last executing test programs: 12.560568772s ago: executing program 3 (id=1839): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010006000000000000000c0000000c00000002000000000000000000000a000000000000"], 0x0, 0x26}, 0x20) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) socketpair(0x21, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x80, 0xbecb, 0x0, 0x0, 0x4, 0x4, 0xc5}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000800), 0x0}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000002c0), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 9.983794181s ago: executing program 3 (id=1844): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r2, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095", @ANYRESHEX=r0, @ANYRES16=r2, @ANYRES16=r1, @ANYRESDEC, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', r3}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r2, 0x58, &(0x7f0000000680)}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000680)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90d24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x8084) r9 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r9, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48840) perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0xff, 0xff, 0x5, 0xf9, 0x0, 0x1, 0x4062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x8400, 0xfffffffffffffff3, 0x6, 0x7, 0x800000002, 0xfff7ffff, 0x10, 0x0, 0x4, 0x0, 0xdf}, 0x0, 0x6, 0xffffffffffffffff, 0x2) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b19, 0x0) 7.81383958s ago: executing program 1 (id=1849): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r2, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095", @ANYRESHEX=r0, @ANYRES16=r2, @ANYRES16=r1, @ANYRESDEC, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', r3}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r2, 0x58, &(0x7f0000000680)}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000680)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90d24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x8084) r9 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r9, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48840) perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0xff, 0xff, 0x5, 0xf9, 0x0, 0x1, 0x4062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x8400, 0xfffffffffffffff3, 0x6, 0x7, 0x800000002, 0xfff7ffff, 0x10, 0x0, 0x4, 0x0, 0xdf}, 0x0, 0x6, 0xffffffffffffffff, 0x2) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 7.517374241s ago: executing program 3 (id=1850): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="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", 0x258}, {0x0}], 0x2}, 0x8400) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) 7.220964871s ago: executing program 2 (id=1851): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg(r0, &(0x7f0000000240)={&(0x7f00000003c0)=@in6={0xa, 0x4e21, 0x10, @dev={0xfe, 0x80, '\x00', 0x27}, 0x8}, 0x80, &(0x7f0000000e00), 0x0, 0x0, 0xb0}, 0x20000004) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r1, 0x0, 0x2000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000bd4d072a00000000040098feff5e00000000ebef122c6b4cdbb237bba7383566eb32b2668821df398282235e41ca0fe51d258f141d66d64969253568f92e69b7121a71f56c43f8f15bda93e9231d4fb8f64c237800d188243054fe41ec6d6b8512586e051a09b5f36c26728c9417b363f4f0d68287adb0c97098d6199b46e4b0ceaceeaa0f260097d25718a9be0b4aef8893ebae108cf59391c8f0d0f152886df2995448b524d83d6493d371dfa7dfdda323be56a7c4717b6cf74e235971d2c8dc8a970600000000e452ff0a4c5c3386ca2ef34721e772bc798b8736dc2a2e53282f381eb4f4fdb2c3", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x29, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000050000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x2000, 0x80000, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x4861, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$kcm(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x1f, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0xffffffffffffffeb, &(0x7f00000002c0), 0x0, 0x0, 0xef, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) getpid() ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000080000100851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000097c02b1400003c0000180000000000000000000000000000009500000000e2ffff94000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 7.220672131s ago: executing program 3 (id=1852): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r2 = socket$kcm(0x2, 0x6, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000100)=r7, 0x8) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000100)=r4, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1829, 0x0, 0x0, 0x0, 0xe, 0x1, 0x9, 0x0, 0xad8f, 0x0, 0x40}, 0x0, 0x10, r4, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r9, &(0x7f0000000180), 0x0}, 0x20) socket$kcm(0x11, 0xa, 0x300) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) sendmsg$inet(r6, &(0x7f0000000e40)={&(0x7f00000006c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f00000007c0)="b9f8bd4304631b9f51f3da06a7e9aa7be76f6a3f3180d68140281d8bd364fe03a790361efec1b1245c079e0b1f6f733d07a19be0b398a8108421a0849ce3116dcf375f73d2b7339b7cf8638b32a2053a0a218ab6808345cf9565f5b5e3", 0x5d}, {&(0x7f0000000840)="70a2186f173065fe4b1020f9973810116913af84710731d13642db5c9daf416c0a83be107d3777a890f2c69ce22e6afd2ba278272977064c6f95c1d02f1e294c067d431a40f7cfc7c4cec339601c03e20d605910e79f6a89bf03ba19c32f2dabc90f36e1a19ee1916734582a92ad65331a30bf3768b72673d6bdf0980674e0706857", 0x82}, {&(0x7f0000000900)="40976ea398580801153dd52741be1a9bd1c4161976b7329e500c8740a7dde5f083c01f391fdf7153b25f29613f4f609d92658c51", 0x34}], 0x3, &(0x7f0000000cc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8b5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x29}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_retopts={{0x84, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x97, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @empty]}, @generic={0xd4, 0x11, "372f3af07ec2a51a0f7215a618ae9b"}, @generic={0x83, 0xa, "ac20cbd253174eb9"}, @end, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x3b, 0x1, [{0x6, 0x8, "26e47828016a"}, {0x94aae8c9afc899aa, 0x4, "fd95"}, {0x1, 0x12, "0f581c6abeff568c6275003910e94e8f"}, {0x5, 0x5, '=2?'}, {0x5, 0x8, "38e7507f5c7e"}, {0x5, 0x7, "3b425de282"}, {0x7, 0x3, "15"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x83, 0x7, "3bc4b8f182"}]}}}], 0x170}, 0x4018000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.177436304s ago: executing program 0 (id=1853): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.841778707s ago: executing program 0 (id=1854): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r2 = socket$kcm(0x2, 0x6, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000100)=r7, 0x8) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000100)=r4, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r9, &(0x7f0000000180), 0x0}, 0x20) socket$kcm(0x11, 0xa, 0x300) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) sendmsg$inet(r6, &(0x7f0000000e40)={&(0x7f00000006c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f00000007c0)="b9f8bd4304631b9f51f3da06a7e9aa7be76f6a3f3180d68140281d8bd364fe03a790361efec1b1245c079e0b1f6f733d07a19be0b398a8108421a0849ce3116dcf375f73d2b7339b7cf8638b32a2053a0a218ab6808345cf9565f5b5e3", 0x5d}, {&(0x7f0000000840)="70a2186f173065fe4b1020f9973810116913af84710731d13642db5c9daf416c0a83be107d3777a890f2c69ce22e6afd2ba278272977064c6f95c1d02f1e294c067d431a40f7cfc7c4cec339601c03e20d605910e79f6a89bf03ba19c32f2dabc90f36e1a19ee1916734582a92ad65331a30bf3768b72673d6bdf0980674e0706857", 0x82}, {&(0x7f0000000900)="40976ea398580801153dd52741be1a9bd1c4161976b7329e500c8740a7dde5f083c01f391fdf7153b25f29613f4f609d92658c51", 0x34}], 0x3, &(0x7f0000000cc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x29}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_retopts={{0x88, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x97, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @empty]}, @generic={0xd4, 0x11, "372f3af07ec2a51a0f7215a618ae9b"}, @generic={0x83, 0xa, "ac20cbd253174eb9"}, @end, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x3d, 0x1, [{0x6, 0xa, "26e47828016ab24f"}, {0x94aae8c9afc899aa, 0x4, "fd95"}, {0x1, 0x12, "0f581c6abeff568c6275003910e94e8f"}, {0x5, 0x5, '=2?'}, {0x5, 0x8, "38e7507f5c7e"}, {0x5, 0x7, "3b425de282"}, {0x7, 0x3, "15"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x83, 0x7, "3bc4b8f182"}]}}}], 0x158}, 0x4018000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.695548478s ago: executing program 1 (id=1855): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x58, &(0x7f0000000380)}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x8084) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0xff, 0xff, 0x5, 0xf9, 0x0, 0x1, 0x4062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x8400, 0xfffffffffffffff3, 0x6, 0x7, 0x800000002, 0xfff7ffff, 0x10, 0x0, 0x4, 0x0, 0xdf}, 0x0, 0x6, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 6.647720711s ago: executing program 2 (id=1856): perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r1, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) r4 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r4, 0x0, 0x4880) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./cgroup\x00', r3, 0x4000, r0}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e46968eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000000000000005335000000143ea70c2ab40c7cb70c943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a33e680846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fa807de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf652e28e700000000000000b24478a78a0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c450503009688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0000f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4cbaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13e434aae9df81ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a384002421d898913c45a9ac091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c045a17e9a61c3b064e679508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d522946727024de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df00000000000000000000dfa4c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5d00f26126d4cf2c73e5f94030000000000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62fc9dfffeb13b4858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1ef90ed4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d78429d358aa54b4b49926c4be9ee4659153d9f9f5d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000d0267ac40d1130a9000000000045f50812a1a0530b02baed19f4c977ac0d397ed6371ec589bf5943690250bdfa5b676d5d53d2ab3aeee1a6910c1a33b6c06c93386768f8b1bb27ec31cffbd4f5c7b0c2e14e4fc6c2f089ab08567254e93780afdddefb3f0d2143ad73c0bf2467859049d46dc5aa91f918a307e7dcaaccd6cbe66e8a04d201392a487f681f82528a800e27d65200ae10e1b5d39a29d8a2c8ed2dfa77e21249b45806733e674a9e8e72ad1cb0d3bfadb00a18a5008ea1e4c8fb93d311f52a476c576a3f65c9bdd4e4b870aed4cb9906a8aa25986e6e30be249d9911114b42b2fb51168e56000a62b794c193f7797ebeb7f8b91c70b6e720af06ecfcfb89a2d5a25f"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000340)="b9e403c6630d698cb8a00b04339c07f7c9768b", 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x2, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2001) setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) socket$kcm(0x2, 0x5, 0x84) 5.325163232s ago: executing program 1 (id=1857): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg(r0, &(0x7f0000000240)={&(0x7f00000003c0)=@in6={0xa, 0x4e21, 0x10, @dev={0xfe, 0x80, '\x00', 0x27}, 0x8}, 0x80, &(0x7f0000000e00), 0x0, 0x0, 0xb0}, 0x20000004) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r1, 0x0, 0x2000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000bd4d072a00000000040098feff5e00000000ebef122c6b4cdbb237bba7383566eb32b2668821df398282235e41ca0fe51d258f141d66d64969253568f92e69b7121a71f56c43f8f15bda93e9231d4fb8f64c237800d188243054fe41ec6d6b8512586e051a09b5f36c26728c9417b363f4f0d68287adb0c97098d6199b46e4b0ceaceeaa0f260097d25718a9be0b4aef8893ebae108cf59391c8f0d0f152886df2995448b524d83d6493d371dfa7dfdda323be56a7c4717b6cf74e235971d2c8dc8a970600000000e452ff0a4c5c3386ca2ef34721e772bc798b8736dc2a2e53282f381eb4f4fdb2c3", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x29, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x2000, 0x80000, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x4861, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$kcm(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x1f, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x0, 0x0, 0x0, 0x0, 0xef, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) getpid() ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000080000100851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000097c02b1400003c0000180000000000000000000000000000009500000000e2ffff94000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 4.538356267s ago: executing program 2 (id=1858): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r2, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095", @ANYRESHEX=r0, @ANYRES16=r2, @ANYRES16=r1, @ANYRESDEC, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', r3}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r2, 0x58, &(0x7f0000000680)}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000680)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90d24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x8084) r9 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r9, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48840) perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0xff, 0xff, 0x5, 0xf9, 0x0, 0x1, 0x4062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x8400, 0xfffffffffffffff3, 0x6, 0x7, 0x800000002, 0xfff7ffff, 0x10, 0x0, 0x4, 0x0, 0xdf}, 0x0, 0x6, 0xffffffffffffffff, 0x2) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b19, 0x0) 4.165490342s ago: executing program 0 (id=1859): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000040)="7f", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) 4.130565894s ago: executing program 3 (id=1860): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYRESHEX, @ANYRES16=r1, @ANYRES16=r0, @ANYRESDEC, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', r2}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r1, 0x58, &(0x7f0000000680)}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000680)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90d24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x8084) r6 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48840) perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0xff, 0xff, 0x5, 0xf9, 0x0, 0x1, 0x4062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x8400, 0xfffffffffffffff3, 0x6, 0x7, 0x800000002, 0xfff7ffff, 0x10, 0x0, 0x4, 0x0, 0xdf}, 0x0, 0x6, 0xffffffffffffffff, 0x2) close(r4) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 4.085814328s ago: executing program 1 (id=1861): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r2 = socket$kcm(0x2, 0x6, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000100)=r7, 0x8) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000100)=r4, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1829, 0x0, 0x0, 0x0, 0xe, 0x1, 0x9, 0x0, 0xad8f, 0x0, 0x40}, 0x0, 0x10, r4, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r9, &(0x7f0000000180), 0x0}, 0x20) socket$kcm(0x11, 0xa, 0x300) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) sendmsg$inet(r6, &(0x7f0000000e40)={&(0x7f00000006c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f00000007c0)="b9f8bd4304631b9f51f3da06a7e9aa7be76f6a3f3180d68140281d8bd364fe03a790361efec1b1245c079e0b1f6f733d07a19be0b398a8108421a0849ce3116dcf375f73d2b7339b7cf8638b32a2053a0a218ab6808345cf9565f5b5e3", 0x5d}, {&(0x7f0000000840)="70a2186f173065fe4b1020f9973810116913af84710731d13642db5c9daf416c0a83be107d3777a890f2c69ce22e6afd2ba278272977064c6f95c1d02f1e294c067d431a40f7cfc7c4cec339601c03e20d605910e79f6a89bf03ba19c32f2dabc90f36e1a19ee1916734582a92ad65331a30bf3768b72673d6bdf0980674e0706857", 0x82}, {&(0x7f0000000900)="40976ea398580801153dd52741be1a9bd1c4161976b7329e500c8740a7dde5f083c01f391fdf7153b25f29613f4f609d92658c51", 0x34}], 0x3, &(0x7f0000000cc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x29}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_retopts={{0x88, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x97, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @empty]}, @generic={0xd4, 0x11, "372f3af07ec2a51a0f7215a618ae9b"}, @generic={0x83, 0xa, "ac20cbd253174eb9"}, @end, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x3d, 0x1, [{0x6, 0xa, "26e47828016ab24f"}, {0x94aae8c9afc899aa, 0x4, "fd95"}, {0x1, 0x12, "0f581c6abeff568c6275003910e94e8f"}, {0x5, 0x5, '=2?'}, {0x5, 0x8, "38e7507f5c7e"}, {0x5, 0x7, "3b425de282"}, {0x7, 0x3, "15"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x83, 0x7, "3bc4b8f182"}]}}}], 0x158}, 0x4018000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.864968583s ago: executing program 0 (id=1862): gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.152866692s ago: executing program 2 (id=1863): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r2, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095", @ANYRESHEX=r0, @ANYRES16=r2, @ANYRES16=r1, @ANYRESDEC, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', r3}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r2, 0x58, &(0x7f0000000680)}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000680)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90d24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x8084) r9 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r9, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48840) perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0xff, 0xff, 0x5, 0xf9, 0x0, 0x1, 0x4062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x8400, 0xfffffffffffffff3, 0x6, 0x7, 0x800000002, 0xfff7ffff, 0x10, 0x0, 0x4, 0x0, 0xdf}, 0x0, 0x6, 0xffffffffffffffff, 0x2) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 1.199909037s ago: executing program 0 (id=1864): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x52d35ce30131f272}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000f40)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="1200000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.070642946s ago: executing program 2 (id=1865): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x58, &(0x7f0000000380)}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x8084) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0xff, 0xff, 0x5, 0xf9, 0x0, 0x1, 0x4062, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x8400, 0xfffffffffffffff3, 0x6, 0x7, 0x800000002, 0xfff7ffff, 0x10, 0x0, 0x4, 0x0, 0xdf}, 0x0, 0x6, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 1.045659498s ago: executing program 1 (id=1866): perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r1, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) r4 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r4, 0x0, 0x4880) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./cgroup\x00', r3, 0x4000, r0}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000340)="b9e403c6630d698cb8a00b04339c07f7c9768b", 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x2, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2001) setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) socket$kcm(0x2, 0x5, 0x84) 237.085523ms ago: executing program 3 (id=1867): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r2 = socket$kcm(0x2, 0x6, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000100)=r7, 0x8) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000100)=r4, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1829, 0x0, 0x0, 0x0, 0xe, 0x1, 0x9, 0x0, 0xad8f, 0x0, 0x40}, 0x0, 0x10, r4, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, &(0x7f0000000180), 0x0}, 0x20) socket$kcm(0x11, 0xa, 0x300) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) sendmsg$inet(r6, &(0x7f0000000e40)={&(0x7f00000006c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f00000007c0)="b9f8bd4304631b9f51f3da06a7e9aa7be76f6a3f3180d68140281d8bd364fe03a790361efec1b1245c079e0b1f6f733d07a19be0b398a8108421a0849ce3116dcf375f73d2b7339b7cf8638b32a2053a0a218ab6808345cf9565f5b5e3", 0x5d}, {&(0x7f0000000840)="70a2186f173065fe4b1020f9973810116913af84710731d13642db5c9daf416c0a83be107d3777a890f2c69ce22e6afd2ba278272977064c6f95c1d02f1e294c067d431a40f7cfc7c4cec339601c03e20d605910e79f6a89bf03ba19c32f2dabc90f36e1a19ee1916734582a92ad65331a30bf3768b72673d6bdf0980674e0706857", 0x82}, {&(0x7f0000000900)="40976ea398580801153dd52741be1a9bd1c4161976b7329e500c8740a7dde5f083c01f391fdf7153b25f29613f4f609d92658c51", 0x34}], 0x3, &(0x7f0000000cc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x29}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_retopts={{0x88, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x97, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @empty]}, @generic={0xd4, 0x11, "372f3af07ec2a51a0f7215a618ae9b"}, @generic={0x83, 0xa, "ac20cbd253174eb9"}, @end, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x3d, 0x1, [{0x6, 0xa, "26e47828016ab24f"}, {0x94aae8c9afc899aa, 0x4, "fd95"}, {0x1, 0x12, "0f581c6abeff568c6275003910e94e8f"}, {0x5, 0x5, '=2?'