last executing test programs: 4.682654243s ago: executing program 3 (id=7470): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x14) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 3.522644903s ago: executing program 0 (id=7479): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x4a}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2122) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}, 0x48844) 3.2555382s ago: executing program 2 (id=7482): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff7, 0x8}, 0x4000, 0x0, 0xfffffff8, 0x9, 0xb0, 0x20000005, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') 1.761724062s ago: executing program 2 (id=7484): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x185, 0xfffffffc, 0x9, 0xb0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff80, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x8000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffba, 0x3}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.731883948s ago: executing program 0 (id=7485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffff9, 0x3}, 0x4044, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) close(r3) 1.623378061s ago: executing program 2 (id=7487): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/378], &(0x7f0000000140)='syzkaller\x00', 0x80, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x40, 0x3, 0x4, 0x6, 0x0, 0x1, 0x40911, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfffffffffffffffb}, 0x0, 0x7, 0x9, 0x6, 0x2, 0xab4, 0x88, 0x0, 0x7fff, 0x0, 0x7f}, r1, 0x10000000b, r0, 0x4) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8002, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) 1.588628109s ago: executing program 3 (id=7488): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) 1.520854413s ago: executing program 0 (id=7489): r0 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xae, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be3f9cbb2623032, @perf_config_ext={0x5}, 0x402, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x5f, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 1.426477454s ago: executing program 3 (id=7491): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.337334233s ago: executing program 1 (id=7492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f00000029c0)=ANY=[], 0xffdd) 1.278437346s ago: executing program 2 (id=7493): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_bp={0x0, 0x8}, 0x100e68, 0x1, 0x4000, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) close(r2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r5], 0x9a) 1.150828563s ago: executing program 3 (id=7494): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}], 0x20}, 0x4048010) perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x3, 0x2, 0x1, 0x6, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x65ca, 0x6, @perf_config_ext={0x0, 0x8}, 0x4280, 0x0, 0x6904, 0x5, 0xa, 0x7, 0x2, 0x0, 0x575, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x18) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7490, 0xae2}, 0x0, 0x10000000c8, 0x0, 0x0, 0x5, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_int(r3, &(0x7f0000000340)=0x101, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) 1.098450354s ago: executing program 3 (id=7495): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x7517b848e3928d1e, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x40047438, 0x110e22fff6) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r4}, 0x8) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000300)={'wlan0\x00', 0x100}) openat$cgroup_freezer_state(r5, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x3}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, @perf_config_ext={0x81, 0x100000000}, 0x110000, 0x0, 0x6ee9, 0x8, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='1-', @ANYRESOCT], 0x31) 1.005066654s ago: executing program 1 (id=7496): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000380)={'veth0_to_bond\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x600000000000}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_pid(r3, &(0x7f0000000500)=0xffffffffffffffff, 0x12) 1.004843054s ago: executing program 2 (id=7497): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x8c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x94f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'sit0\x00', @random="3f00230c1100"}) 891.006839ms ago: executing program 1 (id=7498): unlink(&(0x7f0000002000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0xc800, 0x40, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x101}, 0x4146}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_config_ext={0x1, 0x80000de}, 0x0, 0xc8, 0x0, 0x7, 0x4000000004, 0x2, 0x13, 0x0, 0x20, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) close(r1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x9e, 0x1, 0x0, 0x0, 0x3, 0x800, 0x0, 0x0, 0x0, 0x80000000000}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200fc00"/31], 0xfdef) 882.99691ms ago: executing program 0 (id=7499): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xaf, 0xc001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4be3f9cbb2623032, @perf_config_ext={0x8}, 0x402, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x5f, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000600), 0x12) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x8, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x84, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 810.598286ms ago: executing program 2 (id=7500): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc022, 0x2}, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)="e700", 0x2}], 0x1}, 0x4000001) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 792.86612ms ago: executing program 1 (id=7501): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 641.784683ms ago: executing program 0 (id=7502): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) perf_event_open(&(0x7f0000000680)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa15}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x400, 0x0, 0x0, 0x8, 0x7, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x40}, 0x40000002) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 639.114223ms ago: executing