last executing test programs: 8.895639142s ago: executing program 2 (id=1640): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xd335}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000010000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x78}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="180000007a006bcd9e3fe3dc6e0817000700005425000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000001c0)=""/18, 0x12}], 0x1, &(0x7f0000002940)=""/227, 0xe3}, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.466445432s ago: executing program 2 (id=1644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8.095948261s ago: executing program 1 (id=1647): perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x4, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000}, 0x0, 0x0, 0x0, 0x0, 0x3ffff}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x2001000a, 0xfffc, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xd) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000180)={'a', ' *:* ', 'w\x00'}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @mcast1, 0x6}, 0x80, 0x0}, 0x48084) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 8.012287205s ago: executing program 2 (id=1648): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118d0000000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000180), 0xfd31) r4 = socket$kcm(0x10, 0x2, 0x0) unlink(0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002300)={&(0x7f0000001040)=ANY=[@ANYBLOB="9feb010018000000000000"], 0x0, 0x27}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) socket$kcm(0xa, 0x3, 0x3a) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 7.804905515s ago: executing program 1 (id=1650): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'xfrm0\x00', 0x400}) r1 = socket$kcm(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00C\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 7.723025289s ago: executing program 3 (id=1651): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000010000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x78}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.657079412s ago: executing program 1 (id=1652): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x1, r3}, 0xa0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@ifindex, 0x6ec0d840dc9b5a69, 0x0, 0x5, &(0x7f00000009c0)=[0x0], 0x1, 0x0, &(0x7f0000000a00)=[0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r0, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000252ebe96eb70"], 0x0, 0x26, 0x0, 0x1}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r9, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r9}, 0x94) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r11, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040001018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r13, r11}, 0xc) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x2, 0x2, 0x6, 0x5000, r1, 0x3, '\x00', 0x0, r2, 0x1, 0x3, 0x1, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1911}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='syzkaller\x00', 0x1, 0xe, &(0x7f0000000700)=""/14, 0x41000, 0x42, '\x00', r7, @fallback=0xf, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x10, 0x0, 0xfffffffd}, 0x10, r10, r3, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, r11, r1, r1, r14, r1], 0x0, 0x10, 0x3}, 0x94) (async) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000340)=0x5) 7.563684387s ago: executing program 4 (id=1653): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x3, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x3, 0x4, 0x6, 0x0, r0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2000000}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102037300fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r1}, 0xc) socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000000440)={&(0x7f00000001c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/85, 0x55}, {&(0x7f00000002c0)=""/5, 0x5}], 0x2, &(0x7f0000000340)=""/236, 0xec}, 0x2000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000000c0)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000500)=ANY=[@ANYRESHEX=r9, @ANYRESDEC], 0x27) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000000c0)='&\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x33}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 7.50668763s ago: executing program 3 (id=1654): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x8, 0x80, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000001f00)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.428703123s ago: executing program 1 (id=1655): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x24, 0x0, 0x6, &(0x7f0000000180)) perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x4, 0xe}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000a0"], 0x48) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) socket$kcm(0xa, 0x922000000003, 0x11) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe2b, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x10180}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000"], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) (async) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x1c}], 0x1}, 0x480c0) (async) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='8\x00'/12, @ANYRES32, @ANYBLOB="2cfe37d11c5e9bdf3ac9e4720965c377427ea8205ae6c63bbcd3caa565b3c3fabcc9c102fe302e", @ANYRES64=0x0], 0x20) (async, rerun: 32) setsockopt$sock_attach_bpf(r4, 0x29, 0x21, &(0x7f0000000100), 0x120) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1433a02d67a88005ad583cf526000000fff5ff7f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 7.223660074s ago: executing program 3 (id=1656): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000010000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000001300000000000061127800000000000001000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) socket$kcm(0xa, 0x5, 0x73) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x2010, 0xac5d}, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8de3}, 0x0, 0x0, 0xdfffffff, 0x0, 0x0, 0x800, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) 6.883872181s ago: executing program 2 (id=1657): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x8}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0700000004000000000100000400000020000000", @ANYRES32=0x1, @ANYBLOB="a0fb1bcf516a54e898fb96d2100000000000000000000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRESDEC=r7, @ANYRES64=r4, @ANYRES32, @ANYRESDEC=r0, @ANYRES64=r6, @ANYRES64], 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x5) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="5c00000013006bcc9e3b6f5c441d0000007ea60864160af36514000cc00800020007000200060001c003000000000000fd", 0x31}, {&(0x7f00000005c0)="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", 0x161}, {&(0x7f0000000440)="6d26c04dcdf389b21edd454977dc6cf4229df0156b060c2969a5dafc419d751a1a51540203741df04b4bae84facf9ccf2ffc3f9c90cc2f7f558f63d2eaac08bc3a64e8b9dd4109072ee7ef521b04b078ab3cd3354eaeaf6c6be4fed5d5953703249acdbd2eb1d2a040e80b66ce39e8a3ff1ae6abc99033813bc34b9519f4a05b4f82c802b7625754d276ddc000783e903e533bf4dba7b0f6d6a07c53904f1fcb5cf04e5a8e3cf185a99ee6c122983ae7b2441f54b63affcea3fd1b5989fbd6fa0f08000000000000003808763051a36128692146d1883aebfaea36af32d42d2f47bf98758195f6299ada6eaeff8a9ecd95b1c8b96347596e8b432354552e8ba40484f22a1321217100cce4db0326", 0x10e}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4008052) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 6.878581891s ago: executing program 0 (id=1667): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000c80), &(0x7f0000000d00)="71b221d6814bfe5b16aff492062d23a62d98728a93", 0x61, r0, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8041e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0xfffffffffffffffe}, 0x12280, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb753906548ab6dd6d963b8ddcd0dd202000008000000b7030000000000008500000006000000850000007d0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5, 0xffffffffffffffff, 0x2000000}, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a009100"], 0xfe33) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d80)={0xffffffffffffffff, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001b00), &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f0000001b80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001bc0), &(0x7f0000001c00), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000001c40)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001f40)={r1, 0x20, &(0x7f0000001f00)={&(0x7f0000001e40)=""/70, 0x46, 0x0, &(0x7f0000001ec0)=""/6, 0x6}}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r2, r3}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r1}, &(0x7f0000000a80), &(0x7f0000000ac0)=r3}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x14054, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xc, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r7 = socket$kcm(0x18, 0x2, 0x2) close(r7) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.04810599s ago: executing program 4 (id=1658): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.952930715s ago: executing program 1 (id=1659): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'caif0\x00', 0x800}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000400003800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r2, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r3, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {0x0}, {0x0}, {&(0x7f0000000840)=""/133, 0x85}], 0x100002ae, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r2, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="fb6bba8814892c70ece2e954773b3ce146378a1f976475552fcf5952f3244dbd95ff10d64a4185c4df2dc04442019a1f2a6701", 0x33}], 0x1, 0x0, 0x0, 0x80}, 0x0) recvmsg(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000040)}, 0x40fe) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1696, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x4080) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)}, 0x0) recvmsg$kcm(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd1b}, 0x2040) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 3.934423906s ago: executing program 2 (id=1660): socket$kcm(0xa, 0x3, 0x73) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x2, 0x8, 0x9, 0x4, 0x0, 0x200, 0x200, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x22, 0x0, 0x2, 0x5, 0x7, 0xf, 0x3, 0x0, 0xc965, 0x0, 0x8}, 0x0, 0xa, r0, 0x8) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12) sendmsg$tipc(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000001c0)="7216bad4cb30a63cd84bb5963db049319853de87f30806093218c5b5a165b52a42216ff3c26d7615c48934398e835e8ca2e685e4991ed9e2041289b81b6724695784655ea933e139bab2359253e34f193187c5034e9bfccdbab57a6b3a3df421c01e92c86450fa6a8cc1229c13fb6eec9fc46048f6e9fc1bb00e7ef243bcf19643ab563d8df07c7c517c64e9d11300e67e98374add2b72721f8361c271b17002551bdd2f96d1c9398b5bb706859a090928dd", 0xb2}, {&(0x7f0000000280)="79a88e591f7f7a3af15f271cfd9b30992146", 0x12}, {&(0x7f0000000540)="dbb6f23bfd86470720624a9f96c5c270752e06721fddbf754b38f417e95709db9cb33a33d33876558d6422c8154988e4def3e8819edea7f23aec3ed342654d351ad593d9ea60f0afdfbf6bf554248a13bd293b", 0x53}, {&(0x7f00000005c0)="bbeffd9c2fcbbe86e0553c5645bfaa4e15590b43ffe39d52f544a123649d5e3a5b00a2ca189d548f20c0db4ec0b5d4343bb247a7ccca2f7532a3ed750567dc5f9c0127a2471d5832c67e5366159fa135820e7c1fba68f148b0b1a65c5a96ad9bb90fa84b37de42c50201acbb2c4969c7563f1cdfce1f641a779a36db25306a4a239bd08b0ce490be233e099be0e1f3f57860f383ce2e1afa834f625f248b9127885904d949cfd8f44ba333eb4e0672e7218d6a97f4d67945c39b97", 0xbb}, {&(0x7f0000000680)="b8394e3f54cd1ec1049e8a23f0919b57d78d5401905c62302e607e98528216d122b251a7e9d0a2bb3255afc680decca5c53b23c790874835c2f4ae80442df922e91362e310886ce7f1deba7b72e307e8ab9f", 0x52}, {&(0x7f00000008c0)="8d97a9068063e9945919fe7c025d213bbe4c5f3bd4ccff87ddb4f8025056c4ad5bef17800cbc4dfa566f9567474bf68713d7720607c0e83a2a264e9874b27b881baa4e278a4a8b34f5cccbcae456f2013e8c317db5d1e4ea34dfb82250813ff4426911c046d88bb9c82250b2c04bbc9dc613b0581eccac2d89bf74499cd1e89f1f2609b14b739da944d8d403b4130b2957d4c999a7bba6ec755a937831ebe9a1fbc345ea8902c99577a73f9db59377caf7887052cbc228", 0xb7}], 0x6, &(0x7f0000000a00)="3837d2858a32f990342421ebe661430b5a2ca83230262d2c69b9bb", 0x1b, 0xc08a4}, 0xc4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0000000000000006000000feffffff80000000", @ANYRES32, @ANYBLOB="000000000000000000000000fcffffff0021ffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000000000000100"/28], 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x4, 0x0, 0xf000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x13008, 0x0, 0xc2ba, 0x0, 0x4000000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x4869, 0x6, 0xfffffffe, 0xf, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8946, &(0x7f0000000040)={'batadv0\x00', @random='\x00\x00\x00\x00\x00 '}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f00000000c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 3.823858051s ago: executing program 0 (id=1661): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x7}, 0x58c8, 0x0, 0xfffffffc, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x11}, 0x0, 0x1}, 0x80, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000000)="005744620bfe05", 0x7}], 0x2}, 0x4044800) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2, 0xffffffffffffffff}, 0x4) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) close(r5) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) (async) mkdirat$cgroup(r5, &(0x7f00000004c0)='syz0\x00', 0x1ff) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001640)={r4, 0x58, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001680), 0x4) (async, rerun: 32) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x1, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x9, &(0x7f0000001840)=ANY=[@ANYBLOB="18000000a00a000000000000be39000018180000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f00000005c0)=""/4096, 0x40f00, 0x64, '\x00', r7, 0x25, r8, 0x8, &(0x7f00000016c0)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001700)=[r0, r2, r4, r0, r2, r10], &(0x7f0000001740)=[{0x1, 0x3, 0x6}, {0x1, 0x3, 0xc, 0xa}, {0x1, 0x3, 0xb, 0xb}], 0x10, 0x7}, 0x94) (async) socket$kcm(0x29, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.821005061s ago: executing program 3 (id=1662): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x1}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000002200)=""/4110, 0x30, 0x100e, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x1}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000002200)=""/4110, 0x30, 0x100e, 0x1}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f0000002a00)=""/4093}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f0000002a00)=""/4093}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2e0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.727783116s ago: executing program 4 (id=1663): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x48, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1, 0x1, 0x0, 0x12, 0x0, 0x0, 0xfffd, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r4) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x15, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x48000) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x10f, 0x88, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x11, &(0x7f0000000000)=r5, 0x8) close(r0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) sendmsg$sock(r1, &(0x7f00000005c0)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0xdee28cc421ecd7da, @host}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)="6472a0745441ec46d1fdf68a5378", 0xe}, {&(0x7f0000000280)="0fd47d94ec893b52a0a0c6d2946320b5970e45d128a5a4f1b0757235aa575525bd61c5c59aa451f30edd58246bb9f3de2e76e8b10faf8f00058866ed5c5c07dbaea73f78387aef8e154af6eea94e", 0x4e}, {&(0x7f0000000300)="5e03767912ba780c61787a728f670e83ed314fb021e85dbae8a6e3e096aad3490d73be65de53b19a7746fe275be5b49f8bb4dd9c7cb1c148bf6b8fe31b0ef1a017865e2ac881f91b918ce9392219234c0d2a59099cb254108f660b63a3a780a21846d36b92282cb85d333b140e7f26c969f97d2d1fe576c6e90413ed599fbed0c94cdbd4f305419ecb81b5bf59d21be8d835570c83904cd4187d17e969e8ba54812d2773b9db82580f34127efde864408535dffb1ad352b562", 0xb9}, {&(0x7f00000003c0)}], 0x4, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0xa}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0xe}}, @mark={{0x14, 0x1, 0x24, 0xb2c}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0xd8}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.886550427s ago: executing program 0 (id=1664): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000010000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x78}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.587715252s ago: executing program 0 (id=1665): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000ac0)}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2c, 0x5, 0xf, &(0x7f0000000580)) r4 = openat$cgroup_ro(r1, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x15, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9c9e, 0x0, 0x0, 0x0, 0x907b}, {}, {}, [@exit, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @jmp={0x5, 0x1, 0x5, 0x0, 0xb, 0x80, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x6, 0xab, &(0x7f0000000600)=""/171, 0x41100, 0x10, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x7, 0x5, 0xbe4e}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x1, 0x2, 0x6}, {0x4, 0x2, 0x1, 0xc}, {0x1, 0x2, 0xe, 0x9}, {0x4, 0x4, 0x2}, {0x1, 0x5, 0xe, 0x4}, {0x0, 0x4, 0x7, 0x5}, {0x5, 0xf16, 0x8, 0x2}], 0x10, 0x800}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b0000000000000000000000008073eeb0de250bd085af640fbec600", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xd, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x59, &(0x7f0000000200)=""/89, 0x41000, 0x28, '\x00', 0x0, @fallback=0x1f, r4, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xe, 0x101, 0x4}, 0x10, 0x0, r5, 0x1, &(0x7f0000000900)=[r6, r7, r8], &(0x7f0000000940)=[{0x0, 0x1, 0x0, 0xc}], 0x10, 0x4}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="14"], 0x5000, 0x4005}, 0x20000000) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014ef030000120800040043000000a8001600a400014020", 0x39}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x401, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x117bd3, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8949, &(0x7f0000001740)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x88j\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xf6\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe\x8f$\xd0qx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0xa, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x1) (async) r6 = socket$kcm(0xa, 0x5, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) (async) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="d8000000140081044e81f782db44b9040a1d08bc01000000040000a118000200fc00000000000e1208000f0100810401a80016eaa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)={r7}) 