last executing test programs: 6.542173103s ago: executing program 2 (id=11130): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0xac5d, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080), &(0x7f0000000540)=""/210}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x30}, 0x28) r2 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@struct={0xd, 0x2, 0x0, 0x4, 0x1, 0xe73f, [{0xb, 0x2, 0x80}, {0xe, 0x4, 0x7}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x58, 0x4}, @float={0xe, 0x0, 0x0, 0x10, 0x8}]}}, 0x0, 0x5a, 0x0, 0x1, 0xd500, 0x10000, @value=r5}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140), 0xca, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) r7 = getpid() sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01}}}], 0x20, 0x114}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x22, &(0x7f00000018c0), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c909", 0x60}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea", 0xf3}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}], 0x3}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000008c0)="9902000012006b989e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d6f7900a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f0000000700)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bee64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000e00)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f0000000cc0)="fd7617adb877574c4a4489fcaccd9ddae0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e329d190c768c04a78c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba78e", 0xaf}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r10, &(0x7f0000000100), 0x2, 0x0) 6.346868709s ago: executing program 0 (id=11134): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x6, 0xd, 0x0, 0x40, 0x0, 0x8000, 0x84209, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000001c0), 0x7}, 0x8, 0x8, 0x8, 0x8, 0x6, 0x6, 0x6, 0x0, 0x7, 0x0, 0xddb8}, 0x0, 0xc, r1, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x4000000}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x100000000, 0x12) r4 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080), 0x12) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES16=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10600, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x0, 0x0, 0xc2ba, 0x9, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r8 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(r2, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRESOCT=r0, @ANYRES16=r7, @ANYBLOB="5c633a83e8acbed9fd4e2ea585d13c80787b24b9f7c7e07d74215f9c3a5fbb232c50552fdc758430499aaf0b512276fa5cd1e86f9dfbf5c8ae521a7be0bb0b57706662", @ANYRES8=0x0], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) getpid() syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 5.778072857s ago: executing program 1 (id=11136): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c40)=ANY=[], 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000a600", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74029, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000000}, r0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r2}, 0x50) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1053e0, 0x2, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3}}]}}, &(0x7f0000000240)=""/225, 0x32, 0xe1, 0x1}, 0x28) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12) socket$kcm(0x10, 0x400000002, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) recvmsg(r5, &(0x7f00000003c0)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/195, 0xc3}], 0x3, &(0x7f0000001500)=""/184, 0xb8}, 0x83) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0xd, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x6}, 0x94) mkdir(&(0x7f00000015c0)='./file0\x00', 0xf1) 5.609647322s ago: executing program 2 (id=11137): socket$kcm(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034009410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000"], 0xfe33) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x6, 0x4, 0x4d, 0x8, 0x0, 0xffffffff, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0xffff}, 0x8000, 0x2, 0x6, 0x1, 0x6, 0x3a5, 0x0, 0x0, 0x4, 0x0, 0xc5}, 0x0, 0x0, r0, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xd28, 0x0, &(0x7f0000000100)="8883956359d631539169aa77e133", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{0x0}], 0x1}, 0x4080) r8 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000080)={r8}) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034009410000000300189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 5.132986107s ago: executing program 4 (id=11138): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000}, 0x10e002, 0x2c5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000010c0)="5c00000031086b8703300000001f00000000000000040014000d002900070100009ee537d34460bc0deab556a705251e306282949a3651f60a84c9f5d1938837e779a6d0bdf835310e4509c5", 0x4c}, {&(0x7f0000000b00)="22e62e5635b502649e81d565401353fd689d323d9f059d2d4e83ee3c68343875", 0x20}, {0x0}], 0x3, 0x0, 0x0, 0x1f000801}, 0x24048081) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d40), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000015b413821bdcd8f605d539"], 0x0, 0x4, 0xe7, &(0x7f0000000b80)=""/231, 0x40f00, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000d80)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[r2, r0], 0x0, 0x10, 0xdc7a}, 0x94) perf_event_open(0x0, 0x0, 0x0, r3, 0x97ef490e4b99f9ac) mkdir(0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1900000004000000040000000400000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400000000000900"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x80, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x492}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r2, @ANYBLOB="100000000000000000000000000000000000000014dc717008bf96a096a89a9e59c997873c66f19846df605f9f5330cf0a09297ed322178f3fd4cd343ec30d35277bd852b10766e7f1f165a383eb110252b57765e71d354083a1b65e17cc37e573f6285b7eb55f26da06577c8ee4101f85a629341ca0325caca432a200085862a3564683a0836ae4b2cf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000200"/28], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=r2, @ANYBLOB="0900000000000000000000000000000000000000845b89c010d7b3a8f1d9fd366699772374003b1ba435ac2f44f77f76ba36bd67de075a1c3d334cb2614305ef26ab0475dd9a93ab89e7dde9ce53918380475f4959c4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000400"/28], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x26, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x7, 0x1, 0x0, r6}, @alu={0x7, 0x0, 0x3, 0x0, 0x5, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xbede689a32d53090}}}, &(0x7f0000000300)='GPL\x00', 0xfffffffa, 0xb7, &(0x7f0000000680)=""/183, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xe, 0xc45, 0x1}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000940)=[r2, r2, r2, r8, r2, r2, r9, r2], &(0x7f0000000980)=[{0x4, 0x1, 0x2, 0x8}, {0x4, 0x2, 0x2, 0x5}, {0x0, 0x1, 0xd, 0x2}, {0x2, 0x5, 0x9, 0x8}, {0x2, 0x1, 0x1, 0x2}, {0x6, 0x2, 0x10, 0x7}, {0x1, 0x3, 0x10, 0x7}, {0x0, 0x2, 0x2, 0x6}, {0x5, 0x3, 0xb, 0x1}], 0x10, 0x8}, 0x94) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) r13 = openat$cgroup(r12, &(0x7f0000003a00)='syz0\x00', 0x200002, 0x0) r14 = openat$cgroup_devices(r13, &(0x7f0000003fc0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r14, &(0x7f0000004000)={'c', ' *:* ', 'm\x00'}, 0x8) 5.108323368s ago: executing program 0 (id=11148): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x60, 0x8}, {}, {0x2}]}) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB='+cpuset +blkio -cpuacct +pids +net_cls +pids -net_cls -rli}it '], 0x3e) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000740)={'batadv_slave_1\x00', 0x200}) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x52, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b80)}, 0x4004) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x6}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x1, 0x7e, 0x1, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r5, 0x0, &(0x7f0000000140)=""/241}, 0x20) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) 4.241586306s ago: executing program 0 (id=11140): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0xac5d, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080), &(0x7f0000000540)=""/210}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x30}, 0x28) r2 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@struct={0xd, 0x2, 0x0, 0x4, 0x1, 0xe73f, [{0xb, 0x2, 0x80}, {0xe, 0x4, 0x7}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x58, 0x4}, @float={0xe, 0x0, 0x0, 0x10, 0x8}]}}, 0x0, 0x5a, 0x0, 0x1, 0xd500, 0x10000, @value=r5}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140), 0xca, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) r7 = getpid() sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01}}}], 0x20, 0x114}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x22, &(0x7f00000018c0), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e799", 0xb4}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea", 0xf3}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}], 0x3}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000008c0)="9902000012006b989e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d6f7900a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f0000000700)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bee64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000e00)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f0000000cc0)="fd7617adb877574c4a4489fcaccd9ddae0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e329d190c768c04a78c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba78e", 0xaf}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r10, &(0x7f0000000100), 0x2, 0x0) 4.071852361s ago: executing program 3 (id=11141): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f96424fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x420}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x1, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000180), &(0x7f00000002c0)=r3}, 0x20) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, 0x0}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 3.797552899s ago: executing program 1 (id=11142): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0xac5d, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x30}, 0x28) r2 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x58, 0x4}]}}, 0x0, 0x2a, 0x0, 0x1, 0xd500, 0x10000, @value=r5}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140), 0xca, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) r7 = getpid() sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01}}}], 0x20, 0x114}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x22, &(0x7f00000018c0), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e799", 0xb4}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964", 0xf0}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}], 0x3}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000008c0)="9902000012006b989e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d6f7900a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f0000000700)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bee64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000e00)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f0000000cc0)="fd7617adb877574c4a4489fcaccd9ddae0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e329d190c768c04a78c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba78e", 0xaf}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r10, &(0x7f0000000100), 0x2, 0x0) 3.708109802s ago: executing program 2 (id=11143): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c40)=ANY=[], 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000a600", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74029, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000000}, r0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r2}, 0x50) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1053e0, 0x2, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3}}]}}, &(0x7f0000000240)=""/225, 0x32, 0xe1, 0x1}, 0x28) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12) socket$kcm(0x10, 0x400000002, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) recvmsg(r5, &(0x7f00000003c0)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/195, 0xc3}], 0x3, &(0x7f0000001500)=""/184, 0xb8}, 0x83) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0xd, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x6}, 0x94) mkdir(&(0x7f00000015c0)='./file0\x00', 0xf1) 3.672665094s ago: executing program 0 (id=11144): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f00000000c0), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000003c0)=""/120, 0x78}], 0x2}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000007000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 3.132721611s ago: executing program 3 (id=11145): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x60, 0x8}, {}, {0x2}]}) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB='+cpuset +blkio -cpuacct +pids +net_cls +pids -net_cls -rli}it '], 0x3e) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000740)={'batadv_slave_1\x00', 0x200}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f00000000c0), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000003c0)=""/120, 0x78}], 0x2}, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x52, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000007000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b80)}, 0x4004) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x6}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x1, 0x7e, 0x1, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r7, 0x0, &(0x7f0000000140)=""/241}, 0x20) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) 3.074779532s ago: executing program 0 (id=11146): socket$kcm(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = getpid() r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034009410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000"], 0xfe33) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r4 = perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x6, 0x4, 0x4d, 0x8, 0x0, 0xffffffff, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0xffff}, 0x8000, 0x2, 0x6, 0x1, 0x6, 0x3a5, 0x0, 0x0, 0x4, 0x0, 0xc5}, r2, 0x0, r0, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xd28, 0x0, &(0x7f0000000100)="8883956359d631539169aa77e133", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{0x0}], 0x1}, 0x4080) r9 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000080)={r9}) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034009410000000300189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61154400000000006113100000000000bfa000000000000007000000ee00160e5e03010000000000140500000000000069163a0000000000bf07000000000000360507000fff0720670600001f000000150600000ee6ffc0bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3.053950183s ago: executing program 1 (id=11147): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0xac5d, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080), &(0x7f0000000540)=""/210}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x30}, 0x28) r2 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@struct={0xd, 0x2, 0x0, 0x4, 0x1, 0xe73f, [{0xb, 0x2, 0x80}, {0xe, 0x4, 0x7}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x58, 0x4}, @float={0xe, 0x0, 0x0, 0x10, 0x8}]}}, 0x0, 0x5a, 0x0, 0x1, 0xd500, 0x10000, @value=r5}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140), 0xca, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) r7 = getpid() sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01}}}], 0x20, 0x114}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x22, &(0x7f00000018c0), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c909", 0x60}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea", 0xf3}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}], 0x3}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000008c0)="9902000012006b989e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d6f7900a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f0000000700)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bee64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000e00)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f0000000cc0)="fd7617adb877574c4a4489fcaccd9ddae0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e329d190c768c04a78c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba78e", 0xaf}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r10, &(0x7f0000000100), 0x2, 0x0) 2.960652576s ago: executing program 4 (id=11149): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ff0f00000000000000000800cd3b6a"], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) r6 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x28, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @initr0, @exit, @alu={0x4, 0x0, 0x4, 0x3, 0xf}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2.465840542s ago: executing program 3 (id=11150): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9feb10001800000000000000240000002400000002000000000000000000000203000000070000000000000c050000000000000000000002000000000000"], 0x0, 0x3e, 0x0, 0x1, 0x0, 0x10000}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x2b, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX, @ANYRES32, @ANYBLOB="0000009536ed206d837ee089cf82fe000000000000000000efb817d78c194d0c8f00f5f6666cc99a69f9f69c48f799dad8eef8b736e3056f16ae52ac9d426242"], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) recvmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r0, @ANYBLOB="000000000000000000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000800)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x10, 0xffffffff}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) 1.725662355s ago: executing program 1 (id=11151): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x60, 0x8}, {}, {0x2}]}) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB='+cpuset +blkio -cpuacct +pids +net_cls +pids -net_cls -rli}it '], 0x3e) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000740)={'batadv_slave_1\x00', 0x200}) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x52, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b80)}, 0x4004) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x6}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x1, 0x7e, 0x1, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r5, 0x0, &(0x7f0000000140)=""/241}, 0x20) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) 1.661022287s ago: executing program 4 (id=11152): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000018000000000000000900000073110b000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0, 0xcc, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000100), &(0x7f0000000380), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x8001, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e0000002e2f0000060000000400000080500100", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000400"/24, @ANYRES32, @ANYBLOB="523652d2c423c7f6c0eef67f4bc4fbb91b123f009a2f0f83a1506f355da4de29b53a888b60a538f619a527bcc16ddfe09ce9130d2dcd94895bc1b8a962b72e687cfbf6fb45cedd7dd841b82227d124e830bb052cc40b8beb8423c2e85e8396afc464ac8ed0171cdbc01e7da43bcc5f021d2a7d7d9877a46995b5300dde70589a79910e7e847301a41c2090bc2a6a939d946e1bc2715f120784ed5a3b59"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x7b, &(0x7f0000000000), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x10261, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r8, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x75, &(0x7f0000000000), 0x8) 1.57933459s ago: executing program 3 (id=11153): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c40)=ANY=[], 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000a600", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74029, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000000}, r0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r2}, 0x50) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1053e0, 0x2, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3}}]}}, &(0x7f0000000240)=""/225, 0x32, 0xe1, 0x1}, 0x28) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12) socket$kcm(0x10, 0x400000002, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) recvmsg(r5, &(0x7f00000003c0)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/195, 0xc3}], 0x3, &(0x7f0000001500)=""/184, 0xb8}, 0x83) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0xd, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x6}, 0x94) mkdir(&(0x7f00000015c0)='./file0\x00', 0xf1) 1.484666473s ago: executing program 0 (id=11154): socket$kcm(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034009410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000"], 0xfe33) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x6, 0x4, 0x4d, 0x8, 0x0, 0xffffffff, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0xffff}, 0x8000, 0x2, 0x6, 0x1, 0x6, 0x3a5, 0x0, 0x0, 0x4, 0x0, 0xc5}, 0x0, 0x0, r0, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xd28, 0x0, &(0x7f0000000100)="8883956359d631539169aa77e133", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{0x0}], 0x1}, 0x4080) r8 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000080)={r8}) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034009410000000300189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.343947917s ago: executing program 1 (id=11155): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0xac5d, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080), &(0x7f0000000540)=""/210}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x30}, 0x28) r2 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@struct={0xd, 0x2, 0x0, 0x4, 0x1, 0xe73f, [{0xb, 0x2, 0x80}, {0xe, 0x4, 0x7}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x58, 0x4}, @float={0xe, 0x0, 0x0, 0x10, 0x8}]}}, 0x0, 0x5a, 0x0, 0x1, 0xd500, 0x10000, @value=r5}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140), 0xca, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) r7 = getpid() sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01}}}], 0x20, 0x114}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x22, &(0x7f00000018c0), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a71", 0xba}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea", 0xf3}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}], 0x3}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000008c0)="9902000012006b989e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d6f7900a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f0000000700)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bee64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000e00)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f0000000cc0)="fd7617adb877574c4a4489fcaccd9ddae0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e329d190c768c04a78c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba78e", 0xaf}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r10, &(0x7f0000000100), 0x2, 0x0) 1.333085077s ago: executing program 4 (id=11156): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000c0000000400000001000084020000000a000000030000000000000101000000000000070000000000000000000c000b02000000006100302e61306161616100"], 0x0, 0x54}, 0x28) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x6}}], 0x38}, 0x8d894f13108400a4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r1}, 0x18) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.230697331s ago: executing program 2 (id=11157): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f00000000c0), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000003c0)=""/120, 0x78}], 0x2}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000007000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 575.794662ms ago: executing program 2 (id=11158): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0xac5d, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x30}, 0x28) r2 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x58, 0x4}]}}, 0x0, 0x2a, 0x0, 0x1, 0xd500, 0x10000, @value=r5}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140), 0xca, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) r7 = getpid() sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01}}}], 0x20, 0x114}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x22, &(0x7f00000018c0), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7", 0xaf}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964", 0xf0}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}], 0x3}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000008c0)="9902000012006b989e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d6f7900a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f0000000700)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bee64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000e00)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f0000000cc0)="fd7617adb877574c4a4489fcaccd9ddae0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e329d190c768c04a78c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba78e", 0xaf}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r10, &(0x7f0000000100), 0x2, 0x0) 434.972526ms ago: executing program 3 (id=11159): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r0, 0x8) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000380)={0x0, 0xfffffec9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8020, 0xc8, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0xfffffe99, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x5e, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x16584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x7fff}, 0x7842, 0x7, 0x9, 0x0, 0x3, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="a0", 0x1}, {&(0x7f0000000240)="94", 0x1}], 0x2}, 0xd0a0) sendmsg$kcm(r7, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x5, @dev}, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)="ba7f", 0x2}], 0x1}, 0x20004050) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) recvmsg(r2, &(0x7f0000000580)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0}, 0x2042) socketpair(0x25, 0x1, 0x2, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r6, 0x58, &(0x7f0000000600)}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xfffffffffffffee1, &(0x7f0000001d00)={&(0x7f0000002a00)=""/4103, 0x1007, 0x0, &(0x7f0000000900)=""/197, 0xc5}}, 0x10) 434.601536ms ago: executing program 4 (id=11160): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x60, 0x8}, {}, {0x2}]}) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000740)={'batadv_slave_1\x00', 0x200}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f00000000c0), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000003c0)=""/120, 0x78}], 0x2}, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x52, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000007000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b80)}, 0x4004) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x6}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x1, 0x7e, 0x1, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r7, 0x0, &(0x7f0000000140)=""/241}, 0x20) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) 345.991969ms ago: executing program 1 (id=11161): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0xac5d, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080), &(0x7f0000000540)=""/210}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x30}, 0x28) r2 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@struct={0xd, 0x2, 0x0, 0x4, 0x1, 0xe73f, [{0xb, 0x2, 0x80}, {0xe, 0x4, 0x7}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x58, 0x4}, @float={0xe, 0x0, 0x0, 0x10, 0x8}]}}, 0x0, 0x5a, 0x0, 0x1, 0xd500, 0x10000, @value=r5}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140), 0xca, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) r7 = getpid() sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01}}}], 0x20, 0x114}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x22, &(0x7f00000018c0), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddac", 0x90}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea", 0xf3}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}], 0x3}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000008c0)="9902000012006b989e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d6f7900a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f0000000700)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bee64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000e00)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f0000000cc0)="fd7617adb877574c4a4489fcaccd9ddae0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e329d190c768c04a78c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba78e", 0xaf}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r10, &(0x7f0000000100), 0x2, 0x0) 77.110127ms ago: executing program 4 (id=11162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000018000000000000000900000073110b000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0x0, 0xcc, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000100), &(0x7f0000000380), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x8001, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e0000002e2f0000060000000400000080500100", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000400"/24, @ANYRES32, @ANYBLOB="523652d2c423c7f6c0eef67f4bc4fbb91b123f009a2f0f83a1506f355da4de29b53a888b60a538f619a527bcc16ddfe09ce9130d2dcd94895bc1b8a962b72e687cfbf6fb45cedd7dd841b82227d124e830bb052cc40b8beb8423c2e85e8396afc464ac8ed0171cdbc01e7da43bcc5f021d2a7d7d9877a46995b5300dde70589a79910e7e847301a41c2090bc2a6a939d946e1bc2715f120784ed5a3b59"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x7b, &(0x7f0000000000), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x10261, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r8, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x75, &(0x7f0000000000), 0x8) 52.191958ms ago: executing program 3 (id=11163): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9feb10001800000000000000240000002400000002000000000000000000000203000000070000000000000c050000000000000000000002000000000000"], 0x0, 0x3e, 0x0, 0x1, 0x0, 0x10000}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x2b, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX, @ANYRES32, @ANYBLOB="0000009536ed206d837ee089cf82fe000000000000000000efb817d78c194d0c8f00f5f6666cc99a69f9f69c48f799dad8eef8b736e3056f16ae52ac9d426242"], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) recvmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r0, @ANYBLOB="000000000000000000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000800)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x10, 0xffffffff}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) 0s ago: executing program 2 (id=11164): socket$kcm(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = getpid() r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034009410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000"], 0xfe33) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r4 = perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x6, 0x4, 0x4d, 0x8, 0x0, 0xffffffff, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0xffff}, 0x8000, 0x2, 0x6, 0x1, 0x6, 0x3a5, 0x0, 0x0, 0x4, 0x0, 0xc5}, r2, 0x0, r0, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xd28, 0x0, &(0x7f0000000100)="8883956359d631539169aa77e133", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{0x0}], 0x1}, 0x4080) r9 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000080)={r9}) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034009410000000300189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61154400000000006113100000000000bfa000000000000007000000ee00160e5e03010000000000140500000000000069163a0000000000bf07000000000000360507000fff0720670600001f000000150600000ee6ffc0bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) kernel console output (not intermixed with test programs): 5][T10617] ? __sys_sendmsg_sock+0x30/0x30 [ 2671.398386][T10617] ? __import_iovec+0x315/0x500 [ 2671.403278][T10617] ? import_iovec+0x6f/0xa0 [ 2671.407826][T10617] ___sys_sendmsg+0x2a2/0x360 [ 2671.412549][T10617] ? __sys_sendmsg+0x290/0x290 [ 2671.417398][T10617] __se_sys_sendmsg+0x1bb/0x2a0 [ 2671.422299][T10617] ? __x64_sys_sendmsg+0x80/0x80 [ 2671.427303][T10617] ? lockdep_hardirqs_on+0x94/0x140 [ 2671.432543][T10617] do_syscall_64+0x4c/0xa0 [ 2671.437002][T10617] ? clear_bhb_loop+0x60/0xb0 [ 2671.441718][T10617] ? clear_bhb_loop+0x60/0xb0 [ 2671.446440][T10617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2671.452373][T10617] RIP: 0033:0x7f170cf9ce59 [ 2671.456832][T10617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2671.476654][T10617] RSP: 002b:00007f170dde5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2671.485631][T10617] RAX: ffffffffffffffda RBX: 00007f170d216090 RCX: 00007f170cf9ce59 [ 2671.493632][T10617] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2671.501634][T10617] RBP: 00007f170d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2671.509638][T10617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2671.517639][T10617] R13: 00007f170d216128 R14: 00007f170d216090 R15: 00007ffccb9976a8 [ 2671.525671][T10617] [ 2672.172128][T10654] netlink: 'syz.4.10827': attribute type 10 has an invalid length. [ 2672.604718][T10650] sctp: [Deprecated]: syz.4.10827 (pid 10650) Use of int in maxseg socket option. [ 2672.604718][T10650] Use struct sctp_assoc_value instead [ 2672.749096][T10667] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.10831'. [ 2673.118266][T10667] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2673.191249][T10667] CPU: 1 PID: 10667 Comm: syz.1.10831 Not tainted syzkaller #0 [ 2673.198922][T10667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2673.209068][T10667] Call Trace: [ 2673.212422][T10667] [ 2673.215421][T10667] dump_stack_lvl+0x188/0x24e [ 2673.220243][T10667] ? show_regs_print_info+0x12/0x12 [ 2673.225534][T10667] ? load_image+0x400/0x400 [ 2673.230261][T10667] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2673.236448][T10667] sysfs_warn_dup+0x8a/0xa0 [ 2673.241059][T10667] sysfs_do_create_link_sd+0xc0/0x110 [ 2673.246540][T10667] device_add+0x7ed/0xfb0 [ 2673.251000][T10667] wiphy_register+0x1d9f/0x2ac0 [ 2673.256015][T10667] ? cfg80211_event_work+0x40/0x40 [ 2673.261209][T10667] ? minstrel_ht_alloc+0x894/0xa20 [ 2673.266398][T10667] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2673.272525][T10667] ieee80211_register_hw+0x2d00/0x39f0 [ 2673.278162][T10667] ? ieee80211_register_hw+0xea1/0x39f0 [ 2673.283773][T10667] ? ieee80211_register_hw+0xea1/0x39f0 [ 2673.289430][T10667] ? ieee80211_tasklet_handler+0x20/0x20 [ 2673.295115][T10667] ? lockdep_hardirqs_on+0x94/0x140 [ 2673.300380][T10667] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2673.306648][T10667] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2673.312494][T10667] hwsim_new_radio_nl+0xafa/0xce0 [ 2673.317625][T10667] genl_family_rcv_msg_doit+0x22a/0x330 [ 2673.323233][T10667] ? end_current_label_crit_section+0x170/0x170 [ 2673.329535][T10667] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2673.335503][T10667] ? bpf_lsm_capable+0x5/0x10 [ 2673.340243][T10667] ? security_capable+0x85/0xb0 [ 2673.345182][T10667] genl_rcv_msg+0x604/0x790 [ 2673.349767][T10667] ? genl_bind+0x360/0x360 [ 2673.354238][T10667] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2673.360672][T10667] netlink_rcv_skb+0x1fb/0x450 [ 2673.365519][T10667] ? genl_bind+0x360/0x360 [ 2673.369995][T10667] ? netlink_ack+0x1170/0x1170 [ 2673.374857][T10667] ? down_read+0x1a8/0x2d0 [ 2673.379340][T10667] genl_rcv+0x24/0x40 [ 2673.383369][T10667] netlink_unicast+0x74d/0x8d0 [ 2673.388234][T10667] netlink_sendmsg+0x8ad/0xbd0 [ 2673.393233][T10667] ? lockdep_hardirqs_on+0x94/0x140 [ 2673.398508][T10667] ? netlink_getsockopt+0x550/0x550 [ 2673.403788][T10667] ? bpf_lsm_socket_accept+0x10/0x10 [ 2673.409138][T10667] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2673.414475][T10667] ? security_socket_sendmsg+0x7c/0xa0 [ 2673.420010][T10667] ? netlink_getsockopt+0x550/0x550 [ 2673.425269][T10667] ____sys_sendmsg+0x5be/0x970 [ 2673.430119][T10667] ? __sys_sendmsg_sock+0x30/0x30 [ 2673.435233][T10667] ? __import_iovec+0x315/0x500 [ 2673.440165][T10667] ? import_iovec+0x6f/0xa0 [ 2673.444733][T10667] ___sys_sendmsg+0x2a2/0x360 [ 2673.449495][T10667] ? __sys_sendmsg+0x290/0x290 [ 2673.454343][T10667] ? irqentry_enter+0x33/0x50 [ 2673.459204][T10667] __se_sys_sendmsg+0x1bb/0x2a0 [ 2673.464132][T10667] ? __x64_sys_sendmsg+0x80/0x80 [ 2673.469194][T10667] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2673.475150][T10667] do_syscall_64+0x4c/0xa0 [ 2673.479624][T10667] ? clear_bhb_loop+0x60/0xb0 [ 2673.484351][T10667] ? clear_bhb_loop+0x60/0xb0 [ 2673.489087][T10667] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2673.495040][T10667] RIP: 0033:0x7fa0bef9ce59 [ 2673.499511][T10667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2673.519187][T10667] RSP: 002b:00007fa0bfe09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2673.527667][T10667] RAX: ffffffffffffffda RBX: 00007fa0bf216090 RCX: 00007fa0bef9ce59 [ 2673.535775][T10667] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2673.543797][T10667] RBP: 00007fa0bf032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2673.551818][T10667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2673.559841][T10667] R13: 00007fa0bf216128 R14: 00007fa0bf216090 R15: 00007ffc9a7c0af8 [ 2673.568006][T10667] [ 2674.323116][T10662] netlink: 13183 bytes leftover after parsing attributes in process `syz.0.10830'. [ 2676.840618][T10701] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10835'. [ 2676.922536][T10701] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2677.035545][T10701] CPU: 1 PID: 10701 Comm: syz.4.10835 Not tainted syzkaller #0 [ 2677.043230][T10701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2677.053451][T10701] Call Trace: [ 2677.056798][T10701] [ 2677.059779][T10701] dump_stack_lvl+0x188/0x24e [ 2677.064546][T10701] ? show_regs_print_info+0x12/0x12 [ 2677.069822][T10701] ? load_image+0x400/0x400 [ 2677.074443][T10701] sysfs_warn_dup+0x8a/0xa0 [ 2677.079104][T10701] sysfs_do_create_link_sd+0xc0/0x110 [ 2677.084558][T10701] device_add+0x7ed/0xfb0 [ 2677.089008][T10701] wiphy_register+0x1d9f/0x2ac0 [ 2677.093987][T10701] ? cfg80211_event_work+0x40/0x40 [ 2677.099180][T10701] ? minstrel_ht_alloc+0x894/0xa20 [ 2677.104403][T10701] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2677.110554][T10701] ieee80211_register_hw+0x2d00/0x39f0 [ 2677.116144][T10701] ? ieee80211_register_hw+0xea1/0x39f0 [ 2677.121774][T10701] ? ieee80211_register_hw+0xea1/0x39f0 [ 2677.127419][T10701] ? ieee80211_tasklet_handler+0x20/0x20 [ 2677.133147][T10701] ? memset+0x1e/0x40 [ 2677.137193][T10701] ? __hrtimer_init+0x186/0x270 [ 2677.142121][T10701] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2677.147958][T10701] hwsim_new_radio_nl+0xafa/0xce0 [ 2677.153098][T10701] genl_family_rcv_msg_doit+0x22a/0x330 [ 2677.158712][T10701] ? end_current_label_crit_section+0x170/0x170 [ 2677.165030][T10701] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2677.171026][T10701] ? bpf_lsm_capable+0x5/0x10 [ 2677.175866][T10701] ? security_capable+0x85/0xb0 [ 2677.180809][T10701] genl_rcv_msg+0x604/0x790 [ 2677.185402][T10701] ? genl_bind+0x360/0x360 [ 2677.189881][T10701] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2677.196336][T10701] netlink_rcv_skb+0x1fb/0x450 [ 2677.201185][T10701] ? genl_bind+0x360/0x360 [ 2677.205687][T10701] ? netlink_ack+0x1170/0x1170 [ 2677.210546][T10701] ? down_read+0x1a8/0x2d0 [ 2677.215230][T10701] genl_rcv+0x24/0x40 [ 2677.219278][T10701] netlink_unicast+0x74d/0x8d0 [ 2677.224135][T10701] netlink_sendmsg+0x8ad/0xbd0 [ 2677.229012][T10701] ? netlink_getsockopt+0x550/0x550 [ 2677.234311][T10701] ? aa_sock_msg_perm+0x94/0x150 [ 2677.239406][T10701] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2677.244759][T10701] ? security_socket_sendmsg+0x7c/0xa0 [ 2677.250312][T10701] ? netlink_getsockopt+0x550/0x550 [ 2677.255589][T10701] ____sys_sendmsg+0x5be/0x970 [ 2677.260450][T10701] ? __sys_sendmsg_sock+0x30/0x30 [ 2677.265544][T10701] ? __import_iovec+0x315/0x500 [ 2677.270482][T10701] ? import_iovec+0x6f/0xa0 [ 2677.275060][T10701] ___sys_sendmsg+0x2a2/0x360 [ 2677.279833][T10701] ? __sys_sendmsg+0x290/0x290 [ 2677.284739][T10701] ? trace_call_bpf+0xbf/0x6b0 [ 2677.289672][T10701] __se_sys_sendmsg+0x1bb/0x2a0 [ 2677.294618][T10701] ? __x64_sys_sendmsg+0x80/0x80 [ 2677.299706][T10701] ? lockdep_hardirqs_on+0x94/0x140 [ 2677.304993][T10701] do_syscall_64+0x4c/0xa0 [ 2677.309504][T10701] ? clear_bhb_loop+0x60/0xb0 [ 2677.314241][T10701] ? clear_bhb_loop+0x60/0xb0 [ 2677.319003][T10701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2677.324968][T10701] RIP: 0033:0x7f48c4f9ce59 [ 2677.329443][T10701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2677.349201][T10701] RSP: 002b:00007f48c5dda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2677.357682][T10701] RAX: ffffffffffffffda RBX: 00007f48c5216180 RCX: 00007f48c4f9ce59 [ 2677.365716][T10701] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2677.373741][T10701] RBP: 00007f48c5032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2677.381780][T10701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2677.389814][T10701] R13: 00007f48c5216218 R14: 00007f48c5216180 R15: 00007fff4d2c7848 [ 2677.397913][T10701] [ 2677.918446][T10710] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.10836'. [ 2677.940925][T10710] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2677.949164][T10710] CPU: 0 PID: 10710 Comm: syz.1.10836 Not tainted syzkaller #0 [ 2677.956798][T10710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2677.966921][T10710] Call Trace: [ 2677.970246][T10710] [ 2677.973209][T10710] dump_stack_lvl+0x188/0x24e [ 2677.977945][T10710] ? show_regs_print_info+0x12/0x12 [ 2677.983217][T10710] ? load_image+0x400/0x400 [ 2677.987763][T10710] sysfs_warn_dup+0x8a/0xa0 [ 2677.992312][T10710] sysfs_do_create_link_sd+0xc0/0x110 [ 2677.997723][T10710] device_add+0x7ed/0xfb0 [ 2678.002094][T10710] wiphy_register+0x1d9f/0x2ac0 [ 2678.006983][T10710] ? __rtnl_unlock+0x14/0xe0 [ 2678.011621][T10710] ? cfg80211_event_work+0x40/0x40 [ 2678.016771][T10710] ? minstrel_ht_alloc+0x894/0xa20 [ 2678.022031][T10710] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2678.028138][T10710] ieee80211_register_hw+0x2d00/0x39f0 [ 2678.033651][T10710] ? ieee80211_register_hw+0xea1/0x39f0 [ 2678.039515][T10710] ? ieee80211_register_hw+0xea1/0x39f0 [ 2678.045106][T10710] ? ieee80211_tasklet_handler+0x20/0x20 [ 2678.050786][T10710] ? memset+0x1e/0x40 [ 2678.054809][T10710] ? __hrtimer_init+0x186/0x270 [ 2678.059694][T10710] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2678.065478][T10710] hwsim_new_radio_nl+0xafa/0xce0 [ 2678.070562][T10710] genl_family_rcv_msg_doit+0x22a/0x330 [ 2678.076144][T10710] ? end_current_label_crit_section+0x170/0x170 [ 2678.082510][T10710] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2678.088442][T10710] ? bpf_lsm_capable+0x5/0x10 [ 2678.093155][T10710] ? security_capable+0x85/0xb0 [ 2678.098043][T10710] genl_rcv_msg+0x604/0x790 [ 2678.102581][T10710] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2678.108353][T10710] ? genl_bind+0x360/0x360 [ 2678.112810][T10710] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2678.119193][T10710] netlink_rcv_skb+0x1fb/0x450 [ 2678.124013][T10710] ? genl_bind+0x360/0x360 [ 2678.128538][T10710] ? netlink_ack+0x1170/0x1170 [ 2678.133503][T10710] ? down_read+0x1a8/0x2d0 [ 2678.137967][T10710] genl_rcv+0x24/0x40 [ 2678.141975][T10710] netlink_unicast+0x74d/0x8d0 [ 2678.146783][T10710] netlink_sendmsg+0x8ad/0xbd0 [ 2678.151599][T10710] ? netlink_getsockopt+0x550/0x550 [ 2678.156836][T10710] ? aa_sock_msg_perm+0x94/0x150 [ 2678.161813][T10710] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2678.167152][T10710] ? security_socket_sendmsg+0x7c/0xa0 [ 2678.172691][T10710] ? netlink_getsockopt+0x550/0x550 [ 2678.177946][T10710] ____sys_sendmsg+0x5be/0x970 [ 2678.182764][T10710] ? __sys_sendmsg_sock+0x30/0x30 [ 2678.187924][T10710] ? __import_iovec+0x315/0x500 [ 2678.192820][T10710] ? import_iovec+0x6f/0xa0 [ 2678.197358][T10710] ___sys_sendmsg+0x2a2/0x360 [ 2678.202089][T10710] ? __sys_sendmsg+0x290/0x290 [ 2678.206909][T10710] ? ktime_get_real_ts64+0x440/0x440 [ 2678.212247][T10710] __se_sys_sendmsg+0x1bb/0x2a0 [ 2678.217147][T10710] ? __x64_sys_sendmsg+0x80/0x80 [ 2678.222145][T10710] ? lockdep_hardirqs_on+0x94/0x140 [ 2678.227423][T10710] do_syscall_64+0x4c/0xa0 [ 2678.231916][T10710] ? clear_bhb_loop+0x60/0xb0 [ 2678.236643][T10710] ? clear_bhb_loop+0x60/0xb0 [ 2678.241366][T10710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2678.247297][T10710] RIP: 0033:0x7fa0bef9ce59 [ 2678.251740][T10710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2678.271378][T10710] RSP: 002b:00007fa0bfe09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2678.279911][T10710] RAX: ffffffffffffffda RBX: 00007fa0bf216090 RCX: 00007fa0bef9ce59 [ 2678.287918][T10710] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2678.295918][T10710] RBP: 00007fa0bf032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2678.303926][T10710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2678.311932][T10710] R13: 00007fa0bf216128 R14: 00007fa0bf216090 R15: 00007ffc9a7c0af8 [ 2678.319948][T10710] [ 2678.408837][T10713] netlink: 'syz.0.10838': attribute type 3 has an invalid length. [ 2678.478090][T10713] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.10838'. [ 2678.543431][T10713] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10838'. [ 2679.514538][T10741] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.10846'. [ 2679.595714][T10741] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2679.690048][T10741] CPU: 1 PID: 10741 Comm: syz.3.10846 Not tainted syzkaller #0 [ 2679.697690][T10741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2679.707895][T10741] Call Trace: [ 2679.711213][T10741] [ 2679.714190][T10741] dump_stack_lvl+0x188/0x24e [ 2679.718937][T10741] ? show_regs_print_info+0x12/0x12 [ 2679.724204][T10741] ? load_image+0x400/0x400 [ 2679.728789][T10741] sysfs_warn_dup+0x8a/0xa0 [ 2679.733351][T10741] sysfs_do_create_link_sd+0xc0/0x110 [ 2679.738790][T10741] device_add+0x7ed/0xfb0 [ 2679.743366][T10741] wiphy_register+0x1d9f/0x2ac0 [ 2679.748305][T10741] ? cfg80211_event_work+0x40/0x40 [ 2679.753486][T10741] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2679.759736][T10741] ieee80211_register_hw+0x2d00/0x39f0 [ 2679.765347][T10741] ? lockdep_hardirqs_on+0x94/0x140 [ 2679.770612][T10741] ? ieee80211_register_hw+0xea1/0x39f0 [ 2679.776234][T10741] ? ieee80211_register_hw+0xea1/0x39f0 [ 2679.781861][T10741] ? ieee80211_tasklet_handler+0x20/0x20 [ 2679.787585][T10741] ? memset+0x1e/0x40 [ 2679.791621][T10741] ? __hrtimer_init+0x186/0x270 [ 2679.796552][T10741] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2679.802366][T10741] hwsim_new_radio_nl+0xafa/0xce0 [ 2679.807565][T10741] genl_family_rcv_msg_doit+0x22a/0x330 [ 2679.813167][T10741] ? end_current_label_crit_section+0x170/0x170 [ 2679.819487][T10741] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2679.825539][T10741] ? bpf_lsm_capable+0x5/0x10 [ 2679.830288][T10741] ? security_capable+0x85/0xb0 [ 2679.835204][T10741] genl_rcv_msg+0x604/0x790 [ 2679.839793][T10741] ? genl_bind+0x360/0x360 [ 2679.844266][T10741] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2679.850710][T10741] netlink_rcv_skb+0x1fb/0x450 [ 2679.855627][T10741] ? genl_bind+0x360/0x360 [ 2679.860104][T10741] ? netlink_ack+0x1170/0x1170 [ 2679.864959][T10741] ? down_read+0x1a8/0x2d0 [ 2679.869436][T10741] genl_rcv+0x24/0x40 [ 2679.873479][T10741] netlink_unicast+0x74d/0x8d0 [ 2679.878341][T10741] netlink_sendmsg+0x8ad/0xbd0 [ 2679.883193][T10741] ? netlink_getsockopt+0x550/0x550 [ 2679.888478][T10741] ? aa_sock_msg_perm+0x94/0x150 [ 2679.893476][T10741] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2679.898823][T10741] ? security_socket_sendmsg+0x7c/0xa0 [ 2679.904365][T10741] ? netlink_getsockopt+0x550/0x550 [ 2679.909809][T10741] ____sys_sendmsg+0x5be/0x970 [ 2679.914645][T10741] ? __sys_sendmsg_sock+0x30/0x30 [ 2679.919725][T10741] ? __import_iovec+0x315/0x500 [ 2679.924767][T10741] ? import_iovec+0x6f/0xa0 [ 2679.929329][T10741] ___sys_sendmsg+0x2a2/0x360 [ 2679.934090][T10741] ? __sys_sendmsg+0x290/0x290 [ 2679.938943][T10741] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2679.944758][T10741] __se_sys_sendmsg+0x1bb/0x2a0 [ 2679.949679][T10741] ? __x64_sys_sendmsg+0x80/0x80 [ 2679.954693][T10741] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2679.960658][T10741] do_syscall_64+0x4c/0xa0 [ 2679.965149][T10741] ? clear_bhb_loop+0x60/0xb0 [ 2679.969889][T10741] ? clear_bhb_loop+0x60/0xb0 [ 2679.974634][T10741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2679.980589][T10741] RIP: 0033:0x7fc50d79ce59 [ 2679.985055][T10741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2680.004895][T10741] RSP: 002b:00007fc50e59b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2680.013384][T10741] RAX: ffffffffffffffda RBX: 00007fc50da16090 RCX: 00007fc50d79ce59 [ 2680.021422][T10741] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2680.029460][T10741] RBP: 00007fc50d832d6f R08: 0000000000000000 R09: 0000000000000000 [ 2680.037594][T10741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2680.045627][T10741] R13: 00007fc50da16128 R14: 00007fc50da16090 R15: 00007ffe9c5c8ab8 [ 2680.053682][T10741] [ 2680.349167][T10745] netlink: 13183 bytes leftover after parsing attributes in process `syz.1.10847'. [ 2680.361544][T10753] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10848'. [ 2680.385872][T10760] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10848'. [ 2680.410084][T10760] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2680.685195][T10773] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.10850'. [ 2680.759656][T10773] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2680.794239][T10773] CPU: 1 PID: 10773 Comm: syz.0.10850 Not tainted syzkaller #0 [ 2680.801897][T10773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2680.812008][T10773] Call Trace: [ 2680.815340][T10773] [ 2680.818327][T10773] dump_stack_lvl+0x188/0x24e [ 2680.823088][T10773] ? show_regs_print_info+0x12/0x12 [ 2680.828364][T10773] ? load_image+0x400/0x400 [ 2680.832947][T10773] sysfs_warn_dup+0x8a/0xa0 [ 2680.837518][T10773] sysfs_do_create_link_sd+0xc0/0x110 [ 2680.842955][T10773] device_add+0x7ed/0xfb0 [ 2680.847352][T10773] wiphy_register+0x1d9f/0x2ac0 [ 2680.852292][T10773] ? cfg80211_event_work+0x40/0x40 [ 2680.857467][T10773] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2680.863687][T10773] ieee80211_register_hw+0x2d00/0x39f0 [ 2680.869207][T10773] ? lockdep_hardirqs_on+0x94/0x140 [ 2680.874461][T10773] ? ieee80211_register_hw+0xea1/0x39f0 [ 2680.880054][T10773] ? ieee80211_register_hw+0xea1/0x39f0 [ 2680.885659][T10773] ? ieee80211_tasklet_handler+0x20/0x20 [ 2680.891363][T10773] ? memset+0x1e/0x40 [ 2680.895405][T10773] ? __hrtimer_init+0x186/0x270 [ 2680.900311][T10773] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2680.906111][T10773] hwsim_new_radio_nl+0xafa/0xce0 [ 2680.911213][T10773] genl_family_rcv_msg_doit+0x22a/0x330 [ 2680.916803][T10773] ? end_current_label_crit_section+0x170/0x170 [ 2680.923102][T10773] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2680.929049][T10773] ? bpf_lsm_capable+0x5/0x10 [ 2680.933779][T10773] ? security_capable+0x85/0xb0 [ 2680.938685][T10773] genl_rcv_msg+0x604/0x790 [ 2680.943241][T10773] ? genl_bind+0x360/0x360 [ 2680.947703][T10773] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2680.954117][T10773] netlink_rcv_skb+0x1fb/0x450 [ 2680.958945][T10773] ? genl_bind+0x360/0x360 [ 2680.963410][T10773] ? netlink_ack+0x1170/0x1170 [ 2680.968241][T10773] ? down_read+0x1a8/0x2d0 [ 2680.972723][T10773] genl_rcv+0x24/0x40 [ 2680.976753][T10773] netlink_unicast+0x74d/0x8d0 [ 2680.981585][T10773] netlink_sendmsg+0x8ad/0xbd0 [ 2680.986417][T10773] ? netlink_getsockopt+0x550/0x550 [ 2680.991772][T10773] ? aa_sock_msg_perm+0x94/0x150 [ 2680.996904][T10773] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2681.002305][T10773] ? security_socket_sendmsg+0x7c/0xa0 [ 2681.007825][T10773] ? netlink_getsockopt+0x550/0x550 [ 2681.013089][T10773] ____sys_sendmsg+0x5be/0x970 [ 2681.017919][T10773] ? __sys_sendmsg_sock+0x30/0x30 [ 2681.022999][T10773] ? __import_iovec+0x315/0x500 [ 2681.027907][T10773] ? import_iovec+0x6f/0xa0 [ 2681.032459][T10773] ___sys_sendmsg+0x2a2/0x360 [ 2681.037221][T10773] ? __sys_sendmsg+0x290/0x290 [ 2681.042047][T10773] ? irqentry_enter+0x33/0x50 [ 2681.046816][T10773] __se_sys_sendmsg+0x1bb/0x2a0 [ 2681.051729][T10773] ? __x64_sys_sendmsg+0x80/0x80 [ 2681.056754][T10773] ? lockdep_hardirqs_on+0x94/0x140 [ 2681.062036][T10773] do_syscall_64+0x4c/0xa0 [ 2681.066614][T10773] ? clear_bhb_loop+0x60/0xb0 [ 2681.071349][T10773] ? clear_bhb_loop+0x60/0xb0 [ 2681.076096][T10773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2681.082064][T10773] RIP: 0033:0x7f94a399ce59 [ 2681.086519][T10773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2681.106186][T10773] RSP: 002b:00007f94a4902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2681.114662][T10773] RAX: ffffffffffffffda RBX: 00007f94a3c16090 RCX: 00007f94a399ce59 [ 2681.122764][T10773] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2681.130778][T10773] RBP: 00007f94a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2681.138789][T10773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2681.146804][T10773] R13: 00007f94a3c16128 R14: 00007f94a3c16090 R15: 00007ffd817547e8 [ 2681.154839][T10773] [ 2681.429118][T10788] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.10853'. [ 2681.521867][T10788] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2681.600079][T10788] CPU: 0 PID: 10788 Comm: syz.1.10853 Not tainted syzkaller #0 [ 2681.607730][T10788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2681.617933][T10788] Call Trace: [ 2681.621250][T10788] [ 2681.624210][T10788] dump_stack_lvl+0x188/0x24e [ 2681.628938][T10788] ? show_regs_print_info+0x12/0x12 [ 2681.634191][T10788] ? load_image+0x400/0x400 [ 2681.638831][T10788] sysfs_warn_dup+0x8a/0xa0 [ 2681.643374][T10788] sysfs_do_create_link_sd+0xc0/0x110 [ 2681.648790][T10788] device_add+0x7ed/0xfb0 [ 2681.653158][T10788] wiphy_register+0x1d9f/0x2ac0 [ 2681.658082][T10788] ? cfg80211_event_work+0x40/0x40 [ 2681.663232][T10788] ? minstrel_ht_alloc+0x894/0xa20 [ 2681.668390][T10788] ? strcmp+0x24/0xb0 [ 2681.672412][T10788] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2681.678520][T10788] ieee80211_register_hw+0x2d00/0x39f0 [ 2681.684020][T10788] ? lockdep_hardirqs_on+0x94/0x140 [ 2681.689259][T10788] ? ieee80211_register_hw+0xea1/0x39f0 [ 2681.694840][T10788] ? ieee80211_register_hw+0xea1/0x39f0 [ 2681.700430][T10788] ? ieee80211_tasklet_handler+0x20/0x20 [ 2681.706116][T10788] ? memset+0x1e/0x40 [ 2681.710125][T10788] ? __hrtimer_init+0x186/0x270 [ 2681.715005][T10788] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2681.720785][T10788] hwsim_new_radio_nl+0xafa/0xce0 [ 2681.725883][T10788] genl_family_rcv_msg_doit+0x22a/0x330 [ 2681.731468][T10788] ? end_current_label_crit_section+0x170/0x170 [ 2681.737744][T10788] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2681.743674][T10788] ? bpf_lsm_capable+0x5/0x10 [ 2681.748383][T10788] ? security_capable+0x85/0xb0 [ 2681.753370][T10788] genl_rcv_msg+0x604/0x790 [ 2681.757912][T10788] ? genl_bind+0x360/0x360 [ 2681.762361][T10788] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2681.768747][T10788] netlink_rcv_skb+0x1fb/0x450 [ 2681.774072][T10788] ? genl_bind+0x360/0x360 [ 2681.778523][T10788] ? netlink_ack+0x1170/0x1170 [ 2681.783337][T10788] ? down_read+0x1a8/0x2d0 [ 2681.787796][T10788] genl_rcv+0x24/0x40 [ 2681.791810][T10788] netlink_unicast+0x74d/0x8d0 [ 2681.796653][T10788] netlink_sendmsg+0x8ad/0xbd0 [ 2681.801486][T10788] ? netlink_getsockopt+0x550/0x550 [ 2681.806750][T10788] ? aa_sock_msg_perm+0x94/0x150 [ 2681.811734][T10788] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2681.817064][T10788] ? security_socket_sendmsg+0x7c/0xa0 [ 2681.822591][T10788] ? netlink_getsockopt+0x550/0x550 [ 2681.827901][T10788] ____sys_sendmsg+0x5be/0x970 [ 2681.832725][T10788] ? __sys_sendmsg_sock+0x30/0x30 [ 2681.837967][T10788] ? __import_iovec+0x315/0x500 [ 2681.842859][T10788] ? import_iovec+0x6f/0xa0 [ 2681.847402][T10788] ___sys_sendmsg+0x2a2/0x360 [ 2681.852153][T10788] ? __sys_sendmsg+0x290/0x290 [ 2681.856980][T10788] ? ktime_get_real_ts64+0x440/0x440 [ 2681.862319][T10788] __se_sys_sendmsg+0x1bb/0x2a0 [ 2681.867209][T10788] ? __x64_sys_sendmsg+0x80/0x80 [ 2681.872194][T10788] ? lockdep_hardirqs_on+0x94/0x140 [ 2681.877428][T10788] do_syscall_64+0x4c/0xa0 [ 2681.881907][T10788] ? clear_bhb_loop+0x60/0xb0 [ 2681.886650][T10788] ? clear_bhb_loop+0x60/0xb0 [ 2681.891419][T10788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2681.897372][T10788] RIP: 0033:0x7fa0bef9ce59 [ 2681.901820][T10788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2681.921452][T10788] RSP: 002b:00007fa0bfe09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2681.929904][T10788] RAX: ffffffffffffffda RBX: 00007fa0bf216090 RCX: 00007fa0bef9ce59 [ 2681.937908][T10788] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2681.946034][T10788] RBP: 00007fa0bf032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2681.954053][T10788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2681.962054][T10788] R13: 00007fa0bf216128 R14: 00007fa0bf216090 R15: 00007ffc9a7c0af8 [ 2681.970072][T10788] [ 2682.443227][T10805] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10854'. [ 2682.480610][T10805] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2682.488611][T10805] CPU: 0 PID: 10805 Comm: syz.4.10854 Not tainted syzkaller #0 [ 2682.496207][T10805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2682.506389][T10805] Call Trace: [ 2682.509694][T10805] [ 2682.512652][T10805] dump_stack_lvl+0x188/0x24e [ 2682.517385][T10805] ? show_regs_print_info+0x12/0x12 [ 2682.522624][T10805] ? load_image+0x400/0x400 [ 2682.527177][T10805] sysfs_warn_dup+0x8a/0xa0 [ 2682.531721][T10805] sysfs_do_create_link_sd+0xc0/0x110 [ 2682.537136][T10805] device_add+0x7ed/0xfb0 [ 2682.541521][T10805] wiphy_register+0x1d9f/0x2ac0 [ 2682.546432][T10805] ? cfg80211_event_work+0x40/0x40 [ 2682.551680][T10805] ? minstrel_ht_alloc+0x894/0xa20 [ 2682.556842][T10805] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2682.562945][T10805] ieee80211_register_hw+0x2d00/0x39f0 [ 2682.568471][T10805] ? ieee80211_register_hw+0xea1/0x39f0 [ 2682.574102][T10805] ? ieee80211_register_hw+0xea1/0x39f0 [ 2682.579711][T10805] ? ieee80211_tasklet_handler+0x20/0x20 [ 2682.585399][T10805] ? memset+0x1e/0x40 [ 2682.589499][T10805] ? __hrtimer_init+0x186/0x270 [ 2682.594383][T10805] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2682.600181][T10805] hwsim_new_radio_nl+0xafa/0xce0 [ 2682.605272][T10805] genl_family_rcv_msg_doit+0x22a/0x330 [ 2682.610851][T10805] ? end_current_label_crit_section+0x170/0x170 [ 2682.617129][T10805] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2682.623062][T10805] ? bpf_lsm_capable+0x5/0x10 [ 2682.627779][T10805] ? security_capable+0x85/0xb0 [ 2682.632672][T10805] genl_rcv_msg+0x604/0x790 [ 2682.637221][T10805] ? genl_bind+0x360/0x360 [ 2682.641667][T10805] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2682.648133][T10805] netlink_rcv_skb+0x1fb/0x450 [ 2682.652947][T10805] ? genl_bind+0x360/0x360 [ 2682.657400][T10805] ? netlink_ack+0x1170/0x1170 [ 2682.662217][T10805] ? down_read+0x1a8/0x2d0 [ 2682.666680][T10805] genl_rcv+0x24/0x40 [ 2682.670694][T10805] netlink_unicast+0x74d/0x8d0 [ 2682.675509][T10805] netlink_sendmsg+0x8ad/0xbd0 [ 2682.680504][T10805] ? netlink_getsockopt+0x550/0x550 [ 2682.685737][T10805] ? aa_sock_msg_perm+0x94/0x150 [ 2682.690716][T10805] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2682.696034][T10805] ? security_socket_sendmsg+0x7c/0xa0 [ 2682.701533][T10805] ? netlink_getsockopt+0x550/0x550 [ 2682.706858][T10805] ____sys_sendmsg+0x5be/0x970 [ 2682.711670][T10805] ? __sys_sendmsg_sock+0x30/0x30 [ 2682.716757][T10805] ? __import_iovec+0x315/0x500 [ 2682.721932][T10805] ? import_iovec+0x6f/0xa0 [ 2682.726490][T10805] ___sys_sendmsg+0x2a2/0x360 [ 2682.731221][T10805] ? __lock_acquire+0x7d10/0x7d10 [ 2682.736298][T10805] ? __sys_sendmsg+0x290/0x290 [ 2682.741148][T10805] __se_sys_sendmsg+0x1bb/0x2a0 [ 2682.746056][T10805] ? __x64_sys_sendmsg+0x80/0x80 [ 2682.751055][T10805] ? lockdep_hardirqs_on+0x94/0x140 [ 2682.756291][T10805] do_syscall_64+0x4c/0xa0 [ 2682.760753][T10805] ? clear_bhb_loop+0x60/0xb0 [ 2682.765491][T10805] ? clear_bhb_loop+0x60/0xb0 [ 2682.770218][T10805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2682.776162][T10805] RIP: 0033:0x7f48c4f9ce59 [ 2682.780617][T10805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2682.800273][T10805] RSP: 002b:00007f48c5db9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2682.808814][T10805] RAX: ffffffffffffffda RBX: 00007f48c5216270 RCX: 00007f48c4f9ce59 [ 2682.816842][T10805] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2682.824851][T10805] RBP: 00007f48c5032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2682.832862][T10805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2682.840860][T10805] R13: 00007f48c5216308 R14: 00007f48c5216270 R15: 00007fff4d2c7848 [ 2682.848884][T10805] [ 2682.895720][T10809] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.10856'. [ 2682.917653][T10809] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2682.953891][T10809] CPU: 1 PID: 10809 Comm: syz.3.10856 Not tainted syzkaller #0 [ 2682.961550][T10809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2682.971656][T10809] Call Trace: [ 2682.975029][T10809] [ 2682.978016][T10809] dump_stack_lvl+0x188/0x24e [ 2682.982775][T10809] ? show_regs_print_info+0x12/0x12 [ 2682.988046][T10809] ? load_image+0x400/0x400 [ 2682.992630][T10809] sysfs_warn_dup+0x8a/0xa0 [ 2682.997201][T10809] sysfs_do_create_link_sd+0xc0/0x110 [ 2683.002648][T10809] device_add+0x7ed/0xfb0 [ 2683.007081][T10809] wiphy_register+0x1d9f/0x2ac0 [ 2683.012012][T10809] ? cfg80211_event_work+0x40/0x40 [ 2683.017175][T10809] ? minstrel_ht_alloc+0x894/0xa20 [ 2683.022337][T10809] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2683.028455][T10809] ieee80211_register_hw+0x2d00/0x39f0 [ 2683.033971][T10809] ? ieee80211_register_hw+0xea1/0x39f0 [ 2683.039656][T10809] ? ieee80211_register_hw+0xea1/0x39f0 [ 2683.045263][T10809] ? ieee80211_tasklet_handler+0x20/0x20 [ 2683.050966][T10809] ? memset+0x1e/0x40 [ 2683.054987][T10809] ? __hrtimer_init+0x186/0x270 [ 2683.059879][T10809] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2683.065660][T10809] hwsim_new_radio_nl+0xafa/0xce0 [ 2683.070743][T10809] genl_family_rcv_msg_doit+0x22a/0x330 [ 2683.076324][T10809] ? end_current_label_crit_section+0x170/0x170 [ 2683.082604][T10809] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2683.088545][T10809] ? bpf_lsm_capable+0x5/0x10 [ 2683.093261][T10809] ? security_capable+0x85/0xb0 [ 2683.098154][T10809] genl_rcv_msg+0x604/0x790 [ 2683.102703][T10809] ? genl_bind+0x360/0x360 [ 2683.107154][T10809] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2683.113539][T10809] netlink_rcv_skb+0x1fb/0x450 [ 2683.118391][T10809] ? genl_bind+0x360/0x360 [ 2683.122841][T10809] ? netlink_ack+0x1170/0x1170 [ 2683.127653][T10809] ? down_read+0x1a8/0x2d0 [ 2683.132108][T10809] genl_rcv+0x24/0x40 [ 2683.136118][T10809] netlink_unicast+0x74d/0x8d0 [ 2683.140934][T10809] netlink_sendmsg+0x8ad/0xbd0 [ 2683.145747][T10809] ? netlink_getsockopt+0x550/0x550 [ 2683.151088][T10809] ? aa_sock_msg_perm+0x94/0x150 [ 2683.156065][T10809] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2683.161381][T10809] ? security_socket_sendmsg+0x7c/0xa0 [ 2683.166889][T10809] ? netlink_getsockopt+0x550/0x550 [ 2683.172237][T10809] ____sys_sendmsg+0x5be/0x970 [ 2683.177052][T10809] ? __sys_sendmsg_sock+0x30/0x30 [ 2683.182126][T10809] ? __import_iovec+0x315/0x500 [ 2683.187019][T10809] ? import_iovec+0x6f/0xa0 [ 2683.191563][T10809] ___sys_sendmsg+0x2a2/0x360 [ 2683.196326][T10809] ? try_to_wake_up+0x67c/0x1080 [ 2683.201308][T10809] ? __sys_sendmsg+0x290/0x290 [ 2683.206152][T10809] __se_sys_sendmsg+0x1bb/0x2a0 [ 2683.211070][T10809] ? __x64_sys_sendmsg+0x80/0x80 [ 2683.216066][T10809] ? lockdep_hardirqs_on+0x94/0x140 [ 2683.221299][T10809] do_syscall_64+0x4c/0xa0 [ 2683.225751][T10809] ? clear_bhb_loop+0x60/0xb0 [ 2683.230469][T10809] ? clear_bhb_loop+0x60/0xb0 [ 2683.235183][T10809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2683.241204][T10809] RIP: 0033:0x7fc50d79ce59 [ 2683.245647][T10809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2683.265292][T10809] RSP: 002b:00007fc50e5bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2683.273746][T10809] RAX: ffffffffffffffda RBX: 00007fc50da15fa0 RCX: 00007fc50d79ce59 [ 2683.281764][T10809] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2683.289772][T10809] RBP: 00007fc50d832d6f R08: 0000000000000000 R09: 0000000000000000 [ 