program 1 (id=7503): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, 0x0, 0x241, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x1}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002200)={r0, &(0x7f0000001100), &(0x7f0000002100)=""/216}, 0x20) write$cgroup_int(r0, &(0x7f0000000600), 0x12) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x84, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x8, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x3d, 'net_cls'}, {0x2d, 'perf_event'}, {0x2b, 'cpu'}]}, 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 322.001401ms ago: executing program 0 (id=7504): socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\x8ac{\x8c\x8ffp`-\xcd\xf6jj\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\xce(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT.U\xb9\xb5\xdcB\x91\xc9v+\x1c\x15\xbc\f*dr8\xc5~\x98\xcc\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xafK\xc2\x85\xa7\x16\xb6\xeb %`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbf\x89m\x17\n\xf0j\xe1\xf6R\xeb\x961\xbd\x13?Cy%,\xe5\n\xc1\xb3\xa4\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbfo\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xbb\x04\x00\x00\x00\x00XQ\xf4\x7f\xb5\xb7\x00\x00\x00\x00\x00\x00') r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x60004, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) close(0xffffffffffffffff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socketpair(0x22, 0x1, 0x0, &(0x7f0000000180)) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x10, 0x3, 0xe, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000a40)={&(0x7f0000000500)="d23d95f09907e06d5ff89352a80b3f6fe99188be824ceebbfcb38655a8cb3de3dfbc30047b296f0b37b085f178886b706b913350359f547b15628d8873b9a08d6cdb6eea75b62224469f2b4b5a2154172c7eb1320a03d5022214cdc19747b9ba15b111", &(0x7f0000000600)=""/58, &(0x7f0000000780)="c80153a8e0c877c1a4f984eef56075bc05b145f5feaf78402d544858e5940d6ccc80f142c2656fa3b3b1cddb113cc707b97e02f711983a513320b385aae90e0a6b819a62c751054f979fba43e8543aa482d06976a707a2aedfcabadf02e1058f59760fe009b00c51f3f232db816daa489f65a1258ef41b3bd069904f85825967a6a49be1d3f41cbdbb206158e24f124509c333d79e58c025eb2a5b842c7f770291ef5828bcc0039fd45b7ee3080671982f7dcba8895034aa6e60f638958372d9a04d8acbc03341ad94373d71c0d4116bcac0a51765650a08f2a5665d1f9c5e9df05329718b7a81ab80f8ce4fbcad34", &(0x7f0000000940)="33c5cabf658019225abf3392ddc920d2099ee2bb4495b97a461ab28a1f2669085c8cc30e426cfdff01e3a26f17e99f", 0x1, r2, 0x4}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r5], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'team_slave_0\x00', @multicast}) close(r0) 184.985361ms ago: executing program 1 (id=7505): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef2685634a8270e7123c00000000000000000000000000ac1414cf14"], 0xffdd) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 3 (id=7506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000b5000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) kernel console output (not intermixed with test programs): 1] dump_stack_lvl+0x18c/0x250 [ 2265.387248][T28351] ? show_regs_print_info+0x20/0x20 [ 2265.392484][T28351] ? load_image+0x420/0x420 [ 2265.397067][T28351] sysfs_warn_dup+0x8e/0xa0 [ 2265.401591][T28351] sysfs_do_create_link_sd+0xc0/0x110 [ 2265.406976][T28351] device_add_class_symlinks+0x1cf/0x240 [ 2265.412656][T28351] device_add+0x4f9/0xc40 [ 2265.417025][T28351] wiphy_register+0x1d99/0x2ac0 [ 2265.421905][T28351] ? cfg80211_event_work+0x40/0x40 [ 2265.427027][T28351] ? minstrel_ht_alloc+0x88a/0x990 [ 2265.432331][T28351] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2265.438417][T28351] ieee80211_register_hw+0x2dd8/0x3b30 [ 2265.443910][T28351] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2265.449491][T28351] ? ieee80211_tasklet_handler+0x20/0x20 [ 2265.455147][T28351] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2265.461053][T28351] ? __debug_object_init+0xec/0x450 [ 2265.466294][T28351] ? __asan_memset+0x22/0x40 [ 2265.470936][T28351] ? __hrtimer_init+0x189/0x270 [ 2265.475802][T28351] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2265.481547][T28351] ? mac80211_hwsim_free+0x220/0x220 [ 2265.486842][T28351] ? rcu_is_watching+0x15/0xb0 [ 2265.491635][T28351] ? kstrndup+0xbd/0x140 [ 2265.495897][T28351] hwsim_new_radio_nl+0xdad/0x1a70 [ 2265.501022][T28351] ? __nla_validate+0x50/0x50 [ 2265.505722][T28351] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2265.512102][T28351] ? __nla_parse+0x40/0x50 [ 2265.516603][T28351] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2265.523051][T28351] genl_family_rcv_msg_doit+0x21a/0x310 [ 2265.528618][T28351] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2265.534551][T28351] ? bpf_lsm_capable+0x9/0x10 [ 2265.539260][T28351] ? security_capable+0x89/0xb0 [ 2265.544131][T28351] genl_rcv_msg+0x611/0x7a0 [ 2265.548649][T28351] ? genl_bind+0x360/0x360 [ 2265.553073][T28351] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2265.559425][T28351] ? lockdep_hardirqs_on+0x98/0x150 [ 2265.564731][T28351] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2265.570930][T28351] netlink_rcv_skb+0x235/0x4c0 [ 2265.575704][T28351] ? genl_bind+0x360/0x360 [ 2265.580135][T28351] ? netlink_ack+0x1160/0x1160 [ 2265.584932][T28351] ? __lock_acquire+0x7d80/0x7d80 [ 2265.590066][T28351] ? down_read+0x1ac/0x2e0 [ 2265.594495][T28351] genl_rcv+0x28/0x40 [ 2265.598496][T28351] netlink_unicast+0x7b1/0x930 [ 2265.603303][T28351] netlink_sendmsg+0x8d0/0xbf0 [ 2265.608089][T28351] ? lockdep_hardirqs_on+0x98/0x150 [ 2265.613344][T28351] ? netlink_getsockopt+0x590/0x590 [ 2265.618610][T28351] ? security_socket_sendmsg+0x45/0xa0 [ 2265.624125][T28351] ? security_socket_sendmsg+0x80/0xa0 [ 2265.629698][T28351] ? netlink_getsockopt+0x590/0x590 [ 2265.634918][T28351] ____sys_sendmsg+0x61b/0x980 [ 2265.639715][T28351] ? __asan_memset+0x22/0x40 [ 2265.644335][T28351] ? __sys_sendmsg_sock+0x30/0x30 [ 2265.649419][T28351] ? __import_iovec+0x5f2/0x850 [ 2265.654302][T28351] ? import_iovec+0x73/0xa0 [ 2265.658846][T28351] ___sys_sendmsg+0x2a6/0x360 [ 2265.663563][T28351] ? __sys_sendmsg+0x2b0/0x2b0 [ 2265.668386][T28351] ? ktime_get+0x7f/0x280 [ 2265.672765][T28351] __se_sys_sendmsg+0x1d0/0x2c0 [ 