1.642678979s ago: executing program 2 (id=1670): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000000), 0xff7b) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0xf9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000080), 0x2) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRESDEC=r2, @ANYBLOB="18ac7741287303ad936ad1d790352d74b36456e86b7e83652da4cca4c11076634b3631e64602cac5fad66cd8d16336c443b99761d6b7352c3ad8e1e56ed02bfa2c71b59040f3f32a60ce61287c10c268a05e8093de39177723e670839dd20958afa7d647259b867fdc19813bd0c89283d4151d4a4fdc1ebc315563c2142ed0ad41d2f8408f955a07decfe3d01c98160dbc0edf02161ac98a504556989c90cfaef0febed8dc10205e8cfeddb2e09e37a5f7c905722dfe2f7069a6e1658d3a44f6713edd195a01a75c9be1a0a8fb85045fc9025d14a8c11b93ed14d4b160b123174468", @ANYRES64=r1], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x6, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) close(r0) r7 = socket$kcm(0xa, 0x1, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="190000000400000008000000fdffffff0c000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000ef0000000000000000000000e8ba26b41df9c752d0718833333f1968b1a164ab01b72b7d24e3e542c923f0f77aca13609e589a7c283206846e48ea9f1a0d4c09dd6ef1a5cafa92cc4c"], 0x50) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1c2000001900599c6d0e000091d028ef80"], 0xfe33) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r9 = socket$kcm(0x10, 0x2, 0x10) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r9}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000006b0000006b00000004000000010000000200000f0300000002000000cdade166040000000500000000000000d48b0000d3b3650a0000000000001105000000ffffffff0a0000000000000c03000000100000000000000800000000070000000000001105000000ffffffff0f0000004f00000010020000000000006100"], &(0x7f0000000580)=""/23, 0x88, 0x17, 0x1, 0xff, 0x10000, @value=r10}, 0x28) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="1400000010013507d25a806f8c6394f98abc977b", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x22, &(0x7f0000000280), 0x4) 1.638676339s ago: executing program 1 (id=1680): r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0xcabb, 0x40}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[], 0x50) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0x7, 0x9, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x92, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2080, 0x1, 0x3, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x6b, &(0x7f0000000000)=r6, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x11c559de8a1ca209, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c230000) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110c230005) close(r8) 1.40693881s ago: executing program 4 (id=1671): socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000050000000000000000"], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600), 0x4) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x11, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x80000004, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) close(r0) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000200)="3c00000033000b1229ae3f7f03b261130124fc60100c034006000000000500149215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35e35f", 0x3e}], 0x1}, 0x4800) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff8) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x7, &(0x7f00000001c0)=[{0xb, 0x9, 0x60, 0x9}, {0x81, 0x1, 0xd, 0xffff}, {0x6d, 0xff, 0x6, 0x3}, {0xfff, 0x5, 0x1f, 0x2}, {0x7, 0x5, 0x1, 0x9}, {0xa6f7, 0x4, 0x2, 0x1}, {0x4fea, 0x3, 0x0, 0x8000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000009e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x698a, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000b1e2830c4451727f000000000000"], 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) close(r3) (async) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="090000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000047db0ddd8200afd81400000e000000008822da00000000096f80006c088401010000cd0464c0e3fdcf881d2808f71ea68ad7ba28ea5343d786acf31b96338592f5d402855f91b95c5bf43eedc9efc1c0"], 0x50) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x4}, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r5}, 0x38) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3650c001ac008000a0004000900020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="005ff54e0a00000022ee689afb803b4853863100048c577d919a2ceaf0314500d1a2af3a9bc641155900b3fd575090930699e5ca8952f86e475e4b8dd2ff500fde1406af60f03ad98b0b5b396fad53a42406a6e8accc0a4e812027165e3e332db9d8cf179fbf88d8df5100"/118, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f00000004c0)) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x208880, 0x0) 1.016292809s ago: executing program 3 (id=1672): socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000400), 0x4) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000d25a05bc85a3fc82134151f9b4dc538e96b34039917e46270fe3875631c389ae328a34ec33d0378f67784680aa912f186b3dede6d5777e8638b9a4d47ac358b4f78e67742bea072394b26d90d233027d41ec4ac35c5acb17245a3bcbcd3438f9e483e47f6b8ab53e4209050d86d204757657ad3d8627f02da5"], 0x18, 0x40054}, 0x8004040) recvmsg(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/27, 0x1b}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x8, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4102, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6d392e, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x307, 0x5, 0x8, 0x2, 0x7f, 0x8804, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x8) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r8 = socket$kcm(0x2b, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x2, &(0x7f0000000200), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0xfffff1de, 0x2000000, 0x0, 0xfffffffffffffefc, &(0x7f0000000440)}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x5421, 0x0) 908.241615ms ago: executing program 0 (id=1673): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4fffff7c9ff74e53d02971beba3a51d83b9030000000061148b400000000004"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x6f) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0x36, 0x0, &(0x7f0000000240)="63eced0000dc3f08df33c9f786dd958a31678a4ea8707a060278b42bac2f2f131ad80cfc1d6406d60c43c223046c09bf19c6813202eb", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) close(r3) (async) r6 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x4, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0x8002, 0x100003, 0x4, 0xfe8d42e69ac4daf8, 0xfff, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001980)={@fallback=r6, 0x0, 0x1, 0x7fff, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001a00)={0x7, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000019c0)={@cgroup, r1, 0x2e, 0x34, 0x0, @void, @void, @void, @value=r8, r7}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="257fd3cbb7ba7feb35295a62cd27", 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x7fff, 0x10}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r10, r11}, 0xc) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r10, 0x4}, 0x38) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r13 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r13, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000071c"], 0x30}, 0x40880) close(r12) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x35, 0x1, 0x242b, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0}, 0x40) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r12, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@ifindex=r15, r12, 0x35, 0x2000, 0x0, @value=r12, @void, @void, @void, r14}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r12, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000791048000000000063aa05ff000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) 0s ago: executing program 0 (id=1674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): 000000000000 R09: 0000000000000000 [ 379.563623][ T9803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.571707][ T9803] R13: 00007fa5a3c26218 R14: 00007fa5a3c26180 R15: 00007ffdd17ad458 [ 379.579816][ T9803] [ 379.650747][ T9815] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 379.724970][ T9815] CPU: 0 PID: 9815 Comm: syz.4.1227 Not tainted syzkaller #0 [ 379.732442][ T9815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 379.742575][ T9815] Call Trace: [ 379.745996][ T9815] [ 379.748971][ T9815] dump_stack_lvl+0x188/0x24e [ 379.753781][ T9815] ? show_regs_print_info+0x12/0x12 [ 379.759023][ T9815] ? load_image+0x410/0x410 [ 379.763674][ T9815] sysfs_warn_dup+0x8a/0xa0 [ 379.768229][ T9815] sysfs_do_create_link_sd+0xc0/0x110 [ 379.773658][ T9815] device_add+0x83b/0x1050 [ 379.778119][ T9815] wiphy_register+0x1d8b/0x2aa0 [ 379.783029][ T9815] ? cfg80211_event_work+0x40/0x40 [ 379.788182][ T9815] ? minstrel_ht_alloc+0x894/0xa20 [ 379.793350][ T9815] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 379.799679][ T9815] ieee80211_register_hw+0x2d48/0x39f0 [ 379.805629][ T9815] ? ieee80211_register_hw+0xf41/0x39f0 [ 379.811252][ T9815] ? ieee80211_register_hw+0xf41/0x39f0 [ 379.816854][ T9815] ? ieee80211_tasklet_handler+0x20/0x20 [ 379.822526][ T9815] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 379.828468][ T9815] ? __debug_object_init+0xed/0x440 [ 379.833711][ T9815] ? memset+0x1e/0x40 [ 379.837724][ T9815] ? __hrtimer_init+0x189/0x270 [ 379.842616][ T9815] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 379.848396][ T9815] ? memcpy+0x3c/0x60 [ 379.852430][ T9815] hwsim_new_radio_nl+0xab7/0xc90 [ 379.857529][ T9815] genl_family_rcv_msg_doit+0x22f/0x350 [ 379.863127][ T9815] ? end_current_label_crit_section+0x170/0x170 [ 379.869426][ T9815] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 379.875387][ T9815] ? bpf_lsm_capable+0x5/0x10 [ 379.880629][ T9815] ? security_capable+0x85/0xb0 [ 379.885550][ T9815] genl_rcv_msg+0x601/0x790 [ 379.890400][ T9815] ? genl_bind+0x360/0x360 [ 379.894866][ T9815] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 379.901360][ T9815] netlink_rcv_skb+0x1ef/0x440 [ 379.906164][ T9815] ? genl_bind+0x360/0x360 [ 379.910625][ T9815] ? netlink_ack+0x1160/0x1160 [ 379.915439][ T9815] ? down_read+0x1a8/0x2d0 [ 379.919896][ T9815] genl_rcv+0x24/0x40 [ 379.923902][ T9815] netlink_unicast+0x7ad/0x920 [ 379.928695][ T9815] netlink_sendmsg+0x8ad/0xbd0 [ 379.933478][ T9815] ? netlink_getsockopt+0x550/0x550 [ 379.938690][ T9815] ? apparmor_socket_sendmsg+0x8a/0x330 [ 379.944250][ T9815] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 379.949546][ T9815] ? security_socket_sendmsg+0x7c/0xa0 [ 379.955105][ T9815] ? netlink_getsockopt+0x550/0x550 [ 379.960345][ T9815] ____sys_sendmsg+0x5ed/0x9a0 [ 379.965307][ T9815] ? __sys_sendmsg_sock+0x30/0x30 [ 379.970350][ T9815] ? __import_iovec+0x306/0x510 [ 379.975230][ T9815] ? import_iovec+0x6f/0xa0 [ 379.979760][ T9815] ___sys_sendmsg+0x2a2/0x360 [ 379.984549][ T9815] ? __sys_sendmsg+0x2a0/0x2a0 [ 379.989372][ T9815] __se_sys_sendmsg+0x1c3/0x2b0 [ 379.994234][ T9815] ? __x64_sys_sendmsg+0x80/0x80 [ 379.999201][ T9815] ? lockdep_hardirqs_on+0x94/0x140 [ 380.004514][ T9815] do_syscall_64+0x4c/0xa0 [ 380.008946][ T9815] ? clear_bhb_loop+0x60/0xb0 [ 380.013634][ T9815] ? clear_bhb_loop+0x60/0xb0 [ 380.018320][ T9815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.024235][ T9815] RIP: 0033:0x7f89c279e159 [ 380.028661][ T9815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.048277][ T9815] RSP: 002b:00007f89c0951028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.056835][ T9815] RAX: ffffffffffffffda RBX: 00007f89c2a26450 RCX: 00007f89c279e159 [ 380.064987][ T9815] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 380.072975][ T9815] RBP: 00007f89c283506b R08: 0000000000000000 R09: 0000000000000000 [ 380.080971][ T9815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.088983][ T9815] R13: 00007f89c2a264e8 R14: 00007f89c2a26450 R15: 00007ffd2e28f3d8 [ 380.096979][ T9815] [ 380.161127][ T9828] device hsr0 entered promiscuous mode [ 380.675426][ T9845] device syzkaller0 entered promiscuous mode [ 381.103036][ T9871] __nla_validate_parse: 1 callbacks suppressed [ 381.103060][ T9871] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1240'. [ 383.068123][ T9857] netlink: 'syz.1.1238': attribute type 1 has an invalid length. [ 383.088888][ T9871] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 383.103279][ T9871] CPU: 0 PID: 9871 Comm: syz.3.1240 Not tainted syzkaller #0 [ 383.110825][ T9871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.121016][ T9871] Call Trace: [ 383.124419][ T9871] [ 383.127385][ T9871] dump_stack_lvl+0x188/0x24e [ 383.132101][ T9871] ? show_regs_print_info+0x12/0x12 [ 383.137314][ T9871] ? load_image+0x410/0x410 [ 383.141850][ T9871] sysfs_warn_dup+0x8a/0xa0 [ 383.146386][ T9871] sysfs_do_create_link_sd+0xc0/0x110 [ 383.151890][ T9871] device_add+0x83b/0x1050 [ 383.156357][ T9871] wiphy_register+0x1d8b/0x2aa0 [ 383.161416][ T9871] ? cfg80211_event_work+0x40/0x40 [ 383.166659][ T9871] ? minstrel_ht_alloc+0x894/0xa20 [ 383.171838][ T9871] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 383.178056][ T9871] ieee80211_register_hw+0x2d48/0x39f0 [ 383.183584][ T9871] ? ieee80211_register_hw+0xf41/0x39f0 [ 383.189302][ T9871] ? ieee80211_register_hw+0xf41/0x39f0 [ 383.194922][ T9871] ? ieee80211_tasklet_handler+0x20/0x20 [ 383.200861][ T9871] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 383.206819][ T9871] ? __debug_object_init+0xed/0x440 [ 383.212070][ T9871] ? memset+0x1e/0x40 [ 383.216192][ T9871] ? __hrtimer_init+0x189/0x270 [ 383.221081][ T9871] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 383.226872][ T9871] ? memcpy+0x3c/0x60 [ 383.230909][ T9871] hwsim_new_radio_nl+0xab7/0xc90 [ 383.236000][ T9871] genl_family_rcv_msg_doit+0x22f/0x350 [ 383.241595][ T9871] ? end_current_label_crit_section+0x170/0x170 [ 383.247987][ T9871] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 383.253937][ T9871] ? bpf_lsm_capable+0x5/0x10 [ 383.258657][ T9871] ? security_capable+0x85/0xb0 [ 383.263557][ T9871] genl_rcv_msg+0x601/0x790 [ 383.268126][ T9871] ? genl_bind+0x360/0x360 [ 383.272583][ T9871] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 383.272605][ T9878] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1243'. [ 383.288389][ T9871] netlink_rcv_skb+0x1ef/0x440 [ 383.293205][ T9871] ? genl_bind+0x360/0x360 [ 383.297675][ T9871] ? netlink_ack+0x1160/0x1160 [ 383.302511][ T9871] ? down_read+0x1a8/0x2d0 [ 383.306971][ T9871] genl_rcv+0x24/0x40 [ 383.310956][ T9871] netlink_unicast+0x7ad/0x920 [ 383.315838][ T9871] netlink_sendmsg+0x8ad/0xbd0 [ 383.320636][ T9871] ? netlink_getsockopt+0x550/0x550 [ 383.325859][ T9871] ? apparmor_socket_sendmsg+0x8a/0x330 [ 383.331625][ T9871] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 383.336942][ T9871] ? security_socket_sendmsg+0x7c/0xa0 [ 383.342429][ T9871] ? netlink_getsockopt+0x550/0x550 [ 383.347646][ T9871] ____sys_sendmsg+0x5ed/0x9a0 [ 383.352728][ T9871] ? __sys_sendmsg_sock+0x30/0x30 [ 383.357868][ T9871] ? __import_iovec+0x306/0x510 [ 383.362786][ T9871] ? import_iovec+0x6f/0xa0 [ 383.367862][ T9871] ___sys_sendmsg+0x2a2/0x360 [ 383.372565][ T9871] ? __sys_sendmsg+0x2a0/0x2a0 [ 383.377446][ T9871] __se_sys_sendmsg+0x1c3/0x2b0 [ 383.382419][ T9871] ? __x64_sys_sendmsg+0x80/0x80 [ 383.387373][ T9871] ? lockdep_hardirqs_on+0x94/0x140 [ 383.392595][ T9871] do_syscall_64+0x4c/0xa0 [ 383.397116][ T9871] ? clear_bhb_loop+0x60/0xb0 [ 383.401828][ T9871] ? clear_bhb_loop+0x60/0xb0 [ 383.406632][ T9871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.412681][ T9871] RIP: 0033:0x7fb56059e159 [ 383.417214][ T9871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.436872][ T9871] RSP: 002b:00007fb55e3b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.445434][ T9871] RAX: ffffffffffffffda RBX: 00007fb560826270 RCX: 00007fb56059e159 [ 383.453440][ T9871] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 383.461416][ T9871] RBP: 00007fb56063506b R08: 0000000000000000 R09: 0000000000000000 [ 383.469396][ T9871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.477390][ T9871] R13: 00007fb560826308 R14: 00007fb560826270 R15: 00007ffe4d529a88 [ 383.485421][ T9871] [ 383.497991][ T9878] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1243'. [ 384.013125][ T9887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.026748][ T9887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.054040][ T9887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.082661][ T9887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.106749][ T9887] batman_adv: batadv0: Interface deactivated: vlan1 [ 384.124045][ T9887] batman_adv: batadv0: Removing interface: vlan1 [ 384.854224][ T9901] device pim6reg1 entered promiscuous mode [ 385.271414][ T9917] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1252'. [ 386.177299][ T9949] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1257'. [ 386.312520][ T9949] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 386.394473][ T9949] CPU: 0 PID: 9949 Comm: syz.0.1257 Not tainted syzkaller #0 [ 386.401945][ T9949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.412128][ T9949] Call Trace: [ 386.415444][ T9949] [ 386.418453][ T9949] dump_stack_lvl+0x188/0x24e [ 386.423184][ T9949] ? show_regs_print_info+0x12/0x12 [ 386.428450][ T9949] ? load_image+0x410/0x410 [ 386.433021][ T9949] sysfs_warn_dup+0x8a/0xa0 [ 386.437576][ T9949] sysfs_do_create_link_sd+0xc0/0x110 [ 386.442994][ T9949] device_add+0x83b/0x1050 [ 386.447467][ T9949] wiphy_register+0x1d8b/0x2aa0 [ 386.452396][ T9949] ? cfg80211_event_work+0x40/0x40 [ 386.457649][ T9949] ? minstrel_ht_alloc+0x894/0xa20 [ 386.462816][ T9949] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 386.468946][ T9949] ieee80211_register_hw+0x2d48/0x39f0 [ 386.474549][ T9949] ? ieee80211_register_hw+0xf41/0x39f0 [ 386.480133][ T9949] ? ieee80211_register_hw+0xf41/0x39f0 [ 386.485747][ T9949] ? ieee80211_tasklet_handler+0x20/0x20 [ 386.491519][ T9949] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 386.497478][ T9949] ? __debug_object_init+0xed/0x440 [ 386.502815][ T9949] ? memset+0x1e/0x40 [ 386.506838][ T9949] ? __hrtimer_init+0x189/0x270 [ 386.511740][ T9949] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 386.517531][ T9949] ? memcpy+0x3c/0x60 [ 386.521570][ T9949] hwsim_new_radio_nl+0xab7/0xc90 [ 386.526671][ T9949] genl_family_rcv_msg_doit+0x22f/0x350 [ 386.532277][ T9949] ? end_current_label_crit_section+0x170/0x170 [ 386.538585][ T9949] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 386.544537][ T9949] ? bpf_lsm_capable+0x5/0x10 [ 386.549266][ T9949] ? security_capable+0x85/0xb0 [ 386.554173][ T9949] genl_rcv_msg+0x601/0x790 [ 386.558747][ T9949] ? genl_bind+0x360/0x360 [ 386.563216][ T9949] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 386.569622][ T9949] netlink_rcv_skb+0x1ef/0x440 [ 386.574440][ T9949] ? genl_bind+0x360/0x360 [ 386.578901][ T9949] ? netlink_ack+0x1160/0x1160 [ 386.583729][ T9949] ? down_read+0x1a8/0x2d0 [ 386.588195][ T9949] genl_rcv+0x24/0x40 [ 386.592219][ T9949] netlink_unicast+0x7ad/0x920 [ 386.597038][ T9949] netlink_sendmsg+0x8ad/0xbd0 [ 386.601858][ T9949] ? netlink_getsockopt+0x550/0x550 [ 386.607103][ T9949] ? apparmor_socket_sendmsg+0x8a/0x330 [ 386.612715][ T9949] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 386.618041][ T9949] ? security_socket_sendmsg+0x7c/0xa0 [ 386.623549][ T9949] ? netlink_getsockopt+0x550/0x550 [ 386.628794][ T9949] ____sys_sendmsg+0x5ed/0x9a0 [ 386.633624][ T9949] ? __sys_sendmsg_sock+0x30/0x30 [ 386.638709][ T9949] ? __import_iovec+0x306/0x510 [ 386.643623][ T9949] ? import_iovec+0x6f/0xa0 [ 386.648187][ T9949] ___sys_sendmsg+0x2a2/0x360 [ 386.653000][ T9949] ? __sys_sendmsg+0x2a0/0x2a0 [ 386.657965][ T9949] __se_sys_sendmsg+0x1c3/0x2b0 [ 386.662861][ T9949] ? __x64_sys_sendmsg+0x80/0x80 [ 386.667866][ T9949] ? lockdep_hardirqs_on+0x94/0x140 [ 386.673127][ T9949] do_syscall_64+0x4c/0xa0 [ 386.677594][ T9949] ? clear_bhb_loop+0x60/0xb0 [ 386.682323][ T9949] ? clear_bhb_loop+0x60/0xb0 [ 386.687050][ T9949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.693006][ T9949] RIP: 0033:0x7ffa8db9e159 [ 386.697463][ T9949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.717122][ T9949] RSP: 002b:00007ffa8bdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.725590][ T9949] RAX: ffffffffffffffda RBX: 00007ffa8de26180 RCX: 00007ffa8db9e159 [ 386.733613][ T9949] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 386.741628][ T9949] RBP: 00007ffa8dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 386.749736][ T9949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.757893][ T9949] R13: 00007ffa8de26218 R14: 00007ffa8de26180 R15: 00007ffcf759f338 [ 386.765927][ T9949] [ 386.872916][ T9957] netlink: 'syz.4.1261': attribute type 10 has an invalid length. [ 387.050400][ T9957] device wlan1 entered promiscuous mode [ 387.070252][ T9957] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 387.088385][ T9958] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1261'. [ 387.239878][ T9958] device bond0 left promiscuous mode [ 387.249223][ T9958] device bond_slave_1 left promiscuous mode [ 387.260619][ T9958] device netdevsim0 left promiscuous mode [ 387.270756][ T9958] device wlan1 left promiscuous mode [ 387.279361][ T9958] ¥: port 1(bond0) entered disabled state [ 387.292702][ T9958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.322500][ T9958] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 387.349607][ T9958] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 387.388828][ T9958] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 387.423042][ T9958] bond0 (unregistering): Released all slaves [ 387.850378][ T9972] netlink: 'syz.0.1265': attribute type 3 has an invalid length. [ 388.034221][ T9972] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1265'. [ 389.243807][T10003] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 389.630609][T10016] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1278'. [ 389.702923][T10017] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1275'. [ 389.831338][T10017] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 389.893067][T10017] CPU: 0 PID: 10017 Comm: syz.0.1275 Not tainted syzkaller #0 [ 389.900620][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.911209][T10017] Call Trace: [ 389.914545][T10017] [ 389.917507][T10017] dump_stack_lvl+0x188/0x24e [ 389.922235][T10017] ? show_regs_print_info+0x12/0x12 [ 389.927510][T10017] ? load_image+0x410/0x410 [ 389.932075][T10017] sysfs_warn_dup+0x8a/0xa0 [ 389.936675][T10017] sysfs_do_create_link_sd+0xc0/0x110 [ 389.942125][T10017] device_add+0x83b/0x1050 [ 389.946598][T10017] wiphy_register+0x1d8b/0x2aa0 [ 389.951514][T10017] ? cfg80211_event_work+0x40/0x40 [ 389.956669][T10017] ? minstrel_ht_alloc+0x894/0xa20 [ 389.961837][T10017] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 389.968213][T10017] ieee80211_register_hw+0x2d48/0x39f0 [ 389.973732][T10017] ? ieee80211_register_hw+0xf41/0x39f0 [ 389.979325][T10017] ? ieee80211_register_hw+0xf41/0x39f0 [ 389.984929][T10017] ? ieee80211_tasklet_handler+0x20/0x20 [ 389.990603][T10017] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 389.996555][T10017] ? __debug_object_init+0xed/0x440 [ 390.001805][T10017] ? memset+0x1e/0x40 [ 390.005837][T10017] ? __hrtimer_init+0x189/0x270 [ 390.010732][T10017] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 390.016515][T10017] ? memcpy+0x3c/0x60 [ 390.020545][T10017] hwsim_new_radio_nl+0xab7/0xc90 [ 390.025632][T10017] genl_family_rcv_msg_doit+0x22f/0x350 [ 390.031214][T10017] ? end_current_label_crit_section+0x170/0x170 [ 390.037508][T10017] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 390.043461][T10017] ? bpf_lsm_capable+0x5/0x10 [ 390.048181][T10017] ? security_capable+0x85/0xb0 [ 390.053081][T10017] genl_rcv_msg+0x601/0x790 [ 390.057988][T10017] ? genl_bind+0x360/0x360 [ 390.062443][T10017] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 390.068922][T10017] netlink_rcv_skb+0x1ef/0x440 [ 390.073812][T10017] ? genl_bind+0x360/0x360 [ 390.078277][T10017] ? netlink_ack+0x1160/0x1160 [ 390.083091][T10017] ? down_read+0x1a8/0x2d0 [ 390.087549][T10017] genl_rcv+0x24/0x40 [ 390.091566][T10017] netlink_unicast+0x7ad/0x920 [ 390.096382][T10017] netlink_sendmsg+0x8ad/0xbd0 [ 390.101190][T10017] ? netlink_getsockopt+0x550/0x550 [ 390.106447][T10017] ? apparmor_socket_sendmsg+0x8a/0x330 [ 390.112050][T10017] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 390.117370][T10017] ? security_socket_sendmsg+0x7c/0xa0 [ 390.122870][T10017] ? netlink_getsockopt+0x550/0x550 [ 390.128109][T10017] ____sys_sendmsg+0x5ed/0x9a0 [ 390.132920][T10017] ? __sys_sendmsg_sock+0x30/0x30 [ 390.137975][T10017] ? __import_iovec+0x306/0x510 [ 390.142971][T10017] ? import_iovec+0x6f/0xa0 [ 390.147623][T10017] ___sys_sendmsg+0x2a2/0x360 [ 390.152361][T10017] ? __sys_sendmsg+0x2a0/0x2a0 [ 390.157233][T10017] __se_sys_sendmsg+0x1c3/0x2b0 [ 390.162213][T10017] ? __x64_sys_sendmsg+0x80/0x80 [ 390.167213][T10017] ? lockdep_hardirqs_on+0x94/0x140 [ 390.172468][T10017] do_syscall_64+0x4c/0xa0 [ 390.176927][T10017] ? clear_bhb_loop+0x60/0xb0 [ 390.181643][T10017] ? clear_bhb_loop+0x60/0xb0 [ 390.186361][T10017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.192300][T10017] RIP: 0033:0x7ffa8db9e159 [ 390.196746][T10017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.216566][T10017] RSP: 002b:00007ffa8bdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.225035][T10017] RAX: ffffffffffffffda RBX: 00007ffa8de26180 RCX: 00007ffa8db9e159 [ 390.233082][T10017] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 390.241089][T10017] RBP: 00007ffa8dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 390.249105][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.257114][T10017] R13: 00007ffa8de26218 R14: 00007ffa8de26180 R15: 00007ffcf759f338 [ 390.265151][T10017] [ 390.292388][T10022] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 390.330519][T10021] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 390.354015][T10018] delete_channel: no stack [ 391.101918][T10068] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1289'. [ 391.579947][T10077] netlink: 'syz.1.1292': attribute type 2 has an invalid length. [ 393.246378][T10102] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1296'. [ 393.274330][T10102] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 393.288763][T10102] CPU: 0 PID: 10102 Comm: syz.3.1296 Not tainted syzkaller #0 [ 393.296289][T10102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.306471][T10102] Call Trace: [ 393.309875][T10102] [ 393.312841][T10102] dump_stack_lvl+0x188/0x24e [ 393.317569][T10102] ? show_regs_print_info+0x12/0x12 [ 393.322895][T10102] ? load_image+0x410/0x410 [ 393.327470][T10102] sysfs_warn_dup+0x8a/0xa0 [ 393.332032][T10102] sysfs_do_create_link_sd+0xc0/0x110 [ 393.337459][T10102] device_add+0x83b/0x1050 [ 393.342029][T10102] wiphy_register+0x1d8b/0x2aa0 [ 393.346962][T10102] ? cfg80211_event_work+0x40/0x40 [ 393.352207][T10102] ? minstrel_ht_alloc+0x894/0xa20 [ 393.357544][T10102] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 393.363692][T10102] ieee80211_register_hw+0x2d48/0x39f0 [ 393.369192][T10102] ? ieee80211_register_hw+0xf41/0x39f0 [ 393.374752][T10102] ? ieee80211_register_hw+0xf41/0x39f0 [ 393.380320][T10102] ? ieee80211_tasklet_handler+0x20/0x20 [ 393.385968][T10102] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 393.391883][T10102] ? __debug_object_init+0xed/0x440 [ 393.397297][T10102] ? memset+0x1e/0x40 [ 393.401398][T10102] ? __hrtimer_init+0x189/0x270 [ 393.406268][T10102] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 393.412017][T10102] ? memcpy+0x3c/0x60 [ 393.416015][T10102] hwsim_new_radio_nl+0xab7/0xc90 [ 393.421074][T10102] genl_family_rcv_msg_doit+0x22f/0x350 [ 393.426639][T10102] ? end_current_label_crit_section+0x170/0x170 [ 393.433248][T10102] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 393.439163][T10102] ? bpf_lsm_capable+0x5/0x10 [ 393.443860][T10102] ? security_capable+0x85/0xb0 [ 393.448995][T10102] genl_rcv_msg+0x601/0x790 [ 393.453523][T10102] ? genl_bind+0x360/0x360 [ 393.458124][T10102] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 393.464518][T10102] netlink_rcv_skb+0x1ef/0x440 [ 393.469319][T10102] ? genl_bind+0x360/0x360 [ 393.473761][T10102] ? netlink_ack+0x1160/0x1160 [ 393.478596][T10102] ? down_read+0x1a8/0x2d0 [ 393.483035][T10102] genl_rcv+0x24/0x40 [ 393.487035][T10102] netlink_unicast+0x7ad/0x920 [ 393.491911][T10102] netlink_sendmsg+0x8ad/0xbd0 [ 393.496706][T10102] ? netlink_getsockopt+0x550/0x550 [ 393.501927][T10102] ? apparmor_socket_sendmsg+0x8a/0x330 [ 393.507493][T10102] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 393.512875][T10102] ? security_socket_sendmsg+0x7c/0xa0 [ 393.518468][T10102] ? netlink_getsockopt+0x550/0x550 [ 393.523682][T10102] ____sys_sendmsg+0x5ed/0x9a0 [ 393.528488][T10102] ? __sys_sendmsg_sock+0x30/0x30 [ 393.533813][T10102] ? __import_iovec+0x306/0x510 [ 393.538717][T10102] ? import_iovec+0x6f/0xa0 [ 393.543255][T10102] ___sys_sendmsg+0x2a2/0x360 [ 393.547961][T10102] ? __sys_sendmsg+0x2a0/0x2a0 [ 393.552889][T10102] __se_sys_sendmsg+0x1c3/0x2b0 [ 393.557756][T10102] ? __x64_sys_sendmsg+0x80/0x80 [ 393.562757][T10102] ? lockdep_hardirqs_on+0x94/0x140 [ 393.568065][T10102] do_syscall_64+0x4c/0xa0 [ 393.572499][T10102] ? clear_bhb_loop+0x60/0xb0 [ 393.577188][T10102] ? clear_bhb_loop+0x60/0xb0 [ 393.581882][T10102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.587803][T10102] RIP: 0033:0x7fb56059e159 [ 393.592239][T10102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.611866][T10102] RSP: 002b:00007fb561384028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.620298][T10102] RAX: ffffffffffffffda RBX: 00007fb560825fa0 RCX: 00007fb56059e159 [ 393.628374][T10102] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 393.636360][T10102] RBP: 00007fb56063506b R08: 0000000000000000 R09: 0000000000000000 [ 393.644431][T10102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.652508][T10102] R13: 00007fb560826038 R14: 00007fb560825fa0 R15: 00007ffe4d529a88 [ 393.660513][T10102] [ 401.615196][T10165] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1311'. [ 401.736499][T10162] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1312'. [ 402.062315][T10169] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1313'. [ 402.122677][T10162] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 402.165814][T10162] CPU: 0 PID: 10162 Comm: syz.4.1312 Not tainted syzkaller #0 [ 402.173448][T10162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 402.183724][T10162] Call Trace: [ 402.187125][T10162] [ 402.190088][T10162] dump_stack_lvl+0x188/0x24e [ 402.194807][T10162] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 402.200998][T10162] ? show_regs_print_info+0x12/0x12 [ 402.206218][T10162] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 402.212397][T10162] sysfs_warn_dup+0x8a/0xa0 [ 402.216925][T10162] sysfs_do_create_link_sd+0xc0/0x110 [ 402.222404][T10162] device_add+0x83b/0x1050 [ 402.226844][T10162] wiphy_register+0x1d8b/0x2aa0 [ 402.231734][T10162] ? cfg80211_event_work+0x40/0x40 [ 402.236908][T10162] ? minstrel_ht_alloc+0x894/0xa20 [ 402.242043][T10162] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 402.248223][T10162] ieee80211_register_hw+0x2d48/0x39f0 [ 402.253716][T10162] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 402.259904][T10162] ? ieee80211_register_hw+0xf41/0x39f0 [ 402.265463][T10162] ? ieee80211_register_hw+0xf41/0x39f0 [ 402.271053][T10162] ? ieee80211_tasklet_handler+0x20/0x20 [ 402.276706][T10162] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 402.282642][T10162] ? __debug_object_init+0xed/0x440 [ 402.287971][T10162] ? memset+0x1e/0x40 [ 402.291995][T10162] ? __hrtimer_init+0x189/0x270 [ 402.296922][T10162] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 402.302695][T10162] ? memcpy+0x3c/0x60 [ 402.306699][T10162] hwsim_new_radio_nl+0xab7/0xc90 [ 402.311755][T10162] genl_family_rcv_msg_doit+0x22f/0x350 [ 402.317319][T10162] ? end_current_label_crit_section+0x170/0x170 [ 402.324087][T10162] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 402.330005][T10162] ? bpf_lsm_capable+0x5/0x10 [ 402.334785][T10162] ? security_capable+0x85/0xb0 [ 402.339655][T10162] genl_rcv_msg+0x601/0x790 [ 402.344174][T10162] ? perf_trace_preemptirq_template+0x268/0x320 [ 402.350523][T10162] ? genl_bind+0x360/0x360 [ 402.354955][T10162] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 402.361013][T10162] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 402.367406][T10162] ? lock_chain_count+0x20/0x20 [ 402.372291][T10162] ? rcu_is_watching+0x11/0xa0 [ 402.377267][T10162] netlink_rcv_skb+0x1ef/0x440 [ 402.382046][T10162] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 402.388215][T10162] ? genl_bind+0x360/0x360 [ 402.392747][T10162] ? netlink_ack+0x1160/0x1160 [ 402.397533][T10162] ? down_read+0x1a8/0x2d0 [ 402.401992][T10162] genl_rcv+0x24/0x40 [ 402.405988][T10162] netlink_unicast+0x7ad/0x920 [ 402.410775][T10162] netlink_sendmsg+0x8ad/0xbd0 [ 402.415564][T10162] ? netlink_getsockopt+0x550/0x550 [ 402.420779][T10162] ? apparmor_socket_sendmsg+0x8a/0x330 [ 402.426542][T10162] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 402.431934][T10162] ? security_socket_sendmsg+0x7c/0xa0 [ 402.437552][T10162] ? netlink_getsockopt+0x550/0x550 [ 402.442920][T10162] ____sys_sendmsg+0x5ed/0x9a0 [ 402.447811][T10162] ? __import_iovec+0x16f/0x510 [ 402.452694][T10162] ? __sys_sendmsg_sock+0x30/0x30 [ 402.457743][T10162] ? __import_iovec+0x306/0x510 [ 402.462816][T10162] ? import_iovec+0x6f/0xa0 [ 402.467342][T10162] ___sys_sendmsg+0x2a2/0x360 [ 402.472045][T10162] ? __sys_sendmsg+0x2a0/0x2a0 [ 402.476834][T10162] ? irqentry_enter+0x33/0x50 [ 402.481545][T10162] ? rcu_is_watching+0x11/0xa0 [ 402.486355][T10162] __se_sys_sendmsg+0x1c3/0x2b0 [ 402.491234][T10162] ? perf_trace_preemptirq_template+0x268/0x320 [ 402.497613][T10162] ? __x64_sys_sendmsg+0x80/0x80 [ 402.502611][T10162] ? lockdep_hardirqs_on+0x94/0x140 [ 402.508195][T10162] do_syscall_64+0x4c/0xa0 [ 402.512647][T10162] ? clear_bhb_loop+0x60/0xb0 [ 402.517336][T10162] ? clear_bhb_loop+0x60/0xb0 [ 402.522028][T10162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.527943][T10162] RIP: 0033:0x7f89c279e159 [ 402.532406][T10162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.552159][T10162] RSP: 002b:00007f89c09d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.560603][T10162] RAX: ffffffffffffffda RBX: 00007f89c2a26090 RCX: 00007f89c279e159 [ 402.568679][T10162] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 402.576691][T10162] RBP: 00007f89c283506b R08: 0000000000000000 R09: 0000000000000000 [ 402.584864][T10162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.592851][T10162] R13: 00007f89c2a26128 R14: 00007f89c2a26090 R15: 00007ffd2e28f3d8 [ 402.600853][T10162] [ 403.662552][T10193] netlink: 'syz.4.1319': attribute type 21 has an invalid length. [ 403.783209][T10193] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1319'. [ 404.009576][T10208] netlink: 'syz.4.1319': attribute type 21 has an invalid length. [ 404.032547][T10208] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1319'. [ 404.115065][T10205] netlink: 'syz.4.1319': attribute type 10 has an invalid length. [ 404.153199][T10205] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1319'. [ 404.187324][T10205] device ipvlan1 entered promiscuous mode [ 404.244165][T10205] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 404.542091][T10203] netlink: 'syz.4.1319': attribute type 10 has an invalid length. [ 404.552708][T10203] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1319'. [ 404.586547][T10203] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 404.877971][T10226] netlink: 'syz.1.1328': attribute type 3 has an invalid length. [ 404.921962][T10226] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1328'. [ 405.209474][T10234] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1329'. [ 405.441630][T10234] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 405.481753][T10234] CPU: 0 PID: 10234 Comm: syz.2.1329 Not tainted syzkaller #0 [ 405.489324][T10234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.499630][T10234] Call Trace: [ 405.503050][T10234] [ 405.506030][T10234] dump_stack_lvl+0x188/0x24e [ 405.510791][T10234] ? show_regs_print_info+0x12/0x12 [ 405.516050][T10234] ? load_image+0x410/0x410 [ 405.520661][T10234] sysfs_warn_dup+0x8a/0xa0 [ 405.525268][T10234] sysfs_do_create_link_sd+0xc0/0x110 [ 405.530721][T10234] device_add+0x83b/0x1050 [ 405.535243][T10234] wiphy_register+0x1d8b/0x2aa0 [ 405.540228][T10234] ? cfg80211_event_work+0x40/0x40 [ 405.545412][T10234] ? minstrel_ht_alloc+0x894/0xa20 [ 405.551052][T10234] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 405.557469][T10234] ieee80211_register_hw+0x2d48/0x39f0 [ 405.563058][T10234] ? ieee80211_register_hw+0xf41/0x39f0 [ 405.568657][T10234] ? ieee80211_register_hw+0xf41/0x39f0 [ 405.574293][T10234] ? ieee80211_tasklet_handler+0x20/0x20 [ 405.579982][T10234] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 405.585963][T10234] ? __debug_object_init+0xed/0x440 [ 405.591238][T10234] ? memset+0x1e/0x40 [ 405.595281][T10234] ? __hrtimer_init+0x189/0x270 [ 405.600243][T10234] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 405.606067][T10234] ? memcpy+0x3c/0x60 [ 405.610137][T10234] hwsim_new_radio_nl+0xab7/0xc90 [ 405.615326][T10234] genl_family_rcv_msg_doit+0x22f/0x350 [ 405.621026][T10234] ? end_current_label_crit_section+0x170/0x170 [ 405.627348][T10234] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 405.633317][T10234] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 405.639315][T10234] ? bpf_lsm_capable+0x5/0x10 [ 405.644157][T10234] ? security_capable+0x85/0xb0 [ 405.649098][T10234] genl_rcv_msg+0x601/0x790 [ 405.653699][T10234] ? genl_bind+0x360/0x360 [ 405.658169][T10234] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 405.664707][T10234] netlink_rcv_skb+0x1ef/0x440 [ 405.669541][T10234] ? genl_bind+0x360/0x360 [ 405.674030][T10234] ? netlink_ack+0x1160/0x1160 [ 405.678990][T10234] ? down_read+0x1a8/0x2d0 [ 405.683482][T10234] genl_rcv+0x24/0x40 [ 