.142275][T12002] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 402.181881][T12007] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 402.198707][T12007] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 402.523585][T12012] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2106'. [ 402.623773][T12013] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 402.633790][T12013] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 402.800033][T12018] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 402.829410][T12018] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 403.031486][T12033] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 403.056844][T12033] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 403.096888][T12036] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 403.104669][T12036] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 403.307166][T12043] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2118'. [ 403.319324][T12043] net_ratelimit: 734 callbacks suppressed [ 403.319346][T12043] netlink: zone id is out of range [ 403.331714][T12043] netlink: zone id is out of range [ 403.337208][T12043] netlink: zone id is out of range [ 403.343125][T12043] netlink: zone id is out of range [ 403.353945][T12043] netlink: zone id is out of range [ 403.360908][T12043] netlink: zone id is out of range [ 403.373180][T12043] netlink: zone id is out of range [ 403.379478][T12043] netlink: zone id is out of range [ 403.385070][T12043] netlink: zone id is out of range [ 403.400486][T12043] netlink: zone id is out of range [ 403.936025][T12066] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2124'. [ 403.980678][T12066] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 404.052283][T12066] CPU: 1 PID: 12066 Comm: syz.3.2124 Not tainted syzkaller #0 [ 404.059825][T12066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 404.069918][T12066] Call Trace: [ 404.073223][T12066] [ 404.076182][T12066] dump_stack_lvl+0x18c/0x250 [ 404.080910][T12066] ? show_regs_print_info+0x20/0x20 [ 404.086160][T12066] ? load_image+0x420/0x420 [ 404.090713][T12066] sysfs_warn_dup+0x8e/0xa0 [ 404.095247][T12066] sysfs_do_create_link_sd+0xc0/0x110 [ 404.100698][T12066] device_add_class_symlinks+0x1cf/0x240 [ 404.106374][T12066] device_add+0x4f9/0xc40 [ 404.110738][T12066] wiphy_register+0x1d99/0x2ac0 [ 404.115664][T12066] ? cfg80211_event_work+0x40/0x40 [ 404.120807][T12066] ? minstrel_ht_alloc+0x88a/0x990 [ 404.125968][T12066] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 404.132079][T12066] ieee80211_register_hw+0x2dd8/0x3b30 [ 404.137587][T12066] ? ieee80211_register_hw+0xef1/0x3b30 [ 404.143263][T12066] ? ieee80211_tasklet_handler+0x20/0x20 [ 404.149021][T12066] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 404.155152][T12066] ? __debug_object_init+0xec/0x450 [ 404.160411][T12066] ? __asan_memset+0x22/0x40 [ 404.165042][T12066] ? __hrtimer_init+0x189/0x270 [ 404.169945][T12066] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 404.175732][T12066] ? mac80211_hwsim_free+0x220/0x220 [ 404.181052][T12066] ? rcu_is_watching+0x15/0xb0 [ 404.185862][T12066] ? kstrndup+0xbd/0x140 [ 404.190169][T12066] hwsim_new_radio_nl+0xdad/0x1a70 [ 404.195331][T12066] ? __nla_validate+0x50/0x50 [ 404.200056][T12066] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 404.206479][T12066] ? __nla_parse+0x40/0x50 [ 404.210933][T12066] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 404.217414][T12066] genl_family_rcv_msg_doit+0x21a/0x310 [ 404.223033][T12066] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 404.228978][T12066] ? bpf_lsm_capable+0x9/0x10 [ 404.233795][T12066] ? security_capable+0x89/0xb0 [ 404.238682][T12066] genl_rcv_msg+0x611/0x7a0 [ 404.243262][T12066] ? genl_bind+0x360/0x360 [ 404.247720][T12066] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 404.254103][T12066] ? ref_tracker_free+0x686/0x830 [ 404.259193][T12066] ? __kasan_kmalloc_large+0x8b/0xa0 [ 404.264538][T12066] netlink_rcv_skb+0x235/0x4c0 [ 404.269354][T12066] ? genl_bind+0x360/0x360 [ 404.273852][T12066] ? netlink_ack+0x1160/0x1160 [ 404.278669][T12066] ? __lock_acquire+0x7d80/0x7d80 [ 404.283736][T12066] ? down_read+0x1ac/0x2e0 [ 404.288324][T12066] genl_rcv+0x28/0x40 [ 404.292627][T12066] netlink_unicast+0x7b1/0x930 [ 404.297439][T12066] netlink_sendmsg+0x8d0/0xbf0 [ 404.302283][T12066] ? netlink_getsockopt+0x590/0x590 [ 404.307522][T12066] ? apparmor_socket_sendmsg+0x8e/0x330 [ 404.313110][T12066] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 404.318431][T12066] ? security_socket_sendmsg+0x80/0xa0 [ 404.323950][T12066] ? netlink_getsockopt+0x590/0x590 [ 404.329191][T12066] ____sys_sendmsg+0x61b/0x980 [ 404.334000][T12066] ? __asan_memset+0x22/0x40 [ 404.338627][T12066] ? __sys_sendmsg_sock+0x30/0x30 [ 404.343876][T12066] ? __import_iovec+0x5f2/0x850 [ 404.348773][T12066] ? import_iovec+0x73/0xa0 [ 404.353483][T12066] ___sys_sendmsg+0x2a6/0x360 [ 404.358203][T12066] ? __sys_sendmsg+0x2b0/0x2b0 [ 404.363045][T12066] ? trace_call_bpf+0xc3/0x6c0 [ 404.367872][T12066] __se_sys_sendmsg+0x1d0/0x2c0 [ 404.372860][T12066] ? perf_trace_preemptirq_template+0x269/0x330 [ 404.379139][T12066] ? __x64_sys_sendmsg+0x80/0x80 [ 404.384130][T12066] ? lockdep_hardirqs_on+0x98/0x150 [ 404.389403][T12066] do_syscall_64+0x55/0xb0 [ 404.393868][T12066] ? clear_bhb_loop+0x40/0x90 [ 404.398585][T12066] ? clear_bhb_loop+0x40/0x90 [ 404.403287][T12066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.409236][T12066] RIP: 0033:0x7f6283b9de59 [ 404.413686][T12066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.433777][T12066] RSP: 002b:00007f6284af7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.442685][T12066] RAX: ffffffffffffffda RBX: 00007f6283e26180 RCX: 00007f6283b9de59 [ 404.450884][T12066] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 404.458979][T12066] RBP: 00007f6283c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 404.467421][T12066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.480197][T12066] R13: 00007f6283e26218 R14: 00007f6283e26180 R15: 00007ffcc7b38818 [ 404.488221][T12066] [ 404.724010][T12069] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2128'. [ 405.283390][T12093] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 405.290640][T12093] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 405.311084][T12093] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 405.318693][T12093] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 405.535509][T12098] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2139'. [ 405.559882][T12098] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 405.569002][T12098] CPU: 1 PID: 12098 Comm: syz.3.2139 Not tainted syzkaller #0 [ 405.576796][T12098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 405.586971][T12098] Call Trace: [ 405.590267][T12098] [ 405.593238][T12098] dump_stack_lvl+0x18c/0x250 [ 405.597936][T12098] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 405.604177][T12098] ? show_regs_print_info+0x20/0x20 [ 405.609520][T12098] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 405.615729][T12098] sysfs_warn_dup+0x8e/0xa0 [ 405.620253][T12098] sysfs_do_create_link_sd+0xc0/0x110 [ 405.625653][T12098] device_add_class_symlinks+0x1cf/0x240 [ 405.631503][T12098] device_add+0x4f9/0xc40 [ 405.635887][T12098] wiphy_register+0x1d99/0x2ac0 [ 405.640813][T12098] ? cfg80211_event_work+0x40/0x40 [ 405.645972][T12098] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 405.652079][T12098] ieee80211_register_hw+0x2dd8/0x3b30 [ 405.657577][T12098] ? ieee80211_register_hw+0xef1/0x3b30 [ 405.663156][T12098] ? ieee80211_tasklet_handler+0x20/0x20 [ 405.668836][T12098] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 405.674780][T12098] ? __debug_object_init+0xec/0x450 [ 405.679997][T12098] ? __asan_memset+0x22/0x40 [ 405.684613][T12098] ? __hrtimer_init+0x189/0x270 [ 405.689481][T12098] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 405.695297][T12098] ? mac80211_hwsim_free+0x220/0x220 [ 405.700626][T12098] ? rcu_is_watching+0x15/0xb0 [ 405.705406][T12098] ? kstrndup+0xbd/0x140 [ 405.709932][T12098] hwsim_new_radio_nl+0xdad/0x1a70 [ 405.715074][T12098] ? __nla_validate+0x50/0x50 [ 405.719782][T12098] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 405.726143][T12098] ? __nla_parse+0x40/0x50 [ 405.730608][T12098] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 405.736960][T12098] genl_family_rcv_msg_doit+0x21a/0x310 [ 405.742533][T12098] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 405.748453][T12098] ? bpf_lsm_capable+0x9/0x10 [ 405.753230][T12098] ? security_capable+0x89/0xb0 [ 405.758110][T12098] genl_rcv_msg+0x611/0x7a0 [ 405.762647][T12098] ? genl_bind+0x360/0x360 [ 405.767097][T12098] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 405.773099][T12098] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 405.779520][T12098] ? ref_tracker_free+0x686/0x830 [ 405.784594][T12098] netlink_rcv_skb+0x235/0x4c0 [ 405.789387][T12098] ? genl_bind+0x360/0x360 [ 405.793821][T12098] ? netlink_ack+0x1160/0x1160 [ 405.798623][T12098] ? __lock_acquire+0x7d80/0x7d80 [ 405.803679][T12098] ? down_read+0x1ac/0x2e0 [ 