last executing test programs: 6.471086571s ago: executing program 1 (id=570): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd) 6.373623217s ago: executing program 1 (id=571): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711224000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c9b42, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x79}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_devices(r2, &(0x7f00000009c0)=ANY=[@ANYBLOB='c *:', @ANYRES64=r3], 0x1d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2002}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000002c000000000300000002000000000000110400000008000000000000000200000d0000000008000000050000000b00000002000000003000000000"], &(0x7f0000000d00)=""/34, 0x47, 0x22, 0x0, 0x1a}, 0x28) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r6}) sendmsg$inet(r7, &(0x7f0000000840)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000002c0)="22c947cc90be727d8bd897c69615d1a7c2fa47ab138d68109d5bc4d25a212020601d1bd322792dc842def5437448776a6b2a2861cc759d8c066790c049991d784fe432d086cff4a6e59cac9f5266540aea28d5d598e99c35fcdd98d6a50abd2529e81c7c0480f7f54e07ae585a5dd1fa823d1668f2bd90bddd8db96b68fcb180a704e8281a44072e7f89a41b747b120e96362e531f8290a454815e02912ddba228c78547811e45b2a6b022088d1061819b", 0xb1}, {&(0x7f0000002a00)="adb6df346967143b11621864353441d159048eb3847509a2c8c3a5f490c967d9a29b575579c2eea7cc4789ebaa1d110b9a3078782949e6ac1cf3a01587f32c45c7212651458d3deb174b070dfab97ac04d1f15b736c5371fadeb275c6ae04c1769128a1d5b845ea3bc4efeb13f24f83dd4b243868ab85fa2ef447c3ddd3b9d40dc0de68ffadbf0fc3611746af0bf3763c489827ee73f9d0a70a7be88b490740f6278672202ebbd1950680e57a461d295fcf7b5954a7ee4798c93966bdb29b516eebcd9d599a3e96054baf193c79dc944398b2f573d8ea4d420e820c7f9ce483bcb9680b91b5eeeacfacdf8ecb5a9394faabc8fdc392ad54952b703b19833da3a5899b9d2ae96062b03163b9fb64207a26b01b89c5583f1bdc93f712bff9c2d629b31645335d964ef2eb1e1402553514fb6eae41cfb76bd4baf14ed27c8a9cecbaf9a7ecb72363c4921abf132af898b67005dc1b5ef5f94a97184a403ea38c9de8de7cdc71885b84fc4785fab0b9c2e6eb9441d4859ea9bb1c2d96bea8e3721c533912c656210bc6c0fbe47bbcfb8e2c6b96e4792ed9f1cdb75b6ab5e2f64cb74a3a7cac26c7d34f62b0759e152fb5c04cdd5f6f2fb9ab2542f210fd052eb0ce623640752f00e503f9bacb3f689f6fcd7901c841bb38fe65da9cc245cbef0fe96bad71735bfce4eee6e3d6070ab2c9fcf0ac03d6555c7fd41124fd8e2148b7fd13846f28cb9d2017b5310dd2c99b4b0deba4f8e07d95cef6188d510bdddccaaf95ffcbf952a0eef59ba7bbf1830e7c547a6a25fe4ddd9f4d96b40bf787653a771d1478f389d59794f798ab716ee4df050e9f44c247b943fc95a832d8c1b25b7391de0922b1d039aa60c89e8d9372c0a22e21c9b523c21278113696cf0757376d0091099970a489267f94bc51608a043bcf5ac0a55af48bcd860afd4cfaffbfda9e8e0bf8d1f2a8a34277dc4a517aa251993b95e0188a39ce2e15264c4c19e13c51658f25176593d6ea22ed24ff54b29e19967eb920b50b13f8417ea91322737d8e576ab7ef7a48b1c6f1e36141bf553c31f3c55fe745cd8be952dc615001f3b014771e33f5112e14da921a77d43e7207bc9eedc3c0a9e4c8d0eea7cb8554fcb9e9b932527aac3bd431c7968d85ba711e4858e53fc23cfe31042da42b9e7792390de265b7b42cb86efa7632d7521b0a3522d6024c96373a3cc077c3c504ac98748e9a2c6fabb82bf42e09522e4ce23c8233bd57de7af0ec064e67db5e876658ea5544770d12ba1115532f5aa9144c7c22dbaed2d950dc893427ce6728dbfd66bf25774777c8ceb92de8451e283583a63fd07a995aeecb4d4fbb8cb80afdee188b2016180778641f3605a41fd6f60ef0ccc0934a14b3c120bff470e18618716105d72c5cd4da2c7bcc0fecbd3ba4914eef1472c09981d137f00d31a7c6679e769f66aeaffc17ca95203c6ee0e18115c2409d63e63ded90367116fb9f2f9684fce44e0d041cc4b5bdee73ac2e106af52275bba1fafd9b79121671040d627c85a3dcbbc9cc313cb72bd514ea34aeee586482d511b8cb143400d983f7f454200a182dc9920ecdd9b64eff6dde4a8d604faa8429877aaa057aae44817f05200b0791d2720fa6ba7f69e687ae0a595e6cf3bac3547b32b4dab207b7c96f26d21e5eb3893754926cbef87170ccd34fd61daaf2655e6a398f311ccb4ec61b1defea9107480de99d4b3b2875be085a1a5b8dbe9046bce9cb4bd98aec207cac73173e2d7bf16dda3cbab93cf79044b0d242002cad306097d1b7c965fa01d70d29a82b646bed6d106ba28c3a847a67e97c094109e00fdafc9eb8765198b34552ab2cfb724223b62c98fda381772093f4208e745923167abcb624c1cfd9b62fe2553132de62b0cd2659ea67d42ae90854655f21d1c1d5d07129b386fa330537e14b94a0e2187909e345bddc4248eb6bae6fc892a211d4bca755df77ce8f2fee15a9cfe25cf9843d6be9f556315ee00c280c9aea7c25ea2b674f78e76d9afaa54225f7d60f3cc8a5ca32e6e19310f22dfc4688fd2883e66f399138a3e92531f880a84472b62f810f7ad9e5375d10f94818496ad227134b0565b8083c172eb415e3a891b1d6a8e58b23f6de05ea904f4fc7459753aa4047a030b38d9742711f6ebbe9ae3f76dbd2a7a81f9a867283e246f5356f3bd1944c57f67b5a6dd97a40071fe469f769851015f304072c8597ae675539a13bfc3f12b6f0315ccec4316ba1858a490fe55efa42d78190514d9be992ed2df9c281cd87239dbfebcb9fc4381ab02adcfd98712884706d417e2c2a7f7418d2dcaa6332b5ece021335e12b36fd70ace065d8f866fe1c0b42a8525ad02dc0c2604b504c2b5363869757e6847dfe4099a89208e48d1a3f7987c301332afd4e9f114503a8201ea6e85472ae26c94ea2250669315464d787e077aeee2e89310331e08841d4a59188a24df6fe591a2685d4844726409954abc10376222aedcbe7f4215957ca9fd60cde8c1800da259be76a963e61733879c42ad628608c33df2ae81f74931dc2a4ce12740a741c159fd64d5100033299225e541a672d387829a116b722887a03209d13edd8218b6044ada6c77dea7fdacfcf3bafa99b664862c73c78a65ad15cf92149f4af64b4f62e6cc85495e3e6f2aa79f404c16401a2c1196c97bd6dda84c251338e39306ef6fd21f45de4eec86e8d275edd4c4c54357540799425f70a5f11c97e585fa6edbccf5214d68e327c59feb9012c149994150345968cc5af2542942cdab2f6673186a91207e920678b39bf5301c618963ddd84349eae308a4e9f2f4de4d7f397e12c6a8ba02f0558d9187b4f28f7b00cec59dca74f822c0985e34fc8a24f7950d2d542ee4671814c2354fc793b4da54a0ffc055f4ff968c79fd92c13d7b414bab4abbce9ae2f4bd68c2dba516c66eadc84b096246cfb737137e2ef7edfd8dcda1979d7642a32d48c17d3b65f0bf34c8225805db9071c0122effaddda081523d0ad5c332061206f1318fcd67a1bf15cd8a3d96681c2bc12ae27ac71112e9be159080113c05f0b0d56bedbe4f392a65792aa546b51bc081ca8e0f4de913c2ac98f630e4dcde409927be7ae8d8ae3846c386486eaa132b0feaa0bee93dab7bde610dd16c005f265664cc1ad8a9b00f294b80e29c83640d2905392ea08c26637a843cd3a4d3015048728f04cbb3b8f8d294d670eed2debeb8052842d7b02e67fde3589eb9a764fe28a11969f22c94f6651ad7bcf23e1ff8c752a6c41fbe4ceadfbcb145d9e2a65b82abc2c77600c8a86a34344e5aeeec936701f7c1db65c9e636444f6ab366ba9b322b30b8c8db08156fb06c7e461cb8584899e2ceddf95eb24f326a8c067c74f457e755a69be08b03076af048d861b3fd6b38dd6bccae9ef266678ed42afb3d3c2bf44484a0ac62c96c819d231a22a778194875ade78f7e06bc7e2f2ef02121839f39c82afc41a40e5c630d7c6d689468b6464d7e0cfd67f92e9212f92f3b3f6c794e49cb56787de7921e8b29f2f2d9cb0d340d084ffbd293a2202af0c4abd9325c158c12011669fb384fc78437ac6c53afc918802163a93ee33170a366101037a1efdab82e67c2efb19734a8c3131031491b0532bccfd7b46cd823424e22bca1ff300642c94fdabe74439a998923dd89643785c5bc444e47e1e8470ae704e1ecf8f4a37f76dde544f70519ed35285eed5bca7965a543000fba6cddc0ad2a83d07d0acf328671ae2916e0323ad1fb7c0b80d1d4e867c96bcc5ea2a5ac076354b8bad40bb900d3750d902ea2984671cae4634f72638c9ea9f0970e293a996cd5c4c0eab5a103e84eb2dedec624fa8092e1a5be396608acc2f63b5738c0be637aab59e7c60ae5aeac7db6b8cfa9514b56f0876bc900ec79622bfd32ae9c65f8f38a906921bb478926481cccd571a5e07c6b0cea14da0b14e916842e80bc6115fcf57b5e33f158df9bfff27979ef5d793b201252aec3e5c9e3a150bf6890b9224976961535eddc6cdef10ffdcabfc5b22fd5a7385ea6ceefb34532a1173f6c9a7425fbf34c5189653d20ecb85935ddc5c3a9e211477b2f9545d3284f93d3949a26779e65346b923a49651a8219d00ebd234b2323deeef0d36c7de5d8260c2d7856fea753995af93071d60082e1009ae406cbbaa295e71edac9ab51ef8955fef10d0d0fa3f83b4e94b409a0f38c6f4751b51e5eb3a993aa629a8de5495adca17f84fad90b64c55693afca513ba001327260e5e4375382b984a102e5458cfaa49e7782f4cbf069bd5f32cebd9a65c8cf0d710cd31607094ac59fd2b63bfbc592d7740ba4c505111baf23358991aaee15057ea33bc8dc30eeb0d8ca820572a91a8ce5b46e6c2df54c53b185cfdbe96b9382ed46aaa31d75d9bf0071113aee8f6baef48beb334a6fcd28daeb950a354eebd8ee23ef14837dc532a420525d6bcf55fdfd7599ccd965e2f284f76a5ce866e6a4cb7f92a3a7e12b69feb63d4dc46802bb5f227b2966a83ecb81d0c17061af300b01cb363d19559f477853be478dd8157cc10fb05e221cb4f41fb0b06bccbe8e5dee58d77919ad8e4e946e768ec42999cb2232292df63015488bb17e17843cd81d7b05ccbde3dc9eb2600e7d06d7a774972b1bb9efe054662e82413197ddd36c6f82ead2773f7d08574fc9dcd6d4ff2594d241e788c71af189786ea18c60f64635c929c9de2b1dbdee956e9cb26269419fa0d89b01d3b1ef9b3e8f8341bec3e4718d6d20377d0a7eae8faec86e784f54871d8dbfcc5e64fefff71d4de6ac947fd819f166001d5584a64f6f1a15b69654e8de69721305dc4d61229699cc3cb948811e1fc83880bf3fc6a3e5a6d2fd9189302b6184c881745e0a5b0eb3f80d9a2a2291065ad9d02587f210c481d8bfde39b4210dbe729ea2cadc68550c178d6b9de926b310f7d951b20ad737f0443f5158b4d57cce0be4abe7d7a3bee0905ec2d6cd164556081ce71371c671899423a1b52f1c22595608dd0d009860916e17629b8b52d5ce4fc6ff3f3fd9d420baedccd4696c928edab27e01bc60e0cd69462c50eab330f5911c618d8c176db80c590265db2092252e9371b16da8f69a4cc3a4dbb275850fee948d3680ae13d5103c53626bf4823910912a69b17d3d492e37375cd583e0a3c6d5a93a8ed2bd4949bc4f6be3e3bec67b1138f4a7ebc8f0c4f3cb9bc39c0a224e43f49d163ba4ac0c6557362e458c7be63dcd12e15c63b1803e81147686d614a24e6b335e7b7c39928779391eae7c49a5399d5e62dda5ceb727aba727d8001241e063d56efcbab267d6d3599b5eb07ffa6dbc4436f24194e8bb26062434681065fd1015e68de10ca508517e35ef817ecca05ba2a54287e1eb4363acb6fa426f72aba814855446b81f363cef6c8b0333e05c8bf34ee08a3fed697c2ab2c2441ba87830bca61ae76f8192eff7731cdc6eebd131ba093d85753c39212fe0d0ed4018fb2234116c160d71e4483bf6ce2f74e0430abbb8c1dfbba2e3a8b2f556c6f9688da981a98b5a042e1d5cdc2f177b696ae1c732a2fd8439ba300275250dad8cf188df179a06888b533e455b4cac271bf600339fdba5bef65ad059c8c38b65b3e8f0ac6b929014d239df93083204369273173d6b3a7bc962e636f7415310047c56face439dc1f7cb755d7c9475815a13282e3dc508058686ff212f6477ab26f900b9ad82f82ca914827a44562185b920a1ea4b1a70e541e91a3f22840f4c4a6b5ee2284dc369c460a1b98d17cdc4b8c4fe2576747", 0x1000}, {&(0x7f0000000380)="e358ad416062", 0x6}, {&(0x7f0000000a00)="d320e86ca86e0de7f3eb220f03f804ff04460186064fb87ce4469ad0dc872d47bc2e4a3708ac729a8edee503c033a4348e60822cc71fd7414d48fc38edc8c7f4bef823a859cf28a997fb8022f87e5a1bbe69f55f29a48b35a4a6e378f601d1c85dc6f535a00b58092bca5dda5b732dc20634a3cb080a0c55f0809f7d0c1ac15a08336c43dff7adf32be32c5cd45c48655135a6de8dfe93309612c789c12b80d781c41cc3de7c5031f35a2eb3501e67f9d8", 0xb1}, {&(0x7f0000000580)="f66c2cccf40e940208fa3a8671cbb5400bca192ec46574dba04270d26cdcc9eef5bde3953039ecadcf79a6b6f0d2da995ed2ee470837841328b85efa4ec408b2b79388b884d60a4ffddd6fab5620ad561378cd84518e47f74c6af9668d98645890c2bc", 0x63}, {&(0x7f0000000600)="4d655685ff63d106a46a6516190802fc2af9c9f373f74c77589f6086ca26d1c9aa55a8e62acfee10a8d87132a1cba51c3ec5e82006ccbc7d2d12b1fdcdff4159a7ad463938e29fca33560ea09da463a31e1446bc", 0x54}, {&(0x7f0000000680)="7867890df85e1c9b3dc96ae83074bc752a75ba8d69e12b99733f0c5f0469c68ab3eff861dab2db2db71281c944f2d03fe94f3e932d40750563d5b80178c22ef4f4ef4c9b2117f4311bac7f8d29ed8086c97897cb7e225fb04ac25ec579ba9a89aac96f9bfa30c63461f2ad91fc80ffdd3396f3ef42e1818f61bd0df139a0d82ac7858155f50051b77d4cb614707dcea633fee5d1334bdd8f4d1d62649e0ff18f32702daf7be8bf9647d5c1a9bbfa040165c7e623220ae43ddfb766c1e98f1e0883adb2be83a7bdfa2a3d1ebd6fa8621ad1548f3ba691e6bfa24686", 0xdb}, {&(0x7f0000000780)="0d265658757e7716fa79e67ca1c0a9d1daeda5ead580bee4c1eb6469aaa54b393d28a05039a6c61c82ebfe74fa9c7404acbd26b06f36", 0x36}], 0x8}, 0x40000b0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 6.060500845s ago: executing program 1 (id=576): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000200000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x800000}, 0x10}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x8, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x4, [@fwd={0xc}, @float={0x5, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x9}}, @union={0x10, 0x2, 0x0, 0x5, 0x0, 0x3, [{0xf, 0x0, 0x2}, {0x10, 0x5, 0x7be5}]}, @func={0x10, 0x0, 0x0, 0xc, 0x1}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x50, 0x0, 0x2, 0x3}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @enum64={0x9, 0x6, 0x0, 0x13, 0x1, 0x9, [{0x3, 0x7fff, 0x7fffffff}, {0x8, 0x1000, 0x3}, {0xf, 0x8, 0x83d}, {0x10, 0x7f}, {0xc, 0x0, 0x4}, {0x1, 0xd04, 0x7}]}, @func_proto]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000180)=""/176, 0xf8, 0xb0, 0x1, 0x4e70, 0x10000}, 0x28) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000aed808a87ce1fd1d979660d7dfa9000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a9230", 0xd2}, {&(0x7f00000004c0)="f809c3e2eedd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r11, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000340)=ANY=[@ANYBLOB='N-N,'], 0x6a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) 4.930966001s ago: executing program 1 (id=584): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711224000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c9b42, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x79}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_devices(r2, &(0x7f00000009c0)=ANY=[@ANYBLOB='c *:', @ANYRES64=r3], 0x1d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2002}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000002c000000000300000002000000000000110400000008000000000000000200000d0000000008000000050000000b00000002000000003000000000"], &(0x7f0000000d00)=""/34, 0x47, 0x22, 0x0, 0x1a}, 0x28) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r6}) sendmsg$inet(r7, &(0x7f0000000840)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000002c0)="22c947cc90be727d8bd897c69615d1a7c2fa47ab138d68109d5bc4d25a212020601d1bd322792dc842def5437448776a6b2a2861cc759d8c066790c049991d784fe432d086cff4a6e59cac9f5266540aea28d5d598e99c35fcdd98d6a50abd2529e81c7c0480f7f54e07ae585a5dd1fa823d1668f2bd90bddd8db96b68fcb180a704e8281a44072e7f89a41b747b120e96362e531f8290a454815e02912ddba228c78547811e45b2a6b022088d1061819b", 0xb1}, {&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000000380)="e358ad416062", 0x6}, {&(0x7f0000000a00)="d320e86ca86e0de7f3eb220f03f804ff04460186064fb87ce4469ad0dc872d47bc2e4a3708ac729a8edee503c033a4348e60822cc71fd7414d48fc38edc8c7f4bef823a859cf28a997fb8022f87e5a1bbe69f55f29a48b35a4a6e378f601d1c85dc6f535a00b58092bca5dda5b732dc20634a3cb080a0c55f0809f7d0c1ac15a08336c43dff7adf32be32c5cd45c48655135a6de8dfe93309612c789c12b80d781c41cc3de7c5031f35a2eb3501e67f9d8", 0xb1}, {&(0x7f0000000580)="f66c2cccf40e940208fa3a8671cbb5400bca192ec46574dba04270d26cdcc9eef5bde3953039ecadcf79a6b6f0d2da995ed2ee470837841328b85efa4ec408b2b79388b884d60a4ffddd6fab5620ad561378cd84518e47f74c6af9668d98645890c2bc", 0x63}, {&(0x7f0000000600)="4d655685ff63d106a46a6516190802fc2af9c9f373f74c77589f6086ca26d1c9aa55a8e62acfee10a8d87132a1cba51c3ec5e82006ccbc7d2d12b1fdcdff4159a7ad463938e29fca33560ea09da463a31e1446bc", 0x54}, {&(0x7f0000000680)="7867890df85e1c9b3dc96ae83074bc752a75ba8d69e12b99733f0c5f0469c68ab3eff861dab2db2db71281c944f2d03fe94f3e932d40750563d5b80178c22ef4f4ef4c9b2117f4311bac7f8d29ed8086c97897cb7e225fb04ac25ec579ba9a89aac96f9bfa30c63461f2ad91fc80ffdd3396f3ef42e1818f61bd0df139a0d82ac7858155f50051b77d4cb614707dcea633fee5d1334bdd8f4d1d62649e0ff18f32702daf7be8bf9647d5c1a9bbfa040165c7e623220ae43ddfb766c1e98f1e0883adb2be83a7bdfa2a3d1ebd6fa8621ad1548f3ba691e6bfa24686", 0xdb}, {&(0x7f0000000780)="0d265658757e7716fa79e67ca1c0a9d1daeda5ead580bee4c1eb6469aaa54b393d28a05039a6c61c82ebfe74fa9c7404acbd26b06f36", 0x36}], 0x8}, 0x40000b0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 4.60791364s ago: executing program 0 (id=586): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711224000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c9b42, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x79}, [@ldst={0x4}]}, 0x0, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_devices(r2, &(0x7f00000009c0)=ANY=[], 0x1d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2002}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000002c000000000300000002000000000000110400000008000000000000000200000d0000000008000000050000000b00000002000000003000000000"], &(0x7f0000000d00)=""/34, 0x47, 0x22, 0x0, 0x1a}, 0x28) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r6}) sendmsg$inet(r7, &(0x7f0000000840)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000002c0)="22c947cc90be727d8bd897c69615d1a7c2fa47ab138d68109d5bc4d25a212020601d1bd322792dc842def5437448776a6b2a2861cc759d8c066790c049991d784fe432d086cff4a6e59cac9f5266540aea28d5d598e99c35fcdd98d6a50abd2529e81c7c0480f7f54e07ae585a5dd1fa823d1668f2bd90bddd8db96b68fcb180a704e8281a44072e7f89a41b747b120e96362e531f8290a454815e02912ddba228c78547811e45b2a6b022088d1061819b", 0xb1}, {&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000000380)="e358ad416062", 0x6}, {&(0x7f0000000a00)="d320e86ca86e0de7f3eb220f03f804ff04460186064fb87ce4469ad0dc872d47bc2e4a3708ac729a8edee503c033a4348e60822cc71fd7414d48fc38edc8c7f4bef823a859cf28a997fb8022f87e5a1bbe69f55f29a48b35a4a6e378f601d1c85dc6f535a00b58092bca5dda5b732dc20634a3cb080a0c55f0809f7d0c1ac15a08336c43dff7adf32be32c5cd45c48655135a6de8dfe93309612c789c12b80d781c41cc3de7c5031f35a2eb3501e67f9d8", 0xb1}, {&(0x7f0000000580)="f66c2cccf40e940208fa3a8671cbb5400bca192ec46574dba04270d26cdcc9eef5bde3953039ecadcf79a6b6f0d2da995ed2ee470837841328b85efa4ec408b2b79388b884d60a4ffddd6fab5620ad561378cd84518e47f74c6af9668d98645890c2bc", 0x63}, {&(0x7f0000000600)="4d655685ff63d106a46a6516190802fc2af9c9f373f74c77589f6086ca26d1c9aa55a8e62acfee10a8d87132a1cba51c3ec5e82006ccbc7d2d12b1fdcdff4159a7ad463938e29fca33560ea09da463a31e1446bc", 0x54}, {&(0x7f0000000680)="7867890df85e1c9b3dc96ae83074bc752a75ba8d69e12b99733f0c5f0469c68ab3eff861dab2db2db71281c944f2d03fe94f3e932d40750563d5b80178c22ef4f4ef4c9b2117f4311bac7f8d29ed8086c97897cb7e225fb04ac25ec579ba9a89aac96f9bfa30c63461f2ad91fc80ffdd3396f3ef42e1818f61bd0df139a0d82ac7858155f50051b77d4cb614707dcea633fee5d1334bdd8f4d1d62649e0ff18f32702daf7be8bf9647d5c1a9bbfa040165c7e623220ae43ddfb766c1e98f1e0883adb2be83a7bdfa2a3d1ebd6fa8621ad1548f3ba691e6bfa24686", 0xdb}, {&(0x7f0000000780)="0d265658757e7716fa79e67ca1c0a9d1daeda5ead580bee4c1eb6469aaa54b393d28a05039a6c61c82ebfe74fa9c7404acbd26b06f36", 0x36}], 0x8}, 0x40000b0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 4.223483902s ago: executing program 1 (id=589): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd) 3.805599357s ago: executing program 1 (id=590): r0 = socket$kcm(0x10, 0x2, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x11) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0xe, &(0x7f0000000040), 0x3b) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) gettid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 3.732281141s ago: executing program 2 (id=591): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdedd79f2007915, @perf_bp={0x0, 0xa}, 0x11c92d, 0x2, 0x9, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14000000100035e1d25a806f836394f903a7dc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff79097b420000080000002ebad8ba6cb70400000000000085000000820000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) 3.610392298s ago: executing program 3 (id=592): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x800000}, 0x10}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x8, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x4, [@fwd={0xc}, @float={0x5, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x9}}, @union={0x10, 0x2, 0x0, 0x5, 0x0, 0x3, [{0xf, 0x0, 0x2}, {0x10, 0x5, 0x7be5}]}, @func={0x10, 0x0, 0x0, 0xc, 0x1}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x50, 0x0, 0x2, 0x3}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @enum64={0x9, 0x6, 0x0, 0x13, 0x1, 0x9, [{0x3, 0x7fff, 0x7fffffff}, {0x8, 0x1000, 0x3}, {0xf, 0x8, 0x83d}, {0x10, 0x7f}, {0xc, 0x0, 0x4}, {0x1, 0xd04, 0x7}]}, @func_proto]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000180)=""/176, 0xf8, 0xb0, 0x1, 0x4e70, 0x10000}, 0x28) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000aed808a87ce1fd1d979660d7dfa9000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a9230", 0xd2}, {&(0x7f00000004c0)="f809c3e2eedd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r11, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000340)=ANY=[@ANYBLOB='N-N,'], 0x6a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) 3.511554094s ago: executing program 0 (id=593): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9234751", 