405.687523][T10234] netlink_unicast+0x7ad/0x920 [ 405.692413][T10234] netlink_sendmsg+0x8ad/0xbd0 [ 405.697284][T10234] ? netlink_getsockopt+0x550/0x550 [ 405.702547][T10234] ? apparmor_socket_sendmsg+0x8a/0x330 [ 405.708184][T10234] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 405.713534][T10234] ? security_socket_sendmsg+0x7c/0xa0 [ 405.719062][T10234] ? netlink_getsockopt+0x550/0x550 [ 405.724335][T10234] ____sys_sendmsg+0x5ed/0x9a0 [ 405.729238][T10234] ? __sys_sendmsg_sock+0x30/0x30 [ 405.734323][T10234] ? __import_iovec+0x306/0x510 [ 405.739274][T10234] ? import_iovec+0x6f/0xa0 [ 405.743857][T10234] ___sys_sendmsg+0x2a2/0x360 [ 405.748695][T10234] ? __sys_sendmsg+0x2a0/0x2a0 [ 405.753729][T10234] __se_sys_sendmsg+0x1c3/0x2b0 [ 405.758733][T10234] ? __x64_sys_sendmsg+0x80/0x80 [ 405.763795][T10234] ? lockdep_hardirqs_on+0x94/0x140 [ 405.769068][T10234] do_syscall_64+0x4c/0xa0 [ 405.773619][T10234] ? clear_bhb_loop+0x60/0xb0 [ 405.778343][T10234] ? clear_bhb_loop+0x60/0xb0 [ 405.783260][T10234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.789223][T10234] RIP: 0033:0x7fa5a399e159 [ 405.793787][T10234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.813536][T10234] RSP: 002b:00007fa5a1bb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.822010][T10234] RAX: ffffffffffffffda RBX: 00007fa5a3c26180 RCX: 00007fa5a399e159 [ 405.830037][T10234] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 405.838232][T10234] RBP: 00007fa5a3a3506b R08: 0000000000000000 R09: 0000000000000000 [ 405.846337][T10234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.854359][T10234] R13: 00007fa5a3c26218 R14: 00007fa5a3c26180 R15: 00007ffdd17ad458 [ 405.862445][T10234] [ 407.233909][T10258] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1336'. [ 407.408930][T10263] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1337'. [ 407.845729][T10285] IPv6: NLM_F_CREATE should be specified when creating new route [ 407.956788][T10285] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1342'. [ 408.038761][T10286] netlink: 'syz.2.1340': attribute type 3 has an invalid length. [ 408.049816][T10286] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1340'. [ 408.427658][T10275] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1340'. [ 408.554457][T10300] netlink: 'syz.0.1344': attribute type 9 has an invalid length. [ 408.628082][T10275] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 408.656208][T10275] CPU: 1 PID: 10275 Comm: syz.2.1340 Not tainted syzkaller #0 [ 408.663754][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.673866][T10275] Call Trace: [ 408.677188][T10275] [ 408.680160][T10275] dump_stack_lvl+0x188/0x24e [ 408.684896][T10275] ? show_regs_print_info+0x12/0x12 [ 408.690228][T10275] ? load_image+0x410/0x410 [ 408.694801][T10275] sysfs_warn_dup+0x8a/0xa0 [ 408.699357][T10275] sysfs_do_create_link_sd+0xc0/0x110 [ 408.704809][T10275] device_add+0x83b/0x1050 [ 408.709282][T10275] wiphy_register+0x1d8b/0x2aa0 [ 408.714195][T10275] ? cfg80211_event_work+0x40/0x40 [ 408.719354][T10275] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 408.725577][T10275] ieee80211_register_hw+0x2d48/0x39f0 [ 408.731086][T10275] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 408.737297][T10275] ? ieee80211_register_hw+0xf41/0x39f0 [ 408.742885][T10275] ? ieee80211_register_hw+0xf41/0x39f0 [ 408.748485][T10275] ? ieee80211_tasklet_handler+0x20/0x20 [ 408.754179][T10275] ? memset+0x1e/0x40 [ 408.758300][T10275] ? __hrtimer_init+0x189/0x270 [ 408.763289][T10275] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 408.769077][T10275] ? memcpy+0x3c/0x60 [ 408.773119][T10275] hwsim_new_radio_nl+0xab7/0xc90 [ 408.778239][T10275] genl_family_rcv_msg_doit+0x22f/0x350 [ 408.783846][T10275] ? end_current_label_crit_section+0x170/0x170 [ 408.790150][T10275] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 408.796104][T10275] ? bpf_lsm_capable+0x5/0x10 [ 408.800838][T10275] ? security_capable+0x85/0xb0 [ 408.805752][T10275] genl_rcv_msg+0x601/0x790 [ 408.810308][T10275] ? genl_bind+0x360/0x360 [ 408.814747][T10275] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 408.821115][T10275] netlink_rcv_skb+0x1ef/0x440 [ 408.825893][T10275] ? genl_bind+0x360/0x360 [ 408.830323][T10275] ? netlink_ack+0x1160/0x1160 [ 408.835108][T10275] ? down_read+0x1a8/0x2d0 [ 408.839546][T10275] genl_rcv+0x24/0x40 [ 408.843642][T10275] netlink_unicast+0x7ad/0x920 [ 408.848456][T10275] netlink_sendmsg+0x8ad/0xbd0 [ 408.853317][T10275] ? lockdep_hardirqs_on+0x94/0x140 [ 408.858539][T10275] ? netlink_getsockopt+0x550/0x550 [ 408.863753][T10275] ? bpf_lsm_socket_accept+0x10/0x10 [ 408.869071][T10275] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 408.874363][T10275] ? security_socket_sendmsg+0x7c/0xa0 [ 408.879836][T10275] ? netlink_getsockopt+0x550/0x550 [ 408.885133][T10275] ____sys_sendmsg+0x5ed/0x9a0 [ 408.889914][T10275] ? lockdep_hardirqs_on+0x94/0x140 [ 408.895133][T10275] ? __sys_sendmsg_sock+0x30/0x30 [ 408.900194][T10275] ? ___sys_sendmsg+0x287/0x360 [ 408.905063][T10275] ___sys_sendmsg+0x2a2/0x360 [ 408.909754][T10275] ? __sys_sendmsg+0x2a0/0x2a0 [ 408.914576][T10275] __se_sys_sendmsg+0x1c3/0x2b0 [ 408.919520][T10275] ? ct_nmi_exit+0x145/0x1c0 [ 408.924129][T10275] ? __x64_sys_sendmsg+0x80/0x80 [ 408.929092][T10275] ? lockdep_hardirqs_on+0x94/0x140 [ 408.934304][T10275] do_syscall_64+0x4c/0xa0 [ 408.938734][T10275] ? clear_bhb_loop+0x60/0xb0 [ 408.943418][T10275] ? clear_bhb_loop+0x60/0xb0 [ 408.948119][T10275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.954038][T10275] RIP: 0033:0x7fa5a399e159 [ 408.958554][T10275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.978172][T10275] RSP: 002b:00007fa5a1bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.986689][T10275] RAX: ffffffffffffffda RBX: 00007fa5a3c25fa0 RCX: 00007fa5a399e159 [ 408.994670][T10275] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 409.002654][T10275] RBP: 00007fa5a3a3506b R08: 0000000000000000 R09: 0000000000000000 [ 409.010719][T10275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.018697][T10275] R13: 00007fa5a3c26038 R14: 00007fa5a3c25fa0 R15: 00007ffdd17ad458 [ 409.026691][T10275] [ 409.499615][T10309] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1345'. [ 409.609592][T10309] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 409.639160][T10309] CPU: 0 PID: 10309 Comm: syz.3.1345 Not tainted syzkaller #0 [ 409.646689][T10309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.656873][T10309] Call Trace: [ 409.660278][T10309] [ 409.663403][T10309] dump_stack_lvl+0x188/0x24e [ 409.668126][T10309] ? show_regs_print_info+0x12/0x12 [ 409.673376][T10309] ? load_image+0x410/0x410 [ 409.677953][T10309] sysfs_warn_dup+0x8a/0xa0 [ 409.682538][T10309] sysfs_do_create_link_sd+0xc0/0x110 [ 409.688140][T10309] device_add+0x83b/0x1050 [ 409.692616][T10309] wiphy_register+0x1d8b/0x2aa0 [ 409.697619][T10309] ? cfg80211_event_work+0x40/0x40 [ 409.702774][T10309] ? minstrel_ht_alloc+0x894/0xa20 [ 409.707945][T10309] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 409.714069][T10309] ieee80211_register_hw+0x2d48/0x39f0 [ 409.719596][T10309] ? ieee80211_register_hw+0xf41/0x39f0 [ 409.725190][T10309] ? ieee80211_register_hw+0xf41/0x39f0 [ 409.730797][T10309] ? ieee80211_tasklet_handler+0x20/0x20 [ 409.736478][T10309] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 409.742426][T10309] ? __debug_object_init+0xed/0x440 [ 409.747674][T10309] ? memset+0x1e/0x40 [ 409.751696][T10309] ? __hrtimer_init+0x189/0x270 [ 409.756597][T10309] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 409.762642][T10309] ? memcpy+0x3c/0x60 [ 409.766681][T10309] hwsim_new_radio_nl+0xab7/0xc90 [ 409.771785][T10309] genl_family_rcv_msg_doit+0x22f/0x350 [ 409.777399][T10309] ? end_current_label_crit_section+0x170/0x170 [ 409.783707][T10309] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 409.789667][T10309] ? bpf_lsm_capable+0x5/0x10 [ 409.794479][T10309] ? security_capable+0x85/0xb0 [ 409.799471][T10309] genl_rcv_msg+0x601/0x790 [ 409.804123][T10309] ? genl_bind+0x360/0x360 [ 409.808563][T10309] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 409.814935][T10309] netlink_rcv_skb+0x1ef/0x440 [ 409.819806][T10309] ? genl_bind+0x360/0x360 [ 409.824256][T10309] ? netlink_ack+0x1160/0x1160 [ 409.829074][T10309] ? down_read+0x1a8/0x2d0 [ 409.833533][T10309] genl_rcv+0x24/0x40 [ 409.837648][T10309] netlink_unicast+0x7ad/0x920 [ 409.842460][T10309] netlink_sendmsg+0x8ad/0xbd0 [ 409.847341][T10309] ? netlink_getsockopt+0x550/0x550 [ 409.852563][T10309] ? apparmor_socket_sendmsg+0x8a/0x330 [ 409.858132][T10309] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 409.863690][T10309] ? security_socket_sendmsg+0x7c/0xa0 [ 409.869343][T10309] ? netlink_getsockopt+0x550/0x550 [ 409.874558][T10309] ____sys_sendmsg+0x5ed/0x9a0 [ 409.879339][T10309] ? __sys_sendmsg_sock+0x30/0x30 [ 409.884377][T10309] ? __import_iovec+0x306/0x510 [ 409.889427][T10309] ? import_iovec+0x6f/0xa0 [ 409.893962][T10309] ___sys_sendmsg+0x2a2/0x360 [ 409.898663][T10309] ? __sys_sendmsg+0x2a0/0x2a0 [ 409.903565][T10309] __se_sys_sendmsg+0x1c3/0x2b0 [ 409.908429][T10309] ? __x64_sys_sendmsg+0x80/0x80 [ 409.913389][T10309] ? lockdep_hardirqs_on+0x94/0x140 [ 409.918607][T10309] do_syscall_64+0x4c/0xa0 [ 409.923034][T10309] ? clear_bhb_loop+0x60/0xb0 [ 409.927738][T10309] ? clear_bhb_loop+0x60/0xb0 [ 409.932433][T10309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.938344][T10309] RIP: 0033:0x7fb56059e159 [ 409.942769][T10309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.962567][T10309] RSP: 002b:00007fb55e3b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.970996][T10309] RAX: ffffffffffffffda RBX: 00007fb560826270 RCX: 00007fb56059e159 [ 409.978986][T10309] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 409.986975][T10309] RBP: 00007fb56063506b R08: 0000000000000000 R09: 0000000000000000 [ 409.995041][T10309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.003109][T10309] R13: 00007fb560826308 R14: 00007fb560826270 R15: 00007ffe4d529a88 [ 410.011109][T10309] [ 410.376462][T10352] netlink: 'syz.3.1352': attribute type 2 has an invalid length. [ 410.781577][T10348] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1352'. [ 410.872077][T10352] device .*! entered promiscuous mode [ 411.872168][T10389] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1362'. [ 412.283136][T10398] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1364'. [ 414.555235][T10389] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 414.563470][T10389] CPU: 1 PID: 10389 Comm: syz.3.1362 Not tainted syzkaller #0 [ 414.571069][T10389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.581259][T10389] Call Trace: [ 414.584578][T10389] [ 414.587639][T10389] dump_stack_lvl+0x188/0x24e [ 414.592459][T10389] ? show_regs_print_info+0x12/0x12 [ 414.597801][T10389] ? load_image+0x410/0x410 [ 414.602370][T10389] sysfs_warn_dup+0x8a/0xa0 [ 414.607017][T10389] sysfs_do_create_link_sd+0xc0/0x110 [ 414.612437][T10389] device_add+0x83b/0x1050 [ 414.616913][T10389] wiphy_register+0x1d8b/0x2aa0 [ 414.621826][T10389] ? cfg80211_event_work+0x40/0x40 [ 414.626955][T10389] ? minstrel_ht_alloc+0x894/0xa20 [ 414.632084][T10389] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 414.638171][T10389] ieee80211_register_hw+0x2d48/0x39f0 [ 414.643681][T10389] ? ieee80211_register_hw+0xf41/0x39f0 [ 414.649266][T10389] ? ieee80211_register_hw+0xf41/0x39f0 [ 414.654845][T10389] ? ieee80211_tasklet_handler+0x20/0x20 [ 414.660491][T10389] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 414.666430][T10389] ? __debug_object_init+0xed/0x440 [ 414.671646][T10389] ? memset+0x1e/0x40 [ 414.675647][T10389] ? __hrtimer_init+0x189/0x270 [ 414.680515][T10389] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 414.686263][T10389] ? memcpy+0x3c/0x60 [ 414.690257][T10389] hwsim_new_radio_nl+0xab7/0xc90 [ 414.695396][T10389] genl_family_rcv_msg_doit+0x22f/0x350 [ 414.700952][T10389] ? end_current_label_crit_section+0x170/0x170 [ 414.707211][T10389] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 414.713120][T10389] ? bpf_lsm_capable+0x5/0x10 [ 414.717898][T10389] ? security_capable+0x85/0xb0 [ 414.722768][T10389] genl_rcv_msg+0x601/0x790 [ 414.727295][T10389] ? genl_bind+0x360/0x360 [ 414.731724][T10389] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 414.738079][T10389] netlink_rcv_skb+0x1ef/0x440 [ 414.742851][T10389] ? genl_bind+0x360/0x360 [ 414.747299][T10389] ? netlink_ack+0x1160/0x1160 [ 414.752175][T10389] ? down_read+0x1a8/0x2d0 [ 414.756607][T10389] genl_rcv+0x24/0x40 [ 414.760606][T10389] netlink_unicast+0x7ad/0x920 [ 414.765481][T10389] netlink_sendmsg+0x8ad/0xbd0 [ 414.770360][T10389] ? netlink_getsockopt+0x550/0x550 [ 414.775569][T10389] ? apparmor_socket_sendmsg+0x8a/0x330 [ 414.781146][T10389] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 414.786531][T10389] ? security_socket_sendmsg+0x7c/0xa0 [ 414.792005][T10389] ? netlink_getsockopt+0x550/0x550 [ 414.797218][T10389] ____sys_sendmsg+0x5ed/0x9a0 [ 414.801998][T10389] ? __sys_sendmsg_sock+0x30/0x30 [ 414.807120][T10389] ? __import_iovec+0x306/0x510 [ 414.811994][T10389] ? import_iovec+0x6f/0xa0 [ 414.816520][T10389] ___sys_sendmsg+0x2a2/0x360 [ 414.821232][T10389] ? __sys_sendmsg+0x2a0/0x2a0 [ 414.826056][T10389] __se_sys_sendmsg+0x1c3/0x2b0 [ 414.830916][T10389] ? __x64_sys_sendmsg+0x80/0x80 [ 414.835877][T10389] ? lockdep_hardirqs_on+0x94/0x140 [ 414.841293][T10389] do_syscall_64+0x4c/0xa0 [ 414.845721][T10389] ? clear_bhb_loop+0x60/0xb0 [ 414.850404][T10389] ? clear_bhb_loop+0x60/0xb0 [ 414.855087][T10389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.861017][T10389] RIP: 0033:0x7fb56059e159 [ 414.865461][T10389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.885084][T10389] RSP: 002b:00007fb55e7d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.893609][T10389] RAX: ffffffffffffffda RBX: 00007fb560826180 RCX: 00007fb56059e159 [ 414.901589][T10389] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 414.909663][T10389] RBP: 00007fb56063506b R08: 0000000000000000 R09: 0000000000000000 [ 414.917664][T10389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.925729][T10389] R13: 00007fb560826218 R14: 00007fb560826180 R15: 00007ffe4d529a88 [ 414.933814][T10389] [ 415.363092][T10425] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1369'. [ 416.033659][T10443] netlink: 'syz.2.1375': attribute type 5 has an invalid length. [ 416.041958][T10443] netlink: 'syz.2.1375': attribute type 30 has an invalid length. [ 416.419255][T10453] netlink: 'syz.4.1378': attribute type 11 has an invalid length. [ 416.467119][T10453] netlink: 191644 bytes leftover after parsing attributes in process `syz.4.1378'. [ 416.547281][T10467] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1380'. [ 416.630745][T10467] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 416.694185][T10467] CPU: 1 PID: 10467 Comm: syz.3.1380 Not tainted syzkaller #0 [ 416.701732][T10467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.711864][T10467] Call Trace: [ 416.715177][T10467] [ 416.718156][T10467] dump_stack_lvl+0x188/0x24e [ 416.722879][T10467] ? show_regs_print_info+0x12/0x12 [ 416.728207][T10467] ? load_image+0x410/0x410 [ 416.732766][T10467] sysfs_warn_dup+0x8a/0xa0 [ 416.737319][T10467] sysfs_do_create_link_sd+0xc0/0x110 [ 416.742757][T10467] device_add+0x83b/0x1050 [ 416.747245][T10467] wiphy_register+0x1d8b/0x2aa0 [ 416.752160][T10467] ? cfg80211_event_work+0x40/0x40 [ 416.757400][T10467] ? minstrel_ht_alloc+0x894/0xa20 [ 416.762559][T10467] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 416.768688][T10467] ieee80211_register_hw+0x2d48/0x39f0 [ 416.774406][T10467] ? ieee80211_register_hw+0xf41/0x39f0 [ 416.779990][T10467] ? ieee80211_register_hw+0xf41/0x39f0 [ 416.785764][T10467] ? ieee80211_tasklet_handler+0x20/0x20 [ 416.791443][T10467] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 416.797382][T10467] ? __debug_object_init+0xed/0x440 [ 416.802602][T10467] ? memset+0x1e/0x40 [ 416.806681][T10467] ? __hrtimer_init+0x189/0x270 [ 416.811548][T10467] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 416.817479][T10467] ? memcpy+0x3c/0x60 [ 416.821515][T10467] hwsim_new_radio_nl+0xab7/0xc90 [ 416.826572][T10467] genl_family_rcv_msg_doit+0x22f/0x350 [ 416.832863][T10467] ? end_current_label_crit_section+0x170/0x170 [ 416.839147][T10467] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 416.845071][T10467] ? bpf_lsm_capable+0x5/0x10 [ 416.849769][T10467] ? security_capable+0x85/0xb0 [ 416.854646][T10467] genl_rcv_msg+0x601/0x790 [ 416.859177][T10467] ? genl_bind+0x360/0x360 [ 416.863609][T10467] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 416.869970][T10467] netlink_rcv_skb+0x1ef/0x440 [ 416.874756][T10467] ? genl_bind+0x360/0x360 [ 416.879186][T10467] ? netlink_ack+0x1160/0x1160 [ 416.884040][T10467] ? down_read+0x1a8/0x2d0 [ 416.888495][T10467] genl_rcv+0x24/0x40 [ 416.892508][T10467] netlink_unicast+0x7ad/0x920 [ 416.897304][T10467] netlink_sendmsg+0x8ad/0xbd0 [ 416.902103][T10467] ? netlink_getsockopt+0x550/0x550 [ 416.907315][T10467] ? apparmor_socket_sendmsg+0x8a/0x330 [ 416.912890][T10467] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 416.918188][T10467] ? security_socket_sendmsg+0x7c/0xa0 [ 416.923660][T10467] ? netlink_getsockopt+0x550/0x550 [ 416.928876][T10467] ____sys_sendmsg+0x5ed/0x9a0 [ 416.933664][T10467] ? __sys_sendmsg_sock+0x30/0x30 [ 416.938706][T10467] ? __import_iovec+0x306/0x510 [ 416.943581][T10467] ? import_iovec+0x6f/0xa0 [ 416.948105][T10467] ___sys_sendmsg+0x2a2/0x360 [ 416.952886][T10467] ? __sys_sendmsg+0x2a0/0x2a0 [ 416.957722][T10467] __se_sys_sendmsg+0x1c3/0x2b0 [ 416.962587][T10467] ? __x64_sys_sendmsg+0x80/0x80 [ 416.967549][T10467] ? lockdep_hardirqs_on+0x94/0x140 [ 416.972770][T10467] do_syscall_64+0x4c/0xa0 [ 416.977201][T10467] ? clear_bhb_loop+0x60/0xb0 [ 416.981929][T10467] ? clear_bhb_loop+0x60/0xb0 [ 416.986623][T10467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.992542][T10467] RIP: 0033:0x7fb56059e159 [ 416.996979][T10467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.016608][T10467] RSP: 002b:00007fb55e7d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.025040][T10467] RAX: ffffffffffffffda RBX: 00007fb560826180 RCX: 00007fb56059e159 [ 417.033019][T10467] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 417.040995][T10467] RBP: 00007fb56063506b R08: 0000000000000000 R09: 0000000000000000 [ 417.049060][T10467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.057061][T10467] R13: 00007fb560826218 R14: 00007fb560826180 R15: 00007ffe4d529a88 [ 417.065142][T10467] [ 417.328841][T10482] netlink: 'syz.2.1383': attribute type 21 has an invalid length. [ 417.370699][T10482] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1383'. [ 417.900982][T10483] device syzkaller0 entered promiscuous mode [ 418.066038][T10498] netlink: 'syz.3.1388': attribute type 29 has an invalid length. [ 418.127296][T10498] netlink: 'syz.3.1388': attribute type 3 has an invalid length. [ 418.166390][T10498] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1388'. [ 418.592371][T10513] netlink: 