}, {0x5, 0x8, "38e7507f5c7e"}, {0x5, 0x7, "3b425de282"}, {0x7, 0x3, "15"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x83, 0x7, "3bc4b8f182"}]}}}], 0x158}, 0x4018000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 106.668603ms ago: executing program 1 (id=1868): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r2 = socket$kcm(0x2, 0x6, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000100)=r7, 0x8) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000100)=r4, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r9, &(0x7f0000000180), 0x0}, 0x20) socket$kcm(0x11, 0xa, 0x300) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) sendmsg$inet(r6, &(0x7f0000000e40)={&(0x7f00000006c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f00000007c0)="b9f8bd4304631b9f51f3da06a7e9aa7be76f6a3f3180d68140281d8bd364fe03a790361efec1b1245c079e0b1f6f733d07a19be0b398a8108421a0849ce3116dcf375f73d2b7339b7cf8638b32a2053a0a218ab6808345cf9565f5b5e3", 0x5d}, {&(0x7f0000000840)="70a2186f173065fe4b1020f9973810116913af84710731d13642db5c9daf416c0a83be107d3777a890f2c69ce22e6afd2ba278272977064c6f95c1d02f1e294c067d431a40f7cfc7c4cec339601c03e20d605910e79f6a89bf03ba19c32f2dabc90f36e1a19ee1916734582a92ad65331a30bf3768b72673d6bdf0980674e0706857", 0x82}, {&(0x7f0000000900)="40976ea398580801153dd52741be1a9bd1c4161976b7329e500c8740a7dde5f083c01f391fdf7153b25f29613f4f609d92658c51", 0x34}], 0x3, &(0x7f0000000cc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x29}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_retopts={{0x88, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x97, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @empty]}, @generic={0xd4, 0x11, "372f3af07ec2a51a0f7215a618ae9b"}, @generic={0x83, 0xa, "ac20cbd253174eb9"}, @end, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x3d, 0x1, [{0x6, 0xa, "26e47828016ab24f"}, {0x94aae8c9afc899aa, 0x4, "fd95"}, {0x1, 0x12, "0f581c6abeff568c6275003910e94e8f"}, {0x5, 0x5, '=2?'}, {0x5, 0x8, "38e7507f5c7e"}, {0x5, 0x7, "3b425de282"}, {0x7, 0x3, "15"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x83, 0x7, "3bc4b8f182"}]}}}], 0x158}, 0x4018000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 105.112243ms ago: executing program 0 (id=1876): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r1 = socket$kcm(0x2, 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000100)=r6, 0x8) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000100)=r3, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1829, 0x0, 0x0, 0x0, 0xe, 0x1, 0x9, 0x0, 0xad8f, 0x0, 0x40}, 0x0, 0x10, r3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, &(0x7f0000000180), 0x0}, 0x20) socket$kcm(0x11, 0xa, 0x300) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) sendmsg$inet(r5, &(0x7f0000000e40)={&(0x7f00000006c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f00000007c0)="b9f8bd4304631b9f51f3da06a7e9aa7be76f6a3f3180d68140281d8bd364fe03a790361efec1b1245c079e0b1f6f733d07a19be0b398a8108421a0849ce3116dcf375f73d2b7339b7cf8638b32a2053a0a218ab6808345cf9565f5b5e3", 0x5d}, {&(0x7f0000000840)="70a2186f173065fe4b1020f9973810116913af84710731d13642db5c9daf416c0a83be107d3777a890f2c69ce22e6afd2ba278272977064c6f95c1d02f1e294c067d431a40f7cfc7c4cec339601c03e20d605910e79f6a89bf03ba19c32f2dabc90f36e1a19ee1916734582a92ad65331a30bf3768b72673d6bdf0980674e0706857", 0x82}, {&(0x7f0000000900)="40976ea398580801153dd52741be1a9bd1c4161976b7329e500c8740a7dde5f083c01f391fdf7153b25f29613f4f609d92658c51", 0x34}], 0x3, &(0x7f0000000cc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x29}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_retopts={{0x88, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x97, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @empty]}, @generic={0xd4, 0x11, "372f3af07ec2a51a0f7215a618ae9b"}, @generic={0x83, 0xa, "ac20cbd253174eb9"}, @end, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x3d, 0x1, [{0x6, 0xa, "26e47828016ab24f"}, {0x94aae8c9afc899aa, 0x4, "fd95"}, {0x1, 0x12, "0f581c6abeff568c6275003910e94e8f"}, {0x5, 0x5, '=2?'}, {0x5, 0x8, "38e7507f5c7e"}, {0x5, 0x7, "3b425de282"}, {0x7, 0x3, "15"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x83, 0x7, "3bc4b8f182"}]}}}], 0x158}, 0x4018000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 2 (id=1869): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg(r0, &(0x7f0000000240)={&(0x7f00000003c0)=@in6={0xa, 0x4e21, 0x10, @dev={0xfe, 0x80, '\x00', 0x27}, 0x8}, 0x80, &(0x7f0000000e00), 0x0, 0x0, 0xb0}, 0x20000004) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r1, 0x0, 0x2000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000bd4d072a00000000040098feff5e00000000ebef122c6b4cdbb237bba7383566eb32b2668821df398282235e41ca0fe51d258f141d66d64969253568f92e69b7121a71f56c43f8f15bda93e9231d4fb8f64c237800d188243054fe41ec6d6b8512586e051a09b5f36c26728c9417b363f4f0d68287adb0c97098d6199b46e4b0ceaceeaa0f260097d25718a9be0b4aef8893ebae108cf59391c8f0d0f152886df2995448b524d83d6493d371dfa7dfdda323be56a7c4717b6cf74e235971d2c8dc8a970600000000e452ff0a4c5c3386ca2ef34721e772bc798b8736dc2a2e53282f381eb4f4fdb2c3", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x29, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x2000, 0x80000, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x4861, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$kcm(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x1f, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x0, 0x0, 0x0, 0x0, 0xef, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) getpid() ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000080000100851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000097c02b1400003c0000180000000000000000000000000000009500000000e2ffff94000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) kernel console output (not intermixed with test programs): 3413][T11350] ___sys_sendmsg+0x2a6/0x360 [ 869.208459][T11350] ? __sys_sendmsg+0x2a0/0x2a0 [ 869.213331][T11350] __se_sys_sendmsg+0x1c2/0x2b0 [ 869.218259][T11350] ? __x64_sys_sendmsg+0x80/0x80 [ 869.223963][T11350] ? lockdep_hardirqs_on+0x98/0x150 [ 869.229387][T11350] do_syscall_64+0x55/0xa0 [ 869.234037][T11350] ? clear_bhb_loop+0x40/0x90 [ 869.238852][T11350] ? clear_bhb_loop+0x40/0x90 [ 869.243584][T11350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 869.249608][T11350] RIP: 0033:0x7fea0519c819 [ 869.254155][T11350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.274023][T11350] RSP: 002b:00007fea05fe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 869.282750][T11350] RAX: ffffffffffffffda RBX: 00007fea05415fa0 RCX: 00007fea0519c819 [ 869.291158][T11350] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 869.299339][T11350] RBP: 00007fea05232c91 R08: 0000000000000000 R09: 0000000000000000 [ 869.307614][T11350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.315712][T11350] R13: 00007fea05416038 R14: 00007fea05415fa0 R15: 00007ffe2f267d68 [ 869.323842][T11350] [ 869.474706][T11358] netlink: 'syz.0.1651': attribute type 2 has an invalid length. [ 870.157696][T11364] netlink: 'syz.1.1653': attribute type 10 has an invalid length. [ 870.506726][ T1886] wlan1: Trigger new scan to find an IBSS to join [ 870.514008][ T5851] wlan1: Trigger new scan to find an IBSS to join [ 870.798443][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.809870][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.911345][T11371] netlink: 'syz.0.1655': attribute type 10 has an invalid length. [ 871.578982][T11375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1657'. [ 871.845466][ T9384] wlan1: Creating new IBSS network, BSSID 0a:7d:2f:29:06:71 [ 872.068379][T11382] netlink: 'syz.2.1659': attribute type 2 has an invalid length. [ 872.185049][T11382] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1659'. [ 872.241688][T11382] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 872.250040][T11382] CPU: 0 PID: 11382 Comm: syz.2.1659 Not tainted syzkaller #0 [ 872.257742][T11382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 872.267956][T11382] Call Trace: [ 872.271548][T11382] [ 872.274542][T11382] dump_stack_lvl+0x18c/0x250 [ 872.279311][T11382] ? show_regs_print_info+0x20/0x20 [ 872.284850][T11382] ? load_image+0x420/0x420 [ 872.289525][T11382] sysfs_warn_dup+0x8e/0xa0 [ 872.294131][T11382] sysfs_do_create_link_sd+0xc0/0x110 [ 872.299851][T11382] device_add_class_symlinks+0x1cf/0x240 [ 872.305578][T11382] device_add+0x507/0xc20 [ 872.310326][T11382] wiphy_register+0x1dad/0x2ae0 [ 872.315445][T11382] ? cfg80211_event_work+0x40/0x40 [ 872.320724][T11382] ? minstrel_ht_alloc+0x88a/0x990 [ 872.326106][T11382] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 872.332525][T11382] ieee80211_register_hw+0x3464/0x4250 [ 872.338080][T11382] ? ieee80211_tasklet_handler+0x20/0x20 [ 872.344042][T11382] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 872.350190][T11382] ? __debug_object_init+0xec/0x450 [ 872.355709][T11382] ? __asan_memset+0x22/0x40 [ 872.360478][T11382] ? __hrtimer_init+0x186/0x270 [ 872.365410][T11382] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 872.371844][T11382] ? mac80211_hwsim_free+0x220/0x220 [ 872.377288][T11382] ? rcu_is_watching+0x15/0xb0 [ 872.382143][T11382] ? kstrndup+0xbd/0x140 [ 872.386565][T11382] hwsim_new_radio_nl+0xdc9/0x1a90 [ 872.391747][T11382] ? __nla_validate+0x50/0x50 [ 872.396494][T11382] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 872.402905][T11382] ? __nla_parse+0x40/0x50 [ 872.407397][T11382] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 872.413893][T11382] genl_family_rcv_msg_doit+0x211/0x310 [ 872.419510][T11382] ? end_current_label_crit_section+0x170/0x170 [ 872.426084][T11382] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 872.432270][T11382] ? bpf_lsm_capable+0x9/0x10 [ 872.437027][T11382] ? security_capable+0x89/0xb0 [ 872.441973][T11382] genl_rcv_msg+0x619/0x7a0 [ 872.446646][T11382] ? genl_bind+0x360/0x360 [ 872.451238][T11382] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 872.457835][T11382] netlink_rcv_skb+0x241/0x4d0 [ 872.462689][T11382] ? genl_bind+0x360/0x360 [ 872.467173][T11382] ? netlink_ack+0x1180/0x1180 [ 872.472032][T11382] ? __lock_acquire+0x7d40/0x7d40 [ 872.477151][T11382] ? down_read+0x1ac/0x2e0 [ 872.481684][T11382] genl_rcv+0x28/0x40 [ 872.485746][T11382] netlink_unicast+0x751/0x8d0 [ 872.490705][T11382] netlink_sendmsg+0x8d0/0xbf0 [ 872.495568][T11382] ? netlink_getsockopt+0x590/0x590 [ 872.500850][T11382] ? aa_sock_msg_perm+0x94/0x150 [ 872.505887][T11382] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 872.511286][T11382] ? security_socket_sendmsg+0x80/0xa0 [ 872.516897][T11382] ? netlink_getsockopt+0x590/0x590 [ 872.522265][T11382] ____sys_sendmsg+0x5ba/0x960 [ 872.527112][T11382] ? __asan_memset+0x22/0x40 [ 872.531787][T11382] ? __sys_sendmsg_sock+0x30/0x30 [ 872.537068][T11382] ? __import_iovec+0x5f2/0x850 [ 872.541993][T11382] ? import_iovec+0x73/0xa0 [ 872.546692][T11382] ___sys_sendmsg+0x2a6/0x360 [ 872.551524][T11382] ? __sys_sendmsg+0x2a0/0x2a0 [ 872.556596][T11382] __se_sys_sendmsg+0x1c2/0x2b0 [ 872.561604][T11382] ? __x64_sys_sendmsg+0x80/0x80 [ 872.566808][T11382] ? lockdep_hardirqs_on+0x98/0x150 [ 872.572181][T11382] do_syscall_64+0x55/0xa0 [ 872.576750][T11382] ? clear_bhb_loop+0x40/0x90 [ 872.581713][T11382] ? clear_bhb_loop+0x40/0x90 [ 872.586728][T11382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 872.592893][T11382] RIP: 0033:0x7fea0519c819 [ 872.597454][T11382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.617828][T11382] RSP: 002b:00007fea05fe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.626622][T11382] RAX: ffffffffffffffda RBX: 00007fea05415fa0 RCX: 00007fea0519c819 [ 872.634754][T11382] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 872.642985][T11382] RBP: 00007fea05232c91 R08: 0000000000000000 R09: 0000000000000000 [ 872.651031][T11382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.659239][T11382] R13: 00007fea05416038 R14: 00007fea05415fa0 R15: 00007ffe2f267d68 [ 872.667557][T11382] [ 872.744590][T11384] netlink: 'syz.1.1658': attribute type 21 has an invalid length. [ 873.084073][T11388] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1661'. [ 873.150675][T11388] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1661'. [ 873.204449][T11391] netlink: 'syz.2.1662': attribute type 10 has an invalid length. [ 873.226304][T11394] netlink: 'syz.1.1663': attribute type 2 has an invalid length. [ 873.252751][T11389] netlink: 'syz.0.1660': attribute type 10 has an invalid length. [ 873.428621][T11394] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1663'. [ 873.683771][T11394] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 873.727114][T11394] CPU: 1 PID: 11394 Comm: syz.1.1663 Not tainted syzkaller #0 [ 873.734685][T11394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 873.744982][T11394] Call Trace: [ 873.748407][T11394] [ 873.751400][T11394] dump_stack_lvl+0x18c/0x250 [ 873.756156][T11394] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 873.762641][T11394] ? show_regs_print_info+0x20/0x20 [ 873.768210][T11394] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 873.774571][T11394] sysfs_warn_dup+0x8e/0xa0 [ 873.779141][T11394] sysfs_do_create_link_sd+0xc0/0x110 [ 873.784752][T11394] device_add_class_symlinks+0x1cf/0x240 [ 873.790726][T11394] device_add+0x507/0xc20 [ 873.795408][T11394] wiphy_register+0x1dad/0x2ae0 [ 873.800468][T11394] ? cfg80211_event_work+0x40/0x40 [ 873.805659][T11394] ? minstrel_ht_alloc+0x88a/0x990 [ 873.810853][T11394] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 873.817418][T11394] ieee80211_register_hw+0x3464/0x4250 [ 873.822974][T11394] ? ieee80211_tasklet_handler+0x20/0x20 [ 873.828682][T11394] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 873.834647][T11394] ? __debug_object_init+0xec/0x450 [ 873.839940][T11394] ? __asan_memset+0x22/0x40 [ 873.844693][T11394] ? __hrtimer_init+0x186/0x270 [ 873.849792][T11394] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 873.855710][T11394] ? mac80211_hwsim_free+0x220/0x220 [ 873.861057][T11394] ? rcu_is_watching+0x15/0xb0 [ 873.865990][T11394] ? kstrndup+0xbd/0x140 [ 873.870497][T11394] hwsim_new_radio_nl+0xdc9/0x1a90 [ 873.875867][T11394] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 873.881796][T11394] ? mark_lock+0x94/0x320 [ 873.886303][T11394] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 873.892729][T11394] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 873.899065][T11394] ? lockdep_hardirqs_on+0x98/0x150 [ 873.904717][T11394] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 873.911147][T11394] genl_family_rcv_msg_doit+0x211/0x310 [ 873.916769][T11394] ? end_current_label_crit_section+0x170/0x170 [ 873.923281][T11394] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 873.929264][T11394] ? bpf_lsm_capable+0x9/0x10 [ 873.934021][T11394] ? security_capable+0x89/0xb0 [ 873.939071][T11394] genl_rcv_msg+0x619/0x7a0 [ 873.943762][T11394] ? genl_bind+0x360/0x360 [ 873.948556][T11394] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 873.954982][T11394] netlink_rcv_skb+0x241/0x4d0 [ 873.959960][T11394] ? genl_bind+0x360/0x360 [ 873.964733][T11394] ? netlink_ack+0x1180/0x1180 [ 873.969701][T11394] ? __lock_acquire+0x7d40/0x7d40 [ 873.974916][T11394] ? down_read+0x1ac/0x2e0 [ 873.979396][T11394] genl_rcv+0x28/0x40 [ 873.983547][T11394] netlink_unicast+0x751/0x8d0 [ 873.988490][T11394] netlink_sendmsg+0x8d0/0xbf0 [ 873.993445][T11394] ? netlink_getsockopt+0x590/0x590 [ 873.998892][T11394] ? __sanitizer_cov_trace_pc+0x49/0x60 [ 874.004752][T11394] ? aa_sock_msg_perm+0x94/0x150 [ 874.009945][T11394] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 874.016007][T11394] ? security_socket_sendmsg+0x80/0xa0 [ 874.021773][T11394] ? netlink_getsockopt+0x590/0x590 [ 874.027114][T11394] ____sys_sendmsg+0x5ba/0x960 [ 874.032338][T11394] ? __asan_memset+0x22/0x40 [ 874.037724][T11394] ? __sys_sendmsg_sock+0x30/0x30 [ 874.042938][T11394] ? __import_iovec+0x5f2/0x850 [ 874.047975][T11394] ? import_iovec+0x73/0xa0 [ 874.052652][T11394] ___sys_sendmsg+0x2a6/0x360 [ 874.057461][T11394] ? __sys_sendmsg+0x2a0/0x2a0 [ 874.062681][T11394] __se_sys_sendmsg+0x1c2/0x2b0 [ 874.067697][T11394] ? __x64_sys_sendmsg+0x80/0x80 [ 874.072904][T11394] ? lockdep_hardirqs_on+0x98/0x150 [ 874.078191][T11394] do_syscall_64+0x55/0xa0 [ 874.083009][T11394] ? clear_bhb_loop+0x40/0x90 [ 874.088004][T11394] ? clear_bhb_loop+0x40/0x90 [ 874.092895][T11394] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 874.098907][T11394] RIP: 0033:0x7f3ec199c819 [ 874.103556][T11394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.123574][T11394] RSP: 002b:00007f3ec2814028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.132259][T11394] RAX: ffffffffffffffda RBX: 00007f3ec1c15fa0 RCX: 00007f3ec199c819 [ 874.140465][T11394] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 874.148642][T11394] RBP: 00007f3ec1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 874.156763][T11394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.164899][T11394] R13: 