2683.297867][T10809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2683.305885][T10809] R13: 00007fc50da16038 R14: 00007fc50da15fa0 R15: 00007ffe9c5c8ab8 [ 2683.313902][T10809] [ 2684.009222][T10837] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.10863'. [ 2684.168913][T10837] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2684.228955][T10837] CPU: 0 PID: 10837 Comm: syz.3.10863 Not tainted syzkaller #0 [ 2684.236611][T10837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2684.246734][T10837] Call Trace: [ 2684.250069][T10837] [ 2684.253068][T10837] dump_stack_lvl+0x188/0x24e [ 2684.257855][T10837] ? show_regs_print_info+0x12/0x12 [ 2684.263148][T10837] ? load_image+0x400/0x400 [ 2684.267741][T10837] sysfs_warn_dup+0x8a/0xa0 [ 2684.272331][T10837] sysfs_do_create_link_sd+0xc0/0x110 [ 2684.277794][T10837] device_add+0x7ed/0xfb0 [ 2684.282222][T10837] wiphy_register+0x1d9f/0x2ac0 [ 2684.287190][T10837] ? cfg80211_event_work+0x40/0x40 [ 2684.292385][T10837] ? minstrel_ht_alloc+0x894/0xa20 [ 2684.297580][T10837] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2684.303728][T10837] ieee80211_register_hw+0x2d00/0x39f0 [ 2684.309371][T10837] ? ieee80211_register_hw+0xea1/0x39f0 [ 2684.314995][T10837] ? ieee80211_register_hw+0xea1/0x39f0 [ 2684.320630][T10837] ? ieee80211_tasklet_handler+0x20/0x20 [ 2684.326356][T10837] ? memset+0x1e/0x40 [ 2684.330400][T10837] ? __hrtimer_init+0x186/0x270 [ 2684.335317][T10837] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2684.341149][T10837] hwsim_new_radio_nl+0xafa/0xce0 [ 2684.346275][T10837] genl_family_rcv_msg_doit+0x22a/0x330 [ 2684.351899][T10837] ? end_current_label_crit_section+0x170/0x170 [ 2684.358204][T10837] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2684.364164][T10837] ? bpf_lsm_capable+0x5/0x10 [ 2684.368901][T10837] ? security_capable+0x85/0xb0 [ 2684.373808][T10837] genl_rcv_msg+0x604/0x790 [ 2684.378350][T10837] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2684.384123][T10837] ? genl_bind+0x360/0x360 [ 2684.388579][T10837] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2684.394962][T10837] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2684.400992][T10837] netlink_rcv_skb+0x1fb/0x450 [ 2684.405825][T10837] ? genl_bind+0x360/0x360 [ 2684.410281][T10837] ? netlink_ack+0x1170/0x1170 [ 2684.415111][T10837] ? genl_bind+0x360/0x360 [ 2684.419568][T10837] genl_rcv+0x24/0x40 [ 2684.423586][T10837] netlink_unicast+0x74d/0x8d0 [ 2684.428417][T10837] netlink_sendmsg+0x8ad/0xbd0 [ 2684.433255][T10837] ? netlink_getsockopt+0x550/0x550 [ 2684.438599][T10837] ? aa_sock_msg_perm+0x94/0x150 [ 2684.443590][T10837] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2684.448924][T10837] ? security_socket_sendmsg+0x7c/0xa0 [ 2684.454430][T10837] ? netlink_getsockopt+0x550/0x550 [ 2684.459695][T10837] ____sys_sendmsg+0x5be/0x970 [ 2684.464577][T10837] ? __sys_sendmsg_sock+0x30/0x30 [ 2684.469657][T10837] ? __import_iovec+0x315/0x500 [ 2684.474571][T10837] ? import_iovec+0x6f/0xa0 [ 2684.479131][T10837] ___sys_sendmsg+0x2a2/0x360 [ 2684.483868][T10837] ? __sys_sendmsg+0x290/0x290 [ 2684.488707][T10837] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2684.494520][T10837] __se_sys_sendmsg+0x1bb/0x2a0 [ 2684.499431][T10837] ? __x64_sys_sendmsg+0x80/0x80 [ 2684.504457][T10837] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2684.510406][T10837] do_syscall_64+0x4c/0xa0 [ 2684.514892][T10837] ? clear_bhb_loop+0x60/0xb0 [ 2684.519630][T10837] ? clear_bhb_loop+0x60/0xb0 [ 2684.524367][T10837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2684.530319][T10837] RIP: 0033:0x7fc50d79ce59 [ 2684.534772][T10837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2684.554429][T10837] RSP: 002b:00007fc50e59b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2684.562897][T10837] RAX: ffffffffffffffda RBX: 00007fc50da16090 RCX: 00007fc50d79ce59 [ 2684.570921][T10837] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2684.578950][T10837] RBP: 00007fc50d832d6f R08: 0000000000000000 R09: 0000000000000000 [ 2684.586989][T10837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2684.595016][T10837] R13: 00007fc50da16128 R14: 00007fc50da16090 R15: 00007ffe9c5c8ab8 [ 2684.603066][T10837] [ 2684.931541][T10846] netlink: 'syz.2.10864': attribute type 7 has an invalid length. [ 2685.283930][T10850] netlink: 'syz.2.10864': attribute type 10 has an invalid length. [ 2685.299988][T10850] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10864'. [ 2685.898407][T10870] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.10869'. [ 2685.975078][T10870] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2686.010207][T10870] CPU: 0 PID: 10870 Comm: syz.0.10869 Not tainted syzkaller #0 [ 2686.017854][T10870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2686.027972][T10870] Call Trace: [ 2686.031308][T10870] [ 2686.034288][T10870] dump_stack_lvl+0x188/0x24e [ 2686.039128][T10870] ? show_regs_print_info+0x12/0x12 [ 2686.044446][T10870] ? load_image+0x400/0x400 [ 2686.049018][T10870] ? sysfs_warn_dup+0x61/0xa0 [ 2686.053767][T10870] sysfs_warn_dup+0x8a/0xa0 [ 2686.058443][T10870] sysfs_do_create_link_sd+0xc0/0x110 [ 2686.063895][T10870] device_add+0x7ed/0xfb0 [ 2686.068290][T10870] wiphy_register+0x1d9f/0x2ac0 [ 2686.073223][T10870] ? cfg80211_event_work+0x40/0x40 [ 2686.078406][T10870] ? minstrel_ht_alloc+0x894/0xa20 [ 2686.083635][T10870] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2686.089769][T10870] ieee80211_register_hw+0x2d00/0x39f0 [ 2686.095316][T10870] ? ieee80211_register_hw+0xea1/0x39f0 [ 2686.100937][T10870] ? ieee80211_register_hw+0xea1/0x39f0 [ 2686.106567][T10870] ? ieee80211_tasklet_handler+0x20/0x20 [ 2686.112271][T10870] ? lockdep_hardirqs_on+0x94/0x140 [ 2686.117543][T10870] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2686.123794][T10870] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2686.129619][T10870] hwsim_new_radio_nl+0xafa/0xce0 [ 2686.134757][T10870] genl_family_rcv_msg_doit+0x22a/0x330 [ 2686.140370][T10870] ? end_current_label_crit_section+0x170/0x170 [ 2686.146678][T10870] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2686.152644][T10870] ? bpf_lsm_capable+0x5/0x10 [ 2686.157433][T10870] ? security_capable+0x85/0xb0 [ 2686.162372][T10870] genl_rcv_msg+0x604/0x790 [ 2686.166964][T10870] ? lock_chain_count+0x20/0x20 [ 2686.171915][T10870] ? genl_bind+0x360/0x360 [ 2686.176407][T10870] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2686.182928][T10870] netlink_rcv_skb+0x1fb/0x450 [ 2686.187776][T10870] ? genl_bind+0x360/0x360 [ 2686.192261][T10870] ? netlink_ack+0x1170/0x1170 [ 2686.197123][T10870] ? down_read+0x1a8/0x2d0 [ 2686.201618][T10870] genl_rcv+0x24/0x40 [ 2686.205664][T10870] netlink_unicast+0x74d/0x8d0 [ 2686.210515][T10870] netlink_sendmsg+0x8ad/0xbd0 [ 2686.215358][T10870] ? lockdep_hardirqs_on+0x94/0x140 [ 2686.220626][T10870] ? netlink_getsockopt+0x550/0x550 [ 2686.225915][T10870] ? netlink_getsockopt+0x550/0x550 [ 2686.231196][T10870] ____sys_sendmsg+0x5be/0x970 [ 2686.236050][T10870] ? __sys_sendmsg_sock+0x30/0x30 [ 2686.241145][T10870] ? __import_iovec+0x315/0x500 [ 2686.246065][T10870] ? import_iovec+0x6f/0xa0 [ 2686.250631][T10870] ___sys_sendmsg+0x2a2/0x360 [ 2686.255413][T10870] ? __sys_sendmsg+0x290/0x290 [ 2686.260278][T10870] ? ktime_get_real_ts64+0x440/0x440 [ 2686.265659][T10870] __se_sys_sendmsg+0x1bb/0x2a0 [ 2686.270589][T10870] ? __x64_sys_sendmsg+0x80/0x80 [ 2686.275625][T10870] ? lockdep_hardirqs_on+0x94/0x140 [ 2686.280903][T10870] do_syscall_64+0x4c/0xa0 [ 2686.285396][T10870] ? clear_bhb_loop+0x60/0xb0 [ 2686.290139][T10870] ? clear_bhb_loop+0x60/0xb0 [ 2686.294888][T10870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2686.300832][T10870] RIP: 0033:0x7f94a399ce59 [ 2686.305293][T10870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2686.325241][T10870] RSP: 002b:00007f94a48e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2686.333702][T10870] RAX: ffffffffffffffda RBX: 00007f94a3c16180 RCX: 00007f94a399ce59 [ 2686.341711][T10870] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2686.349726][T10870] RBP: 00007f94a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2686.357785][T10870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2686.365793][T10870] R13: 00007f94a3c16218 R14: 00007f94a3c16180 R15: 00007ffd817547e8 [ 2686.373822][T10870] [ 2686.451119][T10871] netlink: 13183 bytes leftover after parsing attributes in process `syz.4.10868'. [ 2686.779487][T10891] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.10873'. [ 2686.849444][T10891] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2686.878813][T10891] CPU: 0 PID: 10891 Comm: syz.3.10873 Not tainted syzkaller #0 [ 2686.886464][T10891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2686.896587][T10891] Call Trace: [ 2686.899915][T10891] [ 2686.902890][T10891] dump_stack_lvl+0x188/0x24e [ 2686.907643][T10891] ? show_regs_print_info+0x12/0x12 [ 2686.912913][T10891] ? load_image+0x400/0x400 [ 2686.917494][T10891] sysfs_warn_dup+0x8a/0xa0 [ 2686.922058][T10891] sysfs_do_create_link_sd+0xc0/0x110 [ 2686.927475][T10891] device_add+0x7ed/0xfb0 [ 2686.931858][T10891] wiphy_register+0x1d9f/0x2ac0 [ 2686.936766][T10891] ? cfg80211_event_work+0x40/0x40 [ 2686.941936][T10891] ? minstrel_ht_alloc+0x894/0xa20 [ 2686.947132][T10891] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2686.953263][T10891] ieee80211_register_hw+0x2d00/0x39f0 [ 2686.958795][T10891] ? ieee80211_register_hw+0xea1/0x39f0 [ 2686.964389][T10891] ? ieee80211_register_hw+0xea1/0x39f0 [ 2686.970075][T10891] ? ieee80211_tasklet_handler+0x20/0x20 [ 2686.975784][T10891] ? memset+0x1e/0x40 [ 2686.979797][T10891] ? __hrtimer_init+0x186/0x270 [ 2686.984724][T10891] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2686.990514][T10891] hwsim_new_radio_nl+0xafa/0xce0 [ 2686.995588][T10891] genl_family_rcv_msg_doit+0x22a/0x330 [ 2687.001176][T10891] ? end_current_label_crit_section+0x170/0x170 [ 2687.007455][T10891] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2687.013387][T10891] ? bpf_lsm_capable+0x5/0x10 [ 2687.018099][T10891] ? security_capable+0x85/0xb0 [ 2687.022994][T10891] genl_rcv_msg+0x604/0x790 [ 2687.027536][T10891] ? genl_bind+0x360/0x360 [ 2687.031976][T10891] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2687.038356][T10891] netlink_rcv_skb+0x1fb/0x450 [ 2687.043158][T10891] ? genl_bind+0x360/0x360 [ 2687.047599][T10891] ? netlink_ack+0x1170/0x1170 [ 2687.052407][T10891] ? down_read+0x1a8/0x2d0 [ 2687.056889][T10891] genl_rcv+0x24/0x40 [ 2687.060909][T10891] netlink_unicast+0x74d/0x8d0 [ 2687.065803][T10891] netlink_sendmsg+0x8ad/0xbd0 [ 2687.070612][T10891] ? netlink_getsockopt+0x550/0x550 [ 2687.075854][T10891] ? aa_sock_msg_perm+0x94/0x150 [ 2687.080830][T10891] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2687.086150][T10891] ? security_socket_sendmsg+0x7c/0xa0 [ 2687.091655][T10891] ? netlink_getsockopt+0x550/0x550 [ 2687.096890][T10891] ____sys_sendmsg+0x5be/0x970 [ 2687.101700][T10891] ? __sys_sendmsg_sock+0x30/0x30 [ 2687.106815][T10891] ? __import_iovec+0x315/0x500 [ 2687.111698][T10891] ? import_iovec+0x6f/0xa0 [ 2687.116236][T10891] ___sys_sendmsg+0x2a2/0x360 [ 2687.120953][T10891] ? __sys_sendmsg+0x290/0x290 [ 2687.125779][T10891] ? ktime_get_real_ts64+0x440/0x440 [ 2687.131122][T10891] __se_sys_sendmsg+0x1bb/0x2a0 [ 2687.136017][T10891] ? __x64_sys_sendmsg+0x80/0x80 [ 2687.141011][T10891] ? lockdep_hardirqs_on+0x94/0x140 [ 2687.146240][T10891] do_syscall_64+0x4c/0xa0 [ 2687.150702][T10891] ? clear_bhb_loop+0x60/0xb0 [ 2687.155418][T10891] ? clear_bhb_loop+0x60/0xb0 [ 2687.160134][T10891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2687.166148][T10891] RIP: 0033:0x7fc50d79ce59 [ 2687.170606][T10891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2687.190250][T10891] RSP: 002b:00007fc50e57a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2687.198700][T10891] RAX: ffffffffffffffda RBX: 00007fc50da16180 RCX: 00007fc50d79ce59 [ 2687.206713][T10891] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2687.214771][T10891] RBP: 00007fc50d832d6f R08: 0000000000000000 R09: 0000000000000000 [ 2687.222772][T10891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2687.230778][T10891] R13: 00007fc50da16218 R14: 00007fc50da16180 R15: 00007ffe9c5c8ab8 [ 2687.238889][T10891] [ 2687.636910][T10909] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.10877'. [ 2687.661229][T10909] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2687.688454][T10909] CPU: 0 PID: 10909 Comm: syz.0.10877 Not tainted syzkaller #0 [ 2687.696083][T10909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2687.706168][T10909] Call Trace: [ 2687.709482][T10909] [ 2687.712444][T10909] dump_stack_lvl+0x188/0x24e [ 2687.717177][T10909] ? show_regs_print_info+0x12/0x12 [ 2687.722420][T10909] ? load_image+0x400/0x400 [ 2687.726973][T10909] sysfs_warn_dup+0x8a/0xa0 [ 2687.731513][T10909] sysfs_do_create_link_sd+0xc0/0x110 [ 2687.736934][T10909] device_add+0x7ed/0xfb0 [ 2687.741301][T10909] wiphy_register+0x1d9f/0x2ac0 [ 2687.746212][T10909] ? cfg80211_event_work+0x40/0x40 [ 2687.751366][T10909] ? minstrel_ht_alloc+0x894/0xa20 [ 2687.756522][T10909] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2687.762637][T10909] ieee80211_register_hw+0x2d00/0x39f0 [ 2687.768156][T10909] ? ieee80211_register_hw+0xea1/0x39f0 [ 2687.773744][T10909] ? ieee80211_register_hw+0xea1/0x39f0 [ 2687.779337][T10909] ? ieee80211_tasklet_handler+0x20/0x20 [ 2687.785016][T10909] ? memset+0x1e/0x40 [ 2687.789030][T10909] ? __hrtimer_init+0x186/0x270 [ 2687.793919][T10909] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2687.799702][T10909] hwsim_new_radio_nl+0xafa/0xce0 [ 2687.804888][T10909] genl_family_rcv_msg_doit+0x22a/0x330 [ 2687.810484][T10909] ? end_current_label_crit_section+0x170/0x170 [ 2687.816773][T10909] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2687.822719][T10909] ? bpf_lsm_capable+0x5/0x10 [ 2687.827432][T10909] ? security_capable+0x85/0xb0 [ 2687.832335][T10909] genl_rcv_msg+0x604/0x790 [ 2687.836883][T10909] ? lock_chain_count+0x20/0x20 [ 2687.841777][T10909] ? genl_bind+0x360/0x360 [ 2687.846229][T10909] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2687.852619][T10909] netlink_rcv_skb+0x1fb/0x450 [ 2687.857427][T10909] ? genl_bind+0x360/0x360 [ 2687.861882][T10909] ? netlink_ack+0x1170/0x1170 [ 2687.866695][T10909] ? down_read+0x1a8/0x2d0 [ 2687.871167][T10909] genl_rcv+0x24/0x40 [ 2687.875183][T10909] netlink_unicast+0x74d/0x8d0 [ 2687.879996][T10909] netlink_sendmsg+0x8ad/0xbd0 [ 2687.884807][T10909] ? netlink_getsockopt+0x550/0x550 [ 2687.890051][T10909] ? aa_sock_msg_perm+0x94/0x150 [ 2687.895027][T10909] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2687.900367][T10909] ? security_socket_sendmsg+0x7c/0xa0 [ 2687.905870][T10909] ? netlink_getsockopt+0x550/0x550 [ 2687.911109][T10909] ____sys_sendmsg+0x5be/0x970 [ 2687.915926][T10909] ? __sys_sendmsg_sock+0x30/0x30 [ 2687.920991][T10909] ? __import_iovec+0x315/0x500 [ 2687.925881][T10909] ? import_iovec+0x6f/0xa0 [ 2687.930419][T10909] ___sys_sendmsg+0x2a2/0x360 [ 2687.935142][T10909] ? __lock_acquire+0x7d10/0x7d10 [ 2687.940210][T10909] ? __sys_sendmsg+0x290/0x290 [ 2687.946620][T10909] __se_sys_sendmsg+0x1bb/0x2a0 [ 2687.951513][T10909] ? __x64_sys_sendmsg+0x80/0x80 [ 2687.956597][T10909] ? lockdep_hardirqs_on+0x94/0x140 [ 2687.961851][T10909] do_syscall_64+0x4c/0xa0 [ 2687.966313][T10909] ? clear_bhb_loop+0x60/0xb0 [ 2687.971027][T10909] ? clear_bhb_loop+0x60/0xb0 [ 2687.975753][T10909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2687.981686][T10909] RIP: 0033:0x7f94a399ce59 [ 2687.986140][T10909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2688.005787][T10909] RSP: 002b:00007f94a48c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2688.014239][T10909] RAX: ffffffffffffffda RBX: 00007f94a3c16270 RCX: 00007f94a399ce59 [ 2688.022245][T10909] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2688.030256][T10909] RBP: 00007f94a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2688.038349][T10909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2688.046439][T10909] R13: 00007f94a3c16308 R14: 00007f94a3c16270 R15: 00007ffd817547e8 [ 2688.054458][T10909] [ 2688.237597][T10915] netlink: 'syz.1.10878': attribute type 22 has an invalid length. [ 2688.260234][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10878'. [ 2688.711832][T10926] netlink: 'syz.1.10882': attribute type 3 has an invalid length. [ 2688.745986][T10926] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.10882'. [ 2688.824830][T10926] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10882'. [ 2689.111488][T10942] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.10887'. [ 2689.188540][T10942] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2689.238679][T10942] CPU: 1 PID: 10942 Comm: syz.2.10887 Not tainted syzkaller #0 [ 2689.246326][T10942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2689.256434][T10942] Call Trace: [ 2689.259750][T10942] [ 2689.262737][T10942] dump_stack_lvl+0x188/0x24e [ 2689.267476][T10942] ? show_regs_print_info+0x12/0x12 [ 2689.272762][T10942] ? load_image+0x400/0x400 [ 2689.277343][T10942] sysfs_warn_dup+0x8a/0xa0 [ 2689.281924][T10942] sysfs_do_create_link_sd+0xc0/0x110 [ 2689.287356][T10942] device_add+0x7ed/0xfb0 [ 2689.291754][T10942] wiphy_register+0x1d9f/0x2ac0 [ 2689.296697][T10942] ? cfg80211_event_work+0x40/0x40 [ 2689.301873][T10942] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2689.308093][T10942] ? ieee80211_register_hw+0x2c51/0x39f0 [ 2689.313804][T10942] ieee80211_register_hw+0x2d00/0x39f0 [ 2689.319351][T10942] ? ieee80211_register_hw+0xea1/0x39f0 [ 2689.324965][T10942] ? ieee80211_register_hw+0xea1/0x39f0 [ 2689.330580][T10942] ? ieee80211_tasklet_handler+0x20/0x20 [ 2689.336280][T10942] ? lockdep_hardirqs_on+0x94/0x140 [ 2689.341532][T10942] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2689.347765][T10942] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2689.353595][T10942] hwsim_new_radio_nl+0xafa/0xce0 [ 2689.358709][T10942] genl_family_rcv_msg_doit+0x22a/0x330 [ 2689.364315][T10942] ? end_current_label_crit_section+0x170/0x170 [ 2689.370626][T10942] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2689.376584][T10942] ? bpf_lsm_capable+0x5/0x10 [ 2689.381313][T10942] ? security_capable+0x85/0xb0 [ 2689.386246][T10942] genl_rcv_msg+0x604/0x790 [ 2689.390807][T10942] ? genl_bind+0x360/0x360 [ 2689.395277][T10942] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2689.401690][T10942] netlink_rcv_skb+0x1fb/0x450 [ 2689.406539][T10942] ? genl_bind+0x360/0x360 [ 2689.411020][T10942] ? netlink_ack+0x1170/0x1170 [ 2689.415869][T10942] ? down_read+0x1a8/0x2d0 [ 2689.420360][T10942] genl_rcv+0x24/0x40 [ 2689.424396][T10942] netlink_unicast+0x74d/0x8d0 [ 2689.429231][T10942] netlink_sendmsg+0x8ad/0xbd0 [ 2689.434067][T10942] ? netlink_getsockopt+0x550/0x550 [ 2689.439327][T10942] ? aa_sock_msg_perm+0x94/0x150 [ 2689.444320][T10942] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2689.449655][T10942] ? security_socket_sendmsg+0x7c/0xa0 [ 2689.455282][T10942] ? netlink_getsockopt+0x550/0x550 [ 2689.460552][T10942] ____sys_sendmsg+0x5be/0x970 [ 2689.465398][T10942] ? __sys_sendmsg_sock+0x30/0x30 [ 2689.470626][T10942] ? __import_iovec+0x315/0x500 [ 2689.475540][T10942] ? import_iovec+0x6f/0xa0 [ 2689.480101][T10942] ___sys_sendmsg+0x2a2/0x360 [ 2689.484844][T10942] ? try_to_wake_up+0x6ae/0x1080 [ 2689.489848][T10942] ? __sys_sendmsg+0x290/0x290 [ 2689.494699][T10942] ? ktime_get_real_ts64+0x440/0x440 [ 2689.500065][T10942] __se_sys_sendmsg+0x1bb/0x2a0 [ 2689.504985][T10942] ? __x64_sys_sendmsg+0x80/0x80 [ 2689.510012][T10942] ? lockdep_hardirqs_on+0x94/0x140 [ 2689.515348][T10942] do_syscall_64+0x4c/0xa0 [ 2689.519843][T10942] ? clear_bhb_loop+0x60/0xb0 [ 2689.524577][T10942] ? clear_bhb_loop+0x60/0xb0 [ 2689.529311][T10942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2689.535264][T10942] RIP: 0033:0x7f170cf9ce59 [ 2689.539720][T10942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2689.559468][T10942] RSP: 002b:00007f170dde5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2689.568078][T10942] RAX: ffffffffffffffda RBX: 00007f170d216090 RCX: 00007f170cf9ce59 [ 2689.576108][T10942] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2689.584131][T10942] RBP: 00007f170d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2689.592156][T10942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2689.600185][T10942] R13: 00007f170d216128 R14: 00007f170d216090 R15: 00007ffccb9976a8 [ 2689.608275][T10942] [ 2689.886414][T10962] sctp: [Deprecated]: syz.4.10888 (pid 10962) Use of int in maxseg socket option. [ 2689.886414][T10962] Use struct sctp_assoc_value instead [ 2690.003342][T10965] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.10891'. [ 2690.009262][T10948] netlink: 'syz.4.10888': attribute type 10 has an invalid length. [ 2690.067264][T10965] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2690.085598][T10965] CPU: 0 PID: 10965 Comm: syz.3.10891 Not tainted syzkaller #0 [ 2690.093322][T10965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2690.103433][T10965] Call Trace: [ 2690.106751][T10965] [ 2690.109729][T10965] dump_stack_lvl+0x188/0x24e [ 2690.114477][T10965] ? show_regs_print_info+0x12/0x12 [ 2690.119745][T10965] ? load_image+0x400/0x400 [ 2690.124338][T10965] sysfs_warn_dup+0x8a/0xa0 [ 2690.128905][T10965] sysfs_do_create_link_sd+0xc0/0x110 [ 2690.134341][T10965] device_add+0x7ed/0xfb0 [ 2690.138739][T10965] wiphy_register+0x1d9f/0x2ac0 [ 2690.143680][T10965] ? cfg80211_event_work+0x40/0x40 [ 2690.148868][T10965] ? minstrel_ht_alloc+0x894/0xa20 [ 2690.154055][T10965] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2690.160185][T10965] ieee80211_register_hw+0x2d00/0x39f0 [ 2690.165712][T10965] ? ieee80211_register_hw+0xea1/0x39f0 [ 2690.171302][T10965] ? ieee80211_register_hw+0xea1/0x39f0 [ 2690.176896][T10965] ? ieee80211_tasklet_handler+0x20/0x20 [ 2690.182577][T10965] ? memset+0x1e/0x40 [ 2690.186594][T10965] ? __hrtimer_init+0x186/0x270 [ 2690.191493][T10965] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2690.197279][T10965] hwsim_new_radio_nl+0xafa/0xce0 [ 2690.202372][T10965] genl_family_rcv_msg_doit+0x22a/0x330 [ 2690.207970][T10965] ? end_current_label_crit_section+0x170/0x170 [ 2690.214243][T10965] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2690.220181][T10965] ? bpf_lsm_capable+0x5/0x10 [ 2690.224888][T10965] ? security_capable+0x85/0xb0 [ 2690.229775][T10965] genl_rcv_msg+0x604/0x790 [ 2690.234314][T10965] ? genl_bind+0x360/0x360 [ 2690.238757][T10965] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2690.245132][T10965] netlink_rcv_skb+0x1fb/0x450 [ 2690.249928][T10965] ? genl_bind+0x360/0x360 [ 2690.254466][T10965] ? netlink_ack+0x1170/0x1170 [ 2690.259309][T10965] ? down_read+0x1a8/0x2d0 [ 2690.263770][T10965] genl_rcv+0x24/0x40 [ 2690.267782][T10965] netlink_unicast+0x74d/0x8d0 [ 2690.272653][T10965] netlink_sendmsg+0x8ad/0xbd0 [ 2690.277603][T10965] ? netlink_getsockopt+0x550/0x550 [ 2690.282845][T10965] ? aa_sock_msg_perm+0x94/0x150 [ 2690.287816][T10965] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2690.293131][T10965] ? security_socket_sendmsg+0x7c/0xa0 [ 2690.298629][T10965] ? netlink_getsockopt+0x550/0x550 [ 2690.303870][T10965] ____sys_sendmsg+0x5be/0x970 [ 2690.308680][T10965] ? __sys_sendmsg_sock+0x30/0x30 [ 2690.313743][T10965] ? __import_iovec+0x315/0x500 [ 2690.318636][T10965] ? import_iovec+0x6f/0xa0 [ 2690.323169][T10965] ___sys_sendmsg+0x2a2/0x360 [ 2690.327881][T10965] ? __lock_acquire+0x7d10/0x7d10 [ 2690.332938][T10965] ? __sys_sendmsg+0x290/0x290 [ 2690.337781][T10965] __se_sys_sendmsg+0x1bb/0x2a0 [ 2690.342849][T10965] ? __x64_sys_sendmsg+0x80/0x80 [ 2690.347835][T10965] ? lockdep_hardirqs_on+0x94/0x140 [ 2690.353070][T10965] do_syscall_64+0x4c/0xa0 [ 2690.357518][T10965] ? clear_bhb_loop+0x60/0xb0 [ 2690.362223][T10965] ? clear_bhb_loop+0x60/0xb0 [ 2690.366928][T10965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2690.372850][T10965] RIP: 0033:0x7fc50d79ce59 [ 2690.377293][T10965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2690.396940][T10965] RSP: 002b:00007fc50e57a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2690.405386][T10965] RAX: ffffffffffffffda RBX: 00007fc50da16180 RCX: 00007fc50d79ce59 [ 2690.413382][T10965] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2690.421378][T10965] RBP: 00007fc50d832d6f R08: 0000000000000000 R09: 0000000000000000 [ 2690.429373][T10965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2690.437366][T10965] R13: 00007fc50da16218 R14: 00007fc50da16180 R15: 00007ffe9c5c8ab8 [ 2690.445385][T10965] [ 2690.744481][T10973] netlink: 'syz.4.10893': attribute type 10 has an invalid length. [ 2690.974720][T10977] sctp: [Deprecated]: syz.4.10893 (pid 10977) Use of int in maxseg socket option. [ 2690.974720][T10977] Use struct sctp_assoc_value instead [ 2691.148989][T10991] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.10896'. [ 2691.277570][T10991] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2691.335270][T10991] CPU: 1 PID: 10991 Comm: syz.1.10896 Not tainted syzkaller #0 [ 2691.342911][T10991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2691.353022][T10991] Call Trace: [ 2691.356344][T10991] [ 2691.359317][T10991] dump_stack_lvl+0x188/0x24e [ 2691.364061][T10991] ? show_regs_print_info+0x12/0x12 [ 2691.369329][T10991] ? load_image+0x400/0x400 [ 2691.373986][T10991] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2691.380125][T10991] ? __kasan_kmalloc+0x8e/0xa0 [ 2691.384970][T10991] sysfs_warn_dup+0x8a/0xa0 [ 2691.389544][T10991] sysfs_do_create_link_sd+0xc0/0x110 [ 2691.395017][T10991] device_add+0x7ed/0xfb0 [ 2691.399446][T10991] wiphy_register+0x1d9f/0x2ac0 [ 2691.404396][T10991] ? cfg80211_event_work+0x40/0x40 [ 2691.409582][T10991] ? minstrel_ht_alloc+0x894/0xa20 [ 2691.414804][T10991] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2691.420948][T10991] ieee80211_register_hw+0x2d00/0x39f0 [ 2691.426484][T10991] ? lockdep_hardirqs_on+0x94/0x140 [ 2691.431763][T10991] ? ieee80211_register_hw+0xea1/0x39f0 [ 2691.437378][T10991] ? ieee80211_register_hw+0xea1/0x39f0 [ 2691.443007][T10991] ? ieee80211_tasklet_handler+0x20/0x20 [ 2691.448727][T10991] ? memset+0x1e/0x40 [ 2691.452769][T10991] ? __hrtimer_init+0x186/0x270 [ 2691.457690][T10991] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2691.463521][T10991] hwsim_new_radio_nl+0xafa/0xce0 [ 2691.468634][T10991] genl_family_rcv_msg_doit+0x22a/0x330 [ 2691.474252][T10991] ? end_current_label_crit_section+0x170/0x170 [ 2691.480586][T10991] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2691.486643][T10991] ? bpf_lsm_capable+0x5/0x10 [ 2691.491407][T10991] ? security_capable+0x85/0xb0 [ 2691.496323][T10991] genl_rcv_msg+0x604/0x790 [ 2691.500887][T10991] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2691.507117][T10991] ? genl_bind+0x360/0x360 [ 2691.511614][T10991] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2691.518034][T10991] ? lock_acquire+0x225/0x4a0 [ 2691.522790][T10991] netlink_rcv_skb+0x1fb/0x450 [ 2691.527623][T10991] ? genl_bind+0x360/0x360 [ 2691.532112][T10991] ? netlink_ack+0x1170/0x1170 [ 2691.536961][T10991] ? down_read+0x1a8/0x2d0 [ 2691.541464][T10991] genl_rcv+0x24/0x40 [ 2691.545510][T10991] netlink_unicast+0x74d/0x8d0 [ 2691.550362][T10991] netlink_sendmsg+0x8ad/0xbd0 [ 2691.555288][T10991] ? netlink_getsockopt+0x550/0x550 [ 2691.560560][T10991] ? aa_sock_msg_perm+0x94/0x150 [ 2691.565563][T10991] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2691.570900][T10991] ? security_socket_sendmsg+0x7c/0xa0 [ 2691.576426][T10991] ? netlink_getsockopt+0x550/0x550 [ 2691.581694][T10991] ____sys_sendmsg+0x5be/0x970 [ 2691.586532][T10991] ? __sys_sendmsg_sock+0x30/0x30 [ 2691.591627][T10991] ? __import_iovec+0x315/0x500 [ 2691.596545][T10991] ? import_iovec+0x6f/0xa0 [ 2691.601099][T10991] ___sys_sendmsg+0x2a2/0x360 [ 2691.605837][T10991] ? try_to_wake_up+0x6ae/0x1080 [ 2691.610838][T10991] ? __sys_sendmsg+0x290/0x290 [ 2691.615689][T10991] ? ktime_get_real_ts64+0x440/0x440 [ 2691.621059][T10991] __se_sys_sendmsg+0x1bb/0x2a0 [ 2691.625969][T10991] ? __x64_sys_sendmsg+0x80/0x80 [ 2691.630984][T10991] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2691.636941][T10991] do_syscall_64+0x4c/0xa0 [ 2691.641421][T10991] ? clear_bhb_loop+0x60/0xb0 [ 2691.646184][T10991] ? clear_bhb_loop+0x60/0xb0 [ 2691.650932][T10991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2691.656978][T10991] RIP: 0033:0x7fa0bef9ce59 [ 2691.661450][T10991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2691.681381][T10991] RSP: 002b:00007fa0bfde8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2691.689845][T10991] RAX: ffffffffffffffda RBX: 00007fa0bf216180 RCX: 00007fa0bef9ce59 [ 2691.697859][T10991] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2691.705889][T10991] RBP: 00007fa0bf032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2691.713928][T10991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2691.721955][T10991] R13: 00007fa0bf216218 R14: 00007fa0bf216180 R15: 00007ffc9a7c0af8 [ 2691.729990][T10991] [ 2691.988071][T10999] netlink: 'syz.2.10900': attribute type 3 has an invalid length. [ 2692.028956][T10999] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.10900'. [ 2692.141640][T10999] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10900'. [ 2692.592291][T11017] netlink: 'syz.1.10903': attribute type 10 has an invalid length. [ 2692.608919][T11020] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.10904'. [ 2692.741562][T11020] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2692.749752][T11020] CPU: 1 PID: 11020 Comm: syz.0.10904 Not tainted syzkaller #0 [ 2692.757362][T11020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2692.767482][T11020] Call Trace: [ 2692.770820][T11020] [ 2692.773797][T11020] dump_stack_lvl+0x188/0x24e [ 2692.778565][T11020] ? show_regs_print_info+0x12/0x12 [ 2692.783852][T11020] ? load_image+0x400/0x400 [ 2692.788440][T11020] sysfs_warn_dup+0x8a/0xa0 [ 2692.793013][T11020] sysfs_do_create_link_sd+0xc0/0x110 [ 2692.798468][T11020] device_add+0x7ed/0xfb0 [ 2692.802866][T11020] wiphy_register+0x1d9f/0x2ac0 [ 2692.807820][T11020] ? cfg80211_event_work+0x40/0x40 [ 2692.813020][T11020] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2692.819406][T11020] ieee80211_register_hw+0x2d00/0x39f0 [ 2692.824962][T11020] ? ieee80211_register_hw+0xea1/0x39f0 [ 2692.830586][T11020] ? ieee80211_register_hw+0xea1/0x39f0 [ 2692.836219][T11020] ? ieee80211_tasklet_handler+0x20/0x20 [ 2692.841951][T11020] ? memset+0x1e/0x40 [ 2692.846066][T11020] ? __hrtimer_init+0x186/0x270 [ 2692.850954][T11020] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2692.856731][T11020] hwsim_new_radio_nl+0xafa/0xce0 [ 2692.861812][T11020] genl_family_rcv_msg_doit+0x22a/0x330 [ 2692.867389][T11020] ? end_current_label_crit_section+0x170/0x170 [ 2692.873664][T11020] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2692.879593][T11020] ? bpf_lsm_capable+0x5/0x10 [ 2692.884299][T11020] ? security_capable+0x85/0xb0 [ 2692.889195][T11020] genl_rcv_msg+0x604/0x790 [ 2692.893731][T11020] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2692.899499][T11020] ? genl_bind+0x360/0x360 [ 2692.903944][T11020] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2692.910324][T11020] netlink_rcv_skb+0x1fb/0x450 [ 2692.915134][T11020] ? genl_bind+0x360/0x360 [ 2692.919604][T11020] ? netlink_ack+0x1170/0x1170 [ 2692.924437][T11020] ? down_read+0x1a8/0x2d0 [ 2692.928911][T11020] genl_rcv+0x24/0x40 [ 2692.932933][T11020] netlink_unicast+0x74d/0x8d0 [ 2692.937750][T11020] netlink_sendmsg+0x8ad/0xbd0 [ 2692.942560][T11020] ? netlink_getsockopt+0x550/0x550 [ 2692.947824][T11020] ? aa_sock_msg_perm+0x94/0x150 [ 2692.952836][T11020] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2692.958182][T11020] ? security_socket_sendmsg+0x7c/0xa0 [ 2692.963696][T11020] ? netlink_getsockopt+0x550/0x550 [ 2692.968937][T11020] ____sys_sendmsg+0x5be/0x970 [ 2692.973752][T11020] ? __sys_sendmsg_sock+0x30/0x30 [ 2692.978823][T11020] ? __import_iovec+0x315/0x500 [ 2692.983713][T11020] ? import_iovec+0x6f/0xa0 [ 2692.988256][T11020] ___sys_sendmsg+0x2a2/0x360 [ 2692.992989][T11020] ? __sys_sendmsg+0x290/0x290 [ 2692.997814][T11020] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2693.003626][T11020] __se_sys_sendmsg+0x1bb/0x2a0 [ 2693.008545][T11020] ? __x64_sys_sendmsg+0x80/0x80 [ 2693.013567][T11020] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2693.019530][T11020] do_syscall_64+0x4c/0xa0 [ 2693.024007][T11020] ? clear_bhb_loop+0x60/0xb0 [ 2693.028751][T11020] ? clear_bhb_loop+0x60/0xb0 [ 2693.033480][T11020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2693.039507][T11020] RIP: 0033:0x7f94a399ce59 [ 