'syz.3.1392': attribute type 2 has an invalid length. [ 420.403231][T10507] netlink: 'syz.2.1390': attribute type 10 has an invalid length. [ 420.411718][T10507] device syz_tun entered promiscuous mode [ 420.428834][T10510] netlink: 'syz.2.1390': attribute type 10 has an invalid length. [ 420.463905][T10513] device 0 entered promiscuous mode [ 420.504632][T10528] netlink: 'syz.1.1393': attribute type 9 has an invalid length. [ 420.514358][T10528] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1393'. [ 420.589310][T10533] netlink: 'syz.4.1395': attribute type 1 has an invalid length. [ 420.609323][T10533] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1395'. [ 420.743196][T10538] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1396'. [ 420.790653][T10538] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 420.844811][T10538] CPU: 0 PID: 10538 Comm: syz.2.1396 Not tainted syzkaller #0 [ 420.852361][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.862477][T10538] Call Trace: [ 420.865792][T10538] [ 420.868761][T10538] dump_stack_lvl+0x188/0x24e [ 420.873491][T10538] ? show_regs_print_info+0x12/0x12 [ 420.878825][T10538] ? load_image+0x410/0x410 [ 420.883421][T10538] sysfs_warn_dup+0x8a/0xa0 [ 420.887974][T10538] sysfs_do_create_link_sd+0xc0/0x110 [ 420.893404][T10538] device_add+0x83b/0x1050 [ 420.897968][T10538] wiphy_register+0x1d8b/0x2aa0 [ 420.902891][T10538] ? cfg80211_event_work+0x40/0x40 [ 420.908046][T10538] ? minstrel_ht_alloc+0x894/0xa20 [ 420.913201][T10538] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 420.919324][T10538] ieee80211_register_hw+0x2d48/0x39f0 [ 420.924854][T10538] ? ieee80211_register_hw+0xf41/0x39f0 [ 420.930440][T10538] ? ieee80211_register_hw+0xf41/0x39f0 [ 420.936037][T10538] ? ieee80211_tasklet_handler+0x20/0x20 [ 420.941717][T10538] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 420.947676][T10538] ? __debug_object_init+0xed/0x440 [ 420.952924][T10538] ? memset+0x1e/0x40 [ 420.956959][T10538] ? __hrtimer_init+0x189/0x270 [ 420.961866][T10538] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 420.967661][T10538] ? memcpy+0x3c/0x60 [ 420.971692][T10538] hwsim_new_radio_nl+0xab7/0xc90 [ 420.976791][T10538] genl_family_rcv_msg_doit+0x22f/0x350 [ 420.982472][T10538] ? end_current_label_crit_section+0x170/0x170 [ 420.988776][T10538] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 420.994817][T10538] ? bpf_lsm_capable+0x5/0x10 [ 420.999544][T10538] ? security_capable+0x85/0xb0 [ 421.004446][T10538] genl_rcv_msg+0x601/0x790 [ 421.009011][T10538] ? genl_bind+0x360/0x360 [ 421.013472][T10538] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 421.019865][T10538] netlink_rcv_skb+0x1ef/0x440 [ 421.024652][T10538] ? genl_bind+0x360/0x360 [ 421.029087][T10538] ? netlink_ack+0x1160/0x1160 [ 421.033873][T10538] ? down_read+0x1a8/0x2d0 [ 421.038316][T10538] genl_rcv+0x24/0x40 [ 421.042310][T10538] netlink_unicast+0x7ad/0x920 [ 421.047096][T10538] netlink_sendmsg+0x8ad/0xbd0 [ 421.051880][T10538] ? netlink_getsockopt+0x550/0x550 [ 421.057278][T10538] ? apparmor_socket_sendmsg+0x8a/0x330 [ 421.062855][T10538] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 421.068173][T10538] ? security_socket_sendmsg+0x7c/0xa0 [ 421.073790][T10538] ? netlink_getsockopt+0x550/0x550 [ 421.079014][T10538] ____sys_sendmsg+0x5ed/0x9a0 [ 421.083804][T10538] ? __sys_sendmsg_sock+0x30/0x30 [ 421.088835][T10538] ? __import_iovec+0x306/0x510 [ 421.093809][T10538] ? import_iovec+0x6f/0xa0 [ 421.098343][T10538] ___sys_sendmsg+0x2a2/0x360 [ 421.103042][T10538] ? __sys_sendmsg+0x2a0/0x2a0 [ 421.107861][T10538] __se_sys_sendmsg+0x1c3/0x2b0 [ 421.112727][T10538] ? __x64_sys_sendmsg+0x80/0x80 [ 421.117696][T10538] ? lockdep_hardirqs_on+0x94/0x140 [ 421.122921][T10538] do_syscall_64+0x4c/0xa0 [ 421.127350][T10538] ? clear_bhb_loop+0x60/0xb0 [ 421.132039][T10538] ? clear_bhb_loop+0x60/0xb0 [ 421.136739][T10538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.142683][T10538] RIP: 0033:0x7fa5a399e159 [ 421.147109][T10538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.166729][T10538] RSP: 002b:00007fa5a1bb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.175156][T10538] RAX: ffffffffffffffda RBX: 00007fa5a3c26180 RCX: 00007fa5a399e159 [ 421.183136][T10538] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 421.191118][T10538] RBP: 00007fa5a3a3506b R08: 0000000000000000 R09: 0000000000000000 [ 421.199108][T10538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.207090][T10538] R13: 00007fa5a3c26218 R14: 00007fa5a3c26180 R15: 00007ffdd17ad458 [ 421.215086][T10538] [ 421.360830][T10551] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1400'. [ 421.999434][T10580] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1415'. [ 422.115777][T10580] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 422.236749][T10580] CPU: 0 PID: 10580 Comm: syz.2.1415 Not tainted syzkaller #0 [ 422.244294][T10580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.254381][T10580] Call Trace: [ 422.257697][T10580] [ 422.260678][T10580] dump_stack_lvl+0x188/0x24e [ 422.265405][T10580] ? show_regs_print_info+0x12/0x12 [ 422.270654][T10580] ? load_image+0x410/0x410 [ 422.275210][T10580] sysfs_warn_dup+0x8a/0xa0 [ 422.279751][T10580] sysfs_do_create_link_sd+0xc0/0x110 [ 422.285253][T10580] device_add+0x83b/0x1050 [ 422.289735][T10580] wiphy_register+0x1d8b/0x2aa0 [ 422.294689][T10580] ? cfg80211_event_work+0x40/0x40 [ 422.299845][T10580] ? minstrel_ht_alloc+0x894/0xa20 [ 422.304993][T10580] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 422.311099][T10580] ieee80211_register_hw+0x2d48/0x39f0 [ 422.316600][T10580] ? ieee80211_register_hw+0xf41/0x39f0 [ 422.322174][T10580] ? ieee80211_register_hw+0xf41/0x39f0 [ 422.327754][T10580] ? ieee80211_tasklet_handler+0x20/0x20 [ 422.333414][T10580] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 422.339436][T10580] ? __debug_object_init+0xed/0x440 [ 422.344669][T10580] ? memset+0x1e/0x40 [ 422.348683][T10580] ? __hrtimer_init+0x189/0x270 [ 422.353579][T10580] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 422.359390][T10580] ? memcpy+0x3c/0x60 [ 422.363413][T10580] hwsim_new_radio_nl+0xab7/0xc90 [ 422.368491][T10580] genl_family_rcv_msg_doit+0x22f/0x350 [ 422.374071][T10580] ? end_current_label_crit_section+0x170/0x170 [ 422.380352][T10580] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 422.386289][T10580] ? bpf_lsm_capable+0x5/0x10 [ 422.391007][T10580] ? security_capable+0x85/0xb0 [ 422.395896][T10580] genl_rcv_msg+0x601/0x790 [ 422.400452][T10580] ? genl_bind+0x360/0x360 [ 422.404982][T10580] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 422.411367][T10580] netlink_rcv_skb+0x1ef/0x440 [ 422.416170][T10580] ? genl_bind+0x360/0x360 [ 422.420626][T10580] ? netlink_ack+0x1160/0x1160 [ 422.425435][T10580] ? down_read+0x1a8/0x2d0 [ 422.429889][T10580] genl_rcv+0x24/0x40 [ 422.433902][T10580] netlink_unicast+0x7ad/0x920 [ 422.438721][T10580] netlink_sendmsg+0x8ad/0xbd0 [ 422.443619][T10580] ? netlink_getsockopt+0x550/0x550 [ 422.448875][T10580] ? apparmor_socket_sendmsg+0x8a/0x330 [ 422.454644][T10580] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 422.459958][T10580] ? security_socket_sendmsg+0x7c/0xa0 [ 422.465452][T10580] ? netlink_getsockopt+0x550/0x550 [ 422.470689][T10580] ____sys_sendmsg+0x5ed/0x9a0 [ 422.475501][T10580] ? __sys_sendmsg_sock+0x30/0x30 [ 422.480561][T10580] ? __import_iovec+0x306/0x510 [ 422.485456][T10580] ? import_iovec+0x6f/0xa0 [ 422.489996][T10580] ___sys_sendmsg+0x2a2/0x360 [ 422.494707][T10580] ? __sys_sendmsg+0x2a0/0x2a0 [ 422.499566][T10580] __se_sys_sendmsg+0x1c3/0x2b0 [ 422.504448][T10580] ? __x64_sys_sendmsg+0x80/0x80 [ 422.509441][T10580] ? lockdep_hardirqs_on+0x94/0x140 [ 422.514888][T10580] do_syscall_64+0x4c/0xa0 [ 422.519365][T10580] ? clear_bhb_loop+0x60/0xb0 [ 422.524174][T10580] ? clear_bhb_loop+0x60/0xb0 [ 422.528885][T10580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.534830][T10580] RIP: 0033:0x7fa5a399e159 [ 422.539535][T10580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.559194][T10580] RSP: 002b:00007fa5a1791028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.567822][T10580] RAX: ffffffffffffffda RBX: 00007fa5a3c26270 RCX: 00007fa5a399e159 [ 422.576305][T10580] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 422.584412][T10580] RBP: 00007fa5a3a3506b R08: 0000000000000000 R09: 0000000000000000 [ 422.592443][T10580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.600444][T10580] R13: 00007fa5a3c26308 R14: 00007fa5a3c26270 R15: 00007ffdd17ad458 [ 422.608467][T10580] [ 422.826113][T10586] netlink: 'syz.3.1407': attribute type 10 has an invalid length. [ 423.031603][T10586] team0: Port device wlan1 removed [ 423.058487][T10587] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1407'. [ 423.144559][T10599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1410'. [ 423.366922][T10606] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1411'. [ 423.425216][T10598] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1410'. [ 423.622580][T10598] netlink: 'syz.1.1410': attribute type 3 has an invalid length. [ 423.670279][T10598] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1410'. [ 424.761340][T10648] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1421'. [ 424.794171][T10636] device syzkaller0 entered promiscuous mode [ 424.858034][T10648] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 424.943796][T10648] CPU: 0 PID: 10648 Comm: syz.1.1421 Not tainted syzkaller #0 [ 424.951444][T10648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 424.961546][T10648] Call Trace: [ 424.964866][T10648] [ 424.967845][T10648] dump_stack_lvl+0x188/0x24e [ 424.972584][T10648] ? show_regs_print_info+0x12/0x12 [ 424.977833][T10648] ? load_image+0x410/0x410 [ 424.982400][T10648] sysfs_warn_dup+0x8a/0xa0 [ 424.986950][T10648] sysfs_do_create_link_sd+0xc0/0x110 [ 424.992374][T10648] device_add+0x83b/0x1050 [ 424.996859][T10648] wiphy_register+0x1d8b/0x2aa0 [ 425.001777][T10648] ? cfg80211_event_work+0x40/0x40 [ 425.006925][T10648] ? minstrel_ht_alloc+0x894/0xa20 [ 425.012077][T10648] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 425.018190][T10648] ieee80211_register_hw+0x2d48/0x39f0 [ 425.023796][T10648] ? ieee80211_register_hw+0xf41/0x39f0 [ 425.029379][T10648] ? ieee80211_register_hw+0xf41/0x39f0 [ 425.034969][T10648] ? ieee80211_tasklet_handler+0x20/0x20 [ 425.040637][T10648] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 425.046581][T10648] ? __debug_object_init+0xed/0x440 [ 425.052003][T10648] ? memset+0x1e/0x40 [ 425.056034][T10648] ? __hrtimer_init+0x189/0x270 [ 425.060938][T10648] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 425.066725][T10648] ? memcpy+0x3c/0x60 [ 425.070757][T10648] hwsim_new_radio_nl+0xab7/0xc90 [ 425.075851][T10648] genl_family_rcv_msg_doit+0x22f/0x350 [ 425.081442][T10648] ? end_current_label_crit_section+0x170/0x170 [ 425.087737][T10648] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 425.093678][T10648] ? bpf_lsm_capable+0x5/0x10 [ 425.098386][T10648] ? security_capable+0x85/0xb0 [ 425.103283][T10648] genl_rcv_msg+0x601/0x790 [ 425.107843][T10648] ? genl_bind+0x360/0x360 [ 425.112293][T10648] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 425.118677][T10648] netlink_rcv_skb+0x1ef/0x440 [ 425.123485][T10648] ? genl_bind+0x360/0x360 [ 425.127945][T10648] ? netlink_ack+0x1160/0x1160 [ 425.132799][T10648] ? down_read+0x1a8/0x2d0 [ 425.137262][T10648] genl_rcv+0x24/0x40 [ 425.141284][T10648] netlink_unicast+0x7ad/0x920 [ 425.146292][T10648] netlink_sendmsg+0x8ad/0xbd0 [ 425.151108][T10648] ? netlink_getsockopt+0x550/0x550 [ 425.156356][T10648] ? apparmor_socket_sendmsg+0x8a/0x330 [ 425.162039][T10648] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 425.167378][T10648] ? security_socket_sendmsg+0x7c/0xa0 [ 425.172880][T10648] ? netlink_getsockopt+0x550/0x550 [ 425.178118][T10648] ____sys_sendmsg+0x5ed/0x9a0 [ 425.183026][T10648] ? __sys_sendmsg_sock+0x30/0x30 [ 425.188090][T10648] ? __import_iovec+0x306/0x510 [ 425.193004][T10648] ? import_iovec+0x6f/0xa0 [ 425.197559][T10648] ___sys_sendmsg+0x2a2/0x360 [ 425.202294][T10648] ? __sys_sendmsg+0x2a0/0x2a0 [ 425.207163][T10648] __se_sys_sendmsg+0x1c3/0x2b0 [ 425.212068][T10648] ? __x64_sys_sendmsg+0x80/0x80 [ 425.217071][T10648] ? lockdep_hardirqs_on+0x94/0x140 [ 425.222341][T10648] do_syscall_64+0x4c/0xa0 [ 425.226798][T10648] ? clear_bhb_loop+0x60/0xb0 [ 425.231518][T10648] ? clear_bhb_loop+0x60/0xb0 [ 425.236241][T10648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.242180][T10648] RIP: 0033:0x7fa67679e159 [ 425.246730][T10648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.266384][T10648] RSP: 002b:00007fa6745b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.274854][T10648] RAX: ffffffffffffffda RBX: 00007fa676a26270 RCX: 00007fa67679e159 [ 425.282862][T10648] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 425.290878][T10648] RBP: 00007fa67683506b R08: 0000000000000000 R09: 0000000000000000 [ 425.298892][T10648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.307176][T10648] R13: 00007fa676a26308 R14: 00007fa676a26270 R15: 00007ffc6e34b308 [ 425.315214][T10648] [ 426.694592][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 428.728454][T10669] netlink: 'syz.2.1426': attribute type 9 has an invalid length. [ 428.739248][T10657] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1423'. [ 428.786083][T10657] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 428.807378][T10657] CPU: 0 PID: 10657 Comm: syz.3.1423 Not tainted syzkaller #0 [ 428.814911][T10657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.825005][T10657] Call Trace: [ 428.828313][T10657] [ 428.831251][T10657] dump_stack_lvl+0x188/0x24e [ 428.835945][T10657] ? show_regs_print_info+0x12/0x12 [ 428.841181][T10657] ? load_image+0x410/0x410 [ 428.845747][T10657] sysfs_warn_dup+0x8a/0xa0 [ 428.850320][T10657] sysfs_do_create_link_sd+0xc0/0x110 [ 428.855746][T10657] device_add+0x83b/0x1050 [ 428.860221][T10657] wiphy_register+0x1d8b/0x2aa0 [ 428.865145][T10657] ? cfg80211_event_work+0x40/0x40 [ 428.870287][T10657] ? minstrel_ht_alloc+0x894/0xa20 [ 428.875518][T10657] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 428.881627][T10657] ieee80211_register_hw+0x2d48/0x39f0 [ 428.887151][T10657] ? ieee80211_register_hw+0xf41/0x39f0 [ 428.892736][T10657] ? ieee80211_register_hw+0xf41/0x39f0 [ 428.898325][T10657] ? ieee80211_tasklet_handler+0x20/0x20 [ 428.903985][T10657] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 428.909919][T10657] ? __debug_object_init+0xed/0x440 [ 428.915228][T10657] ? memset+0x1e/0x40 [ 428.919227][T10657] ? __hrtimer_init+0x189/0x270 [ 428.924093][T10657] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 428.929852][T10657] ? memcpy+0x3c/0x60 [ 428.933853][T10657] hwsim_new_radio_nl+0xab7/0xc90 [ 428.938904][T10657] genl_family_rcv_msg_doit+0x22f/0x350 [ 428.944474][T10657] ? end_current_label_crit_section+0x170/0x170 [ 428.950737][T10657] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 428.956658][T10657] ? bpf_lsm_capable+0x5/0x10 [ 428.961346][T10657] ? security_capable+0x85/0xb0 [ 428.966214][T10657] genl_rcv_msg+0x601/0x790 [ 428.970734][T10657] ? genl_bind+0x360/0x360 [ 428.975160][T10657] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 428.981517][T10657] netlink_rcv_skb+0x1ef/0x440 [ 428.986294][T10657] ? genl_bind+0x360/0x360 [ 428.990727][T10657] ? netlink_ack+0x1160/0x1160 [ 428.995510][T10657] ? down_read+0x1a8/0x2d0 [ 428.999939][T10657] genl_rcv+0x24/0x40 [ 429.003935][T10657] netlink_unicast+0x7ad/0x920 [ 429.008722][T10657] netlink_sendmsg+0x8ad/0xbd0 [ 429.013592][T10657] ? netlink_getsockopt+0x550/0x550 [ 429.018806][T10657] ? apparmor_socket_sendmsg+0x8a/0x330 [ 429.024372][T10657] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 429.029672][T10657] ? security_socket_sendmsg+0x7c/0xa0 [ 429.035149][T10657] ? netlink_getsockopt+0x550/0x550 [ 429.040365][T10657] ____sys_sendmsg+0x5ed/0x9a0 [ 429.045151][T10657] ? __sys_sendmsg_sock+0x30/0x30 [ 429.050189][T10657] ? __import_iovec+0x306/0x510 [ 429.055067][T10657] ? import_iovec+0x6f/0xa0 [ 429.059590][T10657] ___sys_sendmsg+0x2a2/0x360 [ 429.064281][T10657] ? __sys_sendmsg+0x2a0/0x2a0 [ 429.069113][T10657] __se_sys_sendmsg+0x1c3/0x2b0 [ 429.073974][T10657] ? __x64_sys_sendmsg+0x80/0x80 [ 429.078933][T10657] ? lockdep_hardirqs_on+0x94/0x140 [ 429.084151][T10657] do_syscall_64+0x4c/0xa0 [ 429.088574][T10657] ? clear_bhb_loop+0x60/0xb0 [ 429.093262][T10657] ? clear_bhb_loop+0x60/0xb0 [ 429.097947][T10657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.103856][T10657] RIP: 0033:0x7fb56059e159 [ 429.108293][T10657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.128013][T10657] RSP: 002b:00007fb55e3b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.136445][T10657] RAX: ffffffffffffffda RBX: 00007fb560826270 RCX: 00007fb56059e159 [ 429.144692][T10657] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 429.152678][T10657] RBP: 00007fb56063506b R08: 0000000000000000 R09: 0000000000000000 [ 429.160672][T10657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.168663][T10657] R13: 00007fb560826308 R14: 00007fb560826270 R15: 00007ffe4d529a88 [ 429.176675][T10657] [ 429.443395][T10687] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1429'. [ 429.473655][T10687] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 429.526092][T10687] CPU: 1 PID: 10687 Comm: syz.4.1429 Not tainted syzkaller #0 [ 429.533637][T10687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.543908][T10687] Call Trace: [ 429.547223][T10687] [ 429.550275][T10687] dump_stack_lvl+0x188/0x24e [ 429.555100][T10687] ? show_regs_print_info+0x12/0x12 [ 429.560426][T10687] ? load_image+0x410/0x410 [ 429.564995][T10687] sysfs_warn_dup+0x8a/0xa0 [ 429.569552][T10687] sysfs_do_create_link_sd+0xc0/0x110 [ 429.575064][T10687] device_add+0x83b/0x1050 [ 429.579535][T10687] wiphy_register+0x1d8b/0x2aa0 [ 429.584446][T10687] ? cfg80211_event_work+0x40/0x40 [ 429.589593][T10687] ? minstrel_ht_alloc+0x894/0xa20 [ 429.594753][T10687] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 429.600896][T10687] ieee80211_register_hw+0x2d48/0x39f0 [ 429.606416][T10687] ? ieee80211_register_hw+0xf41/0x39f0 [ 429.611996][T10687] ? ieee80211_register_hw+0xf41/0x39f0 [ 429.617585][T10687] ? ieee80211_tasklet_handler+0x20/0x20 [ 429.623257][T10687] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 429.629202][T10687] ? __debug_object_init+0xed/0x440 [ 429.634441][T10687] ? memset+0x1e/0x40 [ 429.638457][T10687] ? __hrtimer_init+0x189/0x270 [ 429.643338][T10687] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 429.649093][T10687] ? memcpy+0x3c/0x60 [ 429.653118][T10687] hwsim_new_radio_nl+0xab7/0xc90 [ 429.658384][T10687] genl_family_rcv_msg_doit+0x22f/0x350 [ 429.663982][T10687] ? end_current_label_crit_section+0x170/0x170 [ 429.670279][T10687] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 429.676227][T10687] ? bpf_lsm_capable+0x5/0x10 [ 429.680953][T10687] ? security_capable+0x85/0xb0 [ 429.685876][T10687] genl_rcv_msg+0x601/0x790 [ 429.690443][T10687] ? genl_bind+0x360/0x360 [ 429.694927][T10687] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 