last executing test programs: 11.618367698s ago: executing program 0 (id=7003): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x3010}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x3, 0xffffffff, 0xfff, 0x22218, r1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e4}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 11.144129935s ago: executing program 0 (id=7005): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x3010}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x3, 0xffffffff, 0xfff, 0x22218, r1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e5}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x0) 10.868790421s ago: executing program 0 (id=7006): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000020004000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000d0000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 9.33808544s ago: executing program 0 (id=7012): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x3010}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x3, 0xffffffff, 0xfff, 0x22218, r1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e5}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 8.341110377s ago: executing program 0 (id=7015): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000020004000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000d0000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 7.019058133s ago: executing program 0 (id=7023): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x3010}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x3, 0xffffffff, 0xfff, 0x22218, r1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e5}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 6.545763971s ago: executing program 2 (id=7026): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x3010}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x3, 0xffffffff, 0xfff, 0x22218, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e5}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 5.448601215s ago: executing program 2 (id=7030): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x3010}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x3, 0xffffffff, 0xfff, 0x22218, r1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e5}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x0) 5.024344959s ago: executing program 2 (id=7031): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000020004000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000d000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 4.062131335s ago: executing program 1 (id=7035): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000020004000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000d0000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 3.976488269s ago: executing program 3 (id=7036): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x3010}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x3, 0xffffffff, 0xfff, 0x22218, r1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="8ff4157f6bae06e67a53aa2011c971dba279208cf1807d2abd58dd22fd676a9ae3c3dc70d26cb28b99a823d1eea4b9275b1e7bfa6cfb2df809c3aa87b9363bcad8d5e71a6cb2eb22814cd0479191ffe5d8c8a863472be51c99c3c0a779c526368a4c8ed2460df54f0115d0de823c1a0c3bd0f076cc79e9d2678bfe6cee55d8165f89df096fd67f05f41219049860e266d2411bfbeec84a62477a6f29da71ab75ce75cde06b32e281eef8a57261f20069c5718b2d162604bc2a2c5418b7dc5b522319fe687e6ed4043cc4e0ba38483b3b39b2a19cce2199b68c8add53b068afafad40d47bcaf5eeb6359ccc010310d4ebfc1047e85dc47cc3a60824ac8ce9705712bfc68fd5514a6fb3b5815bb2f720566a46a99b79cd456b1f038fcd5e5374e15de59e5d49c2a41d79e3d2262061ecc84e83291792364d5a22647bc3eb64a834313cd23a3cddd7abefd6df77d0e13e3949113f1380ef599e4eed0c91ece1ecf284904b6a3032cdfccb811cacfc278581951ba18742006459982763dbe45e7ee8656589d7039bbbf8ce8d98c3eef5df0bcdb8d63c02db26195bbeb68f5f6bac83f657690d8e094ddd5b4a43e42dc8c01eb5b0b732d5f09e861fc7ebc7c1de3be40648610c9896ff57748dcc5da569ca4ff0c8bb88baee2aae54c352e3b6eb79f529b2acd09b8d6dc07a74a074d71db1cc53676a20eefc0b54cc98fbc86983f803c6f91503910627b8ed2554629ab83b29e454087e7ae51cbfbebf0a42c203f8edcf9f00e90ab85261335a0f38e95f06dc40316bddefd9aab7984960a0912fd5426a7b66926a0064c7afc2f27e17ecfd98a3c63e94ee551267cbc9297d6ee87dcd2d5f90aac187d6d3f2f90d1e5b5dbd8e6ba41c3debad5c8a54a9a3191367c26945728c73f3f58cfe02bbf8527f9e86d906e060f5d23093c4bc791451f929c0b8e0b4d343eeeefda7662b0647215e50854b9ebbb1397426e7a11cf1bca953fe4b6a4483fe3fcb3f9f9cefa56d04dcea77b5f7bf2d86816866e272fabbb27d7f29d8d0d22b5e3af31fc06ec8eb4498514b3745ad9a98e5f0b43ae99d7be5839380412047d653d07dfa4d710b5cba69edbd7552272c2996c352e4413e0c3ef60b5e42e3bc86ed4fea59849f7a438bfd3f31a0703cce0aa46fdeec11aec0a1980fb31c14ad36d3dd8fe054644a63b0661bd252b163c356e6c40bcfd46e7f6888431057695514e639c5c51d4d24db748f3ee713d7fa097706f2f5d681c76c71cf3f1a740a0265ff90cad66e27cfc37bff3010ec6f891eaa414fae627d7fe3b628d3b816d91a9cd3aadc829b9bf0e533376309c920c85332478c4c9572bdf2290d50d5159609ebe30670f168bec8eee42fd494660ccbc6fea324d7c700cb89cc83c450dd3ecec2c8427a37f47b35e8b092884de2af0cd50685534ede76fd2757f01b48a3a1533ca4e6c24cfe7dceca44a6a14830f9521cc6f2579dc13839cc3af64ef405d65fbfc229ed37dfb19ee3760846fc27fe6b767417fd3e1cd782302e04f369e34c40d75c7764e9528d8585dd5265621b87359b32de325b784f2cb3e7a969e1cb68b5f5ca7e9eb13024360938a3b1286460e8d0fa02f88484278fe6de6c7d0d8713c105c2c9682650e6bab0cc78ac7f4ce0e7f13eaa48631fcec861f351429b8c5201f31f0f08fe7055fc96d0b3c0767e546d09f2e512a84bc4185ecdb00491685aca89da091a7f46a2901850e69cbb7a32d3f4994091c59a0cd7dc56a7981a06f37fbfbb8aa12793bf524a28525ccb303d34a1f35c0736b009cd2f12704a6902b5f2fac3042db97ae4be1e85a87666e65e528cb1cacd6468f03a771e43f20c8db4f792e70591f38d66a63da8256d03ebc504e5402b90d0a9d96d5061f5321fccfa29cab16836bdace5c3c6c8804f2bae91e6d8bc4d2c9fd3f0086b0870d3a783625d886bb0d87fcc83abe71dd466df33f294df8b8dd083f26f3074004302f40c20e7d51fe45b7c23fe6a1ae41e9e1d7ec3e2cba932a85437fea65b49db2cc894f916bbcfce8a9cc7693279c70e23954cf01658dae31ad8d2dfd5641e14c318e0d4685342b8aa2ff5709f8dee0c9818686364428fcdfff1000e0f02e88f0110c57c97d285", 0x5e5}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f", 0x29}], 0x1, 0x0, 0x0, 0x35}, 0x0) 3.668066628s ago: executing program 3 (id=7037): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x3010}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x3, 0xffffffff, 0xfff, 0x22218, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="8ff4157f6bae06e67a53aa2011c971dba279208cf1807d2abd58dd22fd676a9ae3c3dc70d26cb28b99a823d1eea4b9275b1e7bfa6cfb2df809c3aa87b9363bcad8d5e71a6cb2eb22814cd0479191ffe5d8c8a863472be51c99c3c0a779c526368a4c8ed2460df54f0115d0de823c1a0c3bd0f076cc79e9d2678bfe6cee55d8165f89df096fd67f05f41219049860e266d2411bfbeec84a62477a6f29da71ab75ce75cde06b32e281eef8a57261f20069c5718b2d162604bc2a2c5418b7dc5b522319fe687e6ed4043cc4e0ba38483b3b39b2a19cce2199b68c8add53b068afafad40d47bcaf5eeb6359ccc010310d4ebfc1047e85dc47cc3a60824ac8ce9705712bfc68fd5514a6fb3b5815bb2f720566a46a99b79cd456b1f038fcd5e5374e15de59e5d49c2a41d79e3d2262061ecc84e83291792364d5a22647bc3eb64a834313cd23a3cddd7abefd6df77d0e13e3949113f1380ef599e4eed0c91ece1ecf284904b6a3032cdfccb811cacfc278581951ba18742006459982763dbe45e7ee8656589d7039bbbf8ce8d98c3eef5df0bcdb8d63c02db26195bbeb68f5f6bac83f657690d8e094ddd5b4a43e42dc8c01eb5b0b732d5f09e861fc7ebc7c1de3be40648610c9896ff57748dcc5da569ca4ff0c8bb88baee2aae54c352e3b6eb79f529b2acd09b8d6dc07a74a074d71db1cc53676a20eefc0b54cc98fbc86983f803c6f91503910627b8ed2554629ab83b29e454087e7ae51cbfbebf0a42c203f8edcf9f00e90ab85261335a0f38e95f06dc40316bddefd9aab7984960a0912fd5426a7b66926a0064c7afc2f27e17ecfd98a3c63e94ee551267cbc9297d6ee87dcd2d5f90aac187d6d3f2f90d1e5b5dbd8e6ba41c3debad5c8a54a9a3191367c26945728c73f3f58cfe02bbf8527f9e86d906e060f5d23093c4bc791451f929c0b8e0b4d343eeeefda7662b0647215e50854b9ebbb1397426e7a11cf1bca953fe4b6a4483fe3fcb3f9f9cefa56d04dcea77b5f7bf2d86816866e272fabbb27d7f29d8d0d22b5e3af31fc06ec8eb4498514b3745ad9a98e5f0b43ae99d7be5839380412047d653d07dfa4d710b5cba69edbd7552272c2996c352e4413e0c3ef60b5e42e3bc86ed4fea59849f7a438bfd3f31a0703cce0aa46fdeec11aec0a1980fb31c14ad36d3dd8fe054644a63b0661bd252b163c356e6c40bcfd46e7f6888431057695514e639c5c51d4d24db748f3ee713d7fa097706f2f5d681c76c71cf3f1a740a0265ff90cad66e27cfc37bff3010ec6f891eaa414fae627d7fe3b628d3b816d91a9cd3aadc829b9bf0e533376309c920c85332478c4c9572bdf2290d50d5159609ebe30670f168bec8eee42fd494660ccbc6fea324d7c700cb89cc83c450dd3ecec2c8427a37f47b35e8b092884de2af0cd50685534ede76fd2757f01b48a3a1533ca4e6c24cfe7dceca44a6a14830f9521cc6f2579dc13839cc3af64ef405d65fbfc229ed37dfb19ee3760846fc27fe6b767417fd3e1cd782302e04f369e34c40d75c7764e9528d8585dd5265621b87359b32de325b784f2cb3e7a969e1cb68b5f5ca7e9eb13024360938a3b1286460e8d0fa02f88484278fe6de6c7d0d8713c105c2c9682650e6bab0cc78ac7f4ce0e7f13eaa48631fcec861f351429b8c5201f31f0f08fe7055fc96d0b3c0767e546d09f2e512a84bc4185ecdb00491685aca89da091a7f46a2901850e69cbb7a32d3f4994091c59a0cd7dc56a7981a06f37fbfbb8aa12793bf524a28525ccb303d34a1f35c0736b009cd2f12704a6902b5f2fac3042db97ae4be1e85a87666e65e528cb1cacd6468f03a771e43f20c8db4f792e70591f38d66a63da8256d03ebc504e5402b90d0a9d96d5061f5321fccfa29cab16836bdace5c3c6c8804f2bae91e6d8bc4d2c9fd3f0086b0870d3a783625d886bb0d87fcc83abe71dd466df33f294df8b8dd083f26f3074004302f40c20e7d51fe45b7c23fe6a1ae41e9e1d7ec3e2cba932a85437fea65b49db2cc894f916bbcfce8a9cc7693279c70e23954cf01658dae31ad8d2dfd5641e14c318e0d4685342b8aa2ff5709f8dee0c9818686364428fcdfff1000e0f02e88f0110c57c97d285", 0x5e5}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 2.538974773s ago: executing program 3 (id=7038): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x3010}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x3, 0xffffffff, 0xfff, 0x22218, r1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e5}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x0) 2.532254253s ago: executing program 2 (id=7045): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x3010}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x3, 0xffffffff, 0xfff, 0x22218, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e5}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 2.277404498s ago: executing program 3 (id=7039): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x3010}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x3, 0xffffffff, 0xfff, 0x22218, r1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e5}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc60100040", 0x17}], 0x1, 0x0, 0x0, 0x35}, 0x0) 2.230178131s ago: executing program 1 (id=7040): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x3010}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x3, 0xffffffff, 0xfff, 0x22218, r1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e5}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff40703", 0x2d}], 0x1, 0x0, 0x0, 0x35}, 0x0) 2.015983863s ago: executing program 1 (id=7041): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x3010}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x3, 0xffffffff, 0xfff, 0x22218, r1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e5}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f", 0x29}], 0x1, 0x0, 0x0, 0x35}, 0x0) 1.953087687s ago: executing program 3 (id=7042): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000020004000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000d0000000001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 1.055144929s ago: executing program 2 (id=7043): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000020004000400000000000000", @ANYBLOB="0000000000000000000d00000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 1.053955099s ago: executing program 1 (id=7044): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x3010}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x3, 0xffffffff, 0xfff, 0x22218, r1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e5}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 576.120466ms ago: executing program 1 (id=7046): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x3010}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x3, 0xffffffff, 0xfff, 0x22218, r1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e5}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f", 0x29}], 0x1, 0x0, 0x0, 0x35}, 0x0) 89.501505ms ago: executing program 3 (id=7047): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x9, 0x3010}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}, @call={0x85, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x3, 0xffffffff, 0xfff, 0x22218, r1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="8ff4157f6bae06e67a53aa2011c971dba279208cf1807d2abd58dd22fd676a9ae3c3dc70d26cb28b99a823d1eea4b9275b1e7bfa6cfb2df809c3aa87b9363bcad8d5e71a6cb2eb22814cd0479191ffe5d8c8a863472be51c99c3c0a779c526368a4c8ed2460df54f0115d0de823c1a0c3bd0f076cc79e9d2678bfe6cee55d8165f89df096fd67f05f41219049860e266d2411bfbeec84a62477a6f29da71ab75ce75cde06b32e281eef8a57261f20069c5718b2d162604bc2a2c5418b7dc5b522319fe687e6ed4043cc4e0ba38483b3b39b2a19cce2199b68c8add53b068afafad40d47bcaf5eeb6359ccc010310d4ebfc1047e85dc47cc3a60824ac8ce9705712bfc68fd5514a6fb3b5815bb2f720566a46a99b79cd456b1f038fcd5e5374e15de59e5d49c2a41d79e3d2262061ecc84e83291792364d5a22647bc3eb64a834313cd23a3cddd7abefd6df77d0e13e3949113f1380ef599e4eed0c91ece1ecf284904b6a3032cdfccb811cacfc278581951ba18742006459982763dbe45e7ee8656589d7039bbbf8ce8d98c3eef5df0bcdb8d63c02db26195bbeb68f5f6bac83f657690d8e094ddd5b4a43e42dc8c01eb5b0b732d5f09e861fc7ebc7c1de3be40648610c9896ff57748dcc5da569ca4ff0c8bb88baee2aae54c352e3b6eb79f529b2acd09b8d6dc07a74a074d71db1cc53676a20eefc0b54cc98fbc86983f803c6f91503910627b8ed2554629ab83b29e454087e7ae51cbfbebf0a42c203f8edcf9f00e90ab85261335a0f38e95f06dc40316bddefd9aab7984960a0912fd5426a7b66926a0064c7afc2f27e17ecfd98a3c63e94ee551267cbc9297d6ee87dcd2d5f90aac187d6d3f2f90d1e5b5dbd8e6ba41c3debad5c8a54a9a3191367c26945728c73f3f58cfe02bbf8527f9e86d906e060f5d23093c4bc791451f929c0b8e0b4d343eeeefda7662b0647215e50854b9ebbb1397426e7a11cf1bca953fe4b6a4483fe3fcb3f9f9cefa56d04dcea77b5f7bf2d86816866e272fabbb27d7f29d8d0d22b5e3af31fc06ec8eb4498514b3745ad9a98e5f0b43ae99d7be5839380412047d653d07dfa4d710b5cba69edbd7552272c2996c352e4413e0c3ef60b5e42e3bc86ed4fea59849f7a438bfd3f31a0703cce0aa46fdeec11aec0a1980fb31c14ad36d3dd8fe054644a63b0661bd252b163c356e6c40bcfd46e7f6888431057695514e639c5c51d4d24db748f3ee713d7fa097706f2f5d681c76c71cf3f1a740a0265ff90cad66e27cfc37bff3010ec6f891eaa414fae627d7fe3b628d3b816d91a9cd3aadc829b9bf0e533376309c920c85332478c4c9572bdf2290d50d5159609ebe30670f168bec8eee42fd494660ccbc6fea324d7c700cb89cc83c450dd3ecec2c8427a37f47b35e8b092884de2af0cd50685534ede76fd2757f01b48a3a1533ca4e6c24cfe7dceca44a6a14830f9521cc6f2579dc13839cc3af64ef405d65fbfc229ed37dfb19ee3760846fc27fe6b767417fd3e1cd782302e04f369e34c40d75c7764e9528d8585dd5265621b87359b32de325b784f2cb3e7a969e1cb68b5f5ca7e9eb13024360938a3b1286460e8d0fa02f88484278fe6de6c7d0d8713c105c2c9682650e6bab0cc78ac7f4ce0e7f13eaa48631fcec861f351429b8c5201f31f0f08fe7055fc96d0b3c0767e546d09f2e512a84bc4185ecdb00491685aca89da091a7f46a2901850e69cbb7a32d3f4994091c59a0cd7dc56a7981a06f37fbfbb8aa12793bf524a28525ccb303d34a1f35c0736b009cd2f12704a6902b5f2fac3042db97ae4be1e85a87666e65e528cb1cacd6468f03a771e43f20c8db4f792e70591f38d66a63da8256d03ebc504e5402b90d0a9d96d5061f5321fccfa29cab16836bdace5c3c6c8804f2bae91e6d8bc4d2c9fd3f0086b0870d3a783625d886bb0d87fcc83abe71dd466df33f294df8b8dd083f26f3074004302f40c20e7d51fe45b7c23fe6a1ae41e9e1d7ec3e2cba932a85437fea65b49db2cc894f916bbcfce8a9cc7693279c70e23954cf01658dae31ad8d2dfd5641e14c318e0d4685342b8aa2ff5709f8dee0c9818686364428fcdfff1000e0f02e88f0110c57c97d285", 0x5e5}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc60100040", 0x17}], 0x1, 0x0, 0x0, 0x35}, 0x0) 71.559056ms ago: executing program 1 (id=7048): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000d00000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 0s ago: executing program 2 (id=7049): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000020004000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000d0000000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) kernel console output (not intermixed with test programs): 8/0x150 [ 1881.472909][T25692] do_syscall_64+0x55/0xa0 [ 1881.477351][T25692] ? clear_bhb_loop+0x40/0x90 [ 1881.482063][T25692] ? clear_bhb_loop+0x40/0x90 [ 1881.486780][T25692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1881.492698][T25692] RIP: 0033:0x7f12f019aeb9 [ 1881.497162][T25692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1881.516788][T25692] RSP: 002b:00007f12f10bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1881.525240][T25692] RAX: ffffffffffffffda RBX: 00007f12f0415fa0 RCX: 00007f12f019aeb9 [ 1881.533237][T25692] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1881.541226][T25692] RBP: 00007f12f0208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1881.549216][T25692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1881.557199][T25692] R13: 00007f12f0416038 R14: 00007f12f0415fa0 R15: 00007ffdb5e33d88 [ 1881.565217][T25692] [ 1881.642775][T25687] netlink: 'syz.1.6732': attribute type 8 has an invalid length. [ 1881.667748][T25687] netlink: 209716 bytes leftover after parsing attributes in process `syz.1.6732'. [ 1881.696496][T25687] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1881.727002][T25687] CPU: 1 PID: 25687 Comm: syz.1.6732 Not tainted syzkaller #0 [ 1881.734560][T25687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1881.744663][T25687] Call Trace: [ 1881.748031][T25687] [ 1881.750999][T25687] dump_stack_lvl+0x18c/0x250 [ 1881.755736][T25687] ? show_regs_print_info+0x20/0x20 [ 1881.760998][T25687] ? load_image+0x400/0x400 [ 1881.765571][T25687] sysfs_warn_dup+0x8e/0xa0 [ 1881.770156][T25687] sysfs_do_create_link_sd+0xc0/0x110 [ 1881.775586][T25687] device_add_class_symlinks+0x1cf/0x240 [ 1881.781287][T25687] device_add+0x507/0xc20 [ 1881.785687][T25687] wiphy_register+0x1dad/0x2ae0 [ 1881.790612][T25687] ? cfg80211_event_work+0x40/0x40 [ 1881.795767][T25687] ? minstrel_ht_alloc+0x88a/0x990 [ 1881.800966][T25687] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1881.807111][T25687] ieee80211_register_hw+0x3464/0x4250 [ 1881.812673][T25687] ? ieee80211_tasklet_handler+0x20/0x20 [ 1881.818380][T25687] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1881.824430][T25687] ? __debug_object_init+0xec/0x450 [ 1881.829701][T25687] ? __asan_memset+0x22/0x40 [ 1881.834335][T25687] ? __hrtimer_init+0x186/0x270 [ 1881.839219][T25687] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1881.845004][T25687] ? mac80211_hwsim_free+0x220/0x220 [ 1881.850327][T25687] ? rcu_is_watching+0x15/0xb0 [ 1881.855116][T25687] ? kstrndup+0xbd/0x140 [ 1881.859403][T25687] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1881.864557][T25687] ? __nla_validate+0x50/0x50 [ 1881.869294][T25687] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1881.875686][T25687] ? __nla_parse+0x40/0x50 [ 1881.880145][T25687] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1881.886505][T25687] genl_family_rcv_msg_doit+0x211/0x310 [ 1881.892091][T25687] ? end_current_label_crit_section+0x170/0x170 [ 1881.898364][T25687] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1881.904297][T25687] ? bpf_lsm_capable+0x9/0x10 [ 1881.909011][T25687] ? security_capable+0x89/0xb0 [ 1881.913915][T25687] genl_rcv_msg+0x619/0x7a0 [ 1881.918484][T25687] ? genl_bind+0x360/0x360 [ 1881.922937][T25687] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1881.929329][T25687] netlink_rcv_skb+0x241/0x4d0 [ 1881.934135][T25687] ? genl_bind+0x360/0x360 [ 1881.938586][T25687] ? netlink_ack+0x1180/0x1180 [ 1881.943404][T25687] ? genl_bind+0x360/0x360 [ 1881.947865][T25687] genl_rcv+0x28/0x40 [ 1881.951884][T25687] netlink_unicast+0x751/0x8d0 [ 1881.956703][T25687] netlink_sendmsg+0x8d0/0xbf0 [ 1881.961530][T25687] ? netlink_getsockopt+0x590/0x590 [ 1881.966775][T25687] ? aa_sock_msg_perm+0x94/0x150 [ 1881.971754][T25687] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1881.977168][T25687] ? security_socket_sendmsg+0x80/0xa0 [ 1881.982731][T25687] ? netlink_getsockopt+0x590/0x590 [ 1881.987993][T25687] ____sys_sendmsg+0x5ba/0x960 [ 1881.992808][T25687] ? __asan_memset+0x22/0x40 [ 1881.997436][T25687] ? __sys_sendmsg_sock+0x30/0x30 [ 1882.002514][T25687] ? __import_iovec+0x5f2/0x850 [ 1882.007430][T25687] ? import_iovec+0x73/0xa0 [ 1882.011979][T25687] ___sys_sendmsg+0x2a6/0x360 [ 1882.016697][T25687] ? __sys_sendmsg+0x2a0/0x2a0 [ 1882.021540][T25687] __se_sys_sendmsg+0x1c2/0x2b0 [ 1882.026422][T25687] ? __x64_sys_sendmsg+0x80/0x80 [ 1882.031404][T25687] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1882.037333][T25687] do_syscall_64+0x55/0xa0 [ 1882.041781][T25687] ? clear_bhb_loop+0x40/0x90 [ 1882.046492][T25687] ? clear_bhb_loop+0x40/0x90 [ 1882.051208][T25687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1882.057127][T25687] RIP: 0033:0x7f7ee139aeb9 [ 1882.061573][T25687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1882.081210][T25687] RSP: 002b:00007f7edf5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1882.089658][T25687] RAX: ffffffffffffffda RBX: 00007f7ee1615fa0 RCX: 00007f7ee139aeb9 [ 1882.097659][T25687] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1882.105659][T25687] RBP: 00007f7ee1408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1882.113663][T25687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1882.121665][T25687] R13: 00007f7ee1616038 R14: 00007f7ee1615fa0 R15: 00007ffeee54d578 [ 1882.129686][T25687] [ 1882.497411][T25701] netlink: 'syz.1.6739': attribute type 8 has an invalid length. [ 1882.609256][T25702] netlink: 'syz.0.6738': attribute type 8 has an invalid length. [ 1882.933210][T25706] netlink: 'syz.1.6740': attribute type 8 has an invalid length. [ 1882.967262][T25706] netlink: 209716 bytes leftover after parsing attributes in process `syz.1.6740'. [ 1883.088083][T25706] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1883.110336][T25706] CPU: 0 PID: 25706 Comm: syz.1.6740 Not tainted syzkaller #0 [ 1883.118090][T25706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1883.128180][T25706] Call Trace: [ 1883.131489][T25706] [ 1883.134449][T25706] dump_stack_lvl+0x18c/0x250 [ 1883.139169][T25706] ? show_regs_print_info+0x20/0x20 [ 1883.144399][T25706] ? load_image+0x400/0x400 [ 1883.148960][T25706] sysfs_warn_dup+0x8e/0xa0 [ 1883.153493][T25706] sysfs_do_create_link_sd+0xc0/0x110 [ 1883.158927][T25706] device_add_class_symlinks+0x1cf/0x240 [ 1883.164602][T25706] device_add+0x507/0xc20 [ 1883.168974][T25706] wiphy_register+0x1dad/0x2ae0 [ 1883.173875][T25706] ? cfg80211_event_work+0x40/0x40 [ 1883.179018][T25706] ? minstrel_ht_alloc+0x88a/0x990 [ 1883.184172][T25706] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1883.190276][T25706] ieee80211_register_hw+0x3464/0x4250 [ 1883.195815][T25706] ? ieee80211_tasklet_handler+0x20/0x20 [ 1883.201480][T25706] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1883.207419][T25706] ? __debug_object_init+0xec/0x450 [ 1883.212656][T25706] ? __asan_memset+0x22/0x40 [ 1883.217296][T25706] ? __hrtimer_init+0x186/0x270 [ 1883.222196][T25706] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1883.228021][T25706] ? mac80211_hwsim_free+0x220/0x220 [ 1883.233354][T25706] ? rcu_is_watching+0x15/0xb0 [ 1883.238157][T25706] ? kstrndup+0xbd/0x140 [ 1883.242448][T25706] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1883.247620][T25706] ? __nla_validate+0x50/0x50 [ 1883.252355][T25706] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1883.258733][T25706] ? __nla_parse+0x40/0x50 [ 1883.263191][T25706] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1883.269550][T25706] genl_family_rcv_msg_doit+0x211/0x310 [ 1883.275137][T25706] ? end_current_label_crit_section+0x170/0x170 [ 1883.281421][T25706] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1883.287351][T25706] ? bpf_lsm_capable+0x9/0x10 [ 1883.292065][T25706] ? security_capable+0x89/0xb0 [ 1883.296954][T25706] genl_rcv_msg+0x619/0x7a0 [ 1883.301526][T25706] ? genl_bind+0x360/0x360 [ 1883.305981][T25706] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1883.312358][T25706] ? perf_trace_lock+0xfc/0x3b0 [ 1883.317250][T25706] netlink_rcv_skb+0x241/0x4d0 [ 1883.322045][T25706] ? genl_bind+0x360/0x360 [ 1883.326502][T25706] ? netlink_ack+0x1180/0x1180 [ 1883.331321][T25706] ? __lock_acquire+0x7d40/0x7d40 [ 1883.336385][T25706] ? down_read+0x1ac/0x2e0 [ 1883.340851][T25706] genl_rcv+0x28/0x40 [ 1883.344882][T25706] netlink_unicast+0x751/0x8d0 [ 1883.349702][T25706] netlink_sendmsg+0x8d0/0xbf0 [ 1883.354506][T25706] ? netlink_getsockopt+0x590/0x590 [ 1883.359736][T25706] ? aa_sock_msg_perm+0x94/0x150 [ 1883.364714][T25706] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1883.370032][T25706] ? security_socket_sendmsg+0x80/0xa0 [ 1883.375530][T25706] ? netlink_getsockopt+0x590/0x590 [ 1883.380784][T25706] ____sys_sendmsg+0x5ba/0x960 [ 1883.385599][T25706] ? __asan_memset+0x22/0x40 [ 1883.390228][T25706] ? __sys_sendmsg_sock+0x30/0x30 [ 1883.395286][T25706] ? __import_iovec+0x5f2/0x850 [ 1883.400183][T25706] ? import_iovec+0x73/0xa0 [ 1883.404729][T25706] ___sys_sendmsg+0x2a6/0x360 [ 1883.409443][T25706] ? __sys_sendmsg+0x2a0/0x2a0 [ 1883.414288][T25706] __se_sys_sendmsg+0x1c2/0x2b0 [ 1883.419182][T25706] ? __x64_sys_sendmsg+0x80/0x80 [ 1883.424164][T25706] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1883.430093][T25706] do_syscall_64+0x55/0xa0 [ 1883.434598][T25706] ? clear_bhb_loop+0x40/0x90 [ 1883.439304][T25706] ? clear_bhb_loop+0x40/0x90 [ 1883.444015][T25706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1883.449938][T25706] RIP: 0033:0x7f7ee139aeb9 [ 1883.454375][T25706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1883.474009][T25706] RSP: 002b:00007f7edf5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1883.482452][T25706] RAX: ffffffffffffffda RBX: 00007f7ee1615fa0 RCX: 00007f7ee139aeb9 [ 1883.490455][T25706] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1883.498445][T25706] RBP: 00007f7ee1408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1883.506436][T25706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1883.514452][T25706] R13: 00007f7ee1616038 R14: 00007f7ee1615fa0 R15: 00007ffeee54d578 [ 1883.522568][T25706] [ 1883.877078][T25716] netlink: 'syz.1.6752': attribute type 2 has an invalid length. [ 1883.932611][T25720] netlink: 'syz.2.6744': attribute type 8 has an invalid length. [ 1883.959030][T25716] netlink: 'syz.1.6752': attribute type 8 has an invalid length. [ 1883.978922][T25716] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6752'. [ 1884.005088][T25719] netlink: 209716 bytes leftover after parsing attributes in process `syz.0.6745'. [ 1884.140599][T25719] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1884.158035][T25719] CPU: 0 PID: 25719 Comm: syz.0.6745 Not tainted syzkaller #0 [ 1884.165567][T25719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1884.175672][T25719] Call Trace: [ 1884.179001][T25719] [ 1884.181998][T25719] dump_stack_lvl+0x18c/0x250 [ 1884.186731][T25719] ? show_regs_print_info+0x20/0x20 [ 1884.191988][T25719] ? load_image+0x400/0x400 [ 1884.196575][T25719] sysfs_warn_dup+0x8e/0xa0 [ 1884.201123][T25719] sysfs_do_create_link_sd+0xc0/0x110 [ 1884.206551][T25719] device_add_class_symlinks+0x1cf/0x240 [ 1884.212295][T25719] device_add+0x507/0xc20 [ 1884.216737][T25719] wiphy_register+0x1dad/0x2ae0 [ 1884.221691][T25719] ? cfg80211_event_work+0x40/0x40 [ 1884.226847][T25719] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1884.233061][T25719] ieee80211_register_hw+0x3464/0x4250 [ 1884.238602][T25719] ? ieee80211_tasklet_handler+0x20/0x20 [ 1884.244288][T25719] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1884.250251][T25719] ? __debug_object_init+0xec/0x450 [ 1884.255516][T25719] ? __asan_memset+0x22/0x40 [ 1884.260166][T25719] ? __hrtimer_init+0x186/0x270 [ 1884.265084][T25719] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1884.270901][T25719] ? mac80211_hwsim_free+0x220/0x220 [ 1884.276262][T25719] ? rcu_is_watching+0x15/0xb0 [ 1884.281085][T25719] ? kstrndup+0xbd/0x140 [ 1884.285400][T25719] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1884.290578][T25719] ? __nla_validate+0x50/0x50 [ 1884.295332][T25719] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1884.301744][T25719] ? __nla_parse+0x40/0x50 [ 1884.306240][T25719] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1884.312622][T25719] genl_family_rcv_msg_doit+0x211/0x310 [ 1884.318225][T25719] ? end_current_label_crit_section+0x170/0x170 [ 1884.324518][T25719] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1884.330502][T25719] ? bpf_lsm_capable+0x9/0x10 [ 1884.335242][T25719] ? security_capable+0x89/0xb0 [ 1884.340166][T25719] genl_rcv_msg+0x619/0x7a0 [ 1884.344801][T25719] ? genl_bind+0x360/0x360 [ 1884.349269][T25719] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1884.355738][T25719] ? lockdep_hardirqs_on+0x98/0x150 [ 1884.360987][T25719] netlink_rcv_skb+0x241/0x4d0 [ 1884.365791][T25719] ? genl_bind+0x360/0x360 [ 1884.370245][T25719] ? netlink_ack+0x1180/0x1180 [ 1884.375062][T25719] ? __lock_acquire+0x7d40/0x7d40 [ 1884.380200][T25719] ? net_generic+0x1e/0x240 [ 1884.384764][T25719] ? down_read+0x1ac/0x2e0 [ 1884.389225][T25719] genl_rcv+0x28/0x40 [ 1884.393252][T25719] netlink_unicast+0x751/0x8d0 [ 1884.398049][T25719] netlink_sendmsg+0x8d0/0xbf0 [ 1884.402956][T25719] ? netlink_getsockopt+0x590/0x590 [ 1884.408180][T25719] ? aa_sock_msg_perm+0x94/0x150 [ 1884.413137][T25719] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1884.418447][T25719] ? security_socket_sendmsg+0x80/0xa0 [ 1884.423928][T25719] ? netlink_getsockopt+0x590/0x590 [ 1884.429164][T25719] ____sys_sendmsg+0x5ba/0x960 [ 1884.433969][T25719] ? __asan_memset+0x22/0x40 [ 1884.438593][T25719] ? __sys_sendmsg_sock+0x30/0x30 [ 1884.443753][T25719] ? __import_iovec+0x5f2/0x850 [ 1884.448669][T25719] ? import_iovec+0x73/0xa0 [ 1884.453216][T25719] ___sys_sendmsg+0x2a6/0x360 [ 1884.457927][T25719] ? __sys_sendmsg+0x2a0/0x2a0 [ 1884.462747][T25719] ? __schedule+0x179f/0x45a0 [ 1884.467486][T25719] __se_sys_sendmsg+0x1c2/0x2b0 [ 1884.472366][T25719] ? __x64_sys_sendmsg+0x80/0x80 [ 1884.477354][T25719] ? lockdep_hardirqs_on+0x98/0x150 [ 1884.482582][T25719] do_syscall_64+0x55/0xa0 [ 1884.487019][T25719] ? clear_bhb_loop+0x40/0x90 [ 1884.491735][T25719] ? clear_bhb_loop+0x40/0x90 [ 1884.496432][T25719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1884.502346][T25719] RIP: 0033:0x7f12f019aeb9 [ 1884.506778][T25719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1884.526407][T25719] RSP: 002b:00007f12f10bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1884.534870][T25719] RAX: ffffffffffffffda RBX: 00007f12f0415fa0 RCX: 00007f12f019aeb9 [ 1884.542872][T25719] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1884.550866][T25719] RBP: 00007f12f0208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1884.558864][T25719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1884.566857][T25719] R13: 00007f12f0416038 R14: 00007f12f0415fa0 R15: 00007ffdb5e33d88 [ 1884.574892][T25719] [ 1885.289929][T25731] validate_nla: 1 callbacks suppressed [ 1885.289950][T25731] netlink: 'syz.0.6748': attribute type 8 has an invalid length. [ 1885.396357][T25734] netlink: 'syz.1.6749': attribute type 8 has an invalid length. [ 1885.634086][T25741] netlink: 'syz.0.6751': attribute type 8 has an invalid length. [ 1885.685537][T25740] netlink: 'syz.3.6750': attribute type 8 has an invalid length. [ 1885.714877][T25743] netlink: 'syz.1.6753': attribute type 8 has an invalid length. [ 1885.748132][T25743] netlink: 209716 bytes leftover after parsing attributes in process `syz.1.6753'. [ 1885.840452][T25743] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1885.866677][T25743] CPU: 0 PID: 25743 Comm: syz.1.6753 Not tainted syzkaller #0 [ 1885.874239][T25743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1885.884350][T25743] Call Trace: [ 1885.887691][T25743] [ 1885.890667][T25743] dump_stack_lvl+0x18c/0x250 [ 1885.895409][T25743] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1885.901671][T25743] ? show_regs_print_info+0x20/0x20 [ 1885.906950][T25743] ? load_image+0x400/0x400 [ 1885.911520][T25743] sysfs_warn_dup+0x8e/0xa0 [ 1885.916086][T25743] sysfs_do_create_link_sd+0xc0/0x110 [ 1885.921520][T25743] device_add_class_symlinks+0x1cf/0x240 [ 1885.927217][T25743] device_add+0x507/0xc20 [ 1885.931589][T25743] wiphy_register+0x1dad/0x2ae0 [ 1885.936502][T25743] ? cfg80211_event_work+0x40/0x40 [ 1885.941743][T25743] ? minstrel_ht_alloc+0x88a/0x990 [ 1885.946919][T25743] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1885.953035][T25743] ieee80211_register_hw+0x3464/0x4250 [ 1885.958585][T25743] ? ieee80211_tasklet_handler+0x20/0x20 [ 1885.964288][T25743] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1885.970249][T25743] ? __debug_object_init+0xec/0x450 [ 1885.975505][T25743] ? __asan_memset+0x22/0x40 [ 1885.980149][T25743] ? __hrtimer_init+0x186/0x270 [ 1885.985051][T25743] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1885.990857][T25743] ? mac80211_hwsim_free+0x220/0x220 [ 1885.996193][T25743] ? rcu_is_watching+0x15/0xb0 [ 1886.000987][T25743] ? kstrndup+0xbd/0x140 [ 1886.005273][T25743] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1886.010435][T25743] ? __nla_validate+0x50/0x50 [ 1886.015152][T25743] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1886.021526][T25743] ? __nla_parse+0x40/0x50 [ 1886.025982][T25743] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1886.032363][T25743] genl_family_rcv_msg_doit+0x211/0x310 [ 1886.037942][T25743] ? end_current_label_crit_section+0x170/0x170 [ 1886.044221][T25743] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1886.050159][T25743] ? bpf_lsm_capable+0x9/0x10 [ 1886.054874][T25743] ? security_capable+0x89/0xb0 [ 1886.059767][T25743] genl_rcv_msg+0x619/0x7a0 [ 1886.064356][T25743] ? genl_bind+0x360/0x360 [ 1886.068837][T25743] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1886.075200][T25743] ? perf_trace_lock+0xfc/0x3b0 [ 1886.080116][T25743] netlink_rcv_skb+0x241/0x4d0 [ 1886.084921][T25743] ? genl_bind+0x360/0x360 [ 1886.089383][T25743] ? netlink_ack+0x1180/0x1180 [ 1886.094190][T25743] ? __lock_acquire+0x7d40/0x7d40 [ 1886.099245][T25743] ? down_read+0x1ac/0x2e0 [ 1886.103714][T25743] genl_rcv+0x28/0x40 [ 1886.107909][T25743] netlink_unicast+0x751/0x8d0 [ 1886.112737][T25743] netlink_sendmsg+0x8d0/0xbf0 [ 1886.117566][T25743] ? lockdep_hardirqs_on+0x98/0x150 [ 1886.122803][T25743] ? netlink_getsockopt+0x590/0x590 [ 1886.128044][T25743] ? netlink_getsockopt+0x590/0x590 [ 1886.133336][T25743] ____sys_sendmsg+0x5ba/0x960 [ 1886.138160][T25743] ? __asan_memset+0x22/0x40 [ 1886.142787][T25743] ? __sys_sendmsg_sock+0x30/0x30 [ 1886.147855][T25743] ? __import_iovec+0x5f2/0x850 [ 1886.152802][T25743] ? import_iovec+0x73/0xa0 [ 1886.157368][T25743] ___sys_sendmsg+0x2a6/0x360 [ 1886.162097][T25743] ? __sys_sendmsg+0x2a0/0x2a0 [ 1886.166946][T25743] __se_sys_sendmsg+0x1c2/0x2b0 [ 1886.171836][T25743] ? __x64_sys_sendmsg+0x80/0x80 [ 1886.176829][T25743] ? lockdep_hardirqs_on+0x98/0x150 [ 1886.182086][T25743] do_syscall_64+0x55/0xa0 [ 1886.186563][T25743] ? clear_bhb_loop+0x40/0x90 [ 1886.191289][T25743] ? clear_bhb_loop+0x40/0x90 [ 1886.196017][T25743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1886.201970][T25743] RIP: 0033:0x7f7ee139aeb9 [ 1886.206457][T25743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1886.226118][T25743] RSP: 002b:00007f7edf5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1886.234590][T25743] RAX: ffffffffffffffda RBX: 00007f7ee1615fa0 RCX: 00007f7ee139aeb9 [ 1886.242601][T25743] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1886.250613][T25743] RBP: 00007f7ee1408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1886.258625][T25743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1886.266653][T25743] R13: 00007f7ee1616038 R14: 00007f7ee1615fa0 R15: 00007ffeee54d578 [ 1886.274680][T25743] [ 1886.386442][T25745] netlink: 'syz.2.6755': attribute type 8 has an invalid length. [ 1886.419516][T25745] netlink: 209716 bytes leftover after parsing attributes in process `syz.2.6755'. [ 1886.516283][T25745] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1886.528549][T25745] CPU: 1 PID: 25745 Comm: syz.2.6755 Not tainted syzkaller #0 [ 1886.536072][T25745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1886.546170][T25745] Call Trace: [ 1886.549506][T25745] [ 1886.552489][T25745] dump_stack_lvl+0x18c/0x250 [ 1886.557254][T25745] ? show_regs_print_info+0x20/0x20 [ 1886.562508][T25745] ? load_image+0x400/0x400 [ 1886.567095][T25745] sysfs_warn_dup+0x8e/0xa0 [ 1886.571669][T25745] sysfs_do_create_link_sd+0xc0/0x110 [ 1886.577146][T25745] device_add_class_symlinks+0x1cf/0x240 [ 1886.582850][T25745] device_add+0x507/0xc20 [ 1886.587242][T25745] wiphy_register+0x1dad/0x2ae0 [ 1886.592179][T25745] ? cfg80211_event_work+0x40/0x40 [ 1886.597334][T25745] ? minstrel_ht_alloc+0x88a/0x990 [ 1886.602516][T25745] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1886.608655][T25745] ieee80211_register_hw+0x3464/0x4250 [ 1886.614213][T25745] ? ieee80211_tasklet_handler+0x20/0x20 [ 1886.619950][T25745] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1886.625908][T25745] ? __debug_object_init+0xec/0x450 [ 1886.631172][T25745] ? __asan_memset+0x22/0x40 [ 1886.635821][T25745] ? __hrtimer_init+0x186/0x270 [ 1886.640737][T25745] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1886.646547][T25745] ? mac80211_hwsim_free+0x220/0x220 [ 1886.651924][T25745] ? rcu_is_watching+0x15/0xb0 [ 1886.656747][T25745] ? kstrndup+0xbd/0x140 [ 1886.661061][T25745] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1886.666248][T25745] ? __nla_validate+0x50/0x50 [ 1886.671002][T25745] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1886.677412][T25745] ? __nla_parse+0x40/0x50 [ 1886.681897][T25745] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1886.688291][T25745] genl_family_rcv_msg_doit+0x211/0x310 [ 1886.693894][T25745] ? end_current_label_crit_section+0x170/0x170 [ 1886.700196][T25745] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1886.706183][T25745] ? bpf_lsm_capable+0x9/0x10 [ 1886.710950][T25745] ? security_capable+0x89/0xb0 [ 1886.715872][T25745] genl_rcv_msg+0x619/0x7a0 [ 1886.720447][T25745] ? genl_bind+0x360/0x360 [ 1886.724930][T25745] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1886.731352][T25745] netlink_rcv_skb+0x241/0x4d0 [ 1886.736184][T25745] ? genl_bind+0x360/0x360 [ 1886.740667][T25745] ? netlink_ack+0x1180/0x1180 [ 1886.745504][T25745] ? __lock_acquire+0x7d40/0x7d40 [ 1886.750596][T25745] ? down_read+0x1ac/0x2e0 [ 1886.755085][T25745] genl_rcv+0x28/0x40 [ 1886.759126][T25745] netlink_unicast+0x751/0x8d0 [ 1886.763973][T25745] netlink_sendmsg+0x8d0/0xbf0 [ 1886.768826][T25745] ? netlink_getsockopt+0x590/0x590 [ 1886.774096][T25745] ? aa_sock_msg_perm+0x94/0x150 [ 1886.779101][T25745] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1886.784447][T25745] ? security_socket_sendmsg+0x80/0xa0 [ 1886.789953][T25745] ? netlink_getsockopt+0x590/0x590 [ 1886.795221][T25745] ____sys_sendmsg+0x5ba/0x960 [ 1886.800153][T25745] ? __asan_memset+0x22/0x40 [ 1886.804801][T25745] ? __sys_sendmsg_sock+0x30/0x30 [ 1886.809900][T25745] ? __import_iovec+0x5f2/0x850 [ 1886.814819][T25745] ? import_iovec+0x73/0xa0 [ 1886.819382][T25745] ___sys_sendmsg+0x2a6/0x360 [ 1886.824114][T25745] ? __sys_sendmsg+0x2a0/0x2a0 [ 1886.828977][T25745] __se_sys_sendmsg+0x1c2/0x2b0 [ 1886.833880][T25745] ? __x64_sys_sendmsg+0x80/0x80 [ 1886.838880][T25745] ? lockdep_hardirqs_on+0x98/0x150 [ 1886.844131][T25745] do_syscall_64+0x55/0xa0 [ 1886.848598][T25745] ? clear_bhb_loop+0x40/0x90 [ 1886.853318][T25745] ? clear_bhb_loop+0x40/0x90 [ 1886.858034][T25745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1886.863965][T25745] RIP: 0033:0x7f575339aeb9 [ 1886.868419][T25745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1886.888073][T25745] RSP: 002b:00007f575429e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1886.896557][T25745] RAX: ffffffffffffffda RBX: 00007f5753615fa0 RCX: 00007f575339aeb9 [ 1886.904562][T25745] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1886.912576][T25745] RBP: 00007f5753408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1886.920567][T25745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1886.928566][T25745] R13: 00007f5753616038 R14: 00007f5753615fa0 R15: 00007ffd275f5948 [ 1886.936579][T25745] [ 1887.121448][T25759] netlink: 'syz.2.6758': attribute type 2 has an invalid length. [ 1887.135800][T25759] netlink: 'syz.2.6758': attribute type 8 has an invalid length. [ 1887.145287][T25759] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6758'. [ 1887.334709][T25762] netlink: 'syz.3.6759': attribute type 8 has an invalid length. [ 1887.614366][T25768] netlink: 'syz.3.6761': attribute type 8 has an invalid length. [ 1887.633657][T25768] netlink: 209716 bytes leftover after parsing attributes in process `syz.3.6761'. [ 1887.713821][T25772] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6769'. [ 1887.752610][T25768] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1887.781834][T25768] CPU: 0 PID: 25768 Comm: syz.3.6761 Not tainted syzkaller #0 [ 1887.789379][T25768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1887.799574][T25768] Call Trace: [ 1887.802903][T25768] [ 1887.805872][T25768] dump_stack_lvl+0x18c/0x250 [ 1887.810623][T25768] ? show_regs_print_info+0x20/0x20 [ 1887.815878][T25768] ? load_image+0x400/0x400 [ 1887.820452][T25768] sysfs_warn_dup+0x8e/0xa0 [ 1887.824984][T25768] sysfs_do_create_link_sd+0xc0/0x110 [ 1887.830404][T25768] device_add_class_symlinks+0x1cf/0x240 [ 1887.836075][T25768] device_add+0x507/0xc20 [ 1887.840450][T25768] wiphy_register+0x1dad/0x2ae0 [ 1887.845351][T25768] ? cfg80211_event_work+0x40/0x40 [ 1887.850490][T25768] ? minstrel_ht_alloc+0x88a/0x990 [ 1887.855648][T25768] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1887.861751][T25768] ieee80211_register_hw+0x3464/0x4250 [ 1887.867269][T25768] ? ieee80211_tasklet_handler+0x20/0x20 [ 1887.873547][T25768] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1887.879467][T25768] ? __debug_object_init+0xec/0x450 [ 1887.884693][T25768] ? __asan_memset+0x22/0x40 [ 1887.889310][T25768] ? __hrtimer_init+0x186/0x270 [ 1887.894272][T25768] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1887.900054][T25768] ? mac80211_hwsim_free+0x220/0x220 [ 1887.905379][T25768] ? rcu_is_watching+0x15/0xb0 [ 1887.910181][T25768] ? kstrndup+0xbd/0x140 [ 1887.914452][T25768] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1887.919619][T25768] ? mark_lock+0x94/0x320 [ 1887.923979][T25768] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1887.930376][T25768] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1887.936556][T25768] ? lockdep_hardirqs_on+0x98/0x150 [ 1887.941777][T25768] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1887.947974][T25768] genl_family_rcv_msg_doit+0x211/0x310 [ 1887.953581][T25768] ? end_current_label_crit_section+0x170/0x170 [ 1887.959863][T25768] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1887.965826][T25768] ? bpf_lsm_capable+0x9/0x10 [ 1887.970539][T25768] ? security_capable+0x89/0xb0 [ 1887.975425][T25768] genl_rcv_msg+0x619/0x7a0 [ 1887.979975][T25768] ? genl_bind+0x360/0x360 [ 1887.984421][T25768] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1887.990427][T25768] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1887.996789][T25768] ? ref_tracker_free+0x690/0x840 [ 1888.001846][T25768] netlink_rcv_skb+0x241/0x4d0 [ 1888.006635][T25768] ? genl_bind+0x360/0x360 [ 1888.011082][T25768] ? netlink_ack+0x1180/0x1180 [ 1888.015887][T25768] ? __lock_acquire+0x7d40/0x7d40 [ 1888.020947][T25768] ? down_read+0x1ac/0x2e0 [ 1888.025406][T25768] genl_rcv+0x28/0x40 [ 1888.029420][T25768] netlink_unicast+0x751/0x8d0 [ 1888.034231][T25768] netlink_sendmsg+0x8d0/0xbf0 [ 1888.039031][T25768] ? netlink_getsockopt+0x590/0x590 [ 1888.044263][T25768] ? aa_sock_msg_perm+0x94/0x150 [ 1888.049231][T25768] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1888.054541][T25768] ? security_socket_sendmsg+0x80/0xa0 [ 1888.060020][T25768] ? netlink_getsockopt+0x590/0x590 [ 1888.065249][T25768] ____sys_sendmsg+0x5ba/0x960 [ 1888.070054][T25768] ? __asan_memset+0x22/0x40 [ 1888.074675][T25768] ? __sys_sendmsg_sock+0x30/0x30 [ 1888.079777][T25768] ? __import_iovec+0x5f2/0x850 [ 1888.084666][T25768] ? import_iovec+0x73/0xa0 [ 1888.089203][T25768] ___sys_sendmsg+0x2a6/0x360 [ 1888.093909][T25768] ? __sys_sendmsg+0x2a0/0x2a0 [ 1888.098736][T25768] __se_sys_sendmsg+0x1c2/0x2b0 [ 1888.103608][T25768] ? __x64_sys_sendmsg+0x80/0x80 [ 1888.108598][T25768] ? lockdep_hardirqs_on+0x98/0x150 [ 1888.113828][T25768] do_syscall_64+0x55/0xa0 [ 1888.118295][T25768] ? clear_bhb_loop+0x40/0x90 [ 1888.122993][T25768] ? clear_bhb_loop+0x40/0x90 [ 1888.127712][T25768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1888.133636][T25768] RIP: 0033:0x7f5ecbf9aeb9 [ 1888.138078][T25768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1888.157719][T25768] RSP: 002b:00007f5ecce58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1888.166159][T25768] RAX: ffffffffffffffda RBX: 00007f5ecc215fa0 RCX: 00007f5ecbf9aeb9 [ 1888.174153][T25768] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1888.182151][T25768] RBP: 00007f5ecc008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1888.190158][T25768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1888.198153][T25768] R13: 00007f5ecc216038 R14: 00007f5ecc215fa0 R15: 00007ffde7015598 [ 1888.206161][T25768] [ 1888.925525][T25780] netlink: 209716 bytes leftover after parsing attributes in process `syz.1.6773'. [ 1888.926260][T25786] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6772'. [ 1889.049269][T25780] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1889.068353][T25780] CPU: 0 PID: 25780 Comm: syz.1.6773 Not tainted syzkaller #0 [ 1889.075900][T25780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1889.086005][T25780] Call Trace: [ 1889.089350][T25780] [ 1889.092324][T25780] dump_stack_lvl+0x18c/0x250 [ 1889.097053][T25780] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1889.103257][T25780] ? show_regs_print_info+0x20/0x20 [ 1889.108529][T25780] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1889.114764][T25780] sysfs_warn_dup+0x8e/0xa0 [ 1889.119325][T25780] sysfs_do_create_link_sd+0xc0/0x110 [ 1889.124754][T25780] device_add_class_symlinks+0x1cf/0x240 [ 1889.130462][T25780] device_add+0x507/0xc20 [ 1889.134846][T25780] wiphy_register+0x1dad/0x2ae0 [ 1889.139825][T25780] ? cfg80211_event_work+0x40/0x40 [ 1889.144964][T25780] ? minstrel_ht_alloc+0x88a/0x990 [ 1889.150113][T25780] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1889.156203][T25780] ieee80211_register_hw+0x3464/0x4250 [ 1889.161702][T25780] ? ieee80211_tasklet_handler+0x20/0x20 [ 1889.167369][T25780] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1889.173298][T25780] ? __debug_object_init+0xec/0x450 [ 1889.178552][T25780] ? __asan_memset+0x22/0x40 [ 1889.183170][T25780] ? __hrtimer_init+0x186/0x270 [ 1889.188052][T25780] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1889.193819][T25780] ? mac80211_hwsim_free+0x220/0x220 [ 1889.199132][T25780] ? rcu_is_watching+0x15/0xb0 [ 1889.204007][T25780] ? kstrndup+0xbd/0x140 [ 1889.208296][T25780] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1889.213440][T25780] ? mark_lock+0x94/0x320 [ 1889.217798][T25780] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1889.223817][T25780] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1889.230169][T25780] ? lockdep_hardirqs_on+0x98/0x150 [ 1889.235389][T25780] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1889.241572][T25780] ? genl_family_rcv_msg_attrs_parse+0x1d0/0x290 [ 1889.247963][T25780] genl_family_rcv_msg_doit+0x211/0x310 [ 1889.253547][T25780] ? end_current_label_crit_section+0x170/0x170 [ 1889.259824][T25780] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1889.265758][T25780] ? bpf_lsm_capable+0x9/0x10 [ 1889.270466][T25780] ? security_capable+0x89/0xb0 [ 1889.275365][T25780] genl_rcv_msg+0x619/0x7a0 [ 1889.279911][T25780] ? genl_bind+0x360/0x360 [ 1889.284363][T25780] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1889.290725][T25780] ? perf_trace_lock+0xfc/0x3b0 [ 1889.295611][T25780] netlink_rcv_skb+0x241/0x4d0 [ 1889.300415][T25780] ? genl_bind+0x360/0x360 [ 1889.304862][T25780] ? netlink_ack+0x1180/0x1180 [ 1889.309670][T25780] ? __lock_acquire+0x7d40/0x7d40 [ 1889.314721][T25780] ? down_read+0x1ac/0x2e0 [ 1889.319164][T25780] genl_rcv+0x28/0x40 [ 1889.323174][T25780] netlink_unicast+0x751/0x8d0 [ 1889.327976][T25780] netlink_sendmsg+0x8d0/0xbf0 [ 1889.332777][T25780] ? netlink_getsockopt+0x590/0x590 [ 1889.337998][T25780] ? aa_sock_msg_perm+0x94/0x150 [ 1889.342963][T25780] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1889.348287][T25780] ? security_socket_sendmsg+0x80/0xa0 [ 1889.353766][T25780] ? netlink_getsockopt+0x590/0x590 [ 1889.359010][T25780] ____sys_sendmsg+0x5ba/0x960 [ 1889.363819][T25780] ? __asan_memset+0x22/0x40 [ 1889.368436][T25780] ? __sys_sendmsg_sock+0x30/0x30 [ 1889.373490][T25780] ? __import_iovec+0x5f2/0x850 [ 1889.378380][T25780] ? import_iovec+0x73/0xa0 [ 1889.382923][T25780] ___sys_sendmsg+0x2a6/0x360 [ 1889.387628][T25780] ? __sys_sendmsg+0x2a0/0x2a0 [ 1889.392433][T25780] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1889.398727][T25780] __se_sys_sendmsg+0x1c2/0x2b0 [ 1889.403599][T25780] ? __x64_sys_sendmsg+0x80/0x80 [ 1889.408582][T25780] do_syscall_64+0x55/0xa0 [ 1889.413021][T25780] ? clear_bhb_loop+0x40/0x90 [ 1889.417717][T25780] ? clear_bhb_loop+0x40/0x90 [ 1889.422429][T25780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1889.428346][T25780] RIP: 0033:0x7f7ee139aeb9 [ 1889.432793][T25780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1889.452439][T25780] RSP: 002b:00007f7edf5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1889.460887][T25780] RAX: ffffffffffffffda RBX: 00007f7ee1615fa0 RCX: 00007f7ee139aeb9 [ 1889.468882][T25780] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1889.476870][T25780] RBP: 00007f7ee1408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1889.484869][T25780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1889.492875][T25780] R13: 00007f7ee1616038 R14: 00007f7ee1615fa0 R15: 00007ffeee54d578 [ 1889.500885][T25780] [ 1890.984653][T25816] validate_nla: 11 callbacks suppressed [ 1890.984700][T25816] netlink: 'syz.1.6776': attribute type 8 has an invalid length. [ 1891.024549][T25816] netlink: 209716 bytes leftover after parsing attributes in process `syz.1.6776'. [ 1891.116036][T25816] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1891.142715][T25816] CPU: 0 PID: 25816 Comm: syz.1.6776 Not tainted syzkaller #0 [ 1891.150275][T25816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1891.160374][T25816] Call Trace: [ 1891.163696][T25816] [ 1891.166684][T25816] dump_stack_lvl+0x18c/0x250 [ 1891.171435][T25816] ? show_regs_print_info+0x20/0x20 [ 1891.176696][T25816] ? load_image+0x400/0x400 [ 1891.181281][T25816] sysfs_warn_dup+0x8e/0xa0 [ 1891.185851][T25816] sysfs_do_create_link_sd+0xc0/0x110 [ 1891.191288][T25816] device_add_class_symlinks+0x1cf/0x240 [ 1891.196979][T25816] device_add+0x507/0xc20 [ 1891.201359][T25816] wiphy_register+0x1dad/0x2ae0 [ 1891.206276][T25816] ? cfg80211_event_work+0x40/0x40 [ 1891.211423][T25816] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1891.217630][T25816] ieee80211_register_hw+0x3464/0x4250 [ 1891.223142][T25816] ? ieee80211_tasklet_handler+0x20/0x20 [ 1891.228806][T25816] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1891.234737][T25816] ? __debug_object_init+0xec/0x450 [ 1891.239973][T25816] ? __asan_memset+0x22/0x40 [ 1891.244595][T25816] ? __hrtimer_init+0x186/0x270 [ 1891.249475][T25816] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1891.255262][T25816] ? mac80211_hwsim_free+0x220/0x220 [ 1891.260591][T25816] ? rcu_is_watching+0x15/0xb0 [ 1891.265399][T25816] ? kstrndup+0xbd/0x140 [ 1891.269709][T25816] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1891.274882][T25816] ? __nla_validate+0x50/0x50 [ 1891.279603][T25816] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1891.285989][T25816] ? __nla_parse+0x40/0x50 [ 1891.290448][T25816] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1891.296809][T25816] genl_family_rcv_msg_doit+0x211/0x310 [ 1891.302396][T25816] ? end_current_label_crit_section+0x170/0x170 [ 1891.308708][T25816] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1891.314645][T25816] ? bpf_lsm_capable+0x9/0x10 [ 1891.319370][T25816] ? security_capable+0x89/0xb0 [ 1891.324273][T25816] genl_rcv_msg+0x619/0x7a0 [ 1891.328815][T25816] ? genl_bind+0x360/0x360 [ 1891.333258][T25816] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1891.339623][T25816] ? perf_trace_lock+0xfc/0x3b0 [ 1891.344517][T25816] netlink_rcv_skb+0x241/0x4d0 [ 1891.349314][T25816] ? genl_bind+0x360/0x360 [ 1891.353768][T25816] ? netlink_ack+0x1180/0x1180 [ 1891.358573][T25816] ? __lock_acquire+0x7d40/0x7d40 [ 1891.363621][T25816] ? down_read+0x1ac/0x2e0 [ 1891.368067][T25816] genl_rcv+0x28/0x40 [ 1891.372096][T25816] netlink_unicast+0x751/0x8d0 [ 1891.376902][T25816] netlink_sendmsg+0x8d0/0xbf0 [ 1891.381710][T25816] ? netlink_getsockopt+0x590/0x590 [ 1891.386953][T25816] ? aa_sock_msg_perm+0x94/0x150 [ 1891.391926][T25816] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1891.397264][T25816] ? security_socket_sendmsg+0x80/0xa0 [ 1891.402750][T25816] ? netlink_getsockopt+0x590/0x590 [ 1891.408009][T25816] ____sys_sendmsg+0x5ba/0x960 [ 1891.412855][T25816] ? __asan_memset+0x22/0x40 [ 1891.417485][T25816] ? __sys_sendmsg_sock+0x30/0x30 [ 1891.422543][T25816] ? __import_iovec+0x5f2/0x850 [ 1891.427431][T25816] ? import_iovec+0x73/0xa0 [ 1891.431973][T25816] ___sys_sendmsg+0x2a6/0x360 [ 1891.436677][T25816] ? rcu_read_unlock_special+0x470/0x470 [ 1891.442358][T25816] ? __sys_sendmsg+0x2a0/0x2a0 [ 1891.447196][T25816] __se_sys_sendmsg+0x1c2/0x2b0 [ 1891.452105][T25816] ? __x64_sys_sendmsg+0x80/0x80 [ 1891.457090][T25816] ? lockdep_hardirqs_on+0x98/0x150 [ 1891.462332][T25816] do_syscall_64+0x55/0xa0 [ 1891.466788][T25816] ? clear_bhb_loop+0x40/0x90 [ 1891.471492][T25816] ? clear_bhb_loop+0x40/0x90 [ 1891.476213][T25816] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1891.482133][T25816] RIP: 0033:0x7f7ee139aeb9 [ 1891.486584][T25816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1891.506220][T25816] RSP: 002b:00007f7edf5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1891.514660][T25816] RAX: ffffffffffffffda RBX: 00007f7ee1615fa0 RCX: 00007f7ee139aeb9 [ 1891.522684][T25816] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1891.530693][T25816] RBP: 00007f7ee1408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1891.538687][T25816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1891.546693][T25816] R13: 00007f7ee1616038 R14: 00007f7ee1615fa0 R15: 00007ffeee54d578 [ 1891.554703][T25816] [ 1891.739945][T25822] netlink: 'syz.3.6777': attribute type 8 has an invalid length. [ 1891.898213][T25824] netlink: 'syz.2.6778': attribute type 8 has an invalid length. [ 1891.976484][T25830] netlink: 'syz.1.6780': attribute type 2 has an invalid length. [ 1891.997708][T25830] netlink: 'syz.1.6780': attribute type 8 has an invalid length. [ 1892.005680][T25830] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6780'. [ 1892.063969][T25828] netlink: 'syz.0.6779': attribute type 8 has an invalid length. [ 1892.307029][T25835] netlink: 'syz.2.6783': attribute type 8 has an invalid length. [ 1892.360009][T25833] netlink: 'syz.3.6782': attribute type 8 has an invalid length. [ 1892.797848][T25844] netlink: 'syz.2.6787': attribute type 8 has an invalid length. [ 1892.806491][T25844] netlink: 209716 bytes leftover after parsing attributes in process `syz.2.6787'. [ 1892.951145][T25844] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1892.998760][T25844] CPU: 1 PID: 25844 Comm: syz.2.6787 Not tainted syzkaller #0 [ 1893.006302][T25844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1893.016865][T25844] Call Trace: [ 1893.020168][T25844] [ 1893.023112][T25844] dump_stack_lvl+0x18c/0x250 [ 1893.027827][T25844] ? show_regs_print_info+0x20/0x20 [ 1893.033050][T25844] ? load_image+0x400/0x400 [ 1893.037591][T25844] sysfs_warn_dup+0x8e/0xa0 [ 1893.042118][T25844] sysfs_do_create_link_sd+0xc0/0x110 [ 1893.047600][T25844] device_add_class_symlinks+0x1cf/0x240 [ 1893.053267][T25844] device_add+0x507/0xc20 [ 1893.057652][T25844] wiphy_register+0x1dad/0x2ae0 [ 1893.062553][T25844] ? cfg80211_event_work+0x40/0x40 [ 1893.067681][T25844] ? minstrel_ht_alloc+0x88a/0x990 [ 1893.072827][T25844] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1893.078939][T25844] ieee80211_register_hw+0x3464/0x4250 [ 1893.084468][T25844] ? ieee80211_tasklet_handler+0x20/0x20 [ 1893.090184][T25844] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1893.096206][T25844] ? __debug_object_init+0xec/0x450 [ 