405.808132][T12098] genl_rcv+0x28/0x40 [ 405.812693][T12098] netlink_unicast+0x7b1/0x930 [ 405.817488][T12098] netlink_sendmsg+0x8d0/0xbf0 [ 405.822294][T12098] ? netlink_getsockopt+0x590/0x590 [ 405.827537][T12098] ? apparmor_socket_sendmsg+0x8e/0x330 [ 405.833107][T12098] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 405.838406][T12098] ? security_socket_sendmsg+0x80/0xa0 [ 405.843882][T12098] ? netlink_getsockopt+0x590/0x590 [ 405.849101][T12098] ____sys_sendmsg+0x61b/0x980 [ 405.853919][T12098] ? __asan_memset+0x22/0x40 [ 405.858522][T12098] ? __sys_sendmsg_sock+0x30/0x30 [ 405.863559][T12098] ? __import_iovec+0x5f2/0x850 [ 405.868431][T12098] ? import_iovec+0x73/0xa0 [ 405.872954][T12098] ___sys_sendmsg+0x2a6/0x360 [ 405.877653][T12098] ? __sys_sendmsg+0x2b0/0x2b0 [ 405.882454][T12098] ? trace_call_bpf+0xc3/0x6c0 [ 405.887266][T12098] __se_sys_sendmsg+0x1d0/0x2c0 [ 405.892140][T12098] ? perf_trace_preemptirq_template+0x269/0x330 [ 405.898404][T12098] ? __x64_sys_sendmsg+0x80/0x80 [ 405.903377][T12098] ? lockdep_hardirqs_on+0x98/0x150 [ 405.908608][T12098] do_syscall_64+0x55/0xb0 [ 405.913051][T12098] ? clear_bhb_loop+0x40/0x90 [ 405.917736][T12098] ? clear_bhb_loop+0x40/0x90 [ 405.922432][T12098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.928345][T12098] RIP: 0033:0x7f6283b9de59 [ 405.932771][T12098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.952394][T12098] RSP: 002b:00007f6284b18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.960826][T12098] RAX: ffffffffffffffda RBX: 00007f6283e26090 RCX: 00007f6283b9de59 [ 405.968804][T12098] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 405.976780][T12098] RBP: 00007f6283c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 405.984767][T12098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.992925][T12098] R13: 00007f6283e26128 R14: 00007f6283e26090 R15: 00007ffcc7b38818 [ 406.000951][T12098] [ 407.163028][T12130] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2153'. [ 407.180970][T12130] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 407.192613][T12130] CPU: 1 PID: 12130 Comm: syz.0.2153 Not tainted syzkaller #0 [ 407.200150][T12130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 407.210333][T12130] Call Trace: [ 407.213650][T12130] [ 407.216621][T12130] dump_stack_lvl+0x18c/0x250 [ 407.221470][T12130] ? show_regs_print_info+0x20/0x20 [ 407.226733][T12130] ? load_image+0x420/0x420 [ 407.231481][T12130] sysfs_warn_dup+0x8e/0xa0 [ 407.236859][T12130] sysfs_do_create_link_sd+0xc0/0x110 [ 407.242922][T12130] device_add_class_symlinks+0x1cf/0x240 [ 407.248627][T12130] device_add+0x4f9/0xc40 [ 407.253282][T12130] wiphy_register+0x1d99/0x2ac0 [ 407.258239][T12130] ? cfg80211_event_work+0x40/0x40 [ 407.263395][T12130] ? minstrel_ht_alloc+0x88a/0x990 [ 407.268575][T12130] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 407.274692][T12130] ieee80211_register_hw+0x2dd8/0x3b30 [ 407.280194][T12130] ? ieee80211_register_hw+0xef1/0x3b30 [ 407.285785][T12130] ? ieee80211_tasklet_handler+0x20/0x20 [ 407.291441][T12130] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 407.297394][T12130] ? __debug_object_init+0xec/0x450 [ 407.302645][T12130] ? __asan_memset+0x22/0x40 [ 407.307289][T12130] ? __hrtimer_init+0x189/0x270 [ 407.312212][T12130] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 407.318011][T12130] ? mac80211_hwsim_free+0x220/0x220 [ 407.323399][T12130] ? rcu_is_watching+0x15/0xb0 [ 407.328300][T12130] ? kstrndup+0xbd/0x140 [ 407.332608][T12130] hwsim_new_radio_nl+0xdad/0x1a70 [ 407.337787][T12130] ? __nla_validate+0x50/0x50 [ 407.342528][T12130] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 407.348969][T12130] ? __nla_parse+0x40/0x50 [ 407.353454][T12130] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 407.359834][T12130] genl_family_rcv_msg_doit+0x21a/0x310 [ 407.365449][T12130] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 407.371407][T12130] ? bpf_lsm_capable+0x9/0x10 [ 407.376142][T12130] ? security_capable+0x89/0xb0 [ 407.381052][T12130] genl_rcv_msg+0x611/0x7a0 [ 407.385621][T12130] ? genl_bind+0x360/0x360 [ 407.390087][T12130] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 407.396527][T12130] netlink_rcv_skb+0x235/0x4c0 [ 407.401347][T12130] ? genl_bind+0x360/0x360 [ 407.405854][T12130] ? netlink_ack+0x1160/0x1160 [ 407.410689][T12130] ? __lock_acquire+0x7d80/0x7d80 [ 407.415770][T12130] ? net_generic+0x1e/0x240 [ 407.420345][T12130] ? down_read+0x1ac/0x2e0 [ 407.424812][T12130] genl_rcv+0x28/0x40 [ 407.428836][T12130] netlink_unicast+0x7b1/0x930 [ 407.433669][T12130] netlink_sendmsg+0x8d0/0xbf0 [ 407.438498][T12130] ? netlink_getsockopt+0x590/0x590 [ 407.443750][T12130] ? apparmor_socket_sendmsg+0x8e/0x330 [ 407.449366][T12130] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 407.454694][T12130] ? security_socket_sendmsg+0x80/0xa0 [ 407.460220][T12130] ? netlink_getsockopt+0x590/0x590 [ 407.465479][T12130] ____sys_sendmsg+0x61b/0x980 [ 407.470306][T12130] ? __asan_memset+0x22/0x40 [ 407.474944][T12130] ? __sys_sendmsg_sock+0x30/0x30 [ 407.480016][T12130] ? __import_iovec+0x5f2/0x850 [ 407.484922][T12130] ? import_iovec+0x73/0xa0 [ 407.489477][T12130] ___sys_sendmsg+0x2a6/0x360 [ 407.494210][T12130] ? __sys_sendmsg+0x2b0/0x2b0 [ 407.499047][T12130] ? trace_call_bpf+0xc3/0x6c0 [ 407.503903][T12130] __se_sys_sendmsg+0x1d0/0x2c0 [ 407.508891][T12130] ? perf_trace_preemptirq_template+0x269/0x330 [ 407.515191][T12130] ? __x64_sys_sendmsg+0x80/0x80 [ 407.520207][T12130] ? lockdep_hardirqs_on+0x98/0x150 [ 407.525466][T12130] do_syscall_64+0x55/0xb0 [ 407.529938][T12130] ? clear_bhb_loop+0x40/0x90 [ 407.534700][T12130] ? clear_bhb_loop+0x40/0x90 [ 407.539618][T12130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.545578][T12130] RIP: 0033:0x7f11ec59de59 [ 407.550052][T12130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.569868][T12130] RSP: 002b:00007f11ed54e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.578325][T12130] RAX: ffffffffffffffda RBX: 00007f11ec825fa0 RCX: 00007f11ec59de59 [ 407.586340][T12130] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 407.594348][T12130] RBP: 00007f11ec633e6f R08: 0000000000000000 R09: 0000000000000000 [ 407.602358][T12130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.610368][T12130] R13: 00007f11ec826038 R14: 00007f11ec825fa0 R15: 00007ffe9bc1ad18 [ 407.618400][T12130] [ 408.472976][T12163] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 408.480160][T12163] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 408.511214][T12163] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 408.523584][T12163] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 408.650676][T12170] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2169'. [ 408.670378][T12170] net_ratelimit: 486 callbacks suppressed [ 408.670534][T12170] netlink: zone id is out of range [ 408.686899][T12170] netlink: zone id is out of range [ 408.697875][T12170] netlink: zone id is out of range [ 408.703974][T12170] netlink: zone id is out of range [ 408.712926][T12170] netlink: zone id is out of range [ 408.720779][T12170] netlink: zone id is out of range [ 408.726441][T12170] netlink: zone id is out of range [ 408.737399][T12170] netlink: zone id is out of range [ 408.747886][T12170] netlink: zone id is out of range [ 408.754683][T12170] netlink: zone id is out of range [ 409.161261][ T5082] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 409.407314][T12192] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 409.417058][T12192] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 409.472188][T12198] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 409.487782][T12198] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 409.590479][T12200] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2182'. [ 409.702608][ T5082] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 409.820073][T12213] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2194'. [ 410.328679][T12227] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 410.337997][T12227] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 410.403128][T12228] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 410.412067][T12228] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 410.550718][ T5082] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 410.619673][T12234] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2197'. [ 411.409561][T12259] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2208'. [ 412.294009][T12285] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2219'. [ 412.319651][T12284] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 412.333445][T12284] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 412.390104][T12287] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 412.397173][T12287] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 413.171101][T12310] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2227'. [ 413.252369][T12310] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 413.264994][T12310] CPU: 1 PID: 12310 Comm: syz.0.2227 Not tainted syzkaller #0 [ 413.272500][T12310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 413.282583][T12310] Call Trace: [ 