2265.677672][T28351] ? perf_trace_preemptirq_template+0x269/0x330 [ 2265.683985][T28351] ? __x64_sys_sendmsg+0x80/0x80 [ 2265.689015][T28351] ? lockdep_hardirqs_on+0x98/0x150 [ 2265.694283][T28351] do_syscall_64+0x55/0xb0 [ 2265.698724][T28351] ? clear_bhb_loop+0x40/0x90 [ 2265.703427][T28351] ? clear_bhb_loop+0x40/0x90 [ 2265.708128][T28351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2265.714043][T28351] RIP: 0033:0x7f4d9239e159 [ 2265.718486][T28351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2265.738122][T28351] RSP: 002b:00007f4d905f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2265.746577][T28351] RAX: ffffffffffffffda RBX: 00007f4d92625fa0 RCX: 00007f4d9239e159 [ 2265.754742][T28351] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2265.762736][T28351] RBP: 00007f4d9243506b R08: 0000000000000000 R09: 0000000000000000 [ 2265.770733][T28351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2265.778718][T28351] R13: 00007f4d92626038 R14: 00007f4d92625fa0 R15: 00007ffffb0a5a98 [ 2265.786728][T28351] [ 2266.302082][T28367] netlink: 'syz.2.7060': attribute type 8 has an invalid length. [ 2266.309903][T28367] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7060'. [ 2266.534826][T28371] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.7062'. [ 2266.606625][T28371] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.7062'. [ 2266.621907][T28371] tipc: Started in network mode [ 2266.628048][T28371] tipc: Node identity b, cluster identity 73 [ 2266.641745][T28371] tipc: Node number set to 11 [ 2267.149291][T28379] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7064'. [ 2267.182952][T28379] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7064'. [ 2267.264850][T28379] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7064'. [ 2267.803113][T28386] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7067'. [ 2267.917365][T28386] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2267.980916][T28386] CPU: 0 PID: 28386 Comm: syz.2.7067 Not tainted syzkaller #0 [ 2267.988464][T28386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2267.998577][T28386] Call Trace: [ 2268.001881][T28386] [ 2268.004832][T28386] dump_stack_lvl+0x18c/0x250 [ 2268.009542][T28386] ? show_regs_print_info+0x20/0x20 [ 2268.015218][T28386] ? load_image+0x420/0x420 [ 2268.019783][T28386] sysfs_warn_dup+0x8e/0xa0 [ 2268.024325][T28386] sysfs_do_create_link_sd+0xc0/0x110 [ 2268.029850][T28386] device_add_class_symlinks+0x1cf/0x240 [ 2268.035543][T28386] device_add+0x4f9/0xc40 [ 2268.039902][T28386] wiphy_register+0x1d99/0x2ac0 [ 2268.044796][T28386] ? cfg80211_event_work+0x40/0x40 [ 2268.049928][T28386] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2268.056114][T28386] ieee80211_register_hw+0x2dd8/0x3b30 [ 2268.061605][T28386] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2268.067186][T28386] ? ieee80211_tasklet_handler+0x20/0x20 [ 2268.072843][T28386] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2268.078754][T28386] ? __debug_object_init+0xec/0x450 [ 2268.083976][T28386] ? __asan_memset+0x22/0x40 [ 2268.088607][T28386] ? __hrtimer_init+0x189/0x270 [ 2268.093476][T28386] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2268.099247][T28386] ? mac80211_hwsim_free+0x220/0x220 [ 2268.104543][T28386] ? rcu_is_watching+0x15/0xb0 [ 2268.109324][T28386] ? kstrndup+0xbd/0x140 [ 2268.113680][T28386] hwsim_new_radio_nl+0xdad/0x1a70 [ 2268.118805][T28386] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2268.124555][T28386] ? mark_lock+0x94/0x320 [ 2268.128910][T28386] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2268.135282][T28386] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2268.141457][T28386] ? lockdep_hardirqs_on+0x98/0x150 [ 2268.146679][T28386] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2268.152869][T28386] genl_family_rcv_msg_doit+0x21a/0x310 [ 2268.158444][T28386] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2268.164360][T28386] ? bpf_lsm_capable+0x9/0x10 [ 2268.169136][T28386] ? security_capable+0x89/0xb0 [ 2268.174017][T28386] genl_rcv_msg+0x611/0x7a0 [ 2268.178628][T28386] ? genl_bind+0x360/0x360 [ 2268.183065][T28386] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2268.189426][T28386] netlink_rcv_skb+0x235/0x4c0 [ 2268.194217][T28386] ? genl_bind+0x360/0x360 [ 2268.198654][T28386] ? netlink_ack+0x1160/0x1160 [ 2268.203530][T28386] ? __lock_acquire+0x7d80/0x7d80 [ 2268.208891][T28386] ? down_read+0x1ac/0x2e0 [ 2268.213373][T28386] genl_rcv+0x28/0x40 [ 2268.217400][T28386] netlink_unicast+0x7b1/0x930 [ 2268.222229][T28386] netlink_sendmsg+0x8d0/0xbf0 [ 2268.227026][T28386] ? netlink_getsockopt+0x590/0x590 [ 2268.232364][T28386] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2268.237929][T28386] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2268.243235][T28386] ? security_socket_sendmsg+0x80/0xa0 [ 2268.248705][T28386] ? netlink_getsockopt+0x590/0x590 [ 2268.253935][T28386] ____sys_sendmsg+0x61b/0x980 [ 2268.258916][T28386] ? __asan_memset+0x22/0x40 [ 2268.263548][T28386] ? __sys_sendmsg_sock+0x30/0x30 [ 2268.268597][T28386] ? __import_iovec+0x5f2/0x850 [ 2268.273493][T28386] ? import_iovec+0x73/0xa0 [ 2268.278021][T28386] ___sys_sendmsg+0x2a6/0x360 [ 2268.282720][T28386] ? __sys_sendmsg+0x2b0/0x2b0 [ 2268.287629][T28386] ? ktime_get+0x7f/0x280 [ 2268.292201][T28386] __se_sys_sendmsg+0x1d0/0x2c0 [ 2268.297154][T28386] ? perf_trace_preemptirq_template+0x269/0x330 [ 2268.303727][T28386] ? __x64_sys_sendmsg+0x80/0x80 [ 2268.308725][T28386] ? lockdep_hardirqs_on+0x98/0x150 [ 2268.314040][T28386] do_syscall_64+0x55/0xb0 [ 2268.318487][T28386] ? clear_bhb_loop+0x40/0x90 [ 2268.323362][T28386] ? clear_bhb_loop+0x40/0x90 [ 2268.328076][T28386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2268.333996][T28386] RIP: 0033:0x7f596159e159 [ 2268.338458][T28386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2268.358621][T28386] RSP: 002b:00007f596240a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2268.367061][T28386] RAX: ffffffffffffffda RBX: 00007f5961825fa0 RCX: 00007f596159e159 [ 2268.375141][T28386] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2268.383125][T28386] RBP: 00007f596163506b R08: 0000000000000000 R09: 0000000000000000 [ 2268.391115][T28386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2268.399106][T28386] R13: 