0x81}], 0x1}, 0x4000000) 3.291748027s ago: executing program 2 (id=594): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffebf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r8, 0x10f, 0x8a, &(0x7f0000000180), 0x4bd) r9 = socket$kcm(0x10, 0x2, 0x2) close(r9) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) r11 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r11, 0x0) write$cgroup_pid(r10, &(0x7f0000000180)=r11, 0x12) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x7, @mcast2, 0x6}, 0x80, 0x0}, 0x4c071) sendmsg$kcm(r4, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x44, 0x703, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x400000, 0x4}, 0x80, 0x0}, 0x20040010) recvmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@alg, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000200)=""/250, 0xfa}, {&(0x7f0000000140)=""/53, 0x6c}, {&(0x7f0000000300)=""/150, 0x96}, {&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f00000004c0)=""/126, 0x7e}, {&(0x7f00000003c0)=""/19, 0x13}, {&(0x7f0000000840)=""/110, 0x7e}, {&(0x7f00000005c0)=""/192, 0xca}], 0x9}, 0x10010) 2.872710971s ago: executing program 3 (id=595): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[], &(0x7f0000000a40)=""/253, 0x6b, 0xfd, 0x1}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="11005b6ea02e725100"/24, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0xa) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) r2 = socket$kcm(0xa, 0x1, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x6, 0x9, &(0x7f0000000c40)=r3, 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1d0000037ea60864160af36504001a0038001d00120000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="660a00000010000061116e000000000085000000cc00000095"], &(0x7f0000000040)='syzkaller\x00', 0x9}, 0x94) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x97, 0x9, 0x14, 0xc, 0x0, 0x9, 0x28020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x5}, 0x2411, 0xffffffffffffffff, 0x200, 0x0, 0x5eba, 0x13, 0x3, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 2.859220652s ago: executing program 0 (id=603): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x800000}, 0x10}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x8, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x4, [@fwd={0xc}, @float={0x5, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x9}}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @func={0x10, 0x0, 0x0, 0xc, 0x1}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x50, 0x0, 0x2, 0x3}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @enum64={0x9, 0x6, 0x0, 0x13, 0x1, 0x9, [{0x3, 0x7fff, 0x7fffffff}, {0x8, 0x1000, 0x3}, {0xf, 0x8, 0x83d}, {0x10, 0x7f}, {0xc, 0x0, 0x4}, {0x1, 0xd04, 0x7}]}, @func_proto]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000180)=""/176, 0xe0, 0xb0, 0x1, 0x4e70, 0x10000}, 0x28) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000aed808a87ce1fd1d979660d7dfa9000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a9230", 0xd2}, {&(0x7f00000004c0)="f809c3e2eedd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r11, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000340)=ANY=[@ANYBLOB='N-N,'], 0x6a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) 1.754421847s ago: executing program 3 (id=596): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x22, 0x2f00, &(0x7f0000000680)="b9ff03316844268cb89e14f04305", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.513526291s ago: executing program 3 (id=597): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711224000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c9b42, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x79}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_devices(r2, &(0x7f00000009c0)=ANY=[@ANYBLOB='c *:', @ANYRES64=r3], 0x1d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2002}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000002c000000000300000002000000000000110400000008000000000000000200000d0000000008000000050000000b00000002000000003000000000"], &(0x7f0000000d00)=""/34, 0x47, 0x22, 0x0, 0x1a}, 0x28) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r6}) sendmsg$inet(r7, &(0x7f0000000840)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000002c0)="22c947cc90be727d8bd897c69615d1a7c2fa47ab138d68109d5bc4d25a212020601d1bd322792dc842def5437448776a6b2a2861cc759d8c066790c049991d784fe432d086cff4a6e59cac9f5266540aea28d5d598e99c35fcdd98d6a50abd2529e81c7c0480f7f54e07ae585a5dd1fa823d1668f2bd90bddd8db96b68fcb180a704e8281a44072e7f89a41b747b120e96362e531f8290a454815e02912ddba228c78547811e45b2a6b022088d1061819b", 0xb1}, {&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000000380)="e358ad416062", 0x6}, {&(0x7f0000000a00)="d320e86ca86e0de7f3eb220f03f804ff04460186064fb87ce4469ad0dc872d47bc2e4a3708ac729a8edee503c033a4348e60822cc71fd7414d48fc38edc8c7f4bef823a859cf28a997fb8022f87e5a1bbe69f55f29a48b35a4a6e378f601d1c85dc6f535a00b58092bca5dda5b732dc20634a3cb080a0c55f0809f7d0c1ac15a08336c43dff7adf32be32c5cd45c48655135a6de8dfe93309612c789c12b80d781c41cc3de7c5031f35a2eb3501e67f9d8", 0xb1}, {&(0x7f0000000580)="f66c2cccf40e940208fa3a8671cbb5400bca192ec46574dba04270d26cdcc9eef5bde3953039ecadcf79a6b6f0d2da995ed2ee470837841328b85efa4ec408b2b79388b884d60a4ffddd6fab5620ad561378cd84518e47f74c6af9668d98645890c2bc", 0x63}, {&(0x7f0000000600)="4d655685ff63d106a46a6516190802fc2af9c9f373f74c77589f6086ca26d1c9aa55a8e62acfee10a8d87132a1cba51c3ec5e82006ccbc7d2d12b1fdcdff4159a7ad463938e29fca33560ea09da463a31e1446bc", 0x54}, {&(0x7f0000000680)="7867890df85e1c9b3dc96ae83074bc752a75ba8d69e12b99733f0c5f0469c68ab3eff861dab2db2db71281c944f2d03fe94f3e932d40750563d5b80178c22ef4f4ef4c9b2117f4311bac7f8d29ed8086c97897cb7e225fb04ac25ec579ba9a89aac96f9bfa30c63461f2ad91fc80ffdd3396f3ef42e1818f61bd0df139a0d82ac7858155f50051b77d4cb614707dcea633fee5d1334bdd8f4d1d62649e0ff18f32702daf7be8bf9647d5c1a9bbfa040165c7e623220ae43ddfb766c1e98f1e0883adb2be83a7bdfa2a3d1ebd6fa8621ad1548f3ba691e6bfa24686", 0xdb}, {&(0x7f0000000780)="0d265658757e7716fa79e67ca1c0a9d1daeda5ead580bee4c1eb6469aaa54b393d28a05039a6c61c82ebfe74fa9c7404acbd26b06f36", 0x36}], 0x8}, 0x40000b0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.496398732s ago: executing program 0 (id=598): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd) 1.395140358s ago: executing program 2 (id=599): perf_event_open(0x0, 0x0, 0xffffffff7fffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f0000000380)={0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x11, &(0x7f00000009c0)=ANY=[@ANYBLOB="85200000040000008419f0ffaf910a", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000004c1a100000000000", @ANYRES32], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000f8ffffff00000000000000019500000000000000092612a1717c5114c265037f9ee815d518202dada175c7f97b01424099a97f1d43135b196c3b811ddd8a8221fdaf983db55f438ec4de100e58ec29e2a1d10a3d03e761e97a06c8c552c5ea2d723b1fa1435a65c90078a6"], 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x40) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f000000028000", 0x2b}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, 0x0, 0xbf9d5a5a4c2f3718) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r5, 0x0, 0x40000002) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xe}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d", 0x24}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) 1.269600905s ago: executing program 0 (id=600): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711224000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c9b42, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x79}, [@ldst={0x4}]}, 0x0, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_devices(r2, &(0x7f00000009c0)=ANY=[], 0x1d) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000002c000000000300000002000000000000110400000008000000000000000200000d0000000008000000050000000b00000002000000003000000000"], &(0x7f0000000d00)=""/34, 0x47, 0x22, 0x0, 0x1a}, 0x28) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r6}) sendmsg$inet(r7, &(0x7f0000000840)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000002c0)="22c947cc90be727d8bd897c69615d1a7c2fa47ab138d68109d5bc4d25a212020601d1bd322792dc842def5437448776a6b2a2861cc759d8c066790c049991d784fe432d086cff4a6e59cac9f5266540aea28d5d598e99c35fcdd98d6a50abd2529e81c7c0480f7f54e07ae585a5dd1fa823d1668f2bd90bddd8db96b68fcb180a704e8281a44072e7f89a41b747b120e96362e531f8290a454815e02912ddba228c78547811e45b2a6b022088d1061819b", 0xb1}, {&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000000380)="e358ad416062", 0x6}, {&(0x7f0000000a00)="d320e86ca86e0de7f3eb220f03f804ff04460186064fb87ce4469ad0dc872d47bc2e4a3708ac729a8edee503c033a4348e60822cc71fd7414d48fc38edc8c7f4bef823a859cf28a997fb8022f87e5a1bbe69f55f29a48b35a4a6e378f601d1c85dc6f535a00b58092bca5dda5b732dc20634a3cb080a0c55f0809f7d0c1ac15a08336c43dff7adf32be32c5cd45c48655135a6de8dfe93309612c789c12b80d781c41cc3de7c5031f35a2eb3501e67f9d8", 0xb1}, {&(0x7f0000000580)="f66c2cccf40e940208fa3a8671cbb5400bca192ec46574dba04270d26cdcc9eef5bde3953039ecadcf79a6b6f0d2da995ed2ee470837841328b85efa4ec408b2b79388b884d60a4ffddd6fab5620ad561378cd84518e47f74c6af9668d98645890c2bc", 0x63}, {&(0x7f0000000600)="4d655685ff63d106a46a6516190802fc2af9c9f373f74c77589f6086ca26d1c9aa55a8e62acfee10a8d87132a1cba51c3ec5e82006ccbc7d2d12b1fdcdff4159a7ad463938e29fca33560ea09da463a31e1446bc", 0x54}, {&(0x7f0000000680)="7867890df85e1c9b3dc96ae83074bc752a75ba8d69e12b99733f0c5f0469c68ab3eff861dab2db2db71281c944f2d03fe94f3e932d40750563d5b80178c22ef4f4ef4c9b2117f4311bac7f8d29ed8086c97897cb7e225fb04ac25ec579ba9a89aac96f9bfa30c63461f2ad91fc80ffdd3396f3ef42e1818f61bd0df139a0d82ac7858155f50051b77d4cb614707dcea633fee5d1334bdd8f4d1d62649e0ff18f32702daf7be8bf9647d5c1a9bbfa040165c7e623220ae43ddfb766c1e98f1e0883adb2be83a7bdfa2a3d1ebd6fa8621ad1548f3ba691e6bfa24686", 0xdb}, {&(0x7f0000000780)="0d265658757e7716fa79e67ca1c0a9d1daeda5ead580bee4c1eb6469aaa54b393d28a05039a6c61c82ebfe74fa9c7404acbd26b06f36", 0x36}], 0x8}, 0x40000b0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.069117347s ago: executing program 3 (id=601): r0 = socket$kcm(0x10, 0x2, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000), 0x11) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0xe, &(0x7f0000000040), 0x3b) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) gettid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 1.056262228s ago: executing program 2 (id=602): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b0, &(0x7f0000000040)={'vlan0\x00', @random="180700000020"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x6800}], 0x1}, 0x0) 673.15468ms ago: executing program 2 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 574.783416ms ago: executing program 0 (id=605): r0 = socket$kcm(0x10, 0x2, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000), 0x11) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0xe, &(0x7f0000000040), 0x3b) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) gettid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 209.608777ms ago: executing program 2 (id=606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000170000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000004"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8902, &(0x7f00000013c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257075bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b257183fa3bcd48666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09601f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebd00000000000000005839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dcc718a09f4886afc26abba34635d0e8b54bc76be40d435aa8b5202db761014b1b999a12df6bee431a666100"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0x11, 0x0, &(0x7f0000000000)="ffffffff7f833e97627153c801d72069cc", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff80fe, 0x8}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x400, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000b7"], 0x48) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8001b000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb7e4ce1b14d6d93424841f468430dfe1d9d322fe7c0aaa16bfddc64193071e9f8775730d16a4683f7a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bdffcaab", 0xd8}], 0x1}, 0x20008800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x408, 0x0, 0x0, 0x0, 0x47bda6db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x0, 0x1, 0x40000, 0x0, 0xffff}, 0x0, 0x200, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=607): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x800000}, 0x10}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x8, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x4, [@fwd={0xc}, @float={0x5, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x9}}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @func={0x10, 0x0, 0x0, 0xc, 0x1}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x50, 0x0, 0x2, 0x3}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @enum64={0x9, 0x6, 0x0, 0x13, 0x1, 0x9, [{0x3, 0x7fff, 0x7fffffff}, {0x8, 0x1000, 0x3}, {0xf, 0x8, 0x83d}, {0x10, 0x7f}, {0xc, 0x0, 0x4}, {0x1, 0xd04, 0x7}]}, @func_proto]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000180)=""/176, 0xe0, 0xb0, 0x1, 0x4e70, 0x10000}, 0x28) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000aed808a87ce1fd1d979660d7dfa9000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a9230", 0xd2}, {&(0x7f00000004c0)="f809c3e2eedd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r11, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000340)=ANY=[@ANYBLOB='N-N,'], 0x6a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) kernel console output (not intermixed with test programs): 020197][ T6622] sit0: entered allmulticast mode [ 144.182589][ T11] wlan1: Trigger new scan to find an IBSS to join [ 144.354241][ T6627] sit0: entered promiscuous mode [ 144.951915][ T6628] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 145.095154][ T6630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.137659][ T59] wlan1: Trigger new scan to find an IBSS to join [ 145.153107][ T6638] netlink: 'syz.2.220': attribute type 27 has an invalid length. [ 145.318015][ T6640] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.221'. [ 145.392317][ T6640] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 145.410644][ T6640] CPU: 0 PID: 6640 Comm: syz.1.221 Not tainted syzkaller #0 [ 145.418042][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.428172][ T6640] Call Trace: [ 145.431497][ T6640] [ 145.434465][ T6640] dump_stack_lvl+0x18c/0x250 [ 145.439212][ T6640] ? show_regs_print_info+0x20/0x20 [ 145.444465][ T6640] ? load_image+0x400/0x400 [ 145.449045][ T6640] sysfs_warn_dup+0x8e/0xa0 [ 145.453595][ T6640] sysfs_do_create_link_sd+0xc0/0x110 [ 145.459018][ T6640] device_add_class_symlinks+0x1cf/0x240 [ 145.464735][ T6640] device_add+0x507/0xc20 [ 145.469209][ T6640] wiphy_register+0x1dad/0x2ae0 [ 145.474161][ T6640] ? cfg80211_event_work+0x40/0x40 [ 145.479339][ T6640] ? minstrel_ht_alloc+0x88a/0x990 [ 145.484514][ T6640] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 145.490640][ T6640] ieee80211_register_hw+0x3464/0x4250 [ 145.496181][ T6640] ? ieee80211_tasklet_handler+0x20/0x20 [ 145.501880][ T6640] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 145.507843][ T6640] ? __debug_object_init+0xec/0x450 [ 145.513104][ T6640] ? __asan_memset+0x22/0x40 [ 145.517790][ T6640] ? __hrtimer_init+0x186/0x270 [ 145.522706][ T6640] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 145.528526][ T6640] ? mac80211_hwsim_free+0x220/0x220 [ 145.533894][ T6640] ? rcu_is_watching+0x15/0xb0 [ 145.538694][ T6640] ? kstrndup+0xbd/0x140 [ 145.542991][ T6640] hwsim_new_radio_nl+0xdc9/0x1a90 [ 145.548155][ T6640] ? __nla_validate+0x50/0x50 [ 145.552906][ T6640] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 145.559305][ T6640] ? __nla_parse+0x40/0x50 [ 145.563858][ T6640] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 145.570234][ T6640] genl_family_rcv_msg_doit+0x211/0x310 [ 145.575828][ T6640] ? end_current_label_crit_section+0x170/0x170 [ 145.582112][ T6640] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 145.588056][ T6640] ? bpf_lsm_capable+0x9/0x10 [ 145.592770][ T6640] ? security_capable+0x89/0xb0 [ 145.597670][ T6640] genl_rcv_msg+0x619/0x7a0 [ 145.602218][ T6640] ? genl_bind+0x360/0x360 [ 145.606675][ T6640] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 145.613057][ T6640] ? ref_tracker_free+0x690/0x840 [ 145.618159][ T6640] netlink_rcv_skb+0x241/0x4d0 [ 145.622971][ T6640] ? genl_bind+0x360/0x360 [ 145.627459][ T6640] ? netlink_ack+0x1180/0x1180 [ 145.632305][ T6640] ? __lock_acquire+0x7d40/0x7d40 [ 145.637382][ T6640] ? down_read+0x1ac/0x2e0 [ 145.641880][ T6640] genl_rcv+0x28/0x40 [ 145.645909][ T6640] netlink_unicast+0x751/0x8d0 [ 145.650744][ T6640] netlink_sendmsg+0x8d0/0xbf0 [ 145.655568][ T6640] ? netlink_getsockopt+0x590/0x590 [ 145.660827][ T6640] ? aa_sock_msg_perm+0x94/0x150 [ 145.665834][ T6640] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 145.671181][ T6640] ? security_socket_sendmsg+0x80/0xa0 [ 145.676672][ T6640] ? netlink_getsockopt+0x590/0x590 [ 145.681908][ T6640] ____sys_sendmsg+0x5ba/0x960 [ 145.686715][ T6640] ? __asan_memset+0x22/0x40 [ 145.691352][ T6640] ? __sys_sendmsg_sock+0x30/0x30 [ 145.696430][ T6640] ? __import_iovec+0x5f2/0x850 [ 145.701327][ T6640] ? import_iovec+0x73/0xa0 [ 145.705877][ T6640] ___sys_sendmsg+0x2a6/0x360 [ 145.710606][ T6640] ? __sys_sendmsg+0x2a0/0x2a0 [ 145.715454][ T6640] __se_sys_sendmsg+0x1c2/0x2b0 [ 145.720347][ T6640] ? __x64_sys_sendmsg+0x80/0x80 [ 145.725352][ T6640] ? lockdep_hardirqs_on+0x98/0x150 [ 145.730593][ T6640] do_syscall_64+0x55/0xa0 [ 145.735045][ T6640] ? clear_bhb_loop+0x40/0x90 [ 145.739747][ T6640] ? clear_bhb_loop+0x40/0x90 [ 145.744458][ T6640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.750393][ T6640] RIP: 0033:0x7f77be99acb9 [ 145.754842][ T6640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.774519][ T6640] RSP: 002b:00007f77bcbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.782994][ T6640] RAX: ffffffffffffffda RBX: 00007f77bec15fa0 RCX: 00007f77be99acb9 [ 145.791004][ T6640] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 145.799012][ T6640] RBP: 00007f77bea08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 145.807011][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.815011][ T6640] R13: 00007f77bec16038 R14: 00007f77bec15fa0 R15: 00007ffd43db80a8 [ 145.823027][ T6640] [ 146.171507][ T6648] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 146.488242][ T11] wlan1: Creating new IBSS network, BSSID ca:9a:a6:60:93:10 [ 147.122729][ T6669] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 147.252641][ T6670] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 148.176474][ T49] wlan1: Trigger new scan to find an IBSS to join [ 148.284306][ T6685] netlink: 'syz.3.235': attribute type 39 has an invalid length. [ 149.150382][ T11] wlan1: Trigger new scan to find an IBSS to join [ 149.210298][ T49] wlan1: Creating new IBSS network, BSSID 1e:66:83:53:85:f4 [ 150.149423][ T6721] netlink: 'syz.2.246': attribute type 39 has an invalid length. [ 151.196392][ T6757] netlink: 'syz.1.262': attribute type 21 has an invalid length. [ 151.204248][ T6757] netlink: 'syz.1.262': attribute type 4 has an invalid length. [ 151.216641][ T11] wlan1: Trigger new scan to find an IBSS to join [ 151.254574][ T6757] netlink: 156 bytes leftover after parsing attributes in process `syz.1.262'. [ 151.329088][ T6756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.564241][ T6765] netlink: 'syz.3.265': attribute type 39 has an invalid length. [ 151.615683][ T6776] FAULT_INJECTION: forcing a failure. [ 151.615683][ T6776] name failslab, interval 1, probability 0, space 0, times 0 [ 151.672169][ T6776] CPU: 1 PID: 6776 Comm: syz.2.269 