last executing test programs: 11.093582264s ago: executing program 0 (id=6697): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x117, 0x0, &(0x7f00000006c0)="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", 0x0, 0x1000031, 0x6000000000000000, 0x0, 0x0, &(0x7f00000005c0), &(0x7f00000005c0)}, 0x50) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x7}, 0x108801, 0xac5d, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xa2a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x10, 0x0, 0x1300) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x3000000c, @loopback, 0x3}, 0x80, 0x0}, 0x2000c805) 11.089291384s ago: executing program 2 (id=6698): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x48) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0xc}, 0x718, 0x0, 0x0, 0x8, 0x3fe, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000980)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x51, 0x71, 0x10, 0x1a}}, &(0x7f00000009c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000a80)=@base={0x6, 0x4, 0x70be, 0x5c}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 10.610229095s ago: executing program 2 (id=6702): r0 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x2, 0x73) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x35, 0x0, 0xfcd8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x8001, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x12, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@arena={0x21, 0x0, 0x0, 0x6, 0x20000, 0xffffffffffffffff, 0x24000000, '\x00', 0x0, r3, 0x1, 0x3, 0x2}, 0x50) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091"], 0xfe33) 10.41647064s ago: executing program 2 (id=6707): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f0000000500)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xf, 0x10}, [@tail_call], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='[&\xd3#\xaa{@\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000ff000000ff7f0000cc"], 0x50) 8.453022435s ago: executing program 4 (id=6714): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x48) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0xc}, 0x718, 0x0, 0x0, 0x8, 0x3fe, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000980)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x51, 0x71, 0x10, 0x1a}}, &(0x7f00000009c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000a80)=@base={0x6, 0x4, 0x70be, 0x5c}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 6.257485106s ago: executing program 0 (id=6726): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000cc0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000dc0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000f00)) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x1f, 0x10, &(0x7f0000001700)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.240884026s ago: executing program 2 (id=6727): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c00)='syzkaller\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 6.240500986s ago: executing program 4 (id=6728): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0xb, @perf_config_ext={0x7, 0xd04}, 0x6221, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000980), 0x43) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 5.872785365s ago: executing program 0 (id=6717): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 5.872398315s ago: executing program 3 (id=6718): perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x3, 0xc, &(0x7f0000000e40)=ANY=[@ANYBLOB="180200008800000000000000fdfffdff18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000007200000085000000d0000000"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x2}, 0x8, 0x10, &(0x7f0000000c40), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x702, 0xe80, 0x0, &(0x7f0000000d00)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8916, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x2, 0x6, 0x0, &(0x7f00000001c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000000)=""/195, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 5.276191149s ago: executing program 0 (id=6719): r0 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x2, 0x73) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x35, 0x0, 0xfcd8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x8001, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x12, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@arena={0x21, 0x0, 0x0, 0x6, 0x20000, 0xffffffffffffffff, 0x24000000, '\x00', 0x0, r3, 0x1, 0x3, 0x2}, 0x50) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091"], 0xfe33) 5.275852778s ago: executing program 2 (id=6721): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x4, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) 5.275414458s ago: executing program 4 (id=6722): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0x10, 0x0, 0x8, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xe, 0x10000004000}, 0xd832, 0x200000000000c8, 0x806, 0x9, 0xfffffffffffffffb, 0x80000000, 0x3, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x24040014) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000020) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40010122) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x16, 0x3, 0x0, &(0x7f00000009c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8, 0x8bdc}, 0x100, 0x3ffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)}, 0x0) 5.124071882s ago: executing program 3 (id=6723): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000006c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000700)={r0, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000100c00)={0xffffffffffffffff, r0, 0x4}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000100c40)=@bpf_lsm={0x6, 0x3, &(0x7f0000100d00)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000100d40)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000100d80)={0x9, 0x0}, 0x8) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x40000) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000100dc0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000100e00)={r3, r1, 0x4}, 0x5) 3.185869747s ago: executing program 1 (id=6724): openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656", 0x3d}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0x2, 0x0, &(0x7f0000000240)="ff41", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 3.184866117s ago: executing program 0 (id=6737): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x23, 0x5, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext, 0x0, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0x4aded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.180750266s ago: executing program 2 (id=6738): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x164000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='THAWED\x00', 0x7) 3.178499457s ago: executing program 3 (id=6739): socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000280)=0x1) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000e80)="b9e403", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4156, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x105e39, 0x0, 0xfffffffe, 0x6, 0x5, 0x2, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x8000) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={r2}) 3.169820307s ago: executing program 4 (id=6740): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x4}, 0x3442, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0xc, 0x0, 0x0) close(0x3) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xc4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x1, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4102, 0x6f5f, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r0, r0, 0x4}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.828243065s ago: executing program 1 (id=6725): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000840)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000008c0)=ANY=[], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001740)=ANY=[], 0x50) 2.827929685s ago: executing program 4 (id=6729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0), 0x9, r2}, 0x38) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.820733835s ago: executing program 3 (id=6742): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0xda) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000500), &(0x7f00000002c0)=r1}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 2.276971687s ago: executing program 1 (id=6730): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x3, 0x1, 0x79}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={r4, 0x58, &(0x7f0000001500)={0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x80) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001600)={r5}, 0xc) 2.276617637s ago: executing program 3 (id=6731): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x22a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) gettid() recvmsg$unix(r0, 0x0, 0x40012140) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x8, 0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x149000, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7fff"}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r2) 1.982001844s ago: executing program 1 (id=6732): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000cc0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000dc0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000f00)) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x1f, 0x10, &(0x7f0000001700)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.855926197s ago: executing program 1 (id=6733): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0xb, @perf_config_ext={0x7, 0xd04}, 0x6221, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000980), 0x43) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 83.808808ms ago: executing program 1 (id=6734): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c00)='syzkaller\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 28.796239ms ago: executing program 4 (id=6735): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, 0x0, 0x2600c055) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)="d80000001c0081064e81f782db44b9040a1d080403000000f700ffa1180002000607002603600e12080b0f0000810401a800160520000140020000082f3d4e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9851627504575107ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100001340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bff00e0b42a9ecbee5de6ccd40dd6e4edef5d2defd5cc9b8d3fb7c27a1059ae31c60e", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) 17.449709ms ago: executing program 3 (id=6736): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x10c002, 0xac5d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd28, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000f00000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 0s ago: executing program 0 (id=6741): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x374c37d75009b2cf, 0xac5d, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000008, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x9f, &(0x7f00000001c0)=""/159}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x2c, &(0x7f0000001080)=[{&(0x7f00000012c0)="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", 0xe00}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2", 0x2d}], 0x2, &(0x7f00000010c0)=[@ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x29, 0x4}}, @ip_pktinfo={{0x5, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ted syzkaller #0 [ 1203.584718][T15649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1203.594821][T15649] Workqueue: hci0 hci_rx_work [ 1203.599543][T15649] Call Trace: [ 1203.602856][T15649] [ 1203.605817][T15649] dump_stack_lvl+0x188/0x24e [ 1203.610554][T15649] ? show_regs_print_info+0x12/0x12 [ 1203.615810][T15649] ? load_image+0x410/0x410 [ 1203.620459][T15649] sysfs_create_dir_ns+0x26a/0x290 [ 1203.625688][T15649] ? __lock_acquire+0x7ea0/0x7ea0 [ 1203.630835][T15649] ? sysfs_warn_dup+0xa0/0xa0 [ 1203.635579][T15649] ? do_raw_spin_unlock+0x11d/0x230 [ 1203.640859][T15649] kobject_add_internal+0x617/0xca0 [ 1203.646132][T15649] kobject_add+0x160/0x230 [ 1203.650612][T15649] ? kobject_init+0x1c0/0x1c0 [ 1203.655344][T15649] ? __raw_spin_lock_init+0x41/0x100 [ 1203.660659][T15649] ? klist_children_get+0x50/0x50 [ 1203.665713][T15649] ? get_device_parent+0x121/0x3e0 [ 1203.670868][T15649] device_add+0x470/0x1050 [ 1203.675326][T15649] hci_conn_add_sysfs+0xd1/0x1e0 [ 1203.680299][T15649] le_conn_complete_evt+0xf93/0x15c0 [ 1203.685721][T15649] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1203.691994][T15649] ? bt_info+0x180/0x180 [ 1203.696268][T15649] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1203.701939][T15649] ? mutex_unlock+0x10/0x10 [ 1203.706475][T15649] ? skb_pull_data+0xec/0x1f0 [ 1203.711192][T15649] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1203.717132][T15649] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1203.723587][T15649] ? hci_remote_host_features_evt+0x230/0x230 [ 1203.729687][T15649] hci_event_packet+0x7b3/0x1290 [ 1203.734675][T15649] ? lock_chain_count+0x20/0x20 [ 1203.739566][T15649] ? bis_list+0x280/0x280 [ 1203.743923][T15649] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1203.749864][T15649] ? kcov_remote_start+0x50f/0x810 [ 1203.755012][T15649] ? lockdep_hardirqs_on+0x94/0x140 [ 1203.760249][T15649] ? hci_send_to_monitor+0x9c/0x4a0 [ 1203.765481][T15649] hci_rx_work+0x3eb/0xd40 [ 1203.769929][T15649] ? _raw_spin_unlock+0x40/0x40 [ 1203.774834][T15649] ? process_one_work+0x7b4/0x1160 [ 1203.780006][T15649] process_one_work+0x8ab/0x1160 [ 1203.784998][T15649] ? worker_detach_from_pool+0x240/0x240 [ 1203.790659][T15649] ? _raw_spin_lock_irq+0x86/0xf0 [ 1203.795729][T15649] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1203.800853][T15649] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1203.806450][T15649] ? wq_worker_running+0x97/0x190 [ 1203.811506][T15649] worker_thread+0xaf5/0x12a0 [ 1203.816235][T15649] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1203.822168][T15649] kthread+0x29d/0x330 [ 1203.826290][T15649] ? worker_clr_flags+0x1a0/0x1a0 [ 1203.831346][T15649] ? kthread_blkcg+0xd0/0xd0 [ 1203.835969][T15649] ret_from_fork+0x1f/0x30 [ 1203.840433][T15649] [ 1203.844811][T15649] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1203.857990][T15649] Bluetooth: hci0: failed to register connection device [ 1204.903776][T15649] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 1208.240487][T19393] netlink: 'syz.0.5712': attribute type 10 has an invalid length. [ 1208.255733][T19393] device vlan0 entered promiscuous mode [ 1209.211164][T19419] device syzkaller0 entered promiscuous mode [ 1209.263312][T19427] netlink: 'syz.2.5723': attribute type 10 has an invalid length. [ 1211.864300][T19438] netlink: 'syz.1.5736': attribute type 2 has an invalid length. [ 1213.823416][T15649] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 1214.843393][T19438] device 0 entered promiscuous mode [ 1214.864962][T19463] netlink: 'syz.4.5732': attribute type 10 has an invalid length. [ 1217.804303][T19502] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5747'. [ 1217.902920][T19502] netlink: zone id is out of range [ 1217.960346][T19502] netlink: zone id is out of range [ 1217.978363][T19502] netlink: zone id is out of range [ 1218.012212][T19502] netlink: zone id is out of range [ 1218.018062][T19502] netlink: zone id is out of range [ 1218.023721][T19502] netlink: zone id is out of range [ 1218.038932][T19502] netlink: zone id is out of range [ 1218.052327][T19502] netlink: zone id is out of range [ 1218.092620][T19502] netlink: zone id is out of range [ 1218.108065][T19502] netlink: zone id is out of range [ 1218.451176][T15649] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 1218.658675][T19532] netlink: 'syz.1.5756': attribute type 10 has an invalid length. [ 1218.707184][T19532] device virt_wifi0 entered promiscuous mode [ 1218.726617][T19532] team0: Port device virt_wifi0 added [ 1222.018161][T19563] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.5767'. [ 1222.107658][T15649] Bluetooth: hci4: unexpected event 0x33 length: 15 > 10 [ 1222.278863][T19575] netlink: 'syz.3.5772': attribute type 10 has an invalid length. [ 1222.300637][T19575] netlink: 'syz.3.5772': attribute type 10 has an invalid length. [ 1222.319703][T19577] netlink: 'syz.4.5774': attribute type 10 has an invalid length. [ 1226.613018][T19610] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.5784'. [ 1226.713250][T19610] net_ratelimit: 16 callbacks suppressed [ 1226.713281][T19610] netlink: zone id is out of range [ 1226.783159][T19610] netlink: zone id is out of range [ 1226.843051][T19610] netlink: zone id is out of range [ 1226.855147][T19610] netlink: zone id is out of range [ 1226.905180][T19610] netlink: zone id is out of range [ 1226.930920][T19610] netlink: zone id is out of range [ 1226.975295][T19610] netlink: zone id is out of range [ 1226.983738][T19610] netlink: zone id is out of range [ 1227.045868][T19610] netlink: zone id is out of range [ 1227.101788][T19610] netlink: zone id is out of range [ 1227.297971][T19619] netlink: 'syz.3.5788': attribute type 10 has an invalid length. [ 1228.820064][T19642] netlink: 'syz.3.5798': attribute type 15 has an invalid length. [ 1228.851970][T19642] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5798'. [ 1229.270702][T19655] netlink: 'syz.0.5801': attribute type 2 has an invalid length. [ 1229.331284][T19655] netlink: 