2693.043960][T11020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2693.063691][T11020] RSP: 002b:00007f94a4902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2693.072154][T11020] RAX: ffffffffffffffda RBX: 00007f94a3c16090 RCX: 00007f94a399ce59 [ 2693.080163][T11020] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2693.088179][T11020] RBP: 00007f94a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2693.096187][T11020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2693.104190][T11020] R13: 00007f94a3c16128 R14: 00007f94a3c16090 R15: 00007ffd817547e8 [ 2693.112209][T11020] [ 2693.294039][T11028] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10907'. [ 2693.315384][T11022] sctp: [Deprecated]: syz.1.10903 (pid 11022) Use of int in maxseg socket option. [ 2693.315384][T11022] Use struct sctp_assoc_value instead [ 2693.380236][T11028] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2693.388478][T11028] CPU: 1 PID: 11028 Comm: syz.4.10907 Not tainted syzkaller #0 [ 2693.396095][T11028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2693.406202][T11028] Call Trace: [ 2693.409530][T11028] [ 2693.412502][T11028] dump_stack_lvl+0x188/0x24e [ 2693.417270][T11028] ? show_regs_print_info+0x12/0x12 [ 2693.422544][T11028] ? load_image+0x400/0x400 [ 2693.427211][T11028] sysfs_warn_dup+0x8a/0xa0 [ 2693.431793][T11028] sysfs_do_create_link_sd+0xc0/0x110 [ 2693.437224][T11028] device_add+0x7ed/0xfb0 [ 2693.441624][T11028] wiphy_register+0x1d9f/0x2ac0 [ 2693.446564][T11028] ? cfg80211_event_work+0x40/0x40 [ 2693.452094][T11028] ? minstrel_ht_alloc+0x894/0xa20 [ 2693.457292][T11028] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2693.463414][T11028] ieee80211_register_hw+0x2d00/0x39f0 [ 2693.468962][T11028] ? lockdep_hardirqs_on+0x94/0x140 [ 2693.474253][T11028] ? ieee80211_register_hw+0xea1/0x39f0 [ 2693.479862][T11028] ? ieee80211_register_hw+0xea1/0x39f0 [ 2693.485499][T11028] ? ieee80211_tasklet_handler+0x20/0x20 [ 2693.491210][T11028] ? memset+0x1e/0x40 [ 2693.495272][T11028] ? __hrtimer_init+0x186/0x270 [ 2693.500190][T11028] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2693.506006][T11028] hwsim_new_radio_nl+0xafa/0xce0 [ 2693.511104][T11028] genl_family_rcv_msg_doit+0x22a/0x330 [ 2693.516790][T11028] ? end_current_label_crit_section+0x170/0x170 [ 2693.523089][T11028] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2693.529043][T11028] ? bpf_lsm_capable+0x5/0x10 [ 2693.533783][T11028] ? security_capable+0x85/0xb0 [ 2693.538710][T11028] genl_rcv_msg+0x604/0x790 [ 2693.543354][T11028] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2693.549588][T11028] ? genl_bind+0x360/0x360 [ 2693.554084][T11028] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2693.560499][T11028] netlink_rcv_skb+0x1fb/0x450 [ 2693.565332][T11028] ? genl_bind+0x360/0x360 [ 2693.569888][T11028] ? netlink_ack+0x1170/0x1170 [ 2693.574724][T11028] ? down_read+0x1a8/0x2d0 [ 2693.579213][T11028] genl_rcv+0x24/0x40 [ 2693.583255][T11028] netlink_unicast+0x74d/0x8d0 [ 2693.588097][T11028] netlink_sendmsg+0x8ad/0xbd0 [ 2693.592945][T11028] ? netlink_getsockopt+0x550/0x550 [ 2693.598227][T11028] ? aa_sock_msg_perm+0x94/0x150 [ 2693.603255][T11028] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2693.608777][T11028] ? security_socket_sendmsg+0x7c/0xa0 [ 2693.614304][T11028] ? netlink_getsockopt+0x550/0x550 [ 2693.619573][T11028] ____sys_sendmsg+0x5be/0x970 [ 2693.624421][T11028] ? __sys_sendmsg_sock+0x30/0x30 [ 2693.629516][T11028] ? __import_iovec+0x315/0x500 [ 2693.634428][T11028] ? import_iovec+0x6f/0xa0 [ 2693.638992][T11028] ___sys_sendmsg+0x2a2/0x360 [ 2693.643743][T11028] ? __sys_sendmsg+0x290/0x290 [ 2693.648947][T11028] ? __fget_files+0x59/0x4b0 [ 2693.653633][T11028] __se_sys_sendmsg+0x1bb/0x2a0 [ 2693.658551][T11028] ? __x64_sys_sendmsg+0x80/0x80 [ 2693.663577][T11028] ? lockdep_hardirqs_on+0x94/0x140 [ 2693.668857][T11028] do_syscall_64+0x4c/0xa0 [ 2693.673341][T11028] ? clear_bhb_loop+0x60/0xb0 [ 2693.678082][T11028] ? clear_bhb_loop+0x60/0xb0 [ 2693.682825][T11028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2693.688787][T11028] RIP: 0033:0x7f48c4f9ce59 [ 2693.693262][T11028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2693.712923][T11028] RSP: 002b:00007f48c5dfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2693.721421][T11028] RAX: ffffffffffffffda RBX: 00007f48c5216090 RCX: 00007f48c4f9ce59 [ 2693.729465][T11028] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2693.737487][T11028] RBP: 00007f48c5032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2693.745490][T11028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2693.753495][T11028] R13: 00007f48c5216128 R14: 00007f48c5216090 R15: 00007fff4d2c7848 [ 2693.761514][T11028] [ 2694.002053][T11043] netlink: 'syz.2.10910': attribute type 10 has an invalid length. [ 2694.139907][T11045] sctp: [Deprecated]: syz.2.10910 (pid 11045) Use of int in maxseg socket option. [ 2694.139907][T11045] Use struct sctp_assoc_value instead [ 2694.408267][T11054] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.10914'. [ 2694.455064][T11054] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2694.510206][T11054] CPU: 0 PID: 11054 Comm: syz.0.10914 Not tainted syzkaller #0 [ 2694.517951][T11054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2694.528237][T11054] Call Trace: [ 2694.531564][T11054] [ 2694.534561][T11054] dump_stack_lvl+0x188/0x24e [ 2694.539310][T11054] ? show_regs_print_info+0x12/0x12 [ 2694.544569][T11054] ? load_image+0x400/0x400 [ 2694.549116][T11054] sysfs_warn_dup+0x8a/0xa0 [ 2694.553663][T11054] sysfs_do_create_link_sd+0xc0/0x110 [ 2694.559164][T11054] device_add+0x7ed/0xfb0 [ 2694.563530][T11054] wiphy_register+0x1d9f/0x2ac0 [ 2694.568444][T11054] ? cfg80211_event_work+0x40/0x40 [ 2694.573591][T11054] ? minstrel_ht_alloc+0x894/0xa20 [ 2694.578741][T11054] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2694.584836][T11054] ieee80211_register_hw+0x2d00/0x39f0 [ 2694.590345][T11054] ? ieee80211_register_hw+0xea1/0x39f0 [ 2694.595933][T11054] ? ieee80211_register_hw+0xea1/0x39f0 [ 2694.601526][T11054] ? ieee80211_tasklet_handler+0x20/0x20 [ 2694.607202][T11054] ? memset+0x1e/0x40 [ 2694.611212][T11054] ? __hrtimer_init+0x186/0x270 [ 2694.616108][T11054] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2694.621888][T11054] hwsim_new_radio_nl+0xafa/0xce0 [ 2694.626967][T11054] genl_family_rcv_msg_doit+0x22a/0x330 [ 2694.632553][T11054] ? end_current_label_crit_section+0x170/0x170 [ 2694.638832][T11054] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2694.644761][T11054] ? bpf_lsm_capable+0x5/0x10 [ 2694.649473][T11054] ? security_capable+0x85/0xb0 [ 2694.654354][T11054] genl_rcv_msg+0x604/0x790 [ 2694.658893][T11054] ? genl_bind+0x360/0x360 [ 2694.663340][T11054] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2694.669724][T11054] netlink_rcv_skb+0x1fb/0x450 [ 2694.674523][T11054] ? genl_bind+0x360/0x360 [ 2694.678969][T11054] ? netlink_ack+0x1170/0x1170 [ 2694.683782][T11054] ? down_read+0x1a8/0x2d0 [ 2694.688236][T11054] genl_rcv+0x24/0x40 [ 2694.692245][T11054] netlink_unicast+0x74d/0x8d0 [ 2694.697054][T11054] netlink_sendmsg+0x8ad/0xbd0 [ 2694.701867][T11054] ? netlink_getsockopt+0x550/0x550 [ 2694.707109][T11054] ? aa_sock_msg_perm+0x94/0x150 [ 2694.712080][T11054] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2694.717397][T11054] ? security_socket_sendmsg+0x7c/0xa0 [ 2694.722901][T11054] ? netlink_getsockopt+0x550/0x550 [ 2694.728138][T11054] ____sys_sendmsg+0x5be/0x970 [ 2694.732945][T11054] ? __sys_sendmsg_sock+0x30/0x30 [ 2694.738015][T11054] ? __import_iovec+0x315/0x500 [ 2694.742901][T11054] ? import_iovec+0x6f/0xa0 [ 2694.747457][T11054] ___sys_sendmsg+0x2a2/0x360 [ 2694.752189][T11054] ? __sys_sendmsg+0x290/0x290 [ 2694.757030][T11054] ? ktime_get_real_ts64+0x440/0x440 [ 2694.762378][T11054] __se_sys_sendmsg+0x1bb/0x2a0 [ 2694.767278][T11054] ? __x64_sys_sendmsg+0x80/0x80 [ 2694.772267][T11054] ? lockdep_hardirqs_on+0x94/0x140 [ 2694.777500][T11054] do_syscall_64+0x4c/0xa0 [ 2694.781951][T11054] ? clear_bhb_loop+0x60/0xb0 [ 2694.786662][T11054] ? clear_bhb_loop+0x60/0xb0 [ 2694.791384][T11054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2694.797316][T11054] RIP: 0033:0x7f94a399ce59 [ 2694.801756][T11054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2694.821392][T11054] RSP: 002b:00007f94a4902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2694.829840][T11054] RAX: ffffffffffffffda RBX: 00007f94a3c16090 RCX: 00007f94a399ce59 [ 2694.837853][T11054] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2694.845858][T11054] RBP: 00007f94a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2694.853874][T11054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2694.861879][T11054] R13: 00007f94a3c16128 R14: 00007f94a3c16090 R15: 00007ffd817547e8 [ 2694.869898][T11054] [ 2695.134762][T11064] device bond_slave_1 entered promiscuous mode [ 2695.322612][T11064] device syzkaller0 entered promiscuous mode [ 2695.905419][T11085] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.10921'. [ 2696.533728][T11104] sctp: [Deprecated]: syz.2.10923 (pid 11104) Use of int in maxseg socket option. [ 2696.533728][T11104] Use struct sctp_assoc_value instead [ 2696.914688][T11109] sctp: [Deprecated]: syz.0.10926 (pid 11109) Use of int in maxseg socket option. [ 2696.914688][T11109] Use struct sctp_assoc_value instead [ 2697.436605][T11114] sctp: [Deprecated]: syz.4.10928 (pid 11114) Use of int in maxseg socket option. [ 2697.436605][T11114] Use struct sctp_assoc_value instead [ 2700.629360][T11098] netlink: 'syz.2.10923': attribute type 10 has an invalid length. [ 2700.637936][T11107] netlink: 'syz.0.10926': attribute type 10 has an invalid length. [ 2700.658644][T11113] netlink: 'syz.4.10928': attribute type 10 has an invalid length. [ 2700.691046][T11085] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2700.720300][T11085] CPU: 0 PID: 11085 Comm: syz.3.10921 Not tainted syzkaller #0 [ 2700.727960][T11085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2700.738070][T11085] Call Trace: [ 2700.741396][T11085] [ 2700.744359][T11085] dump_stack_lvl+0x188/0x24e [ 2700.749101][T11085] ? show_regs_print_info+0x12/0x12 [ 2700.754357][T11085] ? load_image+0x400/0x400 [ 2700.758928][T11085] sysfs_warn_dup+0x8a/0xa0 [ 2700.763504][T11085] sysfs_do_create_link_sd+0xc0/0x110 [ 2700.768932][T11085] device_add+0x7ed/0xfb0 [ 2700.773312][T11085] wiphy_register+0x1d9f/0x2ac0 [ 2700.778236][T11085] ? cfg80211_event_work+0x40/0x40 [ 2700.783393][T11085] ? minstrel_ht_alloc+0x894/0xa20 [ 2700.788547][T11085] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2700.794666][T11085] ieee80211_register_hw+0x2d00/0x39f0 [ 2700.800193][T11085] ? ieee80211_register_hw+0xea1/0x39f0 [ 2700.805777][T11085] ? ieee80211_register_hw+0xea1/0x39f0 [ 2700.811388][T11085] ? ieee80211_tasklet_handler+0x20/0x20 [ 2700.817097][T11085] ? memset+0x1e/0x40 [ 2700.821131][T11085] ? __hrtimer_init+0x186/0x270 [ 2700.826031][T11085] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2700.831814][T11085] hwsim_new_radio_nl+0xafa/0xce0 [ 2700.836895][T11085] genl_family_rcv_msg_doit+0x22a/0x330 [ 2700.842484][T11085] ? end_current_label_crit_section+0x170/0x170 [ 2700.848777][T11085] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2700.854714][T11085] ? bpf_lsm_capable+0x5/0x10 [ 2700.859432][T11085] ? security_capable+0x85/0xb0 [ 2700.864324][T11085] genl_rcv_msg+0x604/0x790 [ 2700.868957][T11085] ? genl_bind+0x360/0x360 [ 2700.873407][T11085] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2700.879797][T11085] netlink_rcv_skb+0x1fb/0x450 [ 2700.884621][T11085] ? genl_bind+0x360/0x360 [ 2700.889066][T11085] ? netlink_ack+0x1170/0x1170 [ 2700.893865][T11085] ? lockdep_hardirqs_on+0x94/0x140 [ 2700.899125][T11085] ? down_read+0x1a8/0x2d0 [ 2700.903645][T11085] genl_rcv+0x24/0x40 [ 2700.907703][T11085] netlink_unicast+0x74d/0x8d0 [ 2700.912543][T11085] netlink_sendmsg+0x8ad/0xbd0 [ 2700.917369][T11085] ? netlink_getsockopt+0x550/0x550 [ 2700.922630][T11085] ? aa_sock_msg_perm+0x94/0x150 [ 2700.927608][T11085] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2700.932935][T11085] ? security_socket_sendmsg+0x7c/0xa0 [ 2700.938435][T11085] ? netlink_getsockopt+0x550/0x550 [ 2700.943683][T11085] ____sys_sendmsg+0x5be/0x970 [ 2700.948524][T11085] ? __sys_sendmsg_sock+0x30/0x30 [ 2700.953662][T11085] ? __import_iovec+0x315/0x500 [ 2700.958576][T11085] ? import_iovec+0x6f/0xa0 [ 2700.963122][T11085] ___sys_sendmsg+0x2a2/0x360 [ 2700.967862][T11085] ? __sys_sendmsg+0x290/0x290 [ 2700.972704][T11085] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2700.978485][T11085] __se_sys_sendmsg+0x1bb/0x2a0 [ 2700.983390][T11085] ? __x64_sys_sendmsg+0x80/0x80 [ 2700.988382][T11085] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2700.994339][T11085] do_syscall_64+0x4c/0xa0 [ 2700.998798][T11085] ? clear_bhb_loop+0x60/0xb0 [ 2701.003516][T11085] ? clear_bhb_loop+0x60/0xb0 [ 2701.008237][T11085] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2701.014164][T11085] RIP: 0033:0x7fc50d79ce59 [ 2701.018627][T11085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2701.038288][T11085] RSP: 002b:00007fc50e59b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2701.046752][T11085] RAX: ffffffffffffffda RBX: 00007fc50da16090 RCX: 00007fc50d79ce59 [ 2701.054760][T11085] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2701.062762][T11085] RBP: 00007fc50d832d6f R08: 0000000000000000 R09: 0000000000000000 [ 2701.070760][T11085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2701.079033][T11085] R13: 00007fc50da16128 R14: 00007fc50da16090 R15: 00007ffe9c5c8ab8 [ 2701.087053][T11085] [ 2701.275819][T11124] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.10930'. [ 2701.336965][T11124] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2701.350062][T11124] CPU: 0 PID: 11124 Comm: syz.2.10930 Not tainted syzkaller #0 [ 2701.357712][T11124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2701.367831][T11124] Call Trace: [ 2701.371164][T11124] [ 2701.374138][T11124] dump_stack_lvl+0x188/0x24e [ 2701.378881][T11124] ? show_regs_print_info+0x12/0x12 [ 2701.384157][T11124] ? load_image+0x400/0x400 [ 2701.388749][T11124] sysfs_warn_dup+0x8a/0xa0 [ 2701.393326][T11124] sysfs_do_create_link_sd+0xc0/0x110 [ 2701.398761][T11124] device_add+0x7ed/0xfb0 [ 2701.403150][T11124] wiphy_register+0x1d9f/0x2ac0 [ 2701.408103][T11124] ? cfg80211_event_work+0x40/0x40 [ 2701.413285][T11124] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2701.419418][T11124] ieee80211_register_hw+0x2d00/0x39f0 [ 2701.424951][T11124] ? lockdep_hardirqs_on+0x94/0x140 [ 2701.430221][T11124] ? ieee80211_register_hw+0xea1/0x39f0 [ 2701.435831][T11124] ? ieee80211_register_hw+0xea1/0x39f0 [ 2701.441456][T11124] ? ieee80211_tasklet_handler+0x20/0x20 [ 2701.447180][T11124] ? memset+0x1e/0x40 [ 2701.451221][T11124] ? __hrtimer_init+0x186/0x270 [ 2701.456130][T11124] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2701.461914][T11124] hwsim_new_radio_nl+0xafa/0xce0 [ 2701.466987][T11124] genl_family_rcv_msg_doit+0x22a/0x330 [ 2701.472581][T11124] ? rcu_is_watching+0x11/0xa0 [ 2701.477398][T11124] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2701.483323][T11124] ? lockdep_hardirqs_on+0x94/0x140 [ 2701.488576][T11124] genl_rcv_msg+0x604/0x790 [ 2701.493125][T11124] ? genl_bind+0x360/0x360 [ 2701.497570][T11124] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2701.503961][T11124] netlink_rcv_skb+0x1fb/0x450 [ 2701.508779][T11124] ? genl_bind+0x360/0x360 [ 2701.513226][T11124] ? netlink_ack+0x1170/0x1170 [ 2701.518043][T11124] ? down_read+0x1a8/0x2d0 [ 2701.522495][T11124] genl_rcv+0x24/0x40 [ 2701.526513][T11124] netlink_unicast+0x74d/0x8d0 [ 2701.531333][T11124] netlink_sendmsg+0x8ad/0xbd0 [ 2701.536149][T11124] ? netlink_getsockopt+0x550/0x550 [ 2701.541398][T11124] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2701.546715][T11124] ? security_socket_sendmsg+0x7c/0xa0 [ 2701.552227][T11124] ? netlink_getsockopt+0x550/0x550 [ 2701.557462][T11124] ____sys_sendmsg+0x5be/0x970 [ 2701.562281][T11124] ? __sys_sendmsg_sock+0x30/0x30 [ 2701.567351][T11124] ? __import_iovec+0x315/0x500 [ 2701.572236][T11124] ? import_iovec+0x6f/0xa0 [ 2701.576777][T11124] ___sys_sendmsg+0x2a2/0x360 [ 2701.581494][T11124] ? __sys_sendmsg+0x290/0x290 [ 2701.586360][T11124] __se_sys_sendmsg+0x1bb/0x2a0 [ 2701.591255][T11124] ? __x64_sys_sendmsg+0x80/0x80 [ 2701.596243][T11124] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2701.602179][T11124] do_syscall_64+0x4c/0xa0 [ 2701.606629][T11124] ? clear_bhb_loop+0x60/0xb0 [ 2701.611358][T11124] ? clear_bhb_loop+0x60/0xb0 [ 2701.616071][T11124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2701.621997][T11124] RIP: 0033:0x7f170cf9ce59 [ 2701.626446][T11124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2701.646122][T11124] RSP: 002b:00007f170dde5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2701.654576][T11124] RAX: ffffffffffffffda RBX: 00007f170d216090 RCX: 00007f170cf9ce59 [ 2701.662675][T11124] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2701.670676][T11124] RBP: 00007f170d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2701.678760][T11124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2701.686758][T11124] R13: 00007f170d216128 R14: 00007f170d216090 R15: 00007ffccb9976a8 [ 2701.694783][T11124] [ 2701.756121][T11129] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10932'. [ 2701.783517][T11131] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10932'. [ 2701.793580][T11131] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2702.400515][T11153] netlink: 'syz.4.10939': attribute type 10 has an invalid length. [ 2702.645432][T11160] netlink: 'syz.1.10940': attribute type 10 has an invalid length. [ 2703.105470][T11160] sctp: [Deprecated]: syz.1.10940 (pid 11160) Use of int in maxseg socket option. [ 2703.105470][T11160] Use struct sctp_assoc_value instead [ 2703.206629][T11165] netlink: 'syz.3.10942': attribute type 10 has an invalid length. [ 2703.505305][T11166] sctp: [Deprecated]: syz.3.10942 (pid 11166) Use of int in maxseg socket option. [ 2703.505305][T11166] Use struct sctp_assoc_value instead [ 2703.846985][T11153] sctp: [Deprecated]: syz.4.10939 (pid 11153) Use of int in maxseg socket option. [ 2703.846985][T11153] Use struct sctp_assoc_value instead [ 2703.871580][T11178] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.10944'. [ 2703.927453][T11178] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2703.954737][T11178] CPU: 0 PID: 11178 Comm: syz.0.10944 Not tainted syzkaller #0 [ 2703.962471][T11178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2703.972609][T11178] Call Trace: [ 2703.975949][T11178] [ 2703.978938][T11178] dump_stack_lvl+0x188/0x24e [ 2703.983706][T11178] ? show_regs_print_info+0x12/0x12 [ 2703.988980][T11178] ? load_image+0x400/0x400 [ 2703.993562][T11178] sysfs_warn_dup+0x8a/0xa0 [ 2703.998127][T11178] sysfs_do_create_link_sd+0xc0/0x110 [ 2704.003568][T11178] device_add+0x7ed/0xfb0 [ 2704.007954][T11178] wiphy_register+0x1d9f/0x2ac0 [ 2704.012863][T11178] ? cfg80211_event_work+0x40/0x40 [ 2704.018020][T11178] ? minstrel_ht_alloc+0x894/0xa20 [ 2704.023178][T11178] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2704.029328][T11178] ieee80211_register_hw+0x2d00/0x39f0 [ 2704.034838][T11178] ? ieee80211_register_hw+0xea1/0x39f0 [ 2704.040436][T11178] ? ieee80211_register_hw+0xea1/0x39f0 [ 2704.046033][T11178] ? ieee80211_tasklet_handler+0x20/0x20 [ 2704.051715][T11178] ? memset+0x1e/0x40 [ 2704.055728][T11178] ? __hrtimer_init+0x186/0x270 [ 2704.060619][T11178] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2704.066403][T11178] hwsim_new_radio_nl+0xafa/0xce0 [ 2704.071490][T11178] genl_family_rcv_msg_doit+0x22a/0x330 [ 2704.077157][T11178] ? end_current_label_crit_section+0x170/0x170 [ 2704.083436][T11178] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2704.089378][T11178] ? bpf_lsm_capable+0x5/0x10 [ 2704.094100][T11178] ? security_capable+0x85/0xb0 [ 2704.098988][T11178] genl_rcv_msg+0x604/0x790 [ 2704.103699][T11178] ? lock_chain_count+0x20/0x20 [ 2704.108596][T11178] ? genl_bind+0x360/0x360 [ 2704.113047][T11178] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2704.119433][T11178] netlink_rcv_skb+0x1fb/0x450 [ 2704.124242][T11178] ? genl_bind+0x360/0x360 [ 2704.128692][T11178] ? netlink_ack+0x1170/0x1170 [ 2704.133507][T11178] ? down_read+0x1a8/0x2d0 [ 2704.137965][T11178] genl_rcv+0x24/0x40 [ 2704.141993][T11178] netlink_unicast+0x74d/0x8d0 [ 2704.146836][T11178] netlink_sendmsg+0x8ad/0xbd0 [ 2704.151643][T11178] ? netlink_getsockopt+0x550/0x550 [ 2704.156880][T11178] ? aa_sock_msg_perm+0x94/0x150 [ 2704.161849][T11178] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2704.167159][T11178] ? security_socket_sendmsg+0x7c/0xa0 [ 2704.172661][T11178] ? netlink_getsockopt+0x550/0x550 [ 2704.177893][T11178] ____sys_sendmsg+0x5be/0x970 [ 2704.182704][T11178] ? __sys_sendmsg_sock+0x30/0x30 [ 2704.187766][T11178] ? __import_iovec+0x315/0x500 [ 2704.192665][T11178] ? import_iovec+0x6f/0xa0 [ 2704.197205][T11178] ___sys_sendmsg+0x2a2/0x360 [ 2704.201920][T11178] ? try_to_wake_up+0x67c/0x1080 [ 2704.206905][T11178] ? __sys_sendmsg+0x290/0x290 [ 2704.211928][T11178] __se_sys_sendmsg+0x1bb/0x2a0 [ 2704.216823][T11178] ? __x64_sys_sendmsg+0x80/0x80 [ 2704.221810][T11178] ? lockdep_hardirqs_on+0x94/0x140 [ 2704.227044][T11178] do_syscall_64+0x4c/0xa0 [ 2704.231590][T11178] ? clear_bhb_loop+0x60/0xb0 [ 2704.236305][T11178] ? clear_bhb_loop+0x60/0xb0 [ 2704.241021][T11178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2704.246943][T11178] RIP: 0033:0x7f94a399ce59 [ 2704.251385][T11178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2704.271028][T11178] RSP: 002b:00007f94a48e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2704.279503][T11178] RAX: ffffffffffffffda RBX: 00007f94a3c16180 RCX: 00007f94a399ce59 [ 2704.287535][T11178] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2704.295560][T11178] RBP: 00007f94a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2704.303569][T11178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2704.311584][T11178] R13: 00007f94a3c16218 R14: 00007f94a3c16180 R15: 00007ffd817547e8 [ 2704.319604][T11178] [ 2704.577285][T11188] netlink: 'syz.3.10945': attribute type 19 has an invalid length. [ 2704.619537][T11188] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10945'. [ 2704.979175][T11202] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.10948'. [ 2705.063348][T11202] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2705.140029][T11202] CPU: 1 PID: 11202 Comm: syz.2.10948 Not tainted syzkaller #0 [ 2705.147758][T11202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2705.157864][T11202] Call Trace: [ 2705.161197][T11202] [ 2705.164181][T11202] dump_stack_lvl+0x188/0x24e [ 2705.168926][T11202] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2705.175161][T11202] ? show_regs_print_info+0x12/0x12 [ 2705.180428][T11202] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2705.186668][T11202] sysfs_warn_dup+0x8a/0xa0 [ 2705.191237][T11202] sysfs_do_create_link_sd+0xc0/0x110 [ 2705.196679][T11202] device_add+0x7ed/0xfb0 [ 2705.201076][T11202] wiphy_register+0x1d9f/0x2ac0 [ 2705.206010][T11202] ? cfg80211_event_work+0x40/0x40 [ 2705.211181][T11202] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2705.217414][T11202] ieee80211_register_hw+0x2d00/0x39f0 [ 2705.222944][T11202] ? lockdep_hardirqs_on+0x94/0x140 [ 2705.228218][T11202] ? ieee80211_register_hw+0xea1/0x39f0 [ 2705.233874][T11202] ? ieee80211_register_hw+0xea1/0x39f0 [ 2705.239501][T11202] ? ieee80211_tasklet_handler+0x20/0x20 [ 2705.245221][T11202] ? memset+0x1e/0x40 [ 2705.249275][T11202] ? __hrtimer_init+0x186/0x270 [ 2705.254194][T11202] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2705.260018][T11202] hwsim_new_radio_nl+0xafa/0xce0 [ 2705.265135][T11202] genl_family_rcv_msg_doit+0x22a/0x330 [ 2705.270742][T11202] ? end_current_label_crit_section+0x170/0x170 [ 2705.277040][T11202] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2705.283008][T11202] ? bpf_lsm_capable+0x5/0x10 [ 2705.287751][T11202] ? security_capable+0x85/0xb0 [ 2705.292676][T11202] genl_rcv_msg+0x604/0x790 [ 2705.297283][T11202] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2705.303083][T11202] ? genl_bind+0x360/0x360 [ 2705.307554][T11202] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2705.314061][T11202] netlink_rcv_skb+0x1fb/0x450 [ 2705.318977][T11202] ? genl_bind+0x360/0x360 [ 2705.323460][T11202] ? netlink_ack+0x1170/0x1170 [ 2705.328307][T11202] ? down_read+0x1a8/0x2d0 [ 2705.332797][T11202] genl_rcv+0x24/0x40 [ 2705.336831][T11202] netlink_unicast+0x74d/0x8d0 [ 2705.341673][T11202] netlink_sendmsg+0x8ad/0xbd0 [ 2705.346515][T11202] ? netlink_getsockopt+0x550/0x550 [ 2705.351811][T11202] ? aa_sock_msg_perm+0x94/0x150 [ 2705.356814][T11202] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2705.362153][T11202] ? security_socket_sendmsg+0x7c/0xa0 [ 2705.367687][T11202] ? netlink_getsockopt+0x550/0x550 [ 2705.372962][T11202] ____sys_sendmsg+0x5be/0x970 [ 2705.377800][T11202] ? __sys_sendmsg_sock+0x30/0x30 [ 2705.382884][T11202] ? __import_iovec+0x315/0x500 [ 2705.387803][T11202] ? import_iovec+0x6f/0xa0 [ 2705.392455][T11202] ___sys_sendmsg+0x2a2/0x360 [ 2705.397210][T11202] ? __sys_sendmsg+0x290/0x290 [ 2705.402070][T11202] ? irqentry_enter+0x33/0x50 [ 2705.406814][T11202] ? rcu_is_watching+0x11/0xa0 [ 2705.411671][T11202] __se_sys_sendmsg+0x1bb/0x2a0 [ 2705.416597][T11202] ? __x64_sys_sendmsg+0x80/0x80 [ 2705.421620][T11202] ? lockdep_hardirqs_on+0x94/0x140 [ 2705.426882][T11202] do_syscall_64+0x4c/0xa0 [ 2705.431363][T11202] ? clear_bhb_loop+0x60/0xb0 [ 2705.436121][T11202] ? clear_bhb_loop+0x60/0xb0 [ 2705.440892][T11202] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2705.446849][T11202] RIP: 0033:0x7f170cf9ce59 [ 2705.451319][T11202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2705.471002][T11202] RSP: 002b:00007f170dde5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2705.479509][T11202] RAX: ffffffffffffffda RBX: 00007f170d216090 RCX: 00007f170cf9ce59 [ 2705.487592][T11202] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2705.495631][T11202] RBP: 00007f170d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2705.503635][T11202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2705.511636][T11202] R13: 00007f170d216128 R14: 00007f170d216090 R15: 00007ffccb9976a8 [ 2705.519649][T11202] [ 2706.251709][T11225] netlink: 'syz.4.10953': attribute type 22 has an invalid length. [ 2706.298244][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10953'. [ 2707.237547][T11233] netlink: 'syz.3.10956': attribute type 27 has an invalid length. [ 2707.298918][T11233] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10956'. [ 2707.692118][T11239] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10958'. [ 2707.914920][T11239] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2707.989985][T11239] CPU: 1 PID: 11239 Comm: syz.4.10958 Not tainted syzkaller #0 [ 2707.997665][T11239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2708.007793][T11239] Call Trace: [ 2708.011144][T11239] [ 2708.014142][T11239] dump_stack_lvl+0x188/0x24e [ 2708.018925][T11239] ? show_regs_print_info+0x12/0x12 [ 2708.024318][T11239] ? load_image+0x400/0x400 [ 2708.028948][T11239] sysfs_warn_dup+0x8a/0xa0 [ 2708.033543][T11239] sysfs_do_create_link_sd+0xc0/0x110 [ 2708.039021][T11239] device_add+0x7ed/0xfb0 [ 2708.043484][T11239] wiphy_register+0x1d9f/0x2ac0 [ 2708.048484][T11239] ? cfg80211_event_work+0x40/0x40 [ 2708.053673][T11239] ? minstrel_ht_alloc+0x894/0xa20 [ 2708.058872][T11239] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2708.065007][T11239] ieee80211_register_hw+0x2d00/0x39f0 [ 2708.070561][T11239] ? ieee80211_register_hw+0xea1/0x39f0 [ 2708.076162][T11239] ? ieee80211_register_hw+0xea1/0x39f0 [ 2708.081789][T11239] ? ieee80211_tasklet_handler+0x20/0x20 [ 2708.087515][T11239] ? memset+0x1e/0x40 [ 2708.091545][T11239] ? __hrtimer_init+0x186/0x270 [ 2708.096459][T11239] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2708.102292][T11239] hwsim_new_radio_nl+0xafa/0xce0 [ 2708.107419][T11239] genl_family_rcv_msg_doit+0x22a/0x330 [ 2708.113023][T11239] ? end_current_label_crit_section+0x170/0x170 [ 2708.119324][T11239] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2708.125293][T11239] ? bpf_lsm_capable+0x5/0x10 [ 2708.130023][T11239] ? security_capable+0x85/0xb0 [ 2708.134951][T11239] genl_rcv_msg+0x604/0x790 [ 2708.139540][T11239] ? genl_bind+0x360/0x360 [ 2708.144011][T11239] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2708.150466][T11239] netlink_rcv_skb+0x1fb/0x450 [ 2708.155340][T11239] ? genl_bind+0x360/0x360 [ 2708.159814][T11239] ? netlink_ack+0x1170/0x1170 [ 2708.164682][T11239] ? down_read+0x1a8/0x2d0 [ 2708.169165][T11239] genl_rcv+0x24/0x40 [ 2708.173248][T11239] netlink_unicast+0x74d/0x8d0 [ 2708.178106][T11239] netlink_sendmsg+0x8ad/0xbd0 [ 2708.182968][T11239] ? netlink_getsockopt+0x550/0x550 [ 2708.188272][T11239] ? aa_sock_msg_perm+0x94/0x150 [ 2708.193302][T11239] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2708.198655][T11239] ? security_socket_sendmsg+0x7c/0xa0 [ 2708.204183][T11239] ? netlink_getsockopt+0x550/0x550 [ 2708.209466][T11239] ____sys_sendmsg+0x5be/0x970 [ 2708.214316][T11239] ? __sys_sendmsg_sock+0x30/0x30 [ 2708.219400][T11239] ? __import_iovec+0x315/0x500 [ 2708.224338][T11239] ? import_iovec+0x6f/0xa0 [ 2708.228926][T11239] ___sys_sendmsg+0x2a2/0x360 [ 2708.233687][T11239] ? try_to_wake_up+0x67c/0x1080 [ 2708.238703][T11239] ? __sys_sendmsg+0x290/0x290 [ 2708.243667][T11239] __se_sys_sendmsg+0x1bb/0x2a0 [ 2708.248605][T11239] ? __x64_sys_sendmsg+0x80/0x80 [ 2708.253664][T11239] ? lockdep_hardirqs_on+0x94/0x140 [ 2708.258941][T11239] do_syscall_64+0x4c/0xa0 [ 2708.263424][T11239] ? clear_bhb_loop+0x60/0xb0 [ 2708.268159][T11239] ? clear_bhb_loop+0x60/0xb0 [ 2708.272910][T11239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2708.278880][T11239] RIP: 0033:0x7f48c4f9ce59 [ 2708.283385][T11239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2708.303153][T11239] RSP: 002b:00007f48c5dda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2708.311657][T11239] RAX: ffffffffffffffda RBX: 00007f48c5216180 RCX: 00007f48c4f9ce59 [ 2708.319683][T11239] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2708.327707][T11239] RBP: 00007f48c5032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2708.335725][T11239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2708.343743][T11239] R13: 00007f48c5216218 R14: 00007f48c5216180 R15: 00007fff4d2c7848 [ 2708.351810][T11239] [ 2710.023061][T11254] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.10959'. [ 2710.058672][T11254] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2710.109174][T11254] CPU: 0 PID: 11254 Comm: syz.2.10959 Not tainted syzkaller #0 [ 2710.116831][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2710.126952][T11254] Call Trace: [ 2710.130283][T11254] [ 2710.133259][T11254] dump_stack_lvl+0x188/0x24e [ 2710.138004][T11254] ? show_regs_print_info+0x12/0x12 [ 2710.143275][T11254] ? load_image+0x400/0x400 [ 2710.147866][T11254] sysfs_warn_dup+0x8a/0xa0 [ 2710.152439][T11254] sysfs_do_create_link_sd+0xc0/0x110 [ 2710.157879][T11254] device_add+0x7ed/0xfb0 [ 2710.162280][T11254] wiphy_register+0x1d9f/0x2ac0 [ 2710.167218][T11254] ? cfg80211_event_work+0x40/0x40 [ 2710.172391][T11254] ? minstrel_ht_alloc+0x894/0xa20 [ 2710.177581][T11254] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2710.183716][T11254] ieee80211_register_hw+0x2d00/0x39f0 [ 2710.189256][T11254] ? ieee80211_register_hw+0xea1/0x39f0 [ 2710.194871][T11254] ? ieee80211_register_hw+0xea1/0x39f0 [ 2710.200504][T11254] ? ieee80211_tasklet_handler+0x20/0x20 [ 2710.206224][T11254] ? memset+0x1e/0x40 [ 2710.210269][T11254] ? __hrtimer_init+0x186/0x270 [ 2710.215184][T11254] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2710.221002][T11254] hwsim_new_radio_nl+0xafa/0xce0 [ 2710.226123][T11254] genl_family_rcv_msg_doit+0x22a/0x330 [ 2710.231728][T11254] ? end_current_label_crit_section+0x170/0x170 [ 2710.238036][T11254] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2710.244011][T11254] ? bpf_lsm_capable+0x5/0x10 [ 2710.248747][T11254] ? security_capable+0x85/0xb0 [ 2710.253671][T11254] genl_rcv_msg+0x604/0x790 [ 2710.258247][T11254] ? genl_bind+0x360/0x360 [ 2710.262711][T11254] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2710.269150][T11254] netlink_rcv_skb+0x1fb/0x450 [ 2710.273983][T11254] ? genl_bind+0x360/0x360 [ 2710.278463][T11254] ? netlink_ack+0x1170/0x1170 [ 2710.283305][T11254] ? down_read+0x1a8/0x2d0 [ 2710.287794][T11254] genl_rcv+0x24/0x40 [ 2710.291832][T11254] netlink_unicast+0x74d/0x8d0 [ 2710.296683][T11254] netlink_sendmsg+0x8ad/0xbd0 [ 2710.301530][T11254] ? netlink_getsockopt+0x550/0x550 [ 2710.306797][T11254] ? aa_sock_msg_perm+0x94/0x150 [ 2710.311791][T11254] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2710.317136][T11254] ? security_socket_sendmsg+0x7c/0xa0 [ 2710.322660][T11254] ? netlink_getsockopt+0x550/0x550 [ 2710.327931][T11254] ____sys_sendmsg+0x5be/0x970 [ 2710.332863][T11254] ? __sys_sendmsg_sock+0x30/0x30 [ 2710.338037][T11254] ? __import_iovec+0x315/0x500 [ 2710.342965][T11254] ? import_iovec+0x6f/0xa0 [ 2710.347516][T11254] ___sys_sendmsg+0x2a2/0x360 [ 2710.352262][T11254] ? __sys_sendmsg+0x290/0x290 [ 2710.357159][T11254] __se_sys_sendmsg+0x1bb/0x2a0 [ 2710.362094][T11254] ? __x64_sys_sendmsg+0x80/0x80 [ 2710.367125][T11254] ? lockdep_hardirqs_on+0x94/0x140 [ 2710.372406][T11254] do_syscall_64+0x4c/0xa0 [ 2710.376883][T11254] ? clear_bhb_loop+0x60/0xb0 [ 2710.381625][T11254] ? clear_bhb_loop+0x60/0xb0 [ 2710.386380][T11254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2710.392335][T11254] RIP: 0033:0x7f170cf9ce59 [ 2710.396845][T11254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2710.416534][T11254] RSP: 002b:00007f170dde5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2710.425120][T11254] RAX: ffffffffffffffda RBX: 00007f170d216090 RCX: 00007f170cf9ce59 [ 2710.433173][T11254] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2710.441227][T11254] RBP: 00007f170d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2710.449277][T11254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2710.457332][T11254] R13: 00007f170d216128 R14: 00007f170d216090 R15: 00007ffccb9976a8 [ 2710.465408][T11254] [ 2711.290008][T11286] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.10969'. [ 2711.335427][T11286] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2711.360052][T11286] CPU: 0 PID: 11286 Comm: syz.3.10969 Not tainted syzkaller #0 [ 2711.367714][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2711.377834][T11286] Call Trace: [ 2711.381168][T11286] [ 2711.384149][T11286] dump_stack_lvl+0x188/0x24e [ 2711.388904][T11286] ? show_regs_print_info+0x12/0x12 [ 2711.394183][T11286] ? load_image+0x400/0x400 [ 2711.398788][T11286] sysfs_warn_dup+0x8a/0xa0 [ 2711.403359][T11286] sysfs_do_create_link_sd+0xc0/0x110 [ 2711.408801][T11286] device_add+0x7ed/0xfb0 [ 2711.413206][T11286] wiphy_register+0x1d9f/0x2ac0 [ 2711.418157][T11286] ? cfg80211_event_work+0x40/0x40 [ 2711.423347][T11286] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2711.429587][T11286] ieee80211_register_hw+0x2d00/0x39f0 [ 2711.435137][T11286] ? ieee80211_register_hw+0xea1/0x39f0 [ 2711.440757][T11286] ? ieee80211_register_hw+0xea1/0x39f0 [ 2711.446383][T11286] ? ieee80211_tasklet_handler+0x20/0x20 [ 2711.452099][T11286] ? memset+0x1e/0x40 [ 2711.456137][T11286] ? __hrtimer_init+0x186/0x270 [ 2711.461133][T11286] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2711.466941][T11286] hwsim_new_radio_nl+0xafa/0xce0 [ 2711.472063][T11286] genl_family_rcv_msg_doit+0x22a/0x330 [ 2711.477669][T11286] ? end_current_label_crit_section+0x170/0x170 [ 2711.483975][T11286] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2711.489934][T11286] ? bpf_lsm_capable+0x5/0x10 [ 2711.494679][T11286] ? security_capable+0x85/0xb0 [ 2711.499724][T11286] genl_rcv_msg+0x604/0x790 [ 2711.504315][T11286] ? genl_bind+0x360/0x360 [ 2711.508793][T11286] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2711.515221][T11286] netlink_rcv_skb+0x1fb/0x450 [ 2711.520065][T11286] ? genl_bind+0x360/0x360 [ 2711.524554][T11286] ? netlink_ack+0x1170/0x1170 [ 2711.529387][T11286] ? lockdep_hardirqs_on+0x94/0x140 [ 2711.534660][T11286] ? down_read+0x1a8/0x2d0 [ 2711.539161][T11286] genl_rcv+0x24/0x40 [ 2711.543210][T11286] netlink_unicast+0x74d/0x8d0 [ 2711.548059][T11286] netlink_sendmsg+0x8ad/0xbd0 [ 2711.552905][T11286] ? lockdep_hardirqs_on+0x94/0x140 [ 2711.558258][T11286] ? netlink_getsockopt+0x550/0x550 [ 2711.563525][T11286] ? netlink_getsockopt+0x550/0x550 [ 2711.568808][T11286] ? netlink_getsockopt+0x550/0x550 [ 2711.574078][T11286] ____sys_sendmsg+0x5be/0x970 [ 2711.578928][T11286] ? __sys_sendmsg_sock+0x30/0x30 [ 2711.584021][T11286] ? __import_iovec+0x315/0x500 [ 2711.588921][T11286] ? import_iovec+0x6f/0xa0 [ 2711.593458][T11286] ___sys_sendmsg+0x2a2/0x360 [ 2711.598188][T11286] ? __sys_sendmsg+0x290/0x290 [ 2711.603020][T11286] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2711.608811][T11286] __se_sys_sendmsg+0x1bb/0x2a0 [ 2711.613704][T11286] ? __x64_sys_sendmsg+0x80/0x80 [ 2711.618710][T11286] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2711.624651][T11286] do_syscall_64+0x4c/0xa0 [ 2711.629111][T11286] ? clear_bhb_loop+0x60/0xb0 [ 2711.633823][T11286] ? clear_bhb_loop+0x60/0xb0 [ 2711.638544][T11286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2711.644473][T11286] RIP: 0033:0x7fc50d79ce59 [ 2711.648920][T11286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2711.668565][T11286] RSP: 002b:00007fc50e59b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2711.677105][T11286] RAX: ffffffffffffffda RBX: 00007fc50da16090 RCX: 00007fc50d79ce59 [ 2711.685107][T11286] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2711.693110][T11286] RBP: 00007fc50d832d6f R08: 0000000000000000 R09: 0000000000000000 [ 2711.701107][T11286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2711.709134][T11286] R13: 00007fc50da16128 R14: 00007fc50da16090 R15: 00007ffe9c5c8ab8 [ 2711.717167][T11286] [ 2711.888936][T11293] netlink: 'syz.2.10968': attribute type 29 has an invalid length. [ 2712.170959][T11301] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10972'. [ 2712.261234][T11301] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2712.269258][T11301] CPU: 0 PID: 11301 Comm: syz.4.10972 Not tainted syzkaller #0 [ 2712.276863][T11301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2712.286975][T11301] Call Trace: [ 2712.290393][T11301] [ 2712.293356][T11301] dump_stack_lvl+0x188/0x24e [ 2712.298097][T11301] ? show_regs_print_info+0x12/0x12 [ 2712.303339][T11301] ? load_image+0x400/0x400 [ 2712.307898][T11301] sysfs_warn_dup+0x8a/0xa0 [ 2712.312484][T11301] sysfs_do_create_link_sd+0xc0/0x110 [ 2712.317903][T11301] device_add+0x7ed/0xfb0 [ 2712.322275][T11301] wiphy_register+0x1d9f/0x2ac0 [ 2712.327181][T11301] ? cfg80211_event_work+0x40/0x40 [ 2712.332331][T11301] ? minstrel_ht_alloc+0x894/0xa20 [ 2712.337489][T11301] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2712.343597][T11301] ieee80211_register_hw+0x2d00/0x39f0 [ 2712.349120][T11301] ? ieee80211_register_hw+0xea1/0x39f0 [ 2712.354704][T11301] ? ieee80211_register_hw+0xea1/0x39f0 [ 2712.360299][T11301] ? ieee80211_tasklet_handler+0x20/0x20 [ 2712.365976][T11301] ? memset+0x1e/0x40 [ 2712.369985][T11301] ? __hrtimer_init+0x186/0x270 [ 2712.374865][T11301] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2712.380651][T11301] hwsim_new_radio_nl+0xafa/0xce0 [ 2712.385724][T11301] genl_family_rcv_msg_doit+0x22a/0x330 [ 2712.391395][T11301] ? end_current_label_crit_section+0x170/0x170 [ 2712.397668][T11301] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2712.403594][T11301] ? bpf_lsm_capable+0x5/0x10 [ 2712.408297][T11301] ? security_capable+0x85/0xb0 [ 2712.413183][T11301] genl_rcv_msg+0x604/0x790 [ 2712.417724][T11301] ? genl_bind+0x360/0x360 [ 2712.422179][T11301] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2712.428557][T11301] netlink_rcv_skb+0x1fb/0x450 [ 2712.433361][T11301] ? genl_bind+0x360/0x360 [ 2712.437807][T11301] ? netlink_ack+0x1170/0x1170 [ 2712.442621][T11301] ? down_read+0x1a8/0x2d0 [ 2712.447081][T11301] genl_rcv+0x24/0x40 [ 2712.451090][T11301] netlink_unicast+0x74d/0x8d0 [ 2712.455903][T11301] netlink_sendmsg+0x8ad/0xbd0 [ 2712.460793][T11301] ? netlink_getsockopt+0x550/0x550 [ 2712.466025][T11301] ? aa_sock_msg_perm+0x94/0x150 [ 2712.470991][T11301] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2712.476299][T11301] ? security_socket_sendmsg+0x7c/0xa0 [ 2712.481805][T11301] ? netlink_getsockopt+0x550/0x550 [ 2712.487035][T11301] ____sys_sendmsg+0x5be/0x970 [ 2712.491883][T11301] ? __sys_sendmsg_sock+0x30/0x30 [ 2712.496939][T11301] ? __import_iovec+0x315/0x500 [ 2712.501826][T11301] ? import_iovec+0x6f/0xa0 [ 2712.506393][T11301] ___sys_sendmsg+0x2a2/0x360 [ 2712.511112][T11301] ? __sys_sendmsg+0x290/0x290 [ 2712.515946][T11301] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2712.521723][T11301] __se_sys_sendmsg+0x1bb/0x2a0 [ 2712.526617][T11301] ? __x64_sys_sendmsg+0x80/0x80 [ 2712.531606][T11301] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2712.537534][T11301] do_syscall_64+0x4c/0xa0 [ 2712.541989][T11301] ? clear_bhb_loop+0x60/0xb0 [ 2712.546695][T11301] ? clear_bhb_loop+0x60/0xb0 [ 2712.551407][T11301] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2712.557333][T11301] RIP: 0033:0x7f48c4f9ce59 [ 2712.561798][T11301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2712.581448][T11301] RSP: 002b:00007f48c5dfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2712.589900][T11301] RAX: ffffffffffffffda RBX: 00007f48c5216090 RCX: 00007f48c4f9ce59 [ 2712.597914][T11301] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2712.605909][T11301] RBP: 00007f48c5032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2712.613937][T11301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2712.621939][T11301] R13: 00007f48c5216128 R14: 00007f48c5216090 R15: 00007fff4d2c7848 [ 2712.629957][T11301] [ 2712.728263][T11309] netlink: 'syz.1.10974': attribute type 27 has an invalid length. [ 2712.747833][T11309] netlink: 164 bytes leftover after parsing attributes in process `syz.1.10974'. [ 2712.964674][T11315] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10975'. [ 2713.038459][T11315] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10975'. [ 2713.058985][T11315] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2713.403776][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.410346][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.450033][T11325] netlink: 'syz.2.10976': attribute type 10 has an invalid length. [ 2713.799551][T11320] sctp: [Deprecated]: syz.2.10976 (pid 11320) Use of int in maxseg socket option. [ 2713.799551][T11320] Use struct sctp_assoc_value instead [ 2714.178122][T11332] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10979'. [ 2714.295334][T11332] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2714.601181][T11332] CPU: 1 PID: 11332 Comm: syz.4.10979 Not tainted syzkaller #0 [ 2714.608835][T11332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2714.619049][T11332] Call Trace: [ 2714.622370][T11332] [ 2714.625343][T11332] dump_stack_lvl+0x188/0x24e [ 2714.630093][T11332] ? show_regs_print_info+0x12/0x12 [ 2714.635357][T11332] ? load_image+0x400/0x400 [ 2714.639921][T11332] ? sysfs_warn_dup+0x61/0xa0 [ 2714.644676][T11332] sysfs_warn_dup+0x8a/0xa0 [ 2714.649237][T11332] sysfs_do_create_link_sd+0xc0/0x110 [ 2714.654771][T11332] device_add+0x7ed/0xfb0 [ 2714.659166][T11332] wiphy_register+0x1d9f/0x2ac0 [ 2714.664114][T11332] ? cfg80211_event_work+0x40/0x40 [ 2714.669300][T11332] ? minstrel_ht_alloc+0x894/0xa20 [ 2714.674471][T11332] ? ieee80211_init_rate_ctrl_alg+0x276/0x5e0 [ 2714.680612][T11332] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2714.686749][T11332] ieee80211_register_hw+0x2d00/0x39f0 [ 2714.692261][T11332] ? lock_chain_count+0x20/0x20 [ 2714.697177][T11332] ? ieee80211_register_hw+0xea1/0x39f0 [ 2714.702775][T11332] ? ieee80211_register_hw+0xea1/0x39f0 [ 2714.708364][T11332] ? ieee80211_tasklet_handler+0x20/0x20 [ 2714.714053][T11332] ? rcu_is_watching+0x51/0xa0 [ 2714.718877][T11332] ? memset+0x1e/0x40 [ 2714.722898][T11332] ? __hrtimer_init+0x186/0x270 [ 2714.727797][T11332] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2714.733590][T11332] hwsim_new_radio_nl+0xafa/0xce0 [ 2714.738671][T11332] genl_family_rcv_msg_doit+0x22a/0x330 [ 2714.744253][T11332] ? end_current_label_crit_section+0x170/0x170 [ 2714.750531][T11332] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2714.756464][T11332] ? bpf_lsm_capable+0x5/0x10 [ 2714.761182][T11332] ? security_capable+0x85/0xb0 [ 2714.766103][T11332] genl_rcv_msg+0x604/0x790 [ 2714.770660][T11332] ? genl_bind+0x360/0x360 [ 2714.775123][T11332] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2714.781514][T11332] netlink_rcv_skb+0x1fb/0x450 [ 2714.786321][T11332] ? genl_bind+0x360/0x360 [ 2714.790765][T11332] ? netlink_ack+0x1170/0x1170 [ 2714.795579][T11332] ? down_read+0x1a8/0x2d0 [ 2714.800038][T11332] genl_rcv+0x24/0x40 [ 2714.804053][T11332] netlink_unicast+0x74d/0x8d0 [ 2714.808860][T11332] netlink_sendmsg+0x8ad/0xbd0 [ 2714.813667][T11332] ? netlink_getsockopt+0x550/0x550 [ 2714.818931][T11332] ? aa_sock_msg_perm+0x94/0x150 [ 2714.823929][T11332] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2714.829272][T11332] ? security_socket_sendmsg+0x7c/0xa0 [ 2714.834779][T11332] ? netlink_getsockopt+0x550/0x550 [ 2714.840106][T11332] ____sys_sendmsg+0x5be/0x970 [ 2714.844927][T11332] ? __sys_sendmsg_sock+0x30/0x30 [ 2714.850127][T11332] ? __import_iovec+0x315/0x500 [ 2714.855030][T11332] ? import_iovec+0x6f/0xa0 [ 2714.859569][T11332] ___sys_sendmsg+0x2a2/0x360 [ 2714.864291][T11332] ? __sys_sendmsg+0x290/0x290 [ 2714.869113][T11332] ? trace_call_bpf+0xbf/0x6b0 [ 2714.873939][T11332] __se_sys_sendmsg+0x1bb/0x2a0 [ 2714.878835][T11332] ? __x64_sys_sendmsg+0x80/0x80 [ 2714.883827][T11332] ? lockdep_hardirqs_on+0x94/0x140 [ 2714.889056][T11332] do_syscall_64+0x4c/0xa0 [ 2714.893512][T11332] ? clear_bhb_loop+0x60/0xb0 [ 2714.898224][T11332] ? clear_bhb_loop+0x60/0xb0 [ 2714.902992][T11332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2714.908944][T11332] RIP: 0033:0x7f48c4f9ce59 [ 2714.913433][T11332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2714.933169][T11332] RSP: 002b:00007f48c5dfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2714.941620][T11332] RAX: ffffffffffffffda RBX: 00007f48c5216090 RCX: 00007f48c4f9ce59 [ 2714.949622][T11332] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2714.957627][T11332] RBP: 00007f48c5032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2714.965621][T11332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2714.973618][T11332] R13: 00007f48c5216128 R14: 00007f48c5216090 R15: 00007fff4d2c7848 [ 2714.981722][T11332] [ 2715.745906][T11359] netlink: 'syz.0.10985': attribute type 10 has an invalid length. [ 2716.614559][T11378] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.10988'. [ 2716.671931][T11378] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2716.727068][T11378] CPU: 0 PID: 11378 Comm: syz.1.10988 Not tainted syzkaller #0 [ 2716.734712][T11378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2716.744826][T11378] Call Trace: [ 2716.748156][T11378] [ 2716.751132][T11378] dump_stack_lvl+0x188/0x24e [ 2716.755872][T11378] ? show_regs_print_info+0x12/0x12 [ 2716.761138][T11378] ? load_image+0x400/0x400 [ 2716.765724][T11378] sysfs_warn_dup+0x8a/0xa0 [ 2716.770287][T11378] sysfs_do_create_link_sd+0xc0/0x110 [ 2716.775728][T11378] device_add+0x7ed/0xfb0 [ 2716.780126][T11378] wiphy_register+0x1d9f/0x2ac0 [ 2716.785157][T11378] ? cfg80211_event_work+0x40/0x40 [ 2716.790345][T11378] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2716.796568][T11378] ? ieee80211_register_hw+0x2c51/0x39f0 [ 2716.802281][T11378] ieee80211_register_hw+0x2d00/0x39f0 [ 2716.807805][T11378] ? lock_chain_count+0x20/0x20 [ 2716.813071][T11378] ? ieee80211_register_hw+0xea1/0x39f0 [ 2716.818680][T11378] ? ieee80211_register_hw+0xea1/0x39f0 [ 2716.824301][T11378] ? ieee80211_tasklet_handler+0x20/0x20 [ 2716.830018][T11378] ? debug_init+0x61/0x260 [ 2716.834508][T11378] ? kasan_check_range+0x8a/0x290 [ 2716.839608][T11378] ? memset+0x1e/0x40 [ 2716.843653][T11378] ? __hrtimer_init+0x186/0x270 [ 2716.848571][T11378] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2716.854387][T11378] hwsim_new_radio_nl+0xafa/0xce0 [ 2716.859498][T11378] genl_family_rcv_msg_doit+0x22a/0x330 [ 2716.865106][T11378] ? end_current_label_crit_section+0x170/0x170 [ 2716.871412][T11378] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2716.877372][T11378] ? bpf_lsm_capable+0x5/0x10 [ 2716.882102][T11378] ? security_capable+0x85/0xb0 [ 2716.887024][T11378] genl_rcv_msg+0x604/0x790 [ 2716.891609][T11378] ? genl_bind+0x360/0x360 [ 2716.896089][T11378] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2716.902500][T11378] ? netlink_rcv_skb+0xca/0x450 [ 2716.907429][T11378] netlink_rcv_skb+0x1fb/0x450 [ 2716.912271][T11378] ? genl_bind+0x360/0x360 [ 2716.916766][T11378] ? netlink_ack+0x1170/0x1170 [ 2716.919001][T11368] sctp: [Deprecated]: syz.0.10985 (pid 11368) Use of int in maxseg socket option. [ 2716.919001][T11368] Use struct sctp_assoc_value instead [ 2716.921606][T11378] ? down_read+0x1a8/0x2d0 [ 2716.921652][T11378] genl_rcv+0x24/0x40 [ 2716.921675][T11378] netlink_unicast+0x74d/0x8d0 [ 2716.949582][T11378] netlink_sendmsg+0x8ad/0xbd0 [ 2716.954428][T11378] ? netlink_getsockopt+0x550/0x550 [ 2716.959874][T11378] ? aa_sock_msg_perm+0x94/0x150 [ 2716.964883][T11378] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2716.970297][T11378] ? security_socket_sendmsg+0x7c/0xa0 [ 2716.975813][T11378] ? netlink_getsockopt+0x550/0x550 [ 2716.981082][T11378] ____sys_sendmsg+0x5be/0x970 [ 2716.985898][T11378] ? __sys_sendmsg_sock+0x30/0x30 [ 2716.990966][T11378] ? __import_iovec+0x315/0x500 [ 2716.995950][T11378] ? import_iovec+0x6f/0xa0 [ 2717.000584][T11378] ___sys_sendmsg+0x2a2/0x360 [ 2717.005318][T11378] ? __sys_sendmsg+0x290/0x290 [ 2717.010222][T11378] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2717.016254][T11378] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2717.022465][T11378] ? lockdep_hardirqs_on+0x94/0x140 [ 2717.027705][T11378] ? __se_sys_sendmsg+0xf4/0x2a0 [ 2717.032693][T11378] ? kasan_check_range+0x80/0x290 [ 2717.037763][T11378] __se_sys_sendmsg+0x1bb/0x2a0 [ 2717.042660][T11378] ? __x64_sys_sendmsg+0x80/0x80 [ 2717.047658][T11378] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2717.053589][T11378] do_syscall_64+0x4c/0xa0 [ 2717.058038][T11378] ? clear_bhb_loop+0x60/0xb0 [ 2717.062750][T11378] ? clear_bhb_loop+0x60/0xb0 [ 2717.067463][T11378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2717.073390][T11378] RIP: 0033:0x7fa0bef9ce59 [ 2717.077832][T11378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2717.097732][T11378] RSP: 002b:00007fa0bfe09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2717.106184][T11378] RAX: ffffffffffffffda RBX: 00007fa0bf216090 RCX: 00007fa0bef9ce59 [ 2717.114197][T11378] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2717.122205][T11378] RBP: 00007fa0bf032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2717.130208][T11378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2717.138211][T11378] R13: 00007fa0bf216128 R14: 00007fa0bf216090 R15: 00007ffc9a7c0af8 [ 2717.146241][T11378] [ 2717.507621][T11393] netlink: 'syz.0.10992': attribute type 10 has an invalid length. [ 2717.543082][T11377] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10989'. [ 2717.552819][T11396] netlink: 'syz.2.10994': attribute type 27 has an invalid length. [ 2717.583313][T11377] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2717.600321][T11377] CPU: 0 PID: 11377 Comm: syz.4.10989 Not tainted syzkaller #0 [ 2717.603837][T11396] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10994'. [ 2717.608048][T11377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2717.608067][T11377] Call Trace: [ 2717.608077][T11377] [ 2717.608088][T11377] dump_stack_lvl+0x188/0x24e [ 2717.638325][T11377] ? show_regs_print_info+0x12/0x12 [ 2717.643599][T11377] ? load_image+0x400/0x400 [ 2717.648184][T11377] sysfs_warn_dup+0x8a/0xa0 [ 2717.652752][T11377] sysfs_do_create_link_sd+0xc0/0x110 [ 2717.658202][T11377] device_add+0x7ed/0xfb0 [ 2717.662604][T11377] wiphy_register+0x1d9f/0x2ac0 [ 2717.667540][T11377] ? cfg80211_event_work+0x40/0x40 [ 2717.672712][T11377] ? minstrel_ht_alloc+0x894/0xa20 [ 2717.677898][T11377] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2717.684038][T11377] ieee80211_register_hw+0x2d00/0x39f0 [ 2717.689577][T11377] ? ieee80211_register_hw+0xea1/0x39f0 [ 2717.695276][T11377] ? ieee80211_register_hw+0xea1/0x39f0 [ 2717.700892][T11377] ? ieee80211_tasklet_handler+0x20/0x20 [ 2717.706616][T11377] ? memset+0x1e/0x40 [ 2717.710666][T11377] ? __hrtimer_init+0x186/0x270 [ 2717.715586][T11377] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2717.721410][T11377] hwsim_new_radio_nl+0xafa/0xce0 [ 2717.726525][T11377] genl_family_rcv_msg_doit+0x22a/0x330 [ 2717.732129][T11377] ? end_current_label_crit_section+0x170/0x170 [ 2717.738454][T11377] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2717.744411][T11377] ? bpf_lsm_capable+0x5/0x10 [ 2717.749168][T11377] ? security_capable+0x85/0xb0 [ 2717.754082][T11377] genl_rcv_msg+0x604/0x790 [ 2717.758648][T11377] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2717.764488][T11377] ? genl_bind+0x360/0x360 [ 2717.768958][T11377] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2717.775367][T11377] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2717.781424][T11377] netlink_rcv_skb+0x1fb/0x450 [ 2717.786264][T11377] ? genl_bind+0x360/0x360 [ 2717.790734][T11377] ? netlink_ack+0x1170/0x1170 [ 2717.795589][T11377] genl_rcv+0x24/0x40 [ 2717.799708][T11377] netlink_unicast+0x74d/0x8d0 [ 2717.804548][T11377] netlink_sendmsg+0x8ad/0xbd0 [ 2717.809392][T11377] ? netlink_getsockopt+0x550/0x550 [ 2717.814664][T11377] ? aa_sock_msg_perm+0x94/0x150 [ 2717.819656][T11377] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2717.825008][T11377] ? security_socket_sendmsg+0x7c/0xa0 [ 2717.830543][T11377] ? netlink_getsockopt+0x550/0x550 [ 2717.835805][T11377] ____sys_sendmsg+0x5be/0x970 [ 2717.840638][T11377] ? __sys_sendmsg_sock+0x30/0x30 [ 2717.845735][T11377] ? __import_iovec+0x315/0x500 [ 2717.850655][T11377] ? import_iovec+0x6f/0xa0 [ 2717.855221][T11377] ___sys_sendmsg+0x2a2/0x360 [ 2717.859972][T11377] ? __sys_sendmsg+0x290/0x290 [ 2717.864857][T11377] __se_sys_sendmsg+0x1bb/0x2a0 [ 2717.869773][T11377] ? __x64_sys_sendmsg+0x80/0x80 [ 2717.874796][T11377] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2717.880760][T11377] do_syscall_64+0x4c/0xa0 [ 2717.885240][T11377] ? clear_bhb_loop+0x60/0xb0 [ 2717.889972][T11377] ? clear_bhb_loop+0x60/0xb0 [ 2717.894714][T11377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2717.900658][T11377] RIP: 0033:0x7f48c4f9ce59 [ 2717.905120][T11377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2717.924793][T11377] RSP: 002b:00007f48c5dfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2717.933458][T11377] RAX: ffffffffffffffda RBX: 00007f48c5216090 RCX: 00007f48c4f9ce59 [ 2717.941751][T11377] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2717.949855][T11377] RBP: 00007f48c5032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2717.957963][T11377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2717.965999][T11377] R13: 00007f48c5216128 R14: 00007f48c5216090 R15: 00007fff4d2c7848 [ 2717.974133][T11377] [ 2718.858714][T11413] sctp: [Deprecated]: syz.0.10992 (pid 11413) Use of int in maxseg socket option. [ 2718.858714][T11413] Use struct sctp_assoc_value instead [ 2719.043635][T11416] netlink: 'syz.2.10999': attribute type 10 has an invalid length. [ 2719.242099][T11420] netlink: 'syz.3.11000': attribute type 11 has an invalid length. [ 2719.273861][T11420] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11000'. [ 2719.394354][T11420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2719.452012][T11424] netlink: 'syz.1.11002': attribute type 29 has an invalid length. [ 2719.497598][T11428] netlink: 'syz.0.11001': attribute type 22 has an invalid length. [ 2719.537016][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11001'. [ 2719.656001][T11431] netlink: 'syz.4.11003': attribute type 10 has an invalid length. [ 2719.969692][T11431] sctp: [Deprecated]: syz.4.11003 (pid 11431) Use of int in maxseg socket option. [ 2719.969692][T11431] Use struct sctp_assoc_value instead [ 2720.009074][T11416] sctp: [Deprecated]: syz.2.10999 (pid 11416) Use of int in maxseg socket option. [ 2720.009074][T11416] Use struct sctp_assoc_value instead [ 2720.111345][T11443] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.11006'. [ 2720.164450][T11443] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2720.218898][T11443] CPU: 1 PID: 11443 Comm: syz.0.11006 Not tainted syzkaller #0 [ 2720.226542][T11443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2720.236659][T11443] Call Trace: [ 2720.239983][T11443] [ 2720.242958][T11443] dump_stack_lvl+0x188/0x24e [ 2720.247714][T11443] ? show_regs_print_info+0x12/0x12 [ 2720.252980][T11443] ? load_image+0x400/0x400 [ 2720.257560][T11443] sysfs_warn_dup+0x8a/0xa0 [ 2720.262227][T11443] sysfs_do_create_link_sd+0xc0/0x110 [ 2720.267666][T11443] device_add+0x7ed/0xfb0 [ 2720.272066][T11443] wiphy_register+0x1d9f/0x2ac0 [ 2720.276995][T11443] ? cfg80211_event_work+0x40/0x40 [ 2720.282149][T11443] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2720.288350][T11443] ? ieee80211_register_hw+0x28b7/0x39f0 [ 2720.294032][T11443] ieee80211_register_hw+0x2d00/0x39f0 [ 2720.299535][T11443] ? ieee80211_register_hw+0xea1/0x39f0 [ 2720.305119][T11443] ? ieee80211_register_hw+0xea1/0x39f0 [ 2720.310718][T11443] ? ieee80211_tasklet_handler+0x20/0x20 [ 2720.316390][T11443] ? lockdep_hardirqs_on+0x94/0x140 [ 2720.321621][T11443] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2720.327825][T11443] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2720.333600][T11443] hwsim_new_radio_nl+0xafa/0xce0 [ 2720.338676][T11443] genl_family_rcv_msg_doit+0x22a/0x330 [ 2720.344264][T11443] ? end_current_label_crit_section+0x170/0x170 [ 2720.350543][T11443] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2720.356474][T11443] ? bpf_lsm_capable+0x5/0x10 [ 2720.361187][T11443] ? security_capable+0x85/0xb0 [ 2720.366079][T11443] genl_rcv_msg+0x604/0x790 [ 2720.370620][T11443] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2720.376814][T11443] ? genl_bind+0x360/0x360 [ 2720.381261][T11443] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2720.387637][T11443] ? lock_acquire+0x225/0x4a0 [ 2720.392355][T11443] netlink_rcv_skb+0x1fb/0x450 [ 2720.397156][T11443] ? genl_bind+0x360/0x360 [ 2720.401613][T11443] ? netlink_ack+0x1170/0x1170 [ 2720.406425][T11443] ? down_read+0x1a8/0x2d0 [ 2720.410881][T11443] genl_rcv+0x24/0x40 [ 2720.414895][T11443] netlink_unicast+0x74d/0x8d0 [ 2720.419703][T11443] netlink_sendmsg+0x8ad/0xbd0 [ 2720.424516][T11443] ? netlink_getsockopt+0x550/0x550 [ 2720.429754][T11443] ? aa_sock_msg_perm+0x94/0x150 [ 2720.434730][T11443] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2720.440066][T11443] ? security_socket_sendmsg+0x7c/0xa0 [ 2720.445566][T11443] ? netlink_getsockopt+0x550/0x550 [ 2720.450810][T11443] ____sys_sendmsg+0x5be/0x970 [ 2720.455626][T11443] ? __sys_sendmsg_sock+0x30/0x30 [ 2720.460698][T11443] ? import_iovec+0x6f/0xa0 [ 2720.465240][T11443] ___sys_sendmsg+0x2a2/0x360 [ 2720.469963][T11443] ? __sys_sendmsg+0x290/0x290 [ 2720.474798][T11443] ? irqentry_enter+0x33/0x50 [ 2720.479548][T11443] __se_sys_sendmsg+0x1bb/0x2a0 [ 2720.484448][T11443] ? __x64_sys_sendmsg+0x80/0x80 [ 2720.489434][T11443] ? lockdep_hardirqs_on+0x94/0x140 [ 2720.494667][T11443] do_syscall_64+0x4c/0xa0 [ 2720.499120][T11443] ? clear_bhb_loop+0x60/0xb0 [ 2720.503848][T11443] ? clear_bhb_loop+0x60/0xb0 [ 2720.508560][T11443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2720.514488][T11443] RIP: 0033:0x7f94a399ce59 [ 2720.518934][T11443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2720.538568][T11443] RSP: 002b:00007f94a4902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2720.547027][T11443] RAX: ffffffffffffffda RBX: 00007f94a3c16090 RCX: 00007f94a399ce59 [ 2720.555031][T11443] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2720.563030][T11443] RBP: 00007f94a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2720.571029][T11443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2720.579026][T11443] R13: 00007f94a3c16128 R14: 00007f94a3c16090 R15: 00007ffd817547e8 [ 2720.587050][T11443] [ 2720.993659][T11461] netlink: 'syz.2.11020': attribute type 10 has an invalid length. [ 2721.047195][T11465] netlink: 'syz.4.11010': attribute type 27 has an invalid length. [ 2721.108587][T11465] netlink: 164 bytes leftover after parsing attributes in process `syz.4.11010'. [ 2721.403872][T11473] netlink: 'syz.1.11013': attribute type 10 has an invalid length. [ 2721.727589][T11473] sctp: [Deprecated]: syz.1.11013 (pid 11473) Use of int in maxseg socket option. [ 2721.727589][T11473] Use struct sctp_assoc_value instead [ 2722.058967][T11482] netlink: 'syz.0.11015': attribute type 29 has an invalid length. [ 2722.106278][T11486] sctp: [Deprecated]: syz.2.11020 (pid 11486) Use of int in maxseg socket option. [ 2722.106278][T11486] Use struct sctp_assoc_value instead [ 2722.709520][T11496] netlink: 'syz.2.11019': attribute type 10 has an invalid length. [ 2722.738377][T11492] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11016'. [ 2722.790513][T11492] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11016'. [ 2722.917890][T11503] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11022'. [ 2723.052173][T11503] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11022'. [ 2723.150897][T11503] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2723.451805][T11513] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.11024'. [ 2723.702472][T11513] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2723.786817][T11513] CPU: 1 PID: 11513 Comm: syz.1.11024 Not tainted syzkaller #0 [ 2723.794555][T11513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2723.804670][T11513] Call Trace: [ 2723.808001][T11513] [ 2723.810975][T11513] dump_stack_lvl+0x188/0x24e [ 2723.815716][T11513] ? show_regs_print_info+0x12/0x12 [ 2723.820981][T11513] ? load_image+0x400/0x400 [ 2723.825554][T11513] sysfs_warn_dup+0x8a/0xa0 [ 2723.830124][T11513] sysfs_do_create_link_sd+0xc0/0x110 [ 2723.835554][T11513] device_add+0x7ed/0xfb0 [ 2723.839948][T11513] wiphy_register+0x1d9f/0x2ac0 [ 2723.844887][T11513] ? cfg80211_event_work+0x40/0x40 [ 2723.850072][T11513] ? minstrel_ht_alloc+0x894/0xa20 [ 2723.855264][T11513] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2723.861382][T11513] ieee80211_register_hw+0x2d00/0x39f0 [ 2723.866917][T11513] ? ieee80211_register_hw+0xea1/0x39f0 [ 2723.872557][T11513] ? ieee80211_register_hw+0xea1/0x39f0 [ 2723.878162][T11513] ? ieee80211_tasklet_handler+0x20/0x20 [ 2723.883868][T11513] ? __hrtimer_init+0xbb/0x270 [ 2723.888690][T11513] ? __hrtimer_init+0x186/0x270 [ 2723.893593][T11513] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2723.899399][T11513] hwsim_new_radio_nl+0xafa/0xce0 [ 2723.904524][T11513] genl_family_rcv_msg_doit+0x22a/0x330 [ 2723.910131][T11513] ? end_current_label_crit_section+0x170/0x170 [ 2723.916455][T11513] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2723.922404][T11513] ? bpf_lsm_capable+0x5/0x10 [ 2723.927134][T11513] ? security_capable+0x85/0xb0 [ 2723.932055][T11513] genl_rcv_msg+0x604/0x790 [ 2723.936619][T11513] ? lockdep_hardirqs_on+0x94/0x140 [ 2723.941884][T11513] ? genl_bind+0x360/0x360 [ 2723.946386][T11513] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2723.952808][T11513] netlink_rcv_skb+0x1fb/0x450 [ 2723.957649][T11513] ? genl_bind+0x360/0x360 [ 2723.962120][T11513] ? netlink_ack+0x1170/0x1170 [ 2723.966936][T11513] ? down_read+0x1a8/0x2d0 [ 2723.971398][T11513] genl_rcv+0x24/0x40 [ 2723.975410][T11513] netlink_unicast+0x74d/0x8d0 [ 2723.980220][T11513] netlink_sendmsg+0x8ad/0xbd0 [ 2723.985035][T11513] ? netlink_getsockopt+0x550/0x550 [ 2723.990310][T11513] ? aa_sock_msg_perm+0x94/0x150 [ 2723.995291][T11513] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2724.000615][T11513] ? security_socket_sendmsg+0x7c/0xa0 [ 2724.006121][T11513] ? netlink_getsockopt+0x550/0x550 [ 2724.011356][T11513] ____sys_sendmsg+0x5be/0x970 [ 2724.016177][T11513] ? __sys_sendmsg_sock+0x30/0x30 [ 2724.021245][T11513] ? __import_iovec+0x315/0x500 [ 2724.026132][T11513] ? import_iovec+0x6f/0xa0 [ 2724.030674][T11513] ___sys_sendmsg+0x2a2/0x360 [ 2724.035399][T11513] ? __sys_sendmsg+0x290/0x290 [ 2724.040219][T11513] ? irqentry_enter+0x33/0x50 [ 2724.044971][T11513] __se_sys_sendmsg+0x1bb/0x2a0 [ 2724.049868][T11513] ? __x64_sys_sendmsg+0x80/0x80 [ 2724.054872][T11513] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2724.060810][T11513] do_syscall_64+0x4c/0xa0 [ 2724.065268][T11513] ? clear_bhb_loop+0x60/0xb0 [ 2724.069982][T11513] ? clear_bhb_loop+0x60/0xb0 [ 2724.074705][T11513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2724.080641][T11513] RIP: 