00007f5961826038 R14: 00007f5961825fa0 R15: 00007ffc3a8495c8 [ 2268.407201][T28386] [ 2268.823319][T28402] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.7073'. [ 2268.842307][T28402] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.7073'. [ 2268.881735][T28402] tipc: Started in network mode [ 2268.895271][T28402] tipc: Node identity b, cluster identity 73 [ 2268.911897][T28402] tipc: Node number set to 11 [ 2268.978274][T28403] netlink: 'syz.2.7071': attribute type 8 has an invalid length. [ 2268.992206][T28403] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7071'. [ 2270.020107][T28421] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2270.030238][T28421] CPU: 0 PID: 28421 Comm: syz.2.7079 Not tainted syzkaller #0 [ 2270.037807][T28421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2270.047956][T28421] Call Trace: [ 2270.051304][T28421] [ 2270.054287][T28421] dump_stack_lvl+0x18c/0x250 [ 2270.059122][T28421] ? show_regs_print_info+0x20/0x20 [ 2270.064373][T28421] ? load_image+0x420/0x420 [ 2270.068970][T28421] sysfs_warn_dup+0x8e/0xa0 [ 2270.073617][T28421] sysfs_do_create_link_sd+0xc0/0x110 [ 2270.079047][T28421] device_add_class_symlinks+0x1cf/0x240 [ 2270.084743][T28421] device_add+0x4f9/0xc40 [ 2270.089168][T28421] wiphy_register+0x1d99/0x2ac0 [ 2270.094139][T28421] ? cfg80211_event_work+0x40/0x40 [ 2270.099303][T28421] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2270.105529][T28421] ? ieee80211_register_hw+0x29bb/0x3b30 [ 2270.111230][T28421] ieee80211_register_hw+0x2dd8/0x3b30 [ 2270.116776][T28421] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2270.122485][T28421] ? ieee80211_tasklet_handler+0x20/0x20 [ 2270.128159][T28421] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2270.134124][T28421] ? __debug_object_init+0xec/0x450 [ 2270.139404][T28421] ? __asan_memset+0x22/0x40 [ 2270.144048][T28421] ? __hrtimer_init+0x189/0x270 [ 2270.148972][T28421] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2270.154816][T28421] ? mac80211_hwsim_free+0x220/0x220 [ 2270.160165][T28421] ? rcu_is_watching+0x15/0xb0 [ 2270.164996][T28421] ? kstrndup+0xbd/0x140 [ 2270.169320][T28421] hwsim_new_radio_nl+0xdad/0x1a70 [ 2270.174606][T28421] ? mark_lock+0x94/0x320 [ 2270.179015][T28421] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2270.185409][T28421] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2270.191619][T28421] ? lockdep_hardirqs_on+0x98/0x150 [ 2270.196863][T28421] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2270.203117][T28421] genl_family_rcv_msg_doit+0x21a/0x310 [ 2270.209276][T28421] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2270.215240][T28421] ? bpf_lsm_capable+0x9/0x10 [ 2270.219956][T28421] ? security_capable+0x89/0xb0 [ 2270.224879][T28421] genl_rcv_msg+0x611/0x7a0 [ 2270.229453][T28421] ? genl_bind+0x360/0x360 [ 2270.234004][T28421] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2270.240389][T28421] ? lockdep_hardirqs_on+0x98/0x150 [ 2270.245643][T28421] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2270.251878][T28421] netlink_rcv_skb+0x235/0x4c0 [ 2270.256706][T28421] ? genl_bind+0x360/0x360 [ 2270.261176][T28421] ? netlink_ack+0x1160/0x1160 [ 2270.266029][T28421] ? __lock_acquire+0x7d80/0x7d80 [ 2270.271131][T28421] ? down_read+0x1ac/0x2e0 [ 2270.275606][T28421] genl_rcv+0x28/0x40 [ 2270.279642][T28421] netlink_unicast+0x7b1/0x930 [ 2270.284491][T28421] netlink_sendmsg+0x8d0/0xbf0 [ 2270.289774][T28421] ? netlink_getsockopt+0x590/0x590 [ 2270.295116][T28421] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2270.300716][T28421] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2270.306045][T28421] ? security_socket_sendmsg+0x80/0xa0 [ 2270.311572][T28421] ? netlink_getsockopt+0x590/0x590 [ 2270.316842][T28421] ____sys_sendmsg+0x61b/0x980 [ 2270.321676][T28421] ? __asan_memset+0x22/0x40 [ 2270.326315][T28421] ? __sys_sendmsg_sock+0x30/0x30 [ 2270.331383][T28421] ? __import_iovec+0x5f2/0x850 [ 2270.336333][T28421] ? import_iovec+0x73/0xa0 [ 2270.340903][T28421] ___sys_sendmsg+0x2a6/0x360 [ 2270.345649][T28421] ? __sys_sendmsg+0x2b0/0x2b0 [ 2270.350640][T28421] __se_sys_sendmsg+0x1d0/0x2c0 [ 2270.355550][T28421] ? __x64_sys_sendmsg+0x80/0x80 [ 2270.360619][T28421] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2270.366577][T28421] do_syscall_64+0x55/0xb0 [ 2270.371395][T28421] ? clear_bhb_loop+0x40/0x90 [ 2270.376125][T28421] ? clear_bhb_loop+0x40/0x90 [ 2270.380865][T28421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2270.386855][T28421] RIP: 0033:0x7f596159e159 [ 2270.391435][T28421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2270.411101][T28421] RSP: 002b:00007f596240a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2270.419566][T28421] RAX: ffffffffffffffda RBX: 00007f5961825fa0 RCX: 00007f596159e159 [ 2270.427578][T28421] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2270.435591][T28421] RBP: 00007f596163506b R08: 0000000000000000 R09: 0000000000000000 [ 2270.443601][T28421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2270.451636][T28421] R13: 00007f5961826038 R14: 00007f5961825fa0 R15: 00007ffc3a8495c8 [ 2270.459714][T28421] [ 2271.095997][T28434] netlink: 'syz.0.7085': attribute type 8 has an invalid length. [ 2271.768900][T28454] __nla_validate_parse: 4 callbacks suppressed [ 2271.768923][T28454] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.7091'. [ 2271.896369][T28454] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.7091'. [ 2272.155712][T28461] delete_channel: no stack [ 2272.457761][T28465] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7094'. [ 2272.509110][T28465] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2272.532215][T28465] CPU: 1 PID: 28465 Comm: syz.1.7094 Not tainted syzkaller #0 [ 2272.539760][T28465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2272.549844][T28465] Call Trace: [ 2272.553146][T28465] [ 2272.556111][T28465] dump_stack_lvl+0x18c/0x250 [ 2272.560864][T28465] ? show_regs_print_info+0x20/0x20 [ 2272.566101][T28465] ? load_image+0x420/0x420 [ 2272.570632][T28465] sysfs_warn_dup+0x8e/0xa0 [ 2272.575229][T28465] sysfs_do_create_link_sd+0xc0/0x110 [ 2272.580613][T28465] device_add_class_symlinks+0x1cf/0x240 [ 2272.586277][T28465] device_add+0x4f9/0xc40 [ 