'syz.0.5801': attribute type 8 has an invalid length. [ 1229.406587][T19655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5801'. [ 1231.779180][T19661] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5805'. [ 1231.782036][T19663] rxe_eth0 speed is unknown, defaulting to 1000 [ 1231.820799][T19661] net_ratelimit: 3 callbacks suppressed [ 1231.820819][T19661] netlink: zone id is out of range [ 1231.835588][T19661] netlink: zone id is out of range [ 1231.857867][T19661] netlink: zone id is out of range [ 1231.866360][T19661] netlink: zone id is out of range [ 1231.872184][T19661] netlink: zone id is out of range [ 1231.897571][T19661] netlink: zone id is out of range [ 1231.910761][T19661] netlink: zone id is out of range [ 1231.936338][T19661] netlink: zone id is out of range [ 1231.962980][T19661] netlink: zone id is out of range [ 1231.998692][T19661] netlink: zone id is out of range [ 1233.362876][T19695] netlink: 'syz.2.5816': attribute type 10 has an invalid length. [ 1233.540276][T19695] netlink: 'syz.2.5816': attribute type 10 has an invalid length. [ 1237.345563][T19722] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.5824'. [ 1237.385323][T19722] net_ratelimit: 3 callbacks suppressed [ 1237.385341][T19722] netlink: zone id is out of range [ 1237.435002][T19722] netlink: zone id is out of range [ 1237.458822][T19722] netlink: zone id is out of range [ 1237.475234][T19722] netlink: zone id is out of range [ 1237.482562][T19722] netlink: zone id is out of range [ 1237.529603][T19722] netlink: zone id is out of range [ 1237.565476][T19722] netlink: zone id is out of range [ 1237.605795][T19722] netlink: zone id is out of range [ 1237.629233][T19722] netlink: zone id is out of range [ 1237.694884][T19722] netlink: zone id is out of range [ 1238.533719][T19740] netlink: 'syz.0.5832': attribute type 10 has an invalid length. [ 1238.825931][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.832382][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.178758][T19764] rxe_eth0 speed is unknown, defaulting to 1000 [ 1243.309865][T19776] netlink: 'syz.4.5845': attribute type 10 has an invalid length. [ 1243.361169][T19776] netlink: 'syz.4.5845': attribute type 10 has an invalid length. [ 1243.552787][T19777] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5844'. [ 1243.583603][T19777] net_ratelimit: 3 callbacks suppressed [ 1243.583622][T19777] netlink: zone id is out of range [ 1243.611940][T19777] netlink: zone id is out of range [ 1243.648537][T19777] netlink: zone id is out of range [ 1243.667804][T19777] netlink: zone id is out of range [ 1243.683435][T19777] netlink: zone id is out of range [ 1243.693903][T19777] netlink: zone id is out of range [ 1243.714816][T19777] netlink: zone id is out of range [ 1243.720637][T19777] netlink: zone id is out of range [ 1243.753945][T19784] netlink: 'syz.4.5848': attribute type 20 has an invalid length. [ 1243.855896][T19777] netlink: zone id is out of range [ 1243.862259][T19777] netlink: zone id is out of range [ 1250.091065][T15649] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6 [ 1250.398209][T19827] rxe_eth0 speed is unknown, defaulting to 1000 [ 1251.070029][T19841] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5865'. [ 1251.095068][T19841] net_ratelimit: 3 callbacks suppressed [ 1251.095084][T19841] netlink: zone id is out of range [ 1251.129967][T19841] netlink: zone id is out of range [ 1251.170232][T19841] netlink: zone id is out of range [ 1251.190639][T19841] netlink: zone id is out of range [ 1251.213096][T19841] netlink: zone id is out of range [ 1251.225964][T19848] netlink: 'syz.3.5868': attribute type 30 has an invalid length. [ 1251.245732][T19841] netlink: zone id is out of range [ 1251.260692][T19841] netlink: zone id is out of range [ 1251.285109][T19841] netlink: zone id is out of range [ 1251.295158][T19851] netlink: 'syz.3.5868': attribute type 10 has an invalid length. [ 1251.305150][T19841] netlink: zone id is out of range [ 1251.333420][T19841] netlink: zone id is out of range [ 1251.528997][T19851] device geneve1 entered promiscuous mode [ 1251.545905][T19851] team0: Port device geneve1 added [ 1252.250550][T19869] syzkaller0: create flow: hash 3030090652 index 2 [ 1255.216976][ T4349] syzkaller0: tun_net_xmit 76 [ 1255.221998][ T4349] syzkaller0: tun_net_xmit 48 [ 1255.246288][ T14] syzkaller0: tun_net_xmit 76 [ 1255.260779][T19870] syzkaller0: delete flow: hash 3030090652 index 2 [ 1256.984525][T19898] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5882'. [ 1257.007056][T19898] net_ratelimit: 3 callbacks suppressed [ 1257.007074][T19898] netlink: zone id is out of range [ 1257.033504][T19898] netlink: zone id is out of range [ 1257.048998][T19898] netlink: zone id is out of range [ 1257.058918][T19898] netlink: zone id is out of range [ 1257.071916][T19898] netlink: zone id is out of range [ 1257.095860][T19898] netlink: zone id is out of range [ 1257.101854][T19898] netlink: zone id is out of range [ 1257.131548][T19898] netlink: zone id is out of range [ 1257.161749][T19898] netlink: zone id is out of range [ 1257.181080][T19898] netlink: zone id is out of range [ 1260.108515][T19892] rxe_eth0 speed is unknown, defaulting to 1000 [ 1260.294080][T19909] rxe_eth0 speed is unknown, defaulting to 1000 [ 1261.179507][T19944] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.5900'. [ 1262.188461][T19954] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5904'. [ 1262.771026][T19968] device syzkaller0 entered promiscuous mode [ 1263.121504][T19971] rxe_eth0 speed is unknown, defaulting to 1000 [ 1263.492438][T19980] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.5915'. [ 1263.525550][T19980] net_ratelimit: 16 callbacks suppressed [ 1263.525572][T19980] netlink: zone id is out of range [ 1263.578417][T19980] netlink: zone id is out of range [ 1263.592755][T19980] netlink: zone id is out of range [ 1263.621400][T19980] netlink: zone id is out of range [ 1263.641816][T19980] netlink: zone id is out of range [ 1263.666344][T19980] netlink: zone id is out of range [ 1263.696931][T19980] netlink: zone id is out of range [ 1263.724256][T19980] netlink: zone id is out of range [ 1263.749412][T19980] netlink: zone id is out of range [ 1263.774742][T19980] netlink: zone id is out of range [ 1264.017890][T19993] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5918'. [ 1264.918844][T19999] netlink: 'syz.1.5930': attribute type 15 has an invalid length. [ 1264.951578][T19999] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5930'. [ 1266.035699][T20022] device syzkaller0 left promiscuous mode [ 1266.146309][T20022] device syzkaller0 entered promiscuous mode [ 1266.717300][T20042] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5935'. [ 1266.820230][T20042] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1266.853293][T20042] CPU: 1 PID: 20042 Comm: syz.3.5935 Not tainted syzkaller #0 [ 1266.861292][T20042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1266.871457][T20042] Call Trace: [ 1266.874792][T20042] [ 1266.877775][T20042] dump_stack_lvl+0x188/0x24e [ 1266.882522][T20042] ? show_regs_print_info+0x12/0x12 [ 1266.887806][T20042] ? load_image+0x410/0x410 [ 1266.892388][T20042] sysfs_warn_dup+0x8a/0xa0 [ 1266.896958][T20042] sysfs_do_create_link_sd+0xc0/0x110 [ 1266.902424][T20042] device_add+0x83b/0x1050 [ 1266.906920][T20042] wiphy_register+0x1d8b/0x2aa0 [ 1266.911861][T20042] ? cfg80211_event_work+0x40/0x40 [ 1266.917030][T20042] ? minstrel_ht_alloc+0x894/0xa20 [ 1266.922213][T20042] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1266.928357][T20042] ieee80211_register_hw+0x2e33/0x3b00 [ 1266.933898][T20042] ? ieee80211_register_hw+0xf31/0x3b00 [ 1266.939521][T20042] ? ieee80211_register_hw+0xf31/0x3b00 [ 1266.945152][T20042] ? ieee80211_tasklet_handler+0x20/0x20 [ 1266.950851][T20042] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1266.956818][T20042] ? __debug_object_init+0xed/0x440 [ 1266.962170][T20042] ? memset+0x1e/0x40 [ 1266.966211][T20042] ? __hrtimer_init+0x189/0x270 [ 1266.971136][T20042] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1266.976943][T20042] ? memcpy+0x3c/0x60 [ 1266.981023][T20042] hwsim_new_radio_nl+0xab7/0xc90 [ 1266.986218][T20042] genl_family_rcv_msg_doit+0x22f/0x350 [ 1266.991836][T20042] ? end_current_label_crit_section+0x170/0x170 [ 1266.998292][T20042] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1267.004270][T20042] ? bpf_lsm_capable+0x5/0x10 [ 1267.009023][T20042] ? security_capable+0x85/0xb0 [ 1267.013959][T20042] genl_rcv_msg+0x601/0x790 [ 1267.018560][T20042] ? genl_bind+0x360/0x360 [ 1267.023043][T20042] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1267.029458][T20042] netlink_rcv_skb+0x1ef/0x440 [ 1267.034379][T20042] ? genl_bind+0x360/0x360 [ 1267.038953][T20042] ? netlink_ack+0x1160/0x1160 [ 1267.043803][T20042] ? down_read+0x1a8/0x2d0 [ 1267.048390][T20042] genl_rcv+0x24/0x40 [ 1267.052436][T20042] netlink_unicast+0x7ad/0x920 [ 1267.057296][T20042] netlink_sendmsg+0x8ad/0xbd0 [ 1267.062138][T20042] ? netlink_getsockopt+0x550/0x550 [ 1267.067409][T20042] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1267.073044][T20042] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1267.078397][T20042] ? security_socket_sendmsg+0x7c/0xa0 [ 1267.083929][T20042] ? netlink_getsockopt+0x550/0x550 [ 1267.089193][T20042] ____sys_sendmsg+0x5ed/0x9a0 [ 1267.094026][T20042] ? __sys_sendmsg_sock+0x30/0x30 [ 1267.099105][T20042] ? __import_iovec+0x306/0x510 [ 1267.104021][T20042] ? import_iovec+0x6f/0xa0 [ 1267.108579][T20042] ___sys_sendmsg+0x2a2/0x360 [ 1267.113307][T20042] ? __sys_sendmsg+0x2a0/0x2a0 [ 1267.118172][T20042] __se_sys_sendmsg+0x1c3/0x2b0 [ 1267.123168][T20042] ? __x64_sys_sendmsg+0x80/0x80 [ 1267.128171][T20042] ? lockdep_hardirqs_on+0x94/0x140 [ 1267.133421][T20042] do_syscall_64+0x4c/0xa0 [ 1267.137881][T20042] ? clear_bhb_loop+0x60/0xb0 [ 1267.142600][T20042] ? clear_bhb_loop+0x60/0xb0 [ 1267.147336][T20042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1267.153273][T20042] RIP: 0033:0x7f69f459f559 [ 1267.157748][T20042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.177405][T20042] RSP: 002b:00007f69f540a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1267.185866][T20042] RAX: ffffffffffffffda RBX: 00007f69f4826090 RCX: 00007f69f459f559 [ 1267.193959][T20042] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1267.201963][T20042] RBP: 00007f69f4636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1267.209967][T20042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1267.218005][T20042] R13: 00007f69f4826128 R14: 00007f69f4826090 R15: 00007ffe287f4028 [ 1267.226061][T20042] [ 1267.239961][T20049] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5939'. [ 1267.299571][T20025] rxe_eth0 speed is unknown, defaulting to 1000 [ 1267.742480][T20054] netlink: 'syz.1.5941': attribute type 30 has an invalid length. [ 1267.888053][T20054] netlink: 'syz.1.5941': attribute type 10 has an invalid length. [ 1268.328767][T20072] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5946'. [ 1268.731318][T20086] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.5951'. [ 1268.821214][T20086] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1268.865860][T20086] CPU: 0 PID: 20086 Comm: syz.4.5951 Not tainted syzkaller #0 [ 1268.873459][T20086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1268.883570][T20086] Call Trace: [ 1268.886921][T20086] [ 1268.889908][T20086] dump_stack_lvl+0x188/0x24e [ 1268.894655][T20086] ? show_regs_print_info+0x12/0x12 [ 1268.899928][T20086] ? load_image+0x410/0x410 [ 1268.904502][T20086] sysfs_warn_dup+0x8a/0xa0 [ 1268.909072][T20086] sysfs_do_create_link_sd+0xc0/0x110 [ 1268.914536][T20086] device_add+0x83b/0x1050 [ 1268.919035][T20086] wiphy_register+0x1d8b/0x2aa0 [ 1268.924059][T20086] ? cfg80211_event_work+0x40/0x40 [ 1268.929258][T20086] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1268.935520][T20086] ieee80211_register_hw+0x2e33/0x3b00 [ 1268.941803][T20086] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1268.948054][T20086] ? ieee80211_register_hw+0xf31/0x3b00 [ 1268.953673][T20086] ? ieee80211_register_hw+0xf31/0x3b00 [ 1268.959333][T20086] ? ieee80211_tasklet_handler+0x20/0x20 [ 1268.965038][T20086] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1268.971014][T20086] ? __debug_object_init+0xed/0x440 [ 1268.976386][T20086] ? memset+0x1e/0x40 [ 1268.980527][T20086] ? __hrtimer_init+0x189/0x270 [ 1268.985451][T20086] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1268.991252][T20086] ? memcpy+0x3c/0x60 [ 1268.995326][T20086] hwsim_new_radio_nl+0xab7/0xc90 [ 1269.000430][T20086] genl_family_rcv_msg_doit+0x22f/0x350 [ 1269.006048][T20086] ? end_current_label_crit_section+0x170/0x170 [ 1269.012368][T20086] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1269.018341][T20086] ? bpf_lsm_capable+0x5/0x10 [ 1269.023081][T20086] ? security_capable+0x85/0xb0 [ 1269.028010][T20086] genl_rcv_msg+0x601/0x790 [ 1269.032601][T20086] ? genl_bind+0x360/0x360 [ 1269.037079][T20086] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1269.043478][T20086] ? lock_chain_count+0x20/0x20 [ 1269.048419][T20086] netlink_rcv_skb+0x1ef/0x440 [ 1269.053242][T20086] ? genl_bind+0x360/0x360 [ 1269.057758][T20086] ? netlink_ack+0x1160/0x1160 [ 1269.062593][T20086] ? down_read+0x1a8/0x2d0 [ 1269.067078][T20086] genl_rcv+0x24/0x40 [ 1269.071164][T20086] netlink_unicast+0x7ad/0x920 [ 1269.076005][T20086] netlink_sendmsg+0x8ad/0xbd0 [ 1269.080847][T20086] ? lockdep_hardirqs_on+0x94/0x140 [ 1269.086140][T20086] ? netlink_getsockopt+0x550/0x550 [ 1269.091412][T20086] ? __sanitizer_cov_trace_pc+0x2c/0x60 [ 1269.097025][T20086] ? security_socket_sendmsg+0x7c/0xa0 [ 1269.102706][T20086] ? netlink_getsockopt+0x550/0x550 [ 1269.107976][T20086] ____sys_sendmsg+0x5ed/0x9a0 [ 1269.112822][T20086] ? __sys_sendmsg_sock+0x30/0x30 [ 1269.117904][T20086] ? __import_iovec+0x306/0x510 [ 1269.122833][T20086] ? import_iovec+0x6f/0xa0 [ 1269.127420][T20086] ___sys_sendmsg+0x2a2/0x360 [ 1269.132176][T20086] ? __sys_sendmsg+0x2a0/0x2a0 [ 1269.137037][T20086] ? lockdep_hardirqs_on+0x94/0x140 [ 1269.142345][T20086] __se_sys_sendmsg+0x1c3/0x2b0 [ 1269.147264][T20086] ? __x64_sys_sendmsg+0x80/0x80 [ 1269.152278][T20086] ? lockdep_hardirqs_on+0x94/0x140 [ 1269.157547][T20086] do_syscall_64+0x4c/0xa0 [ 1269.162026][T20086] ? clear_bhb_loop+0x60/0xb0 [ 1269.166764][T20086] ? clear_bhb_loop+0x60/0xb0 [ 1269.171507][T20086] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1269.177462][T20086] RIP: 0033:0x7f4643f9f559 [ 1269.181939][T20086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.191305][T20090] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5953'. [ 1269.201669][T20086] RSP: 002b:00007f4644eca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.201762][T20086] RAX: ffffffffffffffda RBX: 00007f4644225fa0 RCX: 00007f4643f9f559 [ 1269.201780][T20086] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1269.201796][T20086] RBP: 00007f4644036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1269.201812][T20086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.201828][T20086] R13: 00007f4644226038 R14: 00007f4644225fa0 R15: 00007ffc1bd36a08 [ 1269.260179][T20086] [ 1269.376890][T20093] netlink: 'syz.0.5954': attribute type 30 has an invalid length. [ 1269.427424][T20093] netlink: 'syz.0.5954': attribute type 10 has an invalid length. [ 1270.144685][T20096] rxe_eth0 speed is unknown, defaulting to 1000 [ 1270.335221][T20120] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5963'. [ 1270.788773][T20131] device syzkaller0 entered promiscuous mode [ 1273.419710][T20138] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.5969'. [ 1274.630755][T20146] netlink: 'syz.1.5982': attribute type 10 has an invalid length. [ 1274.712062][T20156] tun0: tun_chr_ioctl cmd 1074812118 [ 1274.976836][T15649] Bluetooth: hci0: unexpected event 0x04 length: 151 > 10 [ 1275.009926][T20166] netlink: 'syz.2.5977': attribute type 4 has an invalid length. [ 1275.430791][T20175] rxe_eth0 speed is unknown, defaulting to 1000 [ 1275.919513][T20191] netlink: 'syz.0.5992': attribute type 10 has an invalid length. [ 1276.984667][T11948] Bluetooth: hci0: command 0x0409 tx timeout [ 1278.910665][T20203] netlink: 'syz.0.5998': attribute type 4 has an invalid length. [ 1278.963269][T11948] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 1279.192626][T15471] tipc: Subscription rejected, illegal request [ 1279.209029][T15649] Bluetooth: hci3: adv larger than maximum supported [ 1279.209076][T15649] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1279.329163][T20218] netlink: 'syz.3.6005': attribute type 2 has an invalid length. [ 1279.355004][T20218] netlink: 'syz.3.6005': attribute type 8 has an invalid length. [ 1279.405910][T20218] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6005'. [ 1279.535914][T20225] netlink: 'syz.4.6007': attribute type 10 has an invalid length. [ 1280.984497][T15649] Bluetooth: hci3: command 0x0409 tx timeout [ 1281.066421][T11948] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 1281.316117][T20247] device syzkaller0 entered promiscuous mode [ 1281.333309][T20249] netlink: 'syz.1.6014': attribute type 4 has an invalid length. [ 1282.045621][T15649] Bluetooth: hci4: unexpected event 0x04 length: 151 > 10 [ 1283.144808][T11948] Bluetooth: hci1: command 0x0409 tx timeout [ 1284.104631][T11948] Bluetooth: hci4: command 0x0409 tx timeout [ 1287.271269][T20284] netlink: 'syz.4.6030': attribute type 10 has an invalid length. [ 1287.444302][T20287] rxe_eth0 speed is unknown, defaulting