Not tainted syzkaller #0 [ 151.679557][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.689668][ T6776] Call Trace: [ 151.692986][ T6776] [ 151.695953][ T6776] dump_stack_lvl+0x18c/0x250 [ 151.700692][ T6776] ? show_regs_print_info+0x20/0x20 [ 151.705941][ T6776] ? load_image+0x400/0x400 [ 151.710487][ T6776] ? __might_sleep+0xe0/0xe0 [ 151.715121][ T6776] ? __lock_acquire+0x7d40/0x7d40 [ 151.720203][ T6776] should_fail_ex+0x39d/0x4d0 [ 151.724936][ T6776] should_failslab+0x9/0x20 [ 151.729492][ T6776] slab_pre_alloc_hook+0x59/0x310 [ 151.734570][ T6776] ? tomoyo_encode+0x28b/0x540 [ 151.739417][ T6776] ? tomoyo_encode+0x28b/0x540 [ 151.744237][ T6776] __kmem_cache_alloc_node+0x53/0x250 [ 151.749676][ T6776] ? tomoyo_encode+0x28b/0x540 [ 151.754523][ T6776] __kmalloc+0xa4/0x230 [ 151.758745][ T6776] tomoyo_encode+0x28b/0x540 [ 151.763392][ T6776] tomoyo_realpath_from_path+0x592/0x5d0 [ 151.769107][ T6776] tomoyo_path_number_perm+0x248/0x620 [ 151.774642][ T6776] ? tomoyo_path_number_perm+0x217/0x620 [ 151.780336][ T6776] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 151.785856][ T6776] ? ksys_write+0x1c4/0x260 [ 151.790449][ T6776] ? __fget_files+0x28/0x4b0 [ 151.795103][ T6776] ? __fget_files+0x28/0x4b0 [ 151.799753][ T6776] security_file_ioctl+0x70/0xa0 [ 151.804747][ T6776] __se_sys_ioctl+0x48/0x170 [ 151.809409][ T6776] do_syscall_64+0x55/0xa0 [ 151.813870][ T6776] ? clear_bhb_loop+0x40/0x90 [ 151.818589][ T6776] ? clear_bhb_loop+0x40/0x90 [ 151.823322][ T6776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.829254][ T6776] RIP: 0033:0x7fdd3499acb9 [ 151.833711][ T6776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.853365][ T6776] RSP: 002b:00007fdd3586d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.861825][ T6776] RAX: ffffffffffffffda RBX: 00007fdd34c15fa0 RCX: 00007fdd3499acb9 [ 151.869838][ T6776] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000005 [ 151.877852][ T6776] RBP: 00007fdd3586d090 R08: 0000000000000000 R09: 0000000000000000 [ 151.885862][ T6776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.893878][ T6776] R13: 00007fdd34c16038 R14: 00007fdd34c15fa0 R15: 00007fff97752bf8 [ 151.901917][ T6776] [ 151.932483][ T6776] ERROR: Out of memory at tomoyo_realpath_from_path. [ 152.071110][ T6780] netlink: 'syz.1.267': attribute type 39 has an invalid length. [ 152.181025][ T49] wlan1: Trigger new scan to find an IBSS to join [ 152.362421][ T6784] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 152.797229][ T6797] netlink: 60 bytes leftover after parsing attributes in process `syz.1.275'. [ 152.807012][ T6797] netlink: 60 bytes leftover after parsing attributes in process `syz.1.275'. [ 152.818687][ T6797] netlink: 60 bytes leftover after parsing attributes in process `syz.1.275'. [ 152.829323][ T6797] netlink: 60 bytes leftover after parsing attributes in process `syz.1.275'. [ 153.018439][ T6802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.652886][ T6813] netlink: 'syz.2.279': attribute type 39 has an invalid length. [ 154.241458][ T6829] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.283'. [ 154.327093][ T6829] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 154.385571][ T6836] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 154.524166][ T6828] netlink: 'syz.2.283': attribute type 27 has an invalid length. [ 154.649573][ T6835] netlink: 'syz.0.284': attribute type 39 has an invalid length. [ 155.136856][ T32] wlan1: Trigger new scan to find an IBSS to join [ 155.143548][ T49] wlan1: Creating new IBSS network, BSSID e2:f1:8f:01:81:33 [ 155.242851][ T6851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.161357][ T32] wlan1: Creating new IBSS network, BSSID 46:d7:31:0b:f3:4f [ 156.893460][ T6871] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.297'. [ 156.926009][ T6871] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 156.937696][ T6883] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 157.136155][ T1148] wlan1: Trigger new scan to find an IBSS to join [ 157.173369][ T6871] netlink: 'syz.1.297': attribute type 27 has an invalid length. [ 157.531628][ T6887] netlink: 'syz.3.301': attribute type 10 has an invalid length. [ 157.656798][ T6887] veth0_vlan: left promiscuous mode [ 157.704936][ T6887] veth0_vlan: entered promiscuous mode [ 157.780168][ T6887] team0: Device veth0_vlan failed to register rx_handler [ 157.983250][ T6898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.234210][ T1136] wlan1: Trigger new scan to find an IBSS to join [ 159.321355][ T6925] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.313'. [ 159.379916][ T6925] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 159.413839][ T6928] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.316'. [ 159.582249][ T6921] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 159.647294][ T6928] netlink: 8454 bytes leftover after parsing attributes in process `syz.1.316'. [ 159.673796][ T6929] netlink: 'syz.0.313': attribute type 27 has an invalid length. [ 159.789034][ T6931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 160.097233][ T6939] netlink: 60 bytes leftover after parsing attributes in process `syz.3.320'. [ 160.454569][ T6948] netlink: 'syz.0.322': attribute type 1 has an invalid length. [ 160.465511][ T6948] netlink: 'syz.0.322': attribute type 4 has an invalid length. [ 160.474338][ T6948] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.322'. [ 161.021576][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 161.032613][ T6954] hsr0: entered allmulticast mode [ 161.048155][ T6954] hsr_slave_0: entered allmulticast mode [ 161.054138][ T6954] hsr_slave_1: entered allmulticast mode [ 161.207412][ T6961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.216983][ T32] wlan1: Trigger new scan to find an IBSS to join [ 161.522617][ T6968] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.329'. [ 161.546240][ T6968] netlink: 8454 bytes leftover after parsing attributes in process `syz.2.329'. [ 162.157693][ T6980] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 162.176085][ T744] wlan1: Trigger new scan to find an IBSS to join [ 162.241711][ T32] wlan1: Creating new IBSS network, BSSID ce:d3:fc:cf:06:bb [ 162.351745][ T6984] netlink: 'syz.0.333': attribute type 39 has an invalid length. [ 162.521808][ T6987] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 163.306007][ T6996] netlink: 14 bytes leftover after parsing attributes in process `syz.0.340'. [ 163.446786][ T6993] sit0: left promiscuous mode [ 163.614016][ T7000] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.172355][ T7018] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.346'. [ 164.186295][ T32] wlan1: Trigger new scan to find an IBSS to join [ 164.221653][ T7018] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 164.271100][ T7018] CPU: 1 PID: 7018 Comm: syz.3.346 Not tainted syzkaller #0 [ 164.278506][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.288623][ T7018] Call Trace: [ 164.291952][ T7018] [ 164.294921][ T7018] dump_stack_lvl+0x18c/0x250 [ 164.299642][ T7018] ? show_regs_print_info+0x20/0x20 [ 164.304892][ T7018] ? load_image+0x400/0x400 [ 164.309438][ T7018] sysfs_warn_dup+0x8e/0xa0 [ 164.313979][ T7018] sysfs_do_create_link_sd+0xc0/0x110 [ 164.319390][ T7018] device_add_class_symlinks+0x1cf/0x240 [ 164.325061][ T7018] device_add+0x507/0xc20 [ 164.329426][ T7018] wiphy_register+0x1dad/0x2ae0 [ 164.334328][ T7018] ? cfg80211_event_work+0x40/0x40 [ 164.339470][ T7018] ? minstrel_ht_alloc+0x88a/0x990 [ 164.344623][ T7018] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 164.350728][ T7018] ieee80211_register_hw+0x3464/0x4250 [ 164.356255][ T7018] ? ieee80211_tasklet_handler+0x20/0x20 [ 164.361938][ T7018] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 164.367862][ T7018] ? __debug_object_init+0xec/0x450 [ 164.373099][ T7018] ? __asan_memset+0x22/0x40 [ 164.377729][ T7018] ? __hrtimer_init+0x186/0x270 [ 164.382639][ T7018] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 164.388417][ T7018] ? mac80211_hwsim_free+0x220/0x220 [ 164.393733][ T7018] ? rcu_is_watching+0x15/0xb0 [ 164.398525][ T7018] ? kstrndup+0xbd/0x140 [ 164.402819][ T7018] hwsim_new_radio_nl+0xdc9/0x1a90 [ 164.407976][ T7018] ? __nla_validate+0x50/0x50 [ 164.412716][ T7018] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 164.419108][ T7018] ? __nla_parse+0x40/0x50 [ 164.423557][ T7018] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 164.429935][ T7018] genl_family_rcv_msg_doit+0x211/0x310 [ 164.435533][ T7018] ? end_current_label_crit_section+0x170/0x170 [ 164.441806][ T7018] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 164.447743][ T7018] ? bpf_lsm_capable+0x9/0x10 [ 164.452453][ T7018] ? security_capable+0x89/0xb0 [ 164.457343][ T7018] genl_rcv_msg+0x619/0x7a0 [ 164.461901][ T7018] ? genl_bind+0x360/0x360 [ 164.466353][ T7018] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 164.472715][ T7018] ? ref_tracker_free+0x690/0x840 [ 164.477774][ T7018] netlink_rcv_skb+0x241/0x4d0 [ 164.482578][ T7018] ? genl_bind+0x360/0x360 [ 164.487028][ T7018] ? netlink_ack+0x1180/0x1180 [ 164.491832][ T7018] ? __lock_acquire+0x7d40/0x7d40 [ 164.496896][ T7018] ? down_read+0x1ac/0x2e0 [ 164.501347][ T7018] genl_rcv+0x28/0x40 [ 164.505366][ T7018] netlink_unicast+0x751/0x8d0 [ 164.510168][ T7018] netlink_sendmsg+0x8d0/0xbf0 [ 164.514978][ T7018] ? netlink_getsockopt+0x590/0x590 [ 164.520212][ T7018] ? aa_sock_msg_perm+0x94/0x150 [ 164.525185][ T7018] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 164.530506][ T7018] ? security_socket_sendmsg+0x80/0xa0 [ 164.536009][ T7018] ? netlink_getsockopt+0x590/0x590 [ 164.541244][ T7018] ____sys_sendmsg+0x5ba/0x960 [ 164.546046][ T7018] ? __asan_memset+0x22/0x40 [ 164.550671][ T7018] ? __sys_sendmsg_sock+0x30/0x30 [ 164.555731][ T7018] ? __import_iovec+0x5f2/0x850 [ 164.560641][ T7018] ? import_iovec+0x73/0xa0 [ 164.565192][ T7018] ___sys_sendmsg+0x2a6/0x360 [ 164.569914][ T7018] ? __sys_sendmsg+0x2a0/0x2a0 [ 164.574757][ T7018] __se_sys_sendmsg+0x1c2/0x2b0 [ 164.579642][ T7018] ? __x64_sys_sendmsg+0x80/0x80 [ 164.584624][ T7018] ? lockdep_hardirqs_on+0x98/0x150 [ 164.589874][ T7018] do_syscall_64+0x55/0xa0 [ 164.594318][ T7018] ? clear_bhb_loop+0x40/0x90 [ 164.599018][ T7018] ? clear_bhb_loop+0x40/0x90 [ 164.603749][ T7018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.609675][ T7018] RIP: 0033:0x7fee6cf9acb9 [ 164.614151][ T7018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.633790][ T7018] RSP: 002b:00007fee6de49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.642226][ T7018] RAX: ffffffffffffffda RBX: 00007fee6d215fa0 RCX: 00007fee6cf9acb9 [ 164.650226][ T7018] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 164.658234][ T7018] RBP: 00007fee6d008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 164.666238][ T7018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.674247][ T7018] R13: 00007fee6d216038 R14: 00007fee6d215fa0 R15: 00007ffd491662b8 [ 164.682381][ T7018] [ 164.844688][ T7019] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.346'. [ 165.127173][ T7030] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 165.218030][ T59] wlan1: Trigger new scan to find an IBSS to join [ 165.299815][ T7037] netlink: 'syz.2.349': attribute type 39 has an invalid length. [ 165.703519][ T7046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.385448][ T7060] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.360'. [ 166.485441][ T7063] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.360'. [ 166.546605][ T7060] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 166.569785][ T7060] CPU: 0 PID: 7060 Comm: syz.1.360 Not tainted syzkaller #0 [ 166.577352][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.587463][ T7060] Call Trace: [ 166.590791][ T7060] [ 166.593771][ T7060] dump_stack_lvl+0x18c/0x250 [ 166.598523][ T7060] ? show_regs_print_info+0x20/0x20 [ 166.603800][ T7060] ? load_image+0x400/0x400 [ 166.608390][ T7060] sysfs_warn_dup+0x8e/0xa0 [ 166.612943][ T7060] sysfs_do_create_link_sd+0xc0/0x110 [ 166.618372][ T7060] device_add_class_symlinks+0x1cf/0x240 [ 166.624070][ T7060] device_add+0x507/0xc20 [ 166.628467][ T7060] wiphy_register+0x1dad/0x2ae0 [ 166.633405][ T7060] ? cfg80211_event_work+0x40/0x40 [ 166.638582][ T7060] ? minstrel_ht_alloc+0x88a/0x990 [ 166.643772][ T7060] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 166.649896][ T7060] ieee80211_register_hw+0x3464/0x4250 [ 166.655441][ T7060] ? ieee80211_tasklet_handler+0x20/0x20 [ 166.661133][ T7060] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 166.667112][ T7060] ? __debug_object_init+0xec/0x450 [ 166.672373][ T7060] ? __asan_memset+0x22/0x40 [ 166.677017][ T7060] ? __hrtimer_init+0x186/0x270 [ 166.681920][ T7060] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 166.687732][ T7060] ? mac80211_hwsim_free+0x220/0x220 [ 166.693070][ T7060] ? rcu_is_watching+0x15/0xb0 [ 166.697884][ T7060] ? kstrndup+0xbd/0x140 [ 166.702192][ T7060] hwsim_new_radio_nl+0xdc9/0x1a90 [ 166.707394][ T7060] ? __nla_validate+0x50/0x50 [ 166.712151][ T7060] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 166.718557][ T7060] ? __nla_parse+0x40/0x50 [ 166.723040][ T7060] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 166.729439][ T7060] genl_family_rcv_msg_doit+0x211/0x310 [ 166.735065][ T7060] ? end_current_label_crit_section+0x170/0x170 [ 166.741371][ T7060] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 166.747353][ T7060] ? bpf_lsm_capable+0x9/0x10 [ 166.752089][ T7060] ? security_capable+0x89/0xb0 [ 166.757004][ T7060] genl_rcv_msg+0x619/0x7a0 [ 166.761581][ T7060] ? genl_bind+0x360/0x360 [ 166.766062][ T7060] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 166.772447][ T7060] ? ref_tracker_free+0x690/0x840 [ 166.777537][ T7060] netlink_rcv_skb+0x241/0x4d0 [ 166.782415][ T7060] ? genl_bind+0x360/0x360 [ 166.786894][ T7060] ? netlink_ack+0x1180/0x1180 [ 166.791822][ T7060] ? __lock_acquire+0x7d40/0x7d40 [ 166.796923][ T7060] ? down_read+0x1ac/0x2e0 [ 166.801420][ T7060] genl_rcv+0x28/0x40 [ 166.805470][ T7060] netlink_unicast+0x751/0x8d0 [ 166.810312][ T7060] netlink_sendmsg+0x8d0/0xbf0 [ 166.815147][ T7060] ? netlink_getsockopt+0x590/0x590 [ 166.820405][ T7060] ? aa_sock_msg_perm+0x94/0x150 [ 166.825389][ T7060] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 166.830713][ T7060] ? security_socket_sendmsg+0x80/0xa0 [ 166.836228][ T7060] ? netlink_getsockopt+0x590/0x590 [ 166.841483][ T7060] ____sys_sendmsg+0x5ba/0x960 [ 166.846351][ T7060] ? __asan_memset+0x22/0x40 [ 166.850993][ T7060] ? __sys_sendmsg_sock+0x30/0x30 [ 166.856100][ T7060] ? __import_iovec+0x5f2/0x850 [ 166.861024][ T7060] ? import_iovec+0x73/0xa0 [ 166.865586][ T7060] ___sys_sendmsg+0x2a6/0x360 [ 166.870333][ T7060] ? __sys_sendmsg+0x2a0/0x2a0 [ 166.875205][ T7060] __se_sys_sendmsg+0x1c2/0x2b0 [ 166.880117][ T7060] ? __x64_sys_sendmsg+0x80/0x80 [ 166.885134][ T7060] ? lockdep_hardirqs_on+0x98/0x150 [ 166.890383][ T7060] do_syscall_64+0x55/0xa0 [ 166.894846][ T7060] ? clear_bhb_loop+0x40/0x90 [ 166.899566][ T7060] ? clear_bhb_loop+0x40/0x90 [ 166.904291][ T7060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.910260][ T7060] RIP: 0033:0x7f77be99acb9 [ 166.914721][ T7060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.934384][ T7060] RSP: 002b:00007f77bcbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.942857][ T7060] RAX: ffffffffffffffda RBX: 00007f77bec15fa0 RCX: 00007f77be99acb9 [ 166.950884][ T7060] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 166.958907][ T7060] RBP: 00007f77bea08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 166.966924][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.974936][ T7060] R13: 00007f77bec16038 R14: 00007f77bec15fa0 R15: 00007ffd43db80a8 [ 166.982973][ T7060] [ 167.164638][ T7067] netlink: 'syz.0.361': attribute type 39 has an invalid length. [ 167.401405][ T7076] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 167.414628][ T7075] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.364'. [ 167.429911][ T7075] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 167.447616][ T7075] netlink: 'syz.1.364': attribute type 27 has an invalid length. [ 167.696954][ T7088] Illegal XDP return value 4294967274 on prog (id 354) dev N/A, expect packet loss! [ 167.951167][ T7097] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.372'. [ 168.038338][ T7098] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.372'. [ 168.064785][ T7097] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 168.101096][ T7097] CPU: 0 PID: 7097 Comm: syz.1.372 Not tainted syzkaller #0 [ 168.108491][ T7097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.118633][ T7097] Call Trace: [ 168.121957][ T7097] [ 168.124940][ T7097] dump_stack_lvl+0x18c/0x250 [ 168.129690][ T7097] ? show_regs_print_info+0x20/0x20 [ 168.134941][ T7097] ? load_image+0x400/0x400 [ 168.139520][ T7097] sysfs_warn_dup+0x8e/0xa0 [ 168.144065][ T7097] sysfs_do_create_link_sd+0xc0/0x110 [ 168.149481][ T7097] device_add_class_symlinks+0x1cf/0x240 [ 168.155185][ T7097] device_add+0x507/0xc20 [ 168.159586][ T7097] wiphy_register+0x1dad/0x2ae0 [ 168.164526][ T7097] ? cfg80211_event_work+0x40/0x40 [ 168.169705][ T7097] ? minstrel_ht_alloc+0x88a/0x990 [ 168.174894][ T7097] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 168.181023][ T7097] ieee80211_register_hw+0x3464/0x4250 [ 168.186579][ T7097] ? ieee80211_tasklet_handler+0x20/0x20 [ 168.192298][ T7097] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 168.198263][ T7097] ? __debug_object_init+0xec/0x450 [ 168.203544][ T7097] ? __asan_memset+0x22/0x40 [ 168.208207][ T7097] ? __hrtimer_init+0x186/0x270 [ 168.213121][ T7097] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 168.218932][ T7097] ? mac80211_hwsim_free+0x220/0x220 [ 168.224298][ T7097] ? rcu_is_watching+0x15/0xb0 [ 168.229142][ T7097] ? kstrndup+0xbd/0x140 [ 168.233468][ T7097] hwsim_new_radio_nl+0xdc9/0x1a90 [ 168.238685][ T7097] ? __nla_validate+0x50/0x50 [ 168.243448][ T7097] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 168.249861][ T7097] ? __nla_parse+0x40/0x50 [ 168.254444][ T7097] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 168.260864][ T7097] genl_family_rcv_msg_doit+0x211/0x310 [ 168.266485][ T7097] ? end_current_label_crit_section+0x170/0x170 [ 168.272818][ T7097] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 168.278809][ T7097] ? bpf_lsm_capable+0x9/0x10 [ 168.283559][ T7097] ? security_capable+0x89/0xb0 [ 168.288497][ T7097] genl_rcv_msg+0x619/0x7a0 [ 168.293083][ T7097] ? genl_bind+0x360/0x360 [ 168.297582][ T7097] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 168.303982][ T7097] ? ref_tracker_free+0x690/0x840 [ 168.309072][ T7097] netlink_rcv_skb+0x241/0x4d0 [ 168.313935][ T7097] ? genl_bind+0x360/0x360 [ 168.318416][ T7097] ? netlink_ack+0x1180/0x1180 [ 168.323256][ T7097] ? __lock_acquire+0x7d40/0x7d40 [ 168.328344][ T7097] ? down_read+0x1ac/0x2e0 [ 168.332835][ T7097] genl_rcv+0x28/0x40 [ 168.336876][ T7097] netlink_unicast+0x751/0x8d0 [ 168.341709][ T7097] netlink_sendmsg+0x8d0/0xbf0 [ 168.346541][ T7097] ? netlink_getsockopt+0x590/0x590 [ 168.351804][ T7097] ? aa_sock_msg_perm+0x94/0x150 [ 168.356802][ T7097] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 168.362145][ T7097] ? security_socket_sendmsg+0x80/0xa0 [ 168.367648][ T7097] ? netlink_getsockopt+0x590/0x590 [ 168.372905][ T7097] ____sys_sendmsg+0x5ba/0x960 [ 168.377758][ T7097] ? __asan_memset+0x22/0x40 [ 168.382409][ T7097] ? __sys_sendmsg_sock+0x30/0x30 [ 168.387500][ T7097] ? __import_iovec+0x5f2/0x850 [ 168.392422][ T7097] ? import_iovec+0x73/0xa0 [ 168.396996][ T7097] ___sys_sendmsg+0x2a6/0x360 [ 168.401750][ T7097] ? __sys_sendmsg+0x2a0/0x2a0 [ 168.406638][ T7097] __se_sys_sendmsg+0x1c2/0x2b0 [ 168.411562][ T7097] ? __x64_sys_sendmsg+0x80/0x80 [ 168.416587][ T7097] ? lockdep_hardirqs_on+0x98/0x150 [ 168.421843][ T7097] do_syscall_64+0x55/0xa0 [ 168.426324][ T7097] ? clear_bhb_loop+0x40/0x90 [ 168.431054][ T7097] ? clear_bhb_loop+0x40/0x90 [ 168.435792][ T7097] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.441740][ T7097] RIP: 0033:0x7f77be99acb9 [ 168.446231][ T7097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.465896][ T7097] RSP: 002b:00007f77bcbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.474372][ T7097] RAX: ffffffffffffffda RBX: 00007f77bec15fa0 RCX: 00007f77be99acb9 [ 168.482397][ T7097] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 168.490423][ T7097] RBP: 00007f77bea08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 168.498438][ T7097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.506475][ T7097] R13: 00007f77bec16038 R14: 00007f77bec15fa0 R15: 00007ffd43db80a8 [ 168.514523][ T7097] [ 168.523607][ T59] wlan1: Trigger new scan to find an IBSS to join [ 168.575210][ T7100] netlink: 'syz.3.373': attribute type 39 has an invalid length. [ 168.908289][ T7124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.064904][ T7125] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.377'. [ 169.092444][ T7125] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 169.550307][ T7120] netlink: 'syz.2.377': attribute type 27 has an invalid length. [ 169.587742][ T7137] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 169.823345][ T7140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.188937][ T7150] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.387'. [ 170.216930][ T1136] wlan1: Trigger new scan to find an IBSS to join [ 170.380558][ T7150] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 170.439192][ T7150] CPU: 0 PID: 7150 Comm: syz.0.387 Not tainted syzkaller #0 [ 170.446569][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.456680][ T7150] Call Trace: [ 170.460028][ T7150] [ 170.462997][ T7150] dump_stack_lvl+0x18c/0x250 [ 170.467742][ T7150] ? show_regs_print_info+0x20/0x20 [ 170.473001][ T7150] ? load_image+0x400/0x400 [ 170.477631][ T7150] sysfs_warn_dup+0x8e/0xa0 [ 170.482194][ T7150] sysfs_do_create_link_sd+0xc0/0x110 [ 170.487642][ T7150] device_add_class_symlinks+0x1cf/0x240 [ 170.493334][ T7150] device_add+0x507/0xc20 [ 170.497740][ T7150] wiphy_register+0x1dad/0x2ae0 [ 170.502683][ T7150] ? cfg80211_event_work+0x40/0x40 [ 170.507863][ T7150] ? minstrel_ht_alloc+0x88a/0x990 [ 170.513041][ T7150] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 170.519230][ T7150] ieee80211_register_hw+0x3464/0x4250 [ 170.524743][ T7150] ? ieee80211_tasklet_handler+0x20/0x20 [ 170.530400][ T7150] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 170.536348][ T7150] ? __debug_object_init+0xec/0x450 [ 170.541593][ T7150] ? __asan_memset+0x22/0x40 [ 170.546224][ T7150] ? __hrtimer_init+0x186/0x270 [ 170.551107][ T7150] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 170.556896][ T7150] ? mac80211_hwsim_free+0x220/0x220 [ 170.562237][ T7150] ? rcu_is_watching+0x15/0xb0 [ 170.567033][ T7150] ? kstrndup+0xbd/0x140 [ 170.571305][ T7150] hwsim_new_radio_nl+0xdc9/0x1a90 [ 170.576447][ T7150] ? __nla_validate+0x50/0x50 [ 170.581157][ T7150] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 170.587531][ T7150] ? __nla_parse+0x40/0x50 [ 170.591992][ T7150] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 170.598356][ T7150] genl_family_rcv_msg_doit+0x211/0x310 [ 170.603938][ T7150] ? end_current_label_crit_section+0x170/0x170 [ 170.610205][ T7150] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 170.616153][ T7150] ? bpf_lsm_capable+0x9/0x10 [ 170.620853][ T7150] ? security_capable+0x89/0xb0 [ 170.625734][ T7150] genl_rcv_msg+0x619/0x7a0 [ 170.630288][ T7150] ? genl_bind+0x360/0x360 [ 170.634737][ T7150] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 170.641103][ T7150] ? ref_tracker_free+0x690/0x840 [ 170.646163][ T7150] netlink_rcv_skb+0x241/0x4d0 [ 170.650982][ T7150] ? genl_bind+0x360/0x360 [ 170.655436][ T7150] ? netlink_ack+0x1180/0x1180 [ 170.660236][ T7150] ? __lock_acquire+0x7d40/0x7d40 [ 170.665283][ T7150] ? down_read+0x1ac/0x2e0 [ 170.669727][ T7150] genl_rcv+0x28/0x40 [ 170.673733][ T7150] netlink_unicast+0x751/0x8d0 [ 170.678541][ T7150] netlink_sendmsg+0x8d0/0xbf0 [ 170.683361][ T7150] ? netlink_getsockopt+0x590/0x590 [ 170.688606][ T7150] ? aa_sock_msg_perm+0x94/0x150 [ 170.693570][ T7150] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 170.698948][ T7150] ? security_socket_sendmsg+0x80/0xa0 [ 170.704447][ T7150] ? netlink_getsockopt+0x590/0x590 [ 170.709768][ T7150] ____sys_sendmsg+0x5ba/0x960 [ 170.714585][ T7150] ? __asan_memset+0x22/0x40 [ 170.719213][ T7150] ? __sys_sendmsg_sock+0x30/0x30 [ 170.724274][ T7150] ? __import_iovec+0x5f2/0x850 [ 170.729171][ T7150] ? import_iovec+0x73/0xa0 [ 170.733731][ T7150] ___sys_sendmsg+0x2a6/0x360 [ 170.738443][ T7150] ? __sys_sendmsg+0x2a0/0x2a0 [ 170.743282][ T7150] __se_sys_sendmsg+0x1c2/0x2b0 [ 170.748174][ T7150] ? __x64_sys_sendmsg+0x80/0x80 [ 170.753158][ T7150] ? lockdep_hardirqs_on+0x98/0x150 [ 170.758383][ T7150] do_syscall_64+0x55/0xa0 [ 170.762836][ T7150] ? clear_bhb_loop+0x40/0x90 [ 170.767535][ T7150] ? clear_bhb_loop+0x40/0x90 [ 170.772239][ T7150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.778152][ T7150] RIP: 0033:0x7f030b59acb9 [ 170.782614][ T7150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.802247][ T7150] RSP: 002b:00007f030c41b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.810702][ T7150] RAX: ffffffffffffffda RBX: 00007f030b815fa0 RCX: 00007f030b59acb9 [ 170.818689][ T7150] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 170.826681][ T7150] RBP: 00007f030b608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 170.834680][ T7150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.842672][ T7150] R13: 00007f030b816038 R14: 00007f030b815fa0 R15: 00007ffc7b90faa8 [ 170.850685][ T7150] [ 171.064537][ T7154] netlink: 'syz.3.388': attribute type 5 has an invalid length. [ 171.105165][ T7151] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.387'. [ 171.573642][ T7167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.639667][ T7168] netlink: 'syz.2.390': attribute type 39 has an invalid length. [ 171.839498][ T7174] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.394'. [ 171.892112][ T7174] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 171.958635][ T7170] netlink: 'syz.0.394': attribute type 27 has an invalid length. [ 172.179533][ T1136] wlan1: Trigger new scan to find an IBSS to join [ 172.186206][ T744] wlan1: Trigger new scan to find an IBSS to join [ 172.528418][ T7182] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 172.851614][ T7190] netlink: 144 bytes leftover after parsing attributes in process `syz.2.398'. [ 172.871206][ T7192] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.399'. [ 173.005978][ T7194] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.399'. [ 173.073607][ T7192] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 173.087929][ T7192] CPU: 0 PID: 7192 Comm: syz.1.399 Not tainted syzkaller #0 [ 173.095332][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.105452][ T7192] Call Trace: [ 173.108781][ T7192] [ 173.111763][ T7192] dump_stack_lvl+0x18c/0x250 [ 173.116545][ T7192] ? show_regs_print_info+0x20/0x20 [ 173.121814][ T7192] ? load_image+0x400/0x400 [ 173.126462][ T7192] sysfs_warn_dup+0x8e/0xa0 [ 173.131050][ T7192] sysfs_do_create_link_sd+0xc0/0x110 [ 173.136498][ T7192] device_add_class_symlinks+0x1cf/0x240 [ 173.142220][ T7192] device_add+0x507/0xc20 [ 173.146645][ T7192] wiphy_register+0x1dad/0x2ae0 [ 173.151640][ T7192] ? cfg80211_event_work+0x40/0x40 [ 173.156845][ T7192] ? minstrel_ht_alloc+0x88a/0x990 [ 173.162049][ T7192] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 173.168218][ T7192] ieee80211_register_hw+0x3464/0x4250 [ 173.173803][ T7192] ? ieee80211_tasklet_handler+0x20/0x20 [ 173.179532][ T7192] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 173.185536][ T7192] ? __debug_object_init+0xec/0x450 [ 173.190822][ T7192] ? __asan_memset+0x22/0x40 [ 173.195472][ T7192] ? __hrtimer_init+0x186/0x270 [ 173.200383][ T7192] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 173.206229][ T7192] ? mac80211_hwsim_free+0x220/0x220 [ 173.211600][ T7192] ? rcu_is_watching+0x15/0xb0 [ 173.216442][ T7192] ? kstrndup+0xbd/0x140 [ 173.220777][ T7192] hwsim_new_radio_nl+0xdc9/0x1a90 [ 173.225990][ T7192] ? __nla_validate+0x50/0x50 [ 173.230793][ T7192] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 173.237254][ T7192] ? __nla_parse+0x40/0x50 [ 173.241775][ T7192] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 173.248199][ T7192] genl_family_rcv_msg_doit+0x211/0x310 [ 173.253815][ T7192] ? end_current_label_crit_section+0x170/0x170 [ 173.260160][ T7192] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 173.266188][ T7192] ? bpf_lsm_capable+0x9/0x10 [ 173.270937][ T7192] ? security_capable+0x89/0xb0 [ 173.275885][ T7192] genl_rcv_msg+0x619/0x7a0 [ 173.280469][ T7192] ? genl_bind+0x360/0x360 [ 173.284955][ T7192] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 173.291367][ T7192] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 173.298013][ T7192] ? perf_trace_lock+0xfc/0x3b0 [ 173.302963][ T7192] netlink_rcv_skb+0x241/0x4d0 [ 173.307801][ T7192] ? genl_bind+0x360/0x360 [ 173.312289][ T7192] ? netlink_ack+0x1180/0x1180 [ 173.317153][ T7192] ? __lock_acquire+0x7d40/0x7d40 [ 173.322255][ T7192] ? down_read+0x1ac/0x2e0 [ 173.326744][ T7192] genl_rcv+0x28/0x40 [ 173.330786][ T7192] netlink_unicast+0x751/0x8d0 [ 173.335642][ T7192] netlink_sendmsg+0x8d0/0xbf0 [ 173.340492][ T7192] ? netlink_getsockopt+0x590/0x590 [ 173.345778][ T7192] ? aa_sock_msg_perm+0x94/0x150 [ 173.350792][ T7192] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 173.356132][ T7192] ? security_socket_sendmsg+0x80/0xa0 [ 173.361648][ T7192] ? netlink_getsockopt+0x590/0x590 [ 173.366934][ T7192] ____sys_sendmsg+0x5ba/0x960 [ 173.371785][ T7192] ? __asan_memset+0x22/0x40 [ 173.376440][ T7192] ? __sys_sendmsg_sock+0x30/0x30 [ 173.381544][ T7192] ? __import_iovec+0x5f2/0x850 [ 173.386529][ T7192] ? import_iovec+0x73/0xa0 [ 173.391121][ T7192] ___sys_sendmsg+0x2a6/0x360 [ 173.395895][ T7192] ? __sys_sendmsg+0x2a0/0x2a0 [ 173.400894][ T7192] __se_sys_sendmsg+0x1c2/0x2b0 [ 173.405849][ T7192] ? __x64_sys_sendmsg+0x80/0x80 [ 173.410925][ T7192] ? lockdep_hardirqs_on+0x98/0x150 [ 173.416191][ T7192] do_syscall_64+0x55/0xa0 [ 173.420663][ T7192] ? clear_bhb_loop+0x40/0x90 [ 173.425398][ T7192] ? clear_bhb_loop+0x40/0x90 [ 173.430148][ T7192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.436109][ T7192] RIP: 0033:0x7f77be99acb9 [ 173.440605][ T7192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.460296][ T7192] RSP: 002b:00007f77bcbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.468778][ T7192] RAX: ffffffffffffffda RBX: 00007f77bec15fa0 RCX: 00007f77be99acb9 [ 173.476812][ T7192] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 173.484839][ T7192] RBP: 00007f77bea08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 173.492874][ T7192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.500893][ T7192] R13: 00007f77bec16038 R14: 00007f77bec15fa0 R15: 00007ffd43db80a8 [ 173.508960][ T7192] [ 174.180400][ T7210] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.405'. [ 174.196847][ T32] wlan1: Trigger new scan to find an IBSS to join [ 174.209600][ T7210] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 174.571764][ T7211] netlink: 'syz.3.405': attribute type 27 has an invalid length. [ 174.834684][ T7213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.294344][ T7218] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 175.295560][ T744] wlan1: Creating new IBSS network, BSSID 7a:37:7f:18:2e:8e [ 175.325882][ T7220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.334324][ T7225] FAULT_INJECTION: forcing a failure. [ 175.334324][ T7225] name failslab, interval 1, probability 0, space 0, times 0 [ 175.353518][ T7225] CPU: 0 PID: 7225 Comm: syz.1.410 Not tainted syzkaller #0 [ 175.360902][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.371044][ T7225] Call Trace: [ 175.374424][ T7225] [ 175.377422][ T7225] dump_stack_lvl+0x18c/0x250 [ 175.382213][ T7225] ? show_regs_print_info+0x20/0x20 [ 175.387513][ T7225] ? load_image+0x400/0x400 [ 175.392128][ T7225] ? __might_sleep+0xe0/0xe0 [ 175.396816][ T7225] ? __lock_acquire+0x7d40/0x7d40 [ 175.401966][ T7225] should_fail_ex+0x39d/0x4d0 [ 175.406739][ T7225] should_failslab+0x9/0x20 [ 175.411321][ T7225] slab_pre_alloc_hook+0x59/0x310 [ 175.416441][ T7225] ? kvmalloc_node+0x70/0x180 [ 175.421195][ T7225] ? kvmalloc_node+0x70/0x180 [ 175.425944][ T7225] __kmem_cache_alloc_node+0x53/0x250 [ 175.431427][ T7225] ? kvmalloc_node+0x70/0x180 [ 175.436186][ T7225] __kmalloc_node+0xa4/0x230 [ 175.440884][ T7225] kvmalloc_node+0x70/0x180 [ 175.445478][ T7225] page_pool_create+0x1eb/0x5c0 [ 175.450419][ T7225] bpf_test_run_xdp_live+0x203/0x1b20 [ 175.455912][ T7225] ? 0xffffffffa00044c0 [ 175.460154][ T7225] ? 0xffffffffa00044c0 [ 175.464389][ T7225] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 175.470363][ T7225] ? 0xffffffffa00044c0 [ 175.474599][ T7225] ? xdp_convert_md_to_buff+0x330/0x330 [ 175.480294][ T7225] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 175.486703][ T7225] ? _copy_from_user+0xa5/0xe0 [ 175.491521][ T7225] ? bpf_test_init+0x119/0x140 [ 175.496341][ T7225] ? xdp_convert_md_to_buff+0x5b/0x330 [ 175.501858][ T7225] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 175.507334][ T7225] ? dev_put+0x80/0x80 [ 175.511494][ T7225] ? dev_put+0x80/0x80 [ 175.515608][ T7225] bpf_prog_test_run+0x321/0x390 [ 175.520601][ T7225] __sys_bpf+0x49d/0x890 [ 175.524896][ T7225] ? bpf_link_show_fdinfo+0x390/0x390 [ 175.530350][ T7225] ? lock_chain_count+0x20/0x20 [ 175.535277][ T7225] __x64_sys_bpf+0x7c/0x90 [ 175.539738][ T7225] do_syscall_64+0x55/0xa0 [ 175.544201][ T7225] ? clear_bhb_loop+0x40/0x90 [ 175.548972][ T7225] ? clear_bhb_loop+0x40/0x90 [ 175.553705][ T7225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.559656][ T7225] RIP: 0033:0x7f77be99acb9 [ 175.564127][ T7225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.583784][ T7225] RSP: 002b:00007f77bcbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.592251][ T7225] RAX: ffffffffffffffda RBX: 00007f77bec15fa0 RCX: 00007f77be99acb9 [ 175.600279][ T7225] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 175.608301][ T7225] RBP: 00007f77bcbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 175.616322][ T7225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.624330][ T7225] R13: 00007f77bec16038 R14: 00007f77bec15fa0 R15: 00007ffd43db80a8 [ 175.632394][ T7225] [ 175.676074][ T7225] page_pool_create() gave up with errno -12 [ 175.944824][ T7229] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.411'. [ 175.989335][ T7229] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 176.022401][ T7229] CPU: 1 PID: 7229 Comm: syz.1.411 Not tainted syzkaller #0 [ 176.029870][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.039977][ T7229] Call Trace: [ 176.043304][ T7229] [ 176.046282][ T7229] dump_stack_lvl+0x18c/0x250 [ 176.051026][ T7229] ? show_regs_print_info+0x20/0x20 [ 176.056278][ T7229] ? load_image+0x400/0x400 [ 176.060885][ T7229] sysfs_warn_dup+0x8e/0xa0 [ 176.065431][ T7229] sysfs_do_create_link_sd+0xc0/0x110 [ 176.070863][ T7229] device_add_class_symlinks+0x1cf/0x240 [ 176.076557][ T7229] device_add+0x507/0xc20 [ 176.080953][ T7229] wiphy_register+0x1dad/0x2ae0 [ 176.085908][ T7229] ? cfg80211_event_work+0x40/0x40 [ 176.091098][ T7229] ? minstrel_ht_alloc+0x88a/0x990 [ 176.096284][ T7229] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 176.102409][ T7229] ieee80211_register_hw+0x3464/0x4250 [ 176.107959][ T7229] ? ieee80211_tasklet_handler+0x20/0x20 [ 176.113662][ T7229] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 176.119612][ T7229] ? __debug_object_init+0xec/0x450 [ 176.124879][ T7229] ? __asan_memset+0x22/0x40 [ 176.129510][ T7229] ? __hrtimer_init+0x186/0x270 [ 176.134392][ T7229] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 176.140175][ T7229] ? mac80211_hwsim_free+0x220/0x220 [ 176.145498][ T7229] ? rcu_is_watching+0x15/0xb0 [ 176.150299][ T7229] ? kstrndup+0xbd/0x140 [ 176.154586][ T7229] hwsim_new_radio_nl+0xdc9/0x1a90 [ 176.159746][ T7229] ? __nla_validate+0x50/0x50 [ 176.164471][ T7229] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 176.170938][ T7229] ? __nla_parse+0x40/0x50 [ 176.175398][ T7229] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 176.181773][ T7229] genl_family_rcv_msg_doit+0x211/0x310 [ 176.187402][ T7229] ? end_current_label_crit_section+0x170/0x170 [ 176.193698][ T7229] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 176.199635][ T7229] ? bpf_lsm_capable+0x9/0x10 [ 176.204443][ T7229] ? security_capable+0x89/0xb0 [ 176.209332][ T7229] genl_rcv_msg+0x619/0x7a0 [ 176.213884][ T7229] ? genl_bind+0x360/0x360 [ 176.218360][ T7229] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 176.224743][ T7229] ? ref_tracker_free+0x690/0x840 [ 176.229835][ T7229] netlink_rcv_skb+0x241/0x4d0 [ 176.234661][ T7229] ? genl_bind+0x360/0x360 [ 176.239133][ T7229] ? netlink_ack+0x1180/0x1180 [ 176.243949][ T7229] ? __lock_acquire+0x7d40/0x7d40 [ 176.249012][ T7229] ? down_read+0x1ac/0x2e0 [ 176.253479][ T7229] genl_rcv+0x28/0x40 [ 176.257515][ T7229] netlink_unicast+0x751/0x8d0 [ 176.262326][ T7229] netlink_sendmsg+0x8d0/0xbf0 [ 176.267149][ T7229] ? netlink_getsockopt+0x590/0x590 [ 176.272390][ T7229] ? aa_sock_msg_perm+0x94/0x150 [ 176.277361][ T7229] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 176.282681][ T7229] ? security_socket_sendmsg+0x80/0xa0 [ 176.288164][ T7229] ? netlink_getsockopt+0x590/0x590 [ 176.293396][ T7229] ____sys_sendmsg+0x5ba/0x960 [ 176.298206][ T7229] ? __asan_memset+0x22/0x40 [ 176.302852][ T7229] ? __sys_sendmsg_sock+0x30/0x30 [ 176.307911][ T7229] ? __import_iovec+0x5f2/0x850 [ 176.312851][ T7229] ? import_iovec+0x73/0xa0 [ 176.317398][ T7229] ___sys_sendmsg+0x2a6/0x360 [ 176.322122][ T7229] ? __sys_sendmsg+0x2a0/0x2a0 [ 176.326970][ T7229] __se_sys_sendmsg+0x1c2/0x2b0 [ 176.331874][ T7229] ? __x64_sys_sendmsg+0x80/0x80 [ 176.336881][ T7229] ? lockdep_hardirqs_on+0x98/0x150 [ 176.342117][ T7229] do_syscall_64+0x55/0xa0 [ 176.346571][ T7229] ? clear_bhb_loop+0x40/0x90 [ 176.351295][ T7229] ? clear_bhb_loop+0x40/0x90 [ 176.356018][ T7229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.361950][ T7229] RIP: 0033:0x7f77be99acb9 [ 176.366425][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.386054][ T7229] RSP: 002b:00007f77bcbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.394496][ T7229] RAX: ffffffffffffffda RBX: 00007f77bec15fa0 RCX: 00007f77be99acb9 [ 176.402501][ T7229] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 176.410501][ T7229] RBP: 00007f77bea08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 176.418497][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.426498][ T7229] R13: 00007f77bec16038 R14: 00007f77bec15fa0 R15: 00007ffd43db80a8 [ 176.434533][ T7229] [ 176.442792][ T744] wlan1: Trigger new scan to find an IBSS to join [ 176.535905][ T7235] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.411'. [ 176.866586][ T7245] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.417'. [ 176.886120][ T7245] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 176.922572][ T7244] netlink: 'syz.2.415': attribute type 39 has an invalid length. [ 176.932522][ T7243] netlink: 'syz.0.417': attribute type 27 has an invalid length. [ 177.261094][ T7255] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 178.253584][ T7263] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.422'. [ 178.283400][ T7263] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 178.326748][ T7265] netlink: 'syz.1.422': attribute type 27 has an invalid length. [ 178.453930][ T7274] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.426'. [ 178.521477][ T7274] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 178.605115][ T7274] CPU: 0 PID: 7274 Comm: syz.2.426 Not tainted syzkaller #0 [ 178.613025][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.623139][ T7274] Call Trace: [ 178.626460][ T7274] [ 178.629427][ T7274] dump_stack_lvl+0x18c/0x250 [ 178.634173][ T7274] ? show_regs_print_info+0x20/0x20 [ 178.639453][ T7274] ? load_image+0x400/0x400 [ 178.644039][ T7274] sysfs_warn_dup+0x8e/0xa0 [ 178.648607][ T7274] sysfs_do_create_link_sd+0xc0/0x110 [ 178.654121][ T7274] device_add_class_symlinks+0x1cf/0x240 [ 178.659811][ T7274] device_add+0x507/0xc20 [ 178.664211][ T7274] wiphy_register+0x1dad/0x2ae0 [ 178.669179][ T7274] ? cfg80211_event_work+0x40/0x40 [ 178.674342][ T7274] ? minstrel_ht_alloc+0x88a/0x990 [ 178.679512][ T7274] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 178.685647][ T7274] ieee80211_register_hw+0x3464/0x4250 [ 178.691193][ T7274] ? ieee80211_tasklet_handler+0x20/0x20 [ 178.696886][ T7274] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 178.702837][ T7274] ? __debug_object_init+0xec/0x450 [ 178.708094][ T7274] ? __asan_memset+0x22/0x40 [ 178.712737][ T7274] ? __hrtimer_init+0x186/0x270 [ 178.717646][ T7274] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 178.723477][ T7274] ? mac80211_hwsim_free+0x220/0x220 [ 178.728823][ T7274] ? rcu_is_watching+0x15/0xb0 [ 178.733657][ T7274] ? kstrndup+0xbd/0x140 [ 178.737977][ T7274] hwsim_new_radio_nl+0xdc9/0x1a90 [ 178.743161][ T7274] ? __nla_validate+0x50/0x50 [ 178.747917][ T7274] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 178.754321][ T7274] ? __nla_parse+0x40/0x50 [ 178.758812][ T7274] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 178.765217][ T7274] genl_family_rcv_msg_doit+0x211/0x310 [ 178.770829][ T7274] ? end_current_label_crit_section+0x170/0x170 [ 178.777125][ T7274] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 178.783095][ T7274] ? bpf_lsm_capable+0x9/0x10 [ 178.787831][ T7274] ? security_capable+0x89/0xb0 [ 178.792754][ T7274] genl_rcv_msg+0x619/0x7a0 [ 178.797334][ T7274] ? genl_bind+0x360/0x360 [ 178.801818][ T7274] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 178.808217][ T7274] ? ref_tracker_free+0x690/0x840 [ 178.813314][ T7274] netlink_rcv_skb+0x241/0x4d0 [ 178.818145][ T7274] ? genl_bind+0x360/0x360 [ 178.822603][ T7274] ? netlink_ack+0x1180/0x1180 [ 178.827411][ T7274] ? __lock_acquire+0x7d40/0x7d40 [ 178.832477][ T7274] ? down_read+0x1ac/0x2e0 [ 178.836928][ T7274] genl_rcv+0x28/0x40 [ 178.840944][ T7274] netlink_unicast+0x751/0x8d0 [ 178.845785][ T7274] netlink_sendmsg+0x8d0/0xbf0 [ 178.850601][ T7274] ? netlink_getsockopt+0x590/0x590 [ 178.855841][ T7274] ? aa_sock_msg_perm+0x94/0x150 [ 178.860819][ T7274] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 178.866149][ T7274] ? security_socket_sendmsg+0x80/0xa0 [ 178.871646][ T7274] ? netlink_getsockopt+0x590/0x590 [ 178.876886][ T7274] ____sys_sendmsg+0x5ba/0x960 [ 178.881689][ T7274] ? __asan_memset+0x22/0x40 [ 178.886316][ T7274] ? __sys_sendmsg_sock+0x30/0x30 [ 178.891380][ T7274] ? __import_iovec+0x5f2/0x850 [ 178.896295][ T7274] ? import_iovec+0x73/0xa0 [ 178.900849][ T7274] ___sys_sendmsg+0x2a6/0x360 [ 178.905584][ T7274] ? __sys_sendmsg+0x2a0/0x2a0 [ 178.910482][ T7274] __se_sys_sendmsg+0x1c2/0x2b0 [ 178.915388][ T7274] ? __x64_sys_sendmsg+0x80/0x80 [ 178.920382][ T7274] ? lockdep_hardirqs_on+0x98/0x150 [ 178.925652][ T7274] do_syscall_64+0x55/0xa0 [ 178.930105][ T7274] ? clear_bhb_loop+0x40/0x90 [ 178.934842][ T7274] ? clear_bhb_loop+0x40/0x90 [ 178.939560][ T7274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.945478][ T7274] RIP: 0033:0x7fdd3499acb9 [ 178.949921][ T7274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.969653][ T7274] RSP: 002b:00007fdd3586d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.978104][ T7274] RAX: ffffffffffffffda RBX: 00007fdd34c15fa0 RCX: 00007fdd3499acb9 [ 178.986113][ T7274] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 178.994114][ T7274] RBP: 00007fdd34a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 179.002115][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.010153][ T7274] R13: 00007fdd34c16038 R14: 00007fdd34c15fa0 R15: 00007fff97752bf8 [ 179.018178][ T7274] [ 179.066484][ T7281] netlink: 'syz.0.425': attribute type 39 has an invalid length. [ 179.117701][ T7274] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.426'. [ 179.145899][ T7274] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 179.352590][ T7288] netlink: 144 bytes leftover after parsing attributes in process `syz.3.429'. [ 179.387984][ T7283] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.428'. [ 179.485915][ T7283] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 179.507022][ T7289] netlink: 'syz.1.428': attribute type 27 has an invalid length. [ 180.185640][ T744] wlan1: Trigger new scan to find an IBSS to join [ 180.212803][ T7312] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.439'. [ 180.252999][ T7312] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 180.262360][ T7312] CPU: 0 PID: 7312 Comm: syz.0.439 Not tainted syzkaller #0 [ 180.269718][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.279810][ T7312] Call Trace: [ 180.283119][ T7312] [ 180.286079][ T7312] dump_stack_lvl+0x18c/0x250 [ 180.290801][ T7312] ? show_regs_print_info+0x20/0x20 [ 180.296036][ T7312] ? load_image+0x400/0x400 [ 180.300588][ T7312] sysfs_warn_dup+0x8e/0xa0 [ 180.305128][ T7312] sysfs_do_create_link_sd+0xc0/0x110 [ 180.310529][ T7312] device_add_class_symlinks+0x1cf/0x240 [ 180.316207][ T7312] device_add+0x507/0xc20 [ 180.320611][ T7312] wiphy_register+0x1dad/0x2ae0 [ 180.325531][ T7312] ? cfg80211_event_work+0x40/0x40 [ 180.330712][ T7312] ? minstrel_ht_alloc+0x88a/0x990 [ 180.335876][ T7312] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 180.341986][ T7312] ieee80211_register_hw+0x3464/0x4250 [ 180.347525][ T7312] ? ieee80211_tasklet_handler+0x20/0x20 [ 180.353196][ T7312] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 180.359120][ T7312] ? __debug_object_init+0xec/0x450 [ 180.364349][ T7312] ? __asan_memset+0x22/0x40 [ 180.368974][ T7312] ? __hrtimer_init+0x186/0x270 [ 180.373871][ T7312] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 180.379642][ T7312] ? mac80211_hwsim_free+0x220/0x220 [ 180.384965][ T7312] ? rcu_is_watching+0x15/0xb0 [ 180.389760][ T7312] ? kstrndup+0xbd/0x140 [ 180.394047][ T7312] hwsim_new_radio_nl+0xdc9/0x1a90 [ 180.399200][ T7312] ? __nla_validate+0x50/0x50 [ 180.403919][ T7312] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 180.410304][ T7312] ? __nla_parse+0x40/0x50 [ 180.414768][ T7312] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 180.421239][ T7312] genl_family_rcv_msg_doit+0x211/0x310 [ 180.426836][ T7312] ? end_current_label_crit_section+0x170/0x170 [ 180.433112][ T7312] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 180.439065][ T7312] ? bpf_lsm_capable+0x9/0x10 [ 180.443863][ T7312] ? security_capable+0x89/0xb0 [ 180.448761][ T7312] genl_rcv_msg+0x619/0x7a0 [ 180.453315][ T7312] ? genl_bind+0x360/0x360 [ 180.457767][ T7312] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 180.464136][ T7312] ? ref_tracker_free+0x690/0x840 [ 180.469211][ T7312] netlink_rcv_skb+0x241/0x4d0 [ 180.474014][ T7312] ? genl_bind+0x360/0x360 [ 180.478467][ T7312] ? netlink_ack+0x1180/0x1180 [ 180.483282][ T7312] ? __lock_acquire+0x7d40/0x7d40 [ 180.488339][ T7312] ? down_read+0x1ac/0x2e0 [ 180.492795][ T7312] genl_rcv+0x28/0x40 [ 180.496825][ T7312] netlink_unicast+0x751/0x8d0 [ 180.501631][ T7312] netlink_sendmsg+0x8d0/0xbf0 [ 180.506458][ T7312] ? netlink_getsockopt+0x590/0x590 [ 180.511703][ T7312] ? aa_sock_msg_perm+0x94/0x150 [ 180.516679][ T7312] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 180.522007][ T7312] ? security_socket_sendmsg+0x80/0xa0 [ 180.527495][ T7312] ? netlink_getsockopt+0x590/0x590 [ 180.532741][ T7312] ____sys_sendmsg+0x5ba/0x960 [ 180.537551][ T7312] ? __asan_memset+0x22/0x40 [ 180.542191][ T7312] ? __sys_sendmsg_sock+0x30/0x30 [ 180.547345][ T7312] ? __import_iovec+0x5f2/0x850 [ 180.552242][ T7312] ? import_iovec+0x73/0xa0 [ 180.556786][ T7312] ___sys_sendmsg+0x2a6/0x360 [ 180.561508][ T7312] ? __sys_sendmsg+0x2a0/0x2a0 [ 180.566343][ T7312] __se_sys_sendmsg+0x1c2/0x2b0 [ 180.571224][ T7312] ? __x64_sys_sendmsg+0x80/0x80 [ 180.576203][ T7312] ? lockdep_hardirqs_on+0x98/0x150 [ 180.581457][ T7312] do_syscall_64+0x55/0xa0 [ 180.585924][ T7312] ? clear_bhb_loop+0x40/0x90 [ 180.590625][ T7312] ? clear_bhb_loop+0x40/0x90 [ 180.595340][ T7312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.601260][ T7312] RIP: 0033:0x7f030b59acb9 [ 180.605702][ T7312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.625347][ T7312] RSP: 002b:00007f030c41b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.633906][ T7312] RAX: ffffffffffffffda RBX: 00007f030b815fa0 RCX: 00007f030b59acb9 [ 180.641913][ T7312] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 180.649920][ T7312] RBP: 00007f030b608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 180.657926][ T7312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.665935][ T7312] R13: 00007f030b816038 R14: 00007f030b815fa0 R15: 00007ffc7b90faa8 [ 180.673962][ T7312] [ 180.772095][ T7312] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.439'. [ 180.886087][ T7316] netlink: 144 bytes leftover after parsing attributes in process `syz.2.440'. [ 181.087482][ T7322] netlink: 144 bytes leftover after parsing attributes in process `syz.0.442'. [ 181.109982][ T7320] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.441'. [ 181.138255][ T1148] wlan1: Trigger new scan to find an IBSS to join [ 181.145904][ T7320] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 181.187929][ T7320] netlink: 'syz.3.441': attribute type 27 has an invalid length. [ 181.580024][ T7339] netlink: 'syz.1.444': attribute type 39 has an invalid length. [ 182.720215][ T744] wlan1: Creating new IBSS network, BSSID ca:e0:d3:a3:ab:89 [ 182.921053][ T7350] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.450'. [ 182.933272][ T7350] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 182.951515][ T7350] CPU: 1 PID: 7350 Comm: syz.2.450 Not tainted syzkaller #0 [ 182.958930][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.969056][ T7350] Call Trace: [ 182.972385][ T7350] [ 182.975374][ T7350] dump_stack_lvl+0x18c/0x250 [ 182.980103][ T7350] ? show_regs_print_info+0x20/0x20 [ 182.985337][ T7350] ? load_image+0x400/0x400 [ 182.989881][ T7350] sysfs_warn_dup+0x8e/0xa0 [ 182.994440][ T7350] sysfs_do_create_link_sd+0xc0/0x110 [ 182.999841][ T7350] device_add_class_symlinks+0x1cf/0x240 [ 183.005519][ T7350] device_add+0x507/0xc20 [ 183.009899][ T7350] wiphy_register+0x1dad/0x2ae0 [ 183.014848][ T7350] ? cfg80211_event_work+0x40/0x40 [ 183.020001][ T7350] ? minstrel_ht_alloc+0x88a/0x990 [ 183.025154][ T7350] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 183.031261][ T7350] ieee80211_register_hw+0x3464/0x4250 [ 183.036775][ T7350] ? ieee80211_tasklet_handler+0x20/0x20 [ 183.042445][ T7350] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 183.048406][ T7350] ? __debug_object_init+0xec/0x450 [ 183.053649][ T7350] ? __asan_memset+0x22/0x40 [ 183.058273][ T7350] ? __hrtimer_init+0x186/0x270 [ 183.063161][ T7350] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 183.068979][ T7350] ? mac80211_hwsim_free+0x220/0x220 [ 183.074343][ T7350] ? rcu_is_watching+0x15/0xb0 [ 183.079150][ T7350] ? kstrndup+0xbd/0x140 [ 183.083439][ T7350] hwsim_new_radio_nl+0xdc9/0x1a90 [ 183.088607][ T7350] ? __nla_validate+0x50/0x50 [ 183.093334][ T7350] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 183.099722][ T7350] ? __nla_parse+0x40/0x50 [ 183.104188][ T7350] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 183.110574][ T7350] genl_family_rcv_msg_doit+0x211/0x310 [ 183.116160][ T7350] ? end_current_label_crit_section+0x170/0x170 [ 183.122445][ T7350] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 183.128398][ T7350] ? bpf_lsm_capable+0x9/0x10 [ 183.133114][ T7350] ? security_capable+0x89/0xb0 [ 183.138001][ T7350] genl_rcv_msg+0x619/0x7a0 [ 183.142548][ T7350] ? genl_bind+0x360/0x360 [ 183.147032][ T7350] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 183.153408][ T7350] ? ref_tracker_free+0x690/0x840 [ 183.158477][ T7350] netlink_rcv_skb+0x241/0x4d0 [ 183.163290][ T7350] ? genl_bind+0x360/0x360 [ 183.167745][ T7350] ? netlink_ack+0x1180/0x1180 [ 183.172551][ T7350] ? __lock_acquire+0x7d40/0x7d40 [ 183.177625][ T7350] ? down_read+0x1ac/0x2e0 [ 183.182083][ T7350] genl_rcv+0x28/0x40 [ 183.186104][ T7350] netlink_unicast+0x751/0x8d0 [ 183.190907][ T7350] netlink_sendmsg+0x8d0/0xbf0 [ 183.195745][ T7350] ? netlink_getsockopt+0x590/0x590 [ 183.201004][ T7350] ? aa_sock_msg_perm+0x94/0x150 [ 183.205995][ T7350] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 183.211327][ T7350] ? security_socket_sendmsg+0x80/0xa0 [ 183.216819][ T7350] ? netlink_getsockopt+0x590/0x590 [ 183.222062][ T7350] ____sys_sendmsg+0x5ba/0x960 [ 183.226873][ T7350] ? __asan_memset+0x22/0x40 [ 183.231502][ T7350] ? __sys_sendmsg_sock+0x30/0x30 [ 183.236556][ T7350] ? __import_iovec+0x5f2/0x850 [ 183.241457][ T7350] ? import_iovec+0x73/0xa0 [ 183.246004][ T7350] ___sys_sendmsg+0x2a6/0x360 [ 183.250735][ T7350] ? __sys_sendmsg+0x2a0/0x2a0 [ 183.255577][ T7350] __se_sys_sendmsg+0x1c2/0x2b0 [ 183.260468][ T7350] ? __x64_sys_sendmsg+0x80/0x80 [ 183.265459][ T7350] ? lockdep_hardirqs_on+0x98/0x150 [ 183.270689][ T7350] do_syscall_64+0x55/0xa0 [ 183.275153][ T7350] ? clear_bhb_loop+0x40/0x90 [ 183.279860][ T7350] ? clear_bhb_loop+0x40/0x90 [ 183.284564][ T7350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.290482][ T7350] RIP: 0033:0x7fdd3499acb9 [ 183.294928][ T7350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.314609][ T7350] RSP: 002b:00007fdd3586d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.323057][ T7350] RAX: ffffffffffffffda RBX: 00007fdd34c15fa0 RCX: 00007fdd3499acb9 [ 183.331056][ T7350] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 183.339054][ T7350] RBP: 00007fdd34a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 183.347048][ T7350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.355050][ T7350] R13: 00007fdd34c16038 R14: 00007fdd34c15fa0 R15: 00007fff97752bf8 [ 183.363067][ T7350] [ 183.373901][ T4501] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 183.462558][ T7350] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.450'. [ 183.484773][ T7350] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 183.631593][ T7356] netlink: 'syz.1.452': attribute type 39 has an invalid length. [ 183.777826][ T7361] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 183.862723][ T7366] FAULT_INJECTION: forcing a failure. [ 183.862723][ T7366] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 183.928773][ T7366] CPU: 0 PID: 7366 Comm: syz.2.454 Not tainted syzkaller #0 [ 183.936187][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.946324][ T7366] Call Trace: [ 183.949686][ T7366] [ 183.952696][ T7366] dump_stack_lvl+0x18c/0x250 [ 183.957483][ T7366] ? show_regs_print_info+0x20/0x20 [ 183.962779][ T7366] ? load_image+0x400/0x400 [ 183.967398][ T7366] ? __might_fault+0xaa/0x120 [ 183.972183][ T7366] should_fail_ex+0x39d/0x4d0 [ 183.976962][ T7366] copyin+0x1a/0x90 [ 183.980907][ T7366] _copy_from_iter+0x54f/0x12e0 [ 183.985839][ T7366] ? __virt_addr_valid+0x18c/0x540 [ 183.991087][ T7366] ? copyout_mc+0x70/0x70 [ 183.995494][ T7366] ? __virt_addr_valid+0x18c/0x540 [ 184.000740][ T7366] ? __virt_addr_valid+0x18c/0x540 [ 184.005954][ T7366] ? __virt_addr_valid+0x469/0x540 [ 184.011161][ T7366] ? __check_object_size+0x506/0xa20 [ 184.016575][ T7366] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 184.022390][ T7366] ? dev_get_by_index+0x22/0x2d0 [ 184.027444][ T7366] ? skb_put+0x11b/0x210 [ 184.031781][ T7366] packet_sendmsg+0x3566/0x4d70 [ 184.036807][ T7366] ? verify_lock_unused+0x140/0x140 [ 184.042103][ T7366] ? perf_trace_lock_acquire+0x34f/0x410 [ 184.047871][ T7366] ? aa_sk_perm+0x83c/0x970 [ 184.052485][ T7366] ? packet_getsockopt+0xad0/0xad0 [ 184.057718][ T7366] ? aa_sock_msg_perm+0x94/0x150 [ 184.062752][ T7366] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 184.068113][ T7366] ? security_socket_sendmsg+0x80/0xa0 [ 184.073683][ T7366] ? packet_getsockopt+0xad0/0xad0 [ 184.078887][ T7366] ____sys_sendmsg+0x5ba/0x960 [ 184.083742][ T7366] ? __lock_acquire+0x7d40/0x7d40 [ 184.088913][ T7366] ? __asan_memset+0x22/0x40 [ 184.093585][ T7366] ? __sys_sendmsg_sock+0x30/0x30 [ 184.098692][ T7366] ? __import_iovec+0x3fa/0x850 [ 184.103665][ T7366] ? import_iovec+0x73/0xa0 [ 184.108301][ T7366] ___sys_sendmsg+0x2a6/0x360 [ 184.113083][ T7366] ? get_pid_task+0x20/0x1e0 [ 184.117790][ T7366] ? __sys_sendmsg+0x2a0/0x2a0 [ 184.122737][ T7366] ? __lock_acquire+0x7d40/0x7d40 [ 184.127939][ T7366] __se_sys_sendmsg+0x1c2/0x2b0 [ 184.132899][ T7366] ? __x64_sys_sendmsg+0x80/0x80 [ 184.137984][ T7366] ? lockdep_hardirqs_on+0x98/0x150 [ 184.143323][ T7366] do_syscall_64+0x55/0xa0 [ 184.147819][ T7366] ? clear_bhb_loop+0x40/0x90 [ 184.152573][ T7366] ? clear_bhb_loop+0x40/0x90 [ 184.157439][ T7366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.163410][ T7366] RIP: 0033:0x7fdd3499acb9 [ 184.167906][ T7366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.187631][ T7366] RSP: 002b:00007fdd3586d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.196193][ T7366] RAX: ffffffffffffffda RBX: 00007fdd34c15fa0 RCX: 00007fdd3499acb9 [ 184.204314][ T7366] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 184.212359][ T7366] RBP: 00007fdd3586d090 R08: 0000000000000000 R09: 0000000000000000 [ 184.220404][ T7366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.228452][ T7366] R13: 00007fdd34c16038 R14: 00007fdd34c15fa0 R15: 00007fff97752bf8 [ 184.236539][ T7366] [ 184.651572][ T7373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.298788][ T7384] netlink: 'syz.0.458': attribute type 39 has an invalid length. [ 185.462330][ T7389] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.462'. [ 185.561818][ T7392] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.462'. [ 185.606568][ T7389] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 185.632734][ T7389] CPU: 1 PID: 7389 Comm: syz.3.462 Not tainted syzkaller #0 [ 185.640220][ T7389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.650341][ T7389] Call Trace: [ 185.653697][ T7389] [ 185.656678][ T7389] dump_stack_lvl+0x18c/0x250 [ 185.661428][ T7389] ? show_regs_print_info+0x20/0x20 [ 185.666702][ T7389] ? load_image+0x400/0x400 [ 185.671286][ T7389] sysfs_warn_dup+0x8e/0xa0 [ 185.675844][ T7389] sysfs_do_create_link_sd+0xc0/0x110 [ 185.681285][ T7389] device_add_class_symlinks+0x1cf/0x240 [ 185.687004][ T7389] device_add+0x507/0xc20 [ 185.691399][ T7389] wiphy_register+0x1dad/0x2ae0 [ 185.696331][ T7389] ? cfg80211_event_work+0x40/0x40 [ 185.701507][ T7389] ? minstrel_ht_alloc+0x88a/0x990 [ 185.706716][ T7389] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 185.712855][ T7389] ieee80211_register_hw+0x3464/0x4250 [ 185.718405][ T7389] ? ieee80211_tasklet_handler+0x20/0x20 [ 185.724106][ T7389] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 185.730074][ T7389] ? __debug_object_init+0xec/0x450 [ 185.735344][ T7389] ? __asan_memset+0x22/0x40 [ 185.740007][ T7389] ? __hrtimer_init+0x186/0x270 [ 185.744927][ T7389] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 185.750752][ T7389] ? mac80211_hwsim_free+0x220/0x220 [ 185.756100][ T7389] ? rcu_is_watching+0x15/0xb0 [ 185.760953][ T7389] ? kstrndup+0xbd/0x140 [ 185.765262][ T7389] hwsim_new_radio_nl+0xdc9/0x1a90 [ 185.770449][ T7389] ? __nla_validate+0x50/0x50 [ 185.775207][ T7389] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 185.781616][ T7389] ? __nla_parse+0x40/0x50 [ 185.786104][ T7389] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 185.792513][ T7389] genl_family_rcv_msg_doit+0x211/0x310 [ 185.798117][ T7389] ? end_current_label_crit_section+0x170/0x170 [ 185.804424][ T7389] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 185.810384][ T7389] ? bpf_lsm_capable+0x9/0x10 [ 185.815123][ T7389] ? security_capable+0x89/0xb0 [ 185.820050][ T7389] genl_rcv_msg+0x619/0x7a0 [ 185.824631][ T7389] ? genl_bind+0x360/0x360 [ 185.829104][ T7389] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 185.835509][ T7389] ? ref_tracker_free+0x690/0x840 [ 185.840615][ T7389] netlink_rcv_skb+0x241/0x4d0 [ 185.845435][ T7389] ? genl_bind+0x360/0x360 [ 185.849922][ T7389] ? netlink_ack+0x1180/0x1180 [ 185.854780][ T7389] ? __lock_acquire+0x7d40/0x7d40 [ 185.859863][ T7389] ? down_read+0x1ac/0x2e0 [ 185.864328][ T7389] genl_rcv+0x28/0x40 [ 185.868379][ T7389] netlink_unicast+0x751/0x8d0 [ 185.873240][ T7389] netlink_sendmsg+0x8d0/0xbf0 [ 185.878066][ T7389] ? netlink_getsockopt+0x590/0x590 [ 185.883310][ T7389] ? aa_sock_msg_perm+0x94/0x150 [ 185.888295][ T7389] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 185.893628][ T7389] ? security_socket_sendmsg+0x80/0xa0 [ 185.899116][ T7389] ? netlink_getsockopt+0x590/0x590 [ 185.904363][ T7389] ____sys_sendmsg+0x5ba/0x960 [ 185.909174][ T7389] ? __asan_memset+0x22/0x40 [ 185.913807][ T7389] ? __sys_sendmsg_sock+0x30/0x30 [ 185.918881][ T7389] ? __import_iovec+0x5f2/0x850 [ 185.923774][ T7389] ? import_iovec+0x73/0xa0 [ 185.928310][ T7389] ___sys_sendmsg+0x2a6/0x360 [ 185.933035][ T7389] ? __sys_sendmsg+0x2a0/0x2a0 [ 185.937892][ T7389] __se_sys_sendmsg+0x1c2/0x2b0 [ 185.942804][ T7389] ? __x64_sys_sendmsg+0x80/0x80 [ 185.947794][ T7389] ? lockdep_hardirqs_on+0x98/0x150 [ 185.953028][ T7389] do_syscall_64+0x55/0xa0 [ 185.957477][ T7389] ? clear_bhb_loop+0x40/0x90 [ 185.962193][ T7389] ? clear_bhb_loop+0x40/0x90 [ 185.966994][ T7389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.972928][ T7389] RIP: 0033:0x7fee6cf9acb9 [ 185.977375][ T7389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.997095][ T7389] RSP: 002b:00007fee6de49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.005538][ T7389] RAX: ffffffffffffffda RBX: 00007fee6d215fa0 RCX: 00007fee6cf9acb9 [ 186.013543][ T7389] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 186.021545][ T7389] RBP: 00007fee6d008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 186.029587][ T7389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.037587][ T7389] R13: 00007fee6d216038 R14: 00007fee6d215fa0 R15: 00007ffd491662b8 [ 186.045612][ T7389] [ 186.176131][ T11] wlan1: Trigger new scan to find an IBSS to join [ 186.241042][ T7397] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.465'. [ 186.276295][ T7397] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 186.287455][ T7402] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 186.336194][ T7397] netlink: 'syz.0.465': attribute type 27 has an invalid length. [ 186.692191][ T7407] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.474'. [ 186.747002][ T7407] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 186.755157][ T7407] CPU: 1 PID: 7407 Comm: syz.1.474 Not tainted syzkaller #0 [ 186.762507][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.772625][ T7407] Call Trace: [ 186.775949][ T7407] [ 186.778929][ T7407] dump_stack_lvl+0x18c/0x250 [ 186.783682][ T7407] ? show_regs_print_info+0x20/0x20 [ 186.789048][ T7407] ? load_image+0x400/0x400 [ 186.793635][ T7407] sysfs_warn_dup+0x8e/0xa0 [ 186.798199][ T7407] sysfs_do_create_link_sd+0xc0/0x110 [ 186.803633][ T7407] device_add_class_symlinks+0x1cf/0x240 [ 186.809321][ T7407] device_add+0x507/0xc20 [ 186.813753][ T7407] wiphy_register+0x1dad/0x2ae0 [ 186.818702][ T7407] ? cfg80211_event_work+0x40/0x40 [ 186.823875][ T7407] ? minstrel_ht_alloc+0x88a/0x990 [ 186.829075][ T7407] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 186.835217][ T7407] ieee80211_register_hw+0x3464/0x4250 [ 186.840763][ T7407] ? ieee80211_tasklet_handler+0x20/0x20 [ 186.846468][ T7407] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 186.852402][ T7407] ? __debug_object_init+0xec/0x450 [ 186.857642][ T7407] ? __asan_memset+0x22/0x40 [ 186.862303][ T7407] ? __hrtimer_init+0x186/0x270 [ 186.867184][ T7407] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 186.872977][ T7407] ? mac80211_hwsim_free+0x220/0x220 [ 186.878328][ T7407] ? rcu_is_watching+0x15/0xb0 [ 186.883129][ T7407] ? kstrndup+0xbd/0x140 [ 186.887425][ T7407] hwsim_new_radio_nl+0xdc9/0x1a90 [ 186.892583][ T7407] ? __nla_validate+0x50/0x50 [ 186.897315][ T7407] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 186.903734][ T7407] ? __nla_parse+0x40/0x50 [ 186.908203][ T7407] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 186.914582][ T7407] genl_family_rcv_msg_doit+0x211/0x310 [ 186.920171][ T7407] ? end_current_label_crit_section+0x170/0x170 [ 186.926448][ T7407] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 186.932387][ T7407] ? bpf_lsm_capable+0x9/0x10 [ 186.937099][ T7407] ? security_capable+0x89/0xb0 [ 186.941998][ T7407] genl_rcv_msg+0x619/0x7a0 [ 186.946552][ T7407] ? genl_bind+0x360/0x360 [ 186.951009][ T7407] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 186.957403][ T7407] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 186.964035][ T7407] ? ref_tracker_free+0x690/0x840 [ 186.969108][ T7407] netlink_rcv_skb+0x241/0x4d0 [ 186.973929][ T7407] ? genl_bind+0x360/0x360 [ 186.978477][ T7407] ? netlink_ack+0x1180/0x1180 [ 186.983293][ T7407] ? __lock_acquire+0x7d40/0x7d40 [ 186.988460][ T7407] ? down_read+0x1ac/0x2e0 [ 186.992927][ T7407] genl_rcv+0x28/0x40 [ 186.996959][ T7407] netlink_unicast+0x751/0x8d0 [ 187.001775][ T7407] netlink_sendmsg+0x8d0/0xbf0 [ 187.006588][ T7407] ? netlink_getsockopt+0x590/0x590 [ 187.011861][ T7407] ? aa_sock_msg_perm+0x94/0x150 [ 187.016837][ T7407] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 187.022162][ T7407] ? security_socket_sendmsg+0x80/0xa0 [ 187.027653][ T7407] ? netlink_getsockopt+0x590/0x590 [ 187.032958][ T7407] ____sys_sendmsg+0x5ba/0x960 [ 187.037806][ T7407] ? __asan_memset+0x22/0x40 [ 187.042476][ T7407] ? __sys_sendmsg_sock+0x30/0x30 [ 187.047541][ T7407] ? __import_iovec+0x5f2/0x850 [ 187.052444][ T7407] ? import_iovec+0x73/0xa0 [ 187.056995][ T7407] ___sys_sendmsg+0x2a6/0x360 [ 187.061726][ T7407] ? __sys_sendmsg+0x2a0/0x2a0 [ 187.066577][ T7407] __se_sys_sendmsg+0x1c2/0x2b0 [ 187.071469][ T7407] ? __x64_sys_sendmsg+0x80/0x80 [ 187.076457][ T7407] ? lockdep_hardirqs_on+0x98/0x150 [ 187.081691][ T7407] do_syscall_64+0x55/0xa0 [ 187.086170][ T7407] ? clear_bhb_loop+0x40/0x90 [ 187.090888][ T7407] ? clear_bhb_loop+0x40/0x90 [ 187.095595][ T7407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.101526][ T7407] RIP: 0033:0x7f77be99acb9 [ 187.105999][ T7407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.125684][ T7407] RSP: 002b:00007f77bcbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.134159][ T7407] RAX: ffffffffffffffda RBX: 00007f77bec15fa0 RCX: 00007f77be99acb9 [ 187.142167][ T7407] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 187.150168][ T7407] RBP: 00007f77bea08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 187.158176][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.166178][ T7407] R13: 00007f77bec16038 R14: 00007f77bec15fa0 R15: 00007ffd43db80a8 [ 187.174201][ T7407] [ 187.229231][ T7407] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.474'. [ 187.589941][ T7414] netlink: 'syz.3.466': attribute type 39 has an invalid length. [ 187.635700][ T7421] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.626135][ T7437] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.477'. [ 188.642310][ T7437] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 188.659053][ T7441] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.479'. [ 188.679426][ T7444] netlink: 'syz.1.477': attribute type 27 has an invalid length. [ 188.729539][ T7446] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.479'. [ 188.744125][ T7446] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 188.756449][ T7441] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 188.764433][ T7441] CPU: 0 PID: 7441 Comm: syz.2.479 Not tainted syzkaller #0 [ 188.771828][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.781940][ T7441] Call Trace: [ 188.785248][ T7441] [ 188.788210][ T7441] dump_stack_lvl+0x18c/0x250 [ 188.792938][ T7441] ? show_regs_print_info+0x20/0x20 [ 188.798197][ T7441] ? load_image+0x400/0x400 [ 188.802752][ T7441] sysfs_warn_dup+0x8e/0xa0 [ 188.807296][ T7441] sysfs_do_create_link_sd+0xc0/0x110 [ 188.812701][ T7441] device_add_class_symlinks+0x1cf/0x240 [ 188.818380][ T7441] device_add+0x507/0xc20 [ 188.822847][ T7441] wiphy_register+0x1dad/0x2ae0 [ 188.827769][ T7441] ? cfg80211_event_work+0x40/0x40 [ 188.832927][ T7441] ? minstrel_ht_alloc+0x88a/0x990 [ 188.838084][ T7441] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 188.844186][ T7441] ieee80211_register_hw+0x3464/0x4250 [ 188.849701][ T7441] ? ieee80211_tasklet_handler+0x20/0x20 [ 188.855370][ T7441] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 188.861296][ T7441] ? __debug_object_init+0xec/0x450 [ 188.866534][ T7441] ? __asan_memset+0x22/0x40 [ 188.871161][ T7441] ? __hrtimer_init+0x186/0x270 [ 188.876065][ T7441] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 188.881853][ T7441] ? mac80211_hwsim_free+0x220/0x220 [ 188.887189][ T7441] ? rcu_is_watching+0x15/0xb0 [ 188.891998][ T7441] ? kstrndup+0xbd/0x140 [ 188.896291][ T7441] hwsim_new_radio_nl+0xdc9/0x1a90 [ 188.901446][ T7441] ? __nla_validate+0x50/0x50 [ 188.906177][ T7441] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 188.912558][ T7441] ? __nla_parse+0x40/0x50 [ 188.917015][ T7441] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 188.923421][ T7441] genl_family_rcv_msg_doit+0x211/0x310 [ 188.929030][ T7441] ? end_current_label_crit_section+0x170/0x170 [ 188.935323][ T7441] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 188.941269][ T7441] ? bpf_lsm_capable+0x9/0x10 [ 188.945996][ T7441] ? security_capable+0x89/0xb0 [ 188.950895][ T7441] genl_rcv_msg+0x619/0x7a0 [ 188.955449][ T7441] ? genl_bind+0x360/0x360 [ 188.959904][ T7441] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 188.966285][ T7441] ? perf_trace_lock+0xfc/0x3b0 [ 188.971185][ T7441] netlink_rcv_skb+0x241/0x4d0 [ 188.975987][ T7441] ? genl_bind+0x360/0x360 [ 188.980440][ T7441] ? netlink_ack+0x1180/0x1180 [ 188.985256][ T7441] ? __lock_acquire+0x7d40/0x7d40 [ 188.990326][ T7441] ? down_read+0x1ac/0x2e0 [ 188.994783][ T7441] genl_rcv+0x28/0x40 [ 188.998801][ T7441] netlink_unicast+0x751/0x8d0 [ 189.003646][ T7441] netlink_sendmsg+0x8d0/0xbf0 [ 189.008468][ T7441] ? netlink_getsockopt+0x590/0x590 [ 189.013705][ T7441] ? aa_sock_msg_perm+0x94/0x150 [ 189.018701][ T7441] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 189.024052][ T7441] ? security_socket_sendmsg+0x80/0xa0 [ 189.029560][ T7441] ? netlink_getsockopt+0x590/0x590 [ 189.034849][ T7441] ____sys_sendmsg+0x5ba/0x960 [ 189.039701][ T7441] ? __asan_memset+0x22/0x40 [ 189.044337][ T7441] ? __sys_sendmsg_sock+0x30/0x30 [ 189.049398][ T7441] ? __import_iovec+0x5f2/0x850 [ 189.054304][ T7441] ? import_iovec+0x73/0xa0 [ 189.058887][ T7441] ___sys_sendmsg+0x2a6/0x360 [ 189.063622][ T7441] ? __sys_sendmsg+0x2a0/0x2a0 [ 189.068485][ T7441] __se_sys_sendmsg+0x1c2/0x2b0 [ 189.073393][ T7441] ? __x64_sys_sendmsg+0x80/0x80 [ 189.078387][ T7441] ? lockdep_hardirqs_on+0x98/0x150 [ 189.083625][ T7441] do_syscall_64+0x55/0xa0 [ 189.088087][ T7441] ? clear_bhb_loop+0x40/0x90 [ 189.092817][ T7441] ? clear_bhb_loop+0x40/0x90 [ 189.097556][ T7441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.103493][ T7441] RIP: 0033:0x7fdd3499acb9 [ 189.107944][ T7441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.127591][ T7441] RSP: 002b:00007fdd3586d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.136104][ T7441] RAX: ffffffffffffffda RBX: 00007fdd34c15fa0 RCX: 00007fdd3499acb9 [ 189.144124][ T7441] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 189.152126][ T7441] RBP: 00007fdd34a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 189.160125][ T7441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.168144][ T7441] R13: 00007fdd34c16038 R14: 00007fdd34c15fa0 R15: 00007fff97752bf8 [ 189.176175][ T7441] [ 189.556255][ T7451] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 189.763271][ T7454] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 190.179820][ T7467] netlink: 'syz.1.487': attribute type 39 has an invalid length. [ 190.189206][ T49] wlan1: Trigger new scan to find an IBSS to join [ 190.206747][ T4501] wlan1: Trigger new scan to find an IBSS to join [ 190.579412][ T7479] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.493'. [ 190.607535][ T7479] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 190.631964][ T7479] CPU: 1 PID: 7479 Comm: syz.0.493 Not tainted syzkaller #0 [ 190.639361][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.649475][ T7479] Call Trace: [ 190.652805][ T7479] [ 190.655783][ T7479] dump_stack_lvl+0x18c/0x250 [ 190.660530][ T7479] ? show_regs_print_info+0x20/0x20 [ 190.665777][ T7479] ? load_image+0x400/0x400 [ 190.670349][ T7479] sysfs_warn_dup+0x8e/0xa0 [ 190.674895][ T7479] sysfs_do_create_link_sd+0xc0/0x110 [ 190.680324][ T7479] device_add_class_symlinks+0x1cf/0x240 [ 190.686081][ T7479] device_add+0x507/0xc20 [ 190.690475][ T7479] wiphy_register+0x1dad/0x2ae0 [ 190.695414][ T7479] ? cfg80211_event_work+0x40/0x40 [ 190.700599][ T7479] ? minstrel_ht_alloc+0x88a/0x990 [ 190.705777][ T7479] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 190.711902][ T7479] ieee80211_register_hw+0x3464/0x4250 [ 190.717505][ T7479] ? ieee80211_tasklet_handler+0x20/0x20 [ 190.723200][ T7479] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 190.729156][ T7479] ? __debug_object_init+0xec/0x450 [ 190.734422][ T7479] ? __asan_memset+0x22/0x40 [ 190.739110][ T7479] ? __hrtimer_init+0x186/0x270 [ 190.744028][ T7479] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 190.749853][ T7479] ? mac80211_hwsim_free+0x220/0x220 [ 190.755216][ T7479] ? rcu_is_watching+0x15/0xb0 [ 190.760054][ T7479] ? kstrndup+0xbd/0x140 [ 190.764359][ T7479] hwsim_new_radio_nl+0xdc9/0x1a90 [ 190.769553][ T7479] ? __nla_validate+0x50/0x50 [ 190.774335][ T7479] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 190.780751][ T7479] ? __nla_parse+0x40/0x50 [ 190.785247][ T7479] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 190.791651][ T7479] genl_family_rcv_msg_doit+0x211/0x310 [ 190.797261][ T7479] ? end_current_label_crit_section+0x170/0x170 [ 190.803562][ T7479] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 190.809532][ T7479] ? bpf_lsm_capable+0x9/0x10 [ 190.814265][ T7479] ? security_capable+0x89/0xb0 [ 190.819182][ T7479] genl_rcv_msg+0x619/0x7a0 [ 190.823759][ T7479] ? genl_bind+0x360/0x360 [ 190.828232][ T7479] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 190.834622][ T7479] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 190.841272][ T7479] ? ref_tracker_free+0x690/0x840 [ 190.846362][ T7479] netlink_rcv_skb+0x241/0x4d0 [ 190.851189][ T7479] ? genl_bind+0x360/0x360 [ 190.855659][ T7479] ? netlink_ack+0x1180/0x1180 [ 190.860508][ T7479] ? __lock_acquire+0x7d40/0x7d40 [ 190.865599][ T7479] ? down_read+0x1ac/0x2e0 [ 190.870089][ T7479] genl_rcv+0x28/0x40 [ 190.874128][ T7479] netlink_unicast+0x751/0x8d0 [ 190.878962][ T7479] netlink_sendmsg+0x8d0/0xbf0 [ 190.883839][ T7479] ? netlink_getsockopt+0x590/0x590 [ 190.889108][ T7479] ? aa_sock_msg_perm+0x94/0x150 [ 190.894106][ T7479] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 190.899460][ T7479] ? security_socket_sendmsg+0x80/0xa0 [ 190.904974][ T7479] ? netlink_getsockopt+0x590/0x590 [ 190.910235][ T7479] ____sys_sendmsg+0x5ba/0x960 [ 190.915066][ T7479] ? __asan_memset+0x22/0x40 [ 190.919713][ T7479] ? __sys_sendmsg_sock+0x30/0x30 [ 190.924803][ T7479] ? __import_iovec+0x5f2/0x850 [ 190.929718][ T7479] ? import_iovec+0x73/0xa0 [ 190.934279][ T7479] ___sys_sendmsg+0x2a6/0x360 [ 190.939026][ T7479] ? __sys_sendmsg+0x2a0/0x2a0 [ 190.943878][ T7479] ? debug_mutex_init+0x38/0x70 [ 190.948803][ T7479] __se_sys_sendmsg+0x1c2/0x2b0 [ 190.953712][ T7479] ? __x64_sys_sendmsg+0x80/0x80 [ 190.958734][ T7479] ? lockdep_hardirqs_on+0x98/0x150 [ 190.963987][ T7479] do_syscall_64+0x55/0xa0 [ 190.968468][ T7479] ? clear_bhb_loop+0x40/0x90 [ 190.973192][ T7479] ? clear_bhb_loop+0x40/0x90 [ 190.977924][ T7479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.983861][ T7479] RIP: 0033:0x7f030b59acb9 [ 190.988320][ T7479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.007991][ T7479] RSP: 002b:00007f030c41b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.016474][ T7479] RAX: ffffffffffffffda RBX: 00007f030b815fa0 RCX: 00007f030b59acb9 [ 191.024488][ T7479] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 191.032500][ T7479] RBP: 00007f030b608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 191.040527][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.048546][ T7479] R13: 00007f030b816038 R14: 00007f030b815fa0 R15: 00007ffc7b90faa8 [ 191.056595][ T7479] [ 191.136655][ T7470] netlink: 'syz.3.489': attribute type 39 has an invalid length. [ 191.203680][ T7481] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.493'. [ 191.341329][ T49] wlan1: Creating new IBSS network, BSSID fe:a8:a2:61:2b:f1 [ 191.353034][ T7483] netlink: 'syz.2.492': attribute type 39 has an invalid length. [ 192.186326][ T1136] wlan1: Trigger new scan to find an IBSS to join [ 192.671759][ T7507] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.502'. [ 192.721459][ T7507] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 192.732921][ T7507] CPU: 0 PID: 7507 Comm: syz.3.502 Not tainted syzkaller #0 [ 192.740323][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.750426][ T7507] Call Trace: [ 192.753759][ T7507] [ 192.756740][ T7507] dump_stack_lvl+0x18c/0x250 [ 192.761483][ T7507] ? show_regs_print_info+0x20/0x20 [ 192.766739][ T7507] ? load_image+0x400/0x400 [ 192.771309][ T7507] sysfs_warn_dup+0x8e/0xa0 [ 192.775869][ T7507] sysfs_do_create_link_sd+0xc0/0x110 [ 192.781303][ T7507] device_add_class_symlinks+0x1cf/0x240 [ 192.787010][ T7507] device_add+0x507/0xc20 [ 192.791434][ T7507] wiphy_register+0x1dad/0x2ae0 [ 192.796368][ T7507] ? cfg80211_event_work+0x40/0x40 [ 192.801543][ T7507] ? minstrel_ht_alloc+0x88a/0x990 [ 192.806717][ T7507] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 192.812858][ T7507] ieee80211_register_hw+0x3464/0x4250 [ 192.818404][ T7507] ? ieee80211_tasklet_handler+0x20/0x20 [ 192.824099][ T7507] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 192.830042][ T7507] ? __debug_object_init+0xec/0x450 [ 192.835296][ T7507] ? __asan_memset+0x22/0x40 [ 192.839945][ T7507] ? __hrtimer_init+0x186/0x270 [ 192.844847][ T7507] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 192.850666][ T7507] ? mac80211_hwsim_free+0x220/0x220 [ 192.856025][ T7507] ? rcu_is_watching+0x15/0xb0 [ 192.860835][ T7507] ? kstrndup+0xbd/0x140 [ 192.865153][ T7507] hwsim_new_radio_nl+0xdc9/0x1a90 [ 192.870354][ T7507] ? __nla_validate+0x50/0x50 [ 192.875107][ T7507] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 192.881514][ T7507] ? __nla_parse+0x40/0x50 [ 192.886018][ T7507] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 192.892420][ T7507] genl_family_rcv_msg_doit+0x211/0x310 [ 192.898033][ T7507] ? end_current_label_crit_section+0x170/0x170 [ 192.904341][ T7507] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 192.910316][ T7507] ? bpf_lsm_capable+0x9/0x10 [ 192.915055][ T7507] ? security_capable+0x89/0xb0 [ 192.919976][ T7507] genl_rcv_msg+0x619/0x7a0 [ 192.924554][ T7507] ? genl_bind+0x360/0x360 [ 192.929030][ T7507] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 