0033:0x7fa0bef9ce59 [ 2724.085263][T11513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2724.104909][T11513] RSP: 002b:00007fa0bfe09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2724.113360][T11513] RAX: ffffffffffffffda RBX: 00007fa0bf216090 RCX: 00007fa0bef9ce59 [ 2724.121366][T11513] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2724.129363][T11513] RBP: 00007fa0bf032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2724.137367][T11513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2724.145460][T11513] R13: 00007fa0bf216128 R14: 00007fa0bf216090 R15: 00007ffc9a7c0af8 [ 2724.153578][T11513] [ 2724.328372][T11523] netlink: 'syz.0.11026': attribute type 27 has an invalid length. [ 2724.337077][T11523] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11026'. [ 2724.412171][T11496] sctp: [Deprecated]: syz.2.11019 (pid 11496) Use of int in maxseg socket option. [ 2724.412171][T11496] Use struct sctp_assoc_value instead [ 2724.747479][T11531] netlink: 'syz.0.11028': attribute type 10 has an invalid length. [ 2725.083366][T11541] netlink: 'syz.1.11031': attribute type 10 has an invalid length. [ 2725.279234][T11541] sctp: [Deprecated]: syz.1.11031 (pid 11541) Use of int in maxseg socket option. [ 2725.279234][T11541] Use struct sctp_assoc_value instead [ 2725.559593][T11549] netlink: 'syz.4.11033': attribute type 29 has an invalid length. [ 2725.864718][T11553] sctp: [Deprecated]: syz.0.11028 (pid 11553) Use of int in maxseg socket option. [ 2725.864718][T11553] Use struct sctp_assoc_value instead [ 2726.185966][T11558] netlink: 'syz.4.11045': attribute type 10 has an invalid length. [ 2726.652415][T11573] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11038'. [ 2726.746127][T11573] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11038'. [ 2726.786883][T11573] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2726.923925][T11575] netlink: 'syz.2.11039': attribute type 27 has an invalid length. [ 2726.949757][T11575] netlink: 164 bytes leftover after parsing attributes in process `syz.2.11039'. [ 2727.195226][T11581] netlink: 'syz.0.11040': attribute type 10 has an invalid length. [ 2727.707215][T11579] sctp: [Deprecated]: syz.0.11040 (pid 11579) Use of int in maxseg socket option. [ 2727.707215][T11579] Use struct sctp_assoc_value instead [ 2727.932328][T11566] sctp: [Deprecated]: syz.4.11045 (pid 11566) Use of int in maxseg socket option. [ 2727.932328][T11566] Use struct sctp_assoc_value instead [ 2728.255889][T11598] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.11046'. [ 2728.383951][T11606] netlink: 'syz.3.11048': attribute type 29 has an invalid length. [ 2728.416139][T11598] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2728.450243][T11598] CPU: 0 PID: 11598 Comm: syz.0.11046 Not tainted syzkaller #0 [ 2728.457889][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2728.467982][T11598] Call Trace: [ 2728.471294][T11598] [ 2728.474257][T11598] dump_stack_lvl+0x188/0x24e [ 2728.478993][T11598] ? show_regs_print_info+0x12/0x12 [ 2728.484236][T11598] ? load_image+0x400/0x400 [ 2728.488804][T11598] sysfs_warn_dup+0x8a/0xa0 [ 2728.493349][T11598] sysfs_do_create_link_sd+0xc0/0x110 [ 2728.498762][T11598] device_add+0x7ed/0xfb0 [ 2728.503135][T11598] wiphy_register+0x1d9f/0x2ac0 [ 2728.508049][T11598] ? cfg80211_event_work+0x40/0x40 [ 2728.513201][T11598] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2728.519405][T11598] ieee80211_register_hw+0x2d00/0x39f0 [ 2728.524942][T11598] ? lockdep_hardirqs_on+0x94/0x140 [ 2728.530202][T11598] ? ieee80211_register_hw+0xea1/0x39f0 [ 2728.535783][T11598] ? ieee80211_register_hw+0xea1/0x39f0 [ 2728.541375][T11598] ? ieee80211_tasklet_handler+0x20/0x20 [ 2728.547055][T11598] ? memset+0x1e/0x40 [ 2728.551063][T11598] ? __hrtimer_init+0x186/0x270 [ 2728.555956][T11598] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2728.561745][T11598] hwsim_new_radio_nl+0xafa/0xce0 [ 2728.566917][T11598] genl_family_rcv_msg_doit+0x22a/0x330 [ 2728.572507][T11598] ? end_current_label_crit_section+0x170/0x170 [ 2728.578790][T11598] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2728.584722][T11598] ? bpf_lsm_capable+0x5/0x10 [ 2728.589436][T11598] ? security_capable+0x85/0xb0 [ 2728.594342][T11598] genl_rcv_msg+0x604/0x790 [ 2728.598911][T11598] ? irqentry_enter+0x33/0x50 [ 2728.603634][T11598] ? genl_bind+0x360/0x360 [ 2728.608082][T11598] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2728.614551][T11598] netlink_rcv_skb+0x1fb/0x450 [ 2728.619372][T11598] ? genl_bind+0x360/0x360 [ 2728.623823][T11598] ? netlink_ack+0x1170/0x1170 [ 2728.628642][T11598] ? down_read+0x1a8/0x2d0 [ 2728.633103][T11598] genl_rcv+0x24/0x40 [ 2728.637147][T11598] netlink_unicast+0x74d/0x8d0 [ 2728.641958][T11598] netlink_sendmsg+0x8ad/0xbd0 [ 2728.646861][T11598] ? netlink_getsockopt+0x550/0x550 [ 2728.652111][T11598] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2728.657534][T11598] ? security_socket_sendmsg+0x7c/0xa0 [ 2728.663046][T11598] ? netlink_getsockopt+0x550/0x550 [ 2728.668380][T11598] ____sys_sendmsg+0x5be/0x970 [ 2728.673216][T11598] ? __sys_sendmsg_sock+0x30/0x30 [ 2728.678280][T11598] ? __import_iovec+0x315/0x500 [ 2728.683189][T11598] ? import_iovec+0x6f/0xa0 [ 2728.687728][T11598] ___sys_sendmsg+0x2a2/0x360 [ 2728.692454][T11598] ? __sys_sendmsg+0x290/0x290 [ 2728.697294][T11598] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2728.703078][T11598] __se_sys_sendmsg+0x1bb/0x2a0 [ 2728.707982][T11598] ? __x64_sys_sendmsg+0x80/0x80 [ 2728.712973][T11598] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2728.718904][T11598] do_syscall_64+0x4c/0xa0 [ 2728.723368][T11598] ? clear_bhb_loop+0x60/0xb0 [ 2728.728083][T11598] ? clear_bhb_loop+0x60/0xb0 [ 2728.732805][T11598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2728.738746][T11598] RIP: 0033:0x7f94a399ce59 [ 2728.743195][T11598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2728.762842][T11598] RSP: 002b:00007f94a4902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2728.771303][T11598] RAX: ffffffffffffffda RBX: 00007f94a3c16090 RCX: 00007f94a399ce59 [ 2728.779309][T11598] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2728.787401][T11598] RBP: 00007f94a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2728.795676][T11598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2728.803671][T11598] R13: 00007f94a3c16128 R14: 00007f94a3c16090 R15: 00007ffd817547e8 [ 2728.811692][T11598] [ 2729.166319][T11608] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.11047'. [ 2729.198348][T11608] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2729.219538][T11608] CPU: 0 PID: 11608 Comm: syz.4.11047 Not tainted syzkaller #0 [ 2729.227184][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2729.237281][T11608] Call Trace: [ 2729.240578][T11608] [ 2729.243530][T11608] dump_stack_lvl+0x188/0x24e [ 2729.248282][T11608] ? show_regs_print_info+0x12/0x12 [ 2729.253551][T11608] ? load_image+0x400/0x400 [ 2729.258131][T11608] sysfs_warn_dup+0x8a/0xa0 [ 2729.262685][T11608] sysfs_do_create_link_sd+0xc0/0x110 [ 2729.268092][T11608] device_add+0x7ed/0xfb0 [ 2729.272474][T11608] wiphy_register+0x1d9f/0x2ac0 [ 2729.277406][T11608] ? cfg80211_event_work+0x40/0x40 [ 2729.282578][T11608] ? minstrel_ht_alloc+0x894/0xa20 [ 2729.287844][T11608] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2729.293951][T11608] ieee80211_register_hw+0x2d00/0x39f0 [ 2729.299479][T11608] ? ieee80211_register_hw+0xea1/0x39f0 [ 2729.305147][T11608] ? ieee80211_register_hw+0xea1/0x39f0 [ 2729.310735][T11608] ? ieee80211_tasklet_handler+0x20/0x20 [ 2729.316415][T11608] ? memset+0x1e/0x40 [ 2729.320433][T11608] ? __hrtimer_init+0x186/0x270 [ 2729.325326][T11608] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2729.331102][T11608] hwsim_new_radio_nl+0xafa/0xce0 [ 2729.336180][T11608] genl_family_rcv_msg_doit+0x22a/0x330 [ 2729.341752][T11608] ? end_current_label_crit_section+0x170/0x170 [ 2729.348027][T11608] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2729.354061][T11608] ? bpf_lsm_capable+0x5/0x10 [ 2729.358771][T11608] ? security_capable+0x85/0xb0 [ 2729.363662][T11608] genl_rcv_msg+0x604/0x790 [ 2729.368206][T11608] ? genl_bind+0x360/0x360 [ 2729.372657][T11608] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2729.379041][T11608] netlink_rcv_skb+0x1fb/0x450 [ 2729.383844][T11608] ? genl_bind+0x360/0x360 [ 2729.388291][T11608] ? netlink_ack+0x1170/0x1170 [ 2729.393182][T11608] ? down_read+0x1a8/0x2d0 [ 2729.397642][T11608] genl_rcv+0x24/0x40 [ 2729.401665][T11608] netlink_unicast+0x74d/0x8d0 [ 2729.406484][T11608] netlink_sendmsg+0x8ad/0xbd0 [ 2729.411312][T11608] ? netlink_getsockopt+0x550/0x550 [ 2729.416552][T11608] ? aa_sock_msg_perm+0x94/0x150 [ 2729.421536][T11608] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2729.426848][T11608] ? security_socket_sendmsg+0x7c/0xa0 [ 2729.432351][T11608] ? netlink_getsockopt+0x550/0x550 [ 2729.437603][T11608] ____sys_sendmsg+0x5be/0x970 [ 2729.442419][T11608] ? __sys_sendmsg_sock+0x30/0x30 [ 2729.447491][T11608] ? __import_iovec+0x315/0x500 [ 2729.452377][T11608] ? import_iovec+0x6f/0xa0 [ 2729.456915][T11608] ___sys_sendmsg+0x2a2/0x360 [ 2729.461631][T11608] ? try_to_wake_up+0x6ae/0x1080 [ 2729.466713][T11608] ? __sys_sendmsg+0x290/0x290 [ 2729.471578][T11608] __se_sys_sendmsg+0x1bb/0x2a0 [ 2729.476486][T11608] ? __x64_sys_sendmsg+0x80/0x80 [ 2729.481484][T11608] ? lockdep_hardirqs_on+0x94/0x140 [ 2729.486721][T11608] do_syscall_64+0x4c/0xa0 [ 2729.491177][T11608] ? clear_bhb_loop+0x60/0xb0 [ 2729.495921][T11608] ? clear_bhb_loop+0x60/0xb0 [ 2729.500654][T11608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2729.506603][T11608] RIP: 0033:0x7f48c4f9ce59 [ 2729.511053][T11608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2729.530686][T11608] RSP: 002b:00007f48c5dda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2729.539130][T11608] RAX: ffffffffffffffda RBX: 00007f48c5216180 RCX: 00007f48c4f9ce59 [ 2729.547134][T11608] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2729.555136][T11608] RBP: 00007f48c5032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2729.563149][T11608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2729.571149][T11608] R13: 00007f48c5216218 R14: 00007f48c5216180 R15: 00007fff4d2c7848 [ 2729.579166][T11608] [ 2729.585632][T11624] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.11049'. [ 2729.619404][T11624] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2729.634092][T11624] CPU: 1 PID: 11624 Comm: syz.2.11049 Not tainted syzkaller #0 [ 2729.641730][T11624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2729.651836][T11624] Call Trace: [ 2729.655146][T11624] [ 2729.658108][T11624] dump_stack_lvl+0x188/0x24e [ 2729.662837][T11624] ? show_regs_print_info+0x12/0x12 [ 2729.668086][T11624] ? load_image+0x400/0x400 [ 2729.672722][T11624] sysfs_warn_dup+0x8a/0xa0 [ 2729.677263][T11624] sysfs_do_create_link_sd+0xc0/0x110 [ 2729.682680][T11624] device_add+0x7ed/0xfb0 [ 2729.687078][T11624] wiphy_register+0x1d9f/0x2ac0 [ 2729.692005][T11624] ? cfg80211_event_work+0x40/0x40 [ 2729.697173][T11624] ? minstrel_ht_alloc+0x894/0xa20 [ 2729.702342][T11624] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2729.708444][T11624] ieee80211_register_hw+0x2d00/0x39f0 [ 2729.713956][T11624] ? ieee80211_register_hw+0xea1/0x39f0 [ 2729.719569][T11624] ? ieee80211_register_hw+0xea1/0x39f0 [ 2729.725169][T11624] ? ieee80211_tasklet_handler+0x20/0x20 [ 2729.730867][T11624] ? memset+0x1e/0x40 [ 2729.734877][T11624] ? __hrtimer_init+0x186/0x270 [ 2729.739768][T11624] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2729.745547][T11624] hwsim_new_radio_nl+0xafa/0xce0 [ 2729.750652][T11624] genl_family_rcv_msg_doit+0x22a/0x330 [ 2729.756251][T11624] ? end_current_label_crit_section+0x170/0x170 [ 2729.762627][T11624] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2729.768572][T11624] ? bpf_lsm_capable+0x5/0x10 [ 2729.773284][T11624] ? security_capable+0x85/0xb0 [ 2729.778175][T11624] genl_rcv_msg+0x604/0x790 [ 2729.782725][T11624] ? genl_bind+0x360/0x360 [ 2729.787169][T11624] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2729.793557][T11624] netlink_rcv_skb+0x1fb/0x450 [ 2729.798366][T11624] ? genl_bind+0x360/0x360 [ 2729.802820][T11624] ? netlink_ack+0x1170/0x1170 [ 2729.807632][T11624] ? down_read+0x1a8/0x2d0 [ 2729.812087][T11624] genl_rcv+0x24/0x40 [ 2729.816099][T11624] netlink_unicast+0x74d/0x8d0 [ 2729.820912][T11624] netlink_sendmsg+0x8ad/0xbd0 [ 2729.825725][T11624] ? netlink_getsockopt+0x550/0x550 [ 2729.831055][T11624] ? aa_sock_msg_perm+0x94/0x150 [ 2729.836021][T11624] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2729.841365][T11624] ? security_socket_sendmsg+0x7c/0xa0 [ 2729.847001][T11624] ? netlink_getsockopt+0x550/0x550 [ 2729.852239][T11624] ____sys_sendmsg+0x5be/0x970 [ 2729.857067][T11624] ? __sys_sendmsg_sock+0x30/0x30 [ 2729.862134][T11624] ? __import_iovec+0x315/0x500 [ 2729.867026][T11624] ? import_iovec+0x6f/0xa0 [ 2729.871559][T11624] ___sys_sendmsg+0x2a2/0x360 [ 2729.876285][T11624] ? __lock_acquire+0x7d10/0x7d10 [ 2729.881357][T11624] ? __sys_sendmsg+0x290/0x290 [ 2729.886211][T11624] __se_sys_sendmsg+0x1bb/0x2a0 [ 2729.891103][T11624] ? __x64_sys_sendmsg+0x80/0x80 [ 2729.896097][T11624] ? lockdep_hardirqs_on+0x94/0x140 [ 2729.901327][T11624] do_syscall_64+0x4c/0xa0 [ 2729.905773][T11624] ? clear_bhb_loop+0x60/0xb0 [ 2729.910479][T11624] ? clear_bhb_loop+0x60/0xb0 [ 2729.915213][T11624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2729.921140][T11624] RIP: 0033:0x7f170cf9ce59 [ 2729.925587][T11624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2729.945324][T11624] RSP: 002b:00007f170ddc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2729.953770][T11624] RAX: ffffffffffffffda RBX: 00007f170d216180 RCX: 00007f170cf9ce59 [ 2729.961916][T11624] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2729.969919][T11624] RBP: 00007f170d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2729.977920][T11624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2729.985922][T11624] R13: 00007f170d216218 R14: 00007f170d216180 R15: 00007ffccb9976a8 [ 2729.994035][T11624] [ 2730.268126][T11636] netlink: 'syz.1.11053': attribute type 10 has an invalid length. [ 2730.295418][T11633] netlink: 'syz.4.11052': attribute type 11 has an invalid length. [ 2730.739599][T11633] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11052'. [ 2730.802806][T11633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2731.253994][T11649] netlink: 'syz.3.11055': attribute type 27 has an invalid length. [ 2731.280163][T11649] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11055'. [ 2731.431865][T11651] sctp: [Deprecated]: syz.1.11053 (pid 11651) Use of int in maxseg socket option. [ 2731.431865][T11651] Use struct sctp_assoc_value instead [ 2731.584601][T11655] netlink: 'syz.4.11056': attribute type 10 has an invalid length. [ 2731.785634][T11665] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11059'. [ 2731.822627][T11664] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.11069'. [ 2731.958826][T11664] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2732.043882][T11664] CPU: 0 PID: 11664 Comm: syz.0.11069 Not tainted syzkaller #0 [ 2732.051528][T11664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2732.061633][T11664] Call Trace: [ 2732.064966][T11664] [ 2732.067944][T11664] dump_stack_lvl+0x188/0x24e [ 2732.072720][T11664] ? show_regs_print_info+0x12/0x12 [ 2732.077987][T11664] ? load_image+0x400/0x400 [ 2732.082557][T11664] sysfs_warn_dup+0x8a/0xa0 [ 2732.087123][T11664] sysfs_do_create_link_sd+0xc0/0x110 [ 2732.092549][T11664] device_add+0x7ed/0xfb0 [ 2732.096937][T11664] wiphy_register+0x1d9f/0x2ac0 [ 2732.101876][T11664] ? cfg80211_event_work+0x40/0x40 [ 2732.107050][T11664] ? minstrel_ht_alloc+0x894/0xa20 [ 2732.112227][T11664] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2732.118353][T11664] ieee80211_register_hw+0x2d00/0x39f0 [ 2732.123887][T11664] ? lockdep_hardirqs_on+0x94/0x140 [ 2732.129141][T11664] ? ieee80211_register_hw+0xea1/0x39f0 [ 2732.134753][T11664] ? ieee80211_register_hw+0xea1/0x39f0 [ 2732.140365][T11664] ? ieee80211_tasklet_handler+0x20/0x20 [ 2732.146055][T11664] ? memset+0x1e/0x40 [ 2732.150078][T11664] ? __hrtimer_init+0x186/0x270 [ 2732.154991][T11664] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2732.160799][T11664] hwsim_new_radio_nl+0xafa/0xce0 [ 2732.165892][T11664] genl_family_rcv_msg_doit+0x22a/0x330 [ 2732.171502][T11664] ? end_current_label_crit_section+0x170/0x170 [ 2732.177789][T11664] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2732.183738][T11664] ? bpf_lsm_capable+0x5/0x10 [ 2732.188495][T11664] ? security_capable+0x85/0xb0 [ 2732.193408][T11664] genl_rcv_msg+0x604/0x790 [ 2732.197966][T11664] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2732.204187][T11664] ? genl_bind+0x360/0x360 [ 2732.208734][T11664] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2732.215133][T11664] ? lock_acquire+0x225/0x4a0 [ 2732.219891][T11664] netlink_rcv_skb+0x1fb/0x450 [ 2732.224719][T11664] ? genl_bind+0x360/0x360 [ 2732.229185][T11664] ? netlink_ack+0x1170/0x1170 [ 2732.234016][T11664] ? down_read+0x1a8/0x2d0 [ 2732.238510][T11664] genl_rcv+0x24/0x40 [ 2732.242540][T11664] netlink_unicast+0x74d/0x8d0 [ 2732.247374][T11664] netlink_sendmsg+0x8ad/0xbd0 [ 2732.252203][T11664] ? netlink_getsockopt+0x550/0x550 [ 2732.257459][T11664] ? aa_sock_msg_perm+0x94/0x150 [ 2732.262445][T11664] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2732.267781][T11664] ? security_socket_sendmsg+0x7c/0xa0 [ 2732.273298][T11664] ? netlink_getsockopt+0x550/0x550 [ 2732.278556][T11664] ____sys_sendmsg+0x5be/0x970 [ 2732.283385][T11664] ? __sys_sendmsg_sock+0x30/0x30 [ 2732.288469][T11664] ? __import_iovec+0x315/0x500 [ 2732.293379][T11664] ? import_iovec+0x6f/0xa0 [ 2732.297941][T11664] ___sys_sendmsg+0x2a2/0x360 [ 2732.302693][T11664] ? __sys_sendmsg+0x290/0x290 [ 2732.307573][T11664] __se_sys_sendmsg+0x1bb/0x2a0 [ 2732.312577][T11664] ? __x64_sys_sendmsg+0x80/0x80 [ 2732.317590][T11664] ? lockdep_hardirqs_on+0x94/0x140 [ 2732.322841][T11664] do_syscall_64+0x4c/0xa0 [ 2732.327309][T11664] ? clear_bhb_loop+0x60/0xb0 [ 2732.332033][T11664] ? clear_bhb_loop+0x60/0xb0 [ 2732.336763][T11664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2732.342713][T11664] RIP: 0033:0x7f94a399ce59 [ 2732.347189][T11664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2732.366949][T11664] RSP: 002b:00007f94a4902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2732.375423][T11664] RAX: ffffffffffffffda RBX: 00007f94a3c16090 RCX: 00007f94a399ce59 [ 2732.383455][T11664] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2732.391508][T11664] RBP: 00007f94a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2732.399533][T11664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2732.407546][T11664] R13: 00007f94a3c16128 R14: 00007f94a3c16090 R15: 00007ffd817547e8 [ 2732.415589][T11664] [ 2732.714136][T11655] sctp: [Deprecated]: syz.4.11056 (pid 11655) Use of int in maxseg socket option. [ 2732.714136][T11655] Use struct sctp_assoc_value instead [ 2732.784256][T11665] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11059'. [ 2732.930180][T11665] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2733.010193][T11674] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.11060'. [ 2733.091350][T11674] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2733.129971][T11674] CPU: 0 PID: 11674 Comm: syz.1.11060 Not tainted syzkaller #0 [ 2733.137614][T11674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2733.147725][T11674] Call Trace: [ 2733.151050][T11674] [ 2733.154027][T11674] dump_stack_lvl+0x188/0x24e [ 2733.158806][T11674] ? show_regs_print_info+0x12/0x12 [ 2733.164080][T11674] ? load_image+0x400/0x400 [ 2733.168651][T11674] sysfs_warn_dup+0x8a/0xa0 [ 2733.173218][T11674] sysfs_do_create_link_sd+0xc0/0x110 [ 2733.178650][T11674] device_add+0x7ed/0xfb0 [ 2733.183049][T11674] wiphy_register+0x1d9f/0x2ac0 [ 2733.187991][T11674] ? cfg80211_event_work+0x40/0x40 [ 2733.193178][T11674] ? minstrel_ht_alloc+0x894/0xa20 [ 2733.198367][T11674] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2733.204504][T11674] ieee80211_register_hw+0x2d00/0x39f0 [ 2733.210047][T11674] ? ieee80211_register_hw+0xea1/0x39f0 [ 2733.216014][T11674] ? ieee80211_register_hw+0xea1/0x39f0 [ 2733.221641][T11674] ? ieee80211_tasklet_handler+0x20/0x20 [ 2733.227356][T11674] ? memset+0x1e/0x40 [ 2733.231405][T11674] ? __hrtimer_init+0x186/0x270 [ 2733.236318][T11674] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2733.242130][T11674] hwsim_new_radio_nl+0xafa/0xce0 [ 2733.247238][T11674] genl_family_rcv_msg_doit+0x22a/0x330 [ 2733.252854][T11674] ? end_current_label_crit_section+0x170/0x170 [ 2733.259161][T11674] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2733.265123][T11674] ? bpf_lsm_capable+0x5/0x10 [ 2733.269872][T11674] ? security_capable+0x85/0xb0 [ 2733.274796][T11674] genl_rcv_msg+0x604/0x790 [ 2733.279368][T11674] ? lock_chain_count+0x20/0x20 [ 2733.284318][T11674] ? genl_bind+0x360/0x360 [ 2733.288803][T11674] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2733.295238][T11674] netlink_rcv_skb+0x1fb/0x450 [ 2733.300086][T11674] ? genl_bind+0x360/0x360 [ 2733.304570][T11674] ? netlink_ack+0x1170/0x1170 [ 2733.309418][T11674] ? down_read+0x1a8/0x2d0 [ 2733.313899][T11674] genl_rcv+0x24/0x40 [ 2733.317929][T11674] netlink_unicast+0x74d/0x8d0 [ 2733.322780][T11674] netlink_sendmsg+0x8ad/0xbd0 [ 2733.327663][T11674] ? netlink_getsockopt+0x550/0x550 [ 2733.332932][T11674] ? aa_sock_msg_perm+0x94/0x150 [ 2733.338015][T11674] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2733.343354][T11674] ? security_socket_sendmsg+0x7c/0xa0 [ 2733.348889][T11674] ? netlink_getsockopt+0x550/0x550 [ 2733.354157][T11674] ____sys_sendmsg+0x5be/0x970 [ 2733.358996][T11674] ? __sys_sendmsg_sock+0x30/0x30 [ 2733.364086][T11674] ? __import_iovec+0x315/0x500 [ 2733.369001][T11674] ? import_iovec+0x6f/0xa0 [ 2733.373566][T11674] ___sys_sendmsg+0x2a2/0x360 [ 2733.378320][T11674] ? __sys_sendmsg+0x290/0x290 [ 2733.383192][T11674] ? trace_call_bpf+0xbf/0x6b0 [ 2733.388060][T11674] __se_sys_sendmsg+0x1bb/0x2a0 [ 2733.392986][T11674] ? __x64_sys_sendmsg+0x80/0x80 [ 2733.398024][T11674] ? lockdep_hardirqs_on+0x94/0x140 [ 2733.403284][T11674] do_syscall_64+0x4c/0xa0 [ 2733.407766][T11674] ? clear_bhb_loop+0x60/0xb0 [ 2733.412508][T11674] ? clear_bhb_loop+0x60/0xb0 [ 2733.417595][T11674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2733.423545][T11674] RIP: 0033:0x7fa0bef9ce59 [ 2733.428009][T11674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2733.447762][T11674] RSP: 002b:00007fa0bfde8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2733.456323][T11674] RAX: ffffffffffffffda RBX: 00007fa0bf216180 RCX: 00007fa0bef9ce59 [ 2733.464351][T11674] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2733.472378][T11674] RBP: 00007fa0bf032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2733.480403][T11674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2733.488423][T11674] R13: 00007fa0bf216218 R14: 00007fa0bf216180 R15: 00007ffc9a7c0af8 [ 2733.496559][T11674] [ 2733.702035][T11699] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.11063'. [ 2733.883000][T11707] netlink: 'syz.3.11066': attribute type 29 has an invalid length. [ 2733.955022][T11699] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2733.981066][T11699] CPU: 1 PID: 11699 Comm: syz.0.11063 Not tainted syzkaller #0 [ 2733.988723][T11699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2733.998869][T11699] Call Trace: [ 2734.002289][T11699] [ 2734.005271][T11699] dump_stack_lvl+0x188/0x24e [ 2734.010030][T11699] ? show_regs_print_info+0x12/0x12 [ 2734.015298][T11699] ? load_image+0x400/0x400 [ 2734.019880][T11699] sysfs_warn_dup+0x8a/0xa0 [ 2734.024442][T11699] sysfs_do_create_link_sd+0xc0/0x110 [ 2734.029885][T11699] device_add+0x7ed/0xfb0 [ 2734.034288][T11699] wiphy_register+0x1d9f/0x2ac0 [ 2734.039250][T11699] ? cfg80211_event_work+0x40/0x40 [ 2734.044430][T11699] ? minstrel_ht_alloc+0x894/0xa20 [ 2734.049615][T11699] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2734.056111][T11699] ieee80211_register_hw+0x2d00/0x39f0 [ 2734.061653][T11699] ? lockdep_hardirqs_on+0x94/0x140 [ 2734.066931][T11699] ? ieee80211_register_hw+0xea1/0x39f0 [ 2734.072565][T11699] ? ieee80211_register_hw+0xea1/0x39f0 [ 2734.078210][T11699] ? ieee80211_tasklet_handler+0x20/0x20 [ 2734.083979][T11699] ? memset+0x1e/0x40 [ 2734.088031][T11699] ? __hrtimer_init+0x186/0x270 [ 2734.092969][T11699] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2734.098805][T11699] hwsim_new_radio_nl+0xafa/0xce0 [ 2734.103912][T11699] genl_family_rcv_msg_doit+0x22a/0x330 [ 2734.109503][T11699] ? end_current_label_crit_section+0x170/0x170 [ 2734.115792][T11699] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2734.121727][T11699] ? bpf_lsm_capable+0x5/0x10 [ 2734.126445][T11699] ? security_capable+0x85/0xb0 [ 2734.131333][T11699] genl_rcv_msg+0x604/0x790 [ 2734.135880][T11699] ? genl_bind+0x360/0x360 [ 2734.140323][T11699] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2734.146742][T11699] netlink_rcv_skb+0x1fb/0x450 [ 2734.151641][T11699] ? genl_bind+0x360/0x360 [ 2734.156176][T11699] ? netlink_ack+0x1170/0x1170 [ 2734.160991][T11699] ? down_read+0x1a8/0x2d0 [ 2734.165457][T11699] genl_rcv+0x24/0x40 [ 2734.169467][T11699] netlink_unicast+0x74d/0x8d0 [ 2734.174277][T11699] netlink_sendmsg+0x8ad/0xbd0 [ 2734.179093][T11699] ? netlink_getsockopt+0x550/0x550 [ 2734.184332][T11699] ? aa_sock_msg_perm+0x94/0x150 [ 2734.189300][T11699] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2734.194615][T11699] ? security_socket_sendmsg+0x7c/0xa0 [ 2734.200122][T11699] ? netlink_getsockopt+0x550/0x550 [ 2734.205355][T11699] ____sys_sendmsg+0x5be/0x970 [ 2734.210162][T11699] ? __sys_sendmsg_sock+0x30/0x30 [ 2734.215218][T11699] ? __import_iovec+0x315/0x500 [ 2734.220107][T11699] ? import_iovec+0x6f/0xa0 [ 2734.224640][T11699] ___sys_sendmsg+0x2a2/0x360 [ 2734.229358][T11699] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2734.235549][T11699] ? __sys_sendmsg+0x290/0x290 [ 2734.240387][T11699] ? rcu_is_watching+0x11/0xa0 [ 2734.245221][T11699] ? __x64_sys_sendmsg+0x70/0x80 [ 2734.250208][T11699] __se_sys_sendmsg+0x1bb/0x2a0 [ 2734.255109][T11699] ? __x64_sys_sendmsg+0x80/0x80 [ 2734.260100][T11699] ? lockdep_hardirqs_on+0x94/0x140 [ 2734.265334][T11699] do_syscall_64+0x4c/0xa0 [ 2734.269799][T11699] ? clear_bhb_loop+0x60/0xb0 [ 2734.274511][T11699] ? clear_bhb_loop+0x60/0xb0 [ 2734.279222][T11699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2734.285150][T11699] RIP: 0033:0x7f94a399ce59 [ 2734.289600][T11699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2734.309240][T11699] RSP: 002b:00007f94a48e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2734.317685][T11699] RAX: ffffffffffffffda RBX: 00007f94a3c16180 RCX: 00007f94a399ce59 [ 2734.325691][T11699] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2734.333692][T11699] RBP: 00007f94a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2734.341695][T11699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2734.349696][T11699] R13: 00007f94a3c16218 R14: 00007f94a3c16180 R15: 00007ffd817547e8 [ 2734.357717][T11699] [ 2734.396284][T11706] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.11065'. [ 2734.525129][T11706] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2734.575713][T11706] CPU: 1 PID: 11706 Comm: syz.2.11065 Not tainted syzkaller #0 [ 2734.583485][T11706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2734.594497][T11706] Call Trace: [ 2734.597942][T11706] [ 2734.600944][T11706] dump_stack_lvl+0x188/0x24e [ 2734.605734][T11706] ? show_regs_print_info+0x12/0x12 [ 2734.611047][T11706] ? load_image+0x400/0x400 [ 2734.615717][T11706] sysfs_warn_dup+0x8a/0xa0 [ 2734.620560][T11706] sysfs_do_create_link_sd+0xc0/0x110 [ 2734.626039][T11706] device_add+0x7ed/0xfb0 [ 2734.630568][T11706] wiphy_register+0x1d9f/0x2ac0 [ 2734.635560][T11706] ? cfg80211_event_work+0x40/0x40 [ 2734.640756][T11706] ? minstrel_ht_alloc+0x894/0xa20 [ 2734.645970][T11706] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2734.652110][T11706] ieee80211_register_hw+0x2d00/0x39f0 [ 2734.657658][T11706] ? ieee80211_register_hw+0xea1/0x39f0 [ 2734.663260][T11706] ? ieee80211_register_hw+0xea1/0x39f0 [ 2734.668883][T11706] ? ieee80211_tasklet_handler+0x20/0x20 [ 2734.674602][T11706] ? memset+0x1e/0x40 [ 2734.678660][T11706] ? __hrtimer_init+0x186/0x270 [ 2734.683595][T11706] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2734.689454][T11706] hwsim_new_radio_nl+0xafa/0xce0 [ 2734.694682][T11706] genl_family_rcv_msg_doit+0x22a/0x330 [ 2734.700324][T11706] ? end_current_label_crit_section+0x170/0x170 [ 2734.706627][T11706] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2734.712592][T11706] ? bpf_lsm_capable+0x5/0x10 [ 2734.717325][T11706] ? security_capable+0x85/0xb0 [ 2734.722277][T11706] genl_rcv_msg+0x604/0x790 [ 2734.726840][T11706] ? lock_chain_count+0x20/0x20 [ 2734.731776][T11706] ? genl_bind+0x360/0x360 [ 2734.736243][T11706] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2734.742710][T11706] netlink_rcv_skb+0x1fb/0x450 [ 2734.747665][T11706] ? genl_bind+0x360/0x360 [ 2734.752153][T11706] ? netlink_ack+0x1170/0x1170 [ 2734.757025][T11706] ? down_read+0x1a8/0x2d0 [ 2734.761548][T11706] genl_rcv+0x24/0x40 [ 2734.765594][T11706] netlink_unicast+0x74d/0x8d0 [ 2734.770492][T11706] netlink_sendmsg+0x8ad/0xbd0 [ 2734.775497][T11706] ? netlink_getsockopt+0x550/0x550 [ 2734.780797][T11706] ? aa_sock_msg_perm+0x94/0x150 [ 2734.785804][T11706] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2734.791203][T11706] ? security_socket_sendmsg+0x7c/0xa0 [ 2734.796738][T11706] ? netlink_getsockopt+0x550/0x550 [ 2734.801990][T11706] ____sys_sendmsg+0x5be/0x970 [ 2734.806859][T11706] ? __sys_sendmsg_sock+0x30/0x30 [ 2734.812198][T11706] ? __import_iovec+0x315/0x500 [ 2734.817132][T11706] ? import_iovec+0x6f/0xa0 [ 2734.821715][T11706] ___sys_sendmsg+0x2a2/0x360 [ 2734.826454][T11706] ? try_to_wake_up+0x6ae/0x1080 [ 2734.831465][T11706] ? __sys_sendmsg+0x290/0x290 [ 2734.836424][T11706] __se_sys_sendmsg+0x1bb/0x2a0 [ 2734.841366][T11706] ? __x64_sys_sendmsg+0x80/0x80 [ 2734.846405][T11706] ? lockdep_hardirqs_on+0x94/0x140 [ 2734.851666][T11706] do_syscall_64+0x4c/0xa0 [ 2734.856148][T11706] ? clear_bhb_loop+0x60/0xb0 [ 2734.860880][T11706] ? clear_bhb_loop+0x60/0xb0 [ 2734.865616][T11706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2734.871571][T11706] RIP: 0033:0x7f170cf9ce59 [ 2734.876032][T11706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2734.895690][T11706] RSP: 002b:00007f170ddc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2734.904295][T11706] RAX: ffffffffffffffda RBX: 00007f170d216180 RCX: 00007f170cf9ce59 [ 2734.912332][T11706] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2734.920365][T11706] RBP: 00007f170d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2734.928385][T11706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2734.936403][T11706] R13: 00007f170d216218 R14: 00007f170d216180 R15: 00007ffccb9976a8 [ 2734.944470][T11706] [ 2735.247135][T11725] netlink: 'syz.1.11068': attribute type 11 has an invalid length. [ 2735.265907][T11725] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11068'. [ 2735.327872][T11723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2735.612974][T11732] netlink: 'syz.4.11071': attribute type 10 has an invalid length. [ 2735.687985][T11740] netlink: 'syz.3.11074': attribute type 27 has an invalid length. [ 2735.695452][T11737] netlink: 'syz.2.11073': attribute type 10 has an invalid length. [ 2735.741691][T11740] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11074'. [ 2735.807807][T11735] sctp: [Deprecated]: syz.4.11071 (pid 11735) Use of int in maxseg socket option. [ 2735.807807][T11735] Use struct sctp_assoc_value instead [ 2735.914395][T11749] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.11075'. [ 2735.935603][T11745] sctp: [Deprecated]: syz.2.11073 (pid 11745) Use of int in maxseg socket option. [ 2735.935603][T11745] Use struct sctp_assoc_value instead [ 2735.980474][T11749] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2735.999299][T11749] CPU: 0 PID: 11749 Comm: syz.1.11075 Not tainted syzkaller #0 [ 2736.006950][T11749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2736.017064][T11749] Call Trace: [ 2736.020372][T11749] [ 2736.023356][T11749] dump_stack_lvl+0x188/0x24e [ 2736.028092][T11749] ? show_regs_print_info+0x12/0x12 [ 2736.033358][T11749] ? load_image+0x400/0x400 [ 2736.037918][T11749] sysfs_warn_dup+0x8a/0xa0 [ 2736.042467][T11749] sysfs_do_create_link_sd+0xc0/0x110 [ 2736.047877][T11749] device_add+0x7ed/0xfb0 [ 