to 1000 [ 1287.682389][T20299] netlink: 'syz.0.6035': attribute type 27 has an invalid length. [ 1287.740090][T20299] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6035'. [ 1288.181188][T11948] Bluetooth: hci0: adv larger than maximum supported [ 1288.181225][T11948] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1291.383360][T20320] netlink: 'syz.2.6045': attribute type 10 has an invalid length. [ 1291.556139][T20320] team0: Device veth1_vlan failed to register rx_handler [ 1292.313461][T20349] rxe_eth0 speed is unknown, defaulting to 1000 [ 1293.181053][T11948] Bluetooth: hci0: unknown advertising packet type: 0x3a [ 1293.181094][T11948] Bluetooth: hci0: unknown advertising packet type: 0x64 [ 1293.569224][T20372] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6062'. [ 1296.550465][T20378] netlink: 'syz.3.6063': attribute type 10 has an invalid length. [ 1296.979315][T20378] team0: Device veth1_vlan failed to register rx_handler [ 1299.302711][T20401] rxe_eth0 speed is unknown, defaulting to 1000 [ 1299.398682][T14553] tipc: Subscription rejected, illegal request [ 1299.456070][T20410] netlink: 'syz.2.6088': attribute type 2 has an invalid length. [ 1299.495885][T20410] netlink: 'syz.2.6088': attribute type 8 has an invalid length. [ 1299.534734][T20410] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6088'. [ 1300.107346][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.113822][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.356552][T20429] netlink: 'syz.0.6084': attribute type 10 has an invalid length. [ 1301.174258][T20429] team0: Device veth1_vlan failed to register rx_handler [ 1301.236475][T20434] : port 1(ip6gretap0) entered blocking state [ 1301.242934][T20434] : port 1(ip6gretap0) entered disabled state [ 1301.260972][T20434] device ip6gretap0 entered promiscuous mode [ 1301.326895][T20428] device ip6gretap0 left promiscuous mode [ 1301.334242][T20428] : port 1(ip6gretap0) entered disabled state [ 1302.338650][T20467] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6100'. [ 1302.670115][T20469] netlink: 'syz.1.6101': attribute type 10 has an invalid length. [ 1303.027730][T20469] team0: Device veth1_vlan failed to register rx_handler [ 1303.443748][T20479] device syzkaller0 entered promiscuous mode [ 1307.691073][T20526] device syzkaller0 entered promiscuous mode [ 1309.959021][T20548] netlink: 'syz.2.6137': attribute type 21 has an invalid length. [ 1310.124163][T20547] netlink: 'syz.4.6128': attribute type 10 has an invalid length. [ 1310.740423][T20559] netlink: 'syz.0.6141': attribute type 10 has an invalid length. [ 1311.103437][T20559] team0: Device veth1_vlan failed to register rx_handler [ 1311.776665][T20589] netlink: 'syz.3.6143': attribute type 21 has an invalid length. [ 1312.708518][T20613] : port 1(ip6gretap0) entered blocking state [ 1312.749948][T20613] : port 1(ip6gretap0) entered disabled state [ 1312.767008][T20613] device ip6gretap0 entered promiscuous mode [ 1312.776955][T20612] netlink: 'syz.4.6151': attribute type 10 has an invalid length. [ 1312.800225][T20610] device ip6gretap0 left promiscuous mode [ 1312.838373][T20610] : port 1(ip6gretap0) entered disabled state [ 1312.901637][T11948] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1313.321500][T20624] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.6164'. [ 1313.363050][T20624] net_ratelimit: 3 callbacks suppressed [ 1313.363071][T20624] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1313.404200][T20623] netlink: 'syz.3.6155': attribute type 27 has an invalid length. [ 1313.434727][T20623] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6155'. [ 1315.771228][T20669] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.6171'. [ 1315.795823][T20669] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1319.489681][T20740] netlink: 'syz.2.6200': attribute type 39 has an invalid length. [ 1320.342301][T20743] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1320.348819][T20743] syzkaller1: linktype set to 825 [ 1320.356089][T20753] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1320.362121][T20753] syzkaller1: linktype set to 24 [ 1321.853945][T20791] netlink: 'syz.2.6213': attribute type 12 has an invalid length. [ 1321.896343][T20791] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6213'. [ 1322.420709][T20787] device syzkaller0 entered promiscuous mode [ 1323.009332][T20819] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6225'. [ 1327.491038][T20854] rxe_eth0 speed is unknown, defaulting to 1000 [ 1327.515634][T20858] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6238'. [ 1328.362037][T20881] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1329.232686][T20892] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1329.243819][T20892] syzkaller1: linktype set to 825 [ 1329.288911][T20895] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1329.308964][T20895] syzkaller1: linktype set to 24 [ 1329.345608][T20899] netlink: 'syz.3.6253': attribute type 12 has an invalid length. [ 1329.373432][T20899] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6253'. [ 1329.797676][T20903] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6255'. [ 1331.301156][T20936] netlink: 'syz.4.6268': attribute type 12 has an invalid length. [ 1331.333881][T20936] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6268'. [ 1332.059922][T20957] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6272'. [ 1333.552407][T20994] netlink: 'syz.0.6283': attribute type 12 has an invalid length. [ 1333.581519][T20994] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6283'. [ 1334.473180][T21009] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6289'. [ 1335.971559][T21030] netlink: 'syz.1.6293': attribute type 10 has an invalid length. [ 1336.025232][T21032] rxe_eth0 speed is unknown, defaulting to 1000 [ 1336.409942][T21041] netlink: 'syz.4.6302': attribute type 10 has an invalid length. [ 1336.681937][T21041] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1337.133280][T21055] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1339.128296][T21094] netlink: 'syz.2.6317': attribute type 10 has an invalid length. [ 1339.357221][T21092] rxe_eth0 speed is unknown, defaulting to 1000 [ 1339.711039][T21105] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1343.476117][T21141] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6334'. [ 1343.532874][T21141] bond0: (slave bond_slave_0): Releasing backup interface [ 1343.891460][T21141] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1345.997262][T21179] netlink: 'syz.4.6338': attribute type 10 has an invalid length. [ 1346.181749][T21171] rxe_eth0 speed is unknown, defaulting to 1000 [ 1347.900798][T21196] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6352'. [ 1347.940391][T21196] bond0: (slave bond_slave_0): Releasing backup interface [ 1348.130189][T21196] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1349.671041][T21231] netlink: 'syz.4.6365': attribute type 4 has an invalid length. [ 1349.707988][T21231] netlink: 'syz.4.6365': attribute type 1 has an invalid length. [ 1349.733635][T21231] netlink: 'syz.4.6365': attribute type 26 has an invalid length. [ 1349.759250][T21231] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.6365'. [ 1351.913726][T21268] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6377'. [ 1352.021911][T21268] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1352.072386][T21268] CPU: 0 PID: 21268 Comm: syz.3.6377 Not tainted syzkaller #0 [ 1352.079946][T21268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1352.090055][T21268] Call Trace: [ 1352.093375][T21268] [ 1352.096347][T21268] dump_stack_lvl+0x188/0x24e [ 1352.101101][T21268] ? lockdep_hardirqs_on+0x94/0x140 [ 1352.106851][T21268] ? show_regs_print_info+0x12/0x12 [ 1352.112123][T21268] ? audit_tree_destroy_watch+0x20/0x20 [ 1352.117734][T21268] sysfs_warn_dup+0x8a/0xa0 [ 1352.122307][T21268] sysfs_do_create_link_sd+0xc0/0x110 [ 1352.127756][T21268] device_add+0x83b/0x1050 [ 1352.132256][T21268] wiphy_register+0x1d8b/0x2aa0 [ 1352.137193][T21268] ? cfg80211_event_work+0x40/0x40 [ 1352.142400][T21268] ? minstrel_ht_alloc+0x894/0xa20 [ 1352.147590][T21268] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1352.153726][T21268] ieee80211_register_hw+0x2e33/0x3b00 [ 1352.159255][T21268] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1352.165511][T21268] ? ieee80211_register_hw+0xf31/0x3b00 [ 1352.171115][T21268] ? ieee80211_register_hw+0xf31/0x3b00 [ 1352.176736][T21268] ? ieee80211_tasklet_handler+0x20/0x20 [ 1352.182518][T21268] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1352.188477][T21268] ? __debug_object_init+0xed/0x440 [ 1352.193857][T21268] ? memset+0x1e/0x40 [ 1352.197904][T21268] ? __hrtimer_init+0x189/0x270 [ 1352.202844][T21268] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1352.208629][T21268] ? memcpy+0x3c/0x60 [ 1352.212669][T21268] hwsim_new_radio_nl+0xab7/0xc90 [ 1352.217761][T21268] genl_family_rcv_msg_doit+0x22f/0x350 [ 1352.223399][T21268] ? end_current_label_crit_section+0x170/0x170 [ 1352.229709][T21268] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1352.235683][T21268] ? bpf_lsm_capable+0x5/0x10 [ 1352.240419][T21268] ? security_capable+0x85/0xb0 [ 1352.245345][T21268] genl_rcv_msg+0x601/0x790 [ 1352.249912][T21268] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1352.256159][T21268] ? genl_bind+0x360/0x360 [ 1352.260661][T21268] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1352.267050][T21268] ? lock_acquire+0x226/0x4a0 [ 1352.271796][T21268] netlink_rcv_skb+0x1ef/0x440 [ 1352.276619][T21268] ? genl_bind+0x360/0x360 [ 1352.281100][T21268] ? netlink_ack+0x1160/0x1160 [ 1352.285965][T21268] ? down_read+0x1a8/0x2d0 [ 1352.290512][T21268] genl_rcv+0x24/0x40 [ 1352.294577][T21268] netlink_unicast+0x7ad/0x920 [ 1352.299423][T21268] netlink_sendmsg+0x8ad/0xbd0 [ 1352.304270][T21268] ? netlink_getsockopt+0x550/0x550 [ 1352.309543][T21268] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1352.315168][T21268] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1352.320515][T21268] ? security_socket_sendmsg+0x7c/0xa0 [ 1352.326041][T21268] ? netlink_getsockopt+0x550/0x550 [ 1352.331311][T21268] ____sys_sendmsg+0x5ed/0x9a0 [ 1352.336151][T21268] ? __sys_sendmsg_sock+0x30/0x30 [ 1352.341233][T21268] ? __import_iovec+0x306/0x510 [ 1352.346160][T21268] ? import_iovec+0x6f/0xa0 [ 1352.350733][T21268] ___sys_sendmsg+0x2a2/0x360 [ 1352.355523][T21268] ? __sys_sendmsg+0x2a0/0x2a0 [ 1352.360372][T21268] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1352.366241][T21268] __se_sys_sendmsg+0x1c3/0x2b0 [ 1352.371155][T21268] ? __x64_sys_sendmsg+0x80/0x80 [ 1352.376143][T21268] ? lockdep_hardirqs_on+0x94/0x140 [ 1352.381437][T21268] ? __x64_sys_sendmsg+0x4b/0x80 [ 1352.386448][T21268] do_syscall_64+0x4c/0xa0 [ 1352.390930][T21268] ? clear_bhb_loop+0x60/0xb0 [ 1352.395662][T21268] ? clear_bhb_loop+0x60/0xb0 [ 1352.400397][T21268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1352.406361][T21268] RIP: 0033:0x7f69f459f559 [ 1352.410830][T21268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.430493][T21268] RSP: 002b:00007f69f542b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1352.438976][T21268] RAX: ffffffffffffffda RBX: 00007f69f4825fa0 RCX: 00007f69f459f559 [ 1352.447009][T21268] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1352.455158][T21268] RBP: 00007f69f4636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1352.463371][T21268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1352.471401][T21268] R13: 00007f69f4826038 R14: 00007f69f4825fa0 R15: 00007ffe287f4028 [ 1352.479495][T21268] [ 1353.997084][T21284] rxe_eth0 speed is unknown, defaulting to 1000 [ 1354.531537][T21288] rxe_eth0 speed is unknown, defaulting to 1000 [ 1355.120365][T21300] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6387'. [ 1357.060271][T21318] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6407'. [ 1358.080512][T21322] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.6397'. [ 1358.091245][T21327] netlink: 'syz.2.6400': attribute type 10 has an invalid length. [ 1358.199397][T21327] device wg1 entered promiscuous mode [ 1358.218408][T21327] team0: Device wg1 is of different type [ 1358.257055][T21322] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1358.284705][T21322] CPU: 0 PID: 21322 Comm: syz.4.6397 Not tainted syzkaller #0 [ 1358.292324][T21322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1358.302424][T21322] Call Trace: [ 1358.306735][T21322] [ 1358.309716][T21322] dump_stack_lvl+0x188/0x24e [ 1358.314454][T21322] ? show_regs_print_info+0x12/0x12 [ 1358.319751][T21322] ? load_image+0x410/0x410 [ 1358.324359][T21322] sysfs_warn_dup+0x8a/0xa0 [ 1358.328927][T21322] sysfs_do_create_link_sd+0xc0/0x110 [ 1358.334365][T21322] device_add+0x83b/0x1050 [ 1358.338855][T21322] wiphy_register+0x1d8b/0x2aa0 [ 1358.343780][T21322] ? cfg80211_event_work+0x40/0x40 [ 1358.348949][T21322] ? minstrel_ht_alloc+0x894/0xa20 [ 1358.354125][T21322] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1358.360283][T21322] ieee80211_register_hw+0x2e33/0x3b00 [ 1358.365823][T21322] ? ieee80211_register_hw+0xf31/0x3b00 [ 1358.371426][T21322] ? ieee80211_register_hw+0xf31/0x3b00 [ 1358.377021][T21322] ? ieee80211_tasklet_handler+0x20/0x20 [ 1358.382689][T21322] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1358.388625][T21322] ? __debug_object_init+0xed/0x440 [ 1358.393868][T21322] ? memset+0x1e/0x40 [ 1358.397880][T21322] ? __hrtimer_init+0x189/0x270 [ 1358.402764][T21322] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1358.408518][T21322] ? memcpy+0x3c/0x60 [ 1358.412527][T21322] hwsim_new_radio_nl+0xab7/0xc90 [ 1358.417626][T21322] genl_family_rcv_msg_doit+0x22f/0x350 [ 1358.423202][T21322] ? end_current_label_crit_section+0x170/0x170 [ 1358.429491][T21322] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1358.435431][T21322] ? bpf_lsm_capable+0x5/0x10 [ 1358.440145][T21322] ? security_capable+0x85/0xb0 [ 1358.445076][T21322] genl_rcv_msg+0x601/0x790 [ 1358.449625][T21322] ? genl_bind+0x360/0x360 [ 1358.454104][T21322] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1358.460478][T21322] netlink_rcv_skb+0x1ef/0x440 [ 1358.465274][T21322] ? genl_bind+0x360/0x360 [ 1358.469725][T21322] ? netlink_ack+0x1160/0x1160 [ 1358.474529][T21322] ? down_read+0x1a8/0x2d0 [ 1358.479036][T21322] genl_rcv+0x24/0x40 [ 1358.483047][T21322] netlink_unicast+0x7ad/0x920 [ 1358.487855][T21322] netlink_sendmsg+0x8ad/0xbd0 [ 1358.492648][T21322] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1358.498853][T21322] ? netlink_getsockopt+0x550/0x550 [ 1358.504081][T21322] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1358.509672][T21322] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1358.515003][T21322] ? security_socket_sendmsg+0x7c/0xa0 [ 1358.520524][T21322] ? netlink_getsockopt+0x550/0x550 [ 1358.525762][T21322] ____sys_sendmsg+0x5ed/0x9a0 [ 1358.530565][T21322] ? __sys_sendmsg_sock+0x30/0x30 [ 1358.535655][T21322] ? __import_iovec+0x306/0x510 [ 1358.540566][T21322] ? import_iovec+0x6f/0xa0 [ 1358.545124][T21322] ___sys_sendmsg+0x2a2/0x360 [ 1358.549884][T21322] ? __sys_sendmsg+0x2a0/0x2a0 [ 1358.554753][T21322] __se_sys_sendmsg+0x1c3/0x2b0 [ 1358.559648][T21322] ? __x64_sys_sendmsg+0x80/0x80 [ 1358.564647][T21322] do_syscall_64+0x4c/0xa0 [ 1358.569113][T21322] ? clear_bhb_loop+0x60/0xb0 [ 1358.573839][T21322] ? clear_bhb_loop+0x60/0xb0 [ 1358.578556][T21322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1358.584488][T21322] RIP: 0033:0x7f4643f9f559 [ 1358.589045][T21322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1358.608684][T21322] RSP: 002b:00007f4644eca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1358.617128][T21322] RAX: ffffffffffffffda RBX: 00007f4644225fa0 RCX: 00007f4643f9f559 [ 1358.625128][T21322] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1358.633119][T21322] RBP: 00007f4644036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1358.641291][T21322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1358.649287][T21322] R13: 00007f4644226038 R14: 00007f4644225fa0 R15: 00007ffc1bd36a08 [ 1358.657305][T21322] [ 1359.101792][T21340] netlink: 'syz.1.6403': attribute type 10 has an invalid length. [ 1359.127514][T21330] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6412'. [ 1359.255169][T21340] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1360.790405][T21354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1360.822936][T21354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.875773][T21354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1360.894172][T21354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.916877][T21357] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1361.014218][T21354] device batadv0 left promiscuous mode [ 1361.043619][T21354] team0: Port device batadv0 removed [ 1361.102570][T21351] netlink: 'syz.0.6420': attribute type 10 has an invalid length. [ 1361.548643][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.555326][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.681173][T21351] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1361.712618][T21358] netlink: 'syz.1.6413': attribute type 10 has an invalid length. [ 1361.756469][T21358] device wg1 entered promiscuous mode [ 1361.762067][T21358] team0: Device wg1 is of different type [ 1362.229153][T21370] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6417'. [ 1362.300524][T21370] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1362.324551][T21370] CPU: 0 PID: 21370 Comm: syz.0.6417 