2272.590706][T28465] wiphy_register+0x1d99/0x2ac0 [ 2272.595640][T28465] ? cfg80211_event_work+0x40/0x40 [ 2272.600817][T28465] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2272.606932][T28465] ieee80211_register_hw+0x2dd8/0x3b30 [ 2272.612439][T28465] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2272.618047][T28465] ? ieee80211_tasklet_handler+0x20/0x20 [ 2272.623710][T28465] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2272.629639][T28465] ? __debug_object_init+0xec/0x450 [ 2272.634866][T28465] ? __asan_memset+0x22/0x40 [ 2272.639490][T28465] ? __hrtimer_init+0x189/0x270 [ 2272.644361][T28465] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2272.650149][T28465] ? mac80211_hwsim_free+0x220/0x220 [ 2272.655476][T28465] ? rcu_is_watching+0x15/0xb0 [ 2272.660304][T28465] ? kstrndup+0xbd/0x140 [ 2272.664588][T28465] hwsim_new_radio_nl+0xdad/0x1a70 [ 2272.669837][T28465] ? __nla_validate+0x50/0x50 [ 2272.674558][T28465] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2272.680917][T28465] ? __nla_parse+0x40/0x50 [ 2272.685361][T28465] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2272.691758][T28465] genl_family_rcv_msg_doit+0x21a/0x310 [ 2272.697339][T28465] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2272.703266][T28465] ? bpf_lsm_capable+0x9/0x10 [ 2272.707953][T28465] ? security_capable+0x89/0xb0 [ 2272.712840][T28465] genl_rcv_msg+0x611/0x7a0 [ 2272.717377][T28465] ? genl_bind+0x360/0x360 [ 2272.721910][T28465] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2272.728260][T28465] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 2272.734874][T28465] netlink_rcv_skb+0x235/0x4c0 [ 2272.739660][T28465] ? genl_bind+0x360/0x360 [ 2272.744100][T28465] ? netlink_ack+0x1160/0x1160 [ 2272.748918][T28465] ? down_read+0x1ac/0x2e0 [ 2272.753360][T28465] genl_rcv+0x28/0x40 [ 2272.757408][T28465] netlink_unicast+0x7b1/0x930 [ 2272.762209][T28465] netlink_sendmsg+0x8d0/0xbf0 [ 2272.767000][T28465] ? netlink_getsockopt+0x590/0x590 [ 2272.772225][T28465] ? netlink_getsockopt+0x590/0x590 [ 2272.777447][T28465] ____sys_sendmsg+0x61b/0x980 [ 2272.782237][T28465] ? __asan_memset+0x22/0x40 [ 2272.786849][T28465] ? __sys_sendmsg_sock+0x30/0x30 [ 2272.791899][T28465] ? __import_iovec+0x5f2/0x850 [ 2272.796790][T28465] ? import_iovec+0x73/0xa0 [ 2272.801317][T28465] ___sys_sendmsg+0x2a6/0x360 [ 2272.806024][T28465] ? __sys_sendmsg+0x2b0/0x2b0 [ 2272.810831][T28465] ? ktime_get+0x7f/0x280 [ 2272.815205][T28465] __se_sys_sendmsg+0x1d0/0x2c0 [ 2272.820079][T28465] ? __x64_sys_sendmsg+0x80/0x80 [ 2272.825050][T28465] ? lockdep_hardirqs_on+0x98/0x150 [ 2272.830268][T28465] do_syscall_64+0x55/0xb0 [ 2272.834706][T28465] ? clear_bhb_loop+0x40/0x90 [ 2272.839425][T28465] ? clear_bhb_loop+0x40/0x90 [ 2272.844153][T28465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2272.850081][T28465] RIP: 0033:0x7f4d9239e159 [ 2272.854611][T28465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2272.874243][T28465] RSP: 002b:00007f4d905f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2272.882691][T28465] RAX: ffffffffffffffda RBX: 00007f4d92625fa0 RCX: 00007f4d9239e159 [ 2272.890673][T28465] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2272.898656][T28465] RBP: 00007f4d9243506b R08: 0000000000000000 R09: 0000000000000000 [ 2272.906642][T28465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2272.914623][T28465] R13: 00007f4d92626038 R14: 00007f4d92625fa0 R15: 00007ffffb0a5a98 [ 2272.922627][T28465] [ 2273.101349][T28470] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.7096'. [ 2273.134333][T28470] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.7096'. [ 2273.255952][T28474] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7097'. [ 2273.269521][T28474] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7097'. [ 2273.302648][T28474] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7097'. [ 2273.354023][T28476] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7098'. [ 2274.007076][T28481] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7100'. [ 2274.276017][T28495] FAULT_INJECTION: forcing a failure. [ 2274.276017][T28495] name failslab, interval 1, probability 0, space 0, times 0 [ 2274.301732][T28495] CPU: 0 PID: 28495 Comm: syz.0.7105 Not tainted syzkaller #0 [ 2274.309292][T28495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2274.319400][T28495] Call Trace: [ 2274.322724][T28495] [ 2274.325699][T28495] dump_stack_lvl+0x18c/0x250 [ 2274.330454][T28495] ? show_regs_print_info+0x20/0x20 [ 2274.335723][T28495] ? load_image+0x420/0x420 [ 2274.340303][T28495] ? __might_sleep+0xe0/0xe0 [ 2274.344966][T28495] ? __lock_acquire+0x7d80/0x7d80 [ 2274.350176][T28495] should_fail_ex+0x394/0x4c0 [ 2274.355357][T28495] should_failslab+0x9/0x20 [ 2274.359906][T28495] slab_pre_alloc_hook+0x59/0x300 [ 2274.364999][T28495] ? __request_module+0x2ed/0x600 [ 2274.370070][T28495] ? __request_module+0x2ed/0x600 [ 2274.375148][T28495] __kmem_cache_alloc_node+0x53/0x250 [ 2274.380591][T28495] ? __request_module+0x2ed/0x600 [ 2274.385653][T28495] __kmalloc_node_track_caller+0xa4/0x230 [ 2274.391432][T28495] kstrdup+0x3b/0x80 [ 2274.395381][T28495] __request_module+0x2ed/0x600 [ 2274.400373][T28495] ? module_enforce_rwx_sections+0x150/0x150 [ 2274.406494][T28495] ? dev_load+0x21/0x1f0 [ 2274.410800][T28495] ? bpf_lsm_capable+0x9/0x10 [ 2274.415529][T28495] ? dev_load+0x21/0x1f0 [ 2274.419809][T28495] dev_load+0x18b/0x1f0 [ 2274.424008][T28495] dev_ioctl+0x384/0x1140 [ 2274.428387][T28495] sock_do_ioctl+0x239/0x310 [ 2274.433060][T28495] ? sock_show_fdinfo+0xb0/0xb0 [ 2274.438001][T28495] sock_ioctl+0x5be/0x7e0 [ 2274.442385][T28495] ? sock_poll+0x3e0/0x3e0 [ 2274.446870][T28495] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2274.451847][T28495] ? security_file_ioctl+0x80/0xa0 [ 2274.457005][T28495] ? sock_poll+0x3e0/0x3e0 [ 2274.461470][T28495] __se_sys_ioctl+0xfd/0x170 [ 2274.466144][T28495] do_syscall_64+0x55/0xb0 [ 2274.470603][T28495] ? clear_bhb_loop+0x40/0x90 [ 2274.475324][T28495] ? clear_bhb_loop+0x40/0x90 [ 2274.480048][T28495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2274.485989][T28495] RIP: 0033:0x7f5904b9e159 [ 2274.490543][T28495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2274.510300][T28495] RSP: 