413.285880][T12310] [ 413.288823][T12310] dump_stack_lvl+0x18c/0x250 [ 413.293543][T12310] ? show_regs_print_info+0x20/0x20 [ 413.298773][T12310] ? load_image+0x420/0x420 [ 413.303308][T12310] sysfs_warn_dup+0x8e/0xa0 [ 413.307827][T12310] sysfs_do_create_link_sd+0xc0/0x110 [ 413.313219][T12310] device_add_class_symlinks+0x1cf/0x240 [ 413.318872][T12310] device_add+0x4f9/0xc40 [ 413.323227][T12310] wiphy_register+0x1d99/0x2ac0 [ 413.328140][T12310] ? cfg80211_event_work+0x40/0x40 [ 413.333269][T12310] ? minstrel_ht_alloc+0x88a/0x990 [ 413.338408][T12310] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 413.344525][T12310] ieee80211_register_hw+0x2dd8/0x3b30 [ 413.350028][T12310] ? ieee80211_register_hw+0xef1/0x3b30 [ 413.355597][T12310] ? ieee80211_tasklet_handler+0x20/0x20 [ 413.361332][T12310] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 413.367254][T12310] ? __debug_object_init+0xec/0x450 [ 413.372511][T12310] ? __asan_memset+0x22/0x40 [ 413.377215][T12310] ? __hrtimer_init+0x189/0x270 [ 413.382112][T12310] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 413.387881][T12310] ? mac80211_hwsim_free+0x220/0x220 [ 413.393229][T12310] ? rcu_is_watching+0x15/0xb0 [ 413.398012][T12310] ? kstrndup+0xbd/0x140 [ 413.402282][T12310] hwsim_new_radio_nl+0xdad/0x1a70 [ 413.407423][T12310] ? __nla_validate+0x50/0x50 [ 413.412196][T12310] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 413.418567][T12310] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 413.425111][T12310] ? __nla_parse+0x40/0x50 [ 413.429591][T12310] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 413.435974][T12310] genl_family_rcv_msg_doit+0x21a/0x310 [ 413.441560][T12310] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 413.447486][T12310] ? bpf_lsm_capable+0x9/0x10 [ 413.452187][T12310] ? security_capable+0x89/0xb0 [ 413.457065][T12310] genl_rcv_msg+0x611/0x7a0 [ 413.461619][T12310] ? genl_bind+0x360/0x360 [ 413.466063][T12310] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 413.472452][T12310] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 413.478204][T12310] netlink_rcv_skb+0x235/0x4c0 [ 413.483002][T12310] ? genl_bind+0x360/0x360 [ 413.487444][T12310] ? netlink_ack+0x1160/0x1160 [ 413.492240][T12310] ? __lock_acquire+0x7d80/0x7d80 [ 413.497276][T12310] ? net_generic+0x1e/0x240 [ 413.501803][T12310] ? down_read+0x1ac/0x2e0 [ 413.506256][T12310] genl_rcv+0x28/0x40 [ 413.510260][T12310] netlink_unicast+0x7b1/0x930 [ 413.515057][T12310] netlink_sendmsg+0x8d0/0xbf0 [ 413.519858][T12310] ? netlink_getsockopt+0x590/0x590 [ 413.525253][T12310] ? apparmor_socket_sendmsg+0x8e/0x330 [ 413.530942][T12310] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 413.536356][T12310] ? security_socket_sendmsg+0x80/0xa0 [ 413.541852][T12310] ? netlink_getsockopt+0x590/0x590 [ 413.547120][T12310] ____sys_sendmsg+0x61b/0x980 [ 413.551922][T12310] ? __asan_memset+0x22/0x40 [ 413.556530][T12310] ? __sys_sendmsg_sock+0x30/0x30 [ 413.561581][T12310] ? __import_iovec+0x5f2/0x850 [ 413.566463][T12310] ? import_iovec+0x73/0xa0 [ 413.570994][T12310] ___sys_sendmsg+0x2a6/0x360 [ 413.575706][T12310] ? __sys_sendmsg+0x2b0/0x2b0 [ 413.580518][T12310] ? ktime_get+0x7f/0x280 [ 413.584890][T12310] __se_sys_sendmsg+0x1d0/0x2c0 [ 413.589763][T12310] ? perf_trace_preemptirq_template+0x269/0x330 [ 413.596031][T12310] ? __x64_sys_sendmsg+0x80/0x80 [ 413.601009][T12310] ? lockdep_hardirqs_on+0x98/0x150 [ 413.606258][T12310] do_syscall_64+0x55/0xb0 [ 413.610715][T12310] ? clear_bhb_loop+0x40/0x90 [ 413.615492][T12310] ? clear_bhb_loop+0x40/0x90 [ 413.620299][T12310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.626246][T12310] RIP: 0033:0x7f11ec59de59 [ 413.630762][T12310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.650430][T12310] RSP: 002b:00007f11ed52d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.658867][T12310] RAX: ffffffffffffffda RBX: 00007f11ec826090 RCX: 00007f11ec59de59 [ 413.666857][T12310] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 413.674871][T12310] RBP: 00007f11ec633e6f R08: 0000000000000000 R09: 0000000000000000 [ 413.682889][T12310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.690876][T12310] R13: 00007f11ec826128 R14: 00007f11ec826090 R15: 00007ffe9bc1ad18 [ 413.698879][T12310] [ 414.091245][T12321] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2239'. [ 414.127229][T12321] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 414.136056][T12321] CPU: 0 PID: 12321 Comm: syz.0.2239 Not tainted syzkaller #0 [ 414.143571][T12321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 414.153670][T12321] Call Trace: [ 414.156983][T12321] [ 414.159945][T12321] dump_stack_lvl+0x18c/0x250 [ 414.164673][T12321] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.170887][T12321] ? show_regs_print_info+0x20/0x20 [ 414.176146][T12321] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.182370][T12321] sysfs_warn_dup+0x8e/0xa0 [ 414.186924][T12321] sysfs_do_create_link_sd+0xc0/0x110 [ 414.192355][T12321] device_add_class_symlinks+0x1cf/0x240 [ 414.198044][T12321] device_add+0x4f9/0xc40 [ 414.202439][T12321] wiphy_register+0x1d99/0x2ac0 [ 414.207366][T12321] ? cfg80211_event_work+0x40/0x40 [ 414.212527][T12321] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.218848][T12321] ieee80211_register_hw+0x2dd8/0x3b30 [ 414.224403][T12321] ? ieee80211_register_hw+0xef1/0x3b30 [ 414.230007][T12321] ? ieee80211_tasklet_handler+0x20/0x20 [ 414.235711][T12321] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 414.241651][T12321] ? __debug_object_init+0xec/0x450 [ 414.246896][T12321] ? __asan_memset+0x22/0x40 [ 414.251548][T12321] ? __hrtimer_init+0x189/0x270 [ 414.256422][T12321] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 414.262191][T12321] ? mac80211_hwsim_free+0x220/0x220 [ 414.267503][T12321] ? hwsim_new_radio_nl+0xd9d/0x1a70 [ 414.272820][T12321] hwsim_new_radio_nl+0xdad/0x1a70 [ 414.277987][T12321] ? mark_lock+0x94/0x320 [ 414.282461][T12321] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 414.288874][T12321] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.295183][T12321] ? lockdep_hardirqs_on+0x98/0x150 [ 414.300410][T12321] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.306606][T12321] genl_family_rcv_msg_doit+0x21a/0x310 [ 414.312216][T12321] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 414.318143][T12321] ? bpf_lsm_capable+0x9/0x10 [ 414.322866][T12321] ? security_capable+0x89/0xb0 [ 414.327824][T12321] genl_rcv_msg+0x611/0x7a0 [ 414.332360][T12321] ? genl_bind+0x360/0x360 [ 414.336799][T12321] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 414.343251][T12321] ? lockdep_hardirqs_on+0x98/0x150 [ 414.348486][T12321] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.354849][T12321] netlink_rcv_skb+0x235/0x4c0 [ 414.359655][T12321] ? genl_bind+0x360/0x360 [ 414.364126][T12321] ? netlink_ack+0x1160/0x1160 [ 414.368935][T12321] ? __lock_acquire+0x7d80/0x7d80 [ 414.374029][T12321] ? net_generic+0x1e/0x240 [ 414.378578][T12321] ? down_read+0x1ac/0x2e0 [ 414.383025][T12321] genl_rcv+0x28/0x40 [ 414.387060][T12321] netlink_unicast+0x7b1/0x930 [ 414.392201][T12321] netlink_sendmsg+0x8d0/0xbf0 [ 414.396995][T12321] ? netlink_getsockopt+0x590/0x590 [ 414.402230][T12321] ? apparmor_socket_sendmsg+0x8e/0x330 [ 414.407794][T12321] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 414.413093][T12321] ? security_socket_sendmsg+0x80/0xa0 [ 414.418573][T12321] ? netlink_getsockopt+0x590/0x590 [ 414.423870][T12321] ____sys_sendmsg+0x61b/0x980 [ 414.428661][T12321] ? __asan_memset+0x22/0x40 [ 414.433271][T12321] ? __sys_sendmsg_sock+0x30/0x30 [ 414.438348][T12321] ? __import_iovec+0x5f2/0x850 [ 414.443229][T12321] ? import_iovec+0x73/0xa0 [ 414.447753][T12321] ___sys_sendmsg+0x2a6/0x360 [ 414.452545][T12321] ? __sys_sendmsg+0x2b0/0x2b0 [ 414.457387][T12321] __se_sys_sendmsg+0x1d0/0x2c0 [ 414.462325][T12321] ? __x64_sys_sendmsg+0x80/0x80 [ 414.467406][T12321] do_syscall_64+0x55/0xb0 [ 414.472125][T12321] ? clear_bhb_loop+0x40/0x90 [ 414.477991][T12321] ? clear_bhb_loop+0x40/0x90 [ 414.482906][T12321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.488846][T12321] RIP: 0033:0x7f11ec59de59 [ 414.493275][T12321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.512989][T12321] RSP: 002b:00007f11ed52d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.521431][T12321] RAX: ffffffffffffffda RBX: 00007f11ec826090 RCX: 00007f11ec59de59 [ 414.529451][T12321] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 414.537720][T12321] RBP: 00007f11ec633e6f R08: 0000000000000000 R09: 0000000000000000 [ 414.546077][T12321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.554181][T12321] R13: 00007f11ec826128 R14: 00007f11ec826090 R15: 00007ffe9bc1ad18 [ 414.562195][T12321] [ 414.581050][T12325] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 414.593247][T12325] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 414.632814][T12326] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 414.641319][T12326] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 415.152530][T12345] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2242'. [ 415.170463][T12345] net_ratelimit: 1478 callbacks