429.701417][T10687] netlink_rcv_skb+0x1ef/0x440 [ 429.706234][T10687] ? genl_bind+0x360/0x360 [ 429.710704][T10687] ? netlink_ack+0x1160/0x1160 [ 429.715522][T10687] ? down_read+0x1a8/0x2d0 [ 429.719979][T10687] genl_rcv+0x24/0x40 [ 429.724002][T10687] netlink_unicast+0x7ad/0x920 [ 429.728834][T10687] netlink_sendmsg+0x8ad/0xbd0 [ 429.733649][T10687] ? netlink_getsockopt+0x550/0x550 [ 429.738889][T10687] ? apparmor_socket_sendmsg+0x8a/0x330 [ 429.744475][T10687] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 429.749777][T10687] ? security_socket_sendmsg+0x7c/0xa0 [ 429.755267][T10687] ? netlink_getsockopt+0x550/0x550 [ 429.760510][T10687] ____sys_sendmsg+0x5ed/0x9a0 [ 429.765458][T10687] ? __sys_sendmsg_sock+0x30/0x30 [ 429.770608][T10687] ? __import_iovec+0x306/0x510 [ 429.775510][T10687] ? import_iovec+0x6f/0xa0 [ 429.780065][T10687] ___sys_sendmsg+0x2a2/0x360 [ 429.784800][T10687] ? __sys_sendmsg+0x2a0/0x2a0 [ 429.789752][T10687] __se_sys_sendmsg+0x1c3/0x2b0 [ 429.794649][T10687] ? __x64_sys_sendmsg+0x80/0x80 [ 429.799643][T10687] ? lockdep_hardirqs_on+0x94/0x140 [ 429.804914][T10687] do_syscall_64+0x4c/0xa0 [ 429.809380][T10687] ? clear_bhb_loop+0x60/0xb0 [ 429.814103][T10687] ? clear_bhb_loop+0x60/0xb0 [ 429.818836][T10687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.824786][T10687] RIP: 0033:0x7f89c279e159 [ 429.829247][T10687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.848895][T10687] RSP: 002b:00007f89c09b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.857364][T10687] RAX: ffffffffffffffda RBX: 00007f89c2a26180 RCX: 00007f89c279e159 [ 429.865391][T10687] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 429.873415][T10687] RBP: 00007f89c283506b R08: 0000000000000000 R09: 0000000000000000 [ 429.881428][T10687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.889449][T10687] R13: 00007f89c2a26218 R14: 00007f89c2a26180 R15: 00007ffd2e28f3d8 [ 429.897493][T10687] [ 430.497512][T10716] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1437'. [ 431.183282][T10734] netlink: 'syz.0.1438': attribute type 10 has an invalid length. [ 431.219417][T10736] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1439'. [ 431.382389][T10734] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 431.496284][T10737] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1438'. [ 431.601866][T10737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.624877][T10737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.637763][T10737] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 431.654333][T10737] bond0 (unregistering): Released all slaves [ 431.664912][T10736] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 431.682380][T10736] CPU: 0 PID: 10736 Comm: syz.3.1439 Not tainted syzkaller #0 [ 431.689918][T10736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.700016][T10736] Call Trace: [ 431.703325][T10736] [ 431.706288][T10736] dump_stack_lvl+0x188/0x24e [ 431.711012][T10736] ? show_regs_print_info+0x12/0x12 [ 431.716261][T10736] ? load_image+0x410/0x410 [ 431.720834][T10736] sysfs_warn_dup+0x8a/0xa0 [ 431.725392][T10736] sysfs_do_create_link_sd+0xc0/0x110 [ 431.730852][T10736] device_add+0x83b/0x1050 [ 431.735354][T10736] wiphy_register+0x1d8b/0x2aa0 [ 431.740287][T10736] ? cfg80211_event_work+0x40/0x40 [ 431.745445][T10736] ? minstrel_ht_alloc+0x894/0xa20 [ 431.750610][T10736] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 431.756738][T10736] ieee80211_register_hw+0x2d48/0x39f0 [ 431.762270][T10736] ? ieee80211_register_hw+0xf41/0x39f0 [ 431.767940][T10736] ? ieee80211_register_hw+0xf41/0x39f0 [ 431.773635][T10736] ? ieee80211_tasklet_handler+0x20/0x20 [ 431.779406][T10736] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 431.785364][T10736] ? __debug_object_init+0xed/0x440 [ 431.790617][T10736] ? memset+0x1e/0x40 [ 431.794682][T10736] ? __hrtimer_init+0x189/0x270 [ 431.799578][T10736] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 431.805367][T10736] ? memcpy+0x3c/0x60 [ 431.809396][T10736] hwsim_new_radio_nl+0xab7/0xc90 [ 431.814489][T10736] genl_family_rcv_msg_doit+0x22f/0x350 [ 431.820084][T10736] ? end_current_label_crit_section+0x170/0x170 [ 431.826474][T10736] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 431.832422][T10736] ? bpf_lsm_capable+0x5/0x10 [ 431.837141][T10736] ? security_capable+0x85/0xb0 [ 431.842048][T10736] genl_rcv_msg+0x601/0x790 [ 431.846628][T10736] ? genl_bind+0x360/0x360 [ 431.851107][T10736] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 431.857695][T10736] netlink_rcv_skb+0x1ef/0x440 [ 431.862524][T10736] ? genl_bind+0x360/0x360 [ 431.867014][T10736] ? netlink_ack+0x1160/0x1160 [ 431.871818][T10736] ? down_read+0x1a8/0x2d0 [ 431.876352][T10736] genl_rcv+0x24/0x40 [ 431.880384][T10736] netlink_unicast+0x7ad/0x920 [ 431.885208][T10736] netlink_sendmsg+0x8ad/0xbd0 [ 431.890026][T10736] ? netlink_getsockopt+0x550/0x550 [ 431.895280][T10736] ? apparmor_socket_sendmsg+0x8a/0x330 [ 431.900874][T10736] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 431.906193][T10736] ? security_socket_sendmsg+0x7c/0xa0 [ 431.911694][T10736] ? netlink_getsockopt+0x550/0x550 [ 431.917016][T10736] ____sys_sendmsg+0x5ed/0x9a0 [ 431.921914][T10736] ? __sys_sendmsg_sock+0x30/0x30 [ 431.926974][T10736] ? __import_iovec+0x306/0x510 [ 431.931876][T10736] ? import_iovec+0x6f/0xa0 [ 431.936429][T10736] ___sys_sendmsg+0x2a2/0x360 [ 431.941158][T10736] ? __sys_sendmsg+0x2a0/0x2a0 [ 431.946025][T10736] __se_sys_sendmsg+0x1c3/0x2b0 [ 431.950912][T10736] ? __x64_sys_sendmsg+0x80/0x80 [ 431.955906][T10736] ? lockdep_hardirqs_on+0x94/0x140 [ 431.961148][T10736] do_syscall_64+0x4c/0xa0 [ 431.965602][T10736] ? clear_bhb_loop+0x60/0xb0 [ 431.970316][T10736] ? clear_bhb_loop+0x60/0xb0 [ 431.975027][T10736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.980961][T10736] RIP: 0033:0x7fb56059e159 [ 431.985406][T10736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.005128][T10736] RSP: 002b:00007fb55e7d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.013571][T10736] RAX: ffffffffffffffda RBX: 00007fb560826180 RCX: 00007fb56059e159 [ 432.021572][T10736] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 432.029574][T10736] RBP: 00007fb56063506b R08: 0000000000000000 R09: 0000000000000000 [ 432.037661][T10736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.045663][T10736] R13: 00007fb560826218 R14: 00007fb560826180 R15: 00007ffe4d529a88 [ 432.053686][T10736] [ 432.175885][T10750] device syzkaller0 entered promiscuous mode [ 432.244824][T10758] netlink: 'syz.4.1442': attribute type 9 has an invalid length. [ 433.694925][T10779] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1447'. [ 433.874012][T10782] netlink: 'syz.2.1447': attribute type 29 has an invalid length. [ 435.390934][T10762] netlink: 'syz.3.1445': attribute type 21 has an invalid length. [ 435.399063][T10762] netlink: 'syz.3.1445': attribute type 6 has an invalid length. [ 435.407155][T10762] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1445'. [ 435.424140][T10782] netlink: 'syz.2.1447': attribute type 29 has an invalid length. [ 435.460673][T10779] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 435.470617][T10779] CPU: 0 PID: 10779 Comm: syz.2.1447 Not tainted syzkaller #0 [ 435.478136][T10779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.488409][T10779] Call Trace: [ 435.491737][T10779] [ 435.494792][T10779] dump_stack_lvl+0x188/0x24e [ 435.499524][T10779] ? show_regs_print_info+0x12/0x12 [ 435.504775][T10779] ? load_image+0x410/0x410 [ 435.509363][T10779] sysfs_warn_dup+0x8a/0xa0 [ 435.514009][T10779] sysfs_do_create_link_sd+0xc0/0x110 [ 435.519604][T10779] device_add+0x83b/0x1050 [ 435.524077][T10779] wiphy_register+0x1d8b/0x2aa0 [ 435.529087][T10779] ? cfg80211_event_work+0x40/0x40 [ 435.534249][T10779] ? minstrel_ht_alloc+0x894/0xa20 [ 435.539416][T10779] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 435.545547][T10779] ieee80211_register_hw+0x2d48/0x39f0 [ 435.551068][T10779] ? ieee80211_register_hw+0xf41/0x39f0 [ 435.556663][T10779] ? ieee80211_register_hw+0xf41/0x39f0 [ 435.562260][T10779] ? ieee80211_tasklet_handler+0x20/0x20 [ 435.568006][T10779] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 435.573934][T10779] ? __debug_object_init+0xed/0x440 [ 435.579178][T10779] ? memset+0x1e/0x40 [ 435.583218][T10779] ? __hrtimer_init+0x189/0x270 [ 435.588090][T10779] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 435.593840][T10779] ? memcpy+0x3c/0x60 [ 435.597839][T10779] hwsim_new_radio_nl+0xab7/0xc90 [ 435.603417][T10779] genl_family_rcv_msg_doit+0x22f/0x350 [ 435.608981][T10779] ? end_current_label_crit_section+0x170/0x170 [ 435.615266][T10779] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 435.621267][T10779] ? bpf_lsm_capable+0x5/0x10 [ 435.625965][T10779] ? security_capable+0x85/0xb0 [ 435.630865][T10779] genl_rcv_msg+0x601/0x790 [ 435.635392][T10779] ? genl_bind+0x360/0x360 [ 435.639818][T10779] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 435.646177][T10779] netlink_rcv_skb+0x1ef/0x440 [ 435.650955][T10779] ? genl_bind+0x360/0x360 [ 435.655387][T10779] ? netlink_ack+0x1160/0x1160 [ 435.660197][T10779] ? down_read+0x1a8/0x2d0 [ 435.664724][T10779] genl_rcv+0x24/0x40 [ 435.668816][T10779] netlink_unicast+0x7ad/0x920 [ 435.673605][T10779] netlink_sendmsg+0x8ad/0xbd0 [ 435.678398][T10779] ? netlink_getsockopt+0x550/0x550 [ 435.683610][T10779] ? apparmor_socket_sendmsg+0x8a/0x330 [ 435.689184][T10779] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 435.694489][T10779] ? security_socket_sendmsg+0x7c/0xa0 [ 435.699982][T10779] ? netlink_getsockopt+0x550/0x550 [ 435.705196][T10779] ____sys_sendmsg+0x5ed/0x9a0 [ 435.710166][T10779] ? __sys_sendmsg_sock+0x30/0x30 [ 435.715202][T10779] ? __import_iovec+0x306/0x510 [ 435.720087][T10779] ? import_iovec+0x6f/0xa0 [ 435.724610][T10779] ___sys_sendmsg+0x2a2/0x360 [ 435.729315][T10779] ? __sys_sendmsg+0x2a0/0x2a0 [ 435.734140][T10779] __se_sys_sendmsg+0x1c3/0x2b0 [ 435.739006][T10779] ? __x64_sys_sendmsg+0x80/0x80 [ 435.744004][T10779] ? lockdep_hardirqs_on+0x94/0x140 [ 435.749221][T10779] do_syscall_64+0x4c/0xa0 [ 435.753644][T10779] ? clear_bhb_loop+0x60/0xb0 [ 435.758329][T10779] ? clear_bhb_loop+0x60/0xb0 [ 435.763015][T10779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.768931][T10779] RIP: 0033:0x7fa5a399e159 [ 435.773359][T10779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.792975][T10779] RSP: 002b:00007fa5a1791028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.801402][T10779] RAX: ffffffffffffffda RBX: 00007fa5a3c26270 RCX: 00007fa5a399e159 [ 435.809385][T10779] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 435.817371][T10779] RBP: 00007fa5a3a3506b R08: 0000000000000000 R09: 0000000000000000 [ 435.825350][T10779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.833334][T10779] R13: 00007fa5a3c26308 R14: 00007fa5a3c26270 R15: 00007ffdd17ad458 [ 435.841341][T10779] [ 436.235408][T10796] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1448'. [ 436.272839][T10802] netlink: 87536 bytes leftover after parsing attributes in process `syz.4.1450'. [ 436.303460][T10796] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 436.354817][T10796] CPU: 1 PID: 10796 Comm: syz.1.1448 Not tainted syzkaller #0 [ 436.362366][T10796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 436.372555][T10796] Call Trace: [ 436.375880][T10796] [ 436.378885][T10796] dump_stack_lvl+0x188/0x24e [ 436.383604][T10796] ? show_regs_print_info+0x12/0x12 [ 436.389081][T10796] ? load_image+0x410/0x410 [ 436.393611][T10796] sysfs_warn_dup+0x8a/0xa0 [ 436.398130][T10796] sysfs_do_create_link_sd+0xc0/0x110 [ 436.403524][T10796] device_add+0x83b/0x1050 [ 436.407961][T10796] wiphy_register+0x1d8b/0x2aa0 [ 436.412840][T10796] ? cfg80211_event_work+0x40/0x40 [ 436.417963][T10796] ? minstrel_ht_alloc+0x894/0xa20 [ 436.423097][T10796] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 436.429269][T10796] ieee80211_register_hw+0x2d48/0x39f0 [ 436.434753][T10796] ? ieee80211_register_hw+0xf41/0x39f0 [ 436.440304][T10796] ? ieee80211_register_hw+0xf41/0x39f0 [ 436.445866][T10796] ? ieee80211_tasklet_handler+0x20/0x20 [ 436.451507][T10796] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 436.457510][T10796] ? __debug_object_init+0xed/0x440 [ 436.462727][T10796] ? memset+0x1e/0x40 [ 436.466804][T10796] ? __hrtimer_init+0x189/0x270 [ 436.471716][T10796] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 436.477567][T10796] ? memcpy+0x3c/0x60 [ 436.481656][T10796] hwsim_new_radio_nl+0xab7/0xc90 [ 436.486713][T10796] genl_family_rcv_msg_doit+0x22f/0x350 [ 436.492273][T10796] ? end_current_label_crit_section+0x170/0x170 [ 436.498536][T10796] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 436.504464][T10796] ? bpf_lsm_capable+0x5/0x10 [ 436.509154][T10796] ? security_capable+0x85/0xb0 [ 436.514108][T10796] genl_rcv_msg+0x601/0x790 [ 436.518643][T10796] ? genl_bind+0x360/0x360 [ 436.523121][T10796] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 436.529482][T10796] netlink_rcv_skb+0x1ef/0x440 [ 436.534281][T10796] ? genl_bind+0x360/0x360 [ 436.538730][T10796] ? netlink_ack+0x1160/0x1160 [ 436.543524][T10796] ? down_read+0x1a8/0x2d0 [ 436.547964][T10796] genl_rcv+0x24/0x40 [ 436.551964][T10796] netlink_unicast+0x7ad/0x920 [ 436.556755][T10796] netlink_sendmsg+0x8ad/0xbd0 [ 436.561548][T10796] ? netlink_getsockopt+0x550/0x550 [ 436.566765][T10796] ? apparmor_socket_sendmsg+0x8a/0x330 [ 436.572369][T10796] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 436.577695][T10796] ? security_socket_sendmsg+0x7c/0xa0 [ 436.583204][T10796] ? netlink_getsockopt+0x550/0x550 [ 436.588442][T10796] ____sys_sendmsg+0x5ed/0x9a0 [ 436.593231][T10796] ? __sys_sendmsg_sock+0x30/0x30 [ 436.598270][T10796] ? __import_iovec+0x306/0x510 [ 436.603261][T10796] ? import_iovec+0x6f/0xa0 [ 436.607784][T10796] ___sys_sendmsg+0x2a2/0x360 [ 436.612476][T10796] ? __sys_sendmsg+0x2a0/0x2a0 [ 436.617307][T10796] __se_sys_sendmsg+0x1c3/0x2b0 [ 436.622171][T10796] ? __x64_sys_sendmsg+0x80/0x80 [ 436.627145][T10796] ? lockdep_hardirqs_on+0x94/0x140 [ 436.632363][T10796] do_syscall_64+0x4c/0xa0 [ 436.636802][T10796] ? clear_bhb_loop+0x60/0xb0 [ 436.641511][T10796] ? clear_bhb_loop+0x60/0xb0 [ 436.646209][T10796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.652137][T10796] RIP: 0033:0x7fa67679e159 [ 436.656568][T10796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.676298][T10796] RSP: 002b:00007fa6745b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.684754][T10796] RAX: ffffffffffffffda RBX: 00007fa676a26270 RCX: 00007fa67679e159 [ 436.692824][T10796] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 436.700813][T10796] RBP: 00007fa67683506b R08: 0000000000000000 R09: 0000000000000000 [ 436.708794][T10796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.716778][T10796] R13: 00007fa676a26308 R14: 00007fa676a26270 R15: 00007ffc6e34b308 [ 436.724791][T10796] [ 437.183663][T10819] netlink: 'syz.0.1454': attribute type 10 has an invalid length. [ 437.239602][T10819] device macvlan0 entered promiscuous mode [ 437.645807][T10815] device syzkaller0 entered promiscuous mode [ 437.657784][T10820] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1454'. [ 437.854334][T10834] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1458'. [ 437.970113][T10834] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 438.029011][T10834] CPU: 0 PID: 10834 Comm: syz.4.1458 Not tainted syzkaller #0 [ 438.036557][T10834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.046744][T10834] Call Trace: [ 438.050053][T10834] [ 438.053016][T10834] dump_stack_lvl+0x188/0x24e [ 438.057751][T10834] ? show_regs_print_info+0x12/0x12 [ 438.063012][T10834] ? load_image+0x410/0x410 [ 438.067581][T10834] sysfs_warn_dup+0x8a/0xa0 [ 438.072139][T10834] sysfs_do_create_link_sd+0xc0/0x110 [ 438.077564][T10834] device_add+0x83b/0x1050 [ 438.082033][T10834] wiphy_register+0x1d8b/0x2aa0 [ 438.086945][T10834] ? cfg80211_event_work+0x40/0x40 [ 438.092117][T10834] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 438.098411][T10834] ? ieee80211_register_hw+0x2914/0x39f0 [ 438.104089][T10834] ieee80211_register_hw+0x2d48/0x39f0 [ 438.109608][T10834] ? ieee80211_register_hw+0xf41/0x39f0 [ 438.115194][T10834] ? ieee80211_register_hw+0xf41/0x39f0 [ 438.120832][T10834] ? ieee80211_tasklet_handler+0x20/0x20 [ 438.126537][T10834] ? __hrtimer_init+0xa7/0x270 [ 438.131351][T10834] ? __sanitizer_cov_trace_pc+0x3e/0x60 [ 438.137049][T10834] ? __hrtimer_init+0x189/0x270 [ 438.141948][T10834] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 438.147732][T10834] ? memcpy+0x3c/0x60 [ 438.151768][T10834] hwsim_new_radio_nl+0xab7/0xc90 [ 438.156869][T10834] genl_family_rcv_msg_doit+0x22f/0x350 [ 438.162482][T10834] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 438.168420][T10834] genl_rcv_msg+0x601/0x790 [ 438.172953][T10834] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 438.179137][T10834] ? genl_bind+0x360/0x360 [ 438.183657][T10834] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 438.190008][T10834] ? lock_acquire+0x225/0x4a0 [ 438.194712][T10834] netlink_rcv_skb+0x1ef/0x440 [ 438.199486][T10834] ? genl_bind+0x360/0x360 [ 438.203914][T10834] ? netlink_ack+0x1160/0x1160 [ 438.208703][T10834] ? down_read+0x1a8/0x2d0 [ 438.213138][T10834] genl_rcv+0x24/0x40 [ 438.217138][T10834] netlink_unicast+0x7ad/0x920 [ 438.221921][T10834] netlink_sendmsg+0x8ad/0xbd0 [ 438.226701][T10834] ? lockdep_hardirqs_on+0x94/0x140 [ 438.231936][T10834] ? netlink_getsockopt+0x550/0x550 [ 438.237150][T10834] ? bpf_lsm_socket_accept+0x10/0x10 [ 438.242453][T10834] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 438.247835][T10834] ? security_socket_sendmsg+0x7c/0xa0 [ 438.253311][T10834] ? netlink_getsockopt+0x550/0x550 [ 438.258522][T10834] ____sys_sendmsg+0x5ed/0x9a0 [ 438.263308][T10834] ? __sys_sendmsg_sock+0x30/0x30 [ 438.268360][T10834] ___sys_sendmsg+0x2a2/0x360 [ 438.273052][T10834] ? __sys_sendmsg+0x2a0/0x2a0 [ 438.277873][T10834] __se_sys_sendmsg+0x1c3/0x2b0 [ 438.282819][T10834] ? perf_trace_preemptirq_template+0x268/0x320 [ 438.289075][T10834] ? __x64_sys_sendmsg+0x80/0x80 [ 438.294038][T10834] ? lockdep_hardirqs_on+0x94/0x140 [ 438.299254][T10834] do_syscall_64+0x4c/0xa0 [ 438.303682][T10834] ? clear_bhb_loop+0x60/0xb0 [ 438.308372][T10834] ? clear_bhb_loop+0x60/0xb0 [ 438.313058][T10834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.318977][T10834] RIP: 0033:0x7f89c279e159 [ 438.323409][T10834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.343029][T10834] RSP: 002b:00007f89c09d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.351456][T10834] RAX: ffffffffffffffda RBX: 00007f89c2a26090 RCX: 00007f89c279e159 [ 438.359438][T10834] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 438.367430][T10834] RBP: 00007f89c283506b R08: 0000000000000000 R09: 0000000000000000 [ 438.375588][T10834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.383671][T10834] R13: 00007f89c2a26128 R14: 00007f89c2a26090 R15: 00007ffd2e28f3d8 [ 438.391762][T10834] [ 438.453767][T10840] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1457'. [ 