2736.052243][T11749] wiphy_register+0x1d9f/0x2ac0 [ 2736.057233][T11749] ? cfg80211_event_work+0x40/0x40 [ 2736.062393][T11749] ? minstrel_ht_alloc+0x894/0xa20 [ 2736.067549][T11749] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2736.073654][T11749] ieee80211_register_hw+0x2d00/0x39f0 [ 2736.079158][T11749] ? ieee80211_register_hw+0xea1/0x39f0 [ 2736.084738][T11749] ? ieee80211_register_hw+0xea1/0x39f0 [ 2736.090329][T11749] ? ieee80211_tasklet_handler+0x20/0x20 [ 2736.096028][T11749] ? memset+0x1e/0x40 [ 2736.100052][T11749] ? __hrtimer_init+0x186/0x270 [ 2736.104949][T11749] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2736.110730][T11749] hwsim_new_radio_nl+0xafa/0xce0 [ 2736.115807][T11749] genl_family_rcv_msg_doit+0x22a/0x330 [ 2736.121384][T11749] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2736.127579][T11749] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2736.133512][T11749] ? ns_capable+0x85/0xe0 [ 2736.137884][T11749] ? __sanitizer_cov_trace_pc+0x37/0x60 [ 2736.143470][T11749] genl_rcv_msg+0x604/0x790 [ 2736.148009][T11749] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2736.154200][T11749] ? genl_bind+0x360/0x360 [ 2736.158646][T11749] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2736.165022][T11749] ? lock_acquire+0x225/0x4a0 [ 2736.169836][T11749] netlink_rcv_skb+0x1fb/0x450 [ 2736.174645][T11749] ? genl_bind+0x360/0x360 [ 2736.179087][T11749] ? netlink_ack+0x1170/0x1170 [ 2736.183891][T11749] ? down_read+0x1a8/0x2d0 [ 2736.188344][T11749] genl_rcv+0x24/0x40 [ 2736.192348][T11749] netlink_unicast+0x74d/0x8d0 [ 2736.197157][T11749] netlink_sendmsg+0x8ad/0xbd0 [ 2736.201964][T11749] ? netlink_getsockopt+0x550/0x550 [ 2736.207217][T11749] ? netlink_getsockopt+0x550/0x550 [ 2736.212451][T11749] ____sys_sendmsg+0x5be/0x970 [ 2736.217255][T11749] ? __sys_sendmsg_sock+0x30/0x30 [ 2736.222319][T11749] ? __import_iovec+0x315/0x500 [ 2736.227205][T11749] ? import_iovec+0x6f/0xa0 [ 2736.231745][T11749] ___sys_sendmsg+0x2a2/0x360 [ 2736.236465][T11749] ? __sys_sendmsg+0x290/0x290 [ 2736.241290][T11749] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2736.247069][T11749] __se_sys_sendmsg+0x1bb/0x2a0 [ 2736.251965][T11749] ? __x64_sys_sendmsg+0x80/0x80 [ 2736.256961][T11749] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2736.262890][T11749] do_syscall_64+0x4c/0xa0 [ 2736.267343][T11749] ? clear_bhb_loop+0x60/0xb0 [ 2736.272055][T11749] ? clear_bhb_loop+0x60/0xb0 [ 2736.276767][T11749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2736.282702][T11749] RIP: 0033:0x7fa0bef9ce59 [ 2736.287234][T11749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2736.306874][T11749] RSP: 002b:00007fa0bfe09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2736.315315][T11749] RAX: ffffffffffffffda RBX: 00007fa0bf216090 RCX: 00007fa0bef9ce59 [ 2736.323319][T11749] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2736.331320][T11749] RBP: 00007fa0bf032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2736.339311][T11749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2736.347303][T11749] R13: 00007fa0bf216128 R14: 00007fa0bf216090 R15: 00007ffc9a7c0af8 [ 2736.355318][T11749] [ 2736.681256][T11767] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11077'. [ 2736.725247][T11766] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.11079'. [ 2736.790102][T11767] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11077'. [ 2736.851530][T11767] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2736.919444][T11766] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2736.957389][T11766] CPU: 0 PID: 11766 Comm: syz.4.11079 Not tainted syzkaller #0 [ 2736.965035][T11766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2736.975142][T11766] Call Trace: [ 2736.978469][T11766] [ 2736.981448][T11766] dump_stack_lvl+0x188/0x24e [ 2736.986195][T11766] ? show_regs_print_info+0x12/0x12 [ 2736.991458][T11766] ? load_image+0x400/0x400 [ 2736.996038][T11766] sysfs_warn_dup+0x8a/0xa0 [ 2737.000600][T11766] sysfs_do_create_link_sd+0xc0/0x110 [ 2737.006038][T11766] device_add+0x7ed/0xfb0 [ 2737.010416][T11766] wiphy_register+0x1d9f/0x2ac0 [ 2737.015322][T11766] ? cfg80211_event_work+0x40/0x40 [ 2737.020650][T11766] ? minstrel_ht_alloc+0x894/0xa20 [ 2737.025802][T11766] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2737.031901][T11766] ieee80211_register_hw+0x2d00/0x39f0 [ 2737.037485][T11766] ? lockdep_hardirqs_on+0x94/0x140 [ 2737.042739][T11766] ? ieee80211_register_hw+0xea1/0x39f0 [ 2737.048358][T11766] ? ieee80211_register_hw+0xea1/0x39f0 [ 2737.053943][T11766] ? ieee80211_tasklet_handler+0x20/0x20 [ 2737.059621][T11766] ? memset+0x1e/0x40 [ 2737.063628][T11766] ? __hrtimer_init+0x186/0x270 [ 2737.068549][T11766] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2737.074326][T11766] hwsim_new_radio_nl+0xafa/0xce0 [ 2737.079634][T11766] genl_family_rcv_msg_doit+0x22a/0x330 [ 2737.085214][T11766] ? end_current_label_crit_section+0x170/0x170 [ 2737.091487][T11766] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2737.097422][T11766] ? bpf_lsm_capable+0x5/0x10 [ 2737.102135][T11766] ? security_capable+0x85/0xb0 [ 2737.107112][T11766] genl_rcv_msg+0x604/0x790 [ 2737.111727][T11766] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2737.117925][T11766] ? genl_bind+0x360/0x360 [ 2737.122366][T11766] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2737.128735][T11766] ? lock_acquire+0x225/0x4a0 [ 2737.133460][T11766] netlink_rcv_skb+0x1fb/0x450 [ 2737.138275][T11766] ? genl_bind+0x360/0x360 [ 2737.142721][T11766] ? netlink_ack+0x1170/0x1170 [ 2737.147542][T11766] ? down_read+0x1a8/0x2d0 [ 2737.151995][T11766] genl_rcv+0x24/0x40 [ 2737.156000][T11766] netlink_unicast+0x74d/0x8d0 [ 2737.160811][T11766] netlink_sendmsg+0x8ad/0xbd0 [ 2737.165618][T11766] ? netlink_getsockopt+0x550/0x550 [ 2737.170858][T11766] ? aa_sock_msg_perm+0x94/0x150 [ 2737.175833][T11766] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2737.181231][T11766] ? security_socket_sendmsg+0x7c/0xa0 [ 2737.186730][T11766] ? netlink_getsockopt+0x550/0x550 [ 2737.191977][T11766] ____sys_sendmsg+0x5be/0x970 [ 2737.196789][T11766] ? __sys_sendmsg_sock+0x30/0x30 [ 2737.201851][T11766] ? __import_iovec+0x315/0x500 [ 2737.206820][T11766] ? import_iovec+0x6f/0xa0 [ 2737.211351][T11766] ___sys_sendmsg+0x2a2/0x360 [ 2737.216071][T11766] ? __sys_sendmsg+0x290/0x290 [ 2737.220874][T11766] ? irqentry_enter+0x33/0x50 [ 2737.225609][T11766] ? __se_sys_sendmsg+0xd5/0x2a0 [ 2737.230589][T11766] __se_sys_sendmsg+0x1bb/0x2a0 [ 2737.235480][T11766] ? __x64_sys_sendmsg+0x80/0x80 [ 2737.240466][T11766] ? lockdep_hardirqs_on+0x94/0x140 [ 2737.245692][T11766] do_syscall_64+0x4c/0xa0 [ 2737.250147][T11766] ? clear_bhb_loop+0x60/0xb0 [ 2737.254854][T11766] ? clear_bhb_loop+0x60/0xb0 [ 2737.259561][T11766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2737.265585][T11766] RIP: 0033:0x7f48c4f9ce59 [ 2737.270026][T11766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2737.289666][T11766] RSP: 002b:00007f48c5dfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2737.298112][T11766] RAX: ffffffffffffffda RBX: 00007f48c5216090 RCX: 00007f48c4f9ce59 [ 2737.306115][T11766] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2737.314116][T11766] RBP: 00007f48c5032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2737.322120][T11766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2737.330125][T11766] R13: 00007f48c5216128 R14: 00007f48c5216090 R15: 00007fff4d2c7848 [ 2737.338148][T11766] [ 2737.515584][T11778] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11080'. [ 2738.007009][T11778] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11080'. [ 2738.051192][T11782] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2738.079483][T11782] CPU: 1 PID: 11782 Comm: syz.1.11082 Not tainted syzkaller #0 [ 2738.087120][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2738.097230][T11782] Call Trace: [ 2738.100557][T11782] [ 2738.103532][T11782] dump_stack_lvl+0x188/0x24e [ 2738.108282][T11782] ? show_regs_print_info+0x12/0x12 [ 2738.113547][T11782] ? load_image+0x400/0x400 [ 2738.118123][T11782] sysfs_warn_dup+0x8a/0xa0 [ 2738.122688][T11782] sysfs_do_create_link_sd+0xc0/0x110 [ 2738.128129][T11782] device_add+0x7ed/0xfb0 [ 2738.132532][T11782] wiphy_register+0x1d9f/0x2ac0 [ 2738.137476][T11782] ? cfg80211_event_work+0x40/0x40 [ 2738.142648][T11782] ? minstrel_ht_alloc+0x894/0xa20 [ 2738.147848][T11782] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2738.153978][T11782] ieee80211_register_hw+0x2d00/0x39f0 [ 2738.159525][T11782] ? ieee80211_register_hw+0xea1/0x39f0 [ 2738.165138][T11782] ? ieee80211_register_hw+0xea1/0x39f0 [ 2738.170760][T11782] ? ieee80211_tasklet_handler+0x20/0x20 [ 2738.176478][T11782] ? memset+0x1e/0x40 [ 2738.180513][T11782] ? __hrtimer_init+0x186/0x270 [ 2738.185422][T11782] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2738.191241][T11782] hwsim_new_radio_nl+0xafa/0xce0 [ 2738.196359][T11782] genl_family_rcv_msg_doit+0x22a/0x330 [ 2738.201956][T11782] ? end_current_label_crit_section+0x170/0x170 [ 2738.208262][T11782] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2738.214225][T11782] ? bpf_lsm_capable+0x5/0x10 [ 2738.218943][T11782] ? security_capable+0x85/0xb0 [ 2738.223856][T11782] genl_rcv_msg+0x604/0x790 [ 2738.228419][T11782] ? lock_chain_count+0x20/0x20 [ 2738.233348][T11782] ? genl_bind+0x360/0x360 [ 2738.237816][T11782] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2738.244245][T11782] netlink_rcv_skb+0x1fb/0x450 [ 2738.249072][T11782] ? genl_bind+0x360/0x360 [ 2738.253541][T11782] ? netlink_ack+0x1170/0x1170 [ 2738.258385][T11782] ? down_read+0x1a8/0x2d0 [ 2738.262911][T11782] genl_rcv+0x24/0x40 [ 2738.266952][T11782] netlink_unicast+0x74d/0x8d0 [ 2738.271796][T11782] netlink_sendmsg+0x8ad/0xbd0 [ 2738.276647][T11782] ? netlink_getsockopt+0x550/0x550 [ 2738.281916][T11782] ? aa_sock_msg_perm+0x94/0x150 [ 2738.286917][T11782] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2738.292257][T11782] ? security_socket_sendmsg+0x7c/0xa0 [ 2738.297782][T11782] ? netlink_getsockopt+0x550/0x550 [ 2738.303050][T11782] ____sys_sendmsg+0x5be/0x970 [ 2738.307884][T11782] ? __sys_sendmsg_sock+0x30/0x30 [ 2738.312965][T11782] ? __import_iovec+0x315/0x500 [ 2738.317880][T11782] ? import_iovec+0x6f/0xa0 [ 2738.322459][T11782] ___sys_sendmsg+0x2a2/0x360 [ 2738.327216][T11782] ? __sys_sendmsg+0x290/0x290 [ 2738.332110][T11782] __se_sys_sendmsg+0x1bb/0x2a0 [ 2738.337034][T11782] ? __x64_sys_sendmsg+0x80/0x80 [ 2738.342051][T11782] ? lockdep_hardirqs_on+0x94/0x140 [ 2738.347346][T11782] do_syscall_64+0x4c/0xa0 [ 2738.351824][T11782] ? clear_bhb_loop+0x60/0xb0 [ 2738.356562][T11782] ? clear_bhb_loop+0x60/0xb0 [ 2738.361301][T11782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2738.367259][T11782] RIP: 0033:0x7fa0bef9ce59 [ 2738.371725][T11782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2738.391387][T11782] RSP: 002b:00007fa0bfe2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2738.399869][T11782] RAX: ffffffffffffffda RBX: 00007fa0bf215fa0 RCX: 00007fa0bef9ce59 [ 2738.407914][T11782] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2738.415977][T11782] RBP: 00007fa0bf032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2738.424003][T11782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2738.432026][T11782] R13: 00007fa0bf216038 R14: 00007fa0bf215fa0 R15: 00007ffc9a7c0af8 [ 2738.440095][T11782] [ 2738.645606][T11795] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2738.689184][T11795] CPU: 0 PID: 11795 Comm: syz.2.11083 Not tainted syzkaller #0 [ 2738.696827][T11795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2738.706953][T11795] Call Trace: [ 2738.710280][T11795] [ 2738.713270][T11795] dump_stack_lvl+0x188/0x24e [ 2738.718018][T11795] ? show_regs_print_info+0x12/0x12 [ 2738.723263][T11795] ? load_image+0x400/0x400 [ 2738.727822][T11795] sysfs_warn_dup+0x8a/0xa0 [ 2738.732368][T11795] sysfs_do_create_link_sd+0xc0/0x110 [ 2738.737779][T11795] device_add+0x7ed/0xfb0 [ 2738.742148][T11795] wiphy_register+0x1d9f/0x2ac0 [ 2738.747052][T11795] ? cfg80211_event_work+0x40/0x40 [ 2738.752204][T11795] ? minstrel_ht_alloc+0x894/0xa20 [ 2738.757660][T11795] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2738.763765][T11795] ieee80211_register_hw+0x2d00/0x39f0 [ 2738.769275][T11795] ? ieee80211_register_hw+0xea1/0x39f0 [ 2738.774861][T11795] ? ieee80211_register_hw+0xea1/0x39f0 [ 2738.780449][T11795] ? ieee80211_tasklet_handler+0x20/0x20 [ 2738.786128][T11795] ? memset+0x1e/0x40 [ 2738.790147][T11795] ? __hrtimer_init+0x186/0x270 [ 2738.795031][T11795] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2738.800808][T11795] hwsim_new_radio_nl+0xafa/0xce0 [ 2738.805884][T11795] genl_family_rcv_msg_doit+0x22a/0x330 [ 2738.811809][T11795] ? end_current_label_crit_section+0x170/0x170 [ 2738.818087][T11795] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2738.824014][T11795] ? bpf_lsm_capable+0x5/0x10 [ 2738.828732][T11795] ? security_capable+0x85/0xb0 [ 2738.833617][T11795] genl_rcv_msg+0x604/0x790 [ 2738.838161][T11795] ? lock_chain_count+0x20/0x20 [ 2738.843048][T11795] ? genl_bind+0x360/0x360 [ 2738.847577][T11795] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2738.853961][T11795] netlink_rcv_skb+0x1fb/0x450 [ 2738.858760][T11795] ? genl_bind+0x360/0x360 [ 2738.863203][T11795] ? netlink_ack+0x1170/0x1170 [ 2738.868008][T11795] ? down_read+0x1a8/0x2d0 [ 2738.872458][T11795] genl_rcv+0x24/0x40 [ 2738.876462][T11795] netlink_unicast+0x74d/0x8d0 [ 2738.881303][T11795] netlink_sendmsg+0x8ad/0xbd0 [ 2738.886112][T11795] ? netlink_getsockopt+0x550/0x550 [ 2738.891354][T11795] ? aa_sock_msg_perm+0x94/0x150 [ 2738.896328][T11795] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2738.901662][T11795] ? security_socket_sendmsg+0x7c/0xa0 [ 2738.907192][T11795] ? netlink_getsockopt+0x550/0x550 [ 2738.912457][T11795] ____sys_sendmsg+0x5be/0x970 [ 2738.917346][T11795] ? __sys_sendmsg_sock+0x30/0x30 [ 2738.922416][T11795] ? __import_iovec+0x315/0x500 [ 2738.927320][T11795] ? import_iovec+0x6f/0xa0 [ 2738.931866][T11795] ___sys_sendmsg+0x2a2/0x360 [ 2738.936616][T11795] ? __lock_acquire+0x7d10/0x7d10 [ 2738.941691][T11795] ? __sys_sendmsg+0x290/0x290 [ 2738.946589][T11795] __se_sys_sendmsg+0x1bb/0x2a0 [ 2738.951590][T11795] ? __x64_sys_sendmsg+0x80/0x80 [ 2738.956733][T11795] ? lockdep_hardirqs_on+0x94/0x140 [ 2738.962012][T11795] do_syscall_64+0x4c/0xa0 [ 2738.966488][T11795] ? clear_bhb_loop+0x60/0xb0 [ 2738.971254][T11795] ? clear_bhb_loop+0x60/0xb0 [ 2738.976001][T11795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2738.981951][T11795] RIP: 0033:0x7f170cf9ce59 [ 2738.986401][T11795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2739.006060][T11795] RSP: 002b:00007f170dda3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2739.014521][T11795] RAX: ffffffffffffffda RBX: 00007f170d216270 RCX: 00007f170cf9ce59 [ 2739.022533][T11795] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2739.030548][T11795] RBP: 00007f170d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2739.038565][T11795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2739.046577][T11795] R13: 00007f170d216308 R14: 00007f170d216270 R15: 00007ffccb9976a8 [ 2739.054626][T11795] [ 2739.803633][T11807] __nla_validate_parse: 2 callbacks suppressed [ 2739.803669][T11807] netlink: 17023 bytes leftover after parsing attributes in process `syz.4.11085'. [ 2740.044061][T11814] netlink: 'syz.3.11088': attribute type 10 has an invalid length. [ 2740.072885][T11818] netlink: 'syz.2.11087': attribute type 10 has an invalid length. [ 2740.261759][T11821] netlink: 'syz.0.11089': attribute type 27 has an invalid length. [ 2740.340180][T11821] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11089'. [ 2742.328101][T11833] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.11092'. [ 2742.471963][T11833] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2742.620166][T11833] CPU: 1 PID: 11833 Comm: syz.1.11092 Not tainted syzkaller #0 [ 2742.627807][T11833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2742.637932][T11833] Call Trace: [ 2742.641252][T11833] [ 2742.644234][T11833] dump_stack_lvl+0x188/0x24e [ 2742.648979][T11833] ? show_regs_print_info+0x12/0x12 [ 2742.654261][T11833] ? load_image+0x400/0x400 [ 2742.659028][T11833] sysfs_warn_dup+0x8a/0xa0 [ 2742.663599][T11833] sysfs_do_create_link_sd+0xc0/0x110 [ 2742.669044][T11833] device_add+0x7ed/0xfb0 [ 2742.673443][T11833] wiphy_register+0x1d9f/0x2ac0 [ 2742.678381][T11833] ? cfg80211_event_work+0x40/0x40 [ 2742.683641][T11833] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2742.689867][T11833] ? rtnl_unlock+0x5/0x10 [ 2742.694246][T11833] ieee80211_register_hw+0x2d00/0x39f0 [ 2742.699844][T11833] ? ieee80211_register_hw+0xea1/0x39f0 [ 2742.705425][T11833] ? ieee80211_register_hw+0xea1/0x39f0 [ 2742.711022][T11833] ? ieee80211_tasklet_handler+0x20/0x20 [ 2742.716711][T11833] ? memset+0x1e/0x40 [ 2742.720730][T11833] ? __hrtimer_init+0x186/0x270 [ 2742.725700][T11833] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2742.731473][T11833] hwsim_new_radio_nl+0xafa/0xce0 [ 2742.736551][T11833] genl_family_rcv_msg_doit+0x22a/0x330 [ 2742.742137][T11833] ? end_current_label_crit_section+0x170/0x170 [ 2742.748410][T11833] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2742.754350][T11833] ? bpf_lsm_capable+0x5/0x10 [ 2742.759066][T11833] ? security_capable+0x85/0xb0 [ 2742.764002][T11833] genl_rcv_msg+0x604/0x790 [ 2742.768590][T11833] ? lockdep_hardirqs_on+0x94/0x140 [ 2742.773858][T11833] ? genl_bind+0x360/0x360 [ 2742.778406][T11833] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2742.784803][T11833] netlink_rcv_skb+0x1fb/0x450 [ 2742.789618][T11833] ? genl_bind+0x360/0x360 [ 2742.794099][T11833] ? netlink_ack+0x1170/0x1170 [ 2742.798911][T11833] ? down_read+0x1a8/0x2d0 [ 2742.803365][T11833] genl_rcv+0x24/0x40 [ 2742.807374][T11833] netlink_unicast+0x74d/0x8d0 [ 2742.812179][T11833] netlink_sendmsg+0x8ad/0xbd0 [ 2742.816996][T11833] ? netlink_getsockopt+0x550/0x550 [ 2742.822249][T11833] ? aa_sock_msg_perm+0x94/0x150 [ 2742.827306][T11833] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2742.832618][T11833] ? security_socket_sendmsg+0x7c/0xa0 [ 2742.838129][T11833] ? netlink_getsockopt+0x550/0x550 [ 2742.843369][T11833] ____sys_sendmsg+0x5be/0x970 [ 2742.848177][T11833] ? __sys_sendmsg_sock+0x30/0x30 [ 2742.853239][T11833] ? __import_iovec+0x315/0x500 [ 2742.858141][T11833] ? import_iovec+0x6f/0xa0 [ 2742.862680][T11833] ___sys_sendmsg+0x2a2/0x360 [ 2742.867426][T11833] ? __sys_sendmsg+0x290/0x290 [ 2742.872247][T11833] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2742.878042][T11833] __se_sys_sendmsg+0x1bb/0x2a0 [ 2742.882937][T11833] ? __x64_sys_sendmsg+0x80/0x80 [ 2742.887951][T11833] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2742.893878][T11833] do_syscall_64+0x4c/0xa0 [ 2742.898330][T11833] ? clear_bhb_loop+0x60/0xb0 [ 2742.903040][T11833] ? clear_bhb_loop+0x60/0xb0 [ 2742.907751][T11833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2742.913687][T11833] RIP: 0033:0x7fa0bef9ce59 [ 2742.918218][T11833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2742.937965][T11833] RSP: 002b:00007fa0bfe09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2742.946414][T11833] RAX: ffffffffffffffda RBX: 00007fa0bf216090 RCX: 00007fa0bef9ce59 [ 2742.954435][T11833] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2742.962450][T11833] RBP: 00007fa0bf032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2742.970539][T11833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2742.978538][T11833] R13: 00007fa0bf216128 R14: 00007fa0bf216090 R15: 00007ffc9a7c0af8 [ 2742.986558][T11833] [ 2743.086783][T11814] sctp: [Deprecated]: syz.3.11088 (pid 11814) Use of int in maxseg socket option. [ 2743.086783][T11814] Use struct sctp_assoc_value instead [ 2744.021557][T11848] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11095'. [ 2744.121193][T11849] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11095'. [ 2744.250036][T11849] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2744.622616][T11859] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.11096'. [ 2744.779577][T11859] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2744.891073][T11859] CPU: 0 PID: 11859 Comm: syz.4.11096 Not tainted syzkaller #0 [ 2744.898719][T11859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2744.908830][T11859] Call Trace: [ 2744.912166][T11859] [ 2744.915156][T11859] dump_stack_lvl+0x188/0x24e [ 2744.919943][T11859] ? show_regs_print_info+0x12/0x12 [ 2744.925213][T11859] ? load_image+0x400/0x400 [ 2744.929787][T11859] sysfs_warn_dup+0x8a/0xa0 [ 2744.934358][T11859] sysfs_do_create_link_sd+0xc0/0x110 [ 2744.939823][T11859] device_add+0x7ed/0xfb0 [ 2744.944214][T11859] wiphy_register+0x1d9f/0x2ac0 [ 2744.949139][T11859] ? cfg80211_event_work+0x40/0x40 [ 2744.954351][T11859] ? minstrel_ht_alloc+0x894/0xa20 [ 2744.959546][T11859] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2744.965675][T11859] ieee80211_register_hw+0x2d00/0x39f0 [ 2744.971223][T11859] ? ieee80211_register_hw+0xea1/0x39f0 [ 2744.976837][T11859] ? ieee80211_register_hw+0xea1/0x39f0 [ 2744.982467][T11859] ? ieee80211_tasklet_handler+0x20/0x20 [ 2744.988170][T11859] ? memset+0x1e/0x40 [ 2744.992188][T11859] ? __hrtimer_init+0x186/0x270 [ 2744.997083][T11859] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2745.002863][T11859] hwsim_new_radio_nl+0xafa/0xce0 [ 2745.007947][T11859] genl_family_rcv_msg_doit+0x22a/0x330 [ 2745.013522][T11859] ? end_current_label_crit_section+0x170/0x170 [ 2745.019798][T11859] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2745.025734][T11859] ? bpf_lsm_capable+0x5/0x10 [ 2745.030440][T11859] ? security_capable+0x85/0xb0 [ 2745.035325][T11859] genl_rcv_msg+0x604/0x790 [ 2745.039871][T11859] ? genl_bind+0x360/0x360 [ 2745.044330][T11859] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2745.050723][T11859] netlink_rcv_skb+0x1fb/0x450 [ 2745.055540][T11859] ? genl_bind+0x360/0x360 [ 2745.059984][T11859] ? netlink_ack+0x1170/0x1170 [ 2745.064796][T11859] ? down_read+0x1a8/0x2d0 [ 2745.069262][T11859] genl_rcv+0x24/0x40 [ 2745.073287][T11859] netlink_unicast+0x74d/0x8d0 [ 2745.078101][T11859] netlink_sendmsg+0x8ad/0xbd0 [ 2745.082923][T11859] ? netlink_getsockopt+0x550/0x550 [ 2745.088161][T11859] ? aa_sock_msg_perm+0x94/0x150 [ 2745.093132][T11859] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2745.098446][T11859] ? security_socket_sendmsg+0x7c/0xa0 [ 2745.103942][T11859] ? netlink_getsockopt+0x550/0x550 [ 2745.109190][T11859] ____sys_sendmsg+0x5be/0x970 [ 2745.114000][T11859] ? __sys_sendmsg_sock+0x30/0x30 [ 2745.119062][T11859] ? __import_iovec+0x315/0x500 [ 2745.123949][T11859] ? import_iovec+0x6f/0xa0 [ 2745.128477][T11859] ___sys_sendmsg+0x2a2/0x360 [ 2745.133195][T11859] ? __sys_sendmsg+0x290/0x290 [ 2745.138012][T11859] ? trace_call_bpf+0xbf/0x6b0 [ 2745.142835][T11859] __se_sys_sendmsg+0x1bb/0x2a0 [ 2745.147743][T11859] ? __x64_sys_sendmsg+0x80/0x80 [ 2745.152734][T11859] ? lockdep_hardirqs_on+0x94/0x140 [ 2745.157967][T11859] do_syscall_64+0x4c/0xa0 [ 2745.162436][T11859] ? clear_bhb_loop+0x60/0xb0 [ 2745.167172][T11859] ? clear_bhb_loop+0x60/0xb0 [ 2745.171920][T11859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2745.177881][T11859] RIP: 0033:0x7f48c4f9ce59 [ 2745.182335][T11859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2745.201990][T11859] RSP: 002b:00007f48c5db9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2745.210447][T11859] RAX: ffffffffffffffda RBX: 00007f48c5216270 RCX: 00007f48c4f9ce59 [ 2745.218450][T11859] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2745.226454][T11859] RBP: 00007f48c5032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2745.234484][T11859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2745.242485][T11859] R13: 00007f48c5216308 R14: 00007f48c5216270 R15: 00007fff4d2c7848 [ 2745.250501][T11859] [ 2745.637901][T11874] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.11097'. [ 2745.736254][T11874] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2745.785084][T11874] CPU: 1 PID: 11874 Comm: syz.1.11097 Not tainted syzkaller #0 [ 2745.792738][T11874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2745.802849][T11874] Call Trace: [ 2745.806178][T11874] [ 2745.809168][T11874] dump_stack_lvl+0x188/0x24e [ 2745.813922][T11874] ? show_regs_print_info+0x12/0x12 [ 2745.819192][T11874] ? load_image+0x400/0x400 [ 2745.823776][T11874] sysfs_warn_dup+0x8a/0xa0 [ 2745.828346][T11874] sysfs_do_create_link_sd+0xc0/0x110 [ 2745.833801][T11874] device_add+0x7ed/0xfb0 [ 2745.838229][T11874] wiphy_register+0x1d9f/0x2ac0 [ 2745.843176][T11874] ? cfg80211_event_work+0x40/0x40 [ 2745.848359][T11874] ? minstrel_ht_alloc+0x894/0xa20 [ 2745.853545][T11874] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2745.859676][T11874] ieee80211_register_hw+0x2d00/0x39f0 [ 2745.865221][T11874] ? ieee80211_register_hw+0xea1/0x39f0 [ 2745.870843][T11874] ? ieee80211_register_hw+0xea1/0x39f0 [ 2745.876488][T11874] ? ieee80211_tasklet_handler+0x20/0x20 [ 2745.882208][T11874] ? memset+0x1e/0x40 [ 2745.886245][T11874] ? __hrtimer_init+0x186/0x270 [ 2745.891159][T11874] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2745.896965][T11874] hwsim_new_radio_nl+0xafa/0xce0 [ 2745.902086][T11874] genl_family_rcv_msg_doit+0x22a/0x330 [ 2745.907692][T11874] ? end_current_label_crit_section+0x170/0x170 [ 2745.914011][T11874] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2745.919983][T11874] ? bpf_lsm_capable+0x5/0x10 [ 2745.924718][T11874] ? security_capable+0x85/0xb0 [ 2745.929636][T11874] genl_rcv_msg+0x604/0x790 [ 2745.934194][T11874] ? lock_chain_count+0x20/0x20 [ 2745.939131][T11874] ? genl_bind+0x360/0x360 [ 2745.943600][T11874] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2745.950021][T11874] netlink_rcv_skb+0x1fb/0x450 [ 2745.954864][T11874] ? genl_bind+0x360/0x360 [ 2745.959351][T11874] ? netlink_ack+0x1170/0x1170 [ 2745.964197][T11874] ? down_read+0x1a8/0x2d0 [ 2745.968692][T11874] genl_rcv+0x24/0x40 [ 2745.972733][T11874] netlink_unicast+0x74d/0x8d0 [ 2745.977587][T11874] netlink_sendmsg+0x8ad/0xbd0 [ 2745.982432][T11874] ? netlink_getsockopt+0x550/0x550 [ 2745.987717][T11874] ? aa_sock_msg_perm+0x94/0x150 [ 2745.992721][T11874] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2745.998077][T11874] ? security_socket_sendmsg+0x7c/0xa0 [ 2746.003611][T11874] ? netlink_getsockopt+0x550/0x550 [ 2746.008883][T11874] ____sys_sendmsg+0x5be/0x970 [ 2746.013733][T11874] ? __sys_sendmsg_sock+0x30/0x30 [ 2746.018833][T11874] ? __import_iovec+0x315/0x500 [ 2746.023763][T11874] ? import_iovec+0x6f/0xa0 [ 2746.028341][T11874] ___sys_sendmsg+0x2a2/0x360 [ 2746.033097][T11874] ? __lock_acquire+0x7d10/0x7d10 [ 2746.038194][T11874] ? __sys_sendmsg+0x290/0x290 [ 2746.043087][T11874] __se_sys_sendmsg+0x1bb/0x2a0 [ 2746.048021][T11874] ? __x64_sys_sendmsg+0x80/0x80 [ 2746.053074][T11874] ? lockdep_hardirqs_on+0x94/0x140 [ 2746.058335][T11874] do_syscall_64+0x4c/0xa0 [ 2746.062819][T11874] ? clear_bhb_loop+0x60/0xb0 [ 2746.067568][T11874] ? clear_bhb_loop+0x60/0xb0 [ 2746.072315][T11874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2746.078277][T11874] RIP: 0033:0x7fa0bef9ce59 [ 2746.082768][T11874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2746.102522][T11874] RSP: 002b:00007fa0bfda6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2746.111006][T11874] RAX: ffffffffffffffda RBX: 00007fa0bf216360 RCX: 00007fa0bef9ce59 [ 2746.119051][T11874] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2746.127092][T11874] RBP: 00007fa0bf032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2746.135128][T11874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2746.143157][T11874] R13: 00007fa0bf2163f8 R14: 00007fa0bf216360 R15: 00007ffc9a7c0af8 [ 2746.151208][T11874] [ 2746.307967][T11878] device syzkaller0 entered promiscuous mode [ 2746.546229][T11889] netlink: 'syz.4.11101': attribute type 10 has an invalid length. [ 2746.694897][T11892] sctp: [Deprecated]: syz.4.11101 (pid 11892) Use of int in maxseg socket option. [ 2746.694897][T11892] Use struct sctp_assoc_value instead [ 2746.943287][T11899] netlink: 'syz.0.11103': attribute type 11 has an invalid length. [ 2746.958564][T11899] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11103'. [ 2746.985135][T11899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2747.086091][T11905] sctp: [Deprecated]: syz.2.11105 (pid 11905) Use of int in maxseg socket option. [ 2747.086091][T11905] Use struct sctp_assoc_value instead [ 2749.476062][T11898] netlink: 'syz.2.11105': attribute type 10 has an invalid length. [ 2749.493697][T11915] netlink: 'syz.4.11107': attribute type 21 has an invalid length. [ 2749.503099][T11915] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11107'. [ 2749.513465][T11915] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11107'. [ 2749.810768][T11929] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.11111'. [ 2749.815635][T11928] netlink: 'syz.4.11110': attribute type 10 has an invalid length. [ 2749.878700][T11929] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2749.946361][T11929] CPU: 1 PID: 11929 Comm: syz.1.11111 Not tainted syzkaller #0 [ 2749.954018][T11929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2749.964229][T11929] Call Trace: [ 2749.967561][T11929] [ 2749.970540][T11929] dump_stack_lvl+0x188/0x24e [ 2749.975297][T11929] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2749.981612][T11929] ? show_regs_print_info+0x12/0x12 [ 2749.986889][T11929] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2749.993132][T11929] sysfs_warn_dup+0x8a/0xa0 [ 2749.997704][T11929] sysfs_do_create_link_sd+0xc0/0x110 [ 2750.003144][T11929] device_add+0x7ed/0xfb0 [ 2750.007562][T11929] wiphy_register+0x1d9f/0x2ac0 [ 2750.012504][T11929] ? cfg80211_event_work+0x40/0x40 [ 2750.017703][T11929] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2750.023943][T11929] ieee80211_register_hw+0x2d00/0x39f0 [ 2750.029495][T11929] ? lockdep_hardirqs_on+0x94/0x140 [ 2750.034776][T11929] ? ieee80211_register_hw+0xea1/0x39f0 [ 2750.040382][T11929] ? ieee80211_register_hw+0xea1/0x39f0 [ 2750.045994][T11929] ? ieee80211_tasklet_handler+0x20/0x20 [ 2750.051701][T11929] ? memset+0x1e/0x40 [ 2750.055738][T11929] ? __hrtimer_init+0x186/0x270 [ 2750.060660][T11929] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2750.066476][T11929] hwsim_new_radio_nl+0xafa/0xce0 [ 2750.071616][T11929] genl_family_rcv_msg_doit+0x22a/0x330 [ 2750.077237][T11929] ? end_current_label_crit_section+0x170/0x170 [ 2750.083540][T11929] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2750.089503][T11929] ? bpf_lsm_capable+0x5/0x10 [ 2750.094250][T11929] ? security_capable+0x85/0xb0 [ 2750.099167][T11929] genl_rcv_msg+0x604/0x790 [ 2750.103747][T11929] ? genl_bind+0x360/0x360 [ 2750.108212][T11929] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2750.114627][T11929] netlink_rcv_skb+0x1fb/0x450 [ 2750.119465][T11929] ? genl_bind+0x360/0x360 [ 2750.123936][T11929] ? netlink_ack+0x1170/0x1170 [ 2750.128808][T11929] ? down_read+0x1a8/0x2d0 [ 2750.133294][T11929] genl_rcv+0x24/0x40 [ 2750.137328][T11929] netlink_unicast+0x74d/0x8d0 [ 2750.142161][T11929] netlink_sendmsg+0x8ad/0xbd0 [ 2750.146994][T11929] ? netlink_getsockopt+0x550/0x550 [ 2750.152282][T11929] ? aa_sock_msg_perm+0x94/0x150 [ 2750.157279][T11929] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2750.162611][T11929] ? security_socket_sendmsg+0x7c/0xa0 [ 2750.168148][T11929] ? netlink_getsockopt+0x550/0x550 [ 2750.173414][T11929] ____sys_sendmsg+0x5be/0x970 [ 2750.178256][T11929] ? __sys_sendmsg_sock+0x30/0x30 [ 2750.183345][T11929] ? __import_iovec+0x315/0x500 [ 2750.188339][T11929] ? import_iovec+0x6f/0xa0 [ 2750.192892][T11929] ___sys_sendmsg+0x2a2/0x360 [ 2750.197658][T11929] ? __sys_sendmsg+0x290/0x290 [ 2750.202500][T11929] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2750.208307][T11929] __se_sys_sendmsg+0x1bb/0x2a0 [ 2750.213218][T11929] ? __x64_sys_sendmsg+0x80/0x80 [ 2750.218233][T11929] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2750.224176][T11929] do_syscall_64+0x4c/0xa0 [ 2750.228654][T11929] ? clear_bhb_loop+0x60/0xb0 [ 2750.233481][T11929] ? clear_bhb_loop+0x60/0xb0 [ 2750.238228][T11929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2750.244209][T11929] RIP: 0033:0x7fa0bef9ce59 [ 2750.248678][T11929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2750.268348][T11929] RSP: 002b:00007fa0bfe09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2750.276838][T11929] RAX: ffffffffffffffda RBX: 00007fa0bf216090 RCX: 00007fa0bef9ce59 [ 2750.284959][T11929] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2750.293071][T11929] RBP: 