suppressed [ 415.170500][T12345] netlink: zone id is out of range [ 415.183302][T12345] netlink: zone id is out of range [ 415.189111][T12345] netlink: zone id is out of range [ 415.194697][T12345] netlink: zone id is out of range [ 415.200889][T12345] netlink: zone id is out of range [ 415.206702][T12345] netlink: zone id is out of range [ 415.212465][T12345] netlink: zone id is out of range [ 415.218255][T12345] netlink: zone id is out of range [ 415.223763][T12345] netlink: zone id is out of range [ 415.229583][T12345] netlink: zone id is out of range [ 415.400819][T12353] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2252'. [ 415.697955][T12366] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2247'. [ 415.733446][T12366] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 415.742241][T12366] CPU: 0 PID: 12366 Comm: syz.0.2247 Not tainted syzkaller #0 [ 415.749782][T12366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 415.759879][T12366] Call Trace: [ 415.763176][T12366] [ 415.766111][T12366] dump_stack_lvl+0x18c/0x250 [ 415.770815][T12366] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.777028][T12366] ? show_regs_print_info+0x20/0x20 [ 415.782265][T12366] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 415.788481][T12366] sysfs_warn_dup+0x8e/0xa0 [ 415.793518][T12366] sysfs_do_create_link_sd+0xc0/0x110 [ 415.798965][T12366] device_add_class_symlinks+0x1cf/0x240 [ 415.804646][T12366] device_add+0x4f9/0xc40 [ 415.809004][T12366] wiphy_register+0x1d99/0x2ac0 [ 415.813907][T12366] ? cfg80211_event_work+0x40/0x40 [ 415.819055][T12366] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 415.825142][T12366] ieee80211_register_hw+0x2dd8/0x3b30 [ 415.830727][T12366] ? ieee80211_register_hw+0xef1/0x3b30 [ 415.836304][T12366] ? ieee80211_tasklet_handler+0x20/0x20 [ 415.841968][T12366] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 415.847892][T12366] ? __debug_object_init+0xec/0x450 [ 415.853145][T12366] ? __asan_memset+0x22/0x40 [ 415.857779][T12366] ? __hrtimer_init+0x189/0x270 [ 415.862652][T12366] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 415.868426][T12366] ? mac80211_hwsim_free+0x220/0x220 [ 415.873854][T12366] ? rcu_is_watching+0x15/0xb0 [ 415.878635][T12366] ? kstrndup+0xbd/0x140 [ 415.882909][T12366] hwsim_new_radio_nl+0xdad/0x1a70 [ 415.888049][T12366] ? __nla_validate+0x50/0x50 [ 415.892843][T12366] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 415.899223][T12366] ? __nla_parse+0x40/0x50 [ 415.903666][T12366] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 415.910019][T12366] genl_family_rcv_msg_doit+0x21a/0x310 [ 415.915595][T12366] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 415.921519][T12366] ? bpf_lsm_capable+0x9/0x10 [ 415.926215][T12366] ? security_capable+0x89/0xb0 [ 415.931089][T12366] genl_rcv_msg+0x611/0x7a0 [ 415.935626][T12366] ? genl_bind+0x360/0x360 [ 415.940066][T12366] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 415.946418][T12366] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 415.953060][T12366] netlink_rcv_skb+0x235/0x4c0 [ 415.957847][T12366] ? genl_bind+0x360/0x360 [ 415.962300][T12366] ? netlink_ack+0x1160/0x1160 [ 415.967091][T12366] ? __lock_acquire+0x7d80/0x7d80 [ 415.972141][T12366] ? down_read+0x1ac/0x2e0 [ 415.976610][T12366] genl_rcv+0x28/0x40 [ 415.980620][T12366] netlink_unicast+0x7b1/0x930 [ 415.985418][T12366] netlink_sendmsg+0x8d0/0xbf0 [ 415.990213][T12366] ? netlink_getsockopt+0x590/0x590 [ 415.995453][T12366] ? apparmor_socket_sendmsg+0x8e/0x330 [ 416.001103][T12366] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 416.006404][T12366] ? security_socket_sendmsg+0x80/0xa0 [ 416.011878][T12366] ? netlink_getsockopt+0x590/0x590 [ 416.017122][T12366] ____sys_sendmsg+0x61b/0x980 [ 416.021920][T12366] ? __asan_memset+0x22/0x40 [ 416.026558][T12366] ? __sys_sendmsg_sock+0x30/0x30 [ 416.031612][T12366] ? __import_iovec+0x5f2/0x850 [ 416.036500][T12366] ? import_iovec+0x73/0xa0 [ 416.041022][T12366] ___sys_sendmsg+0x2a6/0x360 [ 416.045724][T12366] ? __sys_sendmsg+0x2b0/0x2b0 [ 416.050552][T12366] __se_sys_sendmsg+0x1d0/0x2c0 [ 416.055427][T12366] ? __x64_sys_sendmsg+0x80/0x80 [ 416.060487][T12366] ? syscall_enter_from_user_mode+0x2e/0x80 [ 416.066400][T12366] do_syscall_64+0x55/0xb0 [ 416.070838][T12366] ? clear_bhb_loop+0x40/0x90 [ 416.075523][T12366] ? clear_bhb_loop+0x40/0x90 [ 416.080212][T12366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.086156][T12366] RIP: 0033:0x7f11ec59de59 [ 416.090678][T12366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.110296][T12366] RSP: 002b:00007f11ed52d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.118901][T12366] RAX: ffffffffffffffda RBX: 00007f11ec826090 RCX: 00007f11ec59de59 [ 416.126965][T12366] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 416.135039][T12366] RBP: 00007f11ec633e6f R08: 0000000000000000 R09: 0000000000000000 [ 416.143021][T12366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.151009][T12366] R13: 00007f11ec826128 R14: 00007f11ec826090 R15: 00007ffe9bc1ad18 [ 416.159110][T12366] [ 416.224674][T12370] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2249'. [ 416.371207][T12375] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2250'. [ 416.804848][T12386] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2256'. [ 417.133695][T12406] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2262'. [ 417.195512][T12406] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 417.208083][T12406] CPU: 0 PID: 12406 Comm: syz.1.2262 Not tainted syzkaller #0 [ 417.215610][T12406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 417.225690][T12406] Call Trace: [ 417.228997][T12406] [ 417.231955][T12406] dump_stack_lvl+0x18c/0x250 [ 417.236679][T12406] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 417.242891][T12406] ? show_regs_print_info+0x20/0x20 [ 417.248145][T12406] ? _printk+0x11d/0x130 [ 417.252416][T12406] sysfs_warn_dup+0x8e/0xa0 [ 417.256940][T12406] sysfs_do_create_link_sd+0xc0/0x110 [ 417.262327][T12406] device_add_class_symlinks+0x1cf/0x240 [ 417.267995][T12406] device_add+0x4f9/0xc40 [ 417.272373][T12406] wiphy_register+0x1d99/0x2ac0 [ 417.277279][T12406] ? cfg80211_event_work+0x40/0x40 [ 417.282404][T12406] ? minstrel_ht_alloc+0x88a/0x990 [ 417.287566][T12406] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 417.293648][T12406] ieee80211_register_hw+0x2dd8/0x3b30 [ 417.299134][T12406] ? ieee80211_register_hw+0xef1/0x3b30 [ 417.304698][T12406] ? ieee80211_tasklet_handler+0x20/0x20 [ 417.310338][T12406] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 417.316247][T12406] ? __debug_object_init+0xec/0x450 [ 417.321463][T12406] ? __asan_memset+0x22/0x40 [ 417.326069][T12406] ? __hrtimer_init+0x189/0x270 [ 417.330942][T12406] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 417.336712][T12406] ? mac80211_hwsim_free+0x220/0x220 [ 417.342018][T12406] ? rcu_is_watching+0x15/0xb0 [ 417.346795][T12406] ? kstrndup+0xbd/0x140 [ 417.351061][T12406] hwsim_new_radio_nl+0xdad/0x1a70 [ 417.356204][T12406] ? __nla_validate+0x50/0x50 [ 417.360905][T12406] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 417.367332][T12406] ? __nla_parse+0x40/0x50 [ 417.371772][T12406] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 417.378137][T12406] genl_family_rcv_msg_doit+0x21a/0x310 [ 417.383746][T12406] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 417.389678][T12406] ? bpf_lsm_capable+0x9/0x10 [ 417.394371][T12406] ? security_capable+0x89/0xb0 [ 417.399237][T12406] genl_rcv_msg+0x611/0x7a0 [ 417.403776][T12406] ? genl_bind+0x360/0x360 [ 417.408206][T12406] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 417.414557][T12406] ? lockdep_hardirqs_on+0x98/0x150 [ 417.419799][T12406] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 417.425988][T12406] netlink_rcv_skb+0x235/0x4c0 [ 417.430780][T12406] ? genl_bind+0x360/0x360 [ 417.435219][T12406] ? netlink_ack+0x1160/0x1160 [ 417.440278][T12406] ? __lock_acquire+0x7d80/0x7d80 [ 417.445528][T12406] ? down_read+0x1ac/0x2e0 [ 417.449986][T12406] genl_rcv+0x28/0x40 [ 417.454037][T12406] netlink_unicast+0x7b1/0x930 [ 417.459011][T12406] netlink_sendmsg+0x8d0/0xbf0 [ 417.463834][T12406] ? lockdep_hardirqs_on+0x98/0x150 [ 417.469094][T12406] ? netlink_getsockopt+0x590/0x590 [ 417.474358][T12406] ? bpf_lsm_socket_accept+0x10/0x10 [ 417.479686][T12406] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 417.484986][T12406] ? security_socket_sendmsg+0x80/0xa0 [ 417.490489][T12406] ? netlink_getsockopt+0x590/0x590 [ 417.495710][T12406] ____sys_sendmsg+0x61b/0x980 [ 417.500524][T12406] ? __asan_memset+0x22/0x40 [ 417.505183][T12406] ? __sys_sendmsg_sock+0x30/0x30 [ 417.510238][T12406] ? __import_iovec+0x5f2/0x850 [ 417.515111][T12406] ? import_iovec+0x73/0xa0 [ 417.519634][T12406] ___sys_sendmsg+0x2a6/0x360 [ 417.524338][T12406] ? __sys_sendmsg+0x2b0/0x2b0 [ 417.529164][T12406] __se_sys_sendmsg+0x1d0/0x2c0 [ 417.534037][T12406] ? __x64_sys_sendmsg+0x80/0x80 [ 417.539015][T12406] do_syscall_64+0x55/0xb0 [ 417.543445][T12406] ? clear_bhb_loop+0x40/0x90 [ 417.548215][T12406] ? clear_bhb_loop+0x40/0x90 [ 417.552907][T12406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.558867][T12406] RIP: 