002b:00007f5905b55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2274.518785][T28495] RAX: ffffffffffffffda RBX: 00007f5904e25fa0 RCX: 00007f5904b9e159 [ 2274.526803][T28495] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 2274.534825][T28495] RBP: 00007f5905b55090 R08: 0000000000000000 R09: 0000000000000000 [ 2274.542919][T28495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2274.550939][T28495] R13: 00007f5904e26038 R14: 00007f5904e25fa0 R15: 00007ffd2f8619c8 [ 2274.558992][T28495] [ 2275.369189][T28506] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2275.409574][T28506] CPU: 1 PID: 28506 Comm: syz.0.7108 Not tainted syzkaller #0 [ 2275.417129][T28506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2275.427227][T28506] Call Trace: [ 2275.430622][T28506] [ 2275.433579][T28506] dump_stack_lvl+0x18c/0x250 [ 2275.438281][T28506] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2275.444544][T28506] ? show_regs_print_info+0x20/0x20 [ 2275.449761][T28506] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2275.455962][T28506] sysfs_warn_dup+0x8e/0xa0 [ 2275.460495][T28506] sysfs_do_create_link_sd+0xc0/0x110 [ 2275.465906][T28506] device_add_class_symlinks+0x1cf/0x240 [ 2275.471567][T28506] device_add+0x4f9/0xc40 [ 2275.475919][T28506] wiphy_register+0x1d99/0x2ac0 [ 2275.480896][T28506] ? cfg80211_event_work+0x40/0x40 [ 2275.486038][T28506] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2275.492124][T28506] ieee80211_register_hw+0x2dd8/0x3b30 [ 2275.497699][T28506] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2275.503281][T28506] ? ieee80211_tasklet_handler+0x20/0x20 [ 2275.508943][T28506] ? __asan_memset+0x22/0x40 [ 2275.513562][T28506] ? __hrtimer_init+0x189/0x270 [ 2275.518537][T28506] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2275.524315][T28506] ? mac80211_hwsim_free+0x220/0x220 [ 2275.529639][T28506] hwsim_new_radio_nl+0xdad/0x1a70 [ 2275.534781][T28506] ? mark_lock+0x94/0x320 [ 2275.539143][T28506] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2275.545931][T28506] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2275.552110][T28506] ? lockdep_hardirqs_on+0x98/0x150 [ 2275.557413][T28506] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2275.563623][T28506] genl_family_rcv_msg_doit+0x21a/0x310 [ 2275.569199][T28506] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2275.575207][T28506] ? bpf_lsm_capable+0x9/0x10 [ 2275.579900][T28506] ? security_capable+0x89/0xb0 [ 2275.584796][T28506] genl_rcv_msg+0x611/0x7a0 [ 2275.589949][T28506] ? genl_bind+0x360/0x360 [ 2275.594390][T28506] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2275.600778][T28506] netlink_rcv_skb+0x235/0x4c0 [ 2275.605563][T28506] ? genl_bind+0x360/0x360 [ 2275.610084][T28506] ? netlink_ack+0x1160/0x1160 [ 2275.614890][T28506] ? __lock_acquire+0x7d80/0x7d80 [ 2275.619943][T28506] ? down_read+0x1ac/0x2e0 [ 2275.624385][T28506] genl_rcv+0x28/0x40 [ 2275.628395][T28506] netlink_unicast+0x7b1/0x930 [ 2275.633214][T28506] netlink_sendmsg+0x8d0/0xbf0 [ 2275.638097][T28506] ? netlink_getsockopt+0x590/0x590 [ 2275.643318][T28506] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2275.648886][T28506] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2275.654186][T28506] ? security_socket_sendmsg+0x80/0xa0 [ 2275.659657][T28506] ? netlink_getsockopt+0x590/0x590 [ 2275.664873][T28506] ____sys_sendmsg+0x61b/0x980 [ 2275.669675][T28506] ? __asan_memset+0x22/0x40 [ 2275.674283][T28506] ? __sys_sendmsg_sock+0x30/0x30 [ 2275.679321][T28506] ? __import_iovec+0x5f2/0x850 [ 2275.684218][T28506] ? import_iovec+0x73/0xa0 [ 2275.688745][T28506] ___sys_sendmsg+0x2a6/0x360 [ 2275.693561][T28506] ? __sys_sendmsg+0x2b0/0x2b0 [ 2275.698499][T28506] __se_sys_sendmsg+0x1d0/0x2c0 [ 2275.703378][T28506] ? __x64_sys_sendmsg+0x80/0x80 [ 2275.708374][T28506] ? syscall_enter_from_user_mode+0x32/0x80 [ 2275.714308][T28506] do_syscall_64+0x55/0xb0 [ 2275.718792][T28506] ? clear_bhb_loop+0x40/0x90 [ 2275.723489][T28506] ? clear_bhb_loop+0x40/0x90 [ 2275.728192][T28506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2275.734103][T28506] RIP: 0033:0x7f5904b9e159 [ 2275.738540][T28506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2275.758184][T28506] RSP: 002b:00007f5905b55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2275.766740][T28506] RAX: ffffffffffffffda RBX: 00007f5904e25fa0 RCX: 00007f5904b9e159 [ 2275.774795][T28506] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2275.782802][T28506] RBP: 00007f5904c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2275.790790][T28506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2275.798782][T28506] R13: 00007f5904e26038 R14: 00007f5904e25fa0 R15: 00007ffd2f8619c8 [ 2275.806786][T28506] [ 2276.827213][T13243] Bluetooth: hci3: unexpected event 0x3d length: 15 > 14 [ 2276.986268][T28534] __nla_validate_parse: 5 callbacks suppressed [ 2276.986292][T28534] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.7121'. [ 2277.109244][T28534] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.7121'. [ 2277.372150][T28540] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7123'. [ 2277.447854][T28540] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2277.490274][T28540] CPU: 1 PID: 28540 Comm: syz.1.7123 Not tainted syzkaller #0 [ 2277.497856][T28540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2277.507985][T28540] Call Trace: [ 2277.511499][T28540] [ 2277.514500][T28540] dump_stack_lvl+0x18c/0x250 [ 2277.519262][T28540] ? show_regs_print_info+0x20/0x20 [ 2277.524535][T28540] ? load_image+0x420/0x420 [ 2277.529108][T28540] sysfs_warn_dup+0x8e/0xa0 [ 2277.533661][T28540] sysfs_do_create_link_sd+0xc0/0x110 [ 2277.539166][T28540] device_add_class_symlinks+0x1cf/0x240 [ 2277.544841][T28540] device_add+0x4f9/0xc40 [ 2277.549202][T28540] wiphy_register+0x1d99/0x2ac0 [ 2277.554148][T28540] ? cfg80211_event_work+0x40/0x40 [ 2277.559325][T28540] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2277.565470][T28540] ieee80211_register_hw+0x2dd8/0x3b30 [ 2277.571152][T28540] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2277.576811][T28540] ? ieee80211_tasklet_handler+0x20/0x20 [ 2277.582543][T28540] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2277.588559][T28540] ? __debug_object_init+0xec/0x450 [ 2277.593896][T28540] ? __asan_memset+0x22/0x40 [ 2277.598598][T28540] ? __hrtimer_init+0x189/0x270 [ 2277.603566][T28540] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2277.609466][T28540] ? mac80211_hwsim_free+0x220/0x220 [ 2277.614901][T28540] hwsim_new_radio_nl+0xdad/0x1a70 [ 2277.620134][T28540] ? __nla_validate+0x50/0x50 [ 2277.624956][T28540] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2277.631428][T28540] ? __nla_parse+0x40/0x50 [ 2277.635989][T28540] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2277.642427][T28540] genl_family_rcv_msg_doit+0x21a/0x310 [ 2277.648087][T28540] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2277.654108][T28540] ? bpf_lsm_capable+0x9/0x10 [ 2277.658856][T28540] ? security_capable+0x89/0xb0 [ 2277.663829][T28540] genl_rcv_msg+0x611/0x7a0 [ 2277.668493][T28540] ? genl_bind+0x360/0x360 [ 2277.672991][T28540] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2277.679450][T28540] netlink_rcv_skb+0x235/0x4c0 [ 2277.684324][T28540] ? genl_bind+0x360/0x360 [ 2277.688930][T28540] ? netlink_ack+0x1160/0x1160 [ 2277.693841][T28540] ? __lock_acquire+0x7d80/0x7d80 [ 2277.699005][T28540] ? down_read+0x1ac/0x2e0 [ 2277.703533][T28540] genl_rcv+0x28/0x40 [ 2277.707602][T28540] netlink_unicast+0x7b1/0x930 [ 2277.712543][T28540] netlink_sendmsg+0x8d0/0xbf0 [ 2277.717452][T28540] ? netlink_getsockopt+0x590/0x590 [ 2277.722764][T28540] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2277.728406][T28540] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2277.733776][T28540] ? security_socket_sendmsg+0x80/0xa0 [ 2277.739324][T28540] ? netlink_getsockopt+0x590/0x590 [ 2277.744612][T28540] ____sys_sendmsg+0x61b/0x980 [ 2277.749543][T28540] ? __asan_memset+0x22/0x40 [ 2277.754244][T28540] ? __sys_sendmsg_sock+0x30/0x30 [ 2277.759428][T28540] ? __import_iovec+0x5f2/0x850 [ 2277.764412][T28540] ? import_iovec+0x73/0xa0 [ 2277.769035][T28540] ___sys_sendmsg+0x2a6/0x360 [ 2277.773825][T28540] ? __sys_sendmsg+0x2b0/0x2b0 [ 2277.778876][T28540] __se_sys_sendmsg+0x1d0/0x2c0 [ 2277.783839][T28540] ? __x64_sys_sendmsg+0x80/0x80 [ 2277.788953][T28540] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2277.795150][T28540] do_syscall_64+0x55/0xb0 [ 2277.799675][T28540] ? clear_bhb_loop+0x40/0x90 [ 2277.804439][T28540] ? clear_bhb_loop+0x40/0x90 [ 2277.809220][T28540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2277.815199][T28540] RIP: 0033:0x7f4d9239e159 [ 2277.819692][T28540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2277.839384][T28540] RSP: 002b:00007f4d905f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2277.847897][T28540] RAX: ffffffffffffffda RBX: 00007f4d92625fa0 RCX: 00007f4d9239e159 [ 2277.855952][T28540] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2277.864080][T28540] RBP: 00007f4d9243506b R08: 0000000000000000 R09: 0000000000000000 [ 2277.872206][T28540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2277.880253][T28540] R13: 00007f4d92626038 R14: 00007f4d92625fa0 R15: 00007ffffb0a5a98 [ 2277.888567][T28540] [ 2277.943511][T28548] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7126'. [ 2278.604684][T28556] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7137'. [ 2278.916559][T28571] FAULT_INJECTION: forcing a failure. [ 2278.916559][T28571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2278.941217][T28571] CPU: 1 PID: 28571 Comm: syz.3.7133 Not tainted syzkaller #0 [ 2278.948760][T28571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2278.958852][T28571] Call Trace: [ 2278.962154][T28571] [ 2278.965116][T28571] dump_stack_lvl+0x18c/0x250 [ 2278.969830][T28571] ? show_regs_print_info+0x20/0x20 [ 2278.975060][T28571] ? load_image+0x420/0x420 [ 2278.979621][T28571] ? __might_fault+0xaa/0x120 [ 2278.984359][T28571] ? __lock_acquire+0x7d80/0x7d80 [ 2278.989481][T28571] should_fail_ex+0x394/0x4c0 [ 2278.994229][T28571] _copy_from_iter+0x1cd/0x1290 [ 2278.999146][T28571] ? rep_movs_alternative+0x4a/0x90 [ 2279.004423][T28571] ? copyout_mc+0x70/0x70 [ 2279.008910][T28571] ? copyout_mc+0x70/0x70 [ 2279.013295][T28571] ? __virt_addr_valid+0x10c/0x380 [ 2279.018473][T28571] ? page_copy_sane+0x16a/0x270 [ 2279.023385][T28571] copy_page_from_iter+0x7b/0x100 [ 2279.028480][T28571] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 2279.034340][T28571] unix_dgram_sendmsg+0x659/0x16e0 [ 2279.039510][T28571] ? aa_af_perm+0x330/0x330 [ 2279.044071][T28571] ? unix_dgram_poll+0x680/0x680 [ 2279.049032][T28571] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2279.055476][T28571] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2279.061039][T28571] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2279.066340][T28571] ? security_socket_sendmsg+0x80/0xa0 [ 2279.071815][T28571] ? unix_dgram_poll+0x680/0x680 [ 2279.076773][T28571] ____sys_sendmsg+0x61b/0x980 [ 2279.081564][T28571] ? __asan_memset+0x22/0x40 [ 2279.086172][T28571] ? __sys_sendmsg_sock+0x30/0x30 [ 2279.091226][T28571] ? __import_iovec+0x5f2/0x850 [ 2279.096112][T28571] ? import_iovec+0x73/0xa0 [ 2279.100672][T28571] ___sys_sendmsg+0x2a6/0x360 [ 2279.105393][T28571] ? get_pid_task+0x20/0x1e0 [ 2279.110015][T28571] ? __sys_sendmsg+0x2b0/0x2b0 [ 2279.114817][T28571] ? __lock_acquire+0x7d80/0x7d80 [ 2279.119878][T28571] __se_sys_sendmsg+0x1d0/0x2c0 [ 2279.124748][T28571] ? __x64_sys_sendmsg+0x80/0x80 [ 2279.129721][T28571] ? lockdep_hardirqs_on+0x98/0x150 [ 2279.134936][T28571] do_syscall_64+0x55/0xb0 [ 2279.139374][T28571] ? clear_bhb_loop+0x40/0x90 [ 2279.144072][T28571] ? clear_bhb_loop+0x40/0x90 [ 2279.148775][T28571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2279.154689][T28571] RIP: 0033:0x7febb2d9e159 [ 2279.159121][T28571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2279.178916][T28571] RSP: 002b:00007febb3ccc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2279.187449][T28571] RAX: ffffffffffffffda RBX: 00007febb3025fa0 RCX: 00007febb2d9e159 [ 2279.195449][T28571] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 2279.203444][T28571] RBP: 00007febb3ccc090 R08: 0000000000000000 R09: 0000000000000000 [ 2279.211432][T28571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2279.219508][T28571] R13: 00007febb3026038 R14: 00007febb3025fa0 R15: 00007ffe3aa3fd58 [ 2279.227512][T28571] [ 2279.315870][T28572] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.7132'. [ 