00007f3ec1c16038 R14: 00007f3ec1c15fa0 R15: 00007ffe8bbfa378 [ 874.173215][T11394] [ 874.420570][ T49] wlan1: Trigger new scan to find an IBSS to join [ 874.420606][ T6677] wlan1: Trigger new scan to find an IBSS to join [ 874.459640][T11403] netlink: 'syz.3.1664': attribute type 10 has an invalid length. [ 874.819915][T11407] netlink: 'syz.1.1666': attribute type 2 has an invalid length. [ 874.963312][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1667'. [ 875.227398][T11414] netlink: 'syz.0.1668': attribute type 10 has an invalid length. [ 877.366128][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1670'. [ 877.558107][T11429] netlink: 'syz.0.1671': attribute type 21 has an invalid length. [ 877.598377][T11432] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1672'. [ 877.629328][T11432] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1672'. [ 877.693767][T11434] netlink: 'syz.2.1673': attribute type 10 has an invalid length. [ 877.998764][T11439] netlink: 'syz.0.1675': attribute type 10 has an invalid length. [ 878.013240][T11442] netlink: 'syz.3.1674': attribute type 2 has an invalid length. [ 878.239919][T11442] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1674'. [ 878.372923][T11442] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 878.460857][T11442] CPU: 1 PID: 11442 Comm: syz.3.1674 Not tainted syzkaller #0 [ 878.468488][T11442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 878.478625][T11442] Call Trace: [ 878.482370][T11442] [ 878.485457][T11442] dump_stack_lvl+0x18c/0x250 [ 878.490242][T11442] ? show_regs_print_info+0x20/0x20 [ 878.495528][T11442] ? load_image+0x420/0x420 [ 878.500207][T11442] sysfs_warn_dup+0x8e/0xa0 [ 878.504877][T11442] sysfs_do_create_link_sd+0xc0/0x110 [ 878.510338][T11442] device_add_class_symlinks+0x1cf/0x240 [ 878.516065][T11442] device_add+0x507/0xc20 [ 878.520628][T11442] wiphy_register+0x1dad/0x2ae0 [ 878.525675][T11442] ? cfg80211_event_work+0x40/0x40 [ 878.530968][T11442] ? minstrel_ht_alloc+0x88a/0x990 [ 878.536379][T11442] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 878.542546][T11442] ieee80211_register_hw+0x3464/0x4250 [ 878.548277][T11442] ? ieee80211_tasklet_handler+0x20/0x20 [ 878.554424][T11442] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 878.560573][T11442] ? __debug_object_init+0xec/0x450 [ 878.566131][T11442] ? __asan_memset+0x22/0x40 [ 878.570907][T11442] ? __hrtimer_init+0x186/0x270 [ 878.576298][T11442] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 878.582329][T11442] ? mac80211_hwsim_free+0x220/0x220 [ 878.587693][T11442] ? rcu_is_watching+0x15/0xb0 [ 878.592730][T11442] ? kstrndup+0xbd/0x140 [ 878.597431][T11442] hwsim_new_radio_nl+0xdc9/0x1a90 [ 878.603071][T11442] ? __nla_validate+0x50/0x50 [ 878.608024][T11442] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 878.614446][T11442] ? __nla_parse+0x40/0x50 [ 878.618936][T11442] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 878.625534][T11442] genl_family_rcv_msg_doit+0x211/0x310 [ 878.631346][T11442] ? end_current_label_crit_section+0x170/0x170 [ 878.638299][T11442] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 878.644414][T11442] ? bpf_lsm_capable+0x9/0x10 [ 878.649308][T11442] ? security_capable+0x89/0xb0 [ 878.654826][T11442] genl_rcv_msg+0x619/0x7a0 [ 878.659689][T11442] ? genl_bind+0x360/0x360 [ 878.664663][T11442] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 878.671344][T11442] ? ref_tracker_free+0x690/0x840 [ 878.676589][T11442] netlink_rcv_skb+0x241/0x4d0 [ 878.681559][T11442] ? genl_bind+0x360/0x360 [ 878.686065][T11442] ? netlink_ack+0x1180/0x1180 [ 878.691026][T11442] ? __lock_acquire+0x7d40/0x7d40 [ 878.696441][T11442] ? down_read+0x1ac/0x2e0 [ 878.701199][T11442] genl_rcv+0x28/0x40 [ 878.705357][T11442] netlink_unicast+0x751/0x8d0 [ 878.710326][T11442] netlink_sendmsg+0x8d0/0xbf0 [ 878.715346][T11442] ? netlink_getsockopt+0x590/0x590 [ 878.720749][T11442] ? aa_sock_msg_perm+0x94/0x150 [ 878.725902][T11442] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 878.731265][T11442] ? security_socket_sendmsg+0x80/0xa0 [ 878.736898][T11442] ? netlink_getsockopt+0x590/0x590 [ 878.742291][T11442] ____sys_sendmsg+0x5ba/0x960 [ 878.747354][T11442] ? __asan_memset+0x22/0x40 [ 878.752291][T11442] ? __sys_sendmsg_sock+0x30/0x30 [ 878.757484][T11442] ? __import_iovec+0x5f2/0x850 [ 878.762522][T11442] ? import_iovec+0x73/0xa0 [ 878.767408][T11442] ___sys_sendmsg+0x2a6/0x360 [ 878.772282][T11442] ? __sys_sendmsg+0x2a0/0x2a0 [ 878.777301][T11442] __se_sys_sendmsg+0x1c2/0x2b0 [ 878.782263][T11442] ? __x64_sys_sendmsg+0x80/0x80 [ 878.787416][T11442] ? lockdep_hardirqs_on+0x98/0x150 [ 878.792798][T11442] do_syscall_64+0x55/0xa0 [ 878.797288][T11442] ? clear_bhb_loop+0x40/0x90 [ 878.802067][T11442] ? clear_bhb_loop+0x40/0x90 [ 878.806842][T11442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 878.812956][T11442] RIP: 0033:0x7f7c93f9c819 [ 878.817455][T11442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.837520][T11442] RSP: 002b:00007f7c94dd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.846503][T11442] RAX: ffffffffffffffda RBX: 00007f7c94215fa0 RCX: 00007f7c93f9c819 [ 878.854635][T11442] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 878.862856][T11442] RBP: 00007f7c94032c91 R08: 0000000000000000 R09: 0000000000000000 [ 878.871071][T11442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.879276][T11442] R13: 00007f7c94216038 R14: 00007f7c94215fa0 R15: 00007ffe02c9f308 [ 878.887619][T11442] [ 878.978806][T11446] netlink: 'syz.0.1676': attribute type 10 has an invalid length. [ 879.333525][T11450] netlink: 'syz.1.1677': attribute type 2 has an invalid length. [ 879.473957][ T49] wlan1: Trigger new scan to find an IBSS to join [ 879.486467][ T5851] wlan1: Trigger new scan to find an IBSS to join [ 879.564441][T11456] netlink: 'syz.3.1679': attribute type 2 has an invalid length. [ 879.926796][T11456] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1679'. [ 880.053518][T11456] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 880.104715][T11456] CPU: 0 PID: 11456 Comm: syz.3.1679 Not tainted syzkaller #0 [ 880.112298][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 880.122519][T11456] Call Trace: [ 880.125855][T11456] [ 880.128841][T11456] dump_stack_lvl+0x18c/0x250 [ 880.133615][T11456] ? show_regs_print_info+0x20/0x20 [ 880.139163][T11456] ? load_image+0x420/0x420 [ 880.143766][T11456] sysfs_warn_dup+0x8e/0xa0 [ 880.148517][T11456] sysfs_do_create_link_sd+0xc0/0x110 [ 880.154448][T11456] device_add_class_symlinks+0x1cf/0x240 [ 880.161756][T11456] device_add+0x507/0xc20 [ 880.166275][T11456] wiphy_register+0x1dad/0x2ae0 [ 880.171311][T11456] ? cfg80211_event_work+0x40/0x40 [ 880.177011][T11456] ? minstrel_ht_alloc+0x88a/0x990 [ 880.182425][T11456] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 880.189264][T11456] ieee80211_register_hw+0x3464/0x4250 [ 880.194879][T11456] ? ieee80211_tasklet_handler+0x20/0x20 [ 880.200567][T11456] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 880.206783][T11456] ? __debug_object_init+0xec/0x450 [ 880.212539][T11456] ? __asan_memset+0x22/0x40 [ 880.218011][T11456] ? __hrtimer_init+0x186/0x270 [ 880.223054][T11456] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 880.229092][T11456] ? mac80211_hwsim_free+0x220/0x220 [ 880.234906][T11456] ? rcu_is_watching+0x15/0xb0 [ 880.240140][T11456] ? kstrndup+0xbd/0x140 [ 880.245102][T11456] hwsim_new_radio_nl+0xdc9/0x1a90 [ 880.250498][T11456] ? __nla_validate+0x50/0x50 [ 880.255472][T11456] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 880.262575][T11456] ? __nla_parse+0x40/0x50 [ 880.267333][T11456] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 880.274239][T11456] genl_family_rcv_msg_doit+0x211/0x310 [ 880.279919][T11456] ? end_current_label_crit_section+0x170/0x170 [ 880.286567][T11456] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 880.292696][T11456] ? bpf_lsm_capable+0x9/0x10 [ 880.297425][T11456] ? security_capable+0x89/0xb0 [ 880.302348][T11456] genl_rcv_msg+0x619/0x7a0 [ 880.306921][T11456] ? genl_bind+0x360/0x360 [ 880.311724][T11456] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 880.318506][T11456] netlink_rcv_skb+0x241/0x4d0 [ 880.323503][T11456] ? genl_bind+0x360/0x360 [ 880.328238][T11456] ? netlink_ack+0x1180/0x1180 [ 880.333841][T11456] ? __lock_acquire+0x7d40/0x7d40 [ 880.339474][T11456] ? down_read+0x1ac/0x2e0 [ 880.344511][T11456] genl_rcv+0x28/0x40 [ 880.348808][T11456] netlink_unicast+0x751/0x8d0 [ 880.353920][T11456] netlink_sendmsg+0x8d0/0xbf0 [ 880.359098][T11456] ? netlink_getsockopt+0x590/0x590 [ 880.364464][T11456] ? aa_sock_msg_perm+0x94/0x150 [ 880.370104][T11456] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 880.375713][T11456] ? security_socket_sendmsg+0x80/0xa0 [ 880.381584][T11456] ? netlink_getsockopt+0x590/0x590 [ 880.387159][T11456] ____sys_sendmsg+0x5ba/0x960 [ 880.392287][T11456] ? __asan_memset+0x22/0x40 [ 880.397285][T11456] ? __sys_sendmsg_sock+0x30/0x30 [ 880.402759][T11456] ? __import_iovec+0x5f2/0x850 [ 880.407794][T11456] ? import_iovec+0x73/0xa0 [ 880.413005][T11456] ___sys_sendmsg+0x2a6/0x360 [ 880.418200][T11456] ? __sys_sendmsg+0x2a0/0x2a0 [ 880.423194][T11456] __se_sys_sendmsg+0x1c2/0x2b0 [ 880.428219][T11456] ? __x64_sys_sendmsg+0x80/0x80 [ 880.433585][T11456] ? lockdep_hardirqs_on+0x98/0x150 [ 880.439020][T11456] do_syscall_64+0x55/0xa0 [ 880.443600][T11456] ? clear_bhb_loop+0x40/0x90 [ 880.449020][T11456] ? clear_bhb_loop+0x40/0x90 [ 880.454383][T11456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 880.460599][T11456] RIP: 0033:0x7f7c93f9c819 [ 880.465436][T11456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.487276][T11456] RSP: 002b:00007f7c94dd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 880.495922][T11456] RAX: ffffffffffffffda RBX: 00007f7c94215fa0 RCX: 00007f7c93f9c819 [ 880.503937][T11456] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 880.512166][T11456] RBP: 00007f7c94032c91 R08: 0000000000000000 R09: 0000000000000000 [ 880.520955][T11456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.529236][T11456] R13: 00007f7c94216038 R14: 00007f7c94215fa0 R15: 00007ffe02c9f308 [ 880.537270][T11456] [ 880.852891][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1682'. [ 881.039449][T11470] netlink: 'syz.2.1683': attribute type 21 has an invalid length. [ 882.642084][T11477] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1685'. [ 882.667459][T11475] netlink: 'syz.2.1686': attribute type 10 has an invalid length. [ 882.720695][T11477] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1685'. [ 882.809547][T11476] netlink: 'syz.0.1684': attribute type 10 has an invalid length. [ 883.171846][T11483] netlink: 'syz.1.1687': attribute type 10 has an invalid length. [ 883.728075][T11488] netlink: 'syz.3.1688': attribute type 10 has an invalid length. [ 883.916758][T11490] netlink: 'syz.2.1689': attribute type 2 has an invalid length. [ 884.028012][T11490] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1689'. [ 884.061716][T11490] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 884.075913][T11490] CPU: 1 PID: 11490 Comm: syz.2.1689 Not tainted syzkaller #0 [ 884.083578][T11490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 884.093901][T11490] Call Trace: [ 884.097412][T11490] [ 884.100418][T11490] dump_stack_lvl+0x18c/0x250 [ 884.105189][T11490] ? show_regs_print_info+0x20/0x20 [ 884.110555][T11490] ? load_image+0x420/0x420 [ 884.115244][T11490] sysfs_warn_dup+0x8e/0xa0 [ 884.119986][T11490] sysfs_do_create_link_sd+0xc0/0x110 [ 884.125436][T11490] device_add_class_symlinks+0x1cf/0x240 [ 884.131533][T11490] device_add+0x507/0xc20 [ 884.136312][T11490] wiphy_register+0x1dad/0x2ae0 [ 884.141257][T11490] ? cfg80211_event_work+0x40/0x40 [ 884.146606][T11490] ? minstrel_ht_alloc+0x88a/0x990 [ 884.152066][T11490] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 884.158453][T11490] ieee80211_register_hw+0x3464/0x4250 [ 884.164170][T11490] ? ieee80211_tasklet_handler+0x20/0x20 [ 884.170132][T11490] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 884.176283][T11490] ? __debug_object_init+0xec/0x450 [ 884.181587][T11490] ? __asan_memset+0x22/0x40 [ 884.186334][T11490] ? __hrtimer_init+0x186/0x270 [ 884.191238][T11490] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 884.197213][T11490] ? mac80211_hwsim_free+0x220/0x220 [ 884.202636][T11490] ? rcu_is_watching+0x15/0xb0 [ 884.207475][T11490] ? kstrndup+0xbd/0x140 [ 884.211788][T11490] hwsim_new_radio_nl+0xdc9/0x1a90 [ 884.217121][T11490] ? __nla_validate+0x50/0x50 [ 884.222124][T11490] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 884.228591][T11490] ? __nla_parse+0x40/0x50 [ 884.233154][T11490] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 884.239645][T11490] genl_family_rcv_msg_doit+0x211/0x310 [ 884.245349][T11490] ? end_current_label_crit_section+0x170/0x170 [ 884.251870][T11490] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 884.257868][T11490] ? bpf_lsm_capable+0x9/0x10 [ 884.262839][T11490] ? security_capable+0x89/0xb0 [ 884.267845][T11490] genl_rcv_msg+0x619/0x7a0 [ 884.272681][T11490] ? genl_bind+0x360/0x360 [ 884.277402][T11490] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 884.283849][T11490] ? lockdep_hardirqs_on+0x98/0x150 [ 884.289186][T11490] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 884.295576][T11490] netlink_rcv_skb+0x241/0x4d0 [ 884.300405][T11490] ? genl_bind+0x360/0x360 [ 884.304872][T11490] ? netlink_ack+0x1180/0x1180 [ 884.310062][T11490] ? __lock_acquire+0x7d40/0x7d40 [ 884.315505][T11490] ? down_read+0x1ac/0x2e0 [ 884.320594][T11490] genl_rcv+0x28/0x40 [ 884.324763][T11490] netlink_unicast+0x751/0x8d0 [ 884.329771][T11490] netlink_sendmsg+0x8d0/0xbf0 [ 884.334841][T11490] ? netlink_getsockopt+0x590/0x590 [ 884.340721][T11490] ? aa_sock_msg_perm+0x94/0x150 [ 884.345814][T11490] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 884.351408][T11490] ? security_socket_sendmsg+0x80/0xa0 [ 884.357020][T11490] ? netlink_getsockopt+0x590/0x590 [ 884.362267][T11490] ____sys_sendmsg+0x5ba/0x960 [ 884.367259][T11490] ? __asan_memset+0x22/0x40 [ 884.372003][T11490] ? __sys_sendmsg_sock+0x30/0x30 [ 884.377237][T11490] ? __import_iovec+0x5f2/0x850 [ 884.382230][T11490] ? import_iovec+0x73/0xa0 [ 884.386774][T11490] ___sys_sendmsg+0x2a6/0x360 [ 884.391493][T11490] ? __sys_sendmsg+0x2a0/0x2a0 [ 884.396372][T11490] __se_sys_sendmsg+0x1c2/0x2b0 [ 884.401261][T11490] ? __x64_sys_sendmsg+0x80/0x80 [ 884.406242][T11490] ? lockdep_hardirqs_on+0x98/0x150 [ 884.411776][T11490] do_syscall_64+0x55/0xa0 [ 884.416292][T11490] ? clear_bhb_loop+0x40/0x90 [ 884.421235][T11490] ? clear_bhb_loop+0x40/0x90 [ 884.425972][T11490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 884.432007][T11490] RIP: 0033:0x7fea0519c819 [ 884.436561][T11490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.456651][T11490] RSP: 002b:00007fea05fe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.465222][T11490] RAX: ffffffffffffffda RBX: 00007fea05415fa0 RCX: 00007fea0519c819 [ 884.473230][T11490] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 884.481330][T11490] RBP: 00007fea05232c91 R08: 0000000000000000 R09: 0000000000000000 [ 884.489539][T11490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.497896][T11490] R13: 00007fea05416038 R14: 00007fea05415fa0 R15: 00007ffe2f267d68 [ 884.506110][T11490] [ 884.528233][ T5864] wlan1: Trigger new scan to find an IBSS to join [ 884.537128][ T49] wlan1: Trigger new scan to find an IBSS to join [ 885.066695][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1692'. [ 885.187627][T11503] netlink: 'syz.0.1693': attribute type 2 has an invalid length. [ 886.808933][T11510] netlink: 'syz.1.1694': attribute type 2 has an invalid length. [ 886.833121][T11509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1695'. [ 886.866332][ T49] wlan1: Creating new IBSS network, BSSID 96:4b:60:47:71:d2 [ 886.982004][T11510] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1694'. [ 887.058065][T11510] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 887.081954][T11513] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1696'. [ 887.111115][T11510] CPU: 1 PID: 11510 Comm: syz.1.1694 Not tainted syzkaller #0 [ 887.118713][T11510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 887.128944][T11510] Call Trace: [ 887.132378][T11510] [ 887.135375][T11510] dump_stack_lvl+0x18c/0x250 [ 887.140242][T11510] ? show_regs_print_info+0x20/0x20 [ 887.145631][T11510] ? load_image+0x420/0x420 [ 887.150240][T11510] sysfs_warn_dup+0x8e/0xa0 [ 887.154882][T11510] sysfs_do_create_link_sd+0xc0/0x110 [ 887.160511][T11510] device_add_class_symlinks+0x1cf/0x240 [ 887.166428][T11510] device_add+0x507/0xc20 [ 887.170923][T11510] wiphy_register+0x1dad/0x2ae0 [ 887.176061][T11510] ? cfg80211_event_work+0x40/0x40 [ 887.181403][T11510] ? minstrel_ht_alloc+0x88a/0x990 [ 887.186629][T11510] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 887.192787][T11510] ieee80211_register_hw+0x3464/0x4250 [ 887.198355][T11510] ? ieee80211_tasklet_handler+0x20/0x20 [ 887.204239][T11510] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 887.210227][T11510] ? __debug_object_init+0xec/0x450 [ 887.215500][T11510] ? __asan_memset+0x22/0x40 [ 887.220334][T11510] ? __hrtimer_init+0x186/0x270 [ 887.225349][T11510] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 887.231185][T11510] ? mac80211_hwsim_free+0x220/0x220 [ 887.236741][T11510] ? rcu_is_watching+0x15/0xb0 [ 887.241653][T11510] ? kstrndup+0xbd/0x140 [ 887.246050][T11510] hwsim_new_radio_nl+0xdc9/0x1a90 [ 887.251262][T11510] ? __nla_validate+0x50/0x50 [ 887.256002][T11510] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 887.262557][T11510] ? __nla_parse+0x40/0x50 [ 887.267032][T11510] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 887.274127][T11510] genl_family_rcv_msg_doit+0x211/0x310 [ 887.279731][T11510] ? end_current_label_crit_section+0x170/0x170 [ 887.286475][T11510] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 887.292627][T11510] ? bpf_lsm_capable+0x9/0x10 [ 887.297444][T11510] ? security_capable+0x89/0xb0 [ 887.302360][T11510] genl_rcv_msg+0x619/0x7a0 [ 887.307114][T11510] ? genl_bind+0x360/0x360 [ 887.311717][T11510] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 887.317840][T11510] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 887.324333][T11510] ? ref_tracker_free+0x690/0x840 [ 887.329567][T11510] netlink_rcv_skb+0x241/0x4d0 [ 887.334622][T11510] ? genl_bind+0x360/0x360 [ 887.339180][T11510] ? netlink_ack+0x1180/0x1180 [ 887.344104][T11510] ? __lock_acquire+0x7d40/0x7d40 [ 887.349399][T11510] ? down_read+0x1ac/0x2e0 [ 887.354149][T11510] genl_rcv+0x28/0x40 [ 887.358267][T11510] netlink_unicast+0x751/0x8d0 [ 887.363097][T11510] netlink_sendmsg+0x8d0/0xbf0 [ 887.367929][T11510] ? netlink_getsockopt+0x590/0x590 [ 887.373188][T11510] ? aa_sock_msg_perm+0x94/0x150 [ 887.378527][T11510] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 887.384049][T11510] ? security_socket_sendmsg+0x80/0xa0 [ 887.389659][T11510] ? netlink_getsockopt+0x590/0x590 [ 887.395015][T11510] ____sys_sendmsg+0x5ba/0x960 [ 887.399937][T11510] ? __asan_memset+0x22/0x40 [ 887.404681][T11510] ? __sys_sendmsg_sock+0x30/0x30 [ 887.410300][T11510] ? __import_iovec+0x5f2/0x850 [ 887.415334][T11510] ? import_iovec+0x73/0xa0 [ 887.420071][T11510] ___sys_sendmsg+0x2a6/0x360 [ 887.424909][T11510] ? __sys_sendmsg+0x2a0/0x2a0 [ 887.429952][T11510] __se_sys_sendmsg+0x1c2/0x2b0 [ 887.434987][T11510] ? __x64_sys_sendmsg+0x80/0x80 [ 887.440022][T11510] ? lockdep_hardirqs_on+0x98/0x150 [ 887.445442][T11510] do_syscall_64+0x55/0xa0 [ 887.450035][T11510] ? clear_bhb_loop+0x40/0x90 [ 887.454940][T11510] ? clear_bhb_loop+0x40/0x90 [ 887.459872][T11510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.465901][T11510] RIP: 0033:0x7f3ec199c819 [ 887.470648][T11510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.491347][T11510] RSP: 002b:00007f3ec27f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 887.500185][T11510] RAX: ffffffffffffffda RBX: 00007f3ec1c16090 RCX: 00007f3ec199c819 [ 887.508600][T11510] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 887.516645][T11510] RBP: 00007f3ec1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 887.524695][T11510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.532840][T11510] R13: 00007f3ec1c16128 R14: 00007f3ec1c16090 R15: 00007ffe8bbfa378 [ 887.540969][T11510] [ 887.637209][T11513] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1696'. [ 887.652397][T11515] netlink: 'syz.2.1697': attribute type 21 has an invalid length. [ 888.062982][T11524] netlink: 'syz.0.1698': attribute type 10 has an invalid length. [ 888.094106][T11525] netlink: 'syz.2.1699': attribute type 10 has an invalid length. [ 888.539309][T11530] netlink: 'syz.1.1700': attribute type 10 has an invalid length. [ 888.968504][T11535] netlink: 'syz.2.1702': attribute type 10 has an invalid length. [ 889.265362][T11541] netlink: 'syz.0.1703': attribute type 2 has an invalid length. [ 889.479080][ T6677] wlan1: Trigger new scan to find an IBSS to join [ 889.481890][T11541] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1703'. [ 889.625648][T11541] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 889.652124][T11541] CPU: 0 PID: 11541 Comm: syz.0.1703 Not tainted syzkaller #0 [ 889.659884][T11541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 889.670352][T11541] Call Trace: [ 889.673938][T11541] [ 889.677009][T11541] dump_stack_lvl+0x18c/0x250 [ 889.681865][T11541] ? show_regs_print_info+0x20/0x20 [ 889.687233][T11541] ? load_image+0x420/0x420 [ 889.691917][T11541] sysfs_warn_dup+0x8e/0xa0 [ 889.696576][T11541] sysfs_do_create_link_sd+0xc0/0x110 [ 889.702114][T11541] device_add_class_symlinks+0x1cf/0x240 [ 889.708114][T11541] device_add+0x507/0xc20 [ 889.712554][T11541] wiphy_register+0x1dad/0x2ae0 [ 889.717685][T11541] ? cfg80211_event_work+0x40/0x40 [ 889.723138][T11541] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 889.729783][T11541] ? ieee80211_register_hw+0x328f/0x4250 [ 889.735597][T11541] ieee80211_register_hw+0x3464/0x4250 [ 889.741170][T11541] ? ieee80211_tasklet_handler+0x20/0x20 [ 889.747085][T11541] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 889.753061][T11541] ? __debug_object_init+0xec/0x450 [ 889.758424][T11541] ? __asan_memset+0x22/0x40 [ 889.764001][T11541] ? __hrtimer_init+0x186/0x270 [ 889.769033][T11541] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 889.775371][T11541] ? mac80211_hwsim_free+0x220/0x220 [ 889.780734][T11541] ? rcu_is_watching+0x15/0xb0 [ 889.785925][T11541] ? kstrndup+0xbd/0x140 [ 889.790255][T11541] hwsim_new_radio_nl+0xdc9/0x1a90 [ 889.795540][T11541] ? __nla_validate+0x50/0x50 [ 889.800314][T11541] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 889.806723][T11541] ? __nla_parse+0x40/0x50 [ 889.811216][T11541] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 889.817898][T11541] genl_family_rcv_msg_doit+0x211/0x310 [ 889.824738][T11541] ? end_current_label_crit_section+0x170/0x170 [ 889.831430][T11541] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 889.837505][T11541] ? bpf_lsm_capable+0x9/0x10 [ 889.842275][T11541] ? security_capable+0x89/0xb0 [ 889.847473][T11541] genl_rcv_msg+0x619/0x7a0 [ 889.852141][T11541] ? genl_bind+0x360/0x360 [ 889.856716][T11541] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 889.863139][T11541] netlink_rcv_skb+0x241/0x4d0 [ 889.868072][T11541] ? genl_bind+0x360/0x360 [ 889.872567][T11541] ? netlink_ack+0x1180/0x1180 [ 889.877522][T11541] ? __lock_acquire+0x7d40/0x7d40 [ 889.882633][T11541] ? down_read+0x1ac/0x2e0 [ 889.887396][T11541] genl_rcv+0x28/0x40 [ 889.891470][T11541] netlink_unicast+0x751/0x8d0 [ 889.896470][T11541] netlink_sendmsg+0x8d0/0xbf0 [ 889.901441][T11541] ? netlink_getsockopt+0x590/0x590 [ 889.906744][T11541] ? aa_sock_msg_perm+0x94/0x150 [ 889.911781][T11541] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 889.917384][T11541] ? security_socket_sendmsg+0x80/0xa0 [ 889.923017][T11541] ? netlink_getsockopt+0x590/0x590 [ 889.928477][T11541] ____sys_sendmsg+0x5ba/0x960 [ 889.933595][T11541] ? __asan_memset+0x22/0x40 [ 889.938454][T11541] ? __sys_sendmsg_sock+0x30/0x30 [ 889.943720][T11541] ? __import_iovec+0x5f2/0x850 [ 889.948761][T11541] ? import_iovec+0x73/0xa0 [ 889.953404][T11541] ___sys_sendmsg+0x2a6/0x360 [ 889.958390][T11541] ? __sys_sendmsg+0x2a0/0x2a0 [ 889.963397][T11541] __se_sys_sendmsg+0x1c2/0x2b0 [ 889.968427][T11541] ? __x64_sys_sendmsg+0x80/0x80 [ 889.973473][T11541] ? lockdep_hardirqs_on+0x98/0x150 [ 889.978759][T11541] do_syscall_64+0x55/0xa0 [ 889.983399][T11541] ? clear_bhb_loop+0x40/0x90 [ 889.988252][T11541] ? clear_bhb_loop+0x40/0x90 [ 889.993015][T11541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 889.999127][T11541] RIP: 0033:0x7f35e7f9c819 [ 890.003827][T11541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.023801][T11541] RSP: 002b:00007f35e8dbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.032739][T11541] RAX: ffffffffffffffda RBX: 00007f35e8215fa0 RCX: 00007f35e7f9c819 [ 890.040886][T11541] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 890.049539][T11541] RBP: 00007f35e8032c91 R08: 0000000000000000 R09: 0000000000000000 [ 890.057769][T11541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.066073][T11541] R13: 00007f35e8216038 R14: 00007f35e8215fa0 R15: 00007fff3439f868 [ 890.074424][T11541] [ 890.637574][T11551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1706'. [ 890.677898][T11551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1706'. [ 890.736754][T11552] netlink: 'syz.0.1705': attribute type 2 has an invalid length. [ 890.747459][T11554] netlink: 'syz.1.1707': attribute type 21 has an invalid length. [ 890.990379][T11558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1708'. [ 891.379490][T11561] netlink: 'syz.0.1709': attribute type 2 has an invalid length. [ 891.470579][ T6677] wlan1: Trigger new scan to find an IBSS to join [ 891.772526][T11566] netlink: 'syz.3.1711': attribute type 10 has an invalid length. [ 891.833087][T11561] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1709'. [ 891.987619][T11561] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 892.039783][T11561] CPU: 0 PID: 11561 Comm: syz.0.1709 Not tainted syzkaller #0 [ 892.048041][T11561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 892.058432][T11561] Call Trace: [ 892.061772][T11561] [ 892.064837][T11561] dump_stack_lvl+0x18c/0x250 [ 892.069593][T11561] ? show_regs_print_info+0x20/0x20 [ 892.075194][T11561] ? load_image+0x420/0x420 [ 892.079778][T11561] sysfs_warn_dup+0x8e/0xa0 [ 892.084509][T11561] sysfs_do_create_link_sd+0xc0/0x110 [ 892.090107][T11561] device_add_class_symlinks+0x1cf/0x240 [ 892.096041][T11561] device_add+0x507/0xc20 [ 892.100446][T11561] wiphy_register+0x1dad/0x2ae0 [ 892.105559][T11561] ? cfg80211_event_work+0x40/0x40 [ 892.110724][T11561] ? minstrel_ht_alloc+0x88a/0x990 [ 892.116191][T11561] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 892.122348][T11561] ieee80211_register_hw+0x3464/0x4250 [ 892.127916][T11561] ? ieee80211_tasklet_handler+0x20/0x20 [ 892.133779][T11561] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 892.139830][T11561] ? __debug_object_init+0xec/0x450 [ 892.145100][T11561] ? __asan_memset+0x22/0x40 [ 892.149846][T11561] ? __hrtimer_init+0x186/0x270 [ 892.154934][T11561] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 892.161057][T11561] ? mac80211_hwsim_free+0x220/0x220 [ 892.166581][T11561] ? rcu_is_watching+0x15/0xb0 [ 892.171745][T11561] ? kstrndup+0xbd/0x140 [ 892.176254][T11561] hwsim_new_radio_nl+0xdc9/0x1a90 [ 892.181530][T11561] ? __nla_validate+0x50/0x50 [ 892.186832][T11561] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 892.193578][T11561] ? __nla_parse+0x40/0x50 [ 892.198075][T11561] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 892.204752][T11561] genl_family_rcv_msg_doit+0x211/0x310 [ 892.210450][T11561] ? end_current_label_crit_section+0x170/0x170 [ 892.216768][T11561] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 892.223009][T11561] ? bpf_lsm_capable+0x9/0x10 [ 892.227926][T11561] ? security_capable+0x89/0xb0 [ 892.232943][T11561] genl_rcv_msg+0x619/0x7a0 [ 892.237614][T11561] ? genl_bind+0x360/0x360 [ 892.242168][T11561] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 892.248208][T11561] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 892.254617][T11561] ? ref_tracker_free+0x690/0x840 [ 892.260194][T11561] netlink_rcv_skb+0x241/0x4d0 [ 892.265152][T11561] ? genl_bind+0x360/0x360 [ 892.269647][T11561] ? netlink_ack+0x1180/0x1180 [ 892.274786][T11561] ? __lock_acquire+0x7d40/0x7d40 [ 892.279914][T11561] ? down_read+0x1ac/0x2e0 [ 892.284586][T11561] genl_rcv+0x28/0x40 [ 892.288739][T11561] netlink_unicast+0x751/0x8d0 [ 892.293781][T11561] netlink_sendmsg+0x8d0/0xbf0 [ 892.298724][T11561] ? netlink_getsockopt+0x590/0x590 [ 892.304261][T11561] ? aa_sock_msg_perm+0x94/0x150 [ 892.309726][T11561] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 892.315238][T11561] ? security_socket_sendmsg+0x80/0xa0 [ 892.321204][T11561] ? netlink_getsockopt+0x590/0x590 [ 892.326576][T11561] ____sys_sendmsg+0x5ba/0x960 [ 892.331598][T11561] ? __asan_memset+0x22/0x40 [ 892.336448][T11561] ? __sys_sendmsg_sock+0x30/0x30 [ 892.341556][T11561] ? __import_iovec+0x5f2/0x850 [ 892.346574][T11561] ? import_iovec+0x73/0xa0 [ 892.351329][T11561] ___sys_sendmsg+0x2a6/0x360 [ 892.356259][T11561] ? __sys_sendmsg+0x2a0/0x2a0 [ 892.361334][T11561] __se_sys_sendmsg+0x1c2/0x2b0 [ 892.366270][T11561] ? __x64_sys_sendmsg+0x80/0x80 [ 892.371313][T11561] ? lockdep_hardirqs_on+0x98/0x150 [ 892.376743][T11561] do_syscall_64+0x55/0xa0 [ 892.381315][T11561] ? clear_bhb_loop+0x40/0x90 [ 892.386346][T11561] ? clear_bhb_loop+0x40/0x90 [ 892.391137][T11561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 892.397281][T11561] RIP: 0033:0x7f35e7f9c819 [ 892.401770][T11561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.422088][T11561] RSP: 002b:00007f35e8dbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 892.431192][T11561] RAX: ffffffffffffffda RBX: 00007f35e8215fa0 RCX: 00007f35e7f9c819 [ 892.439406][T11561] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 892.447467][T11561] RBP: 00007f35e8032c91 R08: 0000000000000000 R09: 0000000000000000 [ 892.455594][T11561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.463902][T11561] R13: 00007f35e8216038 R14: 00007f35e8215fa0 R15: 00007fff3439f868 [ 892.472076][T11561] [ 892.633219][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1710'. [ 893.382806][ T5864] wlan1: Trigger new scan to find an IBSS to join [ 893.572071][T11574] netlink: 'syz.3.1713': attribute type 10 has an invalid length. [ 893.874105][T11579] netlink: 'syz.1.1714': attribute type 10 has an invalid length. [ 894.022422][T11583] netlink: 'syz.2.1715': attribute type 2 has an invalid length. [ 894.171818][ T5864] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 894.233365][T11583] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1715'. [ 894.356817][T11583] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 894.378785][T11583] CPU: 0 PID: 11583 Comm: syz.2.1715 Not tainted syzkaller #0 [ 894.386617][T11583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 894.396828][T11583] Call Trace: [ 894.400268][T11583] [ 894.403429][T11583] dump_stack_lvl+0x18c/0x250 [ 894.408287][T11583] ? show_regs_print_info+0x20/0x20 [ 894.413571][T11583] ? load_image+0x420/0x420 [ 894.418353][T11583] sysfs_warn_dup+0x8e/0xa0 [ 894.423033][T11583] sysfs_do_create_link_sd+0xc0/0x110 [ 894.428668][T11583] device_add_class_symlinks+0x1cf/0x240 [ 894.434375][T11583] device_add+0x507/0xc20 [ 894.438797][T11583] wiphy_register+0x1dad/0x2ae0 [ 894.444675][T11583] ? cfg80211_event_work+0x40/0x40 [ 894.449971][T11583] ? minstrel_ht_alloc+0x88a/0x990 [ 894.455337][T11583] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 894.461562][T11583] ieee80211_register_hw+0x3464/0x4250 [ 894.467252][T11583] ? ieee80211_tasklet_handler+0x20/0x20 [ 894.473308][T11583] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 894.479568][T11583] ? __debug_object_init+0xec/0x450 [ 894.484855][T11583] ? __asan_memset+0x22/0x40 [ 894.489698][T11583] ? __hrtimer_init+0x186/0x270 [ 894.494630][T11583] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 894.500445][T11583] ? mac80211_hwsim_free+0x220/0x220 [ 894.505917][T11583] ? rcu_is_watching+0x15/0xb0 [ 894.510781][T11583] ? kstrndup+0xbd/0x140 [ 894.515359][T11583] hwsim_new_radio_nl+0xdc9/0x1a90 [ 894.520634][T11583] ? __nla_validate+0x50/0x50 [ 894.525483][T11583] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 894.531900][T11583] ? __nla_parse+0x40/0x50 [ 894.536553][T11583] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 894.543042][T11583] genl_family_rcv_msg_doit+0x211/0x310 [ 894.548660][T11583] ? end_current_label_crit_section+0x170/0x170 [ 894.555251][T11583] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 894.561313][T11583] ? bpf_lsm_capable+0x9/0x10 [ 894.566240][T11583] ? security_capable+0x89/0xb0 [ 894.571516][T11583] genl_rcv_msg+0x619/0x7a0 [ 894.576119][T11583] ? genl_bind+0x360/0x360 [ 894.580617][T11583] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 894.587727][T11583] netlink_rcv_skb+0x241/0x4d0 [ 894.592670][T11583] ? genl_bind+0x360/0x360 [ 894.597422][T11583] ? netlink_ack+0x1180/0x1180 [ 894.602293][T11583] ? __lock_acquire+0x7d40/0x7d40 [ 894.607392][T11583] ? down_read+0x1ac/0x2e0 [ 894.611873][T11583] genl_rcv+0x28/0x40 [ 894.616255][T11583] netlink_unicast+0x751/0x8d0 [ 894.621102][T11583] netlink_sendmsg+0x8d0/0xbf0 [ 894.626042][T11583] ? netlink_getsockopt+0x590/0x590 [ 894.631338][T11583] ? aa_sock_msg_perm+0x94/0x150 [ 894.636441][T11583] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 894.642180][T11583] ? security_socket_sendmsg+0x80/0xa0 [ 894.647967][T11583] ? netlink_getsockopt+0x590/0x590 [ 894.653379][T11583] ____sys_sendmsg+0x5ba/0x960 [ 894.658487][T11583] ? __asan_memset+0x22/0x40 [ 894.663240][T11583] ? __sys_sendmsg_sock+0x30/0x30 [ 894.668512][T11583] ? __import_iovec+0x5f2/0x850 [ 894.673571][T11583] ? import_iovec+0x73/0xa0 [ 894.678333][T11583] ___sys_sendmsg+0x2a6/0x360 [ 894.683169][T11583] ? __sys_sendmsg+0x2a0/0x2a0 [ 894.688115][T11583] __se_sys_sendmsg+0x1c2/0x2b0 [ 894.693170][T11583] ? __x64_sys_sendmsg+0x80/0x80 [ 894.698194][T11583] ? lockdep_hardirqs_on+0x98/0x150 [ 894.703589][T11583] do_syscall_64+0x55/0xa0 [ 894.708069][T11583] ? clear_bhb_loop+0x40/0x90 [ 894.712818][T11583] ? clear_bhb_loop+0x40/0x90 [ 894.717663][T11583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 894.723707][T11583] RIP: 0033:0x7fea0519c819 [ 894.728194][T11583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.748753][T11583] RSP: 002b:00007fea05fe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.757242][T11583] RAX: ffffffffffffffda RBX: 00007fea05415fa0 RCX: 00007fea0519c819 [ 894.765401][T11583] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 894.773576][T11583] RBP: 00007fea05232c91 R08: 0000000000000000 R09: 0000000000000000 [ 894.781634][T11583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.789758][T11583] R13: 00007fea05416038 R14: 00007fea05415fa0 R15: 00007ffe2f267d68 [ 894.798062][T11583] [ 895.008952][T11590] netlink: 'syz.3.1717': attribute type 2 has an invalid length. [ 895.061958][T11591] netlink: 'syz.0.1716': attribute type 21 has an invalid length. [ 895.318097][T11595] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1718'. [ 895.360664][T11595] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1718'. [ 895.463589][ T49] wlan1: Trigger new scan to find an IBSS to join [ 895.539246][T11599] netlink: 'syz.1.1721': attribute type 2 has an invalid length. [ 895.652361][T11599] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1721'. [ 895.684911][T11599] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 895.721654][T11599] CPU: 0 PID: 11599 Comm: syz.1.1721 Not tainted syzkaller #0 [ 895.729402][T11599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 895.739783][T11599] Call Trace: [ 895.743223][T11599] [ 895.746305][T11599] dump_stack_lvl+0x18c/0x250 [ 895.751067][T11599] ? show_regs_print_info+0x20/0x20 [ 895.756530][T11599] ? load_image+0x420/0x420 [ 895.761209][T11599] sysfs_warn_dup+0x8e/0xa0 [ 895.765944][T11599] sysfs_do_create_link_sd+0xc0/0x110 [ 895.771484][T11599] device_add_class_symlinks+0x1cf/0x240 [ 895.777571][T11599] device_add+0x507/0xc20 [ 895.781978][T11599] wiphy_register+0x1dad/0x2ae0 [ 895.787101][T11599] ? cfg80211_event_work+0x40/0x40 [ 895.792388][T11599] ? minstrel_ht_alloc+0x88a/0x990 [ 895.797765][T11599] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 895.804172][T11599] ieee80211_register_hw+0x3464/0x4250 [ 895.809725][T11599] ? ieee80211_tasklet_handler+0x20/0x20 [ 895.815411][T11599] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 895.821572][T11599] ? __debug_object_init+0xec/0x450 [ 895.826944][T11599] ? __asan_memset+0x22/0x40 [ 895.831704][T11599] ? __hrtimer_init+0x186/0x270 [ 895.836626][T11599] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 895.842442][T11599] ? mac80211_hwsim_free+0x220/0x220 [ 895.848139][T11599] ? rcu_is_watching+0x15/0xb0 [ 895.853082][T11599] ? kstrndup+0xbd/0x140 [ 895.857441][T11599] hwsim_new_radio_nl+0xdc9/0x1a90 [ 895.862675][T11599] ? __nla_validate+0x50/0x50 [ 895.867531][T11599] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 895.874176][T11599] ? __nla_parse+0x40/0x50 [ 895.878680][T11599] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 895.885193][T11599] genl_family_rcv_msg_doit+0x211/0x310 [ 895.890821][T11599] ? end_current_label_crit_section+0x170/0x170 [ 895.897254][T11599] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 895.903251][T11599] ? bpf_lsm_capable+0x9/0x10 [ 895.908033][T11599] ? security_capable+0x89/0xb0 [ 895.913084][T11599] genl_rcv_msg+0x619/0x7a0 [ 895.917844][T11599] ? genl_bind+0x360/0x360 [ 895.922417][T11599] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 895.928473][T11599] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 895.934968][T11599] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 895.941406][T11599] netlink_rcv_skb+0x241/0x4d0 [ 895.946273][T11599] ? genl_bind+0x360/0x360 [ 895.950779][T11599] ? netlink_ack+0x1180/0x1180 [ 895.955821][T11599] ? __lock_acquire+0x7d40/0x7d40 [ 895.961986][T11599] ? down_read+0x1ac/0x2e0 [ 895.966516][T11599] genl_rcv+0x28/0x40 [ 895.970673][T11599] netlink_unicast+0x751/0x8d0 [ 