0033:0x7faf1159de59 [ 417.563295][T12406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.582927][T12406] RSP: 002b:00007faf124f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.591353][T12406] RAX: ffffffffffffffda RBX: 00007faf11826090 RCX: 00007faf1159de59 [ 417.599334][T12406] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 417.607317][T12406] RBP: 00007faf11633e6f R08: 0000000000000000 R09: 0000000000000000 [ 417.615297][T12406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.623277][T12406] R13: 00007faf11826128 R14: 00007faf11826090 R15: 00007ffc77750878 [ 417.631276][T12406] [ 417.917067][T12412] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 417.952745][T12412] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 417.986470][T12416] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 418.000738][T12416] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 418.176966][T12422] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2269'. [ 418.329161][T12430] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 418.336622][T12430] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 418.376295][T12430] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 418.397918][T12430] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 418.485621][T12438] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2273'. [ 418.534347][T12438] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 418.581898][T12438] CPU: 0 PID: 12438 Comm: syz.1.2273 Not tainted syzkaller #0 [ 418.589455][T12438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 418.599633][T12438] Call Trace: [ 418.602952][T12438] [ 418.605928][T12438] dump_stack_lvl+0x18c/0x250 [ 418.610665][T12438] ? show_regs_print_info+0x20/0x20 [ 418.615925][T12438] ? load_image+0x420/0x420 [ 418.620489][T12438] sysfs_warn_dup+0x8e/0xa0 [ 418.625648][T12438] sysfs_do_create_link_sd+0xc0/0x110 [ 418.631107][T12438] device_add_class_symlinks+0x1cf/0x240 [ 418.636891][T12438] device_add+0x4f9/0xc40 [ 418.641282][T12438] wiphy_register+0x1d99/0x2ac0 [ 418.646204][T12438] ? cfg80211_event_work+0x40/0x40 [ 418.651356][T12438] ? minstrel_ht_alloc+0x88a/0x990 [ 418.656524][T12438] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 418.662639][T12438] ieee80211_register_hw+0x2dd8/0x3b30 [ 418.668201][T12438] ? ieee80211_register_hw+0xef1/0x3b30 [ 418.673807][T12438] ? ieee80211_tasklet_handler+0x20/0x20 [ 418.679488][T12438] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 418.685435][T12438] ? __debug_object_init+0xec/0x450 [ 418.690687][T12438] ? __asan_memset+0x22/0x40 [ 418.695343][T12438] ? __hrtimer_init+0x189/0x270 [ 418.700248][T12438] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 418.706056][T12438] ? mac80211_hwsim_free+0x220/0x220 [ 418.711395][T12438] ? rcu_is_watching+0x15/0xb0 [ 418.716219][T12438] ? kstrndup+0xbd/0x140 [ 418.720530][T12438] hwsim_new_radio_nl+0xdad/0x1a70 [ 418.725702][T12438] ? __nla_validate+0x50/0x50 [ 418.730452][T12438] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 418.736850][T12438] ? __nla_parse+0x40/0x50 [ 418.741323][T12438] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 418.747878][T12438] genl_family_rcv_msg_doit+0x21a/0x310 [ 418.753508][T12438] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 418.759446][T12438] ? bpf_lsm_capable+0x9/0x10 [ 418.764144][T12438] ? security_capable+0x89/0xb0 [ 418.769013][T12438] genl_rcv_msg+0x611/0x7a0 [ 418.773626][T12438] ? genl_bind+0x360/0x360 [ 418.778112][T12438] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 418.784462][T12438] ? ref_tracker_free+0x686/0x830 [ 418.789505][T12438] ? __kasan_kmalloc_large+0x8b/0xa0 [ 418.794849][T12438] netlink_rcv_skb+0x235/0x4c0 [ 418.799635][T12438] ? genl_bind+0x360/0x360 [ 418.804085][T12438] ? netlink_ack+0x1160/0x1160 [ 418.808870][T12438] ? __lock_acquire+0x7d80/0x7d80 [ 418.813914][T12438] ? down_read+0x1ac/0x2e0 [ 418.818341][T12438] genl_rcv+0x28/0x40 [ 418.822341][T12438] netlink_unicast+0x7b1/0x930 [ 418.827129][T12438] netlink_sendmsg+0x8d0/0xbf0 [ 418.831920][T12438] ? netlink_getsockopt+0x590/0x590 [ 418.837139][T12438] ? apparmor_socket_sendmsg+0x8e/0x330 [ 418.842701][T12438] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 418.848004][T12438] ? security_socket_sendmsg+0x80/0xa0 [ 418.853505][T12438] ? netlink_getsockopt+0x590/0x590 [ 418.858721][T12438] ____sys_sendmsg+0x61b/0x980 [ 418.863510][T12438] ? __asan_memset+0x22/0x40 [ 418.868207][T12438] ? __sys_sendmsg_sock+0x30/0x30 [ 418.873276][T12438] ? __import_iovec+0x5f2/0x850 [ 418.878183][T12438] ? import_iovec+0x73/0xa0 [ 418.882712][T12438] ___sys_sendmsg+0x2a6/0x360 [ 418.887440][T12438] ? __sys_sendmsg+0x2b0/0x2b0 [ 418.892269][T12438] __se_sys_sendmsg+0x1d0/0x2c0 [ 418.897142][T12438] ? __x64_sys_sendmsg+0x80/0x80 [ 418.902114][T12438] ? lockdep_hardirqs_on+0x98/0x150 [ 418.907328][T12438] do_syscall_64+0x55/0xb0 [ 418.911763][T12438] ? clear_bhb_loop+0x40/0x90 [ 418.916451][T12438] ? clear_bhb_loop+0x40/0x90 [ 418.921139][T12438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.927048][T12438] RIP: 0033:0x7faf1159de59 [ 418.931596][T12438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.951309][T12438] RSP: 002b:00007faf124d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.959757][T12438] RAX: ffffffffffffffda RBX: 00007faf11826180 RCX: 00007faf1159de59 [ 418.967739][T12438] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 418.975738][T12438] RBP: 00007faf11633e6f R08: 0000000000000000 R09: 0000000000000000 [ 418.983719][T12438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.991832][T12438] R13: 00007faf11826218 R14: 00007faf11826180 R15: 00007ffc77750878 [ 418.999937][T12438] [ 419.544791][T12459] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 419.563463][T12459] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 419.638438][T12459] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 419.645622][T12459] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 420.235470][T12482] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2290'. [ 420.252893][T12482] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 420.263217][T12482] CPU: 1 PID: 12482 Comm: syz.3.2290 Not tainted syzkaller #0 [ 420.270760][T12482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 420.280864][T12482] Call Trace: [ 420.284153][T12482] [ 420.287099][T12482] dump_stack_lvl+0x18c/0x250 [ 420.291801][T12482] ? show_regs_print_info+0x20/0x20 [ 420.297013][T12482] ? load_image+0x420/0x420 [ 420.301533][T12482] sysfs_warn_dup+0x8e/0xa0 [ 420.306043][T12482] sysfs_do_create_link_sd+0xc0/0x110 [ 420.311438][T12482] device_add_class_symlinks+0x1cf/0x240 [ 420.317124][T12482] device_add+0x4f9/0xc40 [ 420.321466][T12482] wiphy_register+0x1d99/0x2ac0 [ 420.326383][T12482] ? cfg80211_event_work+0x40/0x40 [ 420.331540][T12482] ? minstrel_ht_alloc+0x88a/0x990 [ 420.336673][T12482] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 420.342768][T12482] ieee80211_register_hw+0x2dd8/0x3b30 [ 420.348294][T12482] ? ieee80211_register_hw+0xef1/0x3b30 [ 420.354065][T12482] ? ieee80211_tasklet_handler+0x20/0x20 [ 420.359712][T12482] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 420.365632][T12482] ? __debug_object_init+0xec/0x450 [ 420.370853][T12482] ? __asan_memset+0x22/0x40 [ 420.375455][T12482] ? __hrtimer_init+0x189/0x270 [ 420.380322][T12482] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 420.386082][T12482] ? mac80211_hwsim_free+0x220/0x220 [ 420.391385][T12482] ? rcu_is_watching+0x15/0xb0 [ 420.396162][T12482] ? kstrndup+0xbd/0x140 [ 420.400424][T12482] hwsim_new_radio_nl+0xdad/0x1a70 [ 420.405563][T12482] ? __nla_validate+0x50/0x50 [ 420.410293][T12482] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 420.416656][T12482] ? __nla_parse+0x40/0x50 [ 420.421094][T12482] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 420.427440][T12482] genl_family_rcv_msg_doit+0x21a/0x310 [ 420.433016][T12482] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 420.439024][T12482] ? bpf_lsm_capable+0x9/0x10 [ 420.443747][T12482] ? security_capable+0x89/0xb0 [ 420.448617][T12482] genl_rcv_msg+0x611/0x7a0 [ 420.453146][T12482] ? genl_bind+0x360/0x360 [ 420.457584][T12482] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 420.464081][T12482] ? ref_tracker_free+0x686/0x830 [ 420.469161][T12482] ? __kasan_kmalloc_large+0x8b/0xa0 [ 420.474565][T12482] netlink_rcv_skb+0x235/0x4c0 [ 420.479350][T12482] ? genl_bind+0x360/0x360 [ 420.483785][T12482] ? netlink_ack+0x1160/0x1160 [ 420.488612][T12482] ? __lock_acquire+0x7d80/0x7d80 [ 420.493657][T12482] ? down_read+0x1ac/0x2e0 [ 420.498083][T12482] genl_rcv+0x28/0x40 [ 420.502079][T12482] netlink_unicast+0x7b1/0x930 [ 420.506883][T12482] netlink_sendmsg+0x8d0/0xbf0 [ 420.512283][T12482] ? netlink_getsockopt+0x590/0x590 [ 420.517509][T12482] ? apparmor_socket_sendmsg+0x8e/0x330 [ 420.523093][T12482] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 420.528427][T12482] ? security_socket_sendmsg+0x80/0xa0 [ 420.533914][T12482] ? netlink_getsockopt+0x590/0x590 [ 420.539148][T12482] ____sys_sendmsg+0x61b/0x980 [ 420.543938][T12482] ? __asan_memset+0x22/0x40 [ 