192.935425][ T7507] ? perf_trace_lock+0xfc/0x3b0 [ 192.940365][ T7507] netlink_rcv_skb+0x241/0x4d0 [ 192.945189][ T7507] ? genl_bind+0x360/0x360 [ 192.949681][ T7507] ? netlink_ack+0x1180/0x1180 [ 192.954542][ T7507] ? __lock_acquire+0x7d40/0x7d40 [ 192.959626][ T7507] ? down_read+0x1ac/0x2e0 [ 192.964113][ T7507] genl_rcv+0x28/0x40 [ 192.968156][ T7507] netlink_unicast+0x751/0x8d0 [ 192.972998][ T7507] netlink_sendmsg+0x8d0/0xbf0 [ 192.977831][ T7507] ? netlink_getsockopt+0x590/0x590 [ 192.983101][ T7507] ? aa_sock_msg_perm+0x94/0x150 [ 192.988096][ T7507] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 192.993432][ T7507] ? security_socket_sendmsg+0x80/0xa0 [ 192.998943][ T7507] ? netlink_getsockopt+0x590/0x590 [ 193.004215][ T7507] ____sys_sendmsg+0x5ba/0x960 [ 193.009084][ T7507] ? __asan_memset+0x22/0x40 [ 193.013751][ T7507] ? __sys_sendmsg_sock+0x30/0x30 [ 193.018834][ T7507] ? __import_iovec+0x5f2/0x850 [ 193.023746][ T7507] ? import_iovec+0x73/0xa0 [ 193.028328][ T7507] ___sys_sendmsg+0x2a6/0x360 [ 193.033051][ T7507] ? __sys_sendmsg+0x2a0/0x2a0 [ 193.037913][ T7507] __se_sys_sendmsg+0x1c2/0x2b0 [ 193.042809][ T7507] ? __x64_sys_sendmsg+0x80/0x80 [ 193.047801][ T7507] ? lockdep_hardirqs_on+0x98/0x150 [ 193.053030][ T7507] do_syscall_64+0x55/0xa0 [ 193.057477][ T7507] ? clear_bhb_loop+0x40/0x90 [ 193.062183][ T7507] ? clear_bhb_loop+0x40/0x90 [ 193.066896][ T7507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.072828][ T7507] RIP: 0033:0x7fee6cf9acb9 [ 193.077276][ T7507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.096917][ T7507] RSP: 002b:00007fee6de49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.105359][ T7507] RAX: ffffffffffffffda RBX: 00007fee6d215fa0 RCX: 00007fee6cf9acb9 [ 193.113358][ T7507] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 193.121352][ T7507] RBP: 00007fee6d008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 193.129349][ T7507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.137354][ T7507] R13: 00007fee6d216038 R14: 00007fee6d215fa0 R15: 00007ffd491662b8 [ 193.145390][ T7507] [ 193.206378][ T7517] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.505'. [ 193.249290][ T7517] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 193.271792][ T7517] CPU: 0 PID: 7517 Comm: syz.0.505 Not tainted syzkaller #0 [ 193.279282][ T7517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.289398][ T7517] Call Trace: [ 193.292732][ T7517] [ 193.295707][ T7517] dump_stack_lvl+0x18c/0x250 [ 193.300452][ T7517] ? show_regs_print_info+0x20/0x20 [ 193.305700][ T7517] ? load_image+0x400/0x400 [ 193.310273][ T7517] sysfs_warn_dup+0x8e/0xa0 [ 193.314817][ T7517] sysfs_do_create_link_sd+0xc0/0x110 [ 193.320257][ T7517] device_add_class_symlinks+0x1cf/0x240 [ 193.325962][ T7517] device_add+0x507/0xc20 [ 193.330369][ T7517] wiphy_register+0x1dad/0x2ae0 [ 193.335321][ T7517] ? cfg80211_event_work+0x40/0x40 [ 193.340508][ T7517] ? minstrel_ht_alloc+0x88a/0x990 [ 193.345682][ T7517] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 193.351811][ T7517] ieee80211_register_hw+0x3464/0x4250 [ 193.357366][ T7517] ? ieee80211_tasklet_handler+0x20/0x20 [ 193.363081][ T7517] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 193.369029][ T7517] ? __debug_object_init+0xec/0x450 [ 193.374293][ T7517] ? __asan_memset+0x22/0x40 [ 193.378942][ T7517] ? __hrtimer_init+0x186/0x270 [ 193.383855][ T7517] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 193.389665][ T7517] ? mac80211_hwsim_free+0x220/0x220 [ 193.395014][ T7517] ? rcu_is_watching+0x15/0xb0 [ 193.399837][ T7517] ? kstrndup+0xbd/0x140 [ 193.404145][ T7517] hwsim_new_radio_nl+0xdc9/0x1a90 [ 193.409330][ T7517] ? __nla_validate+0x50/0x50 [ 193.414095][ T7517] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 193.420508][ T7517] ? __nla_parse+0x40/0x50 [ 193.425006][ T7517] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 193.431416][ T7517] genl_family_rcv_msg_doit+0x211/0x310 [ 193.437035][ T7517] ? end_current_label_crit_section+0x170/0x170 [ 193.443350][ T7517] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 193.449326][ T7517] ? bpf_lsm_capable+0x9/0x10 [ 193.454071][ T7517] ? security_capable+0x89/0xb0 [ 193.458994][ T7517] genl_rcv_msg+0x619/0x7a0 [ 193.463578][ T7517] ? genl_bind+0x360/0x360 [ 193.468047][ T7517] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 193.474448][ T7517] ? ref_tracker_free+0x690/0x840 [ 193.479542][ T7517] netlink_rcv_skb+0x241/0x4d0 [ 193.484366][ T7517] ? genl_bind+0x360/0x360 [ 193.488845][ T7517] ? netlink_ack+0x1180/0x1180 [ 193.493684][ T7517] ? __lock_acquire+0x7d40/0x7d40 [ 193.498772][ T7517] ? down_read+0x1ac/0x2e0 [ 193.503253][ T7517] genl_rcv+0x28/0x40 [ 193.507301][ T7517] netlink_unicast+0x751/0x8d0 [ 193.512143][ T7517] netlink_sendmsg+0x8d0/0xbf0 [ 193.516990][ T7517] ? netlink_getsockopt+0x590/0x590 [ 193.522265][ T7517] ? aa_sock_msg_perm+0x94/0x150 [ 193.527278][ T7517] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 193.532628][ T7517] ? security_socket_sendmsg+0x80/0xa0 [ 193.538139][ T7517] ? netlink_getsockopt+0x590/0x590 [ 193.543403][ T7517] ____sys_sendmsg+0x5ba/0x960 [ 193.548246][ T7517] ? __asan_memset+0x22/0x40 [ 193.552893][ T7517] ? __sys_sendmsg_sock+0x30/0x30 [ 193.557974][ T7517] ? __import_iovec+0x5f2/0x850 [ 193.562895][ T7517] ? import_iovec+0x73/0xa0 [ 193.567468][ T7517] ___sys_sendmsg+0x2a6/0x360 [ 193.572222][ T7517] ? __sys_sendmsg+0x2a0/0x2a0 [ 193.577119][ T7517] __se_sys_sendmsg+0x1c2/0x2b0 [ 193.582050][ T7517] ? __x64_sys_sendmsg+0x80/0x80 [ 193.587084][ T7517] ? lockdep_hardirqs_on+0x98/0x150 [ 193.592346][ T7517] do_syscall_64+0x55/0xa0 [ 193.596823][ T7517] ? clear_bhb_loop+0x40/0x90 [ 193.601556][ T7517] ? clear_bhb_loop+0x40/0x90 [ 193.606294][ T7517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.612258][ T7517] RIP: 0033:0x7f030b59acb9 [ 193.616749][ T7517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.636415][ T7517] RSP: 002b:00007f030c41b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.644866][ T7517] RAX: ffffffffffffffda RBX: 00007f030b815fa0 RCX: 00007f030b59acb9 [ 193.652881][ T7517] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 193.660883][ T7517] RBP: 00007f030b608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 193.668890][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.676888][ T7517] R13: 00007f030b816038 R14: 00007f030b815fa0 R15: 00007ffc7b90faa8 [ 193.684908][ T7517] [ 193.749399][ T7518] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.505'. [ 193.772395][ T7507] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.502'. [ 193.789339][ T7511] netlink: 'syz.2.504': attribute type 39 has an invalid length. [ 194.180764][ T7531] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.509'. [ 194.217605][ T7531] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 194.306585][ T7537] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 194.326571][ T7531] netlink: 'syz.0.509': attribute type 27 has an invalid length. [ 194.601340][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.608455][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.663859][ T7555] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.517'. [ 194.680614][ T7555] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 194.693182][ T7555] CPU: 1 PID: 7555 Comm: syz.1.517 Not tainted syzkaller #0 [ 194.700645][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.710750][ T7555] Call Trace: [ 194.714074][ T7555] [ 194.717064][ T7555] dump_stack_lvl+0x18c/0x250 [ 194.721804][ T7555] ? show_regs_print_info+0x20/0x20 [ 194.727058][ T7555] ? load_image+0x400/0x400 [ 194.731641][ T7555] sysfs_warn_dup+0x8e/0xa0 [ 194.736197][ T7555] sysfs_do_create_link_sd+0xc0/0x110 [ 194.741618][ T7555] device_add_class_symlinks+0x1cf/0x240 [ 194.747313][ T7555] device_add+0x507/0xc20 [ 194.751718][ T7555] wiphy_register+0x1dad/0x2ae0 [ 194.756734][ T7555] ? cfg80211_event_work+0x40/0x40 [ 194.761938][ T7555] ? minstrel_ht_alloc+0x88a/0x990 [ 194.767173][ T7555] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 194.773328][ T7555] ieee80211_register_hw+0x3464/0x4250 [ 194.778936][ T7555] ? ieee80211_tasklet_handler+0x20/0x20 [ 194.784631][ T7555] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 194.790598][ T7555] ? __debug_object_init+0xec/0x450 [ 194.795885][ T7555] ? __asan_memset+0x22/0x40 [ 194.800552][ T7555] ? __hrtimer_init+0x186/0x270 [ 194.805479][ T7555] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 194.811327][ T7555] ? mac80211_hwsim_free+0x220/0x220 [ 194.816669][ T7555] ? rcu_is_watching+0x15/0xb0 [ 194.821487][ T7555] ? kstrndup+0xbd/0x140 [ 194.825831][ T7555] hwsim_new_radio_nl+0xdc9/0x1a90 [ 194.831031][ T7555] ? __nla_validate+0x50/0x50 [ 194.835821][ T7555] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 194.842244][ T7555] ? __nla_parse+0x40/0x50 [ 194.846733][ T7555] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 194.853147][ T7555] genl_family_rcv_msg_doit+0x211/0x310 [ 194.858761][ T7555] ? end_current_label_crit_section+0x170/0x170 [ 194.865073][ T7555] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 194.871057][ T7555] ? bpf_lsm_capable+0x9/0x10 [ 194.875799][ T7555] ? security_capable+0x89/0xb0 [ 194.880748][ T7555] genl_rcv_msg+0x619/0x7a0 [ 194.885336][ T7555] ? genl_bind+0x360/0x360 [ 194.889821][ T7555] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 194.896237][ T7555] ? ref_tracker_free+0x690/0x840 [ 194.901356][ T7555] netlink_rcv_skb+0x241/0x4d0 [ 194.906190][ T7555] ? genl_bind+0x360/0x360 [ 194.910682][ T7555] ? netlink_ack+0x1180/0x1180 [ 194.915544][ T7555] ? __lock_acquire+0x7d40/0x7d40 [ 194.920653][ T7555] ? down_read+0x1ac/0x2e0 [ 194.925147][ T7555] genl_rcv+0x28/0x40 [ 194.929218][ T7555] netlink_unicast+0x751/0x8d0 [ 194.934075][ T7555] netlink_sendmsg+0x8d0/0xbf0 [ 194.938928][ T7555] ? netlink_getsockopt+0x590/0x590 [ 194.944192][ T7555] ? aa_sock_msg_perm+0x94/0x150 [ 194.949192][ T7555] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 194.954523][ T7555] ? security_socket_sendmsg+0x80/0xa0 [ 194.960039][ T7555] ? netlink_getsockopt+0x590/0x590 [ 194.965317][ T7555] ____sys_sendmsg+0x5ba/0x960 [ 194.970177][ T7555] ? __asan_memset+0x22/0x40 [ 194.974828][ T7555] ? __sys_sendmsg_sock+0x30/0x30 [ 194.979907][ T7555] ? __import_iovec+0x5f2/0x850 [ 194.984839][ T7555] ? import_iovec+0x73/0xa0 [ 194.989417][ T7555] ___sys_sendmsg+0x2a6/0x360 [ 194.994181][ T7555] ? __sys_sendmsg+0x2a0/0x2a0 [ 194.999066][ T7555] ? trace_call_bpf+0xc3/0x6c0 [ 195.003967][ T7555] __se_sys_sendmsg+0x1c2/0x2b0 [ 195.008899][ T7555] ? __x64_sys_sendmsg+0x80/0x80 [ 195.013946][ T7555] ? lockdep_hardirqs_on+0x98/0x150 [ 195.019206][ T7555] do_syscall_64+0x55/0xa0 [ 195.023671][ T7555] ? clear_bhb_loop+0x40/0x90 [ 195.028403][ T7555] ? clear_bhb_loop+0x40/0x90 [ 195.033141][ T7555] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.039082][ T7555] RIP: 0033:0x7f77be99acb9 [ 195.043548][ T7555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.063231][ T7555] RSP: 002b:00007f77bcbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.071722][ T7555] RAX: ffffffffffffffda RBX: 00007f77bec15fa0 RCX: 00007f77be99acb9 [ 195.079742][ T7555] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 195.087761][ T7555] RBP: 00007f77bea08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 195.095808][ T7555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.103862][ T7555] R13: 00007f77bec16038 R14: 00007f77bec15fa0 R15: 00007ffd43db80a8 [ 195.111974][ T7555] [ 195.234888][ T1136] wlan1: Trigger new scan to find an IBSS to join [ 195.364387][ T7557] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.517'. [ 196.176000][ T32] wlan1: Trigger new scan to find an IBSS to join [ 196.283961][ T4501] wlan1: Creating new IBSS network, BSSID 66:1a:52:87:7f:4f [ 196.533032][ T7580] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.524'. [ 196.543397][ T7573] netlink: 'syz.3.521': attribute type 39 has an invalid length. [ 196.572131][ T7586] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.527'. [ 196.580128][ T7586] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 196.580149][ T7586] CPU: 0 PID: 7586 Comm: syz.1.527 Not tainted syzkaller #0 [ 196.580171][ T7586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.580185][ T7586] Call Trace: [ 196.580194][ T7586] [ 196.580204][ T7586] dump_stack_lvl+0x18c/0x250 [ 196.580254][ T7586] ? show_regs_print_info+0x20/0x20 [ 196.631050][ T7586] ? load_image+0x400/0x400 [ 196.635618][ T7586] sysfs_warn_dup+0x8e/0xa0 [ 196.640159][ T7586] sysfs_do_create_link_sd+0xc0/0x110 [ 196.645572][ T7586] device_add_class_symlinks+0x1cf/0x240 [ 196.651257][ T7586] device_add+0x507/0xc20 [ 196.655632][ T7586] wiphy_register+0x1dad/0x2ae0 [ 196.660552][ T7586] ? cfg80211_event_work+0x40/0x40 [ 196.665699][ T7586] ? minstrel_ht_alloc+0x88a/0x990 [ 196.670855][ T7586] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 196.676969][ T7586] ieee80211_register_hw+0x3464/0x4250 [ 196.682499][ T7586] ? ieee80211_tasklet_handler+0x20/0x20 [ 196.688283][ T7586] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 196.694217][ T7586] ? __debug_object_init+0xec/0x450 [ 196.699462][ T7586] ? __asan_memset+0x22/0x40 [ 196.704089][ T7586] ? __hrtimer_init+0x186/0x270 [ 196.708974][ T7586] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 196.714765][ T7586] ? mac80211_hwsim_free+0x220/0x220 [ 196.720097][ T7586] ? rcu_is_watching+0x15/0xb0 [ 196.724898][ T7586] ? kstrndup+0xbd/0x140 [ 196.729193][ T7586] hwsim_new_radio_nl+0xdc9/0x1a90 [ 196.734349][ T7586] ? __nla_validate+0x50/0x50 [ 196.739079][ T7586] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 196.745460][ T7586] ? __nla_parse+0x40/0x50 [ 196.749917][ T7586] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 196.756303][ T7586] genl_family_rcv_msg_doit+0x211/0x310 [ 196.761889][ T7586] ? end_current_label_crit_section+0x170/0x170 [ 196.768186][ T7586] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 196.774139][ T7586] ? bpf_lsm_capable+0x9/0x10 [ 196.778857][ T7586] ? security_capable+0x89/0xb0 [ 196.783759][ T7586] genl_rcv_msg+0x619/0x7a0 [ 196.788341][ T7586] ? genl_bind+0x360/0x360 [ 196.792801][ T7586] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 196.799176][ T7586] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 196.805818][ T7586] ? perf_trace_lock+0xfc/0x3b0 [ 196.810724][ T7586] netlink_rcv_skb+0x241/0x4d0 [ 196.815533][ T7586] ? genl_bind+0x360/0x360 [ 196.820009][ T7586] ? netlink_ack+0x1180/0x1180 [ 196.824832][ T7586] ? __lock_acquire+0x7d40/0x7d40 [ 196.829920][ T7586] ? down_read+0x1ac/0x2e0 [ 196.834378][ T7586] genl_rcv+0x28/0x40 [ 196.838396][ T7586] netlink_unicast+0x751/0x8d0 [ 196.843212][ T7586] netlink_sendmsg+0x8d0/0xbf0 [ 196.848030][ T7586] ? netlink_getsockopt+0x590/0x590 [ 196.853272][ T7586] ? aa_sock_msg_perm+0x94/0x150 [ 196.858249][ T7586] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 196.863564][ T7586] ? security_socket_sendmsg+0x80/0xa0 [ 196.869080][ T7586] ? netlink_getsockopt+0x590/0x590 [ 196.874318][ T7586] ____sys_sendmsg+0x5ba/0x960 [ 196.879136][ T7586] ? __asan_memset+0x22/0x40 [ 196.883788][ T7586] ? __sys_sendmsg_sock+0x30/0x30 [ 196.888858][ T7586] ? __import_iovec+0x5f2/0x850 [ 196.893759][ T7586] ? import_iovec+0x73/0xa0 [ 196.898309][ T7586] ___sys_sendmsg+0x2a6/0x360 [ 196.903063][ T7586] ? __sys_sendmsg+0x2a0/0x2a0 [ 196.907944][ T7586] __se_sys_sendmsg+0x1c2/0x2b0 [ 196.912836][ T7586] ? __x64_sys_sendmsg+0x80/0x80 [ 196.917844][ T7586] ? lockdep_hardirqs_on+0x98/0x150 [ 196.923107][ T7586] do_syscall_64+0x55/0xa0 [ 196.927563][ T7586] ? clear_bhb_loop+0x40/0x90 [ 196.932273][ T7586] ? clear_bhb_loop+0x40/0x90 [ 196.936994][ T7586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.942943][ T7586] RIP: 0033:0x7f77be99acb9 [ 196.947422][ T7586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.967064][ T7586] RSP: 002b:00007f77bcbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.975518][ T7586] RAX: ffffffffffffffda RBX: 00007f77bec15fa0 RCX: 00007f77be99acb9 [ 196.983535][ T7586] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 196.991537][ T7586] RBP: 00007f77bea08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 196.999536][ T7586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.007538][ T7586] R13: 00007f77bec16038 R14: 00007f77bec15fa0 R15: 00007ffd43db80a8 [ 197.015582][ T7586] [ 197.056184][ T7580] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 197.080476][ T7577] netlink: 'syz.2.524': attribute type 27 has an invalid length. [ 197.115406][ T7586] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.527'. [ 197.146209][ T7583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.385883][ T7590] À: port 1(vlan0) entered blocking state [ 197.392700][ T7590] À: port 1(vlan0) entered disabled state [ 197.400465][ T7590] vlan0: entered allmulticast mode [ 197.406300][ T7590] veth0_vlan: entered allmulticast mode [ 197.418820][ T5782] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 197.424407][ T7590] vlan0: entered promiscuous mode [ 197.577779][ T4501] wlan1: Creating new IBSS network, BSSID ee:72:18:f7:af:df [ 197.684110][ T7600] netlink: 790 bytes leftover after parsing attributes in process `syz.0.532'. [ 197.875147][ T7606] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 197.961993][ T7611] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.536'. [ 198.119797][ T7611] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 198.128202][ T7611] CPU: 1 PID: 7611 Comm: syz.0.536 Not tainted syzkaller #0 [ 198.135550][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.145685][ T7611] Call Trace: [ 198.149052][ T7611] [ 198.152037][ T7611] dump_stack_lvl+0x18c/0x250 [ 198.156786][ T7611] ? show_regs_print_info+0x20/0x20 [ 198.162075][ T7611] ? load_image+0x400/0x400 [ 198.166660][ T7611] sysfs_warn_dup+0x8e/0xa0 [ 198.171220][ T7611] sysfs_do_create_link_sd+0xc0/0x110 [ 198.176647][ T7611] device_add_class_symlinks+0x1cf/0x240 [ 198.182353][ T7611] device_add+0x507/0xc20 [ 198.186745][ T7611] wiphy_register+0x1dad/0x2ae0 [ 198.191688][ T7611] ? cfg80211_event_work+0x40/0x40 [ 198.195585][ T1148] wlan1: Trigger new scan to find an IBSS to join [ 198.196843][ T7611] ? minstrel_ht_alloc+0x88a/0x990 [ 198.196888][ T7611] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 198.214587][ T7611] ieee80211_register_hw+0x3464/0x4250 [ 198.220154][ T7611] ? ieee80211_tasklet_handler+0x20/0x20 [ 198.225855][ T7611] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 198.231806][ T7611] ? __debug_object_init+0xec/0x450 [ 198.237080][ T7611] ? __asan_memset+0x22/0x40 [ 198.241733][ T7611] ? __hrtimer_init+0x186/0x270 [ 198.246700][ T7611] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 198.252489][ T7611] ? mac80211_hwsim_free+0x220/0x220 [ 198.257814][ T7611] ? rcu_is_watching+0x15/0xb0 [ 198.262619][ T7611] ? kstrndup+0xbd/0x140 [ 198.266906][ T7611] hwsim_new_radio_nl+0xdc9/0x1a90 [ 198.272060][ T7611] ? __nla_validate+0x50/0x50 [ 198.276784][ T7611] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 198.283161][ T7611] ? __nla_parse+0x40/0x50 [ 198.287628][ T7611] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 198.294021][ T7611] genl_family_rcv_msg_doit+0x211/0x310 [ 198.299624][ T7611] ? end_current_label_crit_section+0x170/0x170 [ 198.305916][ T7611] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 198.311852][ T7611] ? bpf_lsm_capable+0x9/0x10 [ 198.316556][ T7611] ? security_capable+0x89/0xb0 [ 198.321452][ T7611] genl_rcv_msg+0x619/0x7a0 [ 198.326014][ T7611] ? genl_bind+0x360/0x360 [ 198.330484][ T7611] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 198.336855][ T7611] ? ref_tracker_free+0x690/0x840 [ 198.341943][ T7611] netlink_rcv_skb+0x241/0x4d0 [ 198.346775][ T7611] ? genl_bind+0x360/0x360 [ 198.351243][ T7611] ? netlink_ack+0x1180/0x1180 [ 198.356063][ T7611] ? __lock_acquire+0x7d40/0x7d40 [ 198.361141][ T7611] ? down_read+0x1ac/0x2e0 [ 198.365608][ T7611] genl_rcv+0x28/0x40 [ 198.369625][ T7611] netlink_unicast+0x751/0x8d0 [ 198.374436][ T7611] netlink_sendmsg+0x8d0/0xbf0 [ 198.379254][ T7611] ? netlink_getsockopt+0x590/0x590 [ 198.384486][ T7611] ? aa_sock_msg_perm+0x94/0x150 [ 198.389458][ T7611] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 198.394768][ T7611] ? security_socket_sendmsg+0x80/0xa0 [ 198.400250][ T7611] ? netlink_getsockopt+0x590/0x590 [ 198.405485][ T7611] ____sys_sendmsg+0x5ba/0x960 [ 198.410289][ T7611] ? __asan_memset+0x22/0x40 [ 198.414915][ T7611] ? __sys_sendmsg_sock+0x30/0x30 [ 198.419975][ T7611] ? __import_iovec+0x5f2/0x850 [ 198.424888][ T7611] ? import_iovec+0x73/0xa0 [ 198.429442][ T7611] ___sys_sendmsg+0x2a6/0x360 [ 198.434164][ T7611] ? __sys_sendmsg+0x2a0/0x2a0 [ 198.439011][ T7611] __se_sys_sendmsg+0x1c2/0x2b0 [ 198.443903][ T7611] ? __x64_sys_sendmsg+0x80/0x80 [ 198.448896][ T7611] ? lockdep_hardirqs_on+0x98/0x150 [ 198.454130][ T7611] do_syscall_64+0x55/0xa0 [ 198.458580][ T7611] ? clear_bhb_loop+0x40/0x90 [ 198.463299][ T7611] ? clear_bhb_loop+0x40/0x90 [ 198.468011][ T7611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.473935][ T7611] RIP: 0033:0x7f030b59acb9 [ 198.478428][ T7611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.498067][ T7611] RSP: 002b:00007f030c41b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.506510][ T7611] RAX: ffffffffffffffda RBX: 00007f030b815fa0 RCX: 00007f030b59acb9 [ 198.514510][ T7611] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 198.522508][ T7611] RBP: 00007f030b608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 198.530502][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.538537][ T7611] R13: 00007f030b816038 R14: 00007f030b815fa0 R15: 00007ffc7b90faa8 [ 198.546567][ T7611] [ 198.595991][ T7612] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.536'. [ 198.739924][ T7617] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.537'. [ 198.766104][ T7617] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 198.800853][ T7617] netlink: 'syz.1.537': attribute type 27 has an invalid length. [ 200.244395][ T59] wlan1: Trigger new scan to find an IBSS to join [ 200.597817][ T7625] netlink: 'syz.3.539': attribute type 39 has an invalid length. [ 200.725493][ T7647] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.546'. [ 201.005273][ T7647] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 201.014695][ T7647] CPU: 0 PID: 7647 Comm: syz.0.546 Not tainted syzkaller #0 [ 201.022052][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.032158][ T7647] Call Trace: [ 201.035481][ T7647] [ 201.038473][ T7647] dump_stack_lvl+0x18c/0x250 [ 201.043232][ T7647] ? show_regs_print_info+0x20/0x20 [ 201.048489][ T7647] ? load_image+0x400/0x400 [ 201.053161][ T7647] sysfs_warn_dup+0x8e/0xa0 [ 201.057719][ T7647] sysfs_do_create_link_sd+0xc0/0x110 [ 201.063149][ T7647] device_add_class_symlinks+0x1cf/0x240 [ 201.068850][ T7647] device_add+0x507/0xc20 [ 201.073242][ T7647] wiphy_register+0x1dad/0x2ae0 [ 201.078168][ T7647] ? cfg80211_event_work+0x40/0x40 [ 201.083339][ T7647] ? minstrel_ht_alloc+0x88a/0x990 [ 201.088520][ T7647] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 201.094661][ T7647] ieee80211_register_hw+0x3464/0x4250 [ 201.100230][ T7647] ? ieee80211_tasklet_handler+0x20/0x20 [ 201.105927][ T7647] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 201.111868][ T7647] ? __debug_object_init+0xec/0x450 [ 201.117112][ T7647] ? __asan_memset+0x22/0x40 [ 201.121746][ T7647] ? __hrtimer_init+0x186/0x270 [ 201.126634][ T7647] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 201.132409][ T7647] ? mac80211_hwsim_free+0x220/0x220 [ 201.137731][ T7647] ? rcu_is_watching+0x15/0xb0 [ 201.142525][ T7647] ? kstrndup+0xbd/0x140 [ 201.146810][ T7647] hwsim_new_radio_nl+0xdc9/0x1a90 [ 201.151967][ T7647] ? __nla_validate+0x50/0x50 [ 201.156690][ T7647] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 201.163072][ T7647] ? __nla_parse+0x40/0x50 [ 201.167525][ T7647] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 201.173896][ T7647] genl_family_rcv_msg_doit+0x211/0x310 [ 201.179517][ T7647] ? end_current_label_crit_section+0x170/0x170 [ 201.185796][ T7647] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 201.191742][ T7647] ? bpf_lsm_capable+0x9/0x10 [ 201.196452][ T7647] ? security_capable+0x89/0xb0 [ 201.201356][ T7647] genl_rcv_msg+0x619/0x7a0 [ 201.205904][ T7647] ? genl_bind+0x360/0x360 [ 201.210445][ T7647] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 201.216829][ T7647] ? ref_tracker_free+0x690/0x840 [ 201.221896][ T7647] netlink_rcv_skb+0x241/0x4d0 [ 201.226702][ T7647] ? genl_bind+0x360/0x360 [ 201.231156][ T7647] ? netlink_ack+0x1180/0x1180 [ 201.235997][ T7647] ? __lock_acquire+0x7d40/0x7d40 [ 201.241062][ T7647] ? down_read+0x1ac/0x2e0 [ 201.245511][ T7647] genl_rcv+0x28/0x40 [ 201.249523][ T7647] netlink_unicast+0x751/0x8d0 [ 201.254322][ T7647] netlink_sendmsg+0x8d0/0xbf0 [ 201.259136][ T7647] ? netlink_getsockopt+0x590/0x590 [ 201.264370][ T7647] ? aa_sock_msg_perm+0x94/0x150 [ 201.269374][ T7647] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 201.274692][ T7647] ? security_socket_sendmsg+0x80/0xa0 [ 201.280177][ T7647] ? netlink_getsockopt+0x590/0x590 [ 201.285408][ T7647] ____sys_sendmsg+0x5ba/0x960 [ 201.290223][ T7647] ? __asan_memset+0x22/0x40 [ 201.294846][ T7647] ? __sys_sendmsg_sock+0x30/0x30 [ 201.300007][ T7647] ? __import_iovec+0x5f2/0x850 [ 201.304904][ T7647] ? import_iovec+0x73/0xa0 [ 201.309451][ T7647] ___sys_sendmsg+0x2a6/0x360 [ 201.314194][ T7647] ? __sys_sendmsg+0x2a0/0x2a0 [ 201.319032][ T7647] __se_sys_sendmsg+0x1c2/0x2b0 [ 201.323924][ T7647] ? __x64_sys_sendmsg+0x80/0x80 [ 201.328916][ T7647] ? lockdep_hardirqs_on+0x98/0x150 [ 201.334150][ T7647] do_syscall_64+0x55/0xa0 [ 201.338613][ T7647] ? clear_bhb_loop+0x40/0x90 [ 201.343313][ T7647] ? clear_bhb_loop+0x40/0x90 [ 201.348018][ T7647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.353943][ T7647] RIP: 0033:0x7f030b59acb9 [ 201.358384][ T7647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.378031][ T7647] RSP: 002b:00007f030c41b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.386485][ T7647] RAX: ffffffffffffffda RBX: 00007f030b815fa0 RCX: 00007f030b59acb9 [ 201.394486][ T7647] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 201.402486][ T7647] RBP: 00007f030b608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 201.410502][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.418497][ T7647] R13: 00007f030b816038 R14: 00007f030b815fa0 R15: 00007ffc7b90faa8 [ 201.426518][ T7647] [ 201.447946][ T7650] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.546'. [ 201.863074][ T7660] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.550'. [ 201.887851][ T7664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.896236][ T7660] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 201.915645][ T7661] netlink: 'syz.2.550': attribute type 27 has an invalid length. [ 202.175999][ T49] wlan1: Trigger new scan to find an IBSS to join [ 202.798524][ T7669] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.561'. [ 202.818689][ T7669] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 202.849190][ T7675] netlink: 'syz.1.561': attribute type 27 has an invalid length. [ 203.017891][ T7677] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 203.117597][ T1148] wlan1: Creating new IBSS network, BSSID 8e:77:53:82:93:24 [ 204.177201][ T4501] wlan1: Trigger new scan to find an IBSS to join [ 204.339297][ T7682] netlink: 'syz.2.557': attribute type 39 has an invalid length. [ 204.545508][ T7698] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.136607][ T1148] wlan1: Trigger new scan to find an IBSS to join [ 205.278851][ T4501] wlan1: Creating new IBSS network, BSSID aa:4f:36:63:da:73 [ 206.095229][ T7734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.391068][ T7739] netlink: 'syz.0.578': attribute type 29 has an invalid length. [ 206.429994][ T7739] netlink: 'syz.0.578': attribute type 29 has an invalid length. [ 206.840068][ T7747] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 207.468036][ T7762] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.587'. [ 207.562181][ T7766] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.587'. [ 207.588427][ T7766] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 207.631142][ T7762] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 207.639712][ T7762] CPU: 1 PID: 7762 Comm: syz.2.587 Not tainted syzkaller #0 [ 207.647075][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 207.657186][ T7762] Call Trace: [ 207.660528][ T7762] [ 207.663515][ T7762] dump_stack_lvl+0x18c/0x250 [ 207.668273][ T7762] ? show_regs_print_info+0x20/0x20 [ 207.673529][ T7762] ? load_image+0x400/0x400 [ 207.678110][ T7762] sysfs_warn_dup+0x8e/0xa0 [ 207.682674][ T7762] sysfs_do_create_link_sd+0xc0/0x110 [ 207.688101][ T7762] device_add_class_symlinks+0x1cf/0x240 [ 207.693788][ T7762] device_add+0x507/0xc20 [ 207.698179][ T7762] wiphy_register+0x1dad/0x2ae0 [ 207.703124][ T7762] ? cfg80211_event_work+0x40/0x40 [ 207.708309][ T7762] ? minstrel_ht_alloc+0x88a/0x990 [ 207.713492][ T7762] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 207.719629][ T7762] ieee80211_register_hw+0x3464/0x4250 [ 207.725191][ T7762] ? ieee80211_tasklet_handler+0x20/0x20 [ 207.730899][ T7762] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 207.736871][ T7762] ? __debug_object_init+0xec/0x450 [ 207.742154][ T7762] ? __asan_memset+0x22/0x40 [ 207.746817][ T7762] ? __hrtimer_init+0x186/0x270 [ 207.751758][ T7762] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 207.757580][ T7762] ? mac80211_hwsim_free+0x220/0x220 [ 207.762935][ T7762] ? rcu_is_watching+0x15/0xb0 [ 207.767740][ T7762] ? kstrndup+0xbd/0x140 [ 207.772042][ T7762] hwsim_new_radio_nl+0xdc9/0x1a90 [ 207.777257][ T7762] ? __nla_validate+0x50/0x50 [ 207.781986][ T7762] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 207.788363][ T7762] ? __nla_parse+0x40/0x50 [ 207.792839][ T7762] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 207.799221][ T7762] genl_family_rcv_msg_doit+0x211/0x310 [ 207.804806][ T7762] ? end_current_label_crit_section+0x170/0x170 [ 207.811096][ T7762] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 207.817036][ T7762] ? bpf_lsm_capable+0x9/0x10 [ 207.821747][ T7762] ? security_capable+0x89/0xb0 [ 207.826639][ T7762] genl_rcv_msg+0x619/0x7a0 [ 207.831189][ T7762] ? genl_bind+0x360/0x360 [ 207.835673][ T7762] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 207.842489][ T7762] ? ref_tracker_free+0x690/0x840 [ 207.847563][ T7762] netlink_rcv_skb+0x241/0x4d0 [ 207.852366][ T7762] ? genl_bind+0x360/0x360 [ 207.856825][ T7762] ? netlink_ack+0x1180/0x1180 [ 207.861650][ T7762] ? __lock_acquire+0x7d40/0x7d40 [ 207.866713][ T7762] ? down_read+0x1ac/0x2e0 [ 207.871214][ T7762] genl_rcv+0x28/0x40 [ 207.875241][ T7762] netlink_unicast+0x751/0x8d0 [ 207.880063][ T7762] netlink_sendmsg+0x8d0/0xbf0 [ 207.884878][ T7762] ? netlink_getsockopt+0x590/0x590 [ 207.890115][ T7762] ? aa_sock_msg_perm+0x94/0x150 [ 207.895109][ T7762] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 207.900423][ T7762] ? security_socket_sendmsg+0x80/0xa0 [ 207.906011][ T7762] ? netlink_getsockopt+0x590/0x590 [ 207.911256][ T7762] ____sys_sendmsg+0x5ba/0x960 [ 207.916059][ T7762] ? __asan_memset+0x22/0x40 [ 207.920676][ T7762] ? __sys_sendmsg_sock+0x30/0x30 [ 207.925741][ T7762] ? __import_iovec+0x5f2/0x850 [ 207.930649][ T7762] ? import_iovec+0x73/0xa0 [ 207.935211][ T7762] ___sys_sendmsg+0x2a6/0x360 [ 207.940363][ T7762] ? __sys_sendmsg+0x2a0/0x2a0 [ 207.945173][ T7762] ? debug_mutex_init+0x38/0x70 [ 207.950072][ T7762] __se_sys_sendmsg+0x1c2/0x2b0 [ 207.954966][ T7762] ? __x64_sys_sendmsg+0x80/0x80 [ 207.959961][ T7762] ? lockdep_hardirqs_on+0x98/0x150 [ 207.965195][ T7762] do_syscall_64+0x55/0xa0 [ 207.969649][ T7762] ? clear_bhb_loop+0x40/0x90 [ 207.974362][ T7762] ? clear_bhb_loop+0x40/0x90 [ 207.979080][ T7762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.985020][ T7762] RIP: 0033:0x7fdd3499acb9 [ 207.989481][ T7762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.009125][ T7762] RSP: 002b:00007fdd3586d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.017575][ T7762] RAX: ffffffffffffffda RBX: 00007fdd34c15fa0 RCX: 00007fdd3499acb9 [ 208.025576][ T7762] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 208.033573][ T7762] RBP: 00007fdd34a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 208.041578][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.049575][ T7762] R13: 00007fdd34c16038 R14: 00007fdd34c15fa0 R15: 00007fff97752bf8 [ 208.057597][ T7762] [ 208.186053][ T4501] wlan1: Trigger new scan to find an IBSS to join [ 208.522953][ T7778] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 208.853200][ T7780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.148588][ T4501] wlan1: Trigger new scan to find an IBSS to join [ 209.575100][ T7790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.777356][ T7793] netlink: 'syz.3.595': attribute type 29 has an invalid length. [ 209.807054][ T7793] netlink: 'syz.3.595': attribute type 29 has an invalid length. [ 210.816991][ T7806] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.599'. [ 210.833306][ T7806] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 211.136021][ T4501] wlan1: Trigger new scan to find an IBSS to join [ 211.204476][ T7817] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 211.228864][ T744] wlan1: Trigger new scan to find an IBSS to join [ 212.016314][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 212.022929][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 212.029818][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 212.037300][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 212.180945][ T744] wlan1: Creating new IBSS network, BSSID 42:c4:0b:be:46:1b [ 212.222054][ T7827] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.606'. [ 212.286905][ T7827] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 212.296880][ T7823] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 212.307426][ T744] ------------[ cut here ]------------ [ 212.313285][ T744] WARNING: CPU: 1 PID: 744 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 212.323353][ T744] Modules linked in: [ 212.327480][ T744] CPU: 1 PID: 744 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 212.335005][ T744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.345988][ T744] Workqueue: cfg80211 cfg80211_event_work [ 212.351849][ T744] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 212.358704][ T744] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 b1 a2 f7 0f 0b eb bb e8 8e b1 a2 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 80 b1 a2 f7 0f 0b e9 e0 fd ff ff e8 [ 212.379524][ T744] RSP: 0018:ffffc90003737a20 EFLAGS: 00010293 [ 212.385729][ T744] RAX: ffffffff89e46192 RBX: dffffc0000000000 RCX: ffff88802116da00 [ 212.394131][ T744] RDX: 0000000000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c80e0 [ 212.402312][ T744] RBP: ffffc90003737af8 R08: ffffffff911be56f R09: 1ffffffff2237cad [ 212.410890][ T744] R10: dffffc0000000000 R11: fffffbfff2237cae R12: ffff88805c3f4c90 [ 212.420067][ T744] R13: 1ffff920006e6f4c R14: ffff88805c2c35b8 R15: 000000000000001f [ 212.428250][ T744] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 212.437469][ T744] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.444134][ T744] CR2: 00007fdd3582aff8 CR3: 0000000075910000 CR4: 00000000003506e0 [ 212.452333][ T744] Call Trace: [ 212.455704][ T744] [ 212.458863][ T744] ? mutex_lock_nested+0x20/0x20 [ 212.463923][ T744] ? trace_rdev_return_void+0x1c0/0x1c0 [ 212.469830][ T744] cfg80211_process_wdev_events+0x3bc/0x550 [ 212.475942][ T744] cfg80211_process_rdev_events+0xa1/0x110 [ 212.482814][ T744] cfg80211_event_work+0x2f/0x40 [ 212.488194][ T744] ? process_scheduled_works+0x96f/0x15d0 [ 212.494013][ T744] process_scheduled_works+0xa5d/0x15d0 [ 212.500520][ T744] ? assign_work+0x430/0x430 [ 212.505265][ T744] ? assign_work+0x3d0/0x430 [ 212.510106][ T744] worker_thread+0xa55/0xfc0 [ 212.514803][ T744] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 212.520875][ T744] ? _raw_spin_unlock+0x40/0x40 [ 212.525960][ T744] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 212.532040][ T744] kthread+0x2fa/0x390 [ 212.536331][ T744] ? pr_cont_work+0x560/0x560 [ 212.541119][ T744] ? kthread_blkcg+0xd0/0xd0 [ 212.545886][ T744] ret_from_fork+0x48/0x80 [ 212.550403][ T744] ? kthread_blkcg+0xd0/0xd0 [ 212.555095][ T744] ret_from_fork_asm+0x11/0x20 [ 212.560110][ T744] [ 212.563213][ T744] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 212.570547][ T744] CPU: 1 PID: 744 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 212.578067][ T744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.588198][ T744] Workqueue: cfg80211 cfg80211_event_work [ 212.594021][ T744] Call Trace: [ 212.597367][ T744] [ 212.600399][ T744] dump_stack_lvl+0x18c/0x250 [ 212.605170][ T744] ? show_regs_print_info+0x20/0x20 [ 212.610459][ T744] ? load_image+0x400/0x400 [ 212.615094][ T744] panic+0x2dc/0x730 [ 212.619109][ T744] ? bpf_jit_dump+0xd0/0xd0 [ 212.623741][ T744] ? ret_from_fork_asm+0x11/0x20 [ 212.628786][ T744] __warn+0x2e0/0x470 [ 212.632840][ T744] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 212.638484][ T744] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 212.644113][ T744] report_bug+0x2be/0x4f0 [ 212.648528][ T744] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 212.654178][ T744] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 212.659802][ T744] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 212.665444][ T744] handle_bug+0xcf/0x120 [ 212.669774][ T744] exc_invalid_op+0x1a/0x50 [ 212.674432][ T744] asm_exc_invalid_op+0x1a/0x20 [ 212.679319][ T744] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 212.685525][ T744] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 97 b1 a2 f7 0f 0b eb bb e8 8e b1 a2 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 80 b1 a2 f7 0f 0b e9 e0 fd ff ff e8 [ 212.705178][ T744] RSP: 0018:ffffc90003737a20 EFLAGS: 00010293 [ 212.711304][ T744] RAX: ffffffff89e46192 RBX: dffffc0000000000 RCX: ffff88802116da00 [ 212.719324][ T744] RDX: 0000000000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c80e0 [ 212.727348][ T744] RBP: ffffc90003737af8 R08: ffffffff911be56f R09: 1ffffffff2237cad [ 212.735365][ T744] R10: dffffc0000000000 R11: fffffbfff2237cae R12: ffff88805c3f4c90 [ 212.743400][ T744] R13: 1ffff920006e6f4c R14: ffff88805c2c35b8 R15: 000000000000001f [ 212.751441][ T744] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 212.757065][ T744] ? mutex_lock_nested+0x20/0x20 [ 212.762066][ T744] ? trace_rdev_return_void+0x1c0/0x1c0 [ 212.767693][ T744] cfg80211_process_wdev_events+0x3bc/0x550 [ 212.773669][ T744] cfg80211_process_rdev_events+0xa1/0x110 [ 212.779530][ T744] cfg80211_event_work+0x2f/0x40 [ 212.784529][ T744] ? process_scheduled_works+0x96f/0x15d0 [ 212.790317][ T744] process_scheduled_works+0xa5d/0x15d0 [ 212.796004][ T744] ? assign_work+0x430/0x430 [ 212.800666][ T744] ? assign_work+0x3d0/0x430 [ 212.805325][ T744] worker_thread+0xa55/0xfc0 [ 212.809967][ T744] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 212.815910][ T744] ? _raw_spin_unlock+0x40/0x40 [ 212.820836][ T744] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 212.826844][ T744] kthread+0x2fa/0x390 [ 212.830955][ T744] ? pr_cont_work+0x560/0x560 [ 212.835681][ T744] ? kthread_blkcg+0xd0/0xd0 [ 212.840316][ T744] ret_from_fork+0x48/0x80 [ 212.844779][ T744] ? kthread_blkcg+0xd0/0xd0 [ 212.849420][ T744] ret_from_fork_asm+0x11/0x20 [ 212.854283][ T744] [ 212.857949][ T744] Kernel Offset: disabled [ 212.862390][ T744] Rebooting in 86400 seconds..