1893.101434][T25844] ? __asan_memset+0x22/0x40 [ 1893.106050][T25844] ? __hrtimer_init+0x186/0x270 [ 1893.111294][T25844] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1893.117063][T25844] ? mac80211_hwsim_free+0x220/0x220 [ 1893.122375][T25844] ? rcu_is_watching+0x15/0xb0 [ 1893.127162][T25844] ? kstrndup+0xbd/0x140 [ 1893.131441][T25844] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1893.136587][T25844] ? __nla_validate+0x50/0x50 [ 1893.141347][T25844] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1893.147732][T25844] ? __nla_parse+0x40/0x50 [ 1893.152180][T25844] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1893.158537][T25844] genl_family_rcv_msg_doit+0x211/0x310 [ 1893.164116][T25844] ? end_current_label_crit_section+0x170/0x170 [ 1893.170391][T25844] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1893.176321][T25844] ? bpf_lsm_capable+0x9/0x10 [ 1893.181035][T25844] ? security_capable+0x89/0xb0 [ 1893.185918][T25844] genl_rcv_msg+0x619/0x7a0 [ 1893.190458][T25844] ? genl_bind+0x360/0x360 [ 1893.194921][T25844] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1893.201299][T25844] ? perf_trace_lock+0xfc/0x3b0 [ 1893.206188][T25844] netlink_rcv_skb+0x241/0x4d0 [ 1893.211025][T25844] ? genl_bind+0x360/0x360 [ 1893.215486][T25844] ? netlink_ack+0x1180/0x1180 [ 1893.220292][T25844] ? __lock_acquire+0x7d40/0x7d40 [ 1893.225346][T25844] ? down_read+0x1ac/0x2e0 [ 1893.229804][T25844] genl_rcv+0x28/0x40 [ 1893.233815][T25844] netlink_unicast+0x751/0x8d0 [ 1893.238624][T25844] netlink_sendmsg+0x8d0/0xbf0 [ 1893.243428][T25844] ? netlink_getsockopt+0x590/0x590 [ 1893.248652][T25844] ? aa_sock_msg_perm+0x94/0x150 [ 1893.253618][T25844] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1893.258930][T25844] ? security_socket_sendmsg+0x80/0xa0 [ 1893.264415][T25844] ? netlink_getsockopt+0x590/0x590 [ 1893.269662][T25844] ____sys_sendmsg+0x5ba/0x960 [ 1893.274472][T25844] ? __asan_memset+0x22/0x40 [ 1893.279105][T25844] ? __sys_sendmsg_sock+0x30/0x30 [ 1893.284155][T25844] ? __import_iovec+0x5f2/0x850 [ 1893.289051][T25844] ? import_iovec+0x73/0xa0 [ 1893.293684][T25844] ___sys_sendmsg+0x2a6/0x360 [ 1893.298401][T25844] ? __sys_sendmsg+0x2a0/0x2a0 [ 1893.303234][T25844] __se_sys_sendmsg+0x1c2/0x2b0 [ 1893.308104][T25844] ? __x64_sys_sendmsg+0x80/0x80 [ 1893.313075][T25844] ? lockdep_hardirqs_on+0x98/0x150 [ 1893.318309][T25844] do_syscall_64+0x55/0xa0 [ 1893.322753][T25844] ? clear_bhb_loop+0x40/0x90 [ 1893.327453][T25844] ? clear_bhb_loop+0x40/0x90 [ 1893.332156][T25844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1893.338077][T25844] RIP: 0033:0x7f575339aeb9 [ 1893.342527][T25844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1893.362155][T25844] RSP: 002b:00007f575429e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1893.370605][T25844] RAX: ffffffffffffffda RBX: 00007f5753615fa0 RCX: 00007f575339aeb9 [ 1893.378598][T25844] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1893.386609][T25844] RBP: 00007f5753408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1893.394614][T25844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1893.402621][T25844] R13: 00007f5753616038 R14: 00007f5753615fa0 R15: 00007ffd275f5948 [ 1893.410637][T25844] [ 1894.745504][T25873] netlink: 'syz.2.6793': attribute type 2 has an invalid length. [ 1894.849928][T25873] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6793'. [ 1895.678915][T25888] netlink: 209716 bytes leftover after parsing attributes in process `syz.0.6797'. [ 1895.768936][T25888] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1895.786775][T25888] CPU: 1 PID: 25888 Comm: syz.0.6797 Not tainted syzkaller #0 [ 1895.794343][T25888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1895.804453][T25888] Call Trace: [ 1895.807775][T25888] [ 1895.810745][T25888] dump_stack_lvl+0x18c/0x250 [ 1895.815500][T25888] ? show_regs_print_info+0x20/0x20 [ 1895.820768][T25888] ? load_image+0x400/0x400 [ 1895.825356][T25888] sysfs_warn_dup+0x8e/0xa0 [ 1895.829938][T25888] sysfs_do_create_link_sd+0xc0/0x110 [ 1895.835372][T25888] device_add_class_symlinks+0x1cf/0x240 [ 1895.841194][T25888] device_add+0x507/0xc20 [ 1895.845613][T25888] wiphy_register+0x1dad/0x2ae0 [ 1895.850567][T25888] ? cfg80211_event_work+0x40/0x40 [ 1895.855752][T25888] ? minstrel_ht_alloc+0x88a/0x990 [ 1895.860941][T25888] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1895.867075][T25888] ieee80211_register_hw+0x3464/0x4250 [ 1895.872644][T25888] ? ieee80211_tasklet_handler+0x20/0x20 [ 1895.878341][T25888] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1895.884297][T25888] ? __debug_object_init+0xec/0x450 [ 1895.889601][T25888] ? __asan_memset+0x22/0x40 [ 1895.894258][T25888] ? __hrtimer_init+0x186/0x270 [ 1895.899157][T25888] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1895.904991][T25888] ? mac80211_hwsim_free+0x220/0x220 [ 1895.910310][T25888] ? rcu_is_watching+0x15/0xb0 [ 1895.915219][T25888] ? kstrndup+0xbd/0x140 [ 1895.919505][T25888] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1895.924652][T25888] ? __nla_validate+0x50/0x50 [ 1895.929368][T25888] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1895.935747][T25888] ? __nla_parse+0x40/0x50 [ 1895.940218][T25888] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1895.946582][T25888] genl_family_rcv_msg_doit+0x211/0x310 [ 1895.952170][T25888] ? end_current_label_crit_section+0x170/0x170 [ 1895.958458][T25888] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1895.964412][T25888] ? bpf_lsm_capable+0x9/0x10 [ 1895.969123][T25888] ? security_capable+0x89/0xb0 [ 1895.974073][T25888] genl_rcv_msg+0x619/0x7a0 [ 1895.978639][T25888] ? genl_bind+0x360/0x360 [ 1895.983099][T25888] ? perf_trace_lock+0xfc/0x3b0 [ 1895.987994][T25888] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1895.994438][T25888] ? perf_trace_lock+0xfc/0x3b0 [ 1895.999384][T25888] netlink_rcv_skb+0x241/0x4d0 [ 1896.004199][T25888] ? genl_bind+0x360/0x360 [ 1896.008774][T25888] ? netlink_ack+0x1180/0x1180 [ 1896.013615][T25888] ? __lock_acquire+0x7d40/0x7d40 [ 1896.018782][T25888] ? net_generic+0x1e/0x240 [ 1896.023343][T25888] ? down_read+0x1ac/0x2e0 [ 1896.027827][T25888] genl_rcv+0x28/0x40 [ 1896.031858][T25888] netlink_unicast+0x751/0x8d0 [ 1896.036676][T25888] netlink_sendmsg+0x8d0/0xbf0 [ 1896.041488][T25888] ? netlink_getsockopt+0x590/0x590 [ 1896.046723][T25888] ? aa_sock_msg_perm+0x94/0x150 [ 1896.051695][T25888] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1896.057006][T25888] ? security_socket_sendmsg+0x80/0xa0 [ 1896.062538][T25888] ? netlink_getsockopt+0x590/0x590 [ 1896.067805][T25888] ____sys_sendmsg+0x5ba/0x960 [ 1896.072634][T25888] ? __asan_memset+0x22/0x40 [ 1896.077260][T25888] ? __sys_sendmsg_sock+0x30/0x30 [ 1896.082324][T25888] ? __import_iovec+0x5f2/0x850 [ 1896.087219][T25888] ? import_iovec+0x73/0xa0 [ 1896.091771][T25888] ___sys_sendmsg+0x2a6/0x360 [ 1896.096483][T25888] ? __sys_sendmsg+0x2a0/0x2a0 [ 1896.101330][T25888] __se_sys_sendmsg+0x1c2/0x2b0 [ 1896.106207][T25888] ? __x64_sys_sendmsg+0x80/0x80 [ 1896.111189][T25888] ? lockdep_hardirqs_on+0x98/0x150 [ 1896.116425][T25888] do_syscall_64+0x55/0xa0 [ 1896.120871][T25888] ? clear_bhb_loop+0x40/0x90 [ 1896.125599][T25888] ? clear_bhb_loop+0x40/0x90 [ 1896.130377][T25888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1896.136358][T25888] RIP: 0033:0x7f12f019aeb9 [ 1896.140809][T25888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1896.160492][T25888] RSP: 002b:00007f12f10bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1896.168975][T25888] RAX: ffffffffffffffda RBX: 00007f12f0415fa0 RCX: 00007f12f019aeb9 [ 1896.176989][T25888] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1896.185009][T25888] RBP: 00007f12f0208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1896.193030][T25888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1896.201100][T25888] R13: 00007f12f0416038 R14: 00007f12f0415fa0 R15: 00007ffdb5e33d88 [ 1896.209125][T25888] [ 1896.542226][T25896] validate_nla: 4 callbacks suppressed [ 1896.542245][T25896] netlink: 'syz.2.6800': attribute type 8 has an invalid length. [ 1896.822905][T25901] netlink: 'syz.1.6802': attribute type 8 has an invalid length. [ 1896.893876][T25906] netlink: 'syz.2.6803': attribute type 2 has an invalid length. [ 1896.907799][T25906] netlink: 'syz.2.6803': attribute type 8 has an invalid length. [ 1896.916545][T25906] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6803'. [ 1897.129897][T25913] netlink: 'syz.1.6804': attribute type 8 has an invalid length. [ 1897.579936][T25919] netlink: 'syz.3.6808': attribute type 8 has an invalid length. [ 1897.660927][T25920] netlink: 'syz.1.6806': attribute type 8 has an invalid length. [ 1898.102139][T25929] netlink: 'syz.1.6810': attribute type 8 has an invalid length. [ 1898.123901][T25929] netlink: 209716 bytes leftover after parsing attributes in process `syz.1.6810'. [ 1898.195372][T25929] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1898.230054][T25929] CPU: 0 PID: 25929 Comm: syz.1.6810 Not tainted syzkaller #0 [ 1898.237616][T25929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1898.247807][T25929] Call Trace: [ 1898.251136][T25929] [ 1898.254100][T25929] dump_stack_lvl+0x18c/0x250 [ 1898.258837][T25929] ? show_regs_print_info+0x20/0x20 [ 1898.264086][T25929] ? load_image+0x400/0x400 [ 1898.268687][T25929] sysfs_warn_dup+0x8e/0xa0 [ 1898.273247][T25929] sysfs_do_create_link_sd+0xc0/0x110 [ 1898.278685][T25929] device_add_class_symlinks+0x1cf/0x240 [ 1898.284372][T25929] device_add+0x507/0xc20 [ 1898.288756][T25929] wiphy_register+0x1dad/0x2ae0 [ 1898.293682][T25929] ? cfg80211_event_work+0x40/0x40 [ 1898.298843][T25929] ? minstrel_ht_alloc+0x88a/0x990 [ 1898.304026][T25929] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1898.310156][T25929] ieee80211_register_hw+0x3464/0x4250 [ 1898.315720][T25929] ? ieee80211_tasklet_handler+0x20/0x20 [ 1898.321410][T25929] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1898.327370][T25929] ? __debug_object_init+0xec/0x450 [ 1898.332630][T25929] ? __asan_memset+0x22/0x40 [ 1898.337278][T25929] ? __hrtimer_init+0x186/0x270 [ 1898.342178][T25929] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1898.347977][T25929] ? mac80211_hwsim_free+0x220/0x220 [ 1898.353310][T25929] ? rcu_is_watching+0x15/0xb0 [ 1898.358120][T25929] ? kstrndup+0xbd/0x140 [ 1898.362402][T25929] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1898.367570][T25929] ? __nla_validate+0x50/0x50 [ 1898.372310][T25929] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1898.378765][T25929] ? __nla_parse+0x40/0x50 [ 1898.383217][T25929] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1898.389586][T25929] genl_family_rcv_msg_doit+0x211/0x310 [ 1898.395169][T25929] ? end_current_label_crit_section+0x170/0x170 [ 1898.401447][T25929] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1898.407382][T25929] ? bpf_lsm_capable+0x9/0x10 [ 1898.412088][T25929] ? security_capable+0x89/0xb0 [ 1898.416982][T25929] genl_rcv_msg+0x619/0x7a0 [ 1898.421564][T25929] ? genl_bind+0x360/0x360 [ 1898.426036][T25929] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1898.432404][T25929] ? perf_trace_lock+0xfc/0x3b0 [ 1898.437315][T25929] netlink_rcv_skb+0x241/0x4d0 [ 1898.442125][T25929] ? genl_bind+0x360/0x360 [ 1898.446596][T25929] ? netlink_ack+0x1180/0x1180 [ 1898.451412][T25929] ? __lock_acquire+0x7d40/0x7d40 [ 1898.456468][T25929] ? down_read+0x1ac/0x2e0 [ 1898.460914][T25929] genl_rcv+0x28/0x40 [ 1898.464927][T25929] netlink_unicast+0x751/0x8d0 [ 1898.469738][T25929] netlink_sendmsg+0x8d0/0xbf0 [ 1898.474542][T25929] ? netlink_getsockopt+0x590/0x590 [ 1898.479794][T25929] ? aa_sock_msg_perm+0x94/0x150 [ 1898.484771][T25929] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1898.490084][T25929] ? security_socket_sendmsg+0x80/0xa0 [ 1898.495829][T25929] ? netlink_getsockopt+0x590/0x590 [ 1898.501063][T25929] ____sys_sendmsg+0x5ba/0x960 [ 1898.505890][T25929] ? __asan_memset+0x22/0x40 [ 1898.510510][T25929] ? __sys_sendmsg_sock+0x30/0x30 [ 1898.515563][T25929] ? __import_iovec+0x5f2/0x850 [ 1898.520489][T25929] ? import_iovec+0x73/0xa0 [ 1898.525033][T25929] ___sys_sendmsg+0x2a6/0x360 [ 1898.529742][T25929] ? __sys_sendmsg+0x2a0/0x2a0 [ 1898.534570][T25929] __se_sys_sendmsg+0x1c2/0x2b0 [ 1898.539440][T25929] ? __x64_sys_sendmsg+0x80/0x80 [ 1898.544411][T25929] ? lockdep_hardirqs_on+0x98/0x150 [ 1898.549661][T25929] do_syscall_64+0x55/0xa0 [ 1898.554106][T25929] ? clear_bhb_loop+0x40/0x90 [ 1898.558831][T25929] ? clear_bhb_loop+0x40/0x90 [ 1898.563530][T25929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1898.569452][T25929] RIP: 0033:0x7f7ee139aeb9 [ 1898.573902][T25929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1898.593530][T25929] RSP: 002b:00007f7edf5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1898.601963][T25929] RAX: ffffffffffffffda RBX: 00007f7ee1615fa0 RCX: 00007f7ee139aeb9 [ 1898.609965][T25929] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1898.617952][T25929] RBP: 00007f7ee1408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1898.625935][T25929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1898.633924][T25929] R13: 00007f7ee1616038 R14: 00007f7ee1615fa0 R15: 00007ffeee54d578 [ 1898.641936][T25929] [ 1899.257222][T25939] netlink: 'syz.1.6812': attribute type 8 has an invalid length. [ 1899.506332][T25949] netlink: 'syz.1.6815': attribute type 2 has an invalid length. [ 1899.514796][T25949] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6815'. [ 1900.854005][T25972] netlink: 209716 bytes leftover after parsing attributes in process `syz.0.6821'. [ 1900.929054][T25972] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1900.949866][T25972] CPU: 1 PID: 25972 Comm: syz.0.6821 Not tainted syzkaller #0 [ 1900.957407][T25972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1900.967506][T25972] Call Trace: [ 1900.970835][T25972] [ 1900.973806][T25972] dump_stack_lvl+0x18c/0x250 [ 1900.978552][T25972] ? show_regs_print_info+0x20/0x20 [ 1900.983811][T25972] ? load_image+0x400/0x400 [ 1900.988376][T25972] sysfs_warn_dup+0x8e/0xa0 [ 1900.992946][T25972] sysfs_do_create_link_sd+0xc0/0x110 [ 1900.998373][T25972] device_add_class_symlinks+0x1cf/0x240 [ 1901.004099][T25972] device_add+0x507/0xc20 [ 1901.008495][T25972] wiphy_register+0x1dad/0x2ae0 [ 1901.013437][T25972] ? cfg80211_event_work+0x40/0x40 [ 1901.018614][T25972] ? minstrel_ht_alloc+0x88a/0x990 [ 1901.023801][T25972] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1901.029942][T25972] ieee80211_register_hw+0x3464/0x4250 [ 1901.035503][T25972] ? ieee80211_tasklet_handler+0x20/0x20 [ 1901.041200][T25972] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1901.047281][T25972] ? __debug_object_init+0xec/0x450 [ 1901.052551][T25972] ? __asan_memset+0x22/0x40 [ 1901.057264][T25972] ? __hrtimer_init+0x186/0x270 [ 1901.062182][T25972] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1901.068013][T25972] ? mac80211_hwsim_free+0x220/0x220 [ 1901.073356][T25972] ? rcu_is_watching+0x15/0xb0 [ 1901.078179][T25972] ? kstrndup+0xbd/0x140 [ 1901.082509][T25972] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1901.087682][T25972] ? mark_lock+0x94/0x320 [ 1901.092062][T25972] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1901.098111][T25972] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1901.104503][T25972] ? lockdep_hardirqs_on+0x98/0x150 [ 1901.109777][T25972] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1901.115995][T25972] ? genl_family_rcv_msg_attrs_parse+0x1ca/0x290 [ 1901.122388][T25972] genl_family_rcv_msg_doit+0x211/0x310 [ 1901.128064][T25972] ? end_current_label_crit_section+0x170/0x170 [ 1901.134398][T25972] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1901.140365][T25972] ? bpf_lsm_capable+0x9/0x10 [ 1901.145103][T25972] ? security_capable+0x89/0xb0 [ 1901.150032][T25972] genl_rcv_msg+0x619/0x7a0 [ 1901.154615][T25972] ? genl_bind+0x360/0x360 [ 1901.159088][T25972] ? perf_trace_lock+0xfc/0x3b0 [ 1901.164008][T25972] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1901.170413][T25972] ? perf_trace_lock+0xfc/0x3b0 [ 1901.175347][T25972] netlink_rcv_skb+0x241/0x4d0 [ 1901.180193][T25972] ? genl_bind+0x360/0x360 [ 1901.184662][T25972] ? netlink_ack+0x1180/0x1180 [ 1901.189503][T25972] ? __lock_acquire+0x7d40/0x7d40 [ 1901.194588][T25972] ? net_generic+0x1e/0x240 [ 1901.199179][T25972] ? down_read+0x1ac/0x2e0 [ 1901.203664][T25972] genl_rcv+0x28/0x40 [ 1901.207713][T25972] netlink_unicast+0x751/0x8d0 [ 1901.212567][T25972] netlink_sendmsg+0x8d0/0xbf0 [ 1901.217416][T25972] ? netlink_getsockopt+0x590/0x590 [ 1901.222678][T25972] ? aa_sock_msg_perm+0x94/0x150 [ 1901.227678][T25972] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1901.233018][T25972] ? security_socket_sendmsg+0x80/0xa0 [ 1901.238531][T25972] ? netlink_getsockopt+0x590/0x590 [ 1901.243798][T25972] ____sys_sendmsg+0x5ba/0x960 [ 1901.248630][T25972] ? __asan_memset+0x22/0x40 [ 1901.253280][T25972] ? __sys_sendmsg_sock+0x30/0x30 [ 1901.258359][T25972] ? __import_iovec+0x5f2/0x850 [ 1901.263283][T25972] ? import_iovec+0x73/0xa0 [ 1901.267858][T25972] ___sys_sendmsg+0x2a6/0x360 [ 1901.272587][T25972] ? __sys_sendmsg+0x2a0/0x2a0 [ 1901.277463][T25972] __se_sys_sendmsg+0x1c2/0x2b0 [ 1901.282370][T25972] ? __x64_sys_sendmsg+0x80/0x80 [ 1901.287383][T25972] ? lockdep_hardirqs_on+0x98/0x150 [ 1901.292690][T25972] do_syscall_64+0x55/0xa0 [ 1901.297167][T25972] ? clear_bhb_loop+0x40/0x90 [ 1901.301894][T25972] ? clear_bhb_loop+0x40/0x90 [ 1901.306625][T25972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1901.312570][T25972] RIP: 0033:0x7f12f019aeb9 [ 1901.317041][T25972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1901.336707][T25972] RSP: 002b:00007f12f10bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1901.345181][T25972] RAX: ffffffffffffffda RBX: 00007f12f0415fa0 RCX: 00007f12f019aeb9 [ 1901.353206][T25972] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1901.361229][T25972] RBP: 00007f12f0208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1901.369285][T25972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1901.377310][T25972] R13: 00007f12f0416038 R14: 00007f12f0415fa0 R15: 00007ffdb5e33d88 [ 1901.385360][T25972] [ 1901.784936][T25984] validate_nla: 6 callbacks suppressed [ 1901.784977][T25984] netlink: 'syz.2.6825': attribute type 2 has an invalid length. [ 1901.808388][T25984] netlink: 'syz.2.6825': attribute type 8 has an invalid length. [ 1901.816764][T25984] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6825'. [ 1901.913100][T25988] netlink: 'syz.0.6824': attribute type 8 has an invalid length. [ 1902.307405][T25993] netlink: 'syz.3.6827': attribute type 8 has an invalid length. [ 1902.328757][T25995] netlink: 'syz.0.6826': attribute type 8 has an invalid length. [ 1902.361382][T25997] netlink: 'syz.2.6828': attribute type 8 has an invalid length. [ 1902.552624][T25999] netlink: 'syz.0.6829': attribute type 8 has an invalid length. [ 