439.989875][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.996356][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.110863][T10840] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 441.125968][T10840] CPU: 1 PID: 10840 Comm: syz.3.1457 Not tainted syzkaller #0 [ 441.133483][T10840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 441.143537][T10840] Call Trace: [ 441.146816][T10840] [ 441.149785][T10840] dump_stack_lvl+0x188/0x24e [ 441.154481][T10840] ? show_regs_print_info+0x12/0x12 [ 441.159678][T10840] ? load_image+0x410/0x410 [ 441.164205][T10840] sysfs_warn_dup+0x8a/0xa0 [ 441.168712][T10840] sysfs_do_create_link_sd+0xc0/0x110 [ 441.174110][T10840] device_add+0x83b/0x1050 [ 441.178578][T10840] wiphy_register+0x1d8b/0x2aa0 [ 441.183502][T10840] ? cfg80211_event_work+0x40/0x40 [ 441.188650][T10840] ? minstrel_ht_alloc+0x894/0xa20 [ 441.193804][T10840] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 441.199920][T10840] ieee80211_register_hw+0x2d48/0x39f0 [ 441.205524][T10840] ? ieee80211_register_hw+0xf41/0x39f0 [ 441.211105][T10840] ? ieee80211_register_hw+0xf41/0x39f0 [ 441.216693][T10840] ? ieee80211_tasklet_handler+0x20/0x20 [ 441.222362][T10840] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 441.228312][T10840] ? __debug_object_init+0xed/0x440 [ 441.233558][T10840] ? memset+0x1e/0x40 [ 441.237581][T10840] ? __hrtimer_init+0x189/0x270 [ 441.242473][T10840] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 441.248239][T10840] ? memcpy+0x3c/0x60 [ 441.252240][T10840] hwsim_new_radio_nl+0xab7/0xc90 [ 441.257294][T10840] genl_family_rcv_msg_doit+0x22f/0x350 [ 441.262851][T10840] ? end_current_label_crit_section+0x170/0x170 [ 441.269110][T10840] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 441.275021][T10840] ? bpf_lsm_capable+0x5/0x10 [ 441.279711][T10840] ? security_capable+0x85/0xb0 [ 441.284581][T10840] genl_rcv_msg+0x601/0x790 [ 441.289120][T10840] ? genl_bind+0x360/0x360 [ 441.293549][T10840] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 441.299911][T10840] netlink_rcv_skb+0x1ef/0x440 [ 441.304692][T10840] ? genl_bind+0x360/0x360 [ 441.309128][T10840] ? netlink_ack+0x1160/0x1160 [ 441.313908][T10840] ? down_read+0x1a8/0x2d0 [ 441.318525][T10840] genl_rcv+0x24/0x40 [ 441.322675][T10840] netlink_unicast+0x7ad/0x920 [ 441.327485][T10840] netlink_sendmsg+0x8ad/0xbd0 [ 441.332286][T10840] ? netlink_getsockopt+0x550/0x550 [ 441.337506][T10840] ? apparmor_socket_sendmsg+0x8a/0x330 [ 441.343077][T10840] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 441.348377][T10840] ? security_socket_sendmsg+0x7c/0xa0 [ 441.353855][T10840] ? netlink_getsockopt+0x550/0x550 [ 441.359075][T10840] ____sys_sendmsg+0x5ed/0x9a0 [ 441.363866][T10840] ? __sys_sendmsg_sock+0x30/0x30 [ 441.368905][T10840] ? __import_iovec+0x306/0x510 [ 441.373782][T10840] ? import_iovec+0x6f/0xa0 [ 441.378303][T10840] ___sys_sendmsg+0x2a2/0x360 [ 441.382993][T10840] ? __sys_sendmsg+0x2a0/0x2a0 [ 441.387788][T10840] ? ktime_get+0x7b/0x270 [ 441.392156][T10840] __se_sys_sendmsg+0x1c3/0x2b0 [ 441.397021][T10840] ? __x64_sys_sendmsg+0x80/0x80 [ 441.401980][T10840] ? syscall_enter_from_user_mode+0x2a/0x80 [ 441.407892][T10840] do_syscall_64+0x4c/0xa0 [ 441.412407][T10840] ? clear_bhb_loop+0x60/0xb0 [ 441.417104][T10840] ? clear_bhb_loop+0x60/0xb0 [ 441.421825][T10840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.427739][T10840] RIP: 0033:0x7fb56059e159 [ 441.432171][T10840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.451788][T10840] RSP: 002b:00007fb55e7d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.460229][T10840] RAX: ffffffffffffffda RBX: 00007fb560826180 RCX: 00007fb56059e159 [ 441.468235][T10840] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 441.476217][T10840] RBP: 00007fb56063506b R08: 0000000000000000 R09: 0000000000000000 [ 441.484196][T10840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.492180][T10840] R13: 00007fb560826218 R14: 00007fb560826180 R15: 00007ffe4d529a88 [ 441.500176][T10840] [ 441.544557][T10874] netlink: 'syz.4.1466': attribute type 1 has an invalid length. [ 441.557378][T10874] netlink: 'syz.4.1466': attribute type 4 has an invalid length. [ 441.565782][T10874] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1466'. [ 442.595844][T10915] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1472'. [ 442.842465][T10920] FAULT_INJECTION: forcing a failure. [ 442.842465][T10920] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 442.861255][T10920] CPU: 1 PID: 10920 Comm: syz.3.1474 Not tainted syzkaller #0 [ 442.868875][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.878966][T10920] Call Trace: [ 442.882361][T10920] [ 442.885320][T10920] dump_stack_lvl+0x188/0x24e [ 442.890041][T10920] ? show_regs_print_info+0x12/0x12 [ 442.895293][T10920] ? load_image+0x410/0x410 [ 442.899838][T10920] ? __lock_acquire+0x7c40/0x7c40 [ 442.904907][T10920] ? ktime_get+0x7b/0x270 [ 442.909284][T10920] should_fail_ex+0x390/0x4c0 [ 442.914134][T10920] _copy_from_user+0x2c/0x170 [ 442.918935][T10920] __sys_bpf+0x2ea/0x780 [ 442.923299][T10920] ? bpf_link_show_fdinfo+0x380/0x380 [ 442.928738][T10920] ? lock_chain_count+0x20/0x20 [ 442.933628][T10920] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 442.939649][T10920] __x64_sys_bpf+0x78/0x90 [ 442.944105][T10920] do_syscall_64+0x4c/0xa0 [ 442.948553][T10920] ? clear_bhb_loop+0x60/0xb0 [ 442.953268][T10920] ? clear_bhb_loop+0x60/0xb0 [ 442.958027][T10920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.963940][T10920] RIP: 0033:0x7fb56059e159 [ 442.968371][T10920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.988012][T10920] RSP: 002b:00007fb561384028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.996439][T10920] RAX: ffffffffffffffda RBX: 00007fb560825fa0 RCX: 00007fb56059e159 [ 443.004434][T10920] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000005 [ 443.012436][T10920] RBP: 00007fb561384090 R08: 0000000000000000 R09: 0000000000000000 [ 443.020425][T10920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.028424][T10920] R13: 00007fb560826038 R14: 00007fb560825fa0 R15: 00007ffe4d529a88 [ 443.036623][T10920] [ 443.955025][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 443.963997][T10931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.047710][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1477'. [ 444.080460][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 444.111753][T10932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.420177][T10951] device syzkaller0 entered promiscuous mode [ 444.441650][T10954] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1480'. [ 444.643090][T10961] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1481'. [ 444.771056][T10954] device bridge_slave_0 left promiscuous mode [ 444.778026][T10954] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.798075][T10958] netlink: 'syz.3.1481': attribute type 10 has an invalid length. [ 447.878739][T11009] netlink: 'syz.2.1491': attribute type 3 has an invalid length. [ 447.940389][T11009] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1491'. [ 448.333955][T11030] netlink: 'syz.2.1497': attribute type 39 has an invalid length. [ 448.408663][T11030] device macvlan0 entered promiscuous mode [ 448.433398][T11010] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1492'. [ 448.456338][T11034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 448.463674][T11034] IPv6: NLM_F_CREATE should be set when creating new route [ 448.471039][T11034] IPv6: NLM_F_CREATE should be set when creating new route [ 448.478327][T11034] IPv6: NLM_F_CREATE should be set when creating new route [ 449.537521][T11065] netlink: 'syz.3.1506': attribute type 9 has an invalid length. [ 449.556192][T11065] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1506'. [ 450.255004][T11088] netlink: 'syz.3.1514': attribute type 10 has an invalid length. [ 450.280204][T11088] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 451.176421][T11128] can: request_module (can-proto-0) failed. [ 452.009281][T11162] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1528'. [ 452.178477][T11165] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1529'. [ 454.053323][T11165] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 454.063502][T11175] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1530'. [ 454.091512][T11165] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 454.102595][T11165] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 454.401572][T11185] netlink: 'syz.1.1533': attribute type 17 has an invalid length. [ 454.823053][T11191] netlink: 'syz.2.1536': attribute type 1 has an invalid length. [ 454.874609][T11191] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1536'. [ 455.878258][T11228] netlink: 'syz.0.1544': attribute type 3 has an invalid length. [ 455.968171][T11228] netlink: 'syz.0.1544': attribute type 1 has an invalid length. [ 456.064625][T11228] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.1544'. [ 456.421370][T11241] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1548'. [ 456.527858][T11242] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1548'. [ 458.608447][T11261] netlink: 'syz.1.1553': attribute type 10 has an invalid length. [ 458.657459][T11261] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.713526][T11261] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.817685][T11261] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.953276][T11261] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.865557][T11295] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1558'. [ 459.986224][T11295] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 460.058049][T11295] CPU: 1 PID: 11295 Comm: syz.0.1558 Not tainted syzkaller #0 [ 460.065592][T11295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.075853][T11295] Call Trace: [ 460.079155][T11295] [ 460.082122][T11295] dump_stack_lvl+0x188/0x24e [ 460.086851][T11295] ? show_regs_print_info+0x12/0x12 [ 460.092089][T11295] ? load_image+0x410/0x410 [ 460.096741][T11295] sysfs_warn_dup+0x8a/0xa0 [ 460.101282][T11295] sysfs_do_create_link_sd+0xc0/0x110 [ 460.106699][T11295] device_add+0x83b/0x1050 [ 460.111159][T11295] wiphy_register+0x1d8b/0x2aa0 [ 460.116074][T11295] ? cfg80211_event_work+0x40/0x40 [ 460.121224][T11295] ? minstrel_ht_alloc+0x894/0xa20 [ 460.126473][T11295] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 460.132671][T11295] ieee80211_register_hw+0x2d48/0x39f0 [ 460.138191][T11295] ? ieee80211_register_hw+0xf41/0x39f0 [ 460.143939][T11295] ? ieee80211_register_hw+0xf41/0x39f0 [ 460.149520][T11295] ? ieee80211_tasklet_handler+0x20/0x20 [ 460.155185][T11295] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 460.161133][T11295] ? __debug_object_init+0xed/0x440 [ 460.166389][T11295] ? memset+0x1e/0x40 [ 460.170405][T11295] ? __hrtimer_init+0x189/0x270 [ 460.175291][T11295] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 460.181082][T11295] ? memcpy+0x3c/0x60 [ 460.185113][T11295] hwsim_new_radio_nl+0xab7/0xc90 [ 460.190204][T11295] genl_family_rcv_msg_doit+0x22f/0x350 [ 460.195802][T11295] ? end_current_label_crit_section+0x170/0x170 [ 460.202090][T11295] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 460.208039][T11295] ? bpf_lsm_capable+0x5/0x10 [ 460.212757][T11295] ? security_capable+0x85/0xb0 [ 460.217664][T11295] genl_rcv_msg+0x601/0x790 [ 460.222231][T11295] ? genl_bind+0x360/0x360 [ 460.226684][T11295] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 460.233165][T11295] netlink_rcv_skb+0x1ef/0x440 [ 460.238059][T11295] ? genl_bind+0x360/0x360 [ 460.242521][T11295] ? netlink_ack+0x1160/0x1160 [ 460.247342][T11295] ? down_read+0x1a8/0x2d0 [ 460.251809][T11295] genl_rcv+0x24/0x40 [ 460.255911][T11295] netlink_unicast+0x7ad/0x920 [ 460.260723][T11295] netlink_sendmsg+0x8ad/0xbd0 [ 460.265532][T11295] ? netlink_getsockopt+0x550/0x550 [ 460.270768][T11295] ? apparmor_socket_sendmsg+0x8a/0x330 [ 460.276370][T11295] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 460.281705][T11295] ? security_socket_sendmsg+0x7c/0xa0 [ 460.287227][T11295] ? netlink_getsockopt+0x550/0x550 [ 460.292490][T11295] ____sys_sendmsg+0x5ed/0x9a0 [ 460.297397][T11295] ? __sys_sendmsg_sock+0x30/0x30 [ 460.302460][T11295] ? __import_iovec+0x306/0x510 [ 460.307369][T11295] ? import_iovec+0x6f/0xa0 [ 460.312018][T11295] ___sys_sendmsg+0x2a2/0x360 [ 460.316761][T11295] ? __sys_sendmsg+0x2a0/0x2a0 [ 460.321587][T11295] ? trace_call_bpf+0xbf/0x6b0 [ 460.326438][T11295] __se_sys_sendmsg+0x1c3/0x2b0 [ 460.331359][T11295] ? ct_nmi_exit+0x145/0x1c0 [ 460.335995][T11295] ? __x64_sys_sendmsg+0x80/0x80 [ 460.340991][T11295] ? lockdep_hardirqs_on+0x94/0x140 [ 460.346341][T11295] do_syscall_64+0x4c/0xa0 [ 460.350803][T11295] ? clear_bhb_loop+0x60/0xb0 [ 460.355629][T11295] ? clear_bhb_loop+0x60/0xb0 [ 460.360360][T11295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.366309][T11295] RIP: 0033:0x7ffa8db9e159 [ 460.370926][T11295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.390747][T11295] RSP: 002b:00007ffa8bdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.399187][T11295] RAX: ffffffffffffffda RBX: 00007ffa8de26180 RCX: 00007ffa8db9e159 [ 460.407189][T11295] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 460.415193][T11295] RBP: 00007ffa8dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 460.423187][T11295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.431177][T11295] R13: 00007ffa8de26218 R14: 00007ffa8de26180 R15: 00007ffcf759f338 [ 460.439187][T11295] [ 465.287644][T11400] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1584'. [ 465.506034][T11403] netlink: 'syz.0.1586': attribute type 1 has an invalid length. [ 465.580653][T11403] netlink: 'syz.0.1586': attribute type 4 has an invalid length. [ 465.643607][T11403] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1586'. [ 465.661106][T11409] netlink: 'syz.0.1586': attribute type 16 has an invalid length. [ 465.715645][T11407] netlink: 'syz.0.1586': attribute type 1 has an invalid length. [ 465.729471][T11409] netlink: 'syz.0.1586': attribute type 3 has an invalid length. [ 465.804541][T11409] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1586'. [ 465.835105][T11407] netlink: 'syz.0.1586': attribute type 4 has an invalid length. [ 465.890963][T11407] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1586'. [ 466.243285][T11430] netlink: 'syz.1.1590': attribute type 2 has an invalid length. [ 466.392303][T11431] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.1591'. [ 466.468749][T11431] netlink: zone id is out of range [ 466.474079][T11431] netlink: zone id is out of range [ 466.571478][T11431] netlink: zone id is out of range [ 466.674179][T11431] netlink: get zone limit has 8 unknown bytes [ 467.263639][T11440] device syzkaller0 entered promiscuous mode [ 467.637004][T11445] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1595'. [ 467.690636][T11445] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 467.766588][T11445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.871424][T11446] netlink: 'syz.2.1595': attribute type 4 has an invalid length. [ 467.925191][T11446] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1595'. [ 467.961960][T11446] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 469.083948][T11473] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1603'. [ 471.403917][T11452] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1597'. [ 471.419940][T11473] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1603'. [ 471.635196][T11482] netlink: 'syz.4.1604': attribute type 21 has an invalid length. [ 471.664619][T11482] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1604'. [ 471.723251][T11485] netlink: 'syz.3.1606': attribute type 29 has an invalid length. [ 471.932548][T11495] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1606'. [ 472.071753][T11485] netlink: 'syz.3.1606': attribute type 29 has an invalid length. [ 472.097238][T11502] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1608'. [ 472.440459][T11502] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 472.512611][T11502] CPU: 1 PID: 11502 Comm: syz.1.1608 Not tainted syzkaller #0 [ 472.520531][T11502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 472.531062][T11502] Call Trace: [ 472.534532][T11502] [ 472.537683][T11502] dump_stack_lvl+0x188/0x24e [ 472.542586][T11502] ? show_regs_print_info+0x12/0x12 [ 472.547833][T11502] ? load_image+0x410/0x410 [ 472.552434][T11502] sysfs_warn_dup+0x8a/0xa0 [ 472.557006][T11502] sysfs_do_create_link_sd+0xc0/0x110 [ 472.562447][T11502] device_add+0x83b/0x1050 [ 472.567018][T11502] wiphy_register+0x1d8b/0x2aa0 [ 472.571959][T11502] ? cfg80211_event_work+0x40/0x40 [ 472.577118][T11502] ? minstrel_ht_alloc+0x894/0xa20 [ 472.582475][T11502] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 472.588611][T11502] ieee80211_register_hw+0x2d48/0x39f0 [ 472.594402][T11502] ? ieee80211_register_hw+0xf41/0x39f0 [ 472.599992][T11502] ? ieee80211_register_hw+0xf41/0x39f0 [ 472.605625][T11502] ? ieee80211_tasklet_handler+0x20/0x20 [ 472.611310][T11502] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 472.617257][T11502] ? __debug_object_init+0xed/0x440 [ 472.622478][T11502] ? memset+0x1e/0x40 [ 472.626499][T11502] ? __hrtimer_init+0x189/0x270 [ 472.631435][T11502] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 472.637223][T11502] ? memcpy+0x3c/0x60 [ 472.641320][T11502] hwsim_new_radio_nl+0xab7/0xc90 [ 472.646379][T11502] genl_family_rcv_msg_doit+0x22f/0x350 [ 472.652050][T11502] ? end_current_label_crit_section+0x170/0x170 [ 472.658318][T11502] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 472.664241][T11502] ? bpf_lsm_capable+0x5/0x10 [ 472.668935][T11502] ? security_capable+0x85/0xb0 [ 472.673807][T11502] genl_rcv_msg+0x601/0x790 [ 472.678338][T11502] ? genl_bind+0x360/0x360 [ 472.682772][T11502] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 472.689242][T11502] netlink_rcv_skb+0x1ef/0x440 [ 472.694028][T11502] ? genl_bind+0x360/0x360 [ 472.698473][T11502] ? netlink_ack+0x1160/0x1160 [ 472.703481][T11502] ? down_read+0x1a8/0x2d0 [ 472.707915][T11502] genl_rcv+0x24/0x40 [ 472.712183][T11502] netlink_unicast+0x7ad/0x920 [ 472.716973][T11502] netlink_sendmsg+0x8ad/0xbd0 [ 472.722032][T11502] ? netlink_getsockopt+0x550/0x550 [ 472.727244][T11502] ? apparmor_socket_sendmsg+0x8a/0x330 [ 472.732829][T11502] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 472.738125][T11502] ? security_socket_sendmsg+0x7c/0xa0 [ 472.743603][T11502] ? netlink_getsockopt+0x550/0x550 [ 472.748909][T11502] ____sys_sendmsg+0x5ed/0x9a0 [ 472.753739][T11502] ? __sys_sendmsg_sock+0x30/0x30 [ 472.758878][T11502] ? __import_iovec+0x306/0x510 [ 472.763779][T11502] ? import_iovec+0x6f/0xa0 [ 472.768326][T11502] ___sys_sendmsg+0x2a2/0x360 [ 472.773038][T11502] ? __sys_sendmsg+0x2a0/0x2a0 [ 472.777950][T11502] __se_sys_sendmsg+0x1c3/0x2b0 [ 472.782813][T11502] ? ct_nmi_exit+0x145/0x1c0 [ 472.787456][T11502] ? __x64_sys_sendmsg+0x80/0x80 [ 472.792578][T11502] ? lockdep_hardirqs_on+0x94/0x140 [ 472.797808][T11502] do_syscall_64+0x4c/0xa0 [ 472.802248][T11502] ? clear_bhb_loop+0x60/0xb0 [ 