00007fa0bf032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2750.301090][T11929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2750.309106][T11929] R13: 00007fa0bf216128 R14: 00007fa0bf216090 R15: 00007ffc9a7c0af8 [ 2750.317239][T11929] [ 2750.954828][T11928] sctp: [Deprecated]: syz.4.11110 (pid 11928) Use of int in maxseg socket option. [ 2750.954828][T11928] Use struct sctp_assoc_value instead [ 2751.029040][T11955] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.11115'. [ 2751.095829][T11955] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2751.167128][T11955] CPU: 0 PID: 11955 Comm: syz.0.11115 Not tainted syzkaller #0 [ 2751.174942][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2751.185042][T11955] Call Trace: [ 2751.188371][T11955] [ 2751.191327][T11955] dump_stack_lvl+0x188/0x24e [ 2751.196053][T11955] ? show_regs_print_info+0x12/0x12 [ 2751.201288][T11955] ? load_image+0x400/0x400 [ 2751.205828][T11955] sysfs_warn_dup+0x8a/0xa0 [ 2751.210369][T11955] sysfs_do_create_link_sd+0xc0/0x110 [ 2751.215785][T11955] device_add+0x7ed/0xfb0 [ 2751.220176][T11955] wiphy_register+0x1d9f/0x2ac0 [ 2751.225087][T11955] ? cfg80211_event_work+0x40/0x40 [ 2751.230233][T11955] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2751.236425][T11955] ? ieee80211_register_hw+0x2879/0x39f0 [ 2751.242099][T11955] ieee80211_register_hw+0x2d00/0x39f0 [ 2751.247611][T11955] ? ieee80211_register_hw+0xea1/0x39f0 [ 2751.253197][T11955] ? ieee80211_register_hw+0xea1/0x39f0 [ 2751.258783][T11955] ? ieee80211_tasklet_handler+0x20/0x20 [ 2751.264448][T11955] ? debug_init+0x70/0x260 [ 2751.268889][T11955] ? memset+0x1e/0x40 [ 2751.272897][T11955] ? __hrtimer_init+0x186/0x270 [ 2751.277782][T11955] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2751.283553][T11955] hwsim_new_radio_nl+0xafa/0xce0 [ 2751.288638][T11955] genl_family_rcv_msg_doit+0x22a/0x330 [ 2751.294219][T11955] ? end_current_label_crit_section+0x170/0x170 [ 2751.300525][T11955] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2751.306453][T11955] ? bpf_lsm_capable+0x5/0x10 [ 2751.311165][T11955] ? security_capable+0x85/0xb0 [ 2751.316090][T11955] genl_rcv_msg+0x604/0x790 [ 2751.320658][T11955] ? genl_bind+0x360/0x360 [ 2751.325200][T11955] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2751.331870][T11955] netlink_rcv_skb+0x1fb/0x450 [ 2751.336685][T11955] ? genl_bind+0x360/0x360 [ 2751.341141][T11955] ? netlink_ack+0x1170/0x1170 [ 2751.345954][T11955] ? down_read+0x1a8/0x2d0 [ 2751.350426][T11955] genl_rcv+0x24/0x40 [ 2751.354434][T11955] netlink_unicast+0x74d/0x8d0 [ 2751.359329][T11955] netlink_sendmsg+0x8ad/0xbd0 [ 2751.364134][T11955] ? netlink_getsockopt+0x550/0x550 [ 2751.369378][T11955] ? aa_sock_msg_perm+0x94/0x150 [ 2751.374348][T11955] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2751.379664][T11955] ? security_socket_sendmsg+0x7c/0xa0 [ 2751.385196][T11955] ? netlink_getsockopt+0x550/0x550 [ 2751.390469][T11955] ____sys_sendmsg+0x5be/0x970 [ 2751.395290][T11955] ? __sys_sendmsg_sock+0x30/0x30 [ 2751.400373][T11955] ? __import_iovec+0x315/0x500 [ 2751.405265][T11955] ? import_iovec+0x6f/0xa0 [ 2751.409810][T11955] ___sys_sendmsg+0x2a2/0x360 [ 2751.414532][T11955] ? __sys_sendmsg+0x290/0x290 [ 2751.419357][T11955] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2751.425140][T11955] __se_sys_sendmsg+0x1bb/0x2a0 [ 2751.430029][T11955] ? __x64_sys_sendmsg+0x80/0x80 [ 2751.435013][T11955] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2751.440944][T11955] do_syscall_64+0x4c/0xa0 [ 2751.445397][T11955] ? clear_bhb_loop+0x60/0xb0 [ 2751.450105][T11955] ? clear_bhb_loop+0x60/0xb0 [ 2751.454854][T11955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2751.460778][T11955] RIP: 0033:0x7f94a399ce59 [ 2751.465221][T11955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2751.484961][T11955] RSP: 002b:00007f94a4902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2751.493412][T11955] RAX: ffffffffffffffda RBX: 00007f94a3c16090 RCX: 00007f94a399ce59 [ 2751.501416][T11955] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2751.509522][T11955] RBP: 00007f94a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2751.517523][T11955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2751.525523][T11955] R13: 00007f94a3c16128 R14: 00007f94a3c16090 R15: 00007ffd817547e8 [ 2751.533797][T11955] [ 2751.778298][T11969] netlink: 'syz.3.11119': attribute type 10 has an invalid length. [ 2751.828456][T11970] netlink: 'syz.4.11117': attribute type 10 has an invalid length. [ 2752.190034][T11971] sctp: [Deprecated]: syz.3.11119 (pid 11971) Use of int in maxseg socket option. [ 2752.190034][T11971] Use struct sctp_assoc_value instead [ 2752.521134][T11982] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.11131'. [ 2752.697777][T11982] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2752.780403][T11982] CPU: 0 PID: 11982 Comm: syz.1.11131 Not tainted syzkaller #0 [ 2752.788082][T11982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2752.798291][T11982] Call Trace: [ 2752.801648][T11982] [ 2752.804615][T11982] dump_stack_lvl+0x188/0x24e [ 2752.809395][T11982] ? show_regs_print_info+0x12/0x12 [ 2752.814659][T11982] ? load_image+0x400/0x400 [ 2752.819240][T11982] sysfs_warn_dup+0x8a/0xa0 [ 2752.823808][T11982] sysfs_do_create_link_sd+0xc0/0x110 [ 2752.829267][T11982] device_add+0x7ed/0xfb0 [ 2752.833667][T11982] wiphy_register+0x1d9f/0x2ac0 [ 2752.838619][T11982] ? cfg80211_event_work+0x40/0x40 [ 2752.843803][T11982] ? minstrel_ht_alloc+0x894/0xa20 [ 2752.849000][T11982] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2752.849623][T11992] sctp: [Deprecated]: syz.4.11117 (pid 11992) Use of int in maxseg socket option. [ 2752.849623][T11992] Use struct sctp_assoc_value instead [ 2752.855104][T11982] ieee80211_register_hw+0x2d00/0x39f0 [ 2752.855161][T11982] ? ieee80211_register_hw+0xea1/0x39f0 [ 2752.855212][T11982] ? ieee80211_register_hw+0xea1/0x39f0 [ 2752.886460][T11982] ? ieee80211_tasklet_handler+0x20/0x20 [ 2752.892180][T11982] ? memset+0x1e/0x40 [ 2752.896215][T11982] ? __hrtimer_init+0x186/0x270 [ 2752.901130][T11982] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2752.907107][T11982] hwsim_new_radio_nl+0xafa/0xce0 [ 2752.912211][T11982] genl_family_rcv_msg_doit+0x22a/0x330 [ 2752.917853][T11982] ? end_current_label_crit_section+0x170/0x170 [ 2752.924175][T11982] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2752.930142][T11982] ? bpf_lsm_capable+0x5/0x10 [ 2752.934882][T11982] ? security_capable+0x85/0xb0 [ 2752.939809][T11982] genl_rcv_msg+0x604/0x790 [ 2752.944380][T11982] ? genl_bind+0x360/0x360 [ 2752.948965][T11982] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2752.955397][T11982] netlink_rcv_skb+0x1fb/0x450 [ 2752.960234][T11982] ? genl_bind+0x360/0x360 [ 2752.964732][T11982] ? netlink_ack+0x1170/0x1170 [ 2752.969578][T11982] ? down_read+0x1a8/0x2d0 [ 2752.974063][T11982] genl_rcv+0x24/0x40 [ 2752.978188][T11982] netlink_unicast+0x74d/0x8d0 [ 2752.983037][T11982] netlink_sendmsg+0x8ad/0xbd0 [ 2752.987891][T11982] ? netlink_getsockopt+0x550/0x550 [ 2752.993174][T11982] ? aa_sock_msg_perm+0x94/0x150 [ 2752.998166][T11982] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2753.003483][T11982] ? security_socket_sendmsg+0x7c/0xa0 [ 2753.008989][T11982] ? netlink_getsockopt+0x550/0x550 [ 2753.014238][T11982] ____sys_sendmsg+0x5be/0x970 [ 2753.019058][T11982] ? __sys_sendmsg_sock+0x30/0x30 [ 2753.024130][T11982] ? __import_iovec+0x315/0x500 [ 2753.029018][T11982] ? import_iovec+0x6f/0xa0 [ 2753.033551][T11982] ___sys_sendmsg+0x2a2/0x360 [ 2753.038268][T11982] ? __sys_sendmsg+0x290/0x290 [ 2753.043082][T11982] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2753.048858][T11982] __se_sys_sendmsg+0x1bb/0x2a0 [ 2753.053752][T11982] ? __x64_sys_sendmsg+0x80/0x80 [ 2753.058738][T11982] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2753.064658][T11982] do_syscall_64+0x4c/0xa0 [ 2753.069108][T11982] ? clear_bhb_loop+0x60/0xb0 [ 2753.073815][T11982] ? clear_bhb_loop+0x60/0xb0 [ 2753.078532][T11982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2753.084454][T11982] RIP: 0033:0x7fa0bef9ce59 [ 2753.088898][T11982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2753.108533][T11982] RSP: 002b:00007fa0bfe09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2753.116982][T11982] RAX: ffffffffffffffda RBX: 00007fa0bf216090 RCX: 00007fa0bef9ce59 [ 2753.124978][T11982] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2753.132980][T11982] RBP: 00007fa0bf032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2753.140981][T11982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2753.148971][T11982] R13: 00007fa0bf216128 R14: 00007fa0bf216090 R15: 00007ffc9a7c0af8 [ 2753.156985][T11982] [ 2753.256248][T11991] netlink: 'syz.2.11133': attribute type 10 has an invalid length. [ 2753.796741][T12000] device syzkaller0 entered promiscuous mode [ 2755.019115][T12022] sctp: [Deprecated]: syz.3.11127 (pid 12022) Use of int in maxseg socket option. [ 2755.019115][T12022] Use struct sctp_assoc_value instead [ 2755.272873][T12020] netlink: 'syz.3.11127': attribute type 10 has an invalid length. [ 2755.282053][T12026] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.11128'. [ 2755.351967][T12026] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2755.401847][T12026] CPU: 0 PID: 12026 Comm: syz.1.11128 Not tainted syzkaller #0 [ 2755.409509][T12026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2755.419637][T12026] Call Trace: [ 2755.422984][T12026] [ 2755.425982][T12026] dump_stack_lvl+0x188/0x24e [ 2755.430750][T12026] ? show_regs_print_info+0x12/0x12 [ 2755.436030][T12026] ? load_image+0x400/0x400 [ 2755.440614][T12026] sysfs_warn_dup+0x8a/0xa0 [ 2755.445192][T12026] sysfs_do_create_link_sd+0xc0/0x110 [ 2755.450727][T12026] device_add+0x7ed/0xfb0 [ 2755.455105][T12026] wiphy_register+0x1d9f/0x2ac0 [ 2755.460026][T12026] ? cfg80211_event_work+0x40/0x40 [ 2755.465189][T12026] ? minstrel_ht_alloc+0x894/0xa20 [ 2755.470352][T12026] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2755.476463][T12026] ieee80211_register_hw+0x2d00/0x39f0 [ 2755.481975][T12026] ? ieee80211_register_hw+0xea1/0x39f0 [ 2755.487567][T12026] ? ieee80211_register_hw+0xea1/0x39f0 [ 2755.493169][T12026] ? ieee80211_tasklet_handler+0x20/0x20 [ 2755.498893][T12026] ? memset+0x1e/0x40 [ 2755.503270][T12026] ? __hrtimer_init+0x186/0x270 [ 2755.508164][T12026] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2755.513943][T12026] hwsim_new_radio_nl+0xafa/0xce0 [ 2755.519027][T12026] genl_family_rcv_msg_doit+0x22a/0x330 [ 2755.524605][T12026] ? end_current_label_crit_section+0x170/0x170 [ 2755.530887][T12026] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2755.536916][T12026] ? bpf_lsm_capable+0x5/0x10 [ 2755.541630][T12026] ? security_capable+0x85/0xb0 [ 2755.546525][T12026] genl_rcv_msg+0x604/0x790 [ 2755.551068][T12026] ? genl_bind+0x360/0x360 [ 2755.555564][T12026] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2755.561947][T12026] netlink_rcv_skb+0x1fb/0x450 [ 2755.566750][T12026] ? genl_bind+0x360/0x360 [ 2755.571199][T12026] ? netlink_ack+0x1170/0x1170 [ 2755.576013][T12026] ? down_read+0x1a8/0x2d0 [ 2755.580475][T12026] genl_rcv+0x24/0x40 [ 2755.584488][T12026] netlink_unicast+0x74d/0x8d0 [ 2755.589292][T12026] netlink_sendmsg+0x8ad/0xbd0 [ 2755.594108][T12026] ? netlink_getsockopt+0x550/0x550 [ 2755.599431][T12026] ? aa_sock_msg_perm+0x94/0x150 [ 2755.604399][T12026] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2755.609724][T12026] ? security_socket_sendmsg+0x7c/0xa0 [ 2755.615218][T12026] ? netlink_getsockopt+0x550/0x550 [ 2755.620452][T12026] ____sys_sendmsg+0x5be/0x970 [ 2755.625282][T12026] ? __sys_sendmsg_sock+0x30/0x30 [ 2755.630341][T12026] ? __import_iovec+0x315/0x500 [ 2755.635240][T12026] ? import_iovec+0x6f/0xa0 [ 2755.639776][T12026] ___sys_sendmsg+0x2a2/0x360 [ 2755.644511][T12026] ? __lock_acquire+0x7d10/0x7d10 [ 2755.649572][T12026] ? __sys_sendmsg+0x290/0x290 [ 2755.654421][T12026] __se_sys_sendmsg+0x1bb/0x2a0 [ 2755.659313][T12026] ? __x64_sys_sendmsg+0x80/0x80 [ 2755.664310][T12026] ? lockdep_hardirqs_on+0x94/0x140 [ 2755.669552][T12026] do_syscall_64+0x4c/0xa0 [ 2755.674002][T12026] ? clear_bhb_loop+0x60/0xb0 [ 2755.678714][T12026] ? clear_bhb_loop+0x60/0xb0 [ 2755.683431][T12026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2755.689358][T12026] RIP: 0033:0x7fa0bef9ce59 [ 2755.693809][T12026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2755.713451][T12026] RSP: 002b:00007fa0bfdc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2755.721980][T12026] RAX: ffffffffffffffda RBX: 00007fa0bf216270 RCX: 00007fa0bef9ce59 [ 2755.729981][T12026] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2755.737980][T12026] RBP: 00007fa0bf032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2755.746004][T12026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2755.754004][T12026] R13: 00007fa0bf216308 R14: 00007fa0bf216270 R15: 00007ffc9a7c0af8 [ 2755.762016][T12026] [ 2755.900526][T12039] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11129'. [ 2756.009373][T12036] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11129'. [ 2756.044090][T12036] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2756.938104][T12055] netlink: 'syz.1.11136': attribute type 10 has an invalid length. [ 2757.041592][T12056] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.11137'. [ 2757.209650][T12056] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2757.290239][T12056] CPU: 1 PID: 12056 Comm: syz.2.11137 Not tainted syzkaller #0 [ 2757.297876][T12056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2757.307980][T12056] Call Trace: [ 2757.311305][T12056] [ 2757.314282][T12056] dump_stack_lvl+0x188/0x24e [ 2757.319028][T12056] ? show_regs_print_info+0x12/0x12 [ 2757.324279][T12056] ? load_image+0x400/0x400 [ 2757.328854][T12056] sysfs_warn_dup+0x8a/0xa0 [ 2757.333414][T12056] sysfs_do_create_link_sd+0xc0/0x110 [ 2757.338855][T12056] device_add+0x7ed/0xfb0 [ 2757.343255][T12056] wiphy_register+0x1d9f/0x2ac0 [ 2757.348204][T12056] ? cfg80211_event_work+0x40/0x40 [ 2757.353392][T12056] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2757.359627][T12056] ieee80211_register_hw+0x2d00/0x39f0 [ 2757.365155][T12056] ? lockdep_hardirqs_on+0x94/0x140 [ 2757.370414][T12056] ? ieee80211_register_hw+0xea1/0x39f0 [ 2757.376020][T12056] ? ieee80211_register_hw+0xea1/0x39f0 [ 2757.381627][T12056] ? ieee80211_tasklet_handler+0x20/0x20 [ 2757.387328][T12056] ? memset+0x1e/0x40 [ 2757.391358][T12056] ? __hrtimer_init+0x186/0x270 [ 2757.396263][T12056] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2757.402054][T12056] hwsim_new_radio_nl+0xafa/0xce0 [ 2757.407149][T12056] genl_family_rcv_msg_doit+0x22a/0x330 [ 2757.412740][T12056] ? end_current_label_crit_section+0x170/0x170 [ 2757.419034][T12056] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2757.424983][T12056] ? bpf_lsm_capable+0x5/0x10 [ 2757.429706][T12056] ? security_capable+0x85/0xb0 [ 2757.434613][T12056] genl_rcv_msg+0x604/0x790 [ 2757.439248][T12056] ? lockdep_hardirqs_on+0x94/0x140 [ 2757.444499][T12056] ? genl_bind+0x360/0x360 [ 2757.448957][T12056] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2757.455361][T12056] netlink_rcv_skb+0x1fb/0x450 [ 2757.460190][T12056] ? genl_bind+0x360/0x360 [ 2757.464651][T12056] ? netlink_ack+0x1170/0x1170 [ 2757.469484][T12056] ? down_read+0x1a8/0x2d0 [ 2757.473961][T12056] genl_rcv+0x24/0x40 [ 2757.477985][T12056] netlink_unicast+0x74d/0x8d0 [ 2757.482838][T12056] netlink_sendmsg+0x8ad/0xbd0 [ 2757.487667][T12056] ? netlink_getsockopt+0x550/0x550 [ 2757.492934][T12056] ? aa_sock_msg_perm+0x94/0x150 [ 2757.497916][T12056] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2757.503252][T12056] ? security_socket_sendmsg+0x7c/0xa0 [ 2757.508777][T12056] ? netlink_getsockopt+0x550/0x550 [ 2757.514041][T12056] ____sys_sendmsg+0x5be/0x970 [ 2757.518881][T12056] ? __sys_sendmsg_sock+0x30/0x30 [ 2757.523962][T12056] ? __import_iovec+0x315/0x500 [ 2757.528932][T12056] ? import_iovec+0x6f/0xa0 [ 2757.533489][T12056] ___sys_sendmsg+0x2a2/0x360 [ 2757.538234][T12056] ? __sys_sendmsg+0x290/0x290 [ 2757.543078][T12056] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2757.548899][T12056] __se_sys_sendmsg+0x1bb/0x2a0 [ 2757.553819][T12056] ? __x64_sys_sendmsg+0x80/0x80 [ 2757.558844][T12056] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2757.564788][T12056] do_syscall_64+0x4c/0xa0 [ 2757.569268][T12056] ? clear_bhb_loop+0x60/0xb0 [ 2757.573995][T12056] ? clear_bhb_loop+0x60/0xb0 [ 2757.578735][T12056] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2757.584682][T12056] RIP: 0033:0x7f170cf9ce59 [ 2757.589176][T12056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2757.608857][T12056] RSP: 002b:00007f170dde5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2757.617323][T12056] RAX: ffffffffffffffda RBX: 00007f170d216090 RCX: 00007f170cf9ce59 [ 2757.625344][T12056] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2757.633359][T12056] RBP: 00007f170d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2757.641554][T12056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2757.649580][T12056] R13: 00007f170d216128 R14: 00007f170d216090 R15: 00007ffccb9976a8 [ 2757.657631][T12056] [ 2758.125594][T12070] sctp: [Deprecated]: syz.1.11136 (pid 12070) Use of int in maxseg socket option. [ 2758.125594][T12070] Use struct sctp_assoc_value instead [ 2758.429163][T12079] netlink: 'syz.3.11141': attribute type 27 has an invalid length. [ 2758.480378][T12079] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11141'. [ 2758.584872][T12082] netlink: 'syz.3.11141': attribute type 3 has an invalid length. [ 2758.674015][T12082] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11141'. [ 2759.027330][T12092] netlink: 'syz.2.11143': attribute type 10 has an invalid length. [ 2759.616758][T12102] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.11146'. [ 2759.671484][T12107] netlink: 'syz.4.11149': attribute type 27 has an invalid length. [ 2759.732885][T12107] netlink: 164 bytes leftover after parsing attributes in process `syz.4.11149'. Stopping sshd: [ 2759.946969][T12102] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2760.059412][T12102] CPU: 1 PID: 12102 Comm: syz.0.11146 Not tainted syzkaller #0 [ 2760.067058][T12102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2760.077167][T12102] Call Trace: [ 2760.080495][T12102] [ 2760.083469][T12102] dump_stack_lvl+0x188/0x24e [ 2760.088220][T12102] ? show_regs_print_info+0x12/0x12 [ 2760.093670][T12102] ? load_image+0x400/0x400 [ 2760.098255][T12102] sysfs_warn_dup+0x8a/0xa0 [ 2760.102824][T12102] sysfs_do_create_link_sd+0xc0/0x110 [ 2760.108267][T12102] device_add+0x7ed/0xfb0 [ 2760.112681][T12102] wiphy_register+0x1d9f/0x2ac0 [ 2760.117613][T12102] ? cfg80211_event_work+0x40/0x40 [ 2760.122784][T12102] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2760.129022][T12102] ieee80211_register_hw+0x2d00/0x39f0 [ 2760.134550][T12102] ? lockdep_hardirqs_on+0x94/0x140 [ 2760.139815][T12102] ? ieee80211_register_hw+0xea1/0x39f0 [ 2760.145433][T12102] ? ieee80211_register_hw+0xea1/0x39f0 [ 2760.151055][T12102] ? ieee80211_tasklet_handler+0x20/0x20 [ 2760.156791][T12102] ? memset+0x1e/0x40 [ 2760.160836][T12102] ? __hrtimer_init+0x186/0x270 [ 2760.165757][T12102] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2760.171574][T12102] hwsim_new_radio_nl+0xafa/0xce0 [ 2760.176686][T12102] genl_family_rcv_msg_doit+0x22a/0x330 [ 2760.182292][T12102] ? end_current_label_crit_section+0x170/0x170 [ 2760.188702][T12102] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2760.194665][T12102] ? bpf_lsm_capable+0x5/0x10 [ 2760.199410][T12102] ? security_capable+0x85/0xb0 [ 2760.204868][T12102] genl_rcv_msg+0x604/0x790 [ 2760.209431][T12102] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2760.215278][T12102] ? genl_bind+0x360/0x360 [ 2760.219741][T12102] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2760.226154][T12102] netlink_rcv_skb+0x1fb/0x450 [ 2760.230987][T12102] ? genl_bind+0x360/0x360 [ 2760.235463][T12102] ? netlink_ack+0x1170/0x1170 [ 2760.240315][T12102] ? down_read+0x1a8/0x2d0 [ 2760.244801][T12102] genl_rcv+0x24/0x40 [ 2760.248839][T12102] netlink_unicast+0x74d/0x8d0 [ 2760.253680][T12102] netlink_sendmsg+0x8ad/0xbd0 [ 2760.258521][T12102] ? netlink_getsockopt+0x550/0x550 [ 2760.263789][T12102] ? aa_sock_msg_perm+0x94/0x150 [ 2760.268796][T12102] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2760.274147][T12102] ? security_socket_sendmsg+0x7c/0xa0 [ 2760.279764][T12102] ? netlink_getsockopt+0x550/0x550 [ 2760.285037][T12102] ____sys_sendmsg+0x5be/0x970 [ 2760.289871][T12102] ? __sys_sendmsg_sock+0x30/0x30 [ 2760.294952][T12102] ? __import_iovec+0x315/0x500 [ 2760.299871][T12102] ? import_iovec+0x6f/0xa0 [ 2760.304434][T12102] ___sys_sendmsg+0x2a2/0x360 [ 2760.309189][T12102] ? __sys_sendmsg+0x290/0x290 [ 2760.314044][T12102] ? irqentry_enter+0x33/0x50 [ 2760.318792][T12102] ? rcu_is_watching+0x11/0xa0 [ 2760.323659][T12102] __se_sys_sendmsg+0x1bb/0x2a0 [ 2760.328584][T12102] ? __x64_sys_sendmsg+0x80/0x80 [ 2760.333603][T12102] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2760.339565][T12102] do_syscall_64+0x4c/0xa0 [ 2760.344047][T12102] ? clear_bhb_loop+0x60/0xb0 [ 2760.348785][T12102] ? clear_bhb_loop+0x60/0xb0 [ 2760.353534][T12102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2760.359492][T12102] RIP: 0033:0x7f94a399ce59 [ 2760.363963][T12102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2760.383824][T12102] RSP: 002b:00007f94a4902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2760.392299][T12102] RAX: ffffffffffffffda RBX: 00007f94a3c16090 RCX: 00007f94a399ce59 [ 2760.400326][T12102] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2760.408441][T12102] RBP: 00007f94a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2760.416468][T12102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2760.424492][T12102] R13: 00007f94a3c16128 R14: 00007f94a3c16090 R15: 00007ffd817547e8 [ 2760.432531][T12102] stopped /usr/sbin/sshd (pid 4026) OK Stopping crond: [ 2760.808227][T12092] sctp: [Deprecated]: syz.2.11143 (pid 12092) Use of int in maxseg socket option. [ 2760.808227][T12092] Use struct sctp_assoc_value instead [ 2761.005898][T12125] netlink: 'syz.3.11153': attribute type 10 has an invalid length. stopped /usr/sbin/crond (pid 4011) OK [ 2761.070068][T12130] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.11154'. [ 2761.117188][T12134] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11156'. [ 2761.184550][T12134] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11156'. [ 2761.213816][T12134] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2761.232971][T12132] sctp: [Deprecated]: syz.3.11153 (pid 12132) Use of int in maxseg socket option. [ 2761.232971][T12132] Use struct sctp_assoc_value instead [ 2761.266198][T12130] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2761.313500][T12130] CPU: 0 PID: 12130 Comm: syz.0.11154 Not tainted syzkaller #0 [ 2761.321143][T12130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2761.331356][T12130] Call Trace: [ 2761.334685][T12130] [ 2761.337655][T12130] dump_stack_lvl+0x188/0x24e [ 2761.342400][T12130] ? show_regs_print_info+0x12/0x12 [ 2761.347654][T12130] ? load_image+0x400/0x400 [ 2761.352215][T12130] sysfs_warn_dup+0x8a/0xa0 [ 2761.356841][T12130] sysfs_do_create_link_sd+0xc0/0x110 [ 2761.362252][T12130] device_add+0x7ed/0xfb0 [ 2761.366624][T12130] wiphy_register+0x1d9f/0x2ac0 [ 2761.371531][T12130] ? cfg80211_event_work+0x40/0x40 [ 2761.376691][T12130] ? minstrel_ht_alloc+0x894/0xa20 [ 2761.381843][T12130] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2761.387944][T12130] ieee80211_register_hw+0x2d00/0x39f0 [ 2761.393443][T12130] ? lockdep_hardirqs_on+0x94/0x140 [ 2761.398681][T12130] ? ieee80211_register_hw+0xea1/0x39f0 [ 2761.404274][T12130] ? ieee80211_register_hw+0xea1/0x39f0 [ 2761.410124][T12130] ? ieee80211_tasklet_handler+0x20/0x20 [ 2761.415801][T12130] ? memset+0x1e/0x40 [ 2761.419812][T12130] ? __hrtimer_init+0x186/0x270 [ 2761.424703][T12130] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2761.430479][T12130] hwsim_new_radio_nl+0xafa/0xce0 [ 2761.435562][T12130] genl_family_rcv_msg_doit+0x22a/0x330 [ 2761.441142][T12130] ? end_current_label_crit_section+0x170/0x170 [ 2761.447414][T12130] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2761.453341][T12130] ? bpf_lsm_capable+0x5/0x10 [ 2761.458062][T12130] ? security_capable+0x85/0xb0 [ 2761.462955][T12130] genl_rcv_msg+0x604/0x790 [ 2761.467512][T12130] ? genl_bind+0x360/0x360 [ 2761.471958][T12130] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2761.478337][T12130] netlink_rcv_skb+0x1fb/0x450 [ 2761.483138][T12130] ? genl_bind+0x360/0x360 [ 2761.487583][T12130] ? netlink_ack+0x1170/0x1170 [ 2761.492389][T12130] ? down_read+0x1a8/0x2d0 [ 2761.496849][T12130] genl_rcv+0x24/0x40 [ 2761.500855][T12130] netlink_unicast+0x74d/0x8d0 [ 2761.505666][T12130] netlink_sendmsg+0x8ad/0xbd0 [ 2761.510477][T12130] ? netlink_getsockopt+0x550/0x550 [ 2761.515722][T12130] ? aa_sock_msg_perm+0x94/0x150 [ 2761.520690][T12130] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2761.526001][T12130] ? security_socket_sendmsg+0x7c/0xa0 [ 2761.531513][T12130] ? netlink_getsockopt+0x550/0x550 [ 2761.536749][T12130] ____sys_sendmsg+0x5be/0x970 [ 2761.541567][T12130] ? __sys_sendmsg_sock+0x30/0x30 [ 2761.546627][T12130] ? __import_iovec+0x315/0x500 [ 2761.551520][T12130] ? import_iovec+0x6f/0xa0 [ 2761.556052][T12130] ___sys_sendmsg+0x2a2/0x360 [ 2761.560774][T12130] ? __sys_sendmsg+0x290/0x290 [ 2761.565610][T12130] __se_sys_sendmsg+0x1bb/0x2a0 [ 2761.570502][T12130] ? __x64_sys_sendmsg+0x80/0x80 [ 2761.575496][T12130] ? lockdep_hardirqs_on+0x94/0x140 [ 2761.580730][T12130] do_syscall_64+0x4c/0xa0 [ 2761.585177][T12130] ? clear_bhb_loop+0x60/0xb0 [ 2761.589893][T12130] ? clear_bhb_loop+0x60/0xb0 [ 2761.594611][T12130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2761.600536][T12130] RIP: 0033:0x7f94a399ce59 [ 2761.604979][T12130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2761.624611][T12130] RSP: 002b:00007f94a4902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2761.633059][T12130] RAX: ffffffffffffffda RBX: 00007f94a3c16090 RCX: 00007f94a399ce59 [ 2761.641057][T12130] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2761.649048][T12130] RBP: 00007f94a3a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2761.657053][T12130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2761.665063][T12130] R13: 00007f94a3c16128 R14: 00007f94a3c16090 R15: 00007ffd817547e8 [ 2761.673424][T12130] Stopping dhcpcd... [ 2762.083967][T12152] netlink: 'syz.3.11159': attribute type 21 has an invalid length. [ 2762.110285][T12152] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11159'. [ 2762.154056][T12152] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11159'. stopped /sbin/dhcpcd (pid 3932) [ 2762.550998][T12169] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.11164'. [ 2762.637981][T12169] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2762.720099][T12169] CPU: 1 PID: 12169 Comm: syz.2.11164 Not tainted syzkaller #0 [ 2762.727743][T12169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2762.737869][T12169] Call Trace: [ 2762.741196][T12169] [ 2762.744175][T12169] dump_stack_lvl+0x188/0x24e [ 2762.748928][T12169] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2762.755174][T12169] ? show_regs_print_info+0x12/0x12 [ 2762.760442][T12169] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2762.766773][T12169] sysfs_warn_dup+0x8a/0xa0 [ 2762.771954][T12169] sysfs_do_create_link_sd+0xc0/0x110 [ 2762.777399][T12169] device_add+0x7ed/0xfb0 [ 2762.781797][T12169] wiphy_register+0x1d9f/0x2ac0 [ 2762.786732][T12169] ? cfg80211_event_work+0x40/0x40 [ 2762.791907][T12169] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2762.798140][T12169] ? ieee80211_register_hw+0x2879/0x39f0 [ 2762.803865][T12169] ieee80211_register_hw+0x2d00/0x39f0 [ 2762.809409][T12169] ? ieee80211_register_hw+0xea1/0x39f0 [ 2762.815037][T12169] ? ieee80211_register_hw+0xea1/0x39f0 [ 2762.820667][T12169] ? ieee80211_tasklet_handler+0x20/0x20 [ 2762.826469][T12169] ? memset+0x1e/0x40 [ 2762.830519][T12169] ? __hrtimer_init+0x186/0x270 [ 2762.835455][T12169] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2762.841263][T12169] hwsim_new_radio_nl+0xafa/0xce0 [ 2762.846351][T12169] genl_family_rcv_msg_doit+0x22a/0x330 [ 2762.851938][T12169] ? end_current_label_crit_section+0x170/0x170 [ 2762.858232][T12169] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2762.864188][T12169] ? bpf_lsm_capable+0x5/0x10 [ 2762.868917][T12169] ? security_capable+0x85/0xb0 [ 2762.873924][T12169] genl_rcv_msg+0x604/0x790 [ 2762.878478][T12169] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2762.884704][T12169] ? genl_bind+0x360/0x360 [ 2762.889169][T12169] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2762.895576][T12169] ? lock_acquire+0x225/0x4a0 [ 2762.900346][T12169] netlink_rcv_skb+0x1fb/0x450 [ 2762.905173][T12169] ? genl_bind+0x360/0x360 [ 2762.909648][T12169] ? netlink_ack+0x1170/0x1170 [ 2762.914584][T12169] ? down_read+0x1a8/0x2d0 [ 2762.919187][T12169] genl_rcv+0x24/0x40 [ 2762.923228][T12169] netlink_unicast+0x74d/0x8d0 [ 2762.928074][T12169] netlink_sendmsg+0x8ad/0xbd0 [ 2762.932920][T12169] ? netlink_getsockopt+0x550/0x550 [ 2762.938284][T12169] ? aa_sock_msg_perm+0x94/0x150 [ 2762.943304][T12169] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2762.948657][T12169] ? security_socket_sendmsg+0x7c/0xa0 [ 2762.954191][T12169] ? netlink_getsockopt+0x550/0x550 [ 2762.959459][T12169] ____sys_sendmsg+0x5be/0x970 [ 2762.964312][T12169] ? __sys_sendmsg_sock+0x30/0x30 [ 2762.969428][T12169] ? __import_iovec+0x315/0x500 [ 2762.974350][T12169] ? import_iovec+0x6f/0xa0 [ 2762.978916][T12169] ___sys_sendmsg+0x2a2/0x360 [ 2762.983759][T12169] ? __sys_sendmsg+0x290/0x290 [ 2762.988602][T12169] ? irqentry_enter+0x33/0x50 [ 2762.993357][T12169] ? rcu_is_watching+0x11/0xa0 [ 2762.998218][T12169] __se_sys_sendmsg+0x1bb/0x2a0 [ 2763.003149][T12169] ? __x64_sys_sendmsg+0x80/0x80 [ 2763.008178][T12169] ? lockdep_hardirqs_on+0x94/0x140 [ 2763.013442][T12169] do_syscall_64+0x4c/0xa0 [ 2763.017924][T12169] ? clear_bhb_loop+0x60/0xb0 [ 2763.022677][T12169] ? clear_bhb_loop+0x60/0xb0 [ 2763.027432][T12169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2763.033394][T12169] RIP: 0033:0x7f170cf9ce59 [ 2763.038991][T12169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2763.058937][T12169] RSP: 002b:00007f170dde5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2763.067416][T12169] RAX: ffffffffffffffda RBX: 00007f170d216090 RCX: 00007f170cf9ce59 [ 2763.075425][T12169] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2763.083441][T12169] RBP: 00007f170d032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2763.091439][T12169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2763.099437][T12169] R13: 00007f170d216128 R14: 00007f170d216090 R15: 00007ffccb9976a8 [ 2763.107449][T12169] Stopping network: [ 2763.337134][T12187] sctp: [Deprecated]: syz.4.11167 (pid 12187) Use of int in maxseg socket option. [ 2763.337134][T12187] Use struct sctp_assoc_value instead [ 2763.359165][T12180] netlink: 'syz.4.11167': attribute type 10 has an invalid length. [ 2763.414395][T12185] netlink: 'syz.1.11169': attribute type 10 has an invalid length. [ 2763.521648][T12185] sctp: [Deprecated]: syz.1.11169 (pid 12185) Use of int in maxseg socket option. [ 2763.521648][T12185] Use struct sctp_assoc_value instead [ 2763.986312][T12208] device syzkaller0 entered promiscuous mode OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 3620) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 2769.066131][T13882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2769.138771][T13882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2769.268314][T13882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2769.418463][T13882] device netdevsim0 left promiscuous mode [ 2769.428847][T13882] team0: Port device netdevsim0 removed [ 2769.436417][T13882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 2769.544729][T13882] device 0 left promiscuous mode [ 2769.651146][T13882] device 1 left promiscuous mode [ 2769.710375][T13882] device 2 left promiscuous mode [ 2769.760363][T13882] device 3 left promiscuous mode [ 2769.817464][T13882] tipc: Left network mode [ 2769.931188][T13882] device ip6gretap0 left promiscuous mode [ 2769.938271][T13882] Ÿë: port 1(ip6gretap0) entered disabled state [ 2770.474338][T12249] kvm: exiting hardware virtualization [ 2770.489274][T12249] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 2770.500525][T12249] ACPI: PM: Preparing to enter system sleep state S5 [ 2770.509738][T12249] reboot: Power down serialport: VM disconnected.