1902.711309][T26003] netlink: 'syz.3.6830': attribute type 8 has an invalid length. [ 1903.261905][T26019] netlink: 'syz.0.6836': attribute type 2 has an invalid length. [ 1903.285447][T26014] netlink: 'syz.3.6835': attribute type 8 has an invalid length. [ 1903.293779][T26019] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6836'. [ 1905.607997][T26062] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6848'. [ 1906.962087][T26087] validate_nla: 11 callbacks suppressed [ 1906.962107][T26087] netlink: 'syz.2.6853': attribute type 8 has an invalid length. [ 1907.259570][T26093] netlink: 'syz.1.6864': attribute type 8 has an invalid length. [ 1907.353654][T26096] netlink: 'syz.2.6856': attribute type 8 has an invalid length. [ 1907.692821][T26103] netlink: 'syz.3.6860': attribute type 8 has an invalid length. [ 1907.726095][T26104] netlink: 'syz.2.6859': attribute type 8 has an invalid length. [ 1907.850978][T26108] netlink: 'syz.1.6861': attribute type 8 has an invalid length. [ 1908.154723][T26112] netlink: 'syz.3.6863': attribute type 8 has an invalid length. [ 1908.273273][T26116] netlink: 'syz.1.6866': attribute type 8 has an invalid length. [ 1908.338047][T26119] netlink: 'syz.2.6867': attribute type 8 has an invalid length. [ 1908.625508][T26124] netlink: 'syz.1.6877': attribute type 8 has an invalid length. [ 1909.694498][T26146] netlink: 209716 bytes leftover after parsing attributes in process `syz.2.6874'. [ 1909.727056][T26146] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1909.757025][T26146] CPU: 1 PID: 26146 Comm: syz.2.6874 Not tainted syzkaller #0 [ 1909.764582][T26146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1909.774679][T26146] Call Trace: [ 1909.778002][T26146] [ 1909.780958][T26146] dump_stack_lvl+0x18c/0x250 [ 1909.785679][T26146] ? show_regs_print_info+0x20/0x20 [ 1909.790913][T26146] ? load_image+0x400/0x400 [ 1909.795488][T26146] sysfs_warn_dup+0x8e/0xa0 [ 1909.800035][T26146] sysfs_do_create_link_sd+0xc0/0x110 [ 1909.805447][T26146] device_add_class_symlinks+0x1cf/0x240 [ 1909.811142][T26146] device_add+0x507/0xc20 [ 1909.815541][T26146] wiphy_register+0x1dad/0x2ae0 [ 1909.820442][T26146] ? cfg80211_event_work+0x40/0x40 [ 1909.825583][T26146] ? minstrel_ht_alloc+0x88a/0x990 [ 1909.830738][T26146] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1909.836833][T26146] ieee80211_register_hw+0x3464/0x4250 [ 1909.842357][T26146] ? ieee80211_tasklet_handler+0x20/0x20 [ 1909.848025][T26146] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1909.853970][T26146] ? __debug_object_init+0xec/0x450 [ 1909.859201][T26146] ? __asan_memset+0x22/0x40 [ 1909.863832][T26146] ? __hrtimer_init+0x186/0x270 [ 1909.868713][T26146] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1909.874490][T26146] ? mac80211_hwsim_free+0x220/0x220 [ 1909.879816][T26146] ? rcu_is_watching+0x15/0xb0 [ 1909.884642][T26146] ? kstrndup+0xbd/0x140 [ 1909.888932][T26146] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1909.894088][T26146] ? __nla_validate+0x50/0x50 [ 1909.898838][T26146] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1909.905243][T26146] ? __nla_parse+0x40/0x50 [ 1909.909719][T26146] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1909.916091][T26146] genl_family_rcv_msg_doit+0x211/0x310 [ 1909.921686][T26146] ? end_current_label_crit_section+0x170/0x170 [ 1909.927990][T26146] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1909.933959][T26146] ? bpf_lsm_capable+0x9/0x10 [ 1909.938682][T26146] ? security_capable+0x89/0xb0 [ 1909.943589][T26146] genl_rcv_msg+0x619/0x7a0 [ 1909.948145][T26146] ? genl_bind+0x360/0x360 [ 1909.952605][T26146] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1909.958623][T26146] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1909.964997][T26146] ? perf_trace_lock+0xfc/0x3b0 [ 1909.969897][T26146] netlink_rcv_skb+0x241/0x4d0 [ 1909.974707][T26146] ? genl_bind+0x360/0x360 [ 1909.979190][T26146] ? netlink_ack+0x1180/0x1180 [ 1909.984043][T26146] ? __lock_acquire+0x7d40/0x7d40 [ 1909.989117][T26146] ? down_read+0x1ac/0x2e0 [ 1909.993572][T26146] genl_rcv+0x28/0x40 [ 1909.997590][T26146] netlink_unicast+0x751/0x8d0 [ 1910.002402][T26146] netlink_sendmsg+0x8d0/0xbf0 [ 1910.007226][T26146] ? netlink_getsockopt+0x590/0x590 [ 1910.012467][T26146] ? aa_sock_msg_perm+0x94/0x150 [ 1910.017456][T26146] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1910.022784][T26146] ? security_socket_sendmsg+0x80/0xa0 [ 1910.028302][T26146] ? netlink_getsockopt+0x590/0x590 [ 1910.033536][T26146] ____sys_sendmsg+0x5ba/0x960 [ 1910.038377][T26146] ? __asan_memset+0x22/0x40 [ 1910.042996][T26146] ? __sys_sendmsg_sock+0x30/0x30 [ 1910.048048][T26146] ? __import_iovec+0x5f2/0x850 [ 1910.052944][T26146] ? import_iovec+0x73/0xa0 [ 1910.057482][T26146] ___sys_sendmsg+0x2a6/0x360 [ 1910.062195][T26146] ? __sys_sendmsg+0x2a0/0x2a0 [ 1910.067053][T26146] __se_sys_sendmsg+0x1c2/0x2b0 [ 1910.071953][T26146] ? __x64_sys_sendmsg+0x80/0x80 [ 1910.076958][T26146] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1910.082911][T26146] do_syscall_64+0x55/0xa0 [ 1910.087373][T26146] ? clear_bhb_loop+0x40/0x90 [ 1910.092081][T26146] ? clear_bhb_loop+0x40/0x90 [ 1910.096785][T26146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1910.102715][T26146] RIP: 0033:0x7f575339aeb9 [ 1910.107165][T26146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1910.126802][T26146] RSP: 002b:00007f575429e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1910.135245][T26146] RAX: ffffffffffffffda RBX: 00007f5753615fa0 RCX: 00007f575339aeb9 [ 1910.143251][T26146] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1910.151259][T26146] RBP: 00007f5753408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1910.159259][T26146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1910.167257][T26146] R13: 00007f5753616038 R14: 00007f5753615fa0 R15: 00007ffd275f5948 [ 1910.175266][T26146] [ 1911.542406][T26178] netlink: 209716 bytes leftover after parsing attributes in process `syz.3.6888'. [ 1911.583285][T26178] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1911.592184][T26178] CPU: 1 PID: 26178 Comm: syz.3.6888 Not tainted syzkaller #0 [ 1911.599710][T26178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1911.609804][T26178] Call Trace: [ 1911.613122][T26178] [ 1911.616092][T26178] dump_stack_lvl+0x18c/0x250 [ 1911.620824][T26178] ? show_regs_print_info+0x20/0x20 [ 1911.626076][T26178] ? load_image+0x400/0x400 [ 1911.630751][T26178] sysfs_warn_dup+0x8e/0xa0 [ 1911.635311][T26178] sysfs_do_create_link_sd+0xc0/0x110 [ 1911.640739][T26178] device_add_class_symlinks+0x1cf/0x240 [ 1911.646447][T26178] device_add+0x507/0xc20 [ 1911.650838][T26178] wiphy_register+0x1dad/0x2ae0 [ 1911.655768][T26178] ? cfg80211_event_work+0x40/0x40 [ 1911.660920][T26178] ? minstrel_ht_alloc+0x88a/0x990 [ 1911.666093][T26178] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1911.672216][T26178] ieee80211_register_hw+0x3464/0x4250 [ 1911.677751][T26178] ? ieee80211_tasklet_handler+0x20/0x20 [ 1911.683432][T26178] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1911.689372][T26178] ? __debug_object_init+0xec/0x450 [ 1911.694622][T26178] ? __asan_memset+0x22/0x40 [ 1911.699287][T26178] ? __hrtimer_init+0x186/0x270 [ 1911.704173][T26178] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1911.709975][T26178] ? mac80211_hwsim_free+0x220/0x220 [ 1911.715325][T26178] ? rcu_is_watching+0x15/0xb0 [ 1911.720136][T26178] ? kstrndup+0xbd/0x140 [ 1911.724418][T26178] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1911.729576][T26178] ? mark_lock+0x94/0x320 [ 1911.733948][T26178] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1911.739982][T26178] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1911.746391][T26178] ? lockdep_hardirqs_on+0x98/0x150 [ 1911.751646][T26178] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1911.757869][T26178] ? genl_family_rcv_msg_attrs_parse+0x20a/0x290 [ 1911.764244][T26178] ? __sanitizer_cov_trace_pc+0x5c/0x60 [ 1911.769865][T26178] genl_family_rcv_msg_doit+0x211/0x310 [ 1911.775478][T26178] ? end_current_label_crit_section+0x170/0x170 [ 1911.781782][T26178] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1911.787765][T26178] ? bpf_lsm_capable+0x9/0x10 [ 1911.792510][T26178] ? security_capable+0x89/0xb0 [ 1911.797413][T26178] genl_rcv_msg+0x619/0x7a0 [ 1911.801973][T26178] ? genl_bind+0x360/0x360 [ 1911.806440][T26178] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1911.812470][T26178] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1911.818863][T26178] ? perf_trace_lock+0xfc/0x3b0 [ 1911.823776][T26178] netlink_rcv_skb+0x241/0x4d0 [ 1911.828592][T26178] ? genl_bind+0x360/0x360 [ 1911.833072][T26178] ? netlink_ack+0x1180/0x1180 [ 1911.837905][T26178] ? __lock_acquire+0x7d40/0x7d40 [ 1911.843002][T26178] ? down_read+0x1ac/0x2e0 [ 1911.847487][T26178] genl_rcv+0x28/0x40 [ 1911.851537][T26178] netlink_unicast+0x751/0x8d0 [ 1911.856444][T26178] netlink_sendmsg+0x8d0/0xbf0 [ 1911.861279][T26178] ? netlink_getsockopt+0x590/0x590 [ 1911.866591][T26178] ? aa_sock_msg_perm+0x94/0x150 [ 1911.871630][T26178] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1911.877014][T26178] ? security_socket_sendmsg+0x80/0xa0 [ 1911.882550][T26178] ? netlink_getsockopt+0x590/0x590 [ 1911.887806][T26178] ____sys_sendmsg+0x5ba/0x960 [ 1911.892653][T26178] ? __asan_memset+0x22/0x40 [ 1911.897318][T26178] ? __sys_sendmsg_sock+0x30/0x30 [ 1911.902444][T26178] ? __import_iovec+0x5f2/0x850 [ 1911.907381][T26178] ? import_iovec+0x73/0xa0 [ 1911.911970][T26178] ___sys_sendmsg+0x2a6/0x360 [ 1911.916724][T26178] ? __sys_sendmsg+0x2a0/0x2a0 [ 1911.921609][T26178] __se_sys_sendmsg+0x1c2/0x2b0 [ 1911.926565][T26178] ? __x64_sys_sendmsg+0x80/0x80 [ 1911.931585][T26178] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1911.937546][T26178] do_syscall_64+0x55/0xa0 [ 1911.942024][T26178] ? clear_bhb_loop+0x40/0x90 [ 1911.946804][T26178] ? clear_bhb_loop+0x40/0x90 [ 1911.951558][T26178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1911.957501][T26178] RIP: 0033:0x7f5ecbf9aeb9 [ 1911.961963][T26178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1911.981629][T26178] RSP: 002b:00007f5ecce58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1911.990117][T26178] RAX: ffffffffffffffda RBX: 00007f5ecc215fa0 RCX: 00007f5ecbf9aeb9 [ 1911.998138][T26178] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1912.006158][T26178] RBP: 00007f5ecc008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1912.014181][T26178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1912.022204][T26178] R13: 00007f5ecc216038 R14: 00007f5ecc215fa0 R15: 00007ffde7015598 [ 1912.030254][T26178] [ 1912.620025][T26191] validate_nla: 13 callbacks suppressed [ 1912.620047][T26191] netlink: 'syz.3.6890': attribute type 8 has an invalid length. [ 1912.984677][T26195] netlink: 'syz.3.6892': attribute type 8 has an invalid length. [ 1913.044230][T26200] netlink: 'syz.2.6893': attribute type 8 has an invalid length. [ 1913.273954][T26204] netlink: 'syz.3.6895': attribute type 8 has an invalid length. [ 1913.307734][T26202] netlink: 'syz.1.6894': attribute type 8 has an invalid length. [ 1913.730588][T26211] netlink: 'syz.1.6899': attribute type 8 has an invalid length. [ 1913.787883][T26211] netlink: 209716 bytes leftover after parsing attributes in process `syz.1.6899'. [ 1913.934111][T26211] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1913.953712][T26211] CPU: 1 PID: 26211 Comm: syz.1.6899 Not tainted syzkaller #0 [ 1913.961260][T26211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1913.971361][T26211] Call Trace: [ 1913.974683][T26211] [ 1913.977664][T26211] dump_stack_lvl+0x18c/0x250 [ 1913.982406][T26211] ? show_regs_print_info+0x20/0x20 [ 1913.987664][T26211] ? load_image+0x400/0x400 [ 1913.992239][T26211] sysfs_warn_dup+0x8e/0xa0 [ 1913.996791][T26211] sysfs_do_create_link_sd+0xc0/0x110 [ 1914.002215][T26211] device_add_class_symlinks+0x1cf/0x240 [ 1914.007916][T26211] device_add+0x507/0xc20 [ 1914.012310][T26211] wiphy_register+0x1dad/0x2ae0 [ 1914.017237][T26211] ? cfg80211_event_work+0x40/0x40 [ 1914.022396][T26211] ? minstrel_ht_alloc+0x88a/0x990 [ 1914.027566][T26211] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1914.033691][T26211] ieee80211_register_hw+0x3464/0x4250 [ 1914.039214][T26211] ? ieee80211_tasklet_handler+0x20/0x20 [ 1914.044878][T26211] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1914.050803][T26211] ? __debug_object_init+0xec/0x450 [ 1914.056056][T26211] ? __asan_memset+0x22/0x40 [ 1914.060670][T26211] ? __hrtimer_init+0x186/0x270 [ 1914.065544][T26211] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1914.071332][T26211] ? mac80211_hwsim_free+0x220/0x220 [ 1914.076656][T26211] ? rcu_is_watching+0x15/0xb0 [ 1914.081486][T26211] ? kstrndup+0xbd/0x140 [ 1914.085767][T26211] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1914.090913][T26211] ? __nla_validate+0x50/0x50 [ 1914.095631][T26211] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1914.102025][T26211] ? __nla_parse+0x40/0x50 [ 1914.106481][T26211] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1914.112839][T26211] genl_family_rcv_msg_doit+0x211/0x310 [ 1914.118433][T26211] ? end_current_label_crit_section+0x170/0x170 [ 1914.124719][T26211] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1914.130741][T26211] ? bpf_lsm_capable+0x9/0x10 [ 1914.135449][T26211] ? security_capable+0x89/0xb0 [ 1914.140329][T26211] genl_rcv_msg+0x619/0x7a0 [ 1914.144883][T26211] ? genl_bind+0x360/0x360 [ 1914.149354][T26211] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1914.155372][T26211] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1914.161738][T26211] ? perf_trace_lock+0xfc/0x3b0 [ 1914.166633][T26211] netlink_rcv_skb+0x241/0x4d0 [ 1914.171426][T26211] ? genl_bind+0x360/0x360 [ 1914.175884][T26211] ? netlink_ack+0x1180/0x1180 [ 1914.180798][T26211] ? __lock_acquire+0x7d40/0x7d40 [ 1914.185870][T26211] ? down_read+0x1ac/0x2e0 [ 1914.190335][T26211] genl_rcv+0x28/0x40 [ 1914.194349][T26211] netlink_unicast+0x751/0x8d0 [ 1914.199158][T26211] netlink_sendmsg+0x8d0/0xbf0 [ 1914.203995][T26211] ? netlink_getsockopt+0x590/0x590 [ 1914.209234][T26211] ? aa_sock_msg_perm+0x94/0x150 [ 1914.214204][T26211] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1914.219519][T26211] ? security_socket_sendmsg+0x80/0xa0 [ 1914.225021][T26211] ? netlink_getsockopt+0x590/0x590 [ 1914.230253][T26211] ____sys_sendmsg+0x5ba/0x960 [ 1914.235078][T26211] ? __asan_memset+0x22/0x40 [ 1914.239710][T26211] ? __sys_sendmsg_sock+0x30/0x30 [ 1914.244766][T26211] ? __import_iovec+0x5f2/0x850 [ 1914.249664][T26211] ? import_iovec+0x73/0xa0 [ 1914.254208][T26211] ___sys_sendmsg+0x2a6/0x360 [ 1914.258913][T26211] ? __sys_sendmsg+0x2a0/0x2a0 [ 1914.263748][T26211] __se_sys_sendmsg+0x1c2/0x2b0 [ 1914.268634][T26211] ? __x64_sys_sendmsg+0x80/0x80 [ 1914.273614][T26211] ? lockdep_hardirqs_on+0x98/0x150 [ 1914.278849][T26211] do_syscall_64+0x55/0xa0 [ 1914.283292][T26211] ? clear_bhb_loop+0x40/0x90 [ 1914.287990][T26211] ? clear_bhb_loop+0x40/0x90 [ 1914.292693][T26211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1914.298616][T26211] RIP: 0033:0x7f7ee139aeb9 [ 1914.303055][T26211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1914.322679][T26211] RSP: 002b:00007f7edf5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1914.331131][T26211] RAX: ffffffffffffffda RBX: 00007f7ee1615fa0 RCX: 00007f7ee139aeb9 [ 1914.339126][T26211] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1914.347132][T26211] RBP: 00007f7ee1408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1914.355141][T26211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1914.363143][T26211] R13: 00007f7ee1616038 R14: 00007f7ee1615fa0 R15: 00007ffeee54d578 [ 1914.371151][T26211] [ 1914.763962][T26222] netlink: 'syz.1.6901': attribute type 8 has an invalid length. [ 1915.369751][T26232] netlink: 'syz.2.6904': attribute type 8 has an invalid length. [ 1915.694051][T26235] netlink: 'syz.3.6905': attribute type 8 has an invalid length. [ 1916.204000][T26247] netlink: 'syz.3.6908': attribute type 8 has an invalid length. [ 1916.272547][T26251] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6909'. [ 1916.355990][T26253] netlink: 209716 bytes leftover after parsing attributes in process `syz.0.6910'. [ 1916.432361][T26253] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1916.457662][T26253] CPU: 0 PID: 26253 Comm: syz.0.6910 Not tainted syzkaller #0 [ 1916.465219][T26253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1916.475327][T26253] Call Trace: [ 1916.478662][T26253] [ 1916.481643][T26253] dump_stack_lvl+0x18c/0x250 [ 1916.486412][T26253] ? show_regs_print_info+0x20/0x20 [ 1916.491668][T26253] ? load_image+0x400/0x400 [ 1916.496224][T26253] sysfs_warn_dup+0x8e/0xa0 [ 1916.500773][T26253] sysfs_do_create_link_sd+0xc0/0x110 [ 1916.506198][T26253] device_add_class_symlinks+0x1cf/0x240 [ 1916.511866][T26253] device_add+0x507/0xc20 [ 1916.516227][T26253] wiphy_register+0x1dad/0x2ae0 [ 1916.521115][T26253] ? cfg80211_event_work+0x40/0x40 [ 1916.526244][T26253] ? minstrel_ht_alloc+0x88a/0x990 [ 1916.531392][T26253] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1916.537489][T26253] ieee80211_register_hw+0x3464/0x4250 [ 1916.543000][T26253] ? ieee80211_tasklet_handler+0x20/0x20 [ 1916.548670][T26253] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1916.554601][T26253] ? __debug_object_init+0xec/0x450 [ 1916.559841][T26253] ? __asan_memset+0x22/0x40 [ 1916.564505][T26253] ? __hrtimer_init+0x186/0x270 [ 1916.569400][T26253] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1916.575184][T26253] ? mac80211_hwsim_free+0x220/0x220 [ 1916.580504][T26253] ? rcu_is_watching+0x15/0xb0 [ 1916.585310][T26253] ? kstrndup+0xbd/0x140 [ 1916.589591][T26253] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1916.594747][T26253] ? __nla_validate+0x50/0x50 [ 1916.599473][T26253] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1916.605851][T26253] ? __nla_parse+0x40/0x50 [ 1916.610304][T26253] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1916.616674][T26253] genl_family_rcv_msg_doit+0x211/0x310 [ 1916.622279][T26253] ? end_current_label_crit_section+0x170/0x170 [ 1916.628623][T26253] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1916.634646][T26253] ? bpf_lsm_capable+0x9/0x10 [ 1916.639368][T26253] ? security_capable+0x89/0xb0 [ 1916.644287][T26253] genl_rcv_msg+0x619/0x7a0 [ 1916.648859][T26253] ? genl_bind+0x360/0x360 [ 1916.653313][T26253] ? perf_trace_lock+0xfc/0x3b0 [ 1916.658208][T26253] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1916.664596][T26253] ? perf_trace_lock+0xfc/0x3b0 [ 1916.669501][T26253] netlink_rcv_skb+0x241/0x4d0 [ 1916.674310][T26253] ? genl_bind+0x360/0x360 [ 1916.678803][T26253] ? netlink_ack+0x1180/0x1180 [ 1916.683621][T26253] ? __lock_acquire+0x7d40/0x7d40 [ 1916.688677][T26253] ? net_generic+0x1e/0x240 [ 1916.693222][T26253] ? down_read+0x1ac/0x2e0 [ 1916.697682][T26253] genl_rcv+0x28/0x40 [ 