472.806963][T11502] ? clear_bhb_loop+0x60/0xb0 [ 472.811669][T11502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.817674][T11502] RIP: 0033:0x7fa67679e159 [ 472.822189][T11502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.842066][T11502] RSP: 002b:00007fa6745b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.850532][T11502] RAX: ffffffffffffffda RBX: 00007fa676a26270 RCX: 00007fa67679e159 [ 472.858531][T11502] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 472.866527][T11502] RBP: 00007fa67683506b R08: 0000000000000000 R09: 0000000000000000 [ 472.874723][T11502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.882798][T11502] R13: 00007fa676a26308 R14: 00007fa676a26270 R15: 00007ffc6e34b308 [ 472.890799][T11502] [ 473.758208][T11533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 473.765526][T11533] IPv6: NLM_F_CREATE should be set when creating new route [ 473.797267][T11535] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1614'. [ 473.886808][T11535] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 473.900650][T11535] CPU: 0 PID: 11535 Comm: syz.1.1614 Not tainted syzkaller #0 [ 473.908355][T11535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 473.918471][T11535] Call Trace: [ 473.921794][T11535] [ 473.924761][T11535] dump_stack_lvl+0x188/0x24e [ 473.929495][T11535] ? show_regs_print_info+0x12/0x12 [ 473.934733][T11535] ? load_image+0x410/0x410 [ 473.939338][T11535] sysfs_warn_dup+0x8a/0xa0 [ 473.943895][T11535] sysfs_do_create_link_sd+0xc0/0x110 [ 473.949315][T11535] device_add+0x83b/0x1050 [ 473.953761][T11535] wiphy_register+0x1d8b/0x2aa0 [ 473.958645][T11535] ? cfg80211_event_work+0x40/0x40 [ 473.963770][T11535] ? minstrel_ht_alloc+0x894/0xa20 [ 473.968899][T11535] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 473.974985][T11535] ieee80211_register_hw+0x2d48/0x39f0 [ 473.980466][T11535] ? ieee80211_register_hw+0xf41/0x39f0 [ 473.986027][T11535] ? ieee80211_register_hw+0xf41/0x39f0 [ 473.991584][T11535] ? ieee80211_tasklet_handler+0x20/0x20 [ 473.997235][T11535] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 474.003144][T11535] ? __debug_object_init+0xed/0x440 [ 474.008354][T11535] ? memset+0x1e/0x40 [ 474.012354][T11535] ? __hrtimer_init+0x189/0x270 [ 474.017221][T11535] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 474.022967][T11535] ? memcpy+0x3c/0x60 [ 474.026967][T11535] hwsim_new_radio_nl+0xab7/0xc90 [ 474.032019][T11535] genl_family_rcv_msg_doit+0x22f/0x350 [ 474.037578][T11535] ? end_current_label_crit_section+0x170/0x170 [ 474.043870][T11535] ? lockdep_hardirqs_on+0x94/0x140 [ 474.049086][T11535] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 474.055004][T11535] ? bpf_lsm_capable+0x5/0x10 [ 474.059702][T11535] ? security_capable+0x85/0xb0 [ 474.064580][T11535] genl_rcv_msg+0x601/0x790 [ 474.069117][T11535] ? genl_bind+0x360/0x360 [ 474.073633][T11535] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 474.080017][T11535] netlink_rcv_skb+0x1ef/0x440 [ 474.084792][T11535] ? genl_bind+0x360/0x360 [ 474.089217][T11535] ? netlink_ack+0x1160/0x1160 [ 474.094001][T11535] ? down_read+0x1a8/0x2d0 [ 474.098442][T11535] genl_rcv+0x24/0x40 [ 474.102435][T11535] netlink_unicast+0x7ad/0x920 [ 474.107302][T11535] netlink_sendmsg+0x8ad/0xbd0 [ 474.112081][T11535] ? netlink_getsockopt+0x550/0x550 [ 474.117381][T11535] ? apparmor_socket_sendmsg+0x8a/0x330 [ 474.122950][T11535] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 474.128338][T11535] ? security_socket_sendmsg+0x7c/0xa0 [ 474.133851][T11535] ? netlink_getsockopt+0x550/0x550 [ 474.139064][T11535] ____sys_sendmsg+0x5ed/0x9a0 [ 474.143883][T11535] ? __sys_sendmsg_sock+0x30/0x30 [ 474.149004][T11535] ? __import_iovec+0x306/0x510 [ 474.153899][T11535] ? import_iovec+0x6f/0xa0 [ 474.158419][T11535] ___sys_sendmsg+0x2a2/0x360 [ 474.163111][T11535] ? __sys_sendmsg+0x2a0/0x2a0 [ 474.167929][T11535] __se_sys_sendmsg+0x1c3/0x2b0 [ 474.172809][T11535] ? ct_nmi_exit+0x145/0x1c0 [ 474.177414][T11535] ? __x64_sys_sendmsg+0x80/0x80 [ 474.182374][T11535] ? lockdep_hardirqs_on+0x94/0x140 [ 474.187586][T11535] do_syscall_64+0x4c/0xa0 [ 474.192019][T11535] ? clear_bhb_loop+0x60/0xb0 [ 474.196705][T11535] ? clear_bhb_loop+0x60/0xb0 [ 474.201404][T11535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 474.207316][T11535] RIP: 0033:0x7fa67679e159 [ 474.211830][T11535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.231450][T11535] RSP: 002b:00007fa6749f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.239878][T11535] RAX: ffffffffffffffda RBX: 00007fa676a26090 RCX: 00007fa67679e159 [ 474.247866][T11535] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 474.255849][T11535] RBP: 00007fa67683506b R08: 0000000000000000 R09: 0000000000000000 [ 474.263836][T11535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.271906][T11535] R13: 00007fa676a26128 R14: 00007fa676a26090 R15: 00007ffc6e34b308 [ 474.279994][T11535] [ 474.316466][T11540] netlink: 'syz.4.1616': attribute type 6 has an invalid length. [ 474.533281][T11544] netlink: 'syz.2.1617': attribute type 10 has an invalid length. [ 474.543593][T11544] device hsr0 left promiscuous mode [ 474.561796][T11544] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 475.582095][T11570] netlink: 'syz.1.1624': attribute type 4 has an invalid length. [ 475.616227][T11570] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1624'. [ 477.614654][T11615] netlink: 'syz.2.1631': attribute type 28 has an invalid length. [ 477.658591][T11615] netlink: 'syz.2.1631': attribute type 3 has an invalid length. [ 477.712837][T11615] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1631'. [ 477.813842][T11620] netlink: 'syz.2.1631': attribute type 21 has an invalid length. [ 478.081420][T11622] netlink: 'syz.0.1636': attribute type 29 has an invalid length. [ 478.099878][T11622] netlink: 'syz.0.1636': attribute type 29 has an invalid length. [ 478.141919][T11622] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1636'. [ 478.156615][T11624] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.1634'. [ 478.262742][T11628] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1638'. [ 478.864867][T11651] device syzkaller0 entered promiscuous mode [ 478.894440][T11645] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 479.520319][T11672] tap0: tun_chr_ioctl cmd 35108 [ 479.581857][T11678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1648'. [ 479.684129][T11678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1648'. [ 480.763547][T11714] netlink: 'syz.2.1657': attribute type 29 has an invalid length. [ 480.819141][T11714] netlink: 'syz.2.1657': attribute type 29 has an invalid length. [ 480.902720][T11714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1657'. [ 483.570148][T11733] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1662'. [ 484.591913][T11737] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1659'. [ 484.640545][T11737] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 484.693112][T11737] CPU: 1 PID: 11737 Comm: syz.1.1659 Not tainted syzkaller #0 [ 484.700934][T11737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 484.711231][T11737] Call Trace: [ 484.714550][T11737] [ 484.717519][T11737] dump_stack_lvl+0x188/0x24e [ 484.722255][T11737] ? show_regs_print_info+0x12/0x12 [ 484.727617][T11737] ? load_image+0x410/0x410 [ 484.732180][T11737] sysfs_warn_dup+0x8a/0xa0 [ 484.736740][T11737] sysfs_do_create_link_sd+0xc0/0x110 [ 484.742141][T11737] device_add+0x83b/0x1050 [ 484.746670][T11737] wiphy_register+0x1d8b/0x2aa0 [ 484.751555][T11737] ? cfg80211_event_work+0x40/0x40 [ 484.756687][T11737] ? minstrel_ht_alloc+0x894/0xa20 [ 484.761827][T11737] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 484.768000][T11737] ieee80211_register_hw+0x2d48/0x39f0 [ 484.773483][T11737] ? ieee80211_register_hw+0xf41/0x39f0 [ 484.779041][T11737] ? ieee80211_register_hw+0xf41/0x39f0 [ 484.784624][T11737] ? ieee80211_tasklet_handler+0x20/0x20 [ 484.790265][T11737] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 484.796185][T11737] ? __debug_object_init+0xed/0x440 [ 484.801404][T11737] ? memset+0x1e/0x40 [ 484.805401][T11737] ? __hrtimer_init+0x189/0x270 [ 484.810360][T11737] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 484.816112][T11737] ? memcpy+0x3c/0x60 [ 484.820199][T11737] hwsim_new_radio_nl+0xab7/0xc90 [ 484.825434][T11737] genl_family_rcv_msg_doit+0x22f/0x350 [ 484.831091][T11737] ? end_current_label_crit_section+0x170/0x170 [ 484.837352][T11737] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 484.843350][T11737] ? bpf_lsm_capable+0x5/0x10 [ 484.848040][T11737] ? security_capable+0x85/0xb0 [ 484.852905][T11737] genl_rcv_msg+0x601/0x790 [ 484.857438][T11737] ? genl_bind+0x360/0x360 [ 484.861869][T11737] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 484.868318][T11737] netlink_rcv_skb+0x1ef/0x440 [ 484.873092][T11737] ? genl_bind+0x360/0x360 [ 484.877589][T11737] ? netlink_ack+0x1160/0x1160 [ 484.882369][T11737] ? down_read+0x1a8/0x2d0 [ 484.886806][T11737] genl_rcv+0x24/0x40 [ 484.890899][T11737] netlink_unicast+0x7ad/0x920 [ 484.895771][T11737] netlink_sendmsg+0x8ad/0xbd0 [ 484.900559][T11737] ? netlink_getsockopt+0x550/0x550 [ 484.905773][T11737] ? apparmor_socket_sendmsg+0x8a/0x330 [ 484.911336][T11737] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 484.916632][T11737] ? security_socket_sendmsg+0x7c/0xa0 [ 484.922105][T11737] ? netlink_getsockopt+0x550/0x550 [ 484.927320][T11737] ____sys_sendmsg+0x5ed/0x9a0 [ 484.932108][T11737] ? __sys_sendmsg_sock+0x30/0x30 [ 484.937143][T11737] ? __import_iovec+0x306/0x510 [ 484.942105][T11737] ? import_iovec+0x6f/0xa0 [ 484.946636][T11737] ___sys_sendmsg+0x2a2/0x360 [ 484.951362][T11737] ? __sys_sendmsg+0x2a0/0x2a0 [ 484.956160][T11737] ? trace_call_bpf+0xbf/0x6b0 [ 484.960972][T11737] __se_sys_sendmsg+0x1c3/0x2b0 [ 484.965840][T11737] ? perf_trace_preemptirq_template+0x268/0x320 [ 484.972098][T11737] ? __x64_sys_sendmsg+0x80/0x80 [ 484.977063][T11737] ? lockdep_hardirqs_on+0x94/0x140 [ 484.982285][T11737] do_syscall_64+0x4c/0xa0 [ 484.986741][T11737] ? clear_bhb_loop+0x60/0xb0 [ 484.991435][T11737] ? clear_bhb_loop+0x60/0xb0 [ 484.996210][T11737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.002208][T11737] RIP: 0033:0x7fa67679e159 [ 485.006738][T11737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.026356][T11737] RSP: 002b:00007fa6749d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.034859][T11737] RAX: ffffffffffffffda RBX: 00007fa676a26180 RCX: 00007fa67679e159 [ 485.042841][T11737] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 485.050822][T11737] RBP: 00007fa67683506b R08: 0000000000000000 R09: 0000000000000000 [ 485.058807][T11737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.066960][T11737] R13: 00007fa676a26218 R14: 00007fa676a26180 R15: 00007ffc6e34b308 [ 485.074958][T11737] [ 485.378298][T11759] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1669'. [ 485.391989][T11759] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 485.428373][T11759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.858572][T11752] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1665'. [ 485.892142][T11752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.032000][T11768] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.1670'. [ 486.271329][T11776] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1671'. [ 486.327443][T11776] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1671'. [ 486.355122][T11776] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1671'. [ 501.475303][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.481857][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.974849][ T4357] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2637 jiffies s: 45697 root: 0x2/. [ 513.004515][ T4357] rcu: blocking rcu_node structures (internal RCU debug): [ 513.011716][ T4357] Sending NMI from CPU 0 to CPUs 1: [ 513.017009][ C1] NMI backtrace for cpu 1 [ 513.017020][ C1] CPU: 1 PID: 11766 Comm: syz.1.1680 Not tainted syzkaller #0 [ 513.017037][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.017045][ C1] RIP: 0010:__lock_acquire+0x1392/0x7c40 [ 513.017074][ C1] Code: 03 89 c3 81 e3 ff 1f 00 00 c1 e8 03 25 f8 03 00 00 48 8d b8 40 f2 b0 90 be 08 00 00 00 e8 c6 65 6f 00 48 0f a3 1d ce de 4c 0f <73> 1a 48 8d 04 5b c1 e0 06 48 8d 98 00 71 49 90 49 b8 00 00 00 00 [ 513.017088][ C1] RSP: 0018:ffffc900001e0440 EFLAGS: 00000057 [ 513.017102][ C1] RAX: 0000000000000001 RBX: 000000000000002d RCX: ffffffff8164136a [ 513.017113][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90b0f240 [ 513.017124][ C1] RBP: ffffc900001e0670 R08: ffffffff90b0f247 R09: 1ffffffff2161e48 [ 513.017134][ C1] R10: dffffc0000000000 R11: fffffbfff2161e49 R12: ffff88802c5ea8d8 [ 513.017167][ C1] R13: ffff88802c5e9e00 R14: 00000000f5e10535 R15: 0000000094482581 [ 513.017178][ C1] FS: 00007fa67758c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 513.017192][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.017203][ C1] CR2: 00007fb55e3b1ff8 CR3: 0000000057247000 CR4: 00000000003506e0 [ 513.017219][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 513.017228][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 513.017238][ C1] Call Trace: [ 513.017244][ C1] [ 513.017256][ C1] ? __virt_addr_valid+0x188/0x540 [ 513.017344][ C1] ? verify_lock_unused+0x140/0x140 [ 513.017362][ C1] ? llist_add_batch+0x12b/0x180 [ 513.017377][ C1] ? find_next_clump8+0x1a0/0x1a0 [ 513.017391][ C1] ? __virt_addr_valid+0x467/0x540 [ 513.017411][ C1] ? arch_irq_work_raise+0x82/0xd0 [ 513.017445][ C1] ? irq_work_queue_on+0x198/0x260 [ 513.017466][ C1] lock_acquire+0x1bb/0x4a0 [ 513.017484][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 513.017506][ C1] ? read_lock_is_recursive+0x10/0x10 [ 513.017530][ C1] trace_call_bpf+0xe0/0x6b0 [ 513.017547][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 513.017565][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 513.017585][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 513.017605][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 513.017618][ C1] ? sched_clock_cpu+0x6e/0x260 [ 513.017637][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 513.017667][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 513.017687][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 513.017704][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 513.017723][ C1] ? __irq_exit_rcu+0x147/0x230 [ 513.017744][ C1] ? irq_exit_rcu+0x20/0x20 [ 513.017758][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 513.017772][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 513.017792][ C1] trace_hardirqs_on+0x24/0x40 [ 513.017809][ C1] asm_sysvec_irq_work+0x16/0x20 [ 513.017822][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 513.017839][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 32 7b 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 513.017851][ C1] RSP: 0018:ffffc900001e0ae0 EFLAGS: 00000206 [ 513.017862][ C1] RAX: 47cac08e4b787a00 RBX: 1ffff9200003c164 RCX: 47cac08e4b787a00 [ 513.017873][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 513.017884][ C1] RBP: ffffc900001e0bd0 R08: ffffffff90b0f24f R09: 1ffffffff2161e49 [ 513.017894][ C1] R10: dffffc0000000000 R11: fffffbfff2161e4a R12: 0000000000000246 [ 513.017904][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 513.017922][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 513.017937][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 513.017956][ C1] __rcu_read_unlock+0x78/0xd0 [ 513.017969][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 513.018027][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 513.018044][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 513.018067][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 513.018082][ C1] __hrtimer_run_queues+0x522/0xc90 [ 513.018101][ C1] ? hw_scan_work+0xf00/0xf00 [ 513.018118][ C1] ? hrtimer_interrupt+0x980/0x980 [ 513.018136][ C1] hrtimer_run_softirq+0x173/0x290 [ 513.018161][ C1] handle_softirqs+0x291/0x910 [ 513.018177][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 513.018192][ C1] ? do_softirq+0x210/0x210 [ 513.018204][ C1] ? hrtimer_interrupt+0x775/0x980 [ 513.018222][ C1] __irq_exit_rcu+0x13b/0x230 [ 513.018235][ C1] ? irq_exit_rcu+0x20/0x20 [ 513.018252][ C1] irq_exit_rcu+0x5/0x20 [ 513.018264][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 513.018283][ C1] [ 513.018288][ C1] [ 513.018293][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 513.018307][ C1] RIP: 0010:kernfs_activate_one+0x79/0x390 [ 513.018326][ C1] Code: c1 e8 03 42 80 3c 20 00 74 05 e8 c2 0f cc ff 4c 8b 73 30 4d 85 f6 4c 0f 44 f3 49 83 c6 78 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 <74> 08 4c 89 f7 e8 9d 0f cc ff bf 48 01 00 00 49 03 3e 31 f6 e8 ae [ 513.018338][ C1] RSP: 0018:ffffc900032478c0 EFLAGS: 00000246 [ 513.018350][ C1] RAX: 1ffff1100ae79331 RBX: ffff88802065b9f8 RCX: 0000000000000002 [ 513.018361][ C1] RDX: ffff88802c5e9e00 RSI: 0000000000000001 RDI: ffff88802065ba28 [ 513.018371][ C1] RBP: 0000000000000001 R08: ffff8880174734e7 R09: 1ffff11002e8e69c [ 513.018381][ C1] R10: dffffc0000000000 R11: ffffed1002e8e69d R12: dffffc0000000000 [ 513.018392][ C1] R13: ffff88802065ba90 R14: ffff8880573c9988 R15: ffff88802065b9f8 [ 513.018410][ C1] kernfs_add_one+0x5dc/0x8f0 [ 513.018429][ C1] kernfs_create_dir_ns+0xda/0x120 [ 513.018446][ C1] internal_create_group+0x21a/0xce0 [ 513.018470][ C1] ? device_add_attrs+0x71c/0x830 [ 513.018511][ C1] ? sysfs_create_group+0x20/0x20 [ 513.018529][ C1] ? device_add_attrs+0x721/0x830 [ 513.018548][ C1] ? get_device_parent+0x3e0/0x3e0 [ 513.018569][ C1] dpm_sysfs_add+0x66/0x270 [ 513.018608][ C1] device_add+0x745/0x1050 [ 513.018629][ C1] netdev_register_kobject+0x184/0x320 [ 513.018672][ C1] register_netdevice+0x133a/0x1b80 [ 513.018729][ C1] ? netif_stacked_transfer_operstate+0x200/0x200 [ 513.018750][ C1] ? vscnprintf+0x80/0x80 [ 513.018780][ C1] ppp_dev_configure+0x875/0xad0 [ 513.018820][ C1] ppp_ioctl+0x8eb/0x1b20 [ 513.018838][ C1] ? ppp_poll+0x250/0x250 [ 513.018852][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 513.018870][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 513.018885][ C1] ? ppp_poll+0x250/0x250 [ 513.018901][ C1] ? __se_sys_ioctl+0xee/0x170 [ 513.018928][ C1] ? ppp_poll+0x250/0x250 [ 513.018942][ C1] __se_sys_ioctl+0xfa/0x170 [ 513.018962][ C1] do_syscall_64+0x4c/0xa0 [ 513.018976][ C1] ? clear_bhb_loop+0x60/0xb0 [ 513.018989][ C1] ? clear_bhb_loop+0x60/0xb0 [ 513.019004][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.019025][ C1] RIP: 0033:0x7fa67679e159 [ 513.019039][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.019051][ C1] RSP: 002b:00007fa67758c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.019066][ C1] RAX: ffffffffffffffda RBX: 00007fa676a25fa0 RCX: 00007fa67679e159 [ 513.019076][ C1] RDX: 000000110c230000 RSI: 00000000c004743e RDI: 0000000000000014 [ 513.019086][ C1] RBP: 00007fa67683506b R08: 0000000000000000 R09: 0000000000000000 [ 513.019096][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.019105][ C1] R13: 00007fa676a26038 R14: 00007fa676a25fa0 R15: 00007ffc6e34b308 [ 513.019121][ C1]