Not tainted syzkaller #0 [ 1362.332103][T21370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1362.342215][T21370] Call Trace: [ 1362.345533][T21370] [ 1362.348521][T21370] dump_stack_lvl+0x188/0x24e [ 1362.353283][T21370] ? show_regs_print_info+0x12/0x12 [ 1362.358551][T21370] ? load_image+0x410/0x410 [ 1362.363124][T21370] sysfs_warn_dup+0x8a/0xa0 [ 1362.367691][T21370] sysfs_do_create_link_sd+0xc0/0x110 [ 1362.373128][T21370] device_add+0x83b/0x1050 [ 1362.377618][T21370] wiphy_register+0x1d8b/0x2aa0 [ 1362.382548][T21370] ? cfg80211_event_work+0x40/0x40 [ 1362.387721][T21370] ? minstrel_ht_alloc+0x894/0xa20 [ 1362.392897][T21370] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1362.399039][T21370] ieee80211_register_hw+0x2e33/0x3b00 [ 1362.404564][T21370] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1362.410797][T21370] ? ieee80211_register_hw+0xf31/0x3b00 [ 1362.416410][T21370] ? ieee80211_register_hw+0xf31/0x3b00 [ 1362.422030][T21370] ? ieee80211_tasklet_handler+0x20/0x20 [ 1362.427728][T21370] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1362.433691][T21370] ? __debug_object_init+0xed/0x440 [ 1362.439047][T21370] ? memset+0x1e/0x40 [ 1362.443175][T21370] ? __hrtimer_init+0x189/0x270 [ 1362.448097][T21370] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1362.453899][T21370] ? memcpy+0x3c/0x60 [ 1362.457970][T21370] hwsim_new_radio_nl+0xab7/0xc90 [ 1362.463067][T21370] genl_family_rcv_msg_doit+0x22f/0x350 [ 1362.468733][T21370] ? end_current_label_crit_section+0x170/0x170 [ 1362.475050][T21370] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1362.481019][T21370] ? bpf_lsm_capable+0x5/0x10 [ 1362.485753][T21370] ? security_capable+0x85/0xb0 [ 1362.490676][T21370] genl_rcv_msg+0x601/0x790 [ 1362.495263][T21370] ? genl_bind+0x360/0x360 [ 1362.499765][T21370] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1362.506156][T21370] ? lock_chain_count+0x20/0x20 [ 1362.511122][T21370] netlink_rcv_skb+0x1ef/0x440 [ 1362.515958][T21370] ? genl_bind+0x360/0x360 [ 1362.520440][T21370] ? netlink_ack+0x1160/0x1160 [ 1362.525274][T21370] ? preempt_count_sub+0x1b/0x160 [ 1362.530448][T21370] ? down_read+0x1a8/0x2d0 [ 1362.534944][T21370] genl_rcv+0x24/0x40 [ 1362.538983][T21370] netlink_unicast+0x7ad/0x920 [ 1362.543858][T21370] netlink_sendmsg+0x8ad/0xbd0 [ 1362.548681][T21370] ? lockdep_hardirqs_on+0x94/0x140 [ 1362.553959][T21370] ? netlink_getsockopt+0x550/0x550 [ 1362.559224][T21370] ? bpf_lsm_socket_accept+0x10/0x10 [ 1362.564588][T21370] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1362.569951][T21370] ? security_socket_sendmsg+0x7c/0xa0 [ 1362.575478][T21370] ? netlink_getsockopt+0x550/0x550 [ 1362.580775][T21370] ____sys_sendmsg+0x5ed/0x9a0 [ 1362.585611][T21370] ? __sys_sendmsg_sock+0x30/0x30 [ 1362.590689][T21370] ? __import_iovec+0x306/0x510 [ 1362.595617][T21370] ? import_iovec+0x6f/0xa0 [ 1362.600192][T21370] ___sys_sendmsg+0x2a2/0x360 [ 1362.604942][T21370] ? __sys_sendmsg+0x2a0/0x2a0 [ 1362.609874][T21370] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1362.615699][T21370] __se_sys_sendmsg+0x1c3/0x2b0 [ 1362.620615][T21370] ? __x64_sys_sendmsg+0x80/0x80 [ 1362.625628][T21370] ? lockdep_hardirqs_on+0x94/0x140 [ 1362.630905][T21370] ? __x64_sys_sendmsg+0x19/0x80 [ 1362.635923][T21370] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 1362.641541][T21370] do_syscall_64+0x4c/0xa0 [ 1362.646025][T21370] ? clear_bhb_loop+0x60/0xb0 [ 1362.650754][T21370] ? clear_bhb_loop+0x60/0xb0 [ 1362.655484][T21370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1362.661434][T21370] RIP: 0033:0x7fb4e9b9f559 [ 1362.665990][T21370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.685653][T21370] RSP: 002b:00007fb4eaaa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1362.694128][T21370] RAX: ffffffffffffffda RBX: 00007fb4e9e25fa0 RCX: 00007fb4e9b9f559 [ 1362.702159][T21370] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1362.710217][T21370] RBP: 00007fb4e9c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1362.718339][T21370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1362.726362][T21370] R13: 00007fb4e9e26038 R14: 00007fb4e9e25fa0 R15: 00007ffd96e8efe8 [ 1362.734418][T21370] [ 1362.985713][T11948] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1362.994596][T11948] Bluetooth: hci4: Injecting HCI hardware error event [ 1363.006106][T11948] Bluetooth: hci4: hardware error 0x00 [ 1363.179732][T21379] netlink: 'syz.2.6430': attribute type 10 has an invalid length. [ 1364.479076][T21379] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1364.639610][T21393] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6425'. [ 1364.982041][T21395] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1365.066509][T21402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1365.104726][T21402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.144921][T11948] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1365.217935][T21402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1365.234510][T21402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.536916][T21402] device batadv0 left promiscuous mode [ 1365.567474][T21402] team0: Port device batadv0 removed [ 1365.602490][T21408] rxe_eth0 speed is unknown, defaulting to 1000 [ 1365.922804][T21414] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.6434'. [ 1366.019448][T21414] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1366.059607][T21414] CPU: 0 PID: 21414 Comm: syz.2.6434 Not tainted syzkaller #0 [ 1366.067155][T21414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1366.077261][T21414] Call Trace: [ 1366.080589][T21414] [ 1366.083559][T21414] dump_stack_lvl+0x188/0x24e [ 1366.088287][T21414] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1366.094670][T21414] ? show_regs_print_info+0x12/0x12 [ 1366.099949][T21414] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1366.106174][T21414] sysfs_warn_dup+0x8a/0xa0 [ 1366.110738][T21414] sysfs_do_create_link_sd+0xc0/0x110 [ 1366.116289][T21414] device_add+0x83b/0x1050 [ 1366.120783][T21414] wiphy_register+0x1d8b/0x2aa0 [ 1366.125711][T21414] ? cfg80211_event_work+0x40/0x40 [ 1366.130870][T21414] ? minstrel_ht_alloc+0x894/0xa20 [ 1366.136052][T21414] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1366.142186][T21414] ieee80211_register_hw+0x2e33/0x3b00 [ 1366.147744][T21414] ? ieee80211_register_hw+0xf31/0x3b00 [ 1366.153384][T21414] ? ieee80211_register_hw+0xf31/0x3b00 [ 1366.158995][T21414] ? ieee80211_tasklet_handler+0x20/0x20 [ 1366.164683][T21414] ? lockdep_hardirqs_on+0x94/0x140 [ 1366.169949][T21414] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1366.176178][T21414] ? ieee80211_register_hw+0x1/0x3b00 [ 1366.181609][T21414] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1366.187393][T21414] ? memcpy+0x3c/0x60 [ 1366.191428][T21414] hwsim_new_radio_nl+0xab7/0xc90 [ 1366.196526][T21414] genl_family_rcv_msg_doit+0x22f/0x350 [ 1366.202125][T21414] ? end_current_label_crit_section+0x170/0x170 [ 1366.208435][T21414] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1366.214391][T21414] ? bpf_lsm_capable+0x5/0x10 [ 1366.219147][T21414] ? security_capable+0x85/0xb0 [ 1366.224051][T21414] genl_rcv_msg+0x601/0x790 [ 1366.228615][T21414] ? genl_bind+0x360/0x360 [ 1366.233086][T21414] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1366.239603][T21414] netlink_rcv_skb+0x1ef/0x440 [ 1366.244431][T21414] ? genl_bind+0x360/0x360 [ 1366.248912][T21414] ? netlink_ack+0x1160/0x1160 [ 1366.253763][T21414] ? down_read+0x1a8/0x2d0 [ 1366.258253][T21414] genl_rcv+0x24/0x40 [ 1366.262298][T21414] netlink_unicast+0x7ad/0x920 [ 1366.267128][T21414] netlink_sendmsg+0x8ad/0xbd0 [ 1366.271987][T21414] ? netlink_getsockopt+0x550/0x550 [ 1366.277244][T21414] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1366.282853][T21414] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1366.288185][T21414] ? security_socket_sendmsg+0x7c/0xa0 [ 1366.293701][T21414] ? netlink_getsockopt+0x550/0x550 [ 1366.299037][T21414] ____sys_sendmsg+0x5ed/0x9a0 [ 1366.304049][T21414] ? __sys_sendmsg_sock+0x30/0x30 [ 1366.309134][T21414] ? __import_iovec+0x306/0x510 [ 1366.314060][T21414] ? import_iovec+0x6f/0xa0 [ 1366.318642][T21414] ___sys_sendmsg+0x2a2/0x360 [ 1366.323378][T21414] ? __sys_sendmsg+0x2a0/0x2a0 [ 1366.328394][T21414] ? ktime_get+0x7b/0x270 [ 1366.332809][T21414] __se_sys_sendmsg+0x1c3/0x2b0 [ 1366.337724][T21414] ? perf_trace_preemptirq_template+0x268/0x320 [ 1366.344147][T21414] ? __x64_sys_sendmsg+0x80/0x80 [ 1366.349157][T21414] ? lockdep_hardirqs_on+0x94/0x140 [ 1366.354425][T21414] do_syscall_64+0x4c/0xa0 [ 1366.358891][T21414] ? clear_bhb_loop+0x60/0xb0 [ 1366.363629][T21414] ? clear_bhb_loop+0x60/0xb0 [ 1366.368362][T21414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1366.374341][T21414] RIP: 0033:0x7f164d99f559 [ 1366.378803][T21414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1366.398464][T21414] RSP: 002b:00007f164e946028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1366.407113][T21414] RAX: ffffffffffffffda RBX: 00007f164dc25fa0 RCX: 00007f164d99f559 [ 1366.415219][T21414] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1366.423261][T21414] RBP: 00007f164da36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1366.431283][T21414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1366.439320][T21414] R13: 00007f164dc26038 R14: 00007f164dc25fa0 R15: 00007ffd195f58f8 [ 1366.447369][T21414] [ 1367.016432][T21415] rxe_eth0 speed is unknown, defaulting to 1000 [ 1368.137374][T21439] netlink: 'syz.3.6440': attribute type 10 has an invalid length. [ 1368.260575][T21439] bond0: (slave wlan1): Opening slave failed [ 1368.645750][T21429] rxe_eth0 speed is unknown, defaulting to 1000 [ 1370.213108][T21456] netlink: 'syz.3.6446': attribute type 10 has an invalid length. [ 1370.276402][T21456] device wg1 entered promiscuous mode [ 1370.282263][T21456] team0: Device wg1 is of different type [ 1370.349147][T21458] rxe_eth0 speed is unknown, defaulting to 1000 [ 1374.251637][T21504] netlink: 'syz.0.6463': attribute type 10 has an invalid length. [ 1374.305528][T21504] team0: Device wg1 is of different type [ 1374.329701][T21498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1374.346136][T21498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1374.360152][T21498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1374.373009][T21498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1374.426735][T21498] device batadv0 left promiscuous mode [ 1374.443387][T21498] team0: Port device batadv0 removed [ 1374.483074][T21501] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 1374.505160][T21501] dvmrp1: ignored: set checksum disabled [ 1374.531444][T21503] netlink: 'syz.1.6465': attribute type 15 has an invalid length. [ 1374.540969][T21503] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.6465'. [ 1375.228042][T21511] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6481'. [ 1375.480728][T21511] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1375.552303][T21511] CPU: 1 PID: 21511 Comm: syz.1.6481 Not tainted syzkaller #0 [ 1375.559882][T21511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1375.569999][T21511] Call Trace: [ 1375.573341][T21511] [ 1375.576318][T21511] dump_stack_lvl+0x188/0x24e [ 1375.581067][T21511] ? show_regs_print_info+0x12/0x12 [ 1375.586338][T21511] ? load_image+0x410/0x410 [ 1375.590912][T21511] sysfs_warn_dup+0x8a/0xa0 [ 1375.595571][T21511] sysfs_do_create_link_sd+0xc0/0x110 [ 1375.601030][T21511] device_add+0x83b/0x1050 [ 1375.605537][T21511] wiphy_register+0x1d8b/0x2aa0 [ 1375.610466][T21511] ? cfg80211_event_work+0x40/0x40 [ 1375.615644][T21511] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1375.621886][T21511] ieee80211_register_hw+0x2e33/0x3b00 [ 1375.627435][T21511] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1375.633830][T21511] ? ieee80211_register_hw+0xf31/0x3b00 [ 1375.639440][T21511] ? ieee80211_register_hw+0xf31/0x3b00 [ 1375.645148][T21511] ? ieee80211_tasklet_handler+0x20/0x20 [ 1375.650862][T21511] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1375.656838][T21511] ? __debug_object_init+0xed/0x440 [ 1375.662110][T21511] ? memset+0x1e/0x40 [ 1375.666142][T21511] ? __hrtimer_init+0x189/0x270 [ 1375.671055][T21511] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1375.676927][T21511] ? memcpy+0x3c/0x60 [ 1375.680980][T21511] hwsim_new_radio_nl+0xab7/0xc90 [ 1375.686075][T21511] genl_family_rcv_msg_doit+0x22f/0x350 [ 1375.691677][T21511] ? end_current_label_crit_section+0x170/0x170 [ 1375.697986][T21511] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1375.703952][T21511] ? bpf_lsm_capable+0x5/0x10 [ 1375.708683][T21511] ? security_capable+0x85/0xb0 [ 1375.713623][T21511] genl_rcv_msg+0x601/0x790 [ 1375.718211][T21511] ? genl_bind+0x360/0x360 [ 1375.722679][T21511] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1375.729082][T21511] netlink_rcv_skb+0x1ef/0x440 [ 1375.733904][T21511] ? genl_bind+0x360/0x360 [ 1375.738398][T21511] ? netlink_ack+0x1160/0x1160 [ 1375.743319][T21511] ? down_read+0x1a8/0x2d0 [ 1375.747800][T21511] genl_rcv+0x24/0x40 [ 1375.751836][T21511] netlink_unicast+0x7ad/0x920 [ 1375.756666][T21511] netlink_sendmsg+0x8ad/0xbd0 [ 1375.761509][T21511] ? netlink_getsockopt+0x550/0x550 [ 1375.766775][T21511] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1375.772391][T21511] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1375.777729][T21511] ? security_socket_sendmsg+0x7c/0xa0 [ 1375.783245][T21511] ? netlink_getsockopt+0x550/0x550 [ 1375.788495][T21511] ____sys_sendmsg+0x5ed/0x9a0 [ 1375.793335][T21511] ? __sys_sendmsg_sock+0x30/0x30 [ 1375.798408][T21511] ? __import_iovec+0x306/0x510 [ 1375.803333][T21511] ? import_iovec+0x6f/0xa0 [ 1375.807995][T21511] ___sys_sendmsg+0x2a2/0x360 [ 1375.812724][T21511] ? migrate_enable+0x148/0x220 [ 1375.817649][T21511] ? __sys_sendmsg+0x2a0/0x2a0 [ 1375.822541][T21511] __se_sys_sendmsg+0x1c3/0x2b0 [ 1375.827454][T21511] ? __x64_sys_sendmsg+0x80/0x80 [ 1375.832484][T21511] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1375.838468][T21511] do_syscall_64+0x4c/0xa0 [ 1375.843134][T21511] ? clear_bhb_loop+0x60/0xb0 [ 1375.847874][T21511] ? clear_bhb_loop+0x60/0xb0 [ 1375.852612][T21511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1375.858560][T21511] RIP: 0033:0x7f96f9b9f559 [ 1375.863114][T21511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1375.882781][T21511] RSP: 002b:00007f96faaaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1375.891265][T21511] RAX: ffffffffffffffda RBX: 00007f96f9e25fa0 RCX: 00007f96f9b9f559 [ 1375.899316][T21511] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1375.907351][T21511] RBP: 00007f96f9c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1375.915476][T21511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1375.923602][T21511] R13: 00007f96f9e26038 R14: 00007f96f9e25fa0 R15: 00007ffe4bc4ac38 [ 1375.931678][T21511] [ 1376.172530][T21515] netlink: 'syz.0.6467': attribute type 10 has an invalid length. [ 1377.943585][T21540] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.6480'. [ 1377.968509][T21540] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1377.977253][T21540] CPU: 1 PID: 21540 Comm: syz.4.6480 Not tainted syzkaller #0 [ 1377.984890][T21540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1377.994997][T21540] Call Trace: [ 1377.998324][T21540] [ 1378.001306][T21540] dump_stack_lvl+0x188/0x24e [ 1378.006072][T21540] ? show_regs_print_info+0x12/0x12 [ 1378.011326][T21540] ? load_image+0x410/0x410 [ 1378.015898][T21540] sysfs_warn_dup+0x8a/0xa0 [ 1378.020464][T21540] sysfs_do_create_link_sd+0xc0/0x110 [ 1378.025895][T21540] device_add+0x83b/0x1050 [ 1378.030379][T21540] wiphy_register+0x1d8b/0x2aa0 [ 1378.035396][T21540] ? cfg80211_event_work+0x40/0x40 [ 1378.040924][T21540] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1378.047160][T21540] ieee80211_register_hw+0x2e33/0x3b00 [ 1378.052670][T21540] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1378.058910][T21540] ? ieee80211_register_hw+0xf31/0x3b00 [ 1378.064740][T21540] ? ieee80211_register_hw+0xf31/0x3b00 [ 1378.070401][T21540] ? ieee80211_tasklet_handler+0x20/0x20 [ 1378.076112][T21540] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1378.082071][T21540] ? __debug_object_init+0xed/0x440 [ 1378.087336][T21540] ? memset+0x1e/0x40 [ 1378.091371][T21540] ? __hrtimer_init+0x189/0x270 [ 1378.096276][T21540] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1378.102608][T21540] ? memcpy+0x3c/0x60 [ 1378.106641][T21540] hwsim_new_radio_nl+0xab7/0xc90 [ 1378.111860][T21540] genl_family_rcv_msg_doit+0x22f/0x350 [ 1378.117461][T21540] ? end_current_label_crit_section+0x170/0x170 [ 1378.123803][T21540] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1378.129751][T21540] ? bpf_lsm_capable+0x5/0x10 [ 1378.134471][T21540] ? security_capable+0x85/0xb0 [ 1378.139382][T21540] genl_rcv_msg+0x601/0x790 [ 1378.143940][T21540] ? genl_bind+0x360/0x360 [ 1378.148392][T21540] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1378.154771][T21540] netlink_rcv_skb+0x1ef/0x440 [ 1378.159569][T21540] ? genl_bind+0x360/0x360 [ 1378.164044][T21540] ? netlink_ack+0x1160/0x1160 [ 1378.168849][T21540] ? down_read+0x1a8/0x2d0 [ 1378.173303][T21540] genl_rcv+0x24/0x40 [ 1378.177319][T21540] netlink_unicast+0x7ad/0x920 [ 1378.182130][T21540] netlink_sendmsg+0x8ad/0xbd0 [ 1378.186948][T21540] ? netlink_getsockopt+0x550/0x550 [ 1378.192186][T21540] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1378.197774][T21540] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1378.203089][T21540] ? security_socket_sendmsg+0x7c/0xa0 [ 1378.208597][T21540] ? netlink_getsockopt+0x550/0x550 [ 1378.214032][T21540] ____sys_sendmsg+0x5ed/0x9a0 [ 1378.218849][T21540] ? __sys_sendmsg_sock+0x30/0x30 [ 1378.223998][T21540] ? __import_iovec+0x306/0x510 [ 1378.228903][T21540] ? import_iovec+0x6f/0xa0 [ 1378.233562][T21540] ___sys_sendmsg+0x2a2/0x360 [ 1378.238285][T21540] ? __sys_sendmsg+0x2a0/0x2a0 [ 1378.243104][T21540] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1378.248890][T21540] __se_sys_sendmsg+0x1c3/0x2b0 [ 1378.253782][T21540] ? __x64_sys_sendmsg+0x80/0x80 [ 1378.258770][T21540] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1378.264968][T21540] do_syscall_64+0x4c/0xa0 [ 1378.269413][T21540] ? clear_bhb_loop+0x60/0xb0 [ 1378.274141][T21540] ? clear_bhb_loop+0x60/0xb0 [ 1378.278881][T21540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1378.284821][T21540] RIP: 0033:0x7f4643f9f559 [ 1378.289284][T21540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1378.308942][T21540] RSP: 002b:00007f4644eca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1378.317395][T21540] RAX: ffffffffffffffda RBX: 00007f4644225fa0 RCX: 00007f4643f9f559 [ 1378.325400][T21540] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1378.333489][T21540] RBP: 00007f4644036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1378.341503][T21540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1378.349516][T21540] R13: 00007f4644226038 R14: 00007f4644225fa0 R15: 00007ffc1bd36a08 [ 1378.357548][T21540] [ 1378.909930][T21550] netlink: 'syz.4.6482': attribute type 10 has an invalid length. [ 1379.608437][T21550] device wg1 entered promiscuous mode [ 1379.614111][T21550] team0: Device wg1 is of different type [ 1382.496163][T21616] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6519'. [ 1382.588083][T21616] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1382.617154][T21616] CPU: 0 PID: 21616 Comm: syz.0.6519 Not tainted syzkaller #0 [ 1382.624709][T21616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1382.634816][T21616] Call Trace: [ 1382.638135][T21616] [ 1382.641113][T21616] dump_stack_lvl+0x188/0x24e [ 1382.645864][T21616] ? show_regs_print_info+0x12/0x12 [ 1382.651115][T21616] ? load_image+0x410/0x410 [ 1382.655689][T21616] sysfs_warn_dup+0x8a/0xa0 [ 1382.660252][T21616] sysfs_do_create_link_sd+0xc0/0x110 [ 1382.665684][T21616] device_add+0x83b/0x1050 [ 1382.670178][T21616] wiphy_register+0x1d8b/0x2aa0 [ 1382.675108][T21616] ? cfg80211_event_work+0x40/0x40 [ 1382.680272][T21616] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1382.686504][T21616] ieee80211_register_hw+0x2e33/0x3b00 [ 1382.692023][T21616] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1382.698246][T21616] ? ieee80211_register_hw+0xf31/0x3b00 [ 1382.703846][T21616] ? ieee80211_register_hw+0xf31/0x3b00 [ 1382.709464][T21616] ? ieee80211_tasklet_handler+0x20/0x20 [ 1382.715161][T21616] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1382.721110][T21616] ? __debug_object_init+0xed/0x440 [ 1382.726356][T21616] ? memset+0x1e/0x40 [ 1382.730462][T21616] ? __hrtimer_init+0x189/0x270 [ 1382.735353][T21616] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1382.741111][T21616] ? memcpy+0x3c/0x60 [ 1382.745130][T21616] hwsim_new_radio_nl+0xab7/0xc90 [ 1382.750198][T21616] genl_family_rcv_msg_doit+0x22f/0x350 [ 1382.755793][T21616] ? end_current_label_crit_section+0x170/0x170 [ 1382.762092][T21616] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1382.768047][T21616] ? bpf_lsm_capable+0x5/0x10 [ 1382.772757][T21616] ? security_capable+0x85/0xb0 [ 1382.777647][T21616] genl_rcv_msg+0x601/0x790 [ 1382.782192][T21616] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1382.787973][T21616] ? genl_bind+0x360/0x360 [ 1382.792427][T21616] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1382.798816][T21616] netlink_rcv_skb+0x1ef/0x440 [ 1382.803627][T21616] ? genl_bind+0x360/0x360 [ 1382.808085][T21616] ? netlink_ack+0x1160/0x1160 [ 1382.812894][T21616] ? down_read+0x1a8/0x2d0 [ 1382.817360][T21616] genl_rcv+0x24/0x40 [ 1382.821382][T21616] netlink_unicast+0x7ad/0x920 [ 1382.826188][T21616] netlink_sendmsg+0x8ad/0xbd0 [ 1382.831010][T21616] ? netlink_getsockopt+0x550/0x550 [ 1382.836252][T21616] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1382.841838][T21616] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1382.847157][T21616] ? security_socket_sendmsg+0x7c/0xa0 [ 1382.852655][T21616] ? netlink_getsockopt+0x550/0x550 [ 1382.857894][T21616] ____sys_sendmsg+0x5ed/0x9a0 [ 1382.862721][T21616] ? __sys_sendmsg_sock+0x30/0x30 [ 1382.867794][T21616] ? __import_iovec+0x306/0x510 [ 1382.872694][T21616] ? import_iovec+0x6f/0xa0 [ 1382.877240][T21616] ___sys_sendmsg+0x2a2/0x360 [ 1382.882073][T21616] ? __sys_sendmsg+0x2a0/0x2a0 [ 1382.886916][T21616] __se_sys_sendmsg+0x1c3/0x2b0 [ 1382.891797][T21616] ? __x64_sys_sendmsg+0x80/0x80 [ 1382.896789][T21616] do_syscall_64+0x4c/0xa0 [ 1382.901249][T21616] ? clear_bhb_loop+0x60/0xb0 [ 1382.905954][T21616] ? clear_bhb_loop+0x60/0xb0 [ 1382.910661][T21616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1382.916583][T21616] RIP: 0033:0x7fb4e9b9f559 [ 1382.921021][T21616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1382.940656][T21616] RSP: 002b:00007fb4eaaa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1382.949101][T21616] RAX: ffffffffffffffda RBX: 00007fb4e9e25fa0 RCX: 00007fb4e9b9f559 [ 1382.957112][T21616] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1382.965112][T21616] RBP: 00007fb4e9c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1382.973107][T21616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1382.981117][T21616] R13: 00007fb4e9e26038 R14: 00007fb4e9e25fa0 R15: 00007ffd96e8efe8 [ 1382.989148][T21616] [ 1383.520735][T21634] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6526'. [ 1383.594179][T21634] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1383.605558][T21634] CPU: 1 PID: 21634 Comm: syz.3.6526 Not tainted syzkaller #0 [ 1383.613126][T21634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1383.623235][T21634] Call Trace: [ 1383.626563][T21634] [ 1383.629531][T21634] dump_stack_lvl+0x188/0x24e [ 1383.634267][T21634] ? show_regs_print_info+0x12/0x12 [ 1383.639527][T21634] ? load_image+0x410/0x410 [ 1383.644114][T21634] sysfs_warn_dup+0x8a/0xa0 [ 1383.648690][T21634] sysfs_do_create_link_sd+0xc0/0x110 [ 1383.654130][T21634] device_add+0x83b/0x1050 [ 1383.658626][T21634] wiphy_register+0x1d8b/0x2aa0 [ 1383.663563][T21634] ? cfg80211_event_work+0x40/0x40 [ 1383.668732][T21634] ? minstrel_ht_alloc+0x894/0xa20 [ 1383.673949][T21634] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1383.680110][T21634] ieee80211_register_hw+0x2e33/0x3b00 [ 1383.685723][T21634] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1383.691990][T21634] ? ieee80211_register_hw+0xf31/0x3b00 [ 1383.697600][T21634] ? ieee80211_register_hw+0xf31/0x3b00 [ 1383.703214][T21634] ? ieee80211_tasklet_handler+0x20/0x20 [ 1383.708923][T21634] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1383.714931][T21634] ? __debug_object_init+0xed/0x440 [ 1383.720223][T21634] ? memset+0x1e/0x40 [ 1383.724266][T21634] ? __hrtimer_init+0x189/0x270 [ 1383.729185][T21634] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1383.734977][T21634] ? memcpy+0x3c/0x60 [ 1383.739019][T21634] hwsim_new_radio_nl+0xab7/0xc90 [ 1383.744120][T21634] genl_family_rcv_msg_doit+0x22f/0x350 [ 1383.749745][T21634] ? end_current_label_crit_section+0x170/0x170 [ 1383.756065][T21634] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1383.762050][T21634] ? cap_capable+0x18d/0x220 [ 1383.766712][T21634] ? bpf_lsm_capable+0x5/0x10 [ 1383.771454][T21634] ? security_capable+0x85/0xb0 [ 1383.776388][T21634] genl_rcv_msg+0x601/0x790 [ 1383.780991][T21634] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1383.786798][T21634] ? genl_bind+0x360/0x360 [ 1383.791277][T21634] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1383.797713][T21634] netlink_rcv_skb+0x1ef/0x440 [ 1383.802543][T21634] ? genl_bind+0x360/0x360 [ 1383.807028][T21634] ? netlink_ack+0x1160/0x1160 [ 1383.811866][T21634] ? down_read+0x1a8/0x2d0 [ 1383.816438][T21634] genl_rcv+0x24/0x40 [ 1383.820486][T21634] netlink_unicast+0x7ad/0x920 [ 1383.825371][T21634] netlink_sendmsg+0x8ad/0xbd0 [ 1383.830212][T21634] ? aa_sock_msg_perm+0x94/0x150 [ 1383.835257][T21634] ? netlink_getsockopt+0x550/0x550 [ 1383.840518][T21634] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1383.846152][T21634] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1383.851498][T21634] ? security_socket_sendmsg+0x7c/0xa0 [ 1383.857025][T21634] ? netlink_getsockopt+0x550/0x550 [ 1383.862283][T21634] ____sys_sendmsg+0x5ed/0x9a0 [ 1383.867114][T21634] ? __sys_sendmsg_sock+0x30/0x30 [ 1383.872193][T21634] ? __import_iovec+0x306/0x510 [ 1383.877158][T21634] ? import_iovec+0x6f/0xa0 [ 1383.881731][T21634] ___sys_sendmsg+0x2a2/0x360 [ 1383.886474][T21634] ? __sys_sendmsg+0x2a0/0x2a0 [ 1383.891316][T21634] ? ktime_get+0x7b/0x270 [ 1383.895757][T21634] __se_sys_sendmsg+0x1c3/0x2b0 [ 1383.900665][T21634] ? perf_trace_preemptirq_template+0x268/0x320 [ 1383.906971][T21634] ? __x64_sys_sendmsg+0x80/0x80 [ 1383.912011][T21634] ? lockdep_hardirqs_on+0x94/0x140 [ 1383.917281][T21634] do_syscall_64+0x4c/0xa0 [ 1383.921759][T21634] ? clear_bhb_loop+0x60/0xb0 [ 1383.926522][T21634] ? clear_bhb_loop+0x60/0xb0 [ 1383.931261][T21634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1383.937220][T21634] RIP: 0033:0x7f69f459f559 [ 1383.941682][T21634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1383.961388][T21634] RSP: 002b:00007f69f542b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1383.969959][T21634] RAX: ffffffffffffffda RBX: 00007f69f4825fa0 RCX: 00007f69f459f559 [ 1383.977997][T21634] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1383.986029][T21634] RBP: 00007f69f4636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1383.994060][T21634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.002090][T21634] R13: 00007f69f4826038 R14: 00007f69f4825fa0 R15: 00007ffe287f4028 [ 1384.010135][T21634] [ 1384.042054][T21638] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 1384.061659][T21638] dvmrp1: ignored: set checksum disabled [ 1387.442698][T21651] netlink: 'syz.3.6521': attribute type 10 has an invalid length. [ 1388.100539][T21679] netlink: 'syz.1.6531': attribute type 3 has an invalid length. [ 1388.109210][T21679] netlink: 'syz.1.6531': attribute type 1 has an invalid length. [ 1388.121461][T21679] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.6531'. [ 1388.957907][T21700] netlink: 'syz.1.6540': attribute type 10 has an invalid length. [ 1389.122794][T21708] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.6541'. [ 1389.204058][T21708] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1389.237470][T21708] CPU: 0 PID: 21708 Comm: syz.2.6541 Not tainted syzkaller #0 [ 1389.245143][T21708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1389.255260][T21708] Call Trace: [ 1389.258585][T21708] [ 1389.261592][T21708] dump_stack_lvl+0x188/0x24e [ 1389.266332][T21708] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1389.272553][T21708] ? show_regs_print_info+0x12/0x12 [ 1389.277837][T21708] ? load_image+0x410/0x410 [ 1389.282421][T21708] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1389.288603][T21708] sysfs_warn_dup+0x8a/0xa0 [ 1389.293178][T21708] sysfs_do_create_link_sd+0xc0/0x110 [ 1389.298811][T21708] device_add+0x83b/0x1050 [ 1389.303397][T21708] wiphy_register+0x1d8b/0x2aa0 [ 1389.308339][T21708] ? cfg80211_event_work+0x40/0x40 [ 1389.313516][T21708] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1389.319788][T21708] ieee80211_register_hw+0x2e33/0x3b00 [ 1389.325576][T21708] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1389.331819][T21708] ? ieee80211_register_hw+0xf31/0x3b00 [ 1389.337428][T21708] ? ieee80211_register_hw+0xf31/0x3b00 [ 1389.343054][T21708] ? ieee80211_tasklet_handler+0x20/0x20 [ 1389.348747][T21708] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1389.354707][T21708] ? __debug_object_init+0xed/0x440 [ 1389.359979][T21708] ? memset+0x1e/0x40 [ 1389.364031][T21708] ? __hrtimer_init+0x189/0x270 [ 1389.368952][T21708] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1389.374743][T21708] ? memcpy+0x3c/0x60 [ 1389.378793][T21708] hwsim_new_radio_nl+0xab7/0xc90 [ 1389.383892][T21708] genl_family_rcv_msg_doit+0x22f/0x350 [ 1389.389802][T21708] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1389.395803][T21708] genl_rcv_msg+0x601/0x790 [ 1389.400375][T21708] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1389.406597][T21708] ? genl_bind+0x360/0x360 [ 1389.411106][T21708] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1389.417517][T21708] netlink_rcv_skb+0x1ef/0x440 [ 1389.422341][T21708] ? genl_bind+0x360/0x360 [ 1389.426827][T21708] ? netlink_ack+0x1160/0x1160 [ 1389.431668][T21708] ? down_read+0x1a8/0x2d0 [ 1389.436152][T21708] genl_rcv+0x24/0x40 [ 1389.440200][T21708] netlink_unicast+0x7ad/0x920 [ 1389.445038][T21708] netlink_sendmsg+0x8ad/0xbd0 [ 1389.449862][T21708] ? lockdep_hardirqs_on+0x94/0x140 [ 1389.455132][T21708] ? netlink_getsockopt+0x550/0x550 [ 1389.460411][T21708] ? security_socket_sendmsg+0x56/0xa0 [ 1389.465953][T21708] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1389.471299][T21708] ? security_socket_sendmsg+0x7c/0xa0 [ 1389.476823][T21708] ? netlink_getsockopt+0x550/0x550 [ 1389.482092][T21708] ____sys_sendmsg+0x5ed/0x9a0 [ 1389.486935][T21708] ? __sys_sendmsg_sock+0x30/0x30 [ 1389.492023][T21708] ? __import_iovec+0x306/0x510 [ 1389.497139][T21708] ? import_iovec+0x6f/0xa0 [ 1389.501729][T21708] ___sys_sendmsg+0x2a2/0x360 [ 1389.506466][T21708] ? migrate_enable+0x148/0x220 [ 1389.511385][T21708] ? __sys_sendmsg+0x2a0/0x2a0 [ 1389.516285][T21708] __se_sys_sendmsg+0x1c3/0x2b0 [ 1389.521202][T21708] ? __x64_sys_sendmsg+0x80/0x80 [ 1389.526241][T21708] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1389.532204][T21708] do_syscall_64+0x4c/0xa0 [ 1389.536687][T21708] ? clear_bhb_loop+0x60/0xb0 [ 1389.541426][T21708] ? clear_bhb_loop+0x60/0xb0 [ 1389.546168][T21708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1389.552132][T21708] RIP: 0033:0x7f164d99f559 [ 1389.556608][T21708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1389.576362][T21708] RSP: 002b:00007f164e946028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1389.584871][T21708] RAX: ffffffffffffffda RBX: 00007f164dc25fa0 RCX: 00007f164d99f559 [ 1389.592939][T21708] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1389.600970][T21708] RBP: 00007f164da36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1389.609022][T21708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1389.617047][T21708] R13: 00007f164dc26038 R14: 00007f164dc25fa0 R15: 00007ffd195f58f8 [ 1389.625092][T21708] [ 1391.071430][T21739] netlink: 'syz.0.6555': attribute type 10 has an invalid length. [ 1391.506933][T21747] netlink: 'syz.2.6552': attribute type 29 has an invalid length. [ 1391.637554][T21747] netlink: 'syz.2.6552': attribute type 29 has an invalid length. [ 1391.668659][T21750] netlink: 'syz.2.6552': attribute type 29 has an invalid length. [ 1392.709418][T21766] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6559'. [ 1392.832447][T21767] netlink: 'syz.0.6567': attribute type 10 has an invalid length. [ 1392.904684][T21766] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1392.971933][T21766] CPU: 0 PID: 21766 Comm: syz.1.6559 Not tainted syzkaller #0 [ 1392.979482][T21766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1392.989569][T21766] Call Trace: [ 1392.992875][T21766] [ 1392.995837][T21766] dump_stack_lvl+0x188/0x24e [ 1393.000560][T21766] ? show_regs_print_info+0x12/0x12 [ 1393.005821][T21766] ? load_image+0x410/0x410 [ 1393.010361][T21766] sysfs_warn_dup+0x8a/0xa0 [ 1393.014905][T21766] sysfs_do_create_link_sd+0xc0/0x110 [ 1393.020342][T21766] device_add+0x83b/0x1050 [ 1393.024806][T21766] wiphy_register+0x1d8b/0x2aa0 [ 1393.029708][T21766] ? cfg80211_event_work+0x40/0x40 [ 1393.034845][T21766] ? minstrel_ht_alloc+0x894/0xa20 [ 1393.039998][T21766] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1393.046108][T21766] ieee80211_register_hw+0x2e33/0x3b00 [ 1393.051605][T21766] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1393.057817][T21766] ? ieee80211_register_hw+0xf31/0x3b00 [ 1393.063525][T21766] ? ieee80211_register_hw+0xf31/0x3b00 [ 1393.069127][T21766] ? ieee80211_tasklet_handler+0x20/0x20 [ 1393.074794][T21766] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1393.080726][T21766] ? __debug_object_init+0xed/0x440 [ 1393.085962][T21766] ? memset+0x1e/0x40 [ 1393.089970][T21766] ? __hrtimer_init+0x189/0x270 [ 1393.094850][T21766] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1393.100618][T21766] ? memcpy+0x3c/0x60 [ 1393.104631][T21766] hwsim_new_radio_nl+0xab7/0xc90 [ 1393.109708][T21766] genl_family_rcv_msg_doit+0x22f/0x350 [ 1393.115294][T21766] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1393.121254][T21766] genl_rcv_msg+0x601/0x790 [ 1393.125788][T21766] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1393.131981][T21766] ? genl_bind+0x360/0x360 [ 1393.136424][T21766] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1393.142796][T21766] ? kasan_check_range+0x1b0/0x290 [ 1393.147955][T21766] netlink_rcv_skb+0x1ef/0x440 [ 1393.152752][T21766] ? genl_bind+0x360/0x360 [ 1393.157196][T21766] ? netlink_ack+0x1160/0x1160 [ 1393.161991][T21766] ? down_read+0x1a8/0x2d0 [ 1393.166444][T21766] genl_rcv+0x24/0x40 [ 1393.170451][T21766] netlink_unicast+0x7ad/0x920 [ 1393.175253][T21766] netlink_sendmsg+0x8ad/0xbd0 [ 1393.180053][T21766] ? netlink_getsockopt+0x550/0x550 [ 1393.185282][T21766] ? netlink_getsockopt+0x550/0x550 [ 1393.190511][T21766] ____sys_sendmsg+0x5ed/0x9a0 [ 1393.195311][T21766] ? __sys_sendmsg_sock+0x30/0x30 [ 1393.200371][T21766] ? __import_iovec+0x306/0x510 [ 1393.205278][T21766] ? import_iovec+0x6f/0xa0 [ 1393.209821][T21766] ___sys_sendmsg+0x2a2/0x360 [ 1393.214530][T21766] ? __sys_sendmsg+0x2a0/0x2a0 [ 1393.219497][T21766] ? irqentry_enter+0x33/0x50 [ 1393.224244][T21766] ? rcu_is_watching+0x11/0xa0 [ 1393.229068][T21766] __se_sys_sendmsg+0x1c3/0x2b0 [ 1393.233954][T21766] ? __x64_sys_sendmsg+0x80/0x80 [ 1393.238933][T21766] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1393.244966][T21766] do_syscall_64+0x4c/0xa0 [ 1393.249460][T21766] ? clear_bhb_loop+0x60/0xb0 [ 1393.254228][T21766] ? clear_bhb_loop+0x60/0xb0 [ 1393.258943][T21766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1393.264868][T21766] RIP: 0033:0x7f96f9b9f559 [ 1393.269306][T21766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1393.288947][T21766] RSP: 002b:00007f96faaaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1393.297388][T21766] RAX: ffffffffffffffda RBX: 00007f96f9e25fa0 RCX: 00007f96f9b9f559 [ 1393.305387][T21766] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1393.313496][T21766] RBP: 00007f96f9c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1393.321601][T21766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1393.329604][T21766] R13: 00007f96f9e26038 R14: 00007f96f9e25fa0 R15: 00007ffe4bc4ac38 [ 1393.337622][T21766] [ 1397.391626][T21797] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6564'. [ 1397.717978][T21797] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1397.748786][T21797] CPU: 1 PID: 21797 Comm: syz.0.6564 Not tainted syzkaller #0 [ 1397.756380][T21797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1397.766493][T21797] Call Trace: [ 1397.769833][T21797] [ 1397.772810][T21797] dump_stack_lvl+0x188/0x24e [ 1397.777563][T21797] ? show_regs_print_info+0x12/0x12 [ 1397.782809][T21797] ? load_image+0x410/0x410 [ 1397.787381][T21797] sysfs_warn_dup+0x8a/0xa0 [ 1397.791946][T21797] sysfs_do_create_link_sd+0xc0/0x110 [ 1397.797415][T21797] device_add+0x83b/0x1050 [ 1397.801904][T21797] wiphy_register+0x1d8b/0x2aa0 [ 1397.806846][T21797] ? cfg80211_event_work+0x40/0x40 [ 1397.812055][T21797] ? minstrel_ht_alloc+0x894/0xa20 [ 1397.817237][T21797] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1397.823460][T21797] ieee80211_register_hw+0x2e33/0x3b00 [ 1397.828986][T21797] ? ieee80211_register_hw+0xf31/0x3b00 [ 1397.834588][T21797] ? ieee80211_register_hw+0xf31/0x3b00 [ 1397.840192][T21797] ? ieee80211_tasklet_handler+0x20/0x20 [ 1397.845885][T21797] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1397.852139][T21797] ? __debug_object_init+0xed/0x440 [ 1397.857587][T21797] ? memset+0x1e/0x40 [ 1397.861714][T21797] ? __hrtimer_init+0x189/0x270 [ 1397.866632][T21797] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1397.872418][T21797] ? memcpy+0x3c/0x60 [ 1397.876463][T21797] hwsim_new_radio_nl+0xab7/0xc90 [ 1397.881560][T21797] genl_family_rcv_msg_doit+0x22f/0x350 [ 1397.887170][T21797] ? end_current_label_crit_section+0x170/0x170 [ 1397.893514][T21797] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1397.899482][T21797] ? bpf_lsm_capable+0x5/0x10 [ 1397.904220][T21797] ? security_capable+0x85/0xb0 [ 1397.909137][T21797] genl_rcv_msg+0x601/0x790 [ 1397.913815][T21797] ? genl_bind+0x360/0x360 [ 1397.918303][T21797] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1397.924794][T21797] netlink_rcv_skb+0x1ef/0x440 [ 1397.929717][T21797] ? genl_bind+0x360/0x360 [ 1397.934256][T21797] ? netlink_ack+0x1160/0x1160 [ 1397.939096][T21797] ? down_read+0x1a8/0x2d0 [ 1397.943584][T21797] genl_rcv+0x24/0x40 [ 1397.947628][T21797] netlink_unicast+0x7ad/0x920 [ 1397.952469][T21797] netlink_sendmsg+0x8ad/0xbd0 [ 1397.957302][T21797] ? netlink_getsockopt+0x550/0x550 [ 1397.962568][T21797] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1397.968223][T21797] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1397.973655][T21797] ? security_socket_sendmsg+0x7c/0xa0 [ 1397.979180][T21797] ? netlink_getsockopt+0x550/0x550 [ 1397.984456][T21797] ____sys_sendmsg+0x5ed/0x9a0 [ 1397.989300][T21797] ? __sys_sendmsg_sock+0x30/0x30 [ 1397.994394][T21797] ? __import_iovec+0x306/0x510 [ 1397.999352][T21797] ? import_iovec+0x6f/0xa0 [ 1398.003938][T21797] ___sys_sendmsg+0x2a2/0x360 [ 1398.008676][T21797] ? __sys_sendmsg+0x2a0/0x2a0 [ 1398.013541][T21797] ? ktime_get+0x7b/0x270 [ 1398.017965][T21797] __se_sys_sendmsg+0x1c3/0x2b0 [ 1398.022885][T21797] ? __x64_sys_sendmsg+0x80/0x80 [ 1398.027949][T21797] ? lockdep_hardirqs_on+0x94/0x140 [ 1398.033224][T21797] do_syscall_64+0x4c/0xa0 [ 1398.037711][T21797] ? clear_bhb_loop+0x60/0xb0 [ 1398.042451][T21797] ? clear_bhb_loop+0x60/0xb0 [ 1398.047284][T21797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1398.053241][T21797] RIP: 0033:0x7fb4e9b9f559 [ 1398.057715][T21797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1398.077375][T21797] RSP: 002b:00007fb4eaa84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1398.085850][T21797] RAX: ffffffffffffffda RBX: 00007fb4e9e26090 RCX: 00007fb4e9b9f559 [ 1398.093882][T21797] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1398.101902][T21797] RBP: 00007fb4e9c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1398.109929][T21797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1398.117953][T21797] R13: 00007fb4e9e26128 R14: 00007fb4e9e26090 R15: 00007ffd96e8efe8 [ 1398.126005][T21797] [ 1398.287109][T21804] netlink: 'syz.2.6565': attribute type 15 has an invalid length. [ 1398.307012][T21804] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.6565'. [ 1398.703703][T21821] netlink: 'syz.3.6587': attribute type 15 has an invalid length. [ 1398.731075][T21821] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.6587'. [ 1399.047094][T21831] netlink: 'syz.4.6581': attribute type 3 has an invalid length. [ 1399.098115][T21831] netlink: 'syz.4.6581': attribute type 1 has an invalid length. [ 1399.132318][T21831] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.6581'. [ 1403.003296][T21886] netlink: 'syz.0.6598': attribute type 3 has an invalid length. [ 1403.036393][T21886] netlink: 'syz.0.6598': attribute type 1 has an invalid length. [ 1403.132777][T21886] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.6598'. [ 1403.214235][T21879] netlink: 'syz.2.6594': attribute type 10 has an invalid length. [ 1403.562108][T21898] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6600'. [ 1403.624267][T21898] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1403.643578][T21898] CPU: 0 PID: 21898 Comm: syz.3.6600 Not tainted syzkaller #0 [ 1403.651284][T21898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1403.661401][T21898] Call Trace: [ 1403.664768][T21898] [ 1403.667742][T21898] dump_stack_lvl+0x188/0x24e [ 1403.672531][T21898] ? show_regs_print_info+0x12/0x12 [ 1403.678065][T21898] ? load_image+0x410/0x410 [ 1403.682654][T21898] sysfs_warn_dup+0x8a/0xa0 [ 1403.687353][T21898] sysfs_do_create_link_sd+0xc0/0x110 [ 1403.692799][T21898] device_add+0x83b/0x1050 [ 1403.697277][T21898] wiphy_register+0x1d8b/0x2aa0 [ 1403.702188][T21898] ? cfg80211_event_work+0x40/0x40 [ 1403.707425][T21898] ? minstrel_ht_alloc+0x894/0xa20 [ 1403.712610][T21898] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1403.718730][T21898] ieee80211_register_hw+0x2e33/0x3b00 [ 1403.724251][T21898] ? ieee80211_register_hw+0xf31/0x3b00 [ 1403.729831][T21898] ? ieee80211_register_hw+0xf31/0x3b00 [ 1403.735417][T21898] ? ieee80211_tasklet_handler+0x20/0x20 [ 1403.741085][T21898] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1403.747114][T21898] ? __debug_object_init+0xed/0x440 [ 1403.752347][T21898] ? memset+0x1e/0x40 [ 1403.756355][T21898] ? __hrtimer_init+0x189/0x270 [ 1403.761254][T21898] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1403.767283][T21898] ? memcpy+0x3c/0x60 [ 1403.771313][T21898] hwsim_new_radio_nl+0xab7/0xc90 [ 1403.776561][T21898] genl_family_rcv_msg_doit+0x22f/0x350 [ 1403.782168][T21898] ? end_current_label_crit_section+0x170/0x170 [ 1403.788462][T21898] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1403.794407][T21898] ? bpf_lsm_capable+0x5/0x10 [ 1403.799229][T21898] ? security_capable+0x85/0xb0 [ 1403.804126][T21898] genl_rcv_msg+0x601/0x790 [ 1403.808671][T21898] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1403.814451][T21898] ? genl_bind+0x360/0x360 [ 1403.818995][T21898] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1403.825366][T21898] netlink_rcv_skb+0x1ef/0x440 [ 1403.830164][T21898] ? genl_bind+0x360/0x360 [ 1403.834644][T21898] ? netlink_ack+0x1160/0x1160 [ 1403.839452][T21898] ? down_read+0x1a8/0x2d0 [ 1403.843911][T21898] genl_rcv+0x24/0x40 [ 1403.847933][T21898] netlink_unicast+0x7ad/0x920 [ 1403.852744][T21898] netlink_sendmsg+0x8ad/0xbd0 [ 1403.857551][T21898] ? netlink_getsockopt+0x550/0x550 [ 1403.862785][T21898] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1403.868375][T21898] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1403.873695][T21898] ? security_socket_sendmsg+0x7c/0xa0 [ 1403.879195][T21898] ? netlink_getsockopt+0x550/0x550 [ 1403.884436][T21898] ____sys_sendmsg+0x5ed/0x9a0 [ 1403.889418][T21898] ? __sys_sendmsg_sock+0x30/0x30 [ 1403.894502][T21898] ? __import_iovec+0x306/0x510 [ 1403.899405][T21898] ? import_iovec+0x6f/0xa0 [ 1403.903949][T21898] ___sys_sendmsg+0x2a2/0x360 [ 1403.908674][T21898] ? __sys_sendmsg+0x2a0/0x2a0 [ 1403.913487][T21898] ? lockdep_hardirqs_on+0x94/0x140 [ 1403.918746][T21898] __se_sys_sendmsg+0x1c3/0x2b0 [ 1403.923633][T21898] ? perf_trace_preemptirq_template+0x268/0x320 [ 1403.929917][T21898] ? __x64_sys_sendmsg+0x80/0x80 [ 1403.934897][T21898] ? lockdep_hardirqs_on+0x94/0x140 [ 1403.940131][T21898] do_syscall_64+0x4c/0xa0 [ 1403.944611][T21898] ? clear_bhb_loop+0x60/0xb0 [ 1403.949341][T21898] ? clear_bhb_loop+0x60/0xb0 [ 1403.954268][T21898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1403.960231][T21898] RIP: 0033:0x7f69f459f559 [ 1403.964689][T21898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1403.984522][T21898] RSP: 002b:00007f69f542b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1403.992978][T21898] RAX: ffffffffffffffda RBX: 00007f69f4825fa0 RCX: 00007f69f459f559 [ 1404.000978][T21898] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1404.009584][T21898] RBP: 00007f69f4636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1404.017580][T21898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1404.025578][T21898] R13: 00007f69f4826038 R14: 00007f69f4825fa0 R15: 00007ffe287f4028 [ 1404.033603][T21898] [ 1404.446703][T21913] netlink: 'syz.0.6604': attribute type 29 has an invalid length. [ 1404.494035][T21913] netlink: 'syz.0.6604': attribute type 29 has an invalid length. [ 1404.522491][T21918] netlink: 'syz.0.6604': attribute type 29 has an invalid length. [ 1406.103627][T21951] netlink: 'syz.2.6620': attribute type 3 has an invalid length. [ 1406.170017][T21951] netlink: 'syz.2.6620': attribute type 1 has an invalid length. [ 1406.205353][T21951] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.6620'. [ 1406.227714][T21957] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6619'. [ 1406.305499][T21957] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1406.348221][T21957] CPU: 0 PID: 21957 Comm: syz.0.6619 Not tainted syzkaller #0 [ 1406.355780][T21957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1406.365896][T21957] Call Trace: [ 1406.369255][T21957] [ 1406.372256][T21957] dump_stack_lvl+0x188/0x24e [ 1406.377098][T21957] ? show_regs_print_info+0x12/0x12 [ 1406.382369][T21957] ? load_image+0x410/0x410 [ 1406.386949][T21957] sysfs_warn_dup+0x8a/0xa0 [ 1406.391527][T21957] sysfs_do_create_link_sd+0xc0/0x110 [ 1406.396974][T21957] device_add+0x83b/0x1050 [ 1406.401474][T21957] wiphy_register+0x1d8b/0x2aa0 [ 1406.406452][T21957] ? cfg80211_event_work+0x40/0x40 [ 1406.411626][T21957] ? minstrel_ht_alloc+0x894/0xa20 [ 1406.416808][T21957] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1406.423076][T21957] ieee80211_register_hw+0x2e33/0x3b00 [ 1406.428718][T21957] ? ieee80211_register_hw+0xf31/0x3b00 [ 1406.434322][T21957] ? ieee80211_register_hw+0xf31/0x3b00 [ 1406.440023][T21957] ? ieee80211_tasklet_handler+0x20/0x20 [ 1406.445703][T21957] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1406.451657][T21957] ? __debug_object_init+0xed/0x440 [ 1406.456901][T21957] ? memset+0x1e/0x40 [ 1406.461097][T21957] ? __hrtimer_init+0x189/0x270 [ 1406.466254][T21957] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1406.472039][T21957] ? memcpy+0x3c/0x60 [ 1406.476071][T21957] hwsim_new_radio_nl+0xab7/0xc90 [ 1406.481151][T21957] genl_family_rcv_msg_doit+0x22f/0x350 [ 1406.486742][T21957] ? end_current_label_crit_section+0x170/0x170 [ 1406.493030][T21957] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1406.498964][T21957] ? bpf_lsm_capable+0x5/0x10 [ 1406.503687][T21957] ? security_capable+0x85/0xb0 [ 1406.508570][T21957] genl_rcv_msg+0x601/0x790 [ 1406.513288][T21957] ? genl_bind+0x360/0x360 [ 1406.517738][T21957] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1406.524126][T21957] netlink_rcv_skb+0x1ef/0x440 [ 1406.528922][T21957] ? genl_bind+0x360/0x360 [ 1406.533375][T21957] ? netlink_ack+0x1160/0x1160 [ 1406.538182][T21957] ? down_read+0x1a8/0x2d0 [ 1406.542639][T21957] genl_rcv+0x24/0x40 [ 1406.546653][T21957] netlink_unicast+0x7ad/0x920 [ 1406.551542][T21957] netlink_sendmsg+0x8ad/0xbd0 [ 1406.556385][T21957] ? netlink_getsockopt+0x550/0x550 [ 1406.561741][T21957] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1406.567384][T21957] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1406.572791][T21957] ? security_socket_sendmsg+0x7c/0xa0 [ 1406.578299][T21957] ? netlink_getsockopt+0x550/0x550 [ 1406.583545][T21957] ____sys_sendmsg+0x5ed/0x9a0 [ 1406.588370][T21957] ? __sys_sendmsg_sock+0x30/0x30 [ 1406.593429][T21957] ? __import_iovec+0x306/0x510 [ 1406.598326][T21957] ? import_iovec+0x6f/0xa0 [ 1406.602966][T21957] ___sys_sendmsg+0x2a2/0x360 [ 1406.607688][T21957] ? __sys_sendmsg+0x2a0/0x2a0 [ 1406.612500][T21957] ? trace_call_bpf+0xbf/0x6b0 [ 1406.617407][T21957] __se_sys_sendmsg+0x1c3/0x2b0 [ 1406.622291][T21957] ? perf_trace_preemptirq_template+0x268/0x320 [ 1406.628648][T21957] ? __x64_sys_sendmsg+0x80/0x80 [ 1406.633650][T21957] ? lockdep_hardirqs_on+0x94/0x140 [ 1406.638980][T21957] do_syscall_64+0x4c/0xa0 [ 1406.643438][T21957] ? clear_bhb_loop+0x60/0xb0 [ 1406.648165][T21957] ? clear_bhb_loop+0x60/0xb0 [ 1406.652965][T21957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1406.658906][T21957] RIP: 0033:0x7fb4e9b9f559 [ 1406.663351][T21957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1406.683259][T21957] RSP: 002b:00007fb4eaa84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1406.691725][T21957] RAX: ffffffffffffffda RBX: 00007fb4e9e26090 RCX: 00007fb4e9b9f559 [ 1406.699740][T21957] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1406.707740][T21957] RBP: 00007fb4e9c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1406.715742][T21957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1406.723927][T21957] R13: 00007fb4e9e26128 R14: 00007fb4e9e26090 R15: 00007ffd96e8efe8 [ 1406.731953][T21957] [ 1406.832905][T21953] netlink: 'syz.3.6616': attribute type 10 has an invalid length. [ 1409.586238][T21971] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6624'. [ 1409.708698][T21977] IPv6: pim6reg1: Disabled Multicast RS [ 1409.802239][T21981] netlink: 'syz.3.6627': attribute type 29 has an invalid length. [ 1409.830086][T21981] netlink: 'syz.3.6627': attribute type 29 has an invalid length. [ 1409.896329][T21982] netlink: 'syz.3.6627': attribute type 29 has an invalid length. [ 1411.139898][T22003] netlink: 'syz.2.6638': attribute type 10 has an invalid length. [ 1413.853764][T22019] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.6643'. [ 1413.970465][T22019] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1414.014640][T22019] CPU: 0 PID: 22019 Comm: syz.4.6643 Not tainted syzkaller #0 [ 1414.022239][T22019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1414.032346][T22019] Call Trace: [ 1414.035660][T22019] [ 1414.038635][T22019] dump_stack_lvl+0x188/0x24e [ 1414.043381][T22019] ? show_regs_print_info+0x12/0x12 [ 1414.048639][T22019] ? load_image+0x410/0x410 [ 1414.053285][T22019] ? sysfs_warn_dup+0x61/0xa0 [ 1414.058004][T22019] ? kernfs_path_from_node+0x1/0xd60 [ 1414.063414][T22019] sysfs_warn_dup+0x8a/0xa0 [ 1414.067962][T22019] sysfs_do_create_link_sd+0xc0/0x110 [ 1414.073381][T22019] device_add+0x83b/0x1050 [ 1414.077853][T22019] wiphy_register+0x1d8b/0x2aa0 [ 1414.082762][T22019] ? cfg80211_event_work+0x40/0x40 [ 1414.087919][T22019] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1414.094051][T22019] ieee80211_register_hw+0x2e33/0x3b00 [ 1414.099566][T22019] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1414.105763][T22019] ? ieee80211_register_hw+0xf31/0x3b00 [ 1414.111343][T22019] ? ieee80211_register_hw+0xf31/0x3b00 [ 1414.116939][T22019] ? ieee80211_tasklet_handler+0x20/0x20 [ 1414.122694][T22019] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1414.128639][T22019] ? __debug_object_init+0xed/0x440 [ 1414.133877][T22019] ? memset+0x1e/0x40 [ 1414.137892][T22019] ? __hrtimer_init+0x189/0x270 [ 