1916.701711][T26253] netlink_unicast+0x751/0x8d0 [ 1916.706525][T26253] netlink_sendmsg+0x8d0/0xbf0 [ 1916.711336][T26253] ? netlink_getsockopt+0x590/0x590 [ 1916.716591][T26253] ? aa_sock_msg_perm+0x94/0x150 [ 1916.721568][T26253] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1916.726893][T26253] ? security_socket_sendmsg+0x80/0xa0 [ 1916.732379][T26253] ? netlink_getsockopt+0x590/0x590 [ 1916.737635][T26253] ____sys_sendmsg+0x5ba/0x960 [ 1916.742450][T26253] ? __asan_memset+0x22/0x40 [ 1916.747073][T26253] ? __sys_sendmsg_sock+0x30/0x30 [ 1916.752131][T26253] ? __import_iovec+0x5f2/0x850 [ 1916.757026][T26253] ? import_iovec+0x73/0xa0 [ 1916.761566][T26253] ___sys_sendmsg+0x2a6/0x360 [ 1916.766402][T26253] ? __sys_sendmsg+0x2a0/0x2a0 [ 1916.771226][T26253] ? __schedule+0x155b/0x45a0 [ 1916.775967][T26253] __se_sys_sendmsg+0x1c2/0x2b0 [ 1916.780893][T26253] ? __x64_sys_sendmsg+0x80/0x80 [ 1916.785905][T26253] ? lockdep_hardirqs_on+0x98/0x150 [ 1916.791136][T26253] do_syscall_64+0x55/0xa0 [ 1916.795588][T26253] ? clear_bhb_loop+0x40/0x90 [ 1916.800308][T26253] ? clear_bhb_loop+0x40/0x90 [ 1916.805019][T26253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1916.810937][T26253] RIP: 0033:0x7f12f019aeb9 [ 1916.815376][T26253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1916.835021][T26253] RSP: 002b:00007f12f10bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1916.843467][T26253] RAX: ffffffffffffffda RBX: 00007f12f0415fa0 RCX: 00007f12f019aeb9 [ 1916.851473][T26253] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1916.859472][T26253] RBP: 00007f12f0208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1916.867468][T26253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1916.875492][T26253] R13: 00007f12f0416038 R14: 00007f12f0415fa0 R15: 00007ffdb5e33d88 [ 1916.883532][T26253] [ 1918.597630][T26285] validate_nla: 3 callbacks suppressed [ 1918.597652][T26285] netlink: 'syz.3.6915': attribute type 8 has an invalid length. [ 1919.291737][T26294] netlink: 'syz.3.6917': attribute type 8 has an invalid length. [ 1919.896676][T26307] netlink: 'syz.3.6920': attribute type 8 has an invalid length. [ 1919.937760][T26307] netlink: 209716 bytes leftover after parsing attributes in process `syz.3.6920'. [ 1920.021881][T26307] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1920.077874][T26307] CPU: 0 PID: 26307 Comm: syz.3.6920 Not tainted syzkaller #0 [ 1920.085440][T26307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1920.095553][T26307] Call Trace: [ 1920.098868][T26307] [ 1920.101849][T26307] dump_stack_lvl+0x18c/0x250 [ 1920.106592][T26307] ? show_regs_print_info+0x20/0x20 [ 1920.111851][T26307] ? load_image+0x400/0x400 [ 1920.116428][T26307] sysfs_warn_dup+0x8e/0xa0 [ 1920.120986][T26307] sysfs_do_create_link_sd+0xc0/0x110 [ 1920.126421][T26307] device_add_class_symlinks+0x1cf/0x240 [ 1920.132113][T26307] device_add+0x507/0xc20 [ 1920.136508][T26307] wiphy_register+0x1dad/0x2ae0 [ 1920.141461][T26307] ? cfg80211_event_work+0x40/0x40 [ 1920.146638][T26307] ? minstrel_ht_alloc+0x88a/0x990 [ 1920.151814][T26307] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1920.157942][T26307] ieee80211_register_hw+0x3464/0x4250 [ 1920.163481][T26307] ? ieee80211_tasklet_handler+0x20/0x20 [ 1920.169162][T26307] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1920.175121][T26307] ? __debug_object_init+0xec/0x450 [ 1920.180376][T26307] ? __asan_memset+0x22/0x40 [ 1920.185001][T26307] ? __hrtimer_init+0x186/0x270 [ 1920.189883][T26307] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1920.195660][T26307] ? mac80211_hwsim_free+0x220/0x220 [ 1920.200978][T26307] ? rcu_is_watching+0x15/0xb0 [ 1920.205772][T26307] ? kstrndup+0xbd/0x140 [ 1920.210059][T26307] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1920.215210][T26307] ? __nla_validate+0x50/0x50 [ 1920.219944][T26307] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1920.226326][T26307] ? __nla_parse+0x40/0x50 [ 1920.230783][T26307] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1920.237138][T26307] genl_family_rcv_msg_doit+0x211/0x310 [ 1920.242719][T26307] ? end_current_label_crit_section+0x170/0x170 [ 1920.249001][T26307] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1920.254947][T26307] ? bpf_lsm_capable+0x9/0x10 [ 1920.259658][T26307] ? security_capable+0x89/0xb0 [ 1920.264550][T26307] genl_rcv_msg+0x619/0x7a0 [ 1920.269111][T26307] ? genl_bind+0x360/0x360 [ 1920.273559][T26307] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1920.279594][T26307] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1920.286003][T26307] ? perf_trace_lock+0xfc/0x3b0 [ 1920.290895][T26307] netlink_rcv_skb+0x241/0x4d0 [ 1920.295716][T26307] ? genl_bind+0x360/0x360 [ 1920.300169][T26307] ? netlink_ack+0x1180/0x1180 [ 1920.304983][T26307] ? __lock_acquire+0x7d40/0x7d40 [ 1920.310047][T26307] ? down_read+0x1ac/0x2e0 [ 1920.314497][T26307] genl_rcv+0x28/0x40 [ 1920.318528][T26307] netlink_unicast+0x751/0x8d0 [ 1920.323339][T26307] netlink_sendmsg+0x8d0/0xbf0 [ 1920.328162][T26307] ? netlink_getsockopt+0x590/0x590 [ 1920.333486][T26307] ? aa_sock_msg_perm+0x94/0x150 [ 1920.338475][T26307] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1920.343789][T26307] ? security_socket_sendmsg+0x80/0xa0 [ 1920.349275][T26307] ? netlink_getsockopt+0x590/0x590 [ 1920.354512][T26307] ____sys_sendmsg+0x5ba/0x960 [ 1920.359324][T26307] ? __asan_memset+0x22/0x40 [ 1920.363956][T26307] ? __sys_sendmsg_sock+0x30/0x30 [ 1920.369014][T26307] ? __import_iovec+0x5f2/0x850 [ 1920.373921][T26307] ? import_iovec+0x73/0xa0 [ 1920.378470][T26307] ___sys_sendmsg+0x2a6/0x360 [ 1920.383198][T26307] ? __sys_sendmsg+0x2a0/0x2a0 [ 1920.388089][T26307] __se_sys_sendmsg+0x1c2/0x2b0 [ 1920.392985][T26307] ? __x64_sys_sendmsg+0x80/0x80 [ 1920.397967][T26307] ? lockdep_hardirqs_on+0x98/0x150 [ 1920.403203][T26307] do_syscall_64+0x55/0xa0 [ 1920.407705][T26307] ? clear_bhb_loop+0x40/0x90 [ 1920.412436][T26307] ? clear_bhb_loop+0x40/0x90 [ 1920.417138][T26307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1920.423045][T26307] RIP: 0033:0x7f5ecbf9aeb9 [ 1920.427516][T26307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1920.447155][T26307] RSP: 002b:00007f5ecce58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1920.455599][T26307] RAX: ffffffffffffffda RBX: 00007f5ecc215fa0 RCX: 00007f5ecbf9aeb9 [ 1920.463596][T26307] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1920.471594][T26307] RBP: 00007f5ecc008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1920.479685][T26307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1920.487678][T26307] R13: 00007f5ecc216038 R14: 00007f5ecc215fa0 R15: 00007ffde7015598 [ 1920.495691][T26307] [ 1920.565807][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.572267][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.787354][T26318] netlink: 'syz.1.6922': attribute type 2 has an invalid length. [ 1920.835789][T26318] netlink: 'syz.1.6922': attribute type 8 has an invalid length. [ 1920.857406][T26318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6922'. [ 1923.171693][T26362] netlink: 'syz.0.6940': attribute type 8 has an invalid length. [ 1923.238664][T26358] netlink: 'syz.3.6931': attribute type 8 has an invalid length. [ 1923.322068][T26358] netlink: 209716 bytes leftover after parsing attributes in process `syz.3.6931'. [ 1923.366576][T26367] netlink: 'syz.1.6934': attribute type 2 has an invalid length. [ 1923.449155][T26367] netlink: 'syz.1.6934': attribute type 8 has an invalid length. [ 1923.487668][T26367] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6934'. [ 1923.549980][T26358] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1923.581608][T26358] CPU: 1 PID: 26358 Comm: syz.3.6931 Not tainted syzkaller #0 [ 1923.589162][T26358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1923.599283][T26358] Call Trace: [ 1923.602606][T26358] [ 1923.605579][T26358] dump_stack_lvl+0x18c/0x250 [ 1923.610337][T26358] ? show_regs_print_info+0x20/0x20 [ 1923.615605][T26358] ? load_image+0x400/0x400 [ 1923.620191][T26358] sysfs_warn_dup+0x8e/0xa0 [ 1923.624755][T26358] sysfs_do_create_link_sd+0xc0/0x110 [ 1923.630175][T26358] device_add_class_symlinks+0x1cf/0x240 [ 1923.635867][T26358] device_add+0x507/0xc20 [ 1923.640265][T26358] wiphy_register+0x1dad/0x2ae0 [ 1923.645216][T26358] ? cfg80211_event_work+0x40/0x40 [ 1923.650391][T26358] ? minstrel_ht_alloc+0x88a/0x990 [ 1923.655613][T26358] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1923.661750][T26358] ieee80211_register_hw+0x3464/0x4250 [ 1923.667310][T26358] ? ieee80211_tasklet_handler+0x20/0x20 [ 1923.673019][T26358] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1923.678989][T26358] ? __debug_object_init+0xec/0x450 [ 1923.684265][T26358] ? __asan_memset+0x22/0x40 [ 1923.688915][T26358] ? __hrtimer_init+0x186/0x270 [ 1923.693805][T26358] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1923.699665][T26358] ? mac80211_hwsim_free+0x220/0x220 [ 1923.704998][T26358] ? rcu_is_watching+0x15/0xb0 [ 1923.709802][T26358] ? kstrndup+0xbd/0x140 [ 1923.714096][T26358] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1923.719261][T26358] ? __nla_validate+0x50/0x50 [ 1923.723996][T26358] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1923.730405][T26358] ? __nla_parse+0x40/0x50 [ 1923.734862][T26358] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1923.741251][T26358] genl_family_rcv_msg_doit+0x211/0x310 [ 1923.746832][T26358] ? end_current_label_crit_section+0x170/0x170 [ 1923.753116][T26358] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1923.759100][T26358] ? bpf_lsm_capable+0x9/0x10 [ 1923.763841][T26358] ? security_capable+0x89/0xb0 [ 1923.768746][T26358] genl_rcv_msg+0x619/0x7a0 [ 1923.773330][T26358] ? genl_bind+0x360/0x360 [ 1923.777826][T26358] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1923.784405][T26358] netlink_rcv_skb+0x241/0x4d0 [ 1923.789231][T26358] ? genl_bind+0x360/0x360 [ 1923.793719][T26358] ? netlink_ack+0x1180/0x1180 [ 1923.798537][T26358] ? __lock_acquire+0x7d40/0x7d40 [ 1923.803602][T26358] ? down_read+0x1ac/0x2e0 [ 1923.808066][T26358] genl_rcv+0x28/0x40 [ 1923.812107][T26358] netlink_unicast+0x751/0x8d0 [ 1923.816928][T26358] netlink_sendmsg+0x8d0/0xbf0 [ 1923.821745][T26358] ? netlink_getsockopt+0x590/0x590 [ 1923.826985][T26358] ? aa_sock_msg_perm+0x94/0x150 [ 1923.831962][T26358] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1923.837304][T26358] ? security_socket_sendmsg+0x80/0xa0 [ 1923.842796][T26358] ? netlink_getsockopt+0x590/0x590 [ 1923.848040][T26358] ____sys_sendmsg+0x5ba/0x960 [ 1923.853289][T26358] ? __asan_memset+0x22/0x40 [ 1923.857922][T26358] ? __sys_sendmsg_sock+0x30/0x30 [ 1923.862996][T26358] ? __import_iovec+0x5f2/0x850 [ 1923.867898][T26358] ? import_iovec+0x73/0xa0 [ 1923.872460][T26358] ___sys_sendmsg+0x2a6/0x360 [ 1923.877187][T26358] ? __sys_sendmsg+0x2a0/0x2a0 [ 1923.882016][T26358] __se_sys_sendmsg+0x1c2/0x2b0 [ 1923.886893][T26358] ? __x64_sys_sendmsg+0x80/0x80 [ 1923.891869][T26358] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1923.897792][T26358] do_syscall_64+0x55/0xa0 [ 1923.902239][T26358] ? clear_bhb_loop+0x40/0x90 [ 1923.906937][T26358] ? clear_bhb_loop+0x40/0x90 [ 1923.911665][T26358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1923.917597][T26358] RIP: 0033:0x7f5ecbf9aeb9 [ 1923.922045][T26358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1923.941675][T26358] RSP: 002b:00007f5ecce58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1923.950115][T26358] RAX: ffffffffffffffda RBX: 00007f5ecc215fa0 RCX: 00007f5ecbf9aeb9 [ 1923.958121][T26358] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1923.966123][T26358] RBP: 00007f5ecc008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1923.974138][T26358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1923.982185][T26358] R13: 00007f5ecc216038 R14: 00007f5ecc215fa0 R15: 00007ffde7015598 [ 1923.990209][T26358] [ 1924.793097][T26388] netlink: 'syz.3.6938': attribute type 8 has an invalid length. [ 1924.807930][T26386] netlink: 'syz.2.6937': attribute type 8 has an invalid length. [ 1924.998838][T26390] netlink: 'syz.1.6939': attribute type 8 has an invalid length. [ 1926.933292][T26431] netlink: 'syz.1.6948': attribute type 2 has an invalid length. [ 1926.956628][T26431] netlink: 'syz.1.6948': attribute type 8 has an invalid length. [ 1926.962370][T26427] netlink: 'syz.0.6947': attribute type 8 has an invalid length. [ 1927.001748][T26431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6948'. [ 1927.345763][T26437] netlink: 'syz.0.6951': attribute type 8 has an invalid length. [ 1927.586835][T26441] netlink: 'syz.1.6952': attribute type 8 has an invalid length. [ 1927.606945][T26440] netlink: 'syz.3.6953': attribute type 8 has an invalid length. [ 1929.558872][T26474] netlink: 'syz.3.6960': attribute type 2 has an invalid length. [ 1929.637199][T26474] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6960'. [ 1930.296882][T26487] validate_nla: 2 callbacks suppressed [ 1930.296903][T26487] netlink: 'syz.3.6962': attribute type 8 has an invalid length. [ 1930.914223][T26494] netlink: 'syz.2.6963': attribute type 8 has an invalid length. [ 1933.003455][T26539] netlink: 'syz.1.6971': attribute type 8 has an invalid length. [ 1935.770254][T26588] netlink: 'syz.0.6991': attribute type 8 has an invalid length. [ 1937.151423][T26608] netlink: 'syz.1.6987': attribute type 8 has an invalid length. [ 1937.671156][T26618] netlink: 'syz.1.6999': attribute type 8 has an invalid length. [ 1938.167366][T26628] netlink: 'syz.1.6993': attribute type 8 has an invalid length. [ 1938.289314][T26630] netlink: 'syz.2.6995': attribute type 8 has an invalid length. [ 1938.578027][T26636] netlink: 'syz.1.6996': attribute type 8 has an invalid length. [ 1938.617440][T26636] netlink: 209716 bytes leftover after parsing attributes in process `syz.1.6996'. [ 1938.684581][T26636] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1938.724026][T26636] CPU: 1 PID: 26636 Comm: syz.1.6996 Not tainted syzkaller #0 [ 1938.731588][T26636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1938.741704][T26636] Call Trace: [ 1938.745025][T26636] [ 1938.748009][T26636] dump_stack_lvl+0x18c/0x250 [ 1938.752743][T26636] ? show_regs_print_info+0x20/0x20 [ 1938.757989][T26636] ? load_image+0x400/0x400 [ 1938.762545][T26636] sysfs_warn_dup+0x8e/0xa0 [ 1938.767117][T26636] sysfs_do_create_link_sd+0xc0/0x110 [ 1938.772545][T26636] device_add_class_symlinks+0x1cf/0x240 [ 1938.778229][T26636] device_add+0x507/0xc20 [ 1938.782602][T26636] wiphy_register+0x1dad/0x2ae0 [ 1938.787498][T26636] ? cfg80211_event_work+0x40/0x40 [ 1938.792647][T26636] ? minstrel_ht_alloc+0x88a/0x990 [ 1938.797805][T26636] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1938.803928][T26636] ieee80211_register_hw+0x3464/0x4250 [ 1938.809469][T26636] ? ieee80211_tasklet_handler+0x20/0x20 [ 1938.815134][T26636] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1938.821060][T26636] ? __debug_object_init+0xec/0x450 [ 1938.826318][T26636] ? __asan_memset+0x22/0x40 [ 1938.830936][T26636] ? __hrtimer_init+0x186/0x270 [ 1938.835813][T26636] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1938.841586][T26636] ? mac80211_hwsim_free+0x220/0x220 [ 1938.846916][T26636] ? rcu_is_watching+0x15/0xb0 [ 1938.851721][T26636] ? kstrndup+0xbd/0x140 [ 1938.856015][T26636] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1938.861181][T26636] ? __nla_validate+0x50/0x50 [ 1938.865898][T26636] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1938.872278][T26636] ? __nla_parse+0x40/0x50 [ 1938.876726][T26636] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1938.883083][T26636] genl_family_rcv_msg_doit+0x211/0x310 [ 1938.888661][T26636] ? end_current_label_crit_section+0x170/0x170 [ 1938.894963][T26636] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1938.900892][T26636] ? bpf_lsm_capable+0x9/0x10 [ 1938.905592][T26636] ? security_capable+0x89/0xb0 [ 1938.910479][T26636] genl_rcv_msg+0x619/0x7a0 [ 1938.915022][T26636] ? genl_bind+0x360/0x360 [ 1938.919474][T26636] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1938.925844][T26636] ? perf_trace_lock+0xfc/0x3b0 [ 1938.930737][T26636] netlink_rcv_skb+0x241/0x4d0 [ 1938.935533][T26636] ? genl_bind+0x360/0x360 [ 1938.939985][T26636] ? netlink_ack+0x1180/0x1180 [ 1938.944806][T26636] ? __lock_acquire+0x7d40/0x7d40 [ 1938.949862][T26636] ? down_read+0x1ac/0x2e0 [ 1938.954307][T26636] genl_rcv+0x28/0x40 [ 1938.958338][T26636] netlink_unicast+0x751/0x8d0 [ 1938.963148][T26636] netlink_sendmsg+0x8d0/0xbf0 [ 1938.967945][T26636] ? netlink_getsockopt+0x590/0x590 [ 1938.973173][T26636] ? aa_sock_msg_perm+0x94/0x150 [ 1938.978150][T26636] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1938.983462][T26636] ? security_socket_sendmsg+0x80/0xa0 [ 1938.988957][T26636] ? netlink_getsockopt+0x590/0x590 [ 1938.994189][T26636] ____sys_sendmsg+0x5ba/0x960 [ 1938.999009][T26636] ? __asan_memset+0x22/0x40 [ 1939.003631][T26636] ? __sys_sendmsg_sock+0x30/0x30 [ 1939.008696][T26636] ? __import_iovec+0x5f2/0x850 [ 1939.013604][T26636] ? import_iovec+0x73/0xa0 [ 1939.018143][T26636] ___sys_sendmsg+0x2a6/0x360 [ 1939.022839][T26636] ? __sys_sendmsg+0x2a0/0x2a0 [ 1939.027661][T26636] __se_sys_sendmsg+0x1c2/0x2b0 [ 1939.032538][T26636] ? __x64_sys_sendmsg+0x80/0x80 [ 1939.037515][T26636] ? lockdep_hardirqs_on+0x98/0x150 [ 1939.042747][T26636] do_syscall_64+0x55/0xa0 [ 1939.047196][T26636] ? clear_bhb_loop+0x40/0x90 [ 1939.051902][T26636] ? clear_bhb_loop+0x40/0x90 [ 1939.056620][T26636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1939.062535][T26636] RIP: 0033:0x7f7ee139aeb9 [ 1939.066986][T26636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1939.086624][T26636] RSP: 002b:00007f7edf5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1939.095071][T26636] RAX: ffffffffffffffda RBX: 00007f7ee1615fa0 RCX: 00007f7ee139aeb9 [ 1939.103083][T26636] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1939.111077][T26636] RBP: 00007f7ee1408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1939.119072][T26636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1939.127099][T26636] R13: 00007f7ee1616038 R14: 00007f7ee1615fa0 R15: 00007ffeee54d578 [ 1939.135130][T26636] [ 1939.208021][T26639] netlink: 'syz.2.6997': attribute type 8 has an invalid length. [ 1939.765814][T26645] netlink: 'syz.1.7008': attribute type 8 has an invalid length. [ 1939.787980][T26645] netlink: 209716 bytes leftover after parsing attributes in process `syz.1.7008'. [ 1939.882039][T26645] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1939.917969][T26645] CPU: 0 PID: 26645 Comm: syz.1.7008 Not tainted syzkaller #0 [ 1939.925530][T26645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1939.935633][T26645] Call Trace: [ 1939.938941][T26645] [ 1939.941900][T26645] dump_stack_lvl+0x18c/0x250 [ 1939.946618][T26645] ? show_regs_print_info+0x20/0x20 [ 1939.951848][T26645] ? load_image+0x400/0x400 [ 1939.956391][T26645] sysfs_warn_dup+0x8e/0xa0 [ 1939.960922][T26645] sysfs_do_create_link_sd+0xc0/0x110 [ 1939.966320][T26645] device_add_class_symlinks+0x1cf/0x240 [ 1939.972004][T26645] device_add+0x507/0xc20 [ 1939.976390][T26645] wiphy_register+0x1dad/0x2ae0 [ 1939.981304][T26645] ? cfg80211_event_work+0x40/0x40 [ 1939.986439][T26645] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1939.992641][T26645] ieee80211_register_hw+0x3464/0x4250 [ 1939.998152][T26645] ? ieee80211_tasklet_handler+0x20/0x20 [ 1940.003810][T26645] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1940.009727][T26645] ? __debug_object_init+0xec/0x450 [ 1940.014984][T26645] ? __asan_memset+0x22/0x40 [ 1940.019605][T26645] ? __hrtimer_init+0x186/0x270 [ 1940.024484][T26645] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1940.030271][T26645] ? mac80211_hwsim_free+0x220/0x220 [ 1940.035589][T26645] ? rcu_is_watching+0x15/0xb0 [ 1940.040468][T26645] ? kstrndup+0xbd/0x140 [ 1940.044742][T26645] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1940.049893][T26645] ? __nla_validate+0x50/0x50 [ 1940.054606][T26645] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1940.060975][T26645] ? __nla_parse+0x40/0x50 [ 1940.065431][T26645] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1940.071796][T26645] genl_family_rcv_msg_doit+0x211/0x310 [ 1940.077387][T26645] ? end_current_label_crit_section+0x170/0x170 [ 1940.083693][T26645] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1940.089634][T26645] ? bpf_lsm_capable+0x9/0x10 [ 1940.094335][T26645] ? security_capable+0x89/0xb0 [ 1940.099221][T26645] genl_rcv_msg+0x619/0x7a0 [ 1940.103766][T26645] ? genl_bind+0x360/0x360 [ 1940.108217][T26645] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1940.114589][T26645] ? perf_trace_lock+0xfc/0x3b0 [ 1940.119492][T26645] netlink_rcv_skb+0x241/0x4d0 [ 1940.124304][T26645] ? genl_bind+0x360/0x360 [ 1940.128758][T26645] ? netlink_ack+0x1180/0x1180 [ 1940.133570][T26645] ? __lock_acquire+0x7d40/0x7d40 [ 1940.138630][T26645] ? down_read+0x1ac/0x2e0 [ 1940.143080][T26645] genl_rcv+0x28/0x40 [ 1940.147089][T26645] netlink_unicast+0x751/0x8d0 [ 1940.151895][T26645] netlink_sendmsg+0x8d0/0xbf0 [ 1940.156689][T26645] ? netlink_getsockopt+0x590/0x590 [ 1940.161917][T26645] ? aa_sock_msg_perm+0x94/0x150 [ 1940.166883][T26645] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1940.172191][T26645] ? security_socket_sendmsg+0x80/0xa0 [ 1940.177682][T26645] ? netlink_getsockopt+0x590/0x590 [ 1940.182914][T26645] ____sys_sendmsg+0x5ba/0x960 [ 1940.187731][T26645] ? __asan_memset+0x22/0x40 [ 1940.192361][T26645] ? __sys_sendmsg_sock+0x30/0x30 [ 1940.197407][T26645] ? __import_iovec+0x5f2/0x850 [ 1940.202302][T26645] ? import_iovec+0x73/0xa0 [ 1940.206841][T26645] ___sys_sendmsg+0x2a6/0x360 [ 1940.211570][T26645] ? __sys_sendmsg+0x2a0/0x2a0 [ 1940.216375][T26645] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1940.222760][T26645] __se_sys_sendmsg+0x1c2/0x2b0 [ 1940.227656][T26645] ? hrtimer_interrupt+0x7bb/0x9c0 [ 1940.232793][T26645] ? __x64_sys_sendmsg+0x80/0x80 [ 1940.237782][T26645] ? lockdep_hardirqs_on+0x98/0x150 [ 1940.243005][T26645] do_syscall_64+0x55/0xa0 [ 1940.247460][T26645] ? clear_bhb_loop+0x40/0x90 [ 1940.252163][T26645] ? clear_bhb_loop+0x40/0x90 [ 1940.256969][T26645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1940.262880][T26645] RIP: 0033:0x7f7ee139aeb9 [ 1940.267329][T26645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1940.286980][T26645] RSP: 002b:00007f7edf5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1940.295424][T26645] RAX: ffffffffffffffda RBX: 00007f7ee1615fa0 RCX: 00007f7ee139aeb9 [ 1940.303454][T26645] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1940.311477][T26645] RBP: 00007f7ee1408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1940.319497][T26645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1940.327533][T26645] R13: 00007f7ee1616038 R14: 00007f7ee1615fa0 R15: 00007ffeee54d578 [ 1940.335574][T26645] [ 1940.397619][T26651] netlink: 'syz.0.7000': attribute type 8 has an invalid length. [ 1940.813172][T26659] netlink: 'syz.0.7003': attribute type 8 has an invalid length. [ 1941.446962][T26671] netlink: 'syz.2.7007': attribute type 2 has an invalid length. [ 1941.465295][T26671] netlink: 'syz.2.7007': attribute type 8 has an invalid length. [ 1941.484066][T26671] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7007'. [ 1943.016561][T26697] netlink: 'syz.0.7012': attribute type 8 has an invalid length. [ 1943.025831][T26697] netlink: 209716 bytes leftover after parsing attributes in process `syz.0.7012'. [ 1943.054026][T26697] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1943.063420][T26697] CPU: 0 PID: 26697 Comm: syz.0.7012 Not tainted syzkaller #0 [ 1943.070962][T26697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1943.081050][T26697] Call Trace: [ 1943.084362][T26697] [ 1943.087316][T26697] dump_stack_lvl+0x18c/0x250 [ 1943.092038][T26697] ? show_regs_print_info+0x20/0x20 [ 1943.097274][T26697] ? load_image+0x400/0x400 [ 1943.101844][T26697] sysfs_warn_dup+0x8e/0xa0 [ 1943.106378][T26697] sysfs_do_create_link_sd+0xc0/0x110 [ 1943.111781][T26697] device_add_class_symlinks+0x1cf/0x240 [ 1943.117468][T26697] device_add+0x507/0xc20 [ 1943.121844][T26697] wiphy_register+0x1dad/0x2ae0 [ 1943.126738][T26697] ? cfg80211_event_work+0x40/0x40 [ 1943.131875][T26697] ? minstrel_ht_alloc+0x88a/0x990 [ 1943.137021][T26697] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1943.143122][T26697] ieee80211_register_hw+0x3464/0x4250 [ 1943.148652][T26697] ? ieee80211_tasklet_handler+0x20/0x20 [ 1943.154319][T26697] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1943.160242][T26697] ? __debug_object_init+0xec/0x450 [ 1943.165480][T26697] ? __asan_memset+0x22/0x40 [ 1943.170108][T26697] ? __hrtimer_init+0x186/0x270 [ 1943.174993][T26697] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1943.180778][T26697] ? mac80211_hwsim_free+0x220/0x220 [ 1943.186098][T26697] ? rcu_is_watching+0x15/0xb0 [ 1943.190893][T26697] ? kstrndup+0xbd/0x140 [ 1943.195176][T26697] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1943.200333][T26697] ? __nla_validate+0x50/0x50 [ 1943.205058][T26697] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1943.211446][T26697] ? __nla_parse+0x40/0x50 [ 1943.215908][T26697] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1943.222307][T26697] genl_family_rcv_msg_doit+0x211/0x310 [ 1943.227912][T26697] ? end_current_label_crit_section+0x170/0x170 [ 1943.234221][T26697] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1943.240163][T26697] ? bpf_lsm_capable+0x9/0x10 [ 1943.244887][T26697] ? security_capable+0x89/0xb0 [ 1943.249777][T26697] genl_rcv_msg+0x619/0x7a0 [ 1943.254329][T26697] ? genl_bind+0x360/0x360 [ 1943.258809][T26697] ? perf_trace_lock+0xfc/0x3b0 [ 1943.263701][T26697] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1943.270065][T26697] ? perf_trace_lock+0xfc/0x3b0 [ 1943.274958][T26697] netlink_rcv_skb+0x241/0x4d0 [ 1943.279762][T26697] ? genl_bind+0x360/0x360 [ 1943.284217][T26697] ? netlink_ack+0x1180/0x1180 [ 1943.289035][T26697] ? __lock_acquire+0x7d40/0x7d40 [ 1943.294087][T26697] ? net_generic+0x1e/0x240 [ 1943.298621][T26697] ? down_read+0x1ac/0x2e0 [ 1943.303082][T26697] genl_rcv+0x28/0x40 [ 1943.307108][T26697] netlink_unicast+0x751/0x8d0 [ 1943.311947][T26697] netlink_sendmsg+0x8d0/0xbf0 [ 1943.316770][T26697] ? netlink_getsockopt+0x590/0x590 [ 1943.322014][T26697] ? aa_sock_msg_perm+0x94/0x150 [ 1943.326986][T26697] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1943.332301][T26697] ? security_socket_sendmsg+0x80/0xa0 [ 1943.337789][T26697] ? netlink_getsockopt+0x590/0x590 [ 1943.343017][T26697] ____sys_sendmsg+0x5ba/0x960 [ 1943.347815][T26697] ? __asan_memset+0x22/0x40 [ 1943.352426][T26697] ? __sys_sendmsg_sock+0x30/0x30 [ 1943.357484][T26697] ? __import_iovec+0x5f2/0x850 [ 1943.362378][T26697] ? import_iovec+0x73/0xa0 [ 1943.366919][T26697] ___sys_sendmsg+0x2a6/0x360 [ 1943.371626][T26697] ? __sys_sendmsg+0x2a0/0x2a0 [ 1943.376431][T26697] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1943.382721][T26697] __se_sys_sendmsg+0x1c2/0x2b0 [ 1943.387599][T26697] ? __x64_sys_sendmsg+0x80/0x80 [ 1943.392577][T26697] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1943.398509][T26697] do_syscall_64+0x55/0xa0 [ 1943.402952][T26697] ? clear_bhb_loop+0x40/0x90 [ 1943.407660][T26697] ? clear_bhb_loop+0x40/0x90 [ 1943.412370][T26697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1943.418305][T26697] RIP: 0033:0x7f12f019aeb9 [ 1943.422750][T26697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1943.442388][T26697] RSP: 002b:00007f12f10bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1943.450829][T26697] RAX: ffffffffffffffda RBX: 00007f12f0415fa0 RCX: 00007f12f019aeb9 [ 1943.458832][T26697] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1943.466823][T26697] RBP: 00007f12f0208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1943.474843][T26697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1943.482856][T26697] R13: 00007f12f0416038 R14: 00007f12f0415fa0 R15: 00007ffdb5e33d88 [ 1943.490881][T26697] [ 1943.567093][T26693] netlink: 'syz.2.7013': attribute type 8 has an invalid length. [ 1944.296543][T26715] netlink: 'syz.2.7019': attribute type 2 has an invalid length. [ 1944.373227][T26715] netlink: 'syz.2.7019': attribute type 8 has an invalid length. [ 1944.417967][T26715] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7019'. [ 1945.791888][T26741] netlink: 'syz.2.7026': attribute type 8 has an invalid length. [ 1945.811375][T26741] netlink: 209716 bytes leftover after parsing attributes in process `syz.2.7026'. [ 1945.879819][T26741] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1945.906603][T26741] CPU: 1 PID: 26741 Comm: syz.2.7026 Not tainted syzkaller #0 [ 1945.914241][T26741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1945.924347][T26741] Call Trace: [ 1945.927664][T26741] [ 1945.930656][T26741] dump_stack_lvl+0x18c/0x250 [ 1945.935572][T26741] ? show_regs_print_info+0x20/0x20 [ 1945.940832][T26741] ? load_image+0x400/0x400 [ 1945.945405][T26741] sysfs_warn_dup+0x8e/0xa0 [ 1945.949979][T26741] sysfs_do_create_link_sd+0xc0/0x110 [ 1945.955412][T26741] device_add_class_symlinks+0x1cf/0x240 [ 1945.961109][T26741] device_add+0x507/0xc20 [ 1945.965497][T26741] wiphy_register+0x1dad/0x2ae0 [ 1945.970416][T26741] ? cfg80211_event_work+0x40/0x40 [ 1945.975567][T26741] ? minstrel_ht_alloc+0x88a/0x990 [ 1945.980747][T26741] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1945.986885][T26741] ieee80211_register_hw+0x3464/0x4250 [ 1945.992433][T26741] ? ieee80211_tasklet_handler+0x20/0x20 [ 1945.998151][T26741] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1946.004119][T26741] ? __debug_object_init+0xec/0x450 [ 1946.009448][T26741] ? __asan_memset+0x22/0x40 [ 1946.014100][T26741] ? __hrtimer_init+0x186/0x270 [ 1946.019009][T26741] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1946.024818][T26741] ? mac80211_hwsim_free+0x220/0x220 [ 1946.030169][T26741] ? rcu_is_watching+0x15/0xb0 [ 1946.034984][T26741] ? kstrndup+0xbd/0x140 [ 1946.039311][T26741] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1946.044498][T26741] ? __nla_validate+0x50/0x50 [ 1946.049268][T26741] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1946.055668][T26741] ? __nla_parse+0x40/0x50 [ 1946.060151][T26741] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1946.066528][T26741] genl_family_rcv_msg_doit+0x211/0x310 [ 1946.072129][T26741] ? end_current_label_crit_section+0x170/0x170 [ 1946.078433][T26741] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1946.084404][T26741] ? bpf_lsm_capable+0x9/0x10 [ 1946.089151][T26741] ? security_capable+0x89/0xb0 [ 1946.094068][T26741] genl_rcv_msg+0x619/0x7a0 [ 1946.098639][T26741] ? genl_bind+0x360/0x360 [ 1946.103109][T26741] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1946.109598][T26741] ? perf_trace_lock+0xfc/0x3b0 [ 1946.114533][T26741] netlink_rcv_skb+0x241/0x4d0 [ 1946.119363][T26741] ? genl_bind+0x360/0x360 [ 1946.123852][T26741] ? netlink_ack+0x1180/0x1180 [ 1946.128758][T26741] ? __lock_acquire+0x7d40/0x7d40 [ 1946.133847][T26741] ? down_read+0x1ac/0x2e0 [ 1946.138323][T26741] genl_rcv+0x28/0x40 [ 1946.142365][T26741] netlink_unicast+0x751/0x8d0 [ 1946.147201][T26741] netlink_sendmsg+0x8d0/0xbf0 [ 1946.152045][T26741] ? netlink_getsockopt+0x590/0x590 [ 1946.157308][T26741] ? aa_sock_msg_perm+0x94/0x150 [ 1946.162298][T26741] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1946.167673][T26741] ? security_socket_sendmsg+0x80/0xa0 [ 1946.173179][T26741] ? netlink_getsockopt+0x590/0x590 [ 1946.178442][T26741] ____sys_sendmsg+0x5ba/0x960 [ 1946.183301][T26741] ? __asan_memset+0x22/0x40 [ 1946.187953][T26741] ? __sys_sendmsg_sock+0x30/0x30 [ 1946.193202][T26741] ? __import_iovec+0x5f2/0x850 [ 1946.198127][T26741] ? import_iovec+0x73/0xa0 [ 1946.202700][T26741] ___sys_sendmsg+0x2a6/0x360 [ 1946.207440][T26741] ? __sys_sendmsg+0x2a0/0x2a0 [ 1946.212288][T26741] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1946.218610][T26741] __se_sys_sendmsg+0x1c2/0x2b0 [ 1946.223606][T26741] ? __x64_sys_sendmsg+0x80/0x80 [ 1946.228613][T26741] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1946.234562][T26741] do_syscall_64+0x55/0xa0 [ 1946.239053][T26741] ? clear_bhb_loop+0x40/0x90 [ 1946.243798][T26741] ? clear_bhb_loop+0x40/0x90 [ 1946.248561][T26741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1946.254551][T26741] RIP: 0033:0x7f575339aeb9 [ 1946.259029][T26741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1946.278699][T26741] RSP: 002b:00007f575429e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1946.287179][T26741] RAX: ffffffffffffffda RBX: 00007f5753615fa0 RCX: 00007f575339aeb9 [ 1946.295216][T26741] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1946.303254][T26741] RBP: 00007f5753408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1946.311298][T26741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1946.319350][T26741] R13: 00007f5753616038 R14: 00007f5753615fa0 R15: 00007ffd275f5948 [ 1946.327416][T26741] [ 1947.063616][T26759] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1947.093285][T26759] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1947.108080][T26759] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1947.134729][T26759] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1947.161342][T26759] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1947.168908][T26759] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1947.453221][ T1131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1947.690241][ T1131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1947.972118][ T1131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1948.436596][T26758] chnl_net:caif_netlink_parms(): no params data found [ 1948.633342][T26786] netlink: 'syz.3.7037': attribute type 8 has an invalid length. [ 1948.659643][T26786] netlink: 209716 bytes leftover after parsing attributes in process `syz.3.7037'. [ 1948.769706][T26786] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1948.778458][T26786] CPU: 0 PID: 26786 Comm: syz.3.7037 Not tainted syzkaller #0 [ 1948.785984][T26786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1948.796110][T26786] Call Trace: [ 1948.799430][T26786] [ 1948.802404][T26786] dump_stack_lvl+0x18c/0x250 [ 1948.807167][T26786] ? show_regs_print_info+0x20/0x20 [ 1948.812430][T26786] ? load_image+0x400/0x400 [ 1948.817008][T26786] sysfs_warn_dup+0x8e/0xa0 [ 1948.821559][T26786] sysfs_do_create_link_sd+0xc0/0x110 [ 1948.826992][T26786] device_add_class_symlinks+0x1cf/0x240 [ 1948.832732][T26786] device_add+0x507/0xc20 [ 1948.837130][T26786] wiphy_register+0x1dad/0x2ae0 [ 1948.842065][T26786] ? cfg80211_event_work+0x40/0x40 [ 1948.847253][T26786] ? minstrel_ht_alloc+0x88a/0x990 [ 1948.852417][T26786] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1948.858519][T26786] ieee80211_register_hw+0x3464/0x4250 [ 1948.864040][T26786] ? ieee80211_tasklet_handler+0x20/0x20 [ 1948.869713][T26786] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1948.875648][T26786] ? __debug_object_init+0xec/0x450 [ 1948.880881][T26786] ? __asan_memset+0x22/0x40 [ 1948.885496][T26786] ? __hrtimer_init+0x186/0x270 [ 1948.890383][T26786] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1948.896155][T26786] ? mac80211_hwsim_free+0x220/0x220 [ 1948.901482][T26786] ? rcu_is_watching+0x15/0xb0 [ 1948.906277][T26786] ? kstrndup+0xbd/0x140 [ 1948.910549][T26786] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1948.915700][T26786] ? __nla_validate+0x50/0x50 [ 1948.920418][T26786] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1948.926790][T26786] ? __nla_parse+0x40/0x50 [ 1948.931252][T26786] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1948.937609][T26786] genl_family_rcv_msg_doit+0x211/0x310 [ 1948.943210][T26786] ? end_current_label_crit_section+0x170/0x170 [ 1948.949492][T26786] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1948.955439][T26786] ? bpf_lsm_capable+0x9/0x10 [ 1948.960148][T26786] ? security_capable+0x89/0xb0 [ 1948.965045][T26786] genl_rcv_msg+0x619/0x7a0 [ 1948.969587][T26786] ? genl_bind+0x360/0x360 [ 1948.974031][T26786] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1948.980049][T26786] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1948.986415][T26786] ? perf_trace_lock+0xfc/0x3b0 [ 1948.991303][T26786] netlink_rcv_skb+0x241/0x4d0 [ 1948.996096][T26786] ? genl_bind+0x360/0x360 [ 1949.000543][T26786] ? netlink_ack+0x1180/0x1180 [ 1949.005347][T26786] ? __lock_acquire+0x7d40/0x7d40 [ 1949.010400][T26786] ? down_read+0x1ac/0x2e0 [ 1949.014852][T26786] genl_rcv+0x28/0x40 [ 1949.018892][T26786] netlink_unicast+0x751/0x8d0 [ 1949.023691][T26786] netlink_sendmsg+0x8d0/0xbf0 [ 1949.028489][T26786] ? netlink_getsockopt+0x590/0x590 [ 1949.033718][T26786] ? aa_sock_msg_perm+0x94/0x150 [ 1949.038685][T26786] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1949.044001][T26786] ? security_socket_sendmsg+0x80/0xa0 [ 1949.049480][T26786] ? netlink_getsockopt+0x590/0x590 [ 1949.054717][T26786] ____sys_sendmsg+0x5ba/0x960 [ 1949.059513][T26786] ? __asan_memset+0x22/0x40 [ 1949.064134][T26786] ? __sys_sendmsg_sock+0x30/0x30 [ 1949.069188][T26786] ? __import_iovec+0x5f2/0x850 [ 1949.074073][T26786] ? import_iovec+0x73/0xa0 [ 1949.078603][T26786] ___sys_sendmsg+0x2a6/0x360 [ 1949.083340][T26786] ? __fget_files+0x28/0x4b0 [ 1949.087991][T26786] ? __sys_sendmsg+0x2a0/0x2a0 [ 1949.092805][T26786] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1949.099101][T26786] __se_sys_sendmsg+0x1c2/0x2b0 [ 1949.103973][T26786] ? __x64_sys_sendmsg+0x80/0x80 [ 1949.108985][T26786] do_syscall_64+0x55/0xa0 [ 1949.113434][T26786] ? clear_bhb_loop+0x40/0x90 [ 1949.118131][T26786] ? clear_bhb_loop+0x40/0x90 [ 1949.122835][T26786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1949.128753][T26786] RIP: 0033:0x7f5ecbf9aeb9 [ 1949.133194][T26786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1949.152917][T26786] RSP: 