420.548544][T12482] ? __sys_sendmsg_sock+0x30/0x30 [ 420.553605][T12482] ? __import_iovec+0x5f2/0x850 [ 420.558561][T12482] ? import_iovec+0x73/0xa0 [ 420.563082][T12482] ___sys_sendmsg+0x2a6/0x360 [ 420.567805][T12482] ? __sys_sendmsg+0x2b0/0x2b0 [ 420.572652][T12482] __se_sys_sendmsg+0x1d0/0x2c0 [ 420.577536][T12482] ? __x64_sys_sendmsg+0x80/0x80 [ 420.582544][T12482] ? lockdep_hardirqs_on+0x98/0x150 [ 420.587772][T12482] do_syscall_64+0x55/0xb0 [ 420.592227][T12482] ? clear_bhb_loop+0x40/0x90 [ 420.596919][T12482] ? clear_bhb_loop+0x40/0x90 [ 420.601605][T12482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.607541][T12482] RIP: 0033:0x7f6283b9de59 [ 420.611971][T12482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.631852][T12482] RSP: 002b:00007f6284af7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.640275][T12482] RAX: ffffffffffffffda RBX: 00007f6283e26180 RCX: 00007f6283b9de59 [ 420.648251][T12482] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 420.656240][T12482] RBP: 00007f6283c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 420.664225][T12482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.672208][T12482] R13: 00007f6283e26218 R14: 00007f6283e26180 R15: 00007ffcc7b38818 [ 420.680206][T12482] [ 421.041373][T12492] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2294'. [ 421.064842][T12492] net_ratelimit: 984 callbacks suppressed [ 421.064888][T12492] netlink: zone id is out of range [ 421.085959][T12492] netlink: zone id is out of range [ 421.102184][T12492] netlink: zone id is out of range [ 421.126747][T12492] netlink: zone id is out of range [ 421.138645][T12492] netlink: zone id is out of range [ 421.148310][T12500] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 421.165180][T12500] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 421.185089][T12492] netlink: zone id is out of range [ 421.219679][T12501] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 421.230701][T12492] netlink: zone id is out of range [ 421.236560][T12501] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 421.252908][T12492] netlink: zone id is out of range [ 421.259521][T12492] netlink: zone id is out of range [ 421.294746][T12492] netlink: zone id is out of range [ 422.212365][ T5774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 422.214776][T12515] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2303'. [ 422.221958][ T5774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 422.246046][ T5774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 422.254661][ T5774] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 422.264612][ T5774] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 422.280242][ T5774] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 422.307134][T12515] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 422.315241][T12515] CPU: 1 PID: 12515 Comm: syz.2.2303 Not tainted syzkaller #0 [ 422.322768][T12515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 422.333398][T12515] Call Trace: [ 422.336726][T12515] [ 422.339687][T12515] dump_stack_lvl+0x18c/0x250 [ 422.344456][T12515] ? show_regs_print_info+0x20/0x20 [ 422.349719][T12515] ? load_image+0x420/0x420 [ 422.354284][T12515] sysfs_warn_dup+0x8e/0xa0 [ 422.358836][T12515] sysfs_do_create_link_sd+0xc0/0x110 [ 422.364253][T12515] device_add_class_symlinks+0x1cf/0x240 [ 422.369937][T12515] device_add+0x4f9/0xc40 [ 422.374313][T12515] wiphy_register+0x1d99/0x2ac0 [ 422.379230][T12515] ? cfg80211_event_work+0x40/0x40 [ 422.384384][T12515] ? minstrel_ht_alloc+0x88a/0x990 [ 422.389593][T12515] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 422.395721][T12515] ieee80211_register_hw+0x2dd8/0x3b30 [ 422.401239][T12515] ? ieee80211_register_hw+0xef1/0x3b30 [ 422.406819][T12515] ? ieee80211_tasklet_handler+0x20/0x20 [ 422.412475][T12515] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 422.418410][T12515] ? __debug_object_init+0xec/0x450 [ 422.423645][T12515] ? __asan_memset+0x22/0x40 [ 422.428264][T12515] ? __hrtimer_init+0x189/0x270 [ 422.433428][T12515] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 422.439346][T12515] ? mac80211_hwsim_free+0x220/0x220 [ 422.444840][T12515] ? rcu_is_watching+0x15/0xb0 [ 422.449634][T12515] ? kstrndup+0xbd/0x140 [ 422.453909][T12515] hwsim_new_radio_nl+0xdad/0x1a70 [ 422.459071][T12515] ? __nla_validate+0x50/0x50 [ 422.463788][T12515] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 422.470335][T12515] ? __nla_parse+0x40/0x50 [ 422.474814][T12515] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 422.481179][T12515] genl_family_rcv_msg_doit+0x21a/0x310 [ 422.486767][T12515] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 422.492700][T12515] ? bpf_lsm_capable+0x9/0x10 [ 422.497435][T12515] ? security_capable+0x89/0xb0 [ 422.502720][T12515] genl_rcv_msg+0x611/0x7a0 [ 422.507271][T12515] ? genl_bind+0x360/0x360 [ 422.511716][T12515] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 422.518095][T12515] netlink_rcv_skb+0x235/0x4c0 [ 422.522895][T12515] ? genl_bind+0x360/0x360 [ 422.527340][T12515] ? netlink_ack+0x1160/0x1160 [ 422.532143][T12515] ? __lock_acquire+0x7d80/0x7d80 [ 422.537198][T12515] ? net_generic+0x1e/0x240 [ 422.541748][T12515] ? down_read+0x1ac/0x2e0 [ 422.546209][T12515] genl_rcv+0x28/0x40 [ 422.550242][T12515] netlink_unicast+0x7b1/0x930 [ 422.555168][T12515] netlink_sendmsg+0x8d0/0xbf0 [ 422.559972][T12515] ? netlink_getsockopt+0x590/0x590 [ 422.565262][T12515] ? apparmor_socket_sendmsg+0x8e/0x330 [ 422.570845][T12515] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 422.576166][T12515] ? security_socket_sendmsg+0x80/0xa0 [ 422.581666][T12515] ? netlink_getsockopt+0x590/0x590 [ 422.586928][T12515] ____sys_sendmsg+0x61b/0x980 [ 422.592158][T12515] ? __asan_memset+0x22/0x40 [ 422.596794][T12515] ? __sys_sendmsg_sock+0x30/0x30 [ 422.601850][T12515] ? __import_iovec+0x5f2/0x850 [ 422.606783][T12515] ? import_iovec+0x73/0xa0 [ 422.611329][T12515] ___sys_sendmsg+0x2a6/0x360 [ 422.616047][T12515] ? __sys_sendmsg+0x2b0/0x2b0 [ 422.620904][T12515] __se_sys_sendmsg+0x1d0/0x2c0 [ 422.625846][T12515] ? __x64_sys_sendmsg+0x80/0x80 [ 422.630846][T12515] ? lockdep_hardirqs_on+0x98/0x150 [ 422.636081][T12515] do_syscall_64+0x55/0xb0 [ 422.640538][T12515] ? clear_bhb_loop+0x40/0x90 [ 422.645237][T12515] ? clear_bhb_loop+0x40/0x90 [ 422.649973][T12515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.655909][T12515] RIP: 0033:0x7faedd59de59 [ 422.660347][T12515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.679993][T12515] RSP: 002b:00007faede42c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.688441][T12515] RAX: ffffffffffffffda RBX: 00007faedd825fa0 RCX: 00007faedd59de59 [ 422.696540][T12515] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 422.704540][T12515] RBP: 00007faedd633e6f R08: 0000000000000000 R09: 0000000000000000 [ 422.712545][T12515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.720580][T12515] R13: 00007faedd826038 R14: 00007faedd825fa0 R15: 00007ffe1afcd428 [ 422.728633][T12515] [ 422.834381][ T5773] bond0: (slave syz_tun): Releasing backup interface [ 423.060406][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.249324][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.285262][T12539] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2307'. [ 423.403052][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.504890][ T60] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.573647][T12520] chnl_net:caif_netlink_parms(): no params data found [ 423.744190][T12520] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.758941][T12520] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.774859][T12520] bridge_slave_0: entered allmulticast mode [ 423.788432][T12520] bridge_slave_0: entered promiscuous mode [ 423.806358][T12520] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.832330][T12520] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.867769][T12520] bridge_slave_1: entered allmulticast mode [ 423.903661][T12520] bridge_slave_1: entered promiscuous mode [ 424.209619][T12558] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 424.216749][T12558] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 424.279047][T12559] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 424.292547][T12559] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 424.308416][T12520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.326370][T12520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.436863][T12520] team0: Port device team_slave_0 added [ 424.485430][T12520] team0: Port device team_slave_1 added [ 424.642347][T12520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.675490][T12520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.772195][T12520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.795905][ T5774] Bluetooth: hci4: command tx timeout [ 424.836246][T12520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.860537][T12520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.972947][T12520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.101915][ T60] ip6gretap0 (unregistering): left allmulticast mode [ 425.120309][ T60] ip6gretap0 (unregistering): left promiscuous mode [ 425.128420][ T60] Ÿë: port 1(ip6gretap0) entered disabled state [ 425.292908][ T5774] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 425.361055][T12520] hsr_slave_0: entered promiscuous mode [ 425.374049][T12520] hsr_slave_1: entered promiscuous mode [ 425.388755][T12520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.396385][T12520] Cannot create hsr debugfs directory [ 425.406624][T12594] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 425.419122][T12594] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 425.465017][T12599] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 425.477836][T12599] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 425.761198][T12607] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 425.770191][T12607] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 425.833903][T12611] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 425.850352][T12611] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 426.352903][T12626] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 426.369329][T12626] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 426.628072][T12633] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 426.645827][ T5774] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 426.653706][T12633] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 426.868256][ T5774] Bluetooth: hci4: command tx timeout [ 427.142952][T12649] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 427.153088][T12649] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 427.228684][T12652] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 427.261850][T12652] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 427.335749][ T60] [ 427.338142][ T60] ====================================================== [ 427.345170][ T60] WARNING: possible circular locking dependency detected [ 427.352219][ T60] syzkaller #0 Not tainted [ 427.356637][ T60] ------------------------------------------------------ [ 427.363660][ T60] kworker/u4:4/60 is trying to acquire lock: [ 427.369655][ T60] ffff8880306d8d80 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0 [ 427.379342][ T60] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 427.379342][ T60] but task is already holding lock: [ 427.386711][ T60] ffff8880788d0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 427.397065][ T60] [ 427.397065][ T60] which lock already depends on the new lock. [ 427.397065][ T60] [ 427.407480][ T60] [ 427.407480][ T60] the existing dependency chain (in reverse order) is: [ 427.416511][ T60] [ 427.416511][ T60] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 427.424266][ T60] __mutex_lock+0x135/0xc80 [ 427.429320][ T60] ieee80211_open+0x144/0x200 [ 427.434540][ T60] __dev_open+0x2cb/0x430 [ 427.439519][ T60] dev_open+0xab/0x190 [ 427.444126][ T60] team_add_slave+0x709/0x2880 [ 427.449436][ T60] do_setlink+0xcde/0x3f40 [ 427.454565][ T60] rtnl_newlink+0x1848/0x2170 [ 427.459851][ T60] rtnetlink_rcv_msg+0x843/0xf90 [ 427.465337][ T60] netlink_rcv_skb+0x235/0x4c0 [ 427.470644][ T60] netlink_unicast+0x7b1/0x930 [ 427.475953][ T60] netlink_sendmsg+0x8d0/0xbf0 [ 427.481267][ T60] ____sys_sendmsg+0x61b/0x980 [ 427.486580][ T60] ___sys_sendmsg+0x2a6/0x360 [ 427.491801][ T60] __se_sys_sendmsg+0x1d0/0x2c0 [ 427.497196][ T60] do_syscall_64+0x55/0xb0 [ 427.502167][ T60] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.508614][ T60] [ 427.508614][ T60] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 427.516816][ T60] __lock_acquire+0x37ef/0x7d80 [ 427.522212][ T60] lock_acquire+0x19e/0x420 [ 427.527265][ T60] __mutex_lock+0x135/0xc80 [ 427.532338][ T60] team_del_slave+0x31/0x1b0 [ 427.537486][ T60] team_device_event+0x297/0xa30 [ 427.544220][ T60] notifier_call_chain+0x18f/0x380 [ 427.550018][ T60] unregister_netdevice_many_notify+0x1037/0x1910 [ 427.557002][ T60] unregister_netdevice_queue+0x2e9/0x330 [ 427.563290][ T60] _cfg80211_unregister_wdev+0x16d/0x580 [ 427.569471][ T60] ieee80211_remove_interfaces+0x4b3/0x690 [ 427.575826][ T60] ieee80211_unregister_hw+0x5d/0x2a0 [ 427.581796][ T60] mac80211_hwsim_del_radio+0x289/0x480 [ 427.587902][ T60] hwsim_exit_net+0x58d/0x650 [ 427.593174][ T60] cleanup_net+0x707/0xbb0 [ 427.598141][ T60] process_scheduled_works+0xa60/0x1600 [ 427.604233][ T60] worker_thread+0xa5e/0xfe0 [ 427.609376][ T60] kthread+0x2fa/0x390 [ 427.613988][ T60] ret_from_fork+0x48/0x80 [ 427.618978][ T60] ret_from_fork_asm+0x11/0x20 [ 427.624372][ T60] [ 427.624372][ T60] other info that might help us debug this: [ 427.624372][ T60] [ 427.634621][ T60] Possible unsafe locking scenario: [ 427.634621][ T60] [ 427.642085][ T60] CPU0 CPU1 [ 427.647469][ T60] ---- ---- [ 427.652850][ T60] lock(&rdev->wiphy.mtx); [ 427.657373][ T60] lock(team->team_lock_key#2); [ 427.664864][ T60] lock(&rdev->wiphy.mtx); [ 427.671912][ T60] lock(team->team_lock_key#2); [ 427.676879][ T60] [ 427.676879][ T60] *** DEADLOCK *** [ 427.676879][ T60] [ 427.685034][ T60] 5 locks held by kworker/u4:4/60: [ 427.690149][ T60] #0: ffff88801a25c938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 427.701016][ T60] #1: ffffc900015b7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 427.711554][ T60] #2: ffffffff8e3c8b10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 427.720940][ T60] #3: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 427.730773][ T60] #4: ffff8880788d0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 427.741556][ T60] [ 427.741556][ T60] stack backtrace: [ 427.747450][ T60] CPU: 1 PID: 60 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 427.754815][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 427.764951][ T60] Workqueue: netns cleanup_net [ 427.769711][ T60] Call Trace: [ 427.772998][ T60] [ 427.775917][ T60] dump_stack_lvl+0x18c/0x250 [ 427.780590][ T60] ? load_image+0x420/0x420 [ 427.785090][ T60] ? show_regs_print_info+0x20/0x20 [ 427.790300][ T60] ? print_circular_bug+0x12b/0x1a0 [ 427.795506][ T60] check_noncircular+0x2fc/0x400 [ 427.800437][ T60] ? print_deadlock_bug+0x5d0/0x5d0 [ 427.805626][ T60] ? lockdep_lock+0xf5/0x230 [ 427.810209][ T60] ? _find_first_zero_bit+0xd6/0x100 [ 427.815488][ T60] __lock_acquire+0x37ef/0x7d80 [ 427.820335][ T60] ? verify_lock_unused+0x140/0x140 [ 427.825524][ T60] ? verify_lock_unused+0x140/0x140 [ 427.830725][ T60] ? __up_read+0x2b8/0x6b0 [ 427.835152][ T60] lock_acquire+0x19e/0x420 [ 427.839660][ T60] ? team_del_slave+0x31/0x1b0 [ 427.844436][ T60] ? __might_sleep+0xe0/0xe0 [ 427.849033][ T60] ? read_lock_is_recursive+0x20/0x20 [ 427.854413][ T60] __mutex_lock+0x135/0xc80 [ 427.858942][ T60] ? team_del_slave+0x31/0x1b0 [ 427.863713][ T60] ? __mutex_lock+0x30d/0xc80 [ 427.868408][ T60] ? team_del_slave+0x31/0x1b0 [ 427.873179][ T60] ? mutex_lock_nested+0x20/0x20 [ 427.878116][ T60] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 427.883867][ T60] team_del_slave+0x31/0x1b0 [ 427.888466][ T60] team_device_event+0x297/0xa30 [ 427.893404][ T60] notifier_call_chain+0x18f/0x380 [ 427.898538][ T60] unregister_netdevice_many_notify+0x1037/0x1910 [ 427.904978][ T60] ? unregister_netdevice_many+0x20/0x20 [ 427.910619][ T60] ? kernfs_remove_by_name_ns+0x117/0x150 [ 427.916355][ T60] ? __lock_acquire+0x7d80/0x7d80 [ 427.921383][ T60] unregister_netdevice_queue+0x2e9/0x330 [ 427.927130][ T60] ? list_netdevice+0x730/0x730 [ 427.932000][ T60] ? kernfs_remove_by_name_ns+0x117/0x150 [ 427.937733][ T60] _cfg80211_unregister_wdev+0x16d/0x580 [ 427.943373][ T60] ieee80211_remove_interfaces+0x4b3/0x690 [ 427.949186][ T60] ? ieee80211_do_stop+0x1df0/0x1df0 [ 427.954497][ T60] ? rcu_is_watching+0x15/0xb0 [ 427.959270][ T60] ieee80211_unregister_hw+0x5d/0x2a0 [ 427.964642][ T60] mac80211_hwsim_del_radio+0x289/0x480 [ 427.970290][ T60] ? rhashtable_remove_fast+0xc00/0xc00 [ 427.975843][ T60] hwsim_exit_net+0x58d/0x650 [ 427.980526][ T60] ? hwsim_init_net+0x90/0x90 [ 427.985206][ T60] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 427.991130][ T60] cleanup_net+0x707/0xbb0 [ 427.995553][ T60] ? ops_free_list+0x3b0/0x3b0 [ 428.000370][ T60] ? _raw_spin_unlock_irq+0x23/0x50 [ 428.005585][ T60] ? process_scheduled_works+0x975/0x1600 [ 428.011310][ T60] ? process_scheduled_works+0x975/0x1600 [ 428.017050][ T60] process_scheduled_works+0xa60/0x1600 [ 428.022610][ T60] ? worker_attach_to_pool+0x370/0x370 [ 428.028076][ T60] ? assign_work+0x3cc/0x5d0 [ 428.032708][ T60] worker_thread+0xa5e/0xfe0 [ 428.037329][ T60] kthread+0x2fa/0x390 [ 428.041401][ T60] ? pr_cont_work+0x550/0x550 [ 428.046078][ T60] ? kthread_blkcg+0xd0/0xd0 [ 428.050699][ T60] ret_from_fork+0x48/0x80 [ 428.055121][ T60] ? kthread_blkcg+0xd0/0xd0 [ 428.059712][ T60] ret_from_fork_asm+0x11/0x20 [ 428.064508][ T60] [ 428.076262][ T60] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode [ 428.086461][ T60] team0: Port device wlan1 removed [ 428.507967][ T60] hsr_slave_0: left promiscuous mode [ 428.537646][ T60] hsr_slave_1: left promiscuous mode [ 428.555219][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.581561][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.624325][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.647464][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.669903][ T60] hsr0: left allmulticast mode [ 428.674982][ T60] bridge0: port 4(hsr0) entered disabled state [ 428.692883][ T60] bridge0: port 3(dummy0) entered disabled state [ 428.703253][ T60] bridge0: port 2(team0) entered disabled state [ 428.711179][ T60] bridge_slave_0: left promiscuous mode [ 428.716869][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.726751][ T60] veth1_macvtap: left allmulticast mode [ 428.732801][ T60] veth1_macvtap: left promiscuous mode [ 428.738536][ T60] veth0_macvtap: left promiscuous mode [ 428.744118][ T60] veth0_vlan: left promiscuous mode [ 428.958384][ T60] team_slave_1 (unregistering): left promiscuous mode [ 428.965218][ T60] team_slave_1 (unregistering): left allmulticast mode [ 428.973523][ T60] team0 (unregistering): Port device team_slave_1 removed [ 428.999690][ T60] team_slave_0 (unregistering): left promiscuous mode [ 429.006519][ T60] team_slave_0 (unregistering): left allmulticast mode [ 429.014186][ T60] team0 (unregistering): Port device team_slave_0 removed [ 429.040792][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.075484][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.104731][ T60] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 429.204269][ T60] bond0 (unregistering): Released all slaves [ 429.270850][T12657] bond0: (slave syz_tun): Releasing backup interface [ 429.290245][T12648] bond0: (slave syz_tun): Releasing backup interface [ 429.324758][T12663] bond0: (slave syz_tun): Releasing backup interface [ 429.829071][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.875584][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.914792][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.955594][ T60] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.053864][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.094550][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.174403][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.274128][ T60] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): left promiscuous mode [ 430.282330][ T60] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): left allmulticast mode [ 430.293447][ T60] team0: Port device ÿÿÿÿÿÿ removed [ 430.299642][ T60] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.433599][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.484136][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.543322][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.594146][ T60] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.677779][ T60] mac80211_hwsim hwsim6 wlan1 (unregistering): left promiscuous mode [ 431.686362][ T60] mac80211_hwsim hwsim6 wlan1 (unregistering): left allmulticast mode [ 431.697058][ T60] team0: Port device wlan1 removed [ 431.846890][ T60] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode [ 431.855125][ T60] mac80211_hwsim hwsim3 wlan1 (unregistering): left allmulticast mode [ 431.866013][ T60] team0: Port device wlan1 removed [ 432.251432][ T60] vlan0: left allmulticast mode [ 432.256359][ T60] veth0_vlan: left allmulticast mode [ 432.262060][ T60] vlan0: left promiscuous mode [ 432.267152][ T60] À: port 1(vlan0) entered disabled state [ 432.283075][ T60] hsr_slave_0: left promiscuous mode [ 432.289125][ T60] hsr_slave_1: left promiscuous mode [ 432.296231][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.310016][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.318122][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.325557][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.333706][ T60] batman_adv: batadv0: Interface deactivated: vlan1 [ 432.340818][ T60] batman_adv: batadv0: Removing interface: vlan1 [ 432.348351][ T60] bridge0: port 3(dummy0) entered disabled state [ 432.355655][ T60] bridge0: port 2(team0) entered disabled state [ 432.363256][ T60] bridge_slave_0: left allmulticast mode [ 432.369087][ T60] bridge_slave_0: left promiscuous mode [ 432.374727][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.385679][ T60] hsr_slave_0: left promiscuous mode [ 432.392562][ T60] hsr_slave_1: left promiscuous mode [ 432.399554][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.407014][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.414757][ T60] bridge_slave_1: left allmulticast mode [ 432.420455][ T60] bridge_slave_1: left promiscuous mode [ 432.426199][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.434526][ T60] bridge_slave_0: left allmulticast mode [ 432.440222][ T60] bridge_slave_0: left promiscuous mode [ 432.445862][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.454325][ T60] vlan0: left allmulticast mode [ 432.459257][ T60] veth0_vlan: left allmulticast mode [ 432.464571][ T60] vlan0: left promiscuous mode [ 432.469784][ T60] À: port 1(vlan0) entered disabled state [ 432.479749][ T60] hsr_slave_0: left promiscuous mode [ 432.485473][ T60] hsr_slave_1: left promiscuous mode [ 432.491365][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.499037][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.506995][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.514515][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.522178][ T60] bridge0: port 3(team0) entered disabled state [ 432.529383][ T60] hsr0: left allmulticast mode [ 432.534240][ T60] bridge0: port 2(hsr0) entered disabled state [ 432.542008][ T60] bridge_slave_0: left allmulticast mode [ 432.547854][ T60] bridge_slave_0: left promiscuous mode [ 432.553547][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.564002][ T60] hsr_slave_0: left promiscuous mode [ 432.570269][ T60] hsr_slave_1: left promiscuous mode [ 432.575969][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.583938][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.592062][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.599998][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.608030][ T60] bridge0: port 3(team0) entered disabled state [ 432.615166][ T60] hsr0: left allmulticast mode [ 432.620162][ T60] bridge0: port 2(hsr0) entered disabled state [ 432.627269][ T60] bridge_slave_0: left allmulticast mode [ 432.633551][ T60] bridge_slave_0: left promiscuous mode [ 432.639488][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.650906][ T60] veth1_macvtap: left promiscuous mode [ 432.656420][ T60] veth0_macvtap: left promiscuous mode [ 432.662111][ T60] veth1_vlan: left promiscuous mode [ 432.667413][ T60] veth0_vlan: left promiscuous mode [ 432.675965][ T60] veth1_macvtap: left promiscuous mode [ 432.681894][ T60] veth0_macvtap: left promiscuous mode [ 432.687387][ T60] veth1_vlan: left promiscuous mode [ 432.692725][ T60] veth0_vlan: left promiscuous mode [ 432.698956][ T60] veth1_macvtap: left promiscuous mode [ 432.704446][ T60] veth0_macvtap: left promiscuous mode [ 432.901937][ T60] geneve1 (unregistering): left promiscuous mode [ 432.908358][ T60] geneve1 (unregistering): left allmulticast mode [ 432.915338][ T60] team0 (unregistering): Port device geneve1 removed [ 433.021488][ T60] team_slave_1 (unregistering): left promiscuous mode [ 433.030350][ T60] team_slave_1 (unregistering): left allmulticast mode [ 433.040673][ T60] team0 (unregistering): Port device team_slave_1 removed [ 433.064313][ T60] C (unregistering): left promiscuous mode [ 433.070783][ T60] C (unregistering): left allmulticast mode [ 433.077188][ T60] team0 (unregistering): Port device C removed [ 433.115255][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.150290][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.176883][ T60] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 433.236524][ T60] bond0 (unregistering): Released all slaves [ 433.375457][ T60] team0 (unregistering): Port device team_slave_1 removed [ 433.405038][ T60] team0 (unregistering): Port device team_slave_0 removed [ 433.432935][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.459748][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.505838][ T60] bond0 (unregistering): Released all slaves [ 433.681418][ T60] team_slave_1 (unregistering): left promiscuous mode [ 433.691745][ T60] team_slave_1 (unregistering): left allmulticast mode [ 433.699692][ T60] team0 (unregistering): Port device team_slave_1 removed [ 433.723545][ T60] C (unregistering): left promiscuous mode [ 433.729533][ T60] C (unregistering): left allmulticast mode [ 433.736004][ T60] team0 (unregistering): Port device C removed [ 433.761535][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.791654][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.818812][ T60] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 433.884051][ T60] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 433.892937][ T60] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 433.904426][ T60] bond0 (unregistering): Released all slaves [ 434.080596][ T60] team_slave_1 (unregistering): left promiscuous mode [ 434.087424][ T60] team_slave_1 (unregistering): left allmulticast mode [ 434.095316][ T60] team0 (unregistering): Port device team_slave_1 removed [ 434.154122][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.216866][ T60] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 434.291555][ T60] bond0 (unregistering): Released all slaves