1414.142778][T22019] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1414.148539][T22019] ? memcpy+0x3c/0x60 [ 1414.152560][T22019] hwsim_new_radio_nl+0xab7/0xc90 [ 1414.157630][T22019] genl_family_rcv_msg_doit+0x22f/0x350 [ 1414.163213][T22019] ? end_current_label_crit_section+0x170/0x170 [ 1414.169499][T22019] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1414.175435][T22019] ? bpf_lsm_capable+0x5/0x10 [ 1414.180146][T22019] ? security_capable+0x85/0xb0 [ 1414.185030][T22019] genl_rcv_msg+0x601/0x790 [ 1414.189562][T22019] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1414.195329][T22019] ? genl_bind+0x360/0x360 [ 1414.199804][T22019] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1414.206173][T22019] netlink_rcv_skb+0x1ef/0x440 [ 1414.210963][T22019] ? genl_bind+0x360/0x360 [ 1414.215411][T22019] ? netlink_ack+0x1160/0x1160 [ 1414.220218][T22019] ? down_read+0x1a8/0x2d0 [ 1414.224677][T22019] genl_rcv+0x24/0x40 [ 1414.228702][T22019] netlink_unicast+0x7ad/0x920 [ 1414.233538][T22019] netlink_sendmsg+0x8ad/0xbd0 [ 1414.238520][T22019] ? netlink_getsockopt+0x550/0x550 [ 1414.243783][T22019] ? netlink_getsockopt+0x550/0x550 [ 1414.249202][T22019] ____sys_sendmsg+0x5ed/0x9a0 [ 1414.254011][T22019] ? rcu_is_watching+0x11/0xa0 [ 1414.258822][T22019] ? lockdep_hardirqs_on+0x94/0x140 [ 1414.264061][T22019] ? __sys_sendmsg_sock+0x30/0x30 [ 1414.269136][T22019] ? ___sys_sendmsg+0x287/0x360 [ 1414.274057][T22019] ___sys_sendmsg+0x2a2/0x360 [ 1414.278778][T22019] ? __sys_sendmsg+0x2a0/0x2a0 [ 1414.283592][T22019] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1414.289376][T22019] __se_sys_sendmsg+0x1c3/0x2b0 [ 1414.294263][T22019] ? __x64_sys_sendmsg+0x80/0x80 [ 1414.299312][T22019] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1414.305376][T22019] do_syscall_64+0x4c/0xa0 [ 1414.309843][T22019] ? clear_bhb_loop+0x60/0xb0 [ 1414.314566][T22019] ? clear_bhb_loop+0x60/0xb0 [ 1414.319292][T22019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1414.325222][T22019] RIP: 0033:0x7f4643f9f559 [ 1414.329696][T22019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1414.349346][T22019] RSP: 002b:00007f4644eca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1414.357812][T22019] RAX: ffffffffffffffda RBX: 00007f4644225fa0 RCX: 00007f4643f9f559 [ 1414.365818][T22019] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1414.373815][T22019] RBP: 00007f4644036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1414.381809][T22019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1414.389808][T22019] R13: 00007f4644226038 R14: 00007f4644225fa0 R15: 00007ffc1bd36a08 [ 1414.397829][T22019] [ 1414.466048][T22021] netlink: 'syz.0.6644': attribute type 11 has an invalid length. [ 1414.484117][T22021] netlink: 'syz.0.6644': attribute type 11 has an invalid length. [ 1414.524940][T22021] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6644'. [ 1414.858892][T22040] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1415.093549][T22045] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6655'. [ 1415.163523][T22051] netlink: 'syz.2.6657': attribute type 2 has an invalid length. [ 1415.422764][T22057] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6660'. [ 1415.457703][T22059] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6659'. [ 1415.511247][T22057] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1415.522238][T22057] CPU: 1 PID: 22057 Comm: syz.3.6660 Not tainted syzkaller #0 [ 1415.529869][T22057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1415.540008][T22057] Call Trace: [ 1415.543436][T22057] [ 1415.546417][T22057] dump_stack_lvl+0x188/0x24e [ 1415.551166][T22057] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1415.557385][T22057] ? show_regs_print_info+0x12/0x12 [ 1415.562661][T22057] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1415.568913][T22057] ? dump_stack+0x5/0x12 [ 1415.573228][T22057] sysfs_warn_dup+0x8a/0xa0 [ 1415.577819][T22057] sysfs_do_create_link_sd+0xc0/0x110 [ 1415.583262][T22057] device_add+0x83b/0x1050 [ 1415.587757][T22057] wiphy_register+0x1d8b/0x2aa0 [ 1415.592697][T22057] ? cfg80211_event_work+0x40/0x40 [ 1415.597872][T22057] ? minstrel_ht_alloc+0x894/0xa20 [ 1415.603069][T22057] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1415.609243][T22057] ieee80211_register_hw+0x2e33/0x3b00 [ 1415.614766][T22057] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1415.621171][T22057] ? ieee80211_register_hw+0xf31/0x3b00 [ 1415.626782][T22057] ? ieee80211_register_hw+0xf31/0x3b00 [ 1415.632403][T22057] ? ieee80211_tasklet_handler+0x20/0x20 [ 1415.638106][T22057] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1415.644065][T22057] ? __debug_object_init+0xed/0x440 [ 1415.649335][T22057] ? memset+0x1e/0x40 [ 1415.653380][T22057] ? __hrtimer_init+0x189/0x270 [ 1415.658302][T22057] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1415.664099][T22057] ? memcpy+0x3c/0x60 [ 1415.668144][T22057] hwsim_new_radio_nl+0xab7/0xc90 [ 1415.673268][T22057] genl_family_rcv_msg_doit+0x22f/0x350 [ 1415.678901][T22057] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1415.684895][T22057] ? ns_capable+0x6a/0xe0 [ 1415.689583][T22057] genl_rcv_msg+0x601/0x790 [ 1415.694159][T22057] ? genl_bind+0x360/0x360 [ 1415.698630][T22057] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1415.705068][T22057] netlink_rcv_skb+0x1ef/0x440 [ 1415.709956][T22057] ? genl_bind+0x360/0x360 [ 1415.714422][T22057] ? netlink_ack+0x1160/0x1160 [ 1415.719228][T22057] ? down_read+0x1a8/0x2d0 [ 1415.723682][T22057] genl_rcv+0x24/0x40 [ 1415.727695][T22057] netlink_unicast+0x7ad/0x920 [ 1415.732504][T22057] netlink_sendmsg+0x8ad/0xbd0 [ 1415.737310][T22057] ? netlink_getsockopt+0x550/0x550 [ 1415.742547][T22057] ? netlink_getsockopt+0x550/0x550 [ 1415.747780][T22057] ____sys_sendmsg+0x5ed/0x9a0 [ 1415.752579][T22057] ? __sys_sendmsg_sock+0x30/0x30 [ 1415.757631][T22057] ? __import_iovec+0x306/0x510 [ 1415.762527][T22057] ? import_iovec+0x6f/0xa0 [ 1415.767092][T22057] ___sys_sendmsg+0x2a2/0x360 [ 1415.771902][T22057] ? __sys_sendmsg+0x2a0/0x2a0 [ 1415.776891][T22057] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1415.782671][T22057] __se_sys_sendmsg+0x1c3/0x2b0 [ 1415.787845][T22057] ? __x64_sys_sendmsg+0x80/0x80 [ 1415.792827][T22057] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1415.798763][T22057] do_syscall_64+0x4c/0xa0 [ 1415.803212][T22057] ? clear_bhb_loop+0x60/0xb0 [ 1415.807923][T22057] ? clear_bhb_loop+0x60/0xb0 [ 1415.812642][T22057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1415.818570][T22057] RIP: 0033:0x7f69f459f559 [ 1415.823029][T22057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1415.842678][T22057] RSP: 002b:00007f69f542b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1415.851133][T22057] RAX: ffffffffffffffda RBX: 00007f69f4825fa0 RCX: 00007f69f459f559 [ 1415.859158][T22057] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1415.867188][T22057] RBP: 00007f69f4636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1415.875288][T22057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.883288][T22057] R13: 00007f69f4826038 R14: 00007f69f4825fa0 R15: 00007ffe287f4028 [ 1415.891309][T22057] [ 1416.603477][T22087] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6670'. [ 1416.821083][T22090] netlink: 'syz.4.6672': attribute type 2 has an invalid length. [ 1416.946776][T22094] netlink: 'syz.3.6673': attribute type 3 has an invalid length. [ 1416.965042][T22094] netlink: 'syz.3.6673': attribute type 1 has an invalid length. [ 1416.973320][T22094] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.6673'. [ 1417.221407][T22105] netlink: 'syz.1.6686': attribute type 2 has an invalid length. [ 1417.414946][T22108] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6676'. [ 1417.550866][T22110] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6677'. [ 1417.606439][T22110] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1417.624059][T22110] CPU: 0 PID: 22110 Comm: syz.0.6677 Not tainted syzkaller #0 [ 1417.631617][T22110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1417.641721][T22110] Call Trace: [ 1417.645028][T22110] [ 1417.647992][T22110] dump_stack_lvl+0x188/0x24e [ 1417.652724][T22110] ? show_regs_print_info+0x12/0x12 [ 1417.657967][T22110] ? load_image+0x410/0x410 [ 1417.662533][T22110] sysfs_warn_dup+0x8a/0xa0 [ 1417.667089][T22110] sysfs_do_create_link_sd+0xc0/0x110 [ 1417.672590][T22110] device_add+0x83b/0x1050 [ 1417.677056][T22110] wiphy_register+0x1d8b/0x2aa0 [ 1417.681965][T22110] ? cfg80211_event_work+0x40/0x40 [ 1417.687110][T22110] ? minstrel_ht_alloc+0x894/0xa20 [ 1417.692259][T22110] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1417.698376][T22110] ieee80211_register_hw+0x2e33/0x3b00 [ 1417.703903][T22110] ? ieee80211_register_hw+0xf31/0x3b00 [ 1417.709511][T22110] ? ieee80211_register_hw+0xf31/0x3b00 [ 1417.715135][T22110] ? ieee80211_tasklet_handler+0x20/0x20 [ 1417.720848][T22110] ? __hrtimer_init+0x63/0x270 [ 1417.725652][T22110] ? __sanitizer_cov_trace_const_cmp4+0x32/0x80 [ 1417.731931][T22110] ? __hrtimer_init+0x189/0x270 [ 1417.736819][T22110] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1417.742580][T22110] ? memcpy+0x3c/0x60 [ 1417.746607][T22110] hwsim_new_radio_nl+0xab7/0xc90 [ 1417.751683][T22110] genl_family_rcv_msg_doit+0x22f/0x350 [ 1417.757260][T22110] ? end_current_label_crit_section+0x170/0x170 [ 1417.763549][T22110] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1417.769577][T22110] ? bpf_lsm_capable+0x5/0x10 [ 1417.774300][T22110] ? security_capable+0x85/0xb0 [ 1417.779190][T22110] genl_rcv_msg+0x601/0x790 [ 1417.783822][T22110] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1417.789617][T22110] ? genl_bind+0x360/0x360 [ 1417.794065][T22110] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1417.800439][T22110] netlink_rcv_skb+0x1ef/0x440 [ 1417.805348][T22110] ? genl_bind+0x360/0x360 [ 1417.809801][T22110] ? netlink_ack+0x1160/0x1160 [ 1417.814600][T22110] ? down_read+0x1a8/0x2d0 [ 1417.819054][T22110] genl_rcv+0x24/0x40 [ 1417.823068][T22110] netlink_unicast+0x7ad/0x920 [ 1417.827891][T22110] netlink_sendmsg+0x8ad/0xbd0 [ 1417.832888][T22110] ? netlink_getsockopt+0x550/0x550 [ 1417.838129][T22110] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1417.843801][T22110] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1417.849124][T22110] ? security_socket_sendmsg+0x7c/0xa0 [ 1417.854629][T22110] ? netlink_getsockopt+0x550/0x550 [ 1417.859955][T22110] ____sys_sendmsg+0x5ed/0x9a0 [ 1417.864767][T22110] ? __sys_sendmsg_sock+0x30/0x30 [ 1417.869822][T22110] ? __import_iovec+0x306/0x510 [ 1417.874726][T22110] ? import_iovec+0x6f/0xa0 [ 1417.879283][T22110] ___sys_sendmsg+0x2a2/0x360 [ 1417.884023][T22110] ? __sys_sendmsg+0x2a0/0x2a0 [ 1417.888841][T22110] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1417.894631][T22110] __se_sys_sendmsg+0x1c3/0x2b0 [ 1417.899518][T22110] ? __x64_sys_sendmsg+0x80/0x80 [ 1417.904509][T22110] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1417.910531][T22110] do_syscall_64+0x4c/0xa0 [ 1417.914987][T22110] ? clear_bhb_loop+0x60/0xb0 [ 1417.919695][T22110] ? clear_bhb_loop+0x60/0xb0 [ 1417.924409][T22110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1417.930359][T22110] RIP: 0033:0x7fb4e9b9f559 [ 1417.934917][T22110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1417.954578][T22110] RSP: 002b:00007fb4eaaa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1417.963034][T22110] RAX: ffffffffffffffda RBX: 00007fb4e9e25fa0 RCX: 00007fb4e9b9f559 [ 1417.971125][T22110] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1417.979125][T22110] RBP: 00007fb4e9c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1417.987126][T22110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1417.995128][T22110] R13: 00007fb4e9e26038 R14: 00007fb4e9e25fa0 R15: 00007ffd96e8efe8 [ 1418.003153][T22110] [ 1418.992105][T22134] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.6685'. [ 1419.299577][T22147] netlink: 'syz.4.6692': attribute type 3 has an invalid length. [ 1419.310034][T22147] netlink: 'syz.4.6692': attribute type 1 has an invalid length. [ 1419.320681][T22147] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.6692'. [ 1419.340880][T22148] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6690'. [ 1419.372548][T22144] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1419.385041][T22144] CPU: 1 PID: 22144 Comm: syz.1.6691 Not tainted syzkaller #0 [ 1419.392585][T22144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1419.402724][T22144] Call Trace: [ 1419.406146][T22144] [ 1419.409124][T22144] dump_stack_lvl+0x188/0x24e [ 1419.413873][T22144] ? show_regs_print_info+0x12/0x12 [ 1419.419135][T22144] ? load_image+0x410/0x410 [ 1419.423727][T22144] sysfs_warn_dup+0x8a/0xa0 [ 1419.428308][T22144] sysfs_do_create_link_sd+0xc0/0x110 [ 1419.433775][T22144] device_add+0x83b/0x1050 [ 1419.438268][T22144] wiphy_register+0x1d8b/0x2aa0 [ 1419.443210][T22144] ? cfg80211_event_work+0x40/0x40 [ 1419.448393][T22144] ? minstrel_ht_alloc+0x894/0xa20 [ 1419.453689][T22144] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1419.459833][T22144] ieee80211_register_hw+0x2e33/0x3b00 [ 1419.465373][T22144] ? ieee80211_register_hw+0xf31/0x3b00 [ 1419.470982][T22144] ? ieee80211_register_hw+0xf31/0x3b00 [ 1419.476603][T22144] ? ieee80211_tasklet_handler+0x20/0x20 [ 1419.482313][T22144] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1419.488545][T22144] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1419.494345][T22144] ? memcpy+0x3c/0x60 [ 1419.498400][T22144] hwsim_new_radio_nl+0xab7/0xc90 [ 1419.503497][T22144] genl_family_rcv_msg_doit+0x22f/0x350 [ 1419.509101][T22144] ? end_current_label_crit_section+0x170/0x170 [ 1419.515487][T22144] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1419.521426][T22144] ? bpf_lsm_capable+0x5/0x10 [ 1419.526145][T22144] ? security_capable+0x85/0xb0 [ 1419.531040][T22144] genl_rcv_msg+0x601/0x790 [ 1419.535592][T22144] ? genl_bind+0x360/0x360 [ 1419.540040][T22144] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1419.546433][T22144] netlink_rcv_skb+0x1ef/0x440 [ 1419.551252][T22144] ? genl_bind+0x360/0x360 [ 1419.555712][T22144] ? netlink_ack+0x1160/0x1160 [ 1419.560518][T22144] ? down_read+0x1a8/0x2d0 [ 1419.564993][T22144] genl_rcv+0x24/0x40 [ 1419.569011][T22144] netlink_unicast+0x7ad/0x920 [ 1419.573840][T22144] netlink_sendmsg+0x8ad/0xbd0 [ 1419.578651][T22144] ? netlink_getsockopt+0x550/0x550 [ 1419.583895][T22144] ? netlink_getsockopt+0x550/0x550 [ 1419.589127][T22144] ____sys_sendmsg+0x5ed/0x9a0 [ 1419.593933][T22144] ? __sys_sendmsg_sock+0x30/0x30 [ 1419.598996][T22144] ? __import_iovec+0x306/0x510 [ 1419.603895][T22144] ? import_iovec+0x6f/0xa0 [ 1419.608444][T22144] ___sys_sendmsg+0x2a2/0x360 [ 1419.613159][T22144] ? __sys_sendmsg+0x2a0/0x2a0 [ 1419.618003][T22144] __se_sys_sendmsg+0x1c3/0x2b0 [ 1419.622889][T22144] ? __x64_sys_sendmsg+0x80/0x80 [ 1419.627874][T22144] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1419.633812][T22144] do_syscall_64+0x4c/0xa0 [ 1419.638263][T22144] ? clear_bhb_loop+0x60/0xb0 [ 1419.642983][T22144] ? clear_bhb_loop+0x60/0xb0 [ 1419.647702][T22144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1419.653632][T22144] RIP: 0033:0x7f96f9b9f559 [ 1419.658083][T22144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1419.677740][T22144] RSP: 002b:00007f96faaaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1419.686193][T22144] RAX: ffffffffffffffda RBX: 00007f96f9e25fa0 RCX: 00007f96f9b9f559 [ 1419.694199][T22144] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1419.702205][T22144] RBP: 00007f96f9c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1419.710587][T22144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1419.718698][T22144] R13: 00007f96f9e26038 R14: 00007f96f9e25fa0 R15: 00007ffe4bc4ac38 [ 1419.726723][T22144] [ 1420.055192][T22155] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1420.064060][T22155] CPU: 1 PID: 22155 Comm: syz.2.6694 Not tainted syzkaller #0 [ 1420.071593][T22155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1420.081709][T22155] Call Trace: [ 1420.085048][T22155] [ 1420.088042][T22155] dump_stack_lvl+0x188/0x24e [ 1420.092801][T22155] ? show_regs_print_info+0x12/0x12 [ 1420.098071][T22155] ? load_image+0x410/0x410 [ 1420.102682][T22155] sysfs_warn_dup+0x8a/0xa0 [ 1420.107269][T22155] sysfs_do_create_link_sd+0xc0/0x110 [ 1420.112729][T22155] device_add+0x83b/0x1050 [ 1420.117315][T22155] wiphy_register+0x1d8b/0x2aa0 [ 1420.122258][T22155] ? cfg80211_event_work+0x40/0x40 [ 1420.127440][T22155] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1420.133717][T22155] ieee80211_register_hw+0x2e33/0x3b00 [ 1420.139269][T22155] ? ieee80211_register_hw+0xf31/0x3b00 [ 1420.144882][T22155] ? ieee80211_register_hw+0xf31/0x3b00 [ 1420.150509][T22155] ? ieee80211_tasklet_handler+0x20/0x20 [ 1420.156206][T22155] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1420.162160][T22155] ? __debug_object_init+0xed/0x440 [ 1420.167430][T22155] ? memset+0x1e/0x40 [ 1420.171555][T22155] ? __hrtimer_init+0x189/0x270 [ 1420.176495][T22155] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1420.182341][T22155] ? memcpy+0x3c/0x60 [ 1420.186408][T22155] hwsim_new_radio_nl+0xab7/0xc90 [ 1420.191520][T22155] genl_family_rcv_msg_doit+0x22f/0x350 [ 1420.197163][T22155] ? end_current_label_crit_section+0x170/0x170 [ 1420.203501][T22155] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1420.209498][T22155] ? bpf_lsm_capable+0x5/0x10 [ 1420.214260][T22155] ? security_capable+0x85/0xb0 [ 1420.219198][T22155] genl_rcv_msg+0x601/0x790 [ 1420.223795][T22155] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1420.230051][T22155] ? genl_bind+0x360/0x360 [ 1420.234553][T22155] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1420.240993][T22155] ? lock_acquire+0x226/0x4a0 [ 1420.245761][T22155] netlink_rcv_skb+0x1ef/0x440 [ 1420.250605][T22155] ? genl_bind+0x360/0x360 [ 1420.255104][T22155] ? netlink_ack+0x1160/0x1160 [ 1420.259949][T22155] ? down_read+0x1a8/0x2d0 [ 1420.264436][T22155] genl_rcv+0x24/0x40 [ 1420.268475][T22155] netlink_unicast+0x7ad/0x920 [ 1420.273317][T22155] netlink_sendmsg+0x8ad/0xbd0 [ 1420.278149][T22155] ? lockdep_hardirqs_on+0x94/0x140 [ 1420.283463][T22155] ? netlink_getsockopt+0x550/0x550 [ 1420.288769][T22155] ? bpf_lsm_socket_accept+0x10/0x10 [ 1420.294167][T22155] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1420.299610][T22155] ? security_socket_sendmsg+0x7c/0xa0 [ 1420.305141][T22155] ? netlink_getsockopt+0x550/0x550 [ 1420.310407][T22155] ____sys_sendmsg+0x5ed/0x9a0 [ 1420.315321][T22155] ? __sys_sendmsg_sock+0x30/0x30 [ 1420.320422][T22155] ? __import_iovec+0x306/0x510 [ 1420.325365][T22155] ? import_iovec+0x6f/0xa0 [ 1420.330023][T22155] ___sys_sendmsg+0x2a2/0x360 [ 1420.334820][T22155] ? __sys_sendmsg+0x2a0/0x2a0 [ 1420.339685][T22155] ? ktime_get+0x7b/0x270 [ 1420.344113][T22155] __se_sys_sendmsg+0x1c3/0x2b0 [ 1420.349027][T22155] ? perf_trace_preemptirq_template+0x268/0x320 [ 1420.355369][T22155] ? __x64_sys_sendmsg+0x80/0x80 [ 1420.360393][T22155] ? lockdep_hardirqs_on+0x94/0x140 [ 1420.365671][T22155] do_syscall_64+0x4c/0xa0 [ 1420.370151][T22155] ? clear_bhb_loop+0x60/0xb0 [ 1420.374891][T22155] ? clear_bhb_loop+0x60/0xb0 [ 1420.379640][T22155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1420.385601][T22155] RIP: 0033:0x7f164d99f559 [ 1420.390097][T22155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1420.409767][T22155] RSP: 002b:00007f164e946028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1420.418246][T22155] RAX: ffffffffffffffda RBX: 00007f164dc25fa0 RCX: 00007f164d99f559 [ 1420.426280][T22155] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1420.434308][T22155] RBP: 00007f164da36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1420.442346][T22155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1420.450408][T22155] R13: 00007f164dc26038 R14: 00007f164dc25fa0 R15: 00007ffd195f58f8 [ 1420.458461][T22155] [ 1421.371522][T22181] __nla_validate_parse: 2 callbacks suppressed [ 1421.371565][T22181] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.6702'. [ 1421.661634][T22188] netlink: 'syz.2.6707': attribute type 3 has an invalid length. [ 1421.683985][T22188] netlink: 'syz.2.6707': attribute type 1 has an invalid length. [ 1421.751935][T22188] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.6707'. [ 1421.820925][T22192] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.6708'. [ 1421.915435][T22192] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1421.934231][T22192] CPU: 0 PID: 22192 Comm: syz.4.6708 Not tainted syzkaller #0 [ 1421.941871][T22192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1421.951983][T22192] Call Trace: [ 1421.955316][T22192] [ 1421.958283][T22192] dump_stack_lvl+0x188/0x24e [ 1421.963023][T22192] ? show_regs_print_info+0x12/0x12 [ 1421.968293][T22192] ? load_image+0x410/0x410 [ 1421.972860][T22192] sysfs_warn_dup+0x8a/0xa0 [ 1421.977430][T22192] sysfs_do_create_link_sd+0xc0/0x110 [ 1421.982877][T22192] device_add+0x83b/0x1050 [ 1421.987392][T22192] wiphy_register+0x1d8b/0x2aa0 [ 1421.992675][T22192] ? cfg80211_event_work+0x40/0x40 [ 1421.997841][T22192] ? minstrel_ht_alloc+0x894/0xa20 [ 1422.003019][T22192] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1422.009158][T22192] ieee80211_register_hw+0x2e33/0x3b00 [ 1422.014671][T22192] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1422.020887][T22192] ? ieee80211_register_hw+0xf31/0x3b00 [ 1422.026483][T22192] ? ieee80211_register_hw+0xf31/0x3b00 [ 1422.032116][T22192] ? ieee80211_tasklet_handler+0x20/0x20 [ 1422.037821][T22192] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1422.043775][T22192] ? __debug_object_init+0xed/0x440 [ 1422.049035][T22192] ? memset+0x1e/0x40 [ 1422.053080][T22192] ? __hrtimer_init+0x189/0x270 [ 1422.057986][T22192] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1422.063773][T22192] ? memcpy+0x3c/0x60 [ 1422.067812][T22192] hwsim_new_radio_nl+0xab7/0xc90 [ 1422.072916][T22192] genl_family_rcv_msg_doit+0x22f/0x350 [ 1422.078518][T22192] ? end_current_label_crit_section+0x170/0x170 [ 1422.085002][T22192] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1422.091070][T22192] ? bpf_lsm_capable+0x5/0x10 [ 1422.095808][T22192] ? security_capable+0x85/0xb0 [ 1422.100806][T22192] genl_rcv_msg+0x601/0x790 [ 1422.105386][T22192] ? genl_bind+0x360/0x360 [ 1422.109941][T22192] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1422.116335][T22192] netlink_rcv_skb+0x1ef/0x440 [ 1422.121158][T22192] ? genl_bind+0x360/0x360 [ 1422.125629][T22192] ? netlink_ack+0x1160/0x1160 [ 1422.130460][T22192] ? down_read+0x1a8/0x2d0 [ 1422.134936][T22192] genl_rcv+0x24/0x40 [ 1422.138964][T22192] netlink_unicast+0x7ad/0x920 [ 1422.143788][T22192] netlink_sendmsg+0x8ad/0xbd0 [ 1422.148617][T22192] ? netlink_getsockopt+0x550/0x550 [ 1422.153885][T22192] ? netlink_getsockopt+0x550/0x550 [ 1422.159177][T22192] ____sys_sendmsg+0x5ed/0x9a0 [ 1422.164017][T22192] ? __sys_sendmsg_sock+0x30/0x30 [ 1422.169101][T22192] ? __import_iovec+0x306/0x510 [ 1422.174024][T22192] ? import_iovec+0x6f/0xa0 [ 1422.178604][T22192] ___sys_sendmsg+0x2a2/0x360 [ 1422.183336][T22192] ? __sys_sendmsg+0x2a0/0x2a0 [ 1422.188172][T22192] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1422.194006][T22192] __se_sys_sendmsg+0x1c3/0x2b0 [ 1422.198917][T22192] ? __x64_sys_sendmsg+0x80/0x80 [ 1422.203925][T22192] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1422.209931][T22192] do_syscall_64+0x4c/0xa0 [ 1422.214392][T22192] ? clear_bhb_loop+0x60/0xb0 [ 1422.219114][T22192] ? clear_bhb_loop+0x60/0xb0 [ 1422.223840][T22192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1422.229813][T22192] RIP: 0033:0x7f4643f9f559 [ 1422.234407][T22192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1422.254078][T22192] RSP: 002b:00007f4644eca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1422.262546][T22192] RAX: ffffffffffffffda RBX: 00007f4644225fa0 RCX: 00007f4643f9f559 [ 1422.270573][T22192] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1422.278601][T22192] RBP: 00007f4644036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1422.286628][T22192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1422.294648][T22192] R13: 00007f4644226038 R14: 00007f4644225fa0 R15: 00007ffc1bd36a08 [ 1422.302706][T22192] [ 1423.010921][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.017442][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.261455][T22204] device syzkaller0 entered promiscuous mode [ 1425.818398][T22213] netlink: 'syz.4.6728': attribute type 11 has an invalid length. [ 1425.862126][T22213] netlink: 'syz.4.6728': attribute type 11 has an invalid length. [ 1425.918253][T22213] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.6728'. [ 1426.793388][T22228] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.6721'. [ 1426.816741][T22230] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.6719'. [ 1426.850223][T22228] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1426.874745][T22228] CPU: 1 PID: 22228 Comm: syz.2.6721 Not tainted syzkaller #0 [ 1426.882304][T22228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1426.892499][T22228] Call Trace: [ 1426.895824][T22228] [ 1426.898799][T22228] dump_stack_lvl+0x188/0x24e [ 1426.903542][T22228] ? show_regs_print_info+0x12/0x12 [ 1426.908819][T22228] ? load_image+0x410/0x410 [ 1426.913399][T22228] sysfs_warn_dup+0x8a/0xa0 [ 1426.917984][T22228] sysfs_do_create_link_sd+0xc0/0x110 [ 1426.923437][T22228] device_add+0x83b/0x1050 [ 1426.927935][T22228] wiphy_register+0x1d8b/0x2aa0 [ 1426.932876][T22228] ? lock_chain_count+0x20/0x20 [ 1426.937821][T22228] ? cfg80211_event_work+0x40/0x40 [ 1426.942980][T22228] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1426.949091][T22228] ieee80211_register_hw+0x2e33/0x3b00 [ 1426.954619][T22228] ? ieee80211_register_hw+0xf31/0x3b00 [ 1426.960215][T22228] ? ieee80211_register_hw+0xf31/0x3b00 [ 1426.965911][T22228] ? ieee80211_tasklet_handler+0x20/0x20 [ 1426.971584][T22228] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1426.977516][T22228] ? __debug_object_init+0xed/0x440 [ 1426.982754][T22228] ? memset+0x1e/0x40 [ 1426.986768][T22228] ? __hrtimer_init+0x189/0x270 [ 1426.991667][T22228] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1426.997443][T22228] ? memcpy+0x3c/0x60 [ 1427.001473][T22228] hwsim_new_radio_nl+0xab7/0xc90 [ 1427.006547][T22228] genl_family_rcv_msg_doit+0x22f/0x350 [ 1427.012137][T22228] ? end_current_label_crit_section+0x170/0x170 [ 1427.018423][T22228] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1427.024360][T22228] ? bpf_lsm_capable+0x5/0x10 [ 1427.029078][T22228] ? security_capable+0x85/0xb0 [ 1427.033962][T22228] genl_rcv_msg+0x601/0x790 [ 1427.038527][T22228] ? genl_bind+0x360/0x360 [ 1427.043004][T22228] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1427.049393][T22228] netlink_rcv_skb+0x1ef/0x440 [ 1427.054289][T22228] ? genl_bind+0x360/0x360 [ 1427.058781][T22228] ? netlink_ack+0x1160/0x1160 [ 1427.063598][T22228] ? down_read+0x1a8/0x2d0 [ 1427.068057][T22228] genl_rcv+0x24/0x40 [ 1427.072074][T22228] netlink_unicast+0x7ad/0x920 [ 1427.076882][T22228] netlink_sendmsg+0x8ad/0xbd0 [ 1427.081685][T22228] ? netlink_getsockopt+0x550/0x550 [ 1427.086924][T22228] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1427.092513][T22228] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1427.097828][T22228] ? security_socket_sendmsg+0x7c/0xa0 [ 1427.103330][T22228] ? netlink_getsockopt+0x550/0x550 [ 1427.108578][T22228] ____sys_sendmsg+0x5ed/0x9a0 [ 1427.113402][T22228] ? __sys_sendmsg_sock+0x30/0x30 [ 1427.118465][T22228] ? __import_iovec+0x306/0x510 [ 1427.123377][T22228] ? import_iovec+0x6f/0xa0 [ 1427.127931][T22228] ___sys_sendmsg+0x2a2/0x360 [ 1427.132657][T22228] ? __sys_sendmsg+0x2a0/0x2a0 [ 1427.137485][T22228] ? irqentry_enter+0x33/0x50 [ 1427.142217][T22228] ? rcu_is_watching+0x11/0xa0 [ 1427.147047][T22228] __se_sys_sendmsg+0x1c3/0x2b0 [ 1427.151972][T22228] ? __x64_sys_sendmsg+0x80/0x80 [ 1427.156956][T22228] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1427.162984][T22228] do_syscall_64+0x4c/0xa0 [ 1427.167434][T22228] ? clear_bhb_loop+0x60/0xb0 [ 1427.172164][T22228] ? clear_bhb_loop+0x60/0xb0 [ 1427.176882][T22228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1427.182806][T22228] RIP: 0033:0x7f164d99f559 [ 1427.187261][T22228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.207030][T22228] RSP: 002b:00007f164e946028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1427.215481][T22228] RAX: ffffffffffffffda RBX: 00007f164dc25fa0 RCX: 00007f164d99f559 [ 1427.223484][T22228] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1427.231569][T22228] RBP: 00007f164da36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1427.239673][T22228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1427.247677][T22228] R13: 00007f164dc26038 R14: 00007f164dc25fa0 R15: 00007ffd195f58f8 [ 1427.255700][T22228] [ 1429.139674][T14212] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1430.170260][T22266] netlink: 'syz.1.6733': attribute type 11 has an invalid length. [ 1430.201245][T22266] netlink: 'syz.1.6733': attribute type 11 has an invalid length. [ 1430.225973][T22266] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6733'. [ 1431.740187][T22248] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1431.911591][T22271] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1431.919538][T22271] #PF: supervisor instruction fetch in kernel mode [ 1431.926083][T22271] #PF: error_code(0x0010) - not-present page [ 1431.932121][T22271] PGD 77271067 P4D 77271067 PUD 0 [ 1431.937306][T22271] Oops: 0010 [#1] PREEMPT SMP KASAN [ 1431.942559][T22271] CPU: 0 PID: 22271 Comm: syz.1.6734 Not tainted syzkaller #0 [ 1431.950073][T22271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1431.960191][T22271] RIP: 0010:0x0 [ 1431.963773][T22271] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1431.971185][T22271] RSP: 0018:ffffc90003417498 EFLAGS: 00010246 [ 1431.977285][T22271] RAX: 1ffffffff162e09b RBX: 1ffff92000682ea4 RCX: 0000000000000001 [ 1431.985286][T22271] RDX: ffffc90003417540 RSI: 0000000000000001 RDI: ffff88802a6d4000 [ 1431.993292][T22271] RBP: ffffc900034175b0 R08: ffff88802a6d403f R09: 1ffff110054da807 [ 1432.001312][T22271] R10: dffffc0000000000 R11: ffffed10054da808 R12: ffffe8ffffc43e50 [ 1432.009324][T22271] R13: ffffffff8b1704d8 R14: 0000000000000000 R15: ffff88802a6d4000 [ 1432.017337][T22271] FS: 00007f96faaaa6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1432.026308][T22271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1432.032953][T22271] CR2: ffffffffffffffd6 CR3: 0000000052ab5000 CR4: 00000000003506f0 [ 1432.040960][T22271] DR0: 0000200000000140 DR1: 0000000000000000 DR2: 0000000000000000 [ 1432.048966][T22271] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1432.056970][T22271] Call Trace: [ 1432.060276][T22271] [ 1432.063229][T22271] bond_xdp_xmit+0x31e/0x550 [ 1432.067974][T22271] ? bond_xdp_xmit+0x94/0x550 [ 1432.072695][T22271] ? bond_xdp+0x8c0/0x8c0 [ 1432.077055][T22271] ? page_pool_put_defragged_page+0x426/0x680 [ 1432.083225][T22271] bq_xmit_all+0xca9/0x1120 [ 1432.087817][T22271] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1432.093579][T22271] ? perf_trace_preemptirq_template+0x268/0x320 [ 1432.099868][T22271] ? irqentry_enter+0x33/0x50 [ 1432.104583][T22271] ? __dev_flush+0x1b0/0x1b0 [ 1432.109212][T22271] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1432.115233][T22271] ? lock_chain_count+0x20/0x20 [ 1432.120118][T22271] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1432.126309][T22271] ? lockdep_hardirqs_on+0x94/0x140 [ 1432.131548][T22271] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1432.137735][T22271] __dev_flush+0xbf/0x1b0 [ 1432.142103][T22271] xdp_do_flush+0xa/0x20 [ 1432.146455][T22271] bpf_test_run_xdp_live+0x1549/0x1a90 [ 1432.152021][T22271] ? 0xffffffffa0004b40 [ 1432.156204][T22271] ? text_poke_copy+0x7b/0x90 [ 1432.160969][T22271] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 1432.166568][T22271] ? xdp_convert_md_to_buff+0x330/0x330 [ 1432.172152][T22271] ? 0xffffffffa00065c8 [ 1432.176327][T22271] ? 0xffffffffa00066b8 [ 1432.180505][T22271] ? 0xffffffffa0006764 [ 1432.184700][T22271] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1432.191158][T22271] ? bpf_test_init+0x119/0x140 [ 1432.195956][T22271] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1432.201455][T22271] bpf_prog_test_run_xdp+0x757/0xf80 [ 1432.206805][T22271] ? __lock_acquire+0x7ea0/0x7ea0 [ 1432.211878][T22271] ? dev_put+0x80/0x80 [ 1432.216016][T22271] ? dev_put+0x80/0x80 [ 1432.220383][T22271] bpf_prog_test_run+0x31c/0x390 [ 1432.225519][T22271] __sys_bpf+0x62b/0x780 [ 1432.229799][T22271] ? bpf_link_show_fdinfo+0x380/0x380 [ 1432.235209][T22271] ? lock_chain_count+0x20/0x20 [ 1432.240116][T22271] __x64_sys_bpf+0x78/0x90 [ 1432.244592][T22271] do_syscall_64+0x4c/0xa0 [ 1432.249039][T22271] ? clear_bhb_loop+0x60/0xb0 [ 1432.253743][T22271] ? clear_bhb_loop+0x60/0xb0 [ 1432.258455][T22271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1432.264460][T22271] RIP: 0033:0x7f96f9b9f559 [ 1432.268926][T22271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1432.288571][T22271] RSP: 002b:00007f96faaaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1432.297112][T22271] RAX: ffffffffffffffda RBX: 00007f96f9e25fa0 RCX: 00007f96f9b9f559 [ 1432.305111][T22271] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1432.313112][T22271] RBP: 00007f96f9c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1432.321456][T22271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1432.329454][T22271] R13: 00007f96f9e26038 R14: 00007f96f9e25fa0 R15: 00007ffe4bc4ac38 [ 1432.337470][T22271] [ 1432.340526][T22271] Modules linked in: [ 1432.344463][T22271] CR2: 0000000000000000 [ 1432.348660][T22271] ---[ end trace 0000000000000000 ]--- [ 1432.354135][T22271] RIP: 0010:0x0 [ 1432.357719][T22271] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1432.365108][T22271] RSP: 0018:ffffc90003417498 EFLAGS: 00010246 [ 1432.371203][T22271] RAX: 1ffffffff162e09b RBX: 1ffff92000682ea4 RCX: 0000000000000001 [ 1432.379203][T22271] RDX: ffffc90003417540 RSI: 0000000000000001 RDI: ffff88802a6d4000 [ 1432.387202][T22271] RBP: ffffc900034175b0 R08: ffff88802a6d403f R09: 1ffff110054da807 [ 1432.395194][T22271] R10: dffffc0000000000 R11: ffffed10054da808 R12: ffffe8ffffc43e50 [ 1432.403210][T22271] R13: ffffffff8b1704d8 R14: 0000000000000000 R15: ffff88802a6d4000 [ 1432.411209][T22271] FS: 00007f96faaaa6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1432.420165][T22271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1432.426798][T22271] CR2: ffffffffffffffd6 CR3: 0000000052ab5000 CR4: 00000000003506f0 [ 1432.434798][T22271] DR0: 0000200000000140 DR1: 0000000000000000 DR2: 0000000000000000 [ 1432.442796][T22271] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1432.450799][T22271] Kernel panic - not syncing: Fatal exception in interrupt [ 1432.458178][T22271] Kernel Offset: disabled [ 1432.462518][T22271] Rebooting in 86400 seconds..