002b:00007f5ecce58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1949.161360][T26786] RAX: ffffffffffffffda RBX: 00007f5ecc215fa0 RCX: 00007f5ecbf9aeb9 [ 1949.169359][T26786] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1949.177441][T26786] RBP: 00007f5ecc008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1949.185452][T26786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1949.193464][T26786] R13: 00007f5ecc216038 R14: 00007f5ecc215fa0 R15: 00007ffde7015598 [ 1949.201504][T26786] [ 1949.228024][ T5081] Bluetooth: hci4: command tx timeout [ 1949.300274][T26758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1949.307848][T26758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1949.315140][T26758] bridge_slave_0: entered allmulticast mode [ 1949.329950][T26758] bridge_slave_0: entered promiscuous mode [ 1949.356439][T26758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1949.364149][T26758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.371954][T26758] bridge_slave_1: entered allmulticast mode [ 1949.379917][T26758] bridge_slave_1: entered promiscuous mode [ 1949.674007][T26758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1949.749986][T26758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1949.765810][T26801] netlink: 'syz.2.7045': attribute type 8 has an invalid length. [ 1949.789774][T26801] netlink: 209716 bytes leftover after parsing attributes in process `syz.2.7045'. [ 1950.190660][T26758] team0: Port device team_slave_0 added [ 1950.267074][T26801] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1950.318569][T26801] CPU: 0 PID: 26801 Comm: syz.2.7045 Not tainted syzkaller #0 [ 1950.326106][T26801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1950.336286][T26801] Call Trace: [ 1950.339604][T26801] [ 1950.342597][T26801] dump_stack_lvl+0x18c/0x250 [ 1950.347367][T26801] ? show_regs_print_info+0x20/0x20 [ 1950.352631][T26801] ? load_image+0x400/0x400 [ 1950.357225][T26801] sysfs_warn_dup+0x8e/0xa0 [ 1950.361776][T26801] sysfs_do_create_link_sd+0xc0/0x110 [ 1950.367202][T26801] device_add_class_symlinks+0x1cf/0x240 [ 1950.372899][T26801] device_add+0x507/0xc20 [ 1950.377314][T26801] wiphy_register+0x1dad/0x2ae0 [ 1950.382233][T26801] ? cfg80211_event_work+0x40/0x40 [ 1950.387384][T26801] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1950.393594][T26801] ieee80211_register_hw+0x3464/0x4250 [ 1950.399144][T26801] ? ieee80211_tasklet_handler+0x20/0x20 [ 1950.404823][T26801] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1950.410752][T26801] ? __debug_object_init+0xec/0x450 [ 1950.415990][T26801] ? __asan_memset+0x22/0x40 [ 1950.420614][T26801] ? __hrtimer_init+0x186/0x270 [ 1950.425513][T26801] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1950.431292][T26801] ? mac80211_hwsim_free+0x220/0x220 [ 1950.436614][T26801] ? rcu_is_watching+0x15/0xb0 [ 1950.441406][T26801] ? kstrndup+0xbd/0x140 [ 1950.445684][T26801] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1950.450837][T26801] ? mark_lock+0x94/0x320 [ 1950.455202][T26801] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1950.461567][T26801] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1950.467755][T26801] ? lockdep_hardirqs_on+0x98/0x150 [ 1950.472980][T26801] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1950.479169][T26801] genl_family_rcv_msg_doit+0x211/0x310 [ 1950.484750][T26801] ? end_current_label_crit_section+0x170/0x170 [ 1950.491024][T26801] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1950.496952][T26801] ? bpf_lsm_capable+0x9/0x10 [ 1950.501679][T26801] ? security_capable+0x89/0xb0 [ 1950.506561][T26801] genl_rcv_msg+0x619/0x7a0 [ 1950.511102][T26801] ? genl_bind+0x360/0x360 [ 1950.515550][T26801] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1950.521929][T26801] ? perf_trace_lock+0xfc/0x3b0 [ 1950.526817][T26801] netlink_rcv_skb+0x241/0x4d0 [ 1950.531614][T26801] ? genl_bind+0x360/0x360 [ 1950.536081][T26801] ? netlink_ack+0x1180/0x1180 [ 1950.540895][T26801] ? __lock_acquire+0x7d40/0x7d40 [ 1950.545956][T26801] ? down_read+0x1ac/0x2e0 [ 1950.550412][T26801] genl_rcv+0x28/0x40 [ 1950.554420][T26801] netlink_unicast+0x751/0x8d0 [ 1950.559217][T26801] netlink_sendmsg+0x8d0/0xbf0 [ 1950.564017][T26801] ? netlink_getsockopt+0x590/0x590 [ 1950.569251][T26801] ? aa_sock_msg_perm+0x94/0x150 [ 1950.574224][T26801] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1950.579539][T26801] ? security_socket_sendmsg+0x80/0xa0 [ 1950.585024][T26801] ? netlink_getsockopt+0x590/0x590 [ 1950.590257][T26801] ____sys_sendmsg+0x5ba/0x960 [ 1950.595064][T26801] ? __asan_memset+0x22/0x40 [ 1950.599706][T26801] ? __sys_sendmsg_sock+0x30/0x30 [ 1950.604794][T26801] ? __import_iovec+0x5f2/0x850 [ 1950.609708][T26801] ? import_iovec+0x73/0xa0 [ 1950.614259][T26801] ___sys_sendmsg+0x2a6/0x360 [ 1950.618970][T26801] ? __sys_sendmsg+0x2a0/0x2a0 [ 1950.623793][T26801] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1950.630099][T26801] __se_sys_sendmsg+0x1c2/0x2b0 [ 1950.634983][T26801] ? hrtimer_interrupt+0x7bb/0x9c0 [ 1950.640153][T26801] ? __x64_sys_sendmsg+0x80/0x80 [ 1950.645163][T26801] ? lockdep_hardirqs_on+0x98/0x150 [ 1950.650395][T26801] do_syscall_64+0x55/0xa0 [ 1950.654864][T26801] ? clear_bhb_loop+0x40/0x90 [ 1950.659575][T26801] ? clear_bhb_loop+0x40/0x90 [ 1950.664294][T26801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1950.670218][T26801] RIP: 0033:0x7f575339aeb9 [ 1950.674651][T26801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1950.694276][T26801] RSP: 002b:00007f575429e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1950.702718][T26801] RAX: ffffffffffffffda RBX: 00007f5753615fa0 RCX: 00007f575339aeb9 [ 1950.710721][T26801] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1950.718730][T26801] RBP: 00007f5753408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1950.726732][T26801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1950.734728][T26801] R13: 00007f5753616038 R14: 00007f5753615fa0 R15: 00007ffd275f5948 [ 1950.742743][T26801] [ 1950.845418][T26758] team0: Port device team_slave_1 added [ 1951.240240][T26758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1951.281283][T26758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1951.313794][ T5081] Bluetooth: hci4: command tx timeout [ 1951.428161][T26758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1951.489239][T26758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1951.534577][T26758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1951.713018][T26758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1952.026461][ T1131] gretap0 (unregistering): left allmulticast mode [ 1952.044204][ T1131] gretap0 (unregistering): left promiscuous mode [ 1952.069014][ T1131] Ÿë: port 1(gretap0) entered disabled state [ 1952.946726][T26758] hsr_slave_0: entered promiscuous mode [ 1953.025914][T26758] hsr_slave_1: entered promiscuous mode [ 1953.050013][T26758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1953.067743][T26758] Cannot create hsr debugfs directory [ 1953.270753][ T1131] [ 1953.273150][ T1131] ====================================================== [ 1953.280216][ T1131] WARNING: possible circular locking dependency detected [ 1953.287269][ T1131] syzkaller #0 Not tainted [ 1953.291700][ T1131] ------------------------------------------------------ [ 1953.298751][ T1131] kworker/u4:7/1131 is trying to acquire lock: [ 1953.304936][ T1131] ffff88805f430d00 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 1953.314431][ T1131] [ 1953.314431][ T1131] but task is already holding lock: [ 1953.321820][ T1131] ffff88807dec0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1953.332232][ T1131] [ 1953.332232][ T1131] which lock already depends on the new lock. [ 1953.332232][ T1131] [ 1953.342672][ T1131] [ 1953.342672][ T1131] the existing dependency chain (in reverse order) is: [ 1953.351720][ T1131] [ 1953.351720][ T1131] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 1953.359485][ T1131] __mutex_lock+0x136/0xcc0 [ 1953.364548][ T1131] ieee80211_open+0x144/0x200 [ 1953.369783][ T1131] __dev_open+0x2cb/0x430 [ 1953.374767][ T1131] dev_open+0xab/0x190 [ 1953.379390][ T1131] team_add_slave+0xaf8/0x26d0 [ 1953.384714][ T1131] do_setlink+0xdfe/0x4130 [ 1953.389767][ T1131] rtnl_newlink+0x17da/0x20a0 [ 1953.395001][ T1131] rtnetlink_rcv_msg+0x869/0xfa0 [ 1953.400483][ T1131] netlink_rcv_skb+0x241/0x4d0 [ 1953.405802][ T1131] netlink_unicast+0x751/0x8d0 [ 1953.411113][ T1131] netlink_sendmsg+0x8d0/0xbf0 [ 1953.416425][ T1131] ____sys_sendmsg+0x5ba/0x960 [ 1953.421748][ T1131] ___sys_sendmsg+0x2a6/0x360 [ 1953.426965][ T1131] __se_sys_sendmsg+0x1c2/0x2b0 [ 1953.432352][ T1131] do_syscall_64+0x55/0xa0 [ 1953.437320][ T1131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1953.443759][ T1131] [ 1953.443759][ T1131] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 1953.451775][ T1131] __lock_acquire+0x2df1/0x7d40 [ 1953.457173][ T1131] lock_acquire+0x19e/0x420 [ 1953.462222][ T1131] __mutex_lock+0x136/0xcc0 [ 1953.467285][ T1131] team_del_slave+0x32/0x1c0 [ 1953.472423][ T1131] team_device_event+0x28d/0xa20 [ 1953.477895][ T1131] notifier_call_chain+0x197/0x380 [ 1953.483609][ T1131] unregister_netdevice_many_notify+0x100d/0x1900 [ 1953.490572][ T1131] unregister_netdevice_queue+0x32c/0x370 [ 1953.496857][ T1131] _cfg80211_unregister_wdev+0x16b/0x580 [ 1953.503032][ T1131] ieee80211_remove_interfaces+0x49e/0x690 [ 1953.509378][ T1131] ieee80211_unregister_hw+0x5d/0x2a0 [ 1953.515297][ T1131] mac80211_hwsim_del_radio+0x289/0x480 [ 1953.521393][ T1131] hwsim_exit_net+0x58d/0x650 [ 1953.526610][ T1131] cleanup_net+0x70a/0xbb0 [ 1953.531607][ T1131] process_scheduled_works+0xa5d/0x15d0 [ 1953.537717][ T1131] worker_thread+0xa55/0xfc0 [ 1953.542874][ T1131] kthread+0x2fa/0x390 [ 1953.547495][ T1131] ret_from_fork+0x48/0x80 [ 1953.552499][ T1131] ret_from_fork_asm+0x11/0x20 [ 1953.557841][ T1131] [ 1953.557841][ T1131] other info that might help us debug this: [ 1953.557841][ T1131] [ 1953.568079][ T1131] Possible unsafe locking scenario: [ 1953.568079][ T1131] [ 1953.575543][ T1131] CPU0 CPU1 [ 1953.580973][ T1131] ---- ---- [ 1953.586353][ T1131] lock(&rdev->wiphy.mtx); [ 1953.590880][ T1131] lock(team->team_lock_key); [ 1953.598177][ T1131] lock(&rdev->wiphy.mtx); [ 1953.605221][ T1131] lock(team->team_lock_key); [ 1953.610016][ T1131] [ 1953.610016][ T1131] *** DEADLOCK *** [ 1953.610016][ T1131] [ 1953.618181][ T1131] 5 locks held by kworker/u4:7/1131: [ 1953.623483][ T1131] #0: ffff888017c73938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1953.634409][ T1131] #1: ffffc9000475fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1953.644995][ T1131] #2: ffffffff8e3b3150 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 1953.654452][ T1131] #3: ffffffff8e3c0308 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1953.664337][ T1131] #4: ffff88807dec0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1953.675173][ T1131] [ 1953.675173][ T1131] stack backtrace: [ 1953.681092][ T1131] CPU: 0 PID: 1131 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1953.688657][ T1131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1953.698728][ T1131] Workqueue: netns cleanup_net [ 1953.703517][ T1131] Call Trace: [ 1953.706809][ T1131] [ 1953.709759][ T1131] dump_stack_lvl+0x18c/0x250 [ 1953.714467][ T1131] ? load_image+0x400/0x400 [ 1953.719001][ T1131] ? show_regs_print_info+0x20/0x20 [ 1953.724283][ T1131] ? print_circular_bug+0x12b/0x1a0 [ 1953.729519][ T1131] check_noncircular+0x2fc/0x400 [ 1953.734517][ T1131] ? print_deadlock_bug+0x5d0/0x5d0 [ 1953.739735][ T1131] ? lockdep_lock+0xf5/0x230 [ 1953.744361][ T1131] ? _find_first_zero_bit+0xd3/0x100 [ 1953.749667][ T1131] __lock_acquire+0x2df1/0x7d40 [ 1953.754569][ T1131] ? verify_lock_unused+0x140/0x140 [ 1953.759795][ T1131] ? verify_lock_unused+0x140/0x140 [ 1953.765048][ T1131] lock_acquire+0x19e/0x420 [ 1953.769573][ T1131] ? team_del_slave+0x32/0x1c0 [ 1953.774372][ T1131] ? __might_sleep+0xe0/0xe0 [ 1953.778993][ T1131] ? read_lock_is_recursive+0x20/0x20 [ 1953.784397][ T1131] __mutex_lock+0x136/0xcc0 [ 1953.788932][ T1131] ? team_del_slave+0x32/0x1c0 [ 1953.793726][ T1131] ? __lock_acquire+0x7d40/0x7d40 [ 1953.798805][ T1131] ? rcu_is_watching+0x15/0xb0 [ 1953.803616][ T1131] ? trace_contention_end+0x39/0xe0 [ 1953.808862][ T1131] ? __mutex_lock+0x315/0xcc0 [ 1953.813579][ T1131] ? team_del_slave+0x32/0x1c0 [ 1953.818395][ T1131] ? mutex_lock_nested+0x20/0x20 [ 1953.823374][ T1131] ? bond_netdev_event+0xeb/0xf30 [ 1953.828429][ T1131] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1953.834211][ T1131] team_del_slave+0x32/0x1c0 [ 1953.838849][ T1131] team_device_event+0x28d/0xa20 [ 1953.843811][ T1131] notifier_call_chain+0x197/0x380 [ 1953.848963][ T1131] unregister_netdevice_many_notify+0x100d/0x1900 [ 1953.855416][ T1131] ? trace_event_raw_event_lock+0x250/0x250 [ 1953.861439][ T1131] ? unregister_netdevice_many+0x20/0x20 [ 1953.867130][ T1131] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1953.872978][ T1131] ? __lock_acquire+0x7d40/0x7d40 [ 1953.878048][ T1131] unregister_netdevice_queue+0x32c/0x370 [ 1953.883826][ T1131] ? list_netdevice+0x730/0x730 [ 1953.888789][ T1131] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1953.894550][ T1131] _cfg80211_unregister_wdev+0x16b/0x580 [ 1953.900217][ T1131] ieee80211_remove_interfaces+0x49e/0x690 [ 1953.906050][ T1131] ? ieee80211_do_stop+0x1e20/0x1e20 [ 1953.911361][ T1131] ? rcu_is_watching+0x15/0xb0 [ 1953.916212][ T1131] ieee80211_unregister_hw+0x5d/0x2a0 [ 1953.921621][ T1131] mac80211_hwsim_del_radio+0x289/0x480 [ 1953.927210][ T1131] ? rhashtable_remove_fast+0xc00/0xc00 [ 1953.932813][ T1131] hwsim_exit_net+0x58d/0x650 [ 1953.937532][ T1131] ? hwsim_init_net+0x90/0x90 [ 1953.942246][ T1131] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1953.948178][ T1131] cleanup_net+0x70a/0xbb0 [ 1953.952628][ T1131] ? ops_free_list+0x3b0/0x3b0 [ 1953.957433][ T1131] ? _raw_spin_unlock_irq+0x23/0x50 [ 1953.962662][ T1131] ? process_scheduled_works+0x96f/0x15d0 [ 1953.968406][ T1131] ? process_scheduled_works+0x96f/0x15d0 [ 1953.974147][ T1131] process_scheduled_works+0xa5d/0x15d0 [ 1953.979738][ T1131] ? assign_work+0x430/0x430 [ 1953.984359][ T1131] ? assign_work+0x3d0/0x430 [ 1953.988972][ T1131] worker_thread+0xa55/0xfc0 [ 1953.993612][ T1131] kthread+0x2fa/0x390 [ 1953.997700][ T1131] ? pr_cont_work+0x560/0x560 [ 1954.002403][ T1131] ? kthread_blkcg+0xd0/0xd0 [ 1954.007018][ T1131] ret_from_fork+0x48/0x80 [ 1954.011455][ T1131] ? kthread_blkcg+0xd0/0xd0 [ 1954.016077][ T1131] ret_from_fork_asm+0x11/0x20 [ 1954.020880][ T1131] [ 1954.024212][ T5081] Bluetooth: hci4: command tx timeout [ 1954.109955][ T1131] team0: Port device wlan1 removed [ 1954.568083][T26758] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1954.578486][T26758] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1954.588818][T26758] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1954.600538][T26758] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1954.711838][T26758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1954.732756][T26758] 8021q: adding VLAN 0 to HW filter on device team0 [ 1954.744568][ T4944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1954.751739][ T4944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1954.769767][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1954.776892][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1955.022557][T26758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1955.080976][T26758] veth0_vlan: entered promiscuous mode [ 1955.097116][T26758] veth1_vlan: entered promiscuous mode [ 1955.134083][T26758] veth0_macvtap: entered promiscuous mode [ 1955.151728][T26758] veth1_macvtap: entered promiscuous mode [ 1955.178693][T26758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1955.194342][T26758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1955.205440][T26758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.218665][T26758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1955.229985][T26758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.241029][T26758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1955.252270][T26758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.263814][T26758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1955.278860][T26758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.290189][T26758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1955.306686][T26758] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.315553][T26758] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.326330][T26758] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.335863][T26758] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1955.386434][T26758] ieee80211 phy926: Selected rate control algorithm 'minstrel_ht' [ 1955.414964][T26758] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 1955.426758][T26758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.436970][T26758] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 1955.448636][T26758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1955.469524][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1955.477395][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1955.479686][T26758] ieee80211 phy927: Selected rate control algorithm 'minstrel_ht' [ 1955.525816][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1955.543119][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1955.759515][ T1131] batman_adv: batadv0: Interface deactivated: wlan0 [ 1955.787399][ T1131] batman_adv: batadv0: Removing interface: wlan0 [ 1955.888269][ T1131] hsr_slave_0: left promiscuous mode [ 1955.897879][ T1131] hsr_slave_1: left promiscuous mode [ 1955.903962][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1955.914352][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1955.922506][ T1131] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 1955.931654][ T1131] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 1955.940183][ T1131] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1955.947291][ T1131] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1955.960311][ T1131] veth0_macvtap: left promiscuous mode [ 1956.109362][ T5081] Bluetooth: hci4: command tx timeout [ 1956.357871][ T1131] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1956.366632][ T1131] batadv_slave_0 (unregistering): left promiscuous mode [ 1956.409801][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 1956.441399][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 1956.473295][ T1131] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1956.482711][ T1131] bond_slave_1 (unregistering): left promiscuous mode [ 1956.616137][ T1131] .` (unregistering): (slave batadv0): Releasing backup interface [ 1956.625201][ T1131] batadv0 (unregistering): left promiscuous mode [ 1956.696604][ T1131] .` (unregistering): Released all slaves