895.975641][T11599] netlink_sendmsg+0x8d0/0xbf0 [ 895.980907][T11599] ? netlink_getsockopt+0x590/0x590 [ 895.986461][T11599] ? aa_sock_msg_perm+0x94/0x150 [ 895.991574][T11599] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 895.997028][T11599] ? security_socket_sendmsg+0x80/0xa0 [ 896.002758][T11599] ? netlink_getsockopt+0x590/0x590 [ 896.008400][T11599] ____sys_sendmsg+0x5ba/0x960 [ 896.013604][T11599] ? __asan_memset+0x22/0x40 [ 896.018716][T11599] ? __sys_sendmsg_sock+0x30/0x30 [ 896.024386][T11599] ? __import_iovec+0x5f2/0x850 [ 896.030006][T11599] ? import_iovec+0x73/0xa0 [ 896.035502][T11599] ___sys_sendmsg+0x2a6/0x360 [ 896.040886][T11599] ? __sys_sendmsg+0x2a0/0x2a0 [ 896.046114][T11599] __se_sys_sendmsg+0x1c2/0x2b0 [ 896.051564][T11599] ? __x64_sys_sendmsg+0x80/0x80 [ 896.057378][T11599] ? lockdep_hardirqs_on+0x98/0x150 [ 896.063110][T11599] do_syscall_64+0x55/0xa0 [ 896.068047][T11599] ? clear_bhb_loop+0x40/0x90 [ 896.072885][T11599] ? clear_bhb_loop+0x40/0x90 [ 896.078882][T11599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 896.085214][T11599] RIP: 0033:0x7f3ec199c819 [ 896.090041][T11599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.112086][T11599] RSP: 002b:00007f3ec2814028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 896.121032][T11599] RAX: ffffffffffffffda RBX: 00007f3ec1c15fa0 RCX: 00007f3ec199c819 [ 896.129860][T11599] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 896.139109][T11599] RBP: 00007f3ec1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 896.147235][T11599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.155535][T11599] R13: 00007f3ec1c16038 R14: 00007f3ec1c15fa0 R15: 00007ffe8bbfa378 [ 896.164213][T11599] [ 896.240746][T11601] netlink: 'syz.0.1720': attribute type 10 has an invalid length. [ 896.483883][T11608] netlink: 'syz.0.1722': attribute type 10 has an invalid length. [ 896.689892][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1723'. [ 897.408084][T11620] netlink: 'syz.2.1725': attribute type 10 has an invalid length. [ 897.460870][ T49] wlan1: Trigger new scan to find an IBSS to join [ 898.299109][T11624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1726'. [ 898.575145][ T1886] wlan1: Creating new IBSS network, BSSID 3e:1b:e1:59:0f:e2 [ 898.864199][T11628] netlink: 'syz.2.1727': attribute type 2 has an invalid length. [ 898.904322][T11631] netlink: 'syz.1.1729': attribute type 21 has an invalid length. [ 899.018941][T11630] netlink: 'syz.3.1728': attribute type 10 has an invalid length. [ 899.195886][T11628] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1727'. [ 899.315312][T11628] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 899.347703][T11637] netlink: 'syz.1.1730': attribute type 2 has an invalid length. [ 899.358856][T11628] CPU: 0 PID: 11628 Comm: syz.2.1727 Not tainted syzkaller #0 [ 899.366695][T11628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 899.377347][T11628] Call Trace: [ 899.380771][T11628] [ 899.383845][T11628] dump_stack_lvl+0x18c/0x250 [ 899.388670][T11628] ? show_regs_print_info+0x20/0x20 [ 899.394037][T11628] ? load_image+0x420/0x420 [ 899.398735][T11628] sysfs_warn_dup+0x8e/0xa0 [ 899.403339][T11628] sysfs_do_create_link_sd+0xc0/0x110 [ 899.409127][T11628] device_add_class_symlinks+0x1cf/0x240 [ 899.414924][T11628] device_add+0x507/0xc20 [ 899.419616][T11628] wiphy_register+0x1dad/0x2ae0 [ 899.424700][T11628] ? cfg80211_event_work+0x40/0x40 [ 899.429874][T11628] ? minstrel_ht_alloc+0x88a/0x990 [ 899.435347][T11628] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 899.441699][T11628] ieee80211_register_hw+0x3464/0x4250 [ 899.447255][T11628] ? ieee80211_tasklet_handler+0x20/0x20 [ 899.453312][T11628] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 899.459277][T11628] ? __debug_object_init+0xec/0x450 [ 899.464642][T11628] ? __asan_memset+0x22/0x40 [ 899.469364][T11628] ? __hrtimer_init+0x186/0x270 [ 899.474582][T11628] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 899.480389][T11628] ? mac80211_hwsim_free+0x220/0x220 [ 899.485728][T11628] ? rcu_is_watching+0x15/0xb0 [ 899.490559][T11628] ? kstrndup+0xbd/0x140 [ 899.494878][T11628] hwsim_new_radio_nl+0xdc9/0x1a90 [ 899.500152][T11628] ? __nla_validate+0x50/0x50 [ 899.504924][T11628] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 899.511330][T11628] ? __nla_parse+0x40/0x50 [ 899.515821][T11628] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 899.522436][T11628] genl_family_rcv_msg_doit+0x211/0x310 [ 899.528131][T11628] ? end_current_label_crit_section+0x170/0x170 [ 899.534660][T11628] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 899.540816][T11628] ? bpf_lsm_capable+0x9/0x10 [ 899.545638][T11628] ? security_capable+0x89/0xb0 [ 899.550909][T11628] genl_rcv_msg+0x619/0x7a0 [ 899.555587][T11628] ? genl_bind+0x360/0x360 [ 899.560240][T11628] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 899.566651][T11628] netlink_rcv_skb+0x241/0x4d0 [ 899.571512][T11628] ? genl_bind+0x360/0x360 [ 899.575996][T11628] ? netlink_ack+0x1180/0x1180 [ 899.580853][T11628] ? __lock_acquire+0x7d40/0x7d40 [ 899.586052][T11628] ? down_read+0x1ac/0x2e0 [ 899.590540][T11628] genl_rcv+0x28/0x40 [ 899.594736][T11628] netlink_unicast+0x751/0x8d0 [ 899.599993][T11628] netlink_sendmsg+0x8d0/0xbf0 [ 899.604946][T11628] ? netlink_getsockopt+0x590/0x590 [ 899.610307][T11628] ? aa_sock_msg_perm+0x94/0x150 [ 899.615323][T11628] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 899.620693][T11628] ? security_socket_sendmsg+0x80/0xa0 [ 899.626644][T11628] ? netlink_getsockopt+0x590/0x590 [ 899.632007][T11628] ____sys_sendmsg+0x5ba/0x960 [ 899.636856][T11628] ? __asan_memset+0x22/0x40 [ 899.641512][T11628] ? __sys_sendmsg_sock+0x30/0x30 [ 899.646875][T11628] ? __import_iovec+0x5f2/0x850 [ 899.651796][T11628] ? import_iovec+0x73/0xa0 [ 899.656396][T11628] ___sys_sendmsg+0x2a6/0x360 [ 899.661173][T11628] ? __sys_sendmsg+0x2a0/0x2a0 [ 899.666144][T11628] __se_sys_sendmsg+0x1c2/0x2b0 [ 899.671164][T11628] ? __x64_sys_sendmsg+0x80/0x80 [ 899.676274][T11628] ? lockdep_hardirqs_on+0x98/0x150 [ 899.681645][T11628] do_syscall_64+0x55/0xa0 [ 899.686211][T11628] ? clear_bhb_loop+0x40/0x90 [ 899.691183][T11628] ? clear_bhb_loop+0x40/0x90 [ 899.695945][T11628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 899.702013][T11628] RIP: 0033:0x7fea0519c819 [ 899.706784][T11628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.726462][T11628] RSP: 002b:00007fea05fe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 899.735046][T11628] RAX: ffffffffffffffda RBX: 00007fea05415fa0 RCX: 00007fea0519c819 [ 899.743180][T11628] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 899.751305][T11628] RBP: 00007fea05232c91 R08: 0000000000000000 R09: 0000000000000000 [ 899.759680][T11628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.767997][T11628] R13: 00007fea05416038 R14: 00007fea05415fa0 R15: 00007ffe2f267d68 [ 899.776226][T11628] [ 899.785201][ T49] wlan1: Trigger new scan to find an IBSS to join [ 900.338938][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1732'. [ 900.544030][T11644] netlink: 'syz.3.1734': attribute type 10 has an invalid length. [ 900.734658][T11648] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1733'. [ 900.920523][T11648] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1733'. [ 901.569552][T11654] netlink: 'syz.1.1735': attribute type 10 has an invalid length. [ 901.909917][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1736'. [ 902.420682][ T5864] wlan1: Trigger new scan to find an IBSS to join [ 902.931151][T11663] netlink: 'syz.1.1738': attribute type 21 has an invalid length. [ 903.317169][T11668] netlink: 'syz.1.1739': attribute type 2 has an invalid length. [ 903.894888][ T5851] wlan1: Creating new IBSS network, BSSID 42:3f:5f:9f:d7:78 [ 904.215437][T11678] netlink: 'syz.3.1741': attribute type 2 has an invalid length. [ 904.306746][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1740'. [ 904.366332][T11679] netlink: 'syz.0.1742': attribute type 10 has an invalid length. [ 904.423470][ T1886] wlan1: Trigger new scan to find an IBSS to join [ 904.430921][T11676] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1741'. [ 904.561472][T11676] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 904.578014][T11676] CPU: 1 PID: 11676 Comm: syz.3.1741 Not tainted syzkaller #0 [ 904.585672][T11676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 904.595970][T11676] Call Trace: [ 904.599479][T11676] [ 904.602556][T11676] dump_stack_lvl+0x18c/0x250 [ 904.607402][T11676] ? show_regs_print_info+0x20/0x20 [ 904.612930][T11676] ? load_image+0x420/0x420 [ 904.617611][T11676] sysfs_warn_dup+0x8e/0xa0 [ 904.622298][T11676] sysfs_do_create_link_sd+0xc0/0x110 [ 904.628436][T11676] device_add_class_symlinks+0x1cf/0x240 [ 904.634975][T11676] device_add+0x507/0xc20 [ 904.639474][T11676] wiphy_register+0x1dad/0x2ae0 [ 904.644406][T11676] ? cfg80211_event_work+0x40/0x40 [ 904.649764][T11676] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 904.656353][T11676] ieee80211_register_hw+0x3464/0x4250 [ 904.662149][T11676] ? ieee80211_tasklet_handler+0x20/0x20 [ 904.667922][T11676] ? lockdep_hardirqs_on+0x98/0x150 [ 904.673454][T11676] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 904.679932][T11676] ? __asan_memset+0x22/0x40 [ 904.684607][T11676] ? __hrtimer_init+0x186/0x270 [ 904.689526][T11676] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 904.695426][T11676] ? mac80211_hwsim_free+0x220/0x220 [ 904.700767][T11676] ? rcu_is_watching+0x15/0xb0 [ 904.705709][T11676] ? kstrndup+0xbd/0x140 [ 904.710107][T11676] hwsim_new_radio_nl+0xdc9/0x1a90 [ 904.715462][T11676] ? __nla_validate+0x50/0x50 [ 904.720183][T11676] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 904.726283][T11676] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 904.733098][T11676] ? lockdep_hardirqs_on+0x98/0x150 [ 904.738525][T11676] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 904.744855][T11676] ? __nla_parse+0x40/0x50 [ 904.749452][T11676] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 904.755862][T11676] genl_family_rcv_msg_doit+0x211/0x310 [ 904.761517][T11676] ? end_current_label_crit_section+0x170/0x170 [ 904.767985][T11676] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 904.773941][T11676] ? lockdep_hardirqs_on+0x98/0x150 [ 904.779283][T11676] ? bpf_lsm_capable+0x9/0x10 [ 904.784097][T11676] ? security_capable+0x89/0xb0 [ 904.789027][T11676] genl_rcv_msg+0x619/0x7a0 [ 904.793771][T11676] ? genl_bind+0x360/0x360 [ 904.798401][T11676] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 904.804873][T11676] ? netlink_rcv_skb+0x220/0x4d0 [ 904.809970][T11676] netlink_rcv_skb+0x241/0x4d0 [ 904.814792][T11676] ? genl_bind+0x360/0x360 [ 904.819272][T11676] ? netlink_ack+0x1180/0x1180 [ 904.824130][T11676] ? __lock_acquire+0x7d40/0x7d40 [ 904.829314][T11676] ? down_read+0x1ac/0x2e0 [ 904.833787][T11676] genl_rcv+0x28/0x40 [ 904.838080][T11676] netlink_unicast+0x751/0x8d0 [ 904.843246][T11676] netlink_sendmsg+0x8d0/0xbf0 [ 904.848225][T11676] ? lockdep_hardirqs_on+0x98/0x150 [ 904.853662][T11676] ? netlink_getsockopt+0x590/0x590 [ 904.858928][T11676] ? aa_sock_msg_perm+0x94/0x150 [ 904.863933][T11676] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 904.869619][T11676] ? security_socket_sendmsg+0x80/0xa0 [ 904.875237][T11676] ? netlink_getsockopt+0x590/0x590 [ 904.880546][T11676] ____sys_sendmsg+0x5ba/0x960 [ 904.885363][T11676] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 904.891573][T11676] ? __asan_memset+0x22/0x40 [ 904.896311][T11676] ? __sys_sendmsg_sock+0x30/0x30 [ 904.901478][T11676] ? __import_iovec+0x5f2/0x850 [ 904.906586][T11676] ? import_iovec+0x73/0xa0 [ 904.911318][T11676] ___sys_sendmsg+0x2a6/0x360 [ 904.916060][T11676] ? __sys_sendmsg+0x2a0/0x2a0 [ 904.921131][T11676] __se_sys_sendmsg+0x1c2/0x2b0 [ 904.926232][T11676] ? __x64_sys_sendmsg+0x80/0x80 [ 904.931337][T11676] do_syscall_64+0x55/0xa0 [ 904.935818][T11676] ? clear_bhb_loop+0x40/0x90 [ 904.941037][T11676] ? clear_bhb_loop+0x40/0x90 [ 904.945887][T11676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 904.951936][T11676] RIP: 0033:0x7f7c93f9c819 [ 904.956396][T11676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.976325][T11676] RSP: 002b:00007f7c94dd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.984972][T11676] RAX: ffffffffffffffda RBX: 00007f7c94215fa0 RCX: 00007f7c93f9c819 [ 904.993223][T11676] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 905.001508][T11676] RBP: 00007f7c94032c91 R08: 0000000000000000 R09: 0000000000000000 [ 905.009727][T11676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 905.017965][T11676] R13: 00007f7c94216038 R14: 00007f7c94215fa0 R15: 00007ffe02c9f308 [ 905.027003][T11676] [ 905.314773][T11685] netlink: 'syz.1.1743': attribute type 2 has an invalid length. [ 905.406315][T11685] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1743'. [ 905.445833][T11685] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 905.463284][T11685] CPU: 1 PID: 11685 Comm: syz.1.1743 Not tainted syzkaller #0 [ 905.471246][T11685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 905.481532][T11685] Call Trace: [ 905.484882][T11685] [ 905.487849][T11685] dump_stack_lvl+0x18c/0x250 [ 905.492691][T11685] ? show_regs_print_info+0x20/0x20 [ 905.498047][T11685] ? load_image+0x420/0x420 [ 905.502882][T11685] sysfs_warn_dup+0x8e/0xa0 [ 905.507770][T11685] sysfs_do_create_link_sd+0xc0/0x110 [ 905.513453][T11685] device_add_class_symlinks+0x1cf/0x240 [ 905.519221][T11685] device_add+0x507/0xc20 [ 905.523693][T11685] wiphy_register+0x1dad/0x2ae0 [ 905.528803][T11685] ? cfg80211_event_work+0x40/0x40 [ 905.533960][T11685] ? minstrel_ht_alloc+0x88a/0x990 [ 905.539202][T11685] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 905.545422][T11685] ieee80211_register_hw+0x3464/0x4250 [ 905.551207][T11685] ? ieee80211_tasklet_handler+0x20/0x20 [ 905.557051][T11685] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 905.563437][T11685] ? __debug_object_init+0xec/0x450 [ 905.568688][T11685] ? __asan_memset+0x22/0x40 [ 905.573369][T11685] ? __hrtimer_init+0x186/0x270 [ 905.578295][T11685] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 905.584269][T11685] ? mac80211_hwsim_free+0x220/0x220 [ 905.589699][T11685] ? rcu_is_watching+0x15/0xb0 [ 905.594520][T11685] ? kstrndup+0xbd/0x140 [ 905.598908][T11685] hwsim_new_radio_nl+0xdc9/0x1a90 [ 905.604069][T11685] ? __nla_validate+0x50/0x50 [ 905.609074][T11685] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 905.615548][T11685] ? __nla_parse+0x40/0x50 [ 905.620102][T11685] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 905.626618][T11685] genl_family_rcv_msg_doit+0x211/0x310 [ 905.632474][T11685] ? end_current_label_crit_section+0x170/0x170 [ 905.638850][T11685] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 905.644817][T11685] ? bpf_lsm_capable+0x9/0x10 [ 905.649626][T11685] ? security_capable+0x89/0xb0 [ 905.654964][T11685] genl_rcv_msg+0x619/0x7a0 [ 905.659782][T11685] ? genl_bind+0x360/0x360 [ 905.664744][T11685] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 905.671201][T11685] ? ref_tracker_free+0x690/0x840 [ 905.676360][T11685] netlink_rcv_skb+0x241/0x4d0 [ 905.681204][T11685] ? genl_bind+0x360/0x360 [ 905.685752][T11685] ? netlink_ack+0x1180/0x1180 [ 905.690666][T11685] ? __lock_acquire+0x7d40/0x7d40 [ 905.695740][T11685] ? down_read+0x1ac/0x2e0 [ 905.700234][T11685] genl_rcv+0x28/0x40 [ 905.704379][T11685] netlink_unicast+0x751/0x8d0 [ 905.709444][T11685] netlink_sendmsg+0x8d0/0xbf0 [ 905.714383][T11685] ? netlink_getsockopt+0x590/0x590 [ 905.719738][T11685] ? aa_sock_msg_perm+0x94/0x150 [ 905.724775][T11685] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 905.730302][T11685] ? security_socket_sendmsg+0x80/0xa0 [ 905.735932][T11685] ? netlink_getsockopt+0x590/0x590 [ 905.741407][T11685] ____sys_sendmsg+0x5ba/0x960 [ 905.746225][T11685] ? __asan_memset+0x22/0x40 [ 905.750878][T11685] ? __sys_sendmsg_sock+0x30/0x30 [ 905.755975][T11685] ? __import_iovec+0x5f2/0x850 [ 905.761025][T11685] ? import_iovec+0x73/0xa0 [ 905.765677][T11685] ___sys_sendmsg+0x2a6/0x360 [ 905.770537][T11685] ? __sys_sendmsg+0x2a0/0x2a0 [ 905.775548][T11685] __se_sys_sendmsg+0x1c2/0x2b0 [ 905.780460][T11685] ? __x64_sys_sendmsg+0x80/0x80 [ 905.785460][T11685] ? lockdep_hardirqs_on+0x98/0x150 [ 905.790710][T11685] do_syscall_64+0x55/0xa0 [ 905.795179][T11685] ? clear_bhb_loop+0x40/0x90 [ 905.799896][T11685] ? clear_bhb_loop+0x40/0x90 [ 905.804621][T11685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 905.810576][T11685] RIP: 0033:0x7f3ec199c819 [ 905.815118][T11685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.834858][T11685] RSP: 002b:00007f3ec27f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.843409][T11685] RAX: ffffffffffffffda RBX: 00007f3ec1c16090 RCX: 00007f3ec199c819 [ 905.851598][T11685] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 905.859957][T11685] RBP: 00007f3ec1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 905.868158][T11685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 905.876432][T11685] R13: 00007f3ec1c16128 R14: 00007f3ec1c16090 R15: 00007ffe8bbfa378 [ 905.884573][T11685] [ 906.058888][T11689] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1745'. [ 906.095399][T11689] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1745'. [ 906.163411][T11691] netlink: 'syz.3.1746': attribute type 10 has an invalid length. [ 906.204054][ T49] wlan1: Creating new IBSS network, BSSID 72:6e:bb:91:5c:4b [ 906.291157][T11692] netlink: 'syz.2.1744': attribute type 10 has an invalid length. [ 906.422177][ T1886] wlan1: Trigger new scan to find an IBSS to join [ 907.244012][T11703] netlink: 'syz.0.1748': attribute type 21 has an invalid length. [ 907.491604][T11707] netlink: 'syz.1.1750': attribute type 2 has an invalid length. [ 907.512448][T11705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'. [ 907.872234][T11709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1751'. [ 909.461675][ T49] wlan1: Trigger new scan to find an IBSS to join [ 909.622019][T11718] netlink: 'syz.2.1753': attribute type 10 has an invalid length. [ 909.874995][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1754'. [ 910.060888][T11725] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1756'. [ 910.080586][T11725] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1756'. [ 910.116926][T11726] netlink: 'syz.2.1755': attribute type 2 has an invalid length. [ 910.401236][T11728] netlink: 'syz.0.1763': attribute type 10 has an invalid length. [ 910.590866][T11726] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1755'. [ 910.766286][T11726] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 910.902080][T11726] CPU: 1 PID: 11726 Comm: syz.2.1755 Not tainted syzkaller #0 [ 910.909817][T11726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 910.920048][T11726] Call Trace: [ 910.923393][T11726] [ 910.926413][T11726] dump_stack_lvl+0x18c/0x250 [ 910.931274][T11726] ? show_regs_print_info+0x20/0x20 [ 910.936733][T11726] ? load_image+0x420/0x420 [ 910.941421][T11726] sysfs_warn_dup+0x8e/0xa0 [ 910.946008][T11726] sysfs_do_create_link_sd+0xc0/0x110 [ 910.951545][T11726] device_add_class_symlinks+0x1cf/0x240 [ 910.957354][T11726] device_add+0x507/0xc20 [ 910.961777][T11726] wiphy_register+0x1dad/0x2ae0 [ 910.966903][T11726] ? cfg80211_event_work+0x40/0x40 [ 910.972102][T11726] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 910.978423][T11726] ieee80211_register_hw+0x3464/0x4250 [ 910.984143][T11726] ? ieee80211_tasklet_handler+0x20/0x20 [ 910.989830][T11726] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 910.995847][T11726] ? __debug_object_init+0xec/0x450 [ 911.001759][T11726] ? __asan_memset+0x22/0x40 [ 911.007239][T11726] ? __hrtimer_init+0x186/0x270 [ 911.013402][T11726] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 911.019610][T11726] ? mac80211_hwsim_free+0x220/0x220 [ 911.025855][T11726] ? rcu_is_watching+0x15/0xb0 [ 911.030874][T11726] ? kstrndup+0xbd/0x140 [ 911.035222][T11726] hwsim_new_radio_nl+0xdc9/0x1a90 [ 911.040810][T11726] ? __nla_validate+0x50/0x50 [ 911.045706][T11726] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 911.052451][T11726] ? __nla_parse+0x40/0x50 [ 911.057120][T11726] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 911.063546][T11726] genl_family_rcv_msg_doit+0x211/0x310 [ 911.069263][T11726] ? end_current_label_crit_section+0x170/0x170 [ 911.075597][T11726] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 911.081703][T11726] ? bpf_lsm_capable+0x9/0x10 [ 911.086468][T11726] ? security_capable+0x89/0xb0 [ 911.091408][T11726] genl_rcv_msg+0x619/0x7a0 [ 911.096268][T11726] ? genl_bind+0x360/0x360 [ 911.101014][T11726] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 911.107693][T11726] netlink_rcv_skb+0x241/0x4d0 [ 911.112641][T11726] ? genl_bind+0x360/0x360 [ 911.117129][T11726] ? netlink_ack+0x1180/0x1180 [ 911.122252][T11726] ? __lock_acquire+0x7d40/0x7d40 [ 911.127362][T11726] ? down_read+0x1ac/0x2e0 [ 911.131866][T11726] genl_rcv+0x28/0x40 [ 911.135956][T11726] netlink_unicast+0x751/0x8d0 [ 911.140812][T11726] netlink_sendmsg+0x8d0/0xbf0 [ 911.145716][T11726] ? netlink_getsockopt+0x590/0x590 [ 911.150997][T11726] ? aa_sock_msg_perm+0x94/0x150 [ 911.156460][T11726] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 911.162095][T11726] ? security_socket_sendmsg+0x80/0xa0 [ 911.167794][T11726] ? netlink_getsockopt+0x590/0x590 [ 911.173611][T11726] ____sys_sendmsg+0x5ba/0x960 [ 911.178560][T11726] ? __asan_memset+0x22/0x40 [ 911.183321][T11726] ? __sys_sendmsg_sock+0x30/0x30 [ 911.188530][T11726] ? __import_iovec+0x5f2/0x850 [ 911.193831][T11726] ? import_iovec+0x73/0xa0 [ 911.198399][T11726] ___sys_sendmsg+0x2a6/0x360 [ 911.203182][T11726] ? __sys_sendmsg+0x2a0/0x2a0 [ 911.208167][T11726] __se_sys_sendmsg+0x1c2/0x2b0 [ 911.213214][T11726] ? __x64_sys_sendmsg+0x80/0x80 [ 911.218412][T11726] ? lockdep_hardirqs_on+0x98/0x150 [ 911.223846][T11726] do_syscall_64+0x55/0xa0 [ 911.228398][T11726] ? clear_bhb_loop+0x40/0x90 [ 911.233249][T11726] ? clear_bhb_loop+0x40/0x90 [ 911.238174][T11726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.244225][T11726] RIP: 0033:0x7fea0519c819 [ 911.248693][T11726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.268732][T11726] RSP: 002b:00007fea05fe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 911.277710][T11726] RAX: ffffffffffffffda RBX: 00007fea05415fa0 RCX: 00007fea0519c819 [ 911.285932][T11726] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 911.294053][T11726] RBP: 00007fea05232c91 R08: 0000000000000000 R09: 0000000000000000 [ 911.302612][T11726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.310745][T11726] R13: 00007fea05416038 R14: 00007fea05415fa0 R15: 00007ffe2f267d68 [ 911.318971][T11726] [ 911.993696][T11736] netlink: 'syz.1.1757': attribute type 10 has an invalid length. [ 912.196893][ T6677] wlan1: Creating new IBSS network, BSSID d6:ee:f3:91:e8:7c [ 912.433838][T11741] netlink: 'syz.3.1758': attribute type 2 has an invalid length. [ 912.616663][T11741] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1758'. [ 912.661301][T11741] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 912.700763][T11741] CPU: 0 PID: 11741 Comm: syz.3.1758 Not tainted syzkaller #0 [ 912.708363][T11741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 912.718937][T11741] Call Trace: [ 912.722736][T11741] [ 912.725726][T11741] dump_stack_lvl+0x18c/0x250 [ 912.730478][T11741] ? show_regs_print_info+0x20/0x20 [ 912.735862][T11741] ? load_image+0x420/0x420 [ 912.740910][T11741] sysfs_warn_dup+0x8e/0xa0 [ 912.745583][T11741] sysfs_do_create_link_sd+0xc0/0x110 [ 912.751134][T11741] device_add_class_symlinks+0x1cf/0x240 [ 912.756854][T11741] device_add+0x507/0xc20 [ 912.761265][T11741] wiphy_register+0x1dad/0x2ae0 [ 912.766392][T11741] ? cfg80211_event_work+0x40/0x40 [ 912.771678][T11741] ? minstrel_ht_alloc+0x88a/0x990 [ 912.776870][T11741] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 912.783395][T11741] ieee80211_register_hw+0x3464/0x4250 [ 912.789151][T11741] ? ieee80211_tasklet_handler+0x20/0x20 [ 912.794983][T11741] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 912.801043][T11741] ? __debug_object_init+0xec/0x450 [ 912.806437][T11741] ? __asan_memset+0x22/0x40 [ 912.811212][T11741] ? __hrtimer_init+0x186/0x270 [ 912.816256][T11741] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 912.822100][T11741] ? mac80211_hwsim_free+0x220/0x220 [ 912.827486][T11741] ? rcu_is_watching+0x15/0xb0 [ 912.832355][T11741] ? kstrndup+0xbd/0x140 [ 912.836702][T11741] hwsim_new_radio_nl+0xdc9/0x1a90 [ 912.842112][T11741] ? __nla_validate+0x50/0x50 [ 912.846887][T11741] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 912.853580][T11741] ? __nla_parse+0x40/0x50 [ 912.858179][T11741] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 912.864766][T11741] genl_family_rcv_msg_doit+0x211/0x310 [ 912.870381][T11741] ? end_current_label_crit_section+0x170/0x170 [ 912.876687][T11741] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 912.882652][T11741] ? bpf_lsm_capable+0x9/0x10 [ 912.887670][T11741] ? security_capable+0x89/0xb0 [ 912.892860][T11741] genl_rcv_msg+0x619/0x7a0 [ 912.897518][T11741] ? genl_bind+0x360/0x360 [ 912.902066][T11741] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 912.908648][T11741] netlink_rcv_skb+0x241/0x4d0 [ 912.913655][T11741] ? genl_bind+0x360/0x360 [ 912.918393][T11741] ? netlink_ack+0x1180/0x1180 [ 912.923266][T11741] ? __lock_acquire+0x7d40/0x7d40 [ 912.928363][T11741] ? down_read+0x1ac/0x2e0 [ 912.932925][T11741] genl_rcv+0x28/0x40 [ 912.937062][T11741] netlink_unicast+0x751/0x8d0 [ 912.941914][T11741] netlink_sendmsg+0x8d0/0xbf0 [ 912.946864][T11741] ? netlink_getsockopt+0x590/0x590 [ 912.952314][T11741] ? aa_sock_msg_perm+0x94/0x150 [ 912.957498][T11741] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 912.963006][T11741] ? security_socket_sendmsg+0x80/0xa0 [ 912.968605][T11741] ? netlink_getsockopt+0x590/0x590 [ 912.973958][T11741] ____sys_sendmsg+0x5ba/0x960 [ 912.978889][T11741] ? __asan_memset+0x22/0x40 [ 912.983741][T11741] ? __sys_sendmsg_sock+0x30/0x30 [ 912.988992][T11741] ? __import_iovec+0x5f2/0x850 [ 912.994516][T11741] ? import_iovec+0x73/0xa0 [ 912.999062][T11741] ___sys_sendmsg+0x2a6/0x360 [ 913.003799][T11741] ? __sys_sendmsg+0x2a0/0x2a0 [ 913.008832][T11741] __se_sys_sendmsg+0x1c2/0x2b0 [ 913.014009][T11741] ? __x64_sys_sendmsg+0x80/0x80 [ 913.019498][T11741] ? lockdep_hardirqs_on+0x98/0x150 [ 913.024787][T11741] do_syscall_64+0x55/0xa0 [ 913.029479][T11741] ? clear_bhb_loop+0x40/0x90 [ 913.034324][T11741] ? clear_bhb_loop+0x40/0x90 [ 913.039416][T11741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 913.045375][T11741] RIP: 0033:0x7f7c93f9c819 [ 913.049837][T11741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.069683][T11741] RSP: 002b:00007f7c94dd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.078240][T11741] RAX: ffffffffffffffda RBX: 00007f7c94215fa0 RCX: 00007f7c93f9c819 [ 913.086714][T11741] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 913.095047][T11741] RBP: 00007f7c94032c91 R08: 0000000000000000 R09: 0000000000000000 [ 913.103348][T11741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 913.111368][T11741] R13: 00007f7c94216038 R14: 00007f7c94215fa0 R15: 00007ffe02c9f308 [ 913.119419][T11741] [ 913.227642][T11746] netlink: 'syz.0.1760': attribute type 21 has an invalid length. [ 913.330409][T11749] netlink: 'syz.1.1761': attribute type 2 has an invalid length. [ 913.391829][ T9384] wlan1: Trigger new scan to find an IBSS to join [ 913.502392][T11751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1762'. [ 915.136875][T11764] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1766'. [ 915.540824][T11760] netlink: 'syz.1.1765': attribute type 10 has an invalid length. [ 915.551465][T11764] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1766'. [ 915.806226][T11769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1767'. [ 916.013547][T11774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1768'. [ 916.555772][T11779] netlink: 'syz.2.1769': attribute type 10 has an invalid length. [ 918.153468][T11783] netlink: 'syz.0.1770': attribute type 10 has an invalid length. [ 918.412550][T11790] netlink: 'syz.1.1772': attribute type 21 has an invalid length. [ 918.752712][T11798] netlink: 'syz.2.1773': attribute type 2 has an invalid length. [ 919.035325][T11798] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1773'. [ 919.130916][T11798] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 919.181047][T11798] CPU: 1 PID: 11798 Comm: syz.2.1773 Not tainted syzkaller #0 [ 919.188614][T11798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 919.198901][T11798] Call Trace: [ 919.202235][T11798] [ 919.205263][T11798] dump_stack_lvl+0x18c/0x250 [ 919.210193][T11798] ? show_regs_print_info+0x20/0x20 [ 919.215581][T11798] ? load_image+0x420/0x420 [ 919.220183][T11798] sysfs_warn_dup+0x8e/0xa0 [ 919.224831][T11798] sysfs_do_create_link_sd+0xc0/0x110 [ 919.230272][T11798] device_add_class_symlinks+0x1cf/0x240 [ 919.235975][T11798] device_add+0x507/0xc20 [ 919.240372][T11798] wiphy_register+0x1dad/0x2ae0 [ 919.245306][T11798] ? cfg80211_event_work+0x40/0x40 [ 919.250934][T11798] ? minstrel_ht_alloc+0x88a/0x990 [ 919.256237][T11798] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 919.262550][T11798] ieee80211_register_hw+0x3464/0x4250 [ 919.268188][T11798] ? ieee80211_tasklet_handler+0x20/0x20 [ 919.273880][T11798] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 919.280026][T11798] ? __debug_object_init+0xec/0x450 [ 919.286079][T11798] ? __asan_memset+0x22/0x40 [ 919.290782][T11798] ? __hrtimer_init+0x186/0x270 [ 919.295828][T11798] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 919.301747][T11798] ? mac80211_hwsim_free+0x220/0x220 [ 919.307095][T11798] ? rcu_is_watching+0x15/0xb0 [ 919.311980][T11798] ? kstrndup+0xbd/0x140 [ 919.316407][T11798] hwsim_new_radio_nl+0xdc9/0x1a90 [ 919.321714][T11798] ? __nla_validate+0x50/0x50 [ 919.326545][T11798] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 919.333185][T11798] ? __nla_parse+0x40/0x50 [ 919.338073][T11798] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 919.344449][T11798] genl_family_rcv_msg_doit+0x211/0x310 [ 919.350240][T11798] ? end_current_label_crit_section+0x170/0x170 [ 919.356925][T11798] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 919.363085][T11798] ? bpf_lsm_capable+0x9/0x10 [ 919.367821][T11798] ? security_capable+0x89/0xb0 [ 919.372820][T11798] genl_rcv_msg+0x619/0x7a0 [ 919.377469][T11798] ? genl_bind+0x360/0x360 [ 919.381972][T11798] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 919.388000][T11798] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 919.394461][T11798] ? ref_tracker_free+0x690/0x840 [ 919.399544][T11798] netlink_rcv_skb+0x241/0x4d0 [ 919.404455][T11798] ? genl_bind+0x360/0x360 [ 919.408916][T11798] ? netlink_ack+0x1180/0x1180 [ 919.414175][T11798] ? __lock_acquire+0x7d40/0x7d40 [ 919.419344][T11798] ? down_read+0x1ac/0x2e0 [ 919.424303][T11798] genl_rcv+0x28/0x40 [ 919.428795][T11798] netlink_unicast+0x751/0x8d0 [ 919.433940][T11798] netlink_sendmsg+0x8d0/0xbf0 [ 919.438961][T11798] ? netlink_getsockopt+0x590/0x590 [ 919.444370][T11798] ? aa_sock_msg_perm+0x94/0x150 [ 919.449382][T11798] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 919.455122][T11798] ? security_socket_sendmsg+0x80/0xa0 [ 919.460805][T11798] ? netlink_getsockopt+0x590/0x590 [ 919.466120][T11798] ____sys_sendmsg+0x5ba/0x960 [ 919.471027][T11798] ? __asan_memset+0x22/0x40 [ 919.475936][T11798] ? __sys_sendmsg_sock+0x30/0x30 [ 919.481197][T11798] ? __import_iovec+0x5f2/0x850 [ 919.486107][T11798] ? import_iovec+0x73/0xa0 [ 919.491190][T11798] ___sys_sendmsg+0x2a6/0x360 [ 919.495917][T11798] ? __sys_sendmsg+0x2a0/0x2a0 [ 919.501023][T11798] __se_sys_sendmsg+0x1c2/0x2b0 [ 919.506401][T11798] ? __x64_sys_sendmsg+0x80/0x80 [ 919.511521][T11798] ? lockdep_hardirqs_on+0x98/0x150 [ 919.517024][T11798] do_syscall_64+0x55/0xa0 [ 919.521664][T11798] ? clear_bhb_loop+0x40/0x90 [ 919.526433][T11798] ? clear_bhb_loop+0x40/0x90 [ 919.531298][T11798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 919.537242][T11798] RIP: 0033:0x7fea0519c819 [ 919.541717][T11798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.561568][T11798] RSP: 002b:00007fea05fe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 919.570043][T11798] RAX: ffffffffffffffda RBX: 00007fea05415fa0 RCX: 00007fea0519c819 [ 919.578432][T11798] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 919.586642][T11798] RBP: 00007fea05232c91 R08: 0000000000000000 R09: 0000000000000000 [ 919.594920][T11798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 919.603358][T11798] R13: 00007fea05416038 R14: 00007fea05415fa0 R15: 00007ffe2f267d68 [ 919.611623][T11798] [ 919.846677][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1775'. [ 919.982456][T11806] netlink: 'syz.0.1777': attribute type 10 has an invalid length. [ 920.255465][T11812] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1778'. [ 920.421641][ T9384] wlan1: Trigger new scan to find an IBSS to join [ 920.483154][T11812] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1778'. [ 920.805828][T11820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1780'. [ 920.840996][T11822] netlink: 'syz.3.1781': attribute type 2 has an invalid length. [ 921.141684][T11826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1782'. [ 921.689073][T11828] netlink: 'syz.2.1783': attribute type 10 has an invalid length. [ 921.746140][T11833] netlink: 'syz.3.1784': attribute type 21 has an invalid length. [ 923.042840][ T49] wlan1: Creating new IBSS network, BSSID 9e:ac:b8:c3:74:19 [ 923.271715][T11837] netlink: 'syz.1.1785': attribute type 10 has an invalid length. [ 923.411007][T11841] netlink: 'syz.3.1787': attribute type 2 has an invalid length. [ 923.599725][T11841] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1787'. [ 923.675812][T11841] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 923.710886][T11841] CPU: 1 PID: 11841 Comm: syz.3.1787 Not tainted syzkaller #0 [ 923.718460][T11841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 923.728586][T11841] Call Trace: [ 923.732114][T11841] [ 923.735175][T11841] dump_stack_lvl+0x18c/0x250 [ 923.740041][T11841] ? show_regs_print_info+0x20/0x20 [ 923.745528][T11841] ? load_image+0x420/0x420 [ 923.750326][T11841] sysfs_warn_dup+0x8e/0xa0 [ 923.755079][T11841] sysfs_do_create_link_sd+0xc0/0x110 [ 923.760617][T11841] device_add_class_symlinks+0x1cf/0x240 [ 923.766454][T11841] device_add+0x507/0xc20 [ 923.771115][T11841] wiphy_register+0x1dad/0x2ae0 [ 923.776125][T11841] ? cfg80211_event_work+0x40/0x40 [ 923.781375][T11841] ? minstrel_ht_alloc+0x88a/0x990 [ 923.787052][T11841] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 923.793587][T11841] ieee80211_register_hw+0x3464/0x4250 [ 923.799123][T11841] ? ieee80211_tasklet_handler+0x20/0x20 [ 923.805043][T11841] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 923.811225][T11841] ? __debug_object_init+0xec/0x450 [ 923.816597][T11841] ? __asan_memset+0x22/0x40 [ 923.821373][T11841] ? __hrtimer_init+0x186/0x270 [ 923.826561][T11841] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 923.832371][T11841] ? mac80211_hwsim_free+0x220/0x220 [ 923.837941][T11841] ? rcu_is_watching+0x15/0xb0 [ 923.842872][T11841] ? kstrndup+0xbd/0x140 [ 923.847731][T11841] hwsim_new_radio_nl+0xdc9/0x1a90 [ 923.853155][T11841] ? __nla_validate+0x50/0x50 [ 923.858004][T11841] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 923.864417][T11841] ? __nla_parse+0x40/0x50 [ 923.868909][T11841] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 923.875660][T11841] genl_family_rcv_msg_doit+0x211/0x310 [ 923.881445][T11841] ? end_current_label_crit_section+0x170/0x170 [ 923.887874][T11841] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 923.893918][T11841] ? bpf_lsm_capable+0x9/0x10 [ 923.898640][T11841] ? security_capable+0x89/0xb0 [ 923.904008][T11841] genl_rcv_msg+0x619/0x7a0 [ 923.908663][T11841] ? genl_bind+0x360/0x360 [ 923.913303][T11841] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 923.919337][T11841] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 923.925819][T11841] ? ref_tracker_free+0x690/0x840 [ 923.930922][T11841] netlink_rcv_skb+0x241/0x4d0 [ 923.936461][T11841] ? genl_bind+0x360/0x360 [ 923.941105][T11841] ? netlink_ack+0x1180/0x1180 [ 923.946064][T11841] ? __lock_acquire+0x7d40/0x7d40 [ 923.951152][T11841] ? down_read+0x1ac/0x2e0 [ 923.955726][T11841] genl_rcv+0x28/0x40 [ 923.959755][T11841] netlink_unicast+0x751/0x8d0 [ 923.964877][T11841] netlink_sendmsg+0x8d0/0xbf0 [ 923.969727][T11841] ? netlink_getsockopt+0x590/0x590 [ 923.975117][T11841] ? aa_sock_msg_perm+0x94/0x150 [ 923.980209][T11841] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 923.985879][T11841] ? security_socket_sendmsg+0x80/0xa0 [ 923.991592][T11841] ? netlink_getsockopt+0x590/0x590 [ 923.997040][T11841] ____sys_sendmsg+0x5ba/0x960 [ 924.002054][T11841] ? __asan_memset+0x22/0x40 [ 924.007076][T11841] ? __sys_sendmsg_sock+0x30/0x30 [ 924.013197][T11841] ? __import_iovec+0x5f2/0x850 [ 924.018583][T11841] ? import_iovec+0x73/0xa0 [ 924.023513][T11841] ___sys_sendmsg+0x2a6/0x360 [ 924.028539][T11841] ? __sys_sendmsg+0x2a0/0x2a0 [ 924.034162][T11841] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 924.040492][T11841] __se_sys_sendmsg+0x1c2/0x2b0 [ 924.045493][T11841] ? __x64_sys_sendmsg+0x80/0x80 [ 924.050504][T11841] ? lockdep_hardirqs_on+0x98/0x150 [ 924.055760][T11841] do_syscall_64+0x55/0xa0 [ 924.060391][T11841] ? clear_bhb_loop+0x40/0x90 [ 924.065142][T11841] ? clear_bhb_loop+0x40/0x90 [ 924.070035][T11841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 924.076339][T11841] RIP: 0033:0x7f7c93f9c819 [ 924.080840][T11841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.101235][T11841] RSP: 002b:00007f7c94dd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.111065][T11841] RAX: ffffffffffffffda RBX: 00007f7c94215fa0 RCX: 00007f7c93f9c819 [ 924.119539][T11841] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 924.127872][T11841] RBP: 00007f7c94032c91 R08: 0000000000000000 R09: 0000000000000000 [ 924.135990][T11841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.144263][T11841] R13: 00007f7c94216038 R14: 00007f7c94215fa0 R15: 00007ffe02c9f308 [ 924.152916][T11841] [ 924.421197][ T49] wlan1: Trigger new scan to find an IBSS to join [ 924.467012][T11849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1788'. [ 924.764586][T11860] netlink: 'syz.0.1790': attribute type 10 has an invalid length. [ 925.474719][ T49] wlan1: Trigger new scan to find an IBSS to join [ 925.786478][T11864] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1792'. [ 925.821818][T11864] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1792'. [ 925.918851][T11866] netlink: 'syz.0.1793': attribute type 2 has an invalid length. [ 926.317239][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1794'. [ 926.668566][T11873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1795'. [ 927.175661][T11875] netlink: 'syz.3.1796': attribute type 10 has an invalid length. [ 928.511953][T11879] netlink: 'syz.3.1797': attribute type 21 has an invalid length. [ 928.819315][T11884] netlink: 'syz.0.1798': attribute type 2 has an invalid length. [ 928.853180][T11885] netlink: 'syz.2.1799': attribute type 2 has an invalid length. [ 928.898832][T11884] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1798'. [ 928.928742][T11884] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 928.949743][T11884] CPU: 0 PID: 11884 Comm: syz.0.1798 Not tainted syzkaller #0 [ 928.957594][T11884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 928.968522][T11884] Call Trace: [ 928.972061][T11884] [ 928.975814][T11884] dump_stack_lvl+0x18c/0x250 [ 928.981577][T11884] ? show_regs_print_info+0x20/0x20 [ 928.987085][T11884] ? load_image+0x420/0x420 [ 928.991863][T11884] sysfs_warn_dup+0x8e/0xa0 [ 928.996610][T11884] sysfs_do_create_link_sd+0xc0/0x110 [ 929.002138][T11884] device_add_class_symlinks+0x1cf/0x240 [ 929.008123][T11884] device_add+0x507/0xc20 [ 929.012624][T11884] wiphy_register+0x1dad/0x2ae0 [ 929.018106][T11884] ? cfg80211_event_work+0x40/0x40 [ 929.023492][T11884] ? minstrel_ht_alloc+0x88a/0x990 [ 929.029246][T11884] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 929.035923][T11884] ieee80211_register_hw+0x3464/0x4250 [ 929.041833][T11884] ? ieee80211_tasklet_handler+0x20/0x20 [ 929.047629][T11884] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 929.053615][T11884] ? __debug_object_init+0xec/0x450 [ 929.059347][T11884] ? __asan_memset+0x22/0x40 [ 929.064188][T11884] ? __hrtimer_init+0x186/0x270 [ 929.069375][T11884] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 929.075174][T11884] ? mac80211_hwsim_free+0x220/0x220 [ 929.080594][T11884] ? rcu_is_watching+0x15/0xb0 [ 929.085402][T11884] ? kstrndup+0xbd/0x140 [ 929.089698][T11884] hwsim_new_radio_nl+0xdc9/0x1a90 [ 929.094868][T11884] ? __nla_validate+0x50/0x50 [ 929.099964][T11884] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 929.106806][T11884] ? __nla_parse+0x40/0x50 [ 929.111570][T11884] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 929.118158][T11884] genl_family_rcv_msg_doit+0x211/0x310 [ 929.123941][T11884] ? end_current_label_crit_section+0x170/0x170 [ 929.130388][T11884] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 929.136867][T11884] ? bpf_lsm_capable+0x9/0x10 [ 929.141710][T11884] ? security_capable+0x89/0xb0 [ 929.146624][T11884] genl_rcv_msg+0x619/0x7a0 [ 929.151401][T11884] ? genl_bind+0x360/0x360 [ 929.155885][T11884] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 929.161953][T11884] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 929.168537][T11884] ? ref_tracker_free+0x690/0x840 [ 929.173869][T11884] netlink_rcv_skb+0x241/0x4d0 [ 929.178937][T11884] ? genl_bind+0x360/0x360 [ 929.183430][T11884] ? netlink_ack+0x1180/0x1180 [ 929.188457][T11884] ? __lock_acquire+0x7d40/0x7d40 [ 929.194008][T11884] ? down_read+0x1ac/0x2e0 [ 929.198591][T11884] genl_rcv+0x28/0x40 [ 929.202630][T11884] netlink_unicast+0x751/0x8d0 [ 929.207471][T11884] netlink_sendmsg+0x8d0/0xbf0 [ 929.212408][T11884] ? netlink_getsockopt+0x590/0x590 [ 929.217710][T11884] ? aa_sock_msg_perm+0x94/0x150 [ 929.222820][T11884] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 929.228443][T11884] ? security_socket_sendmsg+0x80/0xa0 [ 929.234216][T11884] ? netlink_getsockopt+0x590/0x590 [ 929.239461][T11884] ____sys_sendmsg+0x5ba/0x960 [ 929.244313][T11884] ? __asan_memset+0x22/0x40 [ 929.249217][T11884] ? __sys_sendmsg_sock+0x30/0x30 [ 929.254544][T11884] ? __import_iovec+0x5f2/0x850 [ 929.259450][T11884] ? import_iovec+0x73/0xa0 [ 929.264227][T11884] ___sys_sendmsg+0x2a6/0x360 [ 929.269204][T11884] ? __sys_sendmsg+0x2a0/0x2a0 [ 929.274130][T11884] __se_sys_sendmsg+0x1c2/0x2b0 [ 929.279039][T11884] ? __x64_sys_sendmsg+0x80/0x80 [ 929.284577][T11884] ? lockdep_hardirqs_on+0x98/0x150 [ 929.289987][T11884] do_syscall_64+0x55/0xa0 [ 929.294438][T11884] ? clear_bhb_loop+0x40/0x90 [ 929.299511][T11884] ? clear_bhb_loop+0x40/0x90 [ 929.304673][T11884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 929.310721][T11884] RIP: 0033:0x7f35e7f9c819 [ 929.315310][T11884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.335094][T11884] RSP: 002b:00007f35e8d9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.343911][T11884] RAX: ffffffffffffffda RBX: 00007f35e8216090 RCX: 00007f35e7f9c819 [ 929.352137][T11884] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 929.360488][T11884] RBP: 00007f35e8032c91 R08: 0000000000000000 R09: 0000000000000000 [ 929.368835][T11884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 929.377016][T11884] R13: 00007f35e8216128 R14: 00007f35e8216090 R15: 00007fff3439f868 [ 929.385052][T11884] [ 929.395503][ T1886] wlan1: Trigger new scan to find an IBSS to join [ 929.400726][ T9384] wlan1: Trigger new scan to find an IBSS to join [ 929.455821][T11885] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1799'. [ 929.505092][T11885] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 929.541831][T11885] CPU: 1 PID: 11885 Comm: syz.2.1799 Not tainted syzkaller #0 [ 929.549427][T11885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 929.559712][T11885] Call Trace: [ 929.563126][T11885] [ 929.566199][T11885] dump_stack_lvl+0x18c/0x250 [ 929.571026][T11885] ? show_regs_print_info+0x20/0x20 [ 929.576268][T11885] ? load_image+0x420/0x420 [ 929.580834][T11885] sysfs_warn_dup+0x8e/0xa0 [ 929.585553][T11885] sysfs_do_create_link_sd+0xc0/0x110 [ 929.591141][T11885] device_add_class_symlinks+0x1cf/0x240 [ 929.596988][T11885] device_add+0x507/0xc20 [ 929.601365][T11885] wiphy_register+0x1dad/0x2ae0 [ 929.606367][T11885] ? cfg80211_event_work+0x40/0x40 [ 929.611701][T11885] ? minstrel_ht_alloc+0x88a/0x990 [ 929.616859][T11885] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 929.622989][T11885] ieee80211_register_hw+0x3464/0x4250 [ 929.628517][T11885] ? ieee80211_tasklet_handler+0x20/0x20 [ 929.634275][T11885] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 929.640306][T11885] ? __debug_object_init+0xec/0x450 [ 929.645653][T11885] ? __asan_memset+0x22/0x40 [ 929.650381][T11885] ? __hrtimer_init+0x186/0x270 [ 929.655539][T11885] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 929.661357][T11885] ? mac80211_hwsim_free+0x220/0x220 [ 929.666787][T11885] ? rcu_is_watching+0x15/0xb0 [ 929.671873][T11885] ? kstrndup+0xbd/0x140 [ 929.676264][T11885] hwsim_new_radio_nl+0xdc9/0x1a90 [ 929.681787][T11885] ? __nla_validate+0x50/0x50 [ 929.686621][T11885] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 929.693583][T11885] ? __nla_parse+0x40/0x50 [ 929.698088][T11885] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 929.704583][T11885] genl_family_rcv_msg_doit+0x211/0x310 [ 929.710220][T11885] ? end_current_label_crit_section+0x170/0x170 [ 929.716518][T11885] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 929.722751][T11885] ? bpf_lsm_capable+0x9/0x10 [ 929.727470][T11885] ? security_capable+0x89/0xb0 [ 929.732368][T11885] genl_rcv_msg+0x619/0x7a0 [ 929.736913][T11885] ? genl_bind+0x360/0x360 [ 929.741367][T11885] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 929.747846][T11885] netlink_rcv_skb+0x241/0x4d0 [ 929.752754][T11885] ? genl_bind+0x360/0x360 [ 929.757343][T11885] ? netlink_ack+0x1180/0x1180 [ 929.762362][T11885] ? __lock_acquire+0x7d40/0x7d40 [ 929.767650][T11885] ? down_read+0x1ac/0x2e0 [ 929.772346][T11885] genl_rcv+0x28/0x40 [ 929.776464][T11885] netlink_unicast+0x751/0x8d0 [ 929.781490][T11885] netlink_sendmsg+0x8d0/0xbf0 [ 929.786523][T11885] ? netlink_getsockopt+0x590/0x590 [ 929.791981][T11885] ? aa_sock_msg_perm+0x94/0x150 [ 929.797509][T11885] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 929.803125][T11885] ? security_socket_sendmsg+0x80/0xa0 [ 929.808761][T11885] ? netlink_getsockopt+0x590/0x590 [ 929.814219][T11885] ____sys_sendmsg+0x5ba/0x960 [ 929.819050][T11885] ? __asan_memset+0x22/0x40 [ 929.823699][T11885] ? __sys_sendmsg_sock+0x30/0x30 [ 929.828853][T11885] ? __import_iovec+0x5f2/0x850 [ 929.834015][T11885] ? import_iovec+0x73/0xa0 [ 929.838556][T11885] ___sys_sendmsg+0x2a6/0x360 [ 929.843386][T11885] ? __sys_sendmsg+0x2a0/0x2a0 [ 929.848402][T11885] __se_sys_sendmsg+0x1c2/0x2b0 [ 929.853381][T11885] ? __x64_sys_sendmsg+0x80/0x80 [ 929.858373][T11885] ? lockdep_hardirqs_on+0x98/0x150 [ 929.863629][T11885] do_syscall_64+0x55/0xa0 [ 929.868077][T11885] ? clear_bhb_loop+0x40/0x90 [ 929.872891][T11885] ? clear_bhb_loop+0x40/0x90 [ 929.877609][T11885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 929.883628][T11885] RIP: 0033:0x7fea0519c819 [ 929.888071][T11885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.907897][T11885] RSP: 002b:00007fea05fc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.916542][T11885] RAX: ffffffffffffffda RBX: 00007fea05416090 RCX: 00007fea0519c819 [ 929.924754][T11885] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 929.932940][T11885] RBP: 00007fea05232c91 R08: 0000000000000000 R09: 0000000000000000 [ 929.940953][T11885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 929.948958][T11885] R13: 00007fea05416128 R14: 00007fea05416090 R15: 00007ffe2f267d68 [ 929.957069][T11885] [ 930.272604][T11888] netlink: 'syz.3.1801': attribute type 10 has an invalid length. [ 930.456701][T11892] netlink: 'syz.1.1800': attribute type 10 has an invalid length. [ 930.816323][ T6677] wlan1: Creating new IBSS network, BSSID 3e:54:24:71:f0:ad [ 931.005998][T11899] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1803'. [ 931.090654][T11899] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1803'. [ 931.327877][T11904] netlink: 'syz.0.1804': attribute type 2 has an invalid length. [ 931.628662][T11906] netlink: 'syz.3.1805': attribute type 10 has an invalid length. [ 931.762184][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1808'. [ 931.997051][T11914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1807'. [ 932.638709][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.645641][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.470615][ T49] wlan1: Trigger new scan to find an IBSS to join [ 934.446346][ T49] wlan1: Creating new IBSS network, BSSID 7e:84:c5:e5:4e:1a [ 934.508732][T11922] netlink: 'syz.3.1810': attribute type 21 has an invalid length. [ 934.624582][T11926] netlink: 'syz.2.1811': attribute type 2 has an invalid length. [ 934.858170][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1812'. [ 934.881321][T11931] netlink: 'syz.0.1813': attribute type 10 has an invalid length. [ 934.925227][T11926] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1811'. [ 935.058513][T11926] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 935.106416][T11926] CPU: 0 PID: 11926 Comm: syz.2.1811 Not tainted syzkaller #0 [ 935.114113][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 935.124245][T11926] Call Trace: [ 935.127685][T11926] [ 935.130765][T11926] dump_stack_lvl+0x18c/0x250 [ 935.135788][T11926] ? show_regs_print_info+0x20/0x20 [ 935.141067][T11926] ? load_image+0x420/0x420 [ 935.145851][T11926] sysfs_warn_dup+0x8e/0xa0 [ 935.150417][T11926] sysfs_do_create_link_sd+0xc0/0x110 [ 935.155944][T11926] device_add_class_symlinks+0x1cf/0x240 [ 935.161807][T11926] device_add+0x507/0xc20 [ 935.166231][T11926] wiphy_register+0x1dad/0x2ae0 [ 935.171264][T11926] ? cfg80211_event_work+0x40/0x40 [ 935.176449][T11926] ? minstrel_ht_alloc+0x88a/0x990 [ 935.181726][T11926] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 935.188080][T11926] ieee80211_register_hw+0x3464/0x4250 [ 935.193721][T11926] ? ieee80211_tasklet_handler+0x20/0x20 [ 935.199708][T11926] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 935.205948][T11926] ? __debug_object_init+0xec/0x450 [ 935.211504][T11926] ? __asan_memset+0x22/0x40 [ 935.216767][T11926] ? __hrtimer_init+0x186/0x270 [ 935.221960][T11926] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 935.228043][T11926] ? mac80211_hwsim_free+0x220/0x220 [ 935.233487][T11926] ? rcu_is_watching+0x15/0xb0 [ 935.238500][T11926] ? kstrndup+0xbd/0x140 [ 935.243000][T11926] hwsim_new_radio_nl+0xdc9/0x1a90 [ 935.248634][T11926] ? __nla_validate+0x50/0x50 [ 935.253650][T11926] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 935.260954][T11926] ? __nla_parse+0x40/0x50 [ 935.265625][T11926] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 935.272363][T11926] genl_family_rcv_msg_doit+0x211/0x310 [ 935.278427][T11926] ? end_current_label_crit_section+0x170/0x170 [ 935.286167][T11926] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 935.292518][T11926] ? bpf_lsm_capable+0x9/0x10 [ 935.297774][T11926] ? security_capable+0x89/0xb0 [ 935.303063][T11926] genl_rcv_msg+0x619/0x7a0 [ 935.308015][T11926] ? genl_bind+0x360/0x360 [ 935.313487][T11926] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 935.320232][T11926] ? ref_tracker_free+0x690/0x840 [ 935.326193][T11926] netlink_rcv_skb+0x241/0x4d0 [ 935.331128][T11926] ? genl_bind+0x360/0x360 [ 935.335646][T11926] ? netlink_ack+0x1180/0x1180 [ 935.340663][T11926] ? __lock_acquire+0x7d40/0x7d40 [ 935.345922][T11926] ? down_read+0x1ac/0x2e0 [ 935.350395][T11926] genl_rcv+0x28/0x40 [ 935.354519][T11926] netlink_unicast+0x751/0x8d0 [ 935.359460][T11926] netlink_sendmsg+0x8d0/0xbf0 [ 935.364336][T11926] ? netlink_getsockopt+0x590/0x590 [ 935.369604][T11926] ? aa_sock_msg_perm+0x94/0x150 [ 935.374607][T11926] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 935.380394][T11926] ? security_socket_sendmsg+0x80/0xa0 [ 935.385906][T11926] ? netlink_getsockopt+0x590/0x590 [ 935.391258][T11926] ____sys_sendmsg+0x5ba/0x960 [ 935.396212][T11926] ? __asan_memset+0x22/0x40 [ 935.400966][T11926] ? __sys_sendmsg_sock+0x30/0x30 [ 935.406045][T11926] ? __import_iovec+0x5f2/0x850 [ 935.410975][T11926] ? import_iovec+0x73/0xa0 [ 935.415664][T11926] ___sys_sendmsg+0x2a6/0x360 [ 935.420513][T11926] ? __sys_sendmsg+0x2a0/0x2a0 [ 935.425397][T11926] __se_sys_sendmsg+0x1c2/0x2b0 [ 935.430487][T11926] ? __x64_sys_sendmsg+0x80/0x80 [ 935.435768][T11926] ? lockdep_hardirqs_on+0x98/0x150 [ 935.442259][T11926] do_syscall_64+0x55/0xa0 [ 935.446735][T11926] ? clear_bhb_loop+0x40/0x90 [ 935.451740][T11926] ? clear_bhb_loop+0x40/0x90 [ 935.456791][T11926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 935.462761][T11926] RIP: 0033:0x7fea0519c819 [ 935.467327][T11926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.487284][T11926] RSP: 002b:00007fea05fe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.495841][T11926] RAX: ffffffffffffffda RBX: 00007fea05415fa0 RCX: 00007fea0519c819 [ 935.504198][T11926] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 935.513147][T11926] RBP: 00007fea05232c91 R08: 0000000000000000 R09: 0000000000000000 [ 935.521365][T11926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.529659][T11926] R13: 00007fea05416038 R14: 00007fea05415fa0 R15: 00007ffe2f267d68 [ 935.537829][T11926] [ 935.557779][T11937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1814'. [ 937.172959][T11937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1814'. [ 937.454803][T11943] netlink: 'syz.3.1815': attribute type 10 has an invalid length. [ 937.851967][T11950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1819'. [ 938.421733][ T6677] wlan1: Trigger new scan to find an IBSS to join [ 938.717774][T11956] netlink: 'syz.0.1820': attribute type 10 has an invalid length. [ 940.339653][T11968] netlink: 'syz.0.1823': attribute type 21 has an invalid length. [ 940.703459][T11976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1826'. [ 940.714489][T11976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1826'. [ 940.804611][T11973] netlink: 'syz.3.1824': attribute type 10 has an invalid length. [ 940.842290][T11975] netlink: 'syz.2.1825': attribute type 10 has an invalid length. [ 941.037959][T11980] netlink: 'syz.1.1827': attribute type 2 has an invalid length. [ 941.257491][T11980] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1827'. [ 941.735008][T11980] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 941.750498][T11980] CPU: 1 PID: 11980 Comm: syz.1.1827 Not tainted syzkaller #0 [ 941.758079][T11980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 941.768212][T11980] Call Trace: [ 941.771567][T11980] [ 941.774603][T11980] dump_stack_lvl+0x18c/0x250 [ 941.779544][T11980] ? show_regs_print_info+0x20/0x20 [ 941.785004][T11980] ? load_image+0x420/0x420 [ 941.789783][T11980] sysfs_warn_dup+0x8e/0xa0 [ 941.794449][T11980] sysfs_do_create_link_sd+0xc0/0x110 [ 941.800008][T11980] device_add_class_symlinks+0x1cf/0x240 [ 941.806343][T11980] device_add+0x507/0xc20 [ 941.810762][T11980] wiphy_register+0x1dad/0x2ae0 [ 941.815927][T11980] ? cfg80211_event_work+0x40/0x40 [ 941.821665][T11980] ? minstrel_ht_alloc+0x88a/0x990 [ 941.827222][T11980] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 941.833566][T11980] ieee80211_register_hw+0x3464/0x4250 [ 941.839130][T11980] ? ieee80211_tasklet_handler+0x20/0x20 [ 941.845012][T11980] ? __hrtimer_init+0x7e/0x270 [ 941.850052][T11980] ? __sanitizer_cov_trace_const_cmp4+0x10/0x90 [ 941.856355][T11980] ? __hrtimer_init+0x186/0x270 [ 941.861265][T11980] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 941.867411][T11980] ? mac80211_hwsim_free+0x220/0x220 [ 941.872737][T11980] ? rcu_is_watching+0x15/0xb0 [ 941.877570][T11980] ? kstrndup+0xbd/0x140 [ 941.881873][T11980] hwsim_new_radio_nl+0xdc9/0x1a90 [ 941.887124][T11980] ? mark_lock+0x94/0x320 [ 941.891679][T11980] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 941.898006][T11980] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 941.904556][T11980] ? lockdep_hardirqs_on+0x98/0x150 [ 941.909805][T11980] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 941.916196][T11980] ? genl_family_rcv_msg_attrs_parse+0x1ca/0x290 [ 941.922755][T11980] genl_family_rcv_msg_doit+0x211/0x310 [ 941.928373][T11980] ? end_current_label_crit_section+0x170/0x170 [ 941.934798][T11980] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 941.940777][T11980] ? bpf_lsm_capable+0x9/0x10 [ 941.945703][T11980] ? security_capable+0x89/0xb0 [ 941.951062][T11980] genl_rcv_msg+0x619/0x7a0 [ 941.955843][T11980] ? genl_bind+0x360/0x360 [ 941.960309][T11980] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 941.966711][T11980] ? lockdep_hardirqs_on+0x98/0x150 [ 941.972070][T11980] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 941.978556][T11980] netlink_rcv_skb+0x241/0x4d0 [ 941.983584][T11980] ? genl_bind+0x360/0x360 [ 941.988081][T11980] ? netlink_ack+0x1180/0x1180 [ 941.992958][T11980] ? __lock_acquire+0x7d40/0x7d40 [ 941.998058][T11980] ? down_read+0x1ac/0x2e0 [ 942.002576][T11980] genl_rcv+0x28/0x40 [ 942.006616][T11980] netlink_unicast+0x751/0x8d0 [ 942.011537][T11980] netlink_sendmsg+0x8d0/0xbf0 [ 942.016640][T11980] ? netlink_getsockopt+0x590/0x590 [ 942.022114][T11980] ? netlink_getsockopt+0x590/0x590 [ 942.027464][T11980] ____sys_sendmsg+0x5ba/0x960 [ 942.032371][T11980] ? __asan_memset+0x22/0x40 [ 942.037104][T11980] ? __sys_sendmsg_sock+0x30/0x30 [ 942.042268][T11980] ? __import_iovec+0x5f2/0x850 [ 942.047213][T11980] ? import_iovec+0x73/0xa0 [ 942.051854][T11980] ___sys_sendmsg+0x2a6/0x360 [ 942.056677][T11980] ? __sys_sendmsg+0x2a0/0x2a0 [ 942.061505][T11980] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 942.067818][T11980] __se_sys_sendmsg+0x1c2/0x2b0 [ 942.073099][T11980] ? __x64_sys_sendmsg+0x80/0x80 [ 942.078144][T11980] ? lockdep_hardirqs_on+0x98/0x150 [ 942.083576][T11980] do_syscall_64+0x55/0xa0 [ 942.088038][T11980] ? clear_bhb_loop+0x40/0x90 [ 942.092760][T11980] ? clear_bhb_loop+0x40/0x90 [ 942.097490][T11980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 942.103609][T11980] RIP: 0033:0x7f3ec199c819 [ 942.108169][T11980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.127995][T11980] RSP: 002b:00007f3ec2814028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 942.136471][T11980] RAX: ffffffffffffffda RBX: 00007f3ec1c15fa0 RCX: 00007f3ec199c819 [ 942.144482][T11980] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 942.152587][T11980] RBP: 00007f3ec1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 942.160865][T11980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.169059][T11980] R13: 00007f3ec1c16038 R14: 00007f3ec1c15fa0 R15: 00007ffe8bbfa378 [ 942.177203][T11980] [ 942.203770][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 942.429094][ T1886] wlan1: Trigger new scan to find an IBSS to join [ 942.435725][ T9384] wlan1: Trigger new scan to find an IBSS to join [ 942.944577][T11994] netlink: 'syz.3.1831': attribute type 10 has an invalid length. [ 943.000669][T11995] netlink: 'syz.1.1829': attribute type 10 has an invalid length. [ 943.442220][ T1886] wlan1: Creating new IBSS network, BSSID 2e:3d:9f:6f:75:22 [ 943.971292][T12008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1833'. [ 943.983868][T12013] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1836'. [ 944.010674][T12013] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1836'. [ 944.032997][T12011] netlink: 'syz.2.1835': attribute type 21 has an invalid length. [ 944.328431][T12017] netlink: 'syz.2.1837': attribute type 2 has an invalid length. [ 944.512497][T12017] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1837'. [ 944.589128][T12017] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 944.620574][T12017] CPU: 1 PID: 12017 Comm: syz.2.1837 Not tainted syzkaller #0 [ 944.628235][T12017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 944.638446][T12017] Call Trace: [ 944.641767][T12017] [ 944.644727][T12017] dump_stack_lvl+0x18c/0x250 [ 944.649648][T12017] ? show_regs_print_info+0x20/0x20 [ 944.655158][T12017] ? load_image+0x420/0x420 [ 944.659826][T12017] sysfs_warn_dup+0x8e/0xa0 [ 944.664587][T12017] sysfs_do_create_link_sd+0xc0/0x110 [ 944.670113][T12017] device_add_class_symlinks+0x1cf/0x240 [ 944.675874][T12017] device_add+0x507/0xc20 [ 944.680280][T12017] wiphy_register+0x1dad/0x2ae0 [ 944.685214][T12017] ? cfg80211_event_work+0x40/0x40 [ 944.690406][T12017] ? minstrel_ht_alloc+0x88a/0x990 [ 944.695694][T12017] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 944.701838][T12017] ieee80211_register_hw+0x3464/0x4250 [ 944.707456][T12017] ? ieee80211_tasklet_handler+0x20/0x20 [ 944.713310][T12017] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 944.719481][T12017] ? __debug_object_init+0xec/0x450 [ 944.725199][T12017] ? __asan_memset+0x22/0x40 [ 944.729851][T12017] ? __hrtimer_init+0x186/0x270 [ 944.734841][T12017] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 944.740643][T12017] ? mac80211_hwsim_free+0x220/0x220 [ 944.746008][T12017] ? rcu_is_watching+0x15/0xb0 [ 944.750924][T12017] ? kstrndup+0xbd/0x140 [ 944.755345][T12017] hwsim_new_radio_nl+0xdc9/0x1a90 [ 944.760685][T12017] ? __nla_validate+0x50/0x50 [ 944.765502][T12017] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 944.771968][T12017] ? memset_orig+0x8a/0xac [ 944.776560][T12017] ? __nla_parse+0x40/0x50 [ 944.781032][T12017] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 944.787598][T12017] genl_family_rcv_msg_doit+0x211/0x310 [ 944.793200][T12017] ? end_current_label_crit_section+0x170/0x170 [ 944.799498][T12017] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 944.805541][T12017] ? bpf_lsm_capable+0x9/0x10 [ 944.810377][T12017] ? security_capable+0x89/0xb0 [ 944.815302][T12017] genl_rcv_msg+0x619/0x7a0 [ 944.819942][T12017] ? genl_bind+0x360/0x360 [ 944.824397][T12017] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 944.830452][T12017] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 944.836950][T12017] ? ref_tracker_free+0x690/0x840 [ 944.842157][T12017] netlink_rcv_skb+0x241/0x4d0 [ 944.847152][T12017] ? genl_bind+0x360/0x360 [ 944.851607][T12017] ? netlink_ack+0x1180/0x1180 [ 944.856450][T12017] ? __lock_acquire+0x7d40/0x7d40 [ 944.861615][T12017] ? down_read+0x1ac/0x2e0 [ 944.866075][T12017] genl_rcv+0x28/0x40 [ 944.870107][T12017] netlink_unicast+0x751/0x8d0 [ 944.875015][T12017] netlink_sendmsg+0x8d0/0xbf0 [ 944.880005][T12017] ? netlink_getsockopt+0x590/0x590 [ 944.885258][T12017] ? aa_sock_msg_perm+0x94/0x150 [ 944.890241][T12017] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 944.895669][T12017] ? security_socket_sendmsg+0x80/0xa0 [ 944.901213][T12017] ? netlink_getsockopt+0x590/0x590 [ 944.906542][T12017] ____sys_sendmsg+0x5ba/0x960 [ 944.911473][T12017] ? __asan_memset+0x22/0x40 [ 944.916187][T12017] ? __sys_sendmsg_sock+0x30/0x30 [ 944.921242][T12017] ? __import_iovec+0x5f2/0x850 [ 944.926127][T12017] ? import_iovec+0x73/0xa0 [ 944.930671][T12017] ___sys_sendmsg+0x2a6/0x360 [ 944.935422][T12017] ? __sys_sendmsg+0x2a0/0x2a0 [ 944.940557][T12017] __se_sys_sendmsg+0x1c2/0x2b0 [ 944.945562][T12017] ? __x64_sys_sendmsg+0x80/0x80 [ 944.950558][T12017] ? lockdep_hardirqs_on+0x98/0x150 [ 944.955805][T12017] do_syscall_64+0x55/0xa0 [ 944.960262][T12017] ? clear_bhb_loop+0x40/0x90 [ 944.965080][T12017] ? clear_bhb_loop+0x40/0x90 [ 944.969812][T12017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 944.975877][T12017] RIP: 0033:0x7fea0519c819 [ 944.980354][T12017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.000732][T12017] RSP: 002b:00007fea05fe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.009204][T12017] RAX: ffffffffffffffda RBX: 00007fea05415fa0 RCX: 00007fea0519c819 [ 945.017920][T12017] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 945.026037][T12017] RBP: 00007fea05232c91 R08: 0000000000000000 R09: 0000000000000000 [ 945.034252][T12017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.042273][T12017] R13: 00007fea05416038 R14: 00007fea05415fa0 R15: 00007ffe2f267d68 [ 945.050301][T12017] [ 945.187331][T12020] netlink: 'syz.1.1838': attribute type 10 has an invalid length. [ 945.269477][T12023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1839'. [ 945.305036][T12023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1839'. [ 945.398674][ T6677] wlan1: Trigger new scan to find an IBSS to join [ 947.189864][T12034] netlink: 'syz.2.1842': attribute type 2 has an invalid length. [ 947.393259][ T1886] wlan1: Trigger new scan to find an IBSS to join [ 947.394594][T12034] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1842'. [ 947.512676][T12034] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 947.560904][T12034] CPU: 0 PID: 12034 Comm: syz.2.1842 Not tainted syzkaller #0 [ 947.568569][T12034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 947.578777][T12034] Call Trace: [ 947.582132][T12034] [ 947.585263][T12034] dump_stack_lvl+0x18c/0x250 [ 947.590024][T12034] ? show_regs_print_info+0x20/0x20 [ 947.595309][T12034] ? load_image+0x420/0x420 [ 947.599890][T12034] sysfs_warn_dup+0x8e/0xa0 [ 947.604550][T12034] sysfs_do_create_link_sd+0xc0/0x110 [ 947.610075][T12034] device_add_class_symlinks+0x1cf/0x240 [ 947.615876][T12034] device_add+0x507/0xc20 [ 947.620276][T12034] wiphy_register+0x1dad/0x2ae0 [ 947.625199][T12034] ? cfg80211_event_work+0x40/0x40 [ 947.630364][T12034] ? minstrel_ht_alloc+0x88a/0x990 [ 947.635559][T12034] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 947.641699][T12034] ieee80211_register_hw+0x3464/0x4250 [ 947.647292][T12034] ? ieee80211_tasklet_handler+0x20/0x20 [ 947.652982][T12034] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 947.658939][T12034] ? __debug_object_init+0xec/0x450 [ 947.664294][T12034] ? __asan_memset+0x22/0x40 [ 947.668950][T12034] ? __hrtimer_init+0x186/0x270 [ 947.673953][T12034] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 947.679862][T12034] ? mac80211_hwsim_free+0x220/0x220 [ 947.685297][T12034] ? rcu_is_watching+0x15/0xb0 [ 947.690402][T12034] ? kstrndup+0xbd/0x140 [ 947.694778][T12034] hwsim_new_radio_nl+0xdc9/0x1a90 [ 947.700144][T12034] ? __nla_validate+0x50/0x50 [ 947.705153][T12034] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 947.711568][T12034] ? __nla_parse+0x40/0x50 [ 947.716145][T12034] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 947.722731][T12034] genl_family_rcv_msg_doit+0x211/0x310 [ 947.728359][T12034] ? end_current_label_crit_section+0x170/0x170 [ 947.734723][T12034] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 947.740695][T12034] ? bpf_lsm_capable+0x9/0x10 [ 947.745619][T12034] ? security_capable+0x89/0xb0 [ 947.750562][T12034] genl_rcv_msg+0x619/0x7a0 [ 947.755438][T12034] ? genl_bind+0x360/0x360 [ 947.760219][T12034] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 947.766667][T12034] netlink_rcv_skb+0x241/0x4d0 [ 947.771607][T12034] ? genl_bind+0x360/0x360 [ 947.776106][T12034] ? netlink_ack+0x1180/0x1180 [ 947.781147][T12034] ? __lock_acquire+0x7d40/0x7d40 [ 947.786458][T12034] ? down_read+0x1ac/0x2e0 [ 947.791129][T12034] genl_rcv+0x28/0x40 [ 947.795179][T12034] netlink_unicast+0x751/0x8d0 [ 947.800181][T12034] netlink_sendmsg+0x8d0/0xbf0 [ 947.805227][T12034] ? netlink_getsockopt+0x590/0x590 [ 947.810589][T12034] ? aa_sock_msg_perm+0x94/0x150 [ 947.815714][T12034] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 947.821198][T12034] ? security_socket_sendmsg+0x80/0xa0 [ 947.826738][T12034] ? netlink_getsockopt+0x590/0x590 [ 947.832022][T12034] ____sys_sendmsg+0x5ba/0x960 [ 947.836921][T12034] ? __asan_memset+0x22/0x40 [ 947.841590][T12034] ? __sys_sendmsg_sock+0x30/0x30 [ 947.846771][T12034] ? __import_iovec+0x5f2/0x850 [ 947.851712][T12034] ? import_iovec+0x73/0xa0 [ 947.856298][T12034] ___sys_sendmsg+0x2a6/0x360 [ 947.861057][T12034] ? __sys_sendmsg+0x2a0/0x2a0 [ 947.865961][T12034] __se_sys_sendmsg+0x1c2/0x2b0 [ 947.870951][T12034] ? __x64_sys_sendmsg+0x80/0x80 [ 947.876080][T12034] ? lockdep_hardirqs_on+0x98/0x150 [ 947.881507][T12034] do_syscall_64+0x55/0xa0 [ 947.886118][T12034] ? clear_bhb_loop+0x40/0x90 [ 947.890978][T12034] ? clear_bhb_loop+0x40/0x90 [ 947.895777][T12034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.901955][T12034] RIP: 0033:0x7fea0519c819 [ 947.906454][T12034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.926487][T12034] RSP: 002b:00007fea05fe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 947.935213][T12034] RAX: ffffffffffffffda RBX: 00007fea05415fa0 RCX: 00007fea0519c819 [ 947.943532][T12034] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 947.951741][T12034] RBP: 00007fea05232c91 R08: 0000000000000000 R09: 0000000000000000 [ 947.959878][T12034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.968002][T12034] R13: 00007fea05416038 R14: 00007fea05415fa0 R15: 00007ffe2f267d68 [ 947.976152][T12034] [ 948.169933][T12040] netlink: 'syz.3.1844': attribute type 10 has an invalid length. [ 948.472441][T12045] netlink: 'syz.2.1846': attribute type 10 has an invalid length. [ 948.587261][T12047] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1847'. [ 948.637634][T12047] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1847'. [ 948.801025][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1848'. [ 948.867887][ T6677] wlan1: Creating new IBSS network, BSSID 96:4a:7a:cf:e4:b0 [ 949.385348][ T6677] wlan1: Trigger new scan to find an IBSS to join [ 949.785870][T12061] netlink: 'syz.1.1849': attribute type 10 has an invalid length. [ 950.374210][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1852'. [ 950.633206][T12073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1854'. [ 952.443876][ T49] wlan1: Trigger new scan to find an IBSS to join [ 952.798105][T12090] netlink: 'syz.2.1858': attribute type 10 has an invalid length. [ 953.522504][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1861'. [ 953.571626][T12099] netlink: 'syz.3.1860': attribute type 10 has an invalid length. [ 954.190256][T12107] netlink: 'syz.2.1863': attribute type 10 has an invalid length. [ 956.422127][ T6677] wlan1: Trigger new scan to find an IBSS to join [ 956.429987][ T5864] wlan1: Trigger new scan to find an IBSS to join [ 957.201904][T12121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1876'. [ 957.266048][T12124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1868'. [ 957.423844][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1867'. [ 957.904083][ T5851] wlan1: Creating new IBSS network, BSSID 46:30:f5:80:8a:fd [ 957.978422][ T9384] ------------[ cut here ]------------ [ 957.984848][ T9384] WARNING: CPU: 0 PID: 9384 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 957.995428][ T9384] Modules linked in: [ 957.999501][ T9384] CPU: 0 PID: 9384 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 958.007600][ T9384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 958.018623][ T9384] Workqueue: cfg80211 cfg80211_event_work [ 958.024690][ T9384] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 958.031152][ T9384] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 d5 a0 f7 0f 0b eb bb e8 0e d5 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 00 d5 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 958.051684][ T9384] RSP: 0018:ffffc9000fa97a20 EFLAGS: 00010293 [ 958.058214][ T9384] RAX: ffffffff89e64cc2 RBX: dffffc0000000000 RCX: ffff88807a7b1e00 [ 958.067216][ T9384] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8de0 [ 958.075777][ T9384] RBP: ffffc9000fa97af8 R08: ffffffff911c456f R09: 1ffffffff22388ad [ 958.084586][ T9384] R10: dffffc0000000000 R11: fffffbfff22388ae R12: ffff88805a860c90 [ 958.093204][ T9384] R13: 1ffff92001f52f4c R14: ffff88807c9f35b8 R15: 000000000000001e [ 958.101800][ T9384] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 958.111326][ T9384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.118542][ T9384] CR2: 0000001b3021bff8 CR3: 000000005fdc7000 CR4: 00000000003506f0 [ 958.127151][ T9384] Call Trace: [ 958.130580][ T9384] [ 958.133582][ T9384] ? mutex_lock_nested+0x20/0x20 [ 958.138582][ T9384] ? trace_rdev_return_void+0x1c0/0x1c0 [ 958.144353][ T9384] cfg80211_process_wdev_events+0x3bc/0x550 [ 958.150444][ T9384] cfg80211_process_rdev_events+0xa1/0x110 [ 958.156606][ T9384] cfg80211_event_work+0x2f/0x40 [ 958.161696][ T9384] ? process_scheduled_works+0x96f/0x15d0 [ 958.168411][ T9384] process_scheduled_works+0xa5d/0x15d0 [ 958.174364][ T9384] ? worker_attach_to_pool+0x380/0x380 [ 958.179915][ T9384] ? assign_work+0x3d2/0x5d0 [ 958.184988][ T9384] worker_thread+0xa55/0xfc0 [ 958.189849][ T9384] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 958.196148][ T9384] ? _raw_spin_unlock+0x40/0x40 [ 958.201293][ T9384] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 958.207635][ T9384] kthread+0x2fa/0x390 [ 958.211950][ T9384] ? pr_cont_work+0x560/0x560 [ 958.216977][ T9384] ? kthread_blkcg+0xd0/0xd0 [ 958.222167][ T9384] ret_from_fork+0x48/0x80 [ 958.226763][ T9384] ? kthread_blkcg+0xd0/0xd0 [ 958.232052][ T9384] ret_from_fork_asm+0x11/0x20 [ 958.236935][ T9384] [ 958.240074][ T9384] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 958.247523][ T9384] CPU: 0 PID: 9384 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 958.255410][ T9384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 958.265682][ T9384] Workqueue: cfg80211 cfg80211_event_work [ 958.271458][ T9384] Call Trace: [ 958.274875][ T9384] [ 958.277951][ T9384] dump_stack_lvl+0x18c/0x250 [ 958.282874][ T9384] ? show_regs_print_info+0x20/0x20 [ 958.288337][ T9384] ? load_image+0x420/0x420 [ 958.293014][ T9384] panic+0x2dc/0x730 [ 958.296965][ T9384] ? bpf_jit_dump+0xd0/0xd0 [ 958.301801][ T9384] ? ret_from_fork_asm+0x11/0x20 [ 958.306990][ T9384] __warn+0x2e0/0x470 [ 958.311405][ T9384] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 958.317323][ T9384] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 958.323074][ T9384] report_bug+0x2be/0x4f0 [ 958.327748][ T9384] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 958.333346][ T9384] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 958.339157][ T9384] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 958.344844][ T9384] handle_bug+0xcf/0x120 [ 958.349140][ T9384] exc_invalid_op+0x1a/0x50 [ 958.353776][ T9384] asm_exc_invalid_op+0x1a/0x20 [ 958.358857][ T9384] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 958.365320][ T9384] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 d5 a0 f7 0f 0b eb bb e8 0e d5 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 00 d5 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 958.385429][ T9384] RSP: 0018:ffffc9000fa97a20 EFLAGS: 00010293 [ 958.391639][ T9384] RAX: ffffffff89e64cc2 RBX: dffffc0000000000 RCX: ffff88807a7b1e00 [ 958.399908][ T9384] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8de0 [ 958.408440][ T9384] RBP: ffffc9000fa97af8 R08: ffffffff911c456f R09: 1ffffffff22388ad [ 958.417443][ T9384] R10: dffffc0000000000 R11: fffffbfff22388ae R12: ffff88805a860c90 [ 958.426447][ T9384] R13: 1ffff92001f52f4c R14: ffff88807c9f35b8 R15: 000000000000001e [ 958.434825][ T9384] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 958.441058][ T9384] ? mutex_lock_nested+0x20/0x20 [ 958.446380][ T9384] ? trace_rdev_return_void+0x1c0/0x1c0 [ 958.452163][ T9384] cfg80211_process_wdev_events+0x3bc/0x550 [ 958.458198][ T9384] cfg80211_process_rdev_events+0xa1/0x110 [ 958.464571][ T9384] cfg80211_event_work+0x2f/0x40 [ 958.469806][ T9384] ? process_scheduled_works+0x96f/0x15d0 [ 958.475568][ T9384] process_scheduled_works+0xa5d/0x15d0 [ 958.481263][ T9384] ? worker_attach_to_pool+0x380/0x380 [ 958.486892][ T9384] ? assign_work+0x3d2/0x5d0 [ 958.491621][ T9384] worker_thread+0xa55/0xfc0 [ 958.496426][ T9384] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 958.502509][ T9384] ? _raw_spin_unlock+0x40/0x40 [ 958.507742][ T9384] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 958.513798][ T9384] kthread+0x2fa/0x390 [ 958.518169][ T9384] ? pr_cont_work+0x560/0x560 [ 958.522973][ T9384] ? kthread_blkcg+0xd0/0xd0 [ 958.527690][ T9384] ret_from_fork+0x48/0x80 [ 958.532158][ T9384] ? kthread_blkcg+0xd0/0xd0 [ 958.536874][ T9384] ret_from_fork_asm+0x11/0x20 [ 958.541686][ T9384] [ 958.544878][ T9384] Kernel Offset: disabled [ 958.549302][ T9384] Rebooting in 86400 seconds..