2279.332721][T28572] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.7132'. [ 2279.559956][T28584] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7138'. [ 2279.585353][T28584] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2279.594693][T28584] CPU: 1 PID: 28584 Comm: syz.1.7138 Not tainted syzkaller #0 [ 2279.602324][T28584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2279.612458][T28584] Call Trace: [ 2279.615876][T28584] [ 2279.618858][T28584] dump_stack_lvl+0x18c/0x250 [ 2279.623707][T28584] ? show_regs_print_info+0x20/0x20 [ 2279.628968][T28584] ? load_image+0x420/0x420 [ 2279.633526][T28584] sysfs_warn_dup+0x8e/0xa0 [ 2279.638087][T28584] sysfs_do_create_link_sd+0xc0/0x110 [ 2279.643491][T28584] device_add_class_symlinks+0x1cf/0x240 [ 2279.649250][T28584] device_add+0x4f9/0xc40 [ 2279.653708][T28584] wiphy_register+0x1d99/0x2ac0 [ 2279.658629][T28584] ? cfg80211_event_work+0x40/0x40 [ 2279.663774][T28584] ? minstrel_ht_alloc+0x88a/0x990 [ 2279.668951][T28584] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2279.675057][T28584] ieee80211_register_hw+0x2dd8/0x3b30 [ 2279.680584][T28584] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2279.686261][T28584] ? ieee80211_tasklet_handler+0x20/0x20 [ 2279.691932][T28584] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2279.697862][T28584] ? __debug_object_init+0xec/0x450 [ 2279.703100][T28584] ? __asan_memset+0x22/0x40 [ 2279.707744][T28584] ? __hrtimer_init+0x189/0x270 [ 2279.712634][T28584] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2279.718430][T28584] ? mac80211_hwsim_free+0x220/0x220 [ 2279.723748][T28584] ? rcu_is_watching+0x15/0xb0 [ 2279.728697][T28584] ? kstrndup+0xbd/0x140 [ 2279.732992][T28584] hwsim_new_radio_nl+0xdad/0x1a70 [ 2279.738135][T28584] ? mark_lock+0x94/0x320 [ 2279.742504][T28584] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2279.748537][T28584] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2279.754892][T28584] ? lockdep_hardirqs_on+0x98/0x150 [ 2279.760214][T28584] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2279.766423][T28584] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2279.772812][T28584] genl_family_rcv_msg_doit+0x21a/0x310 [ 2279.778397][T28584] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2279.784335][T28584] ? bpf_lsm_capable+0x9/0x10 [ 2279.789031][T28584] ? security_capable+0x89/0xb0 [ 2279.793922][T28584] genl_rcv_msg+0x611/0x7a0 [ 2279.798474][T28584] ? genl_bind+0x360/0x360 [ 2279.802920][T28584] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2279.809293][T28584] ? perf_trace_lock+0x303/0x3b0 [ 2279.814270][T28584] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2279.820493][T28584] netlink_rcv_skb+0x235/0x4c0 [ 2279.825306][T28584] ? genl_bind+0x360/0x360 [ 2279.829756][T28584] ? netlink_ack+0x1160/0x1160 [ 2279.834672][T28584] ? __lock_acquire+0x7d80/0x7d80 [ 2279.839827][T28584] ? down_read+0x1ac/0x2e0 [ 2279.844273][T28584] genl_rcv+0x28/0x40 [ 2279.848284][T28584] netlink_unicast+0x7b1/0x930 [ 2279.853108][T28584] netlink_sendmsg+0x8d0/0xbf0 [ 2279.857913][T28584] ? netlink_getsockopt+0x590/0x590 [ 2279.863153][T28584] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2279.868728][T28584] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2279.874042][T28584] ? security_socket_sendmsg+0x80/0xa0 [ 2279.879539][T28584] ? netlink_getsockopt+0x590/0x590 [ 2279.884767][T28584] ____sys_sendmsg+0x61b/0x980 [ 2279.889557][T28584] ? lockdep_hardirqs_on+0x98/0x150 [ 2279.894786][T28584] ? __asan_memset+0x22/0x40 [ 2279.899576][T28584] ? __sys_sendmsg_sock+0x30/0x30 [ 2279.904622][T28584] ? __import_iovec+0x5f2/0x850 [ 2279.909692][T28584] ? import_iovec+0x73/0xa0 [ 2279.914413][T28584] ___sys_sendmsg+0x2a6/0x360 [ 2279.919135][T28584] ? __sys_sendmsg+0x2b0/0x2b0 [ 2279.924023][T28584] __se_sys_sendmsg+0x1d0/0x2c0 [ 2279.928915][T28584] ? perf_trace_preemptirq_template+0x269/0x330 [ 2279.935188][T28584] ? __x64_sys_sendmsg+0x80/0x80 [ 2279.940196][T28584] ? lockdep_hardirqs_on+0x98/0x150 [ 2279.945428][T28584] do_syscall_64+0x55/0xb0 [ 2279.949875][T28584] ? clear_bhb_loop+0x40/0x90 [ 2279.954577][T28584] ? clear_bhb_loop+0x40/0x90 [ 2279.959286][T28584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2279.965361][T28584] RIP: 0033:0x7f4d9239e159 [ 2279.969803][T28584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2279.989540][T28584] RSP: 002b:00007f4d905f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2279.997984][T28584] RAX: ffffffffffffffda RBX: 00007f4d92625fa0 RCX: 00007f4d9239e159 [ 2280.006074][T28584] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2280.014155][T28584] RBP: 00007f4d9243506b R08: 0000000000000000 R09: 0000000000000000 [ 2280.022238][T28584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2280.030233][T28584] R13: 00007f4d92626038 R14: 00007f4d92625fa0 R15: 00007ffffb0a5a98 [ 2280.038287][T28584] [ 2281.176688][T20900] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2281.186027][T20900] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2281.194988][T20900] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2281.204665][T20900] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2281.213363][T20900] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2281.224378][T20900] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2281.506023][T27392] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2281.586917][T28619] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7149'. [ 2281.758396][T27392] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2281.835930][T28619] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2281.854228][T28619] CPU: 0 PID: 28619 Comm: syz.2.7149 Not tainted syzkaller #0 [ 2281.861808][T28619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2281.871937][T28619] Call Trace: [ 2281.875288][T28619] [ 2281.878295][T28619] dump_stack_lvl+0x18c/0x250 [ 2281.883094][T28619] ? show_regs_print_info+0x20/0x20 [ 2281.888399][T28619] ? load_image+0x420/0x420 [ 2281.893056][T28619] sysfs_warn_dup+0x8e/0xa0 [ 2281.897655][T28619] sysfs_do_create_link_sd+0xc0/0x110 [ 2281.903187][T28619] device_add_class_symlinks+0x1cf/0x240 [ 2281.908922][T28619] device_add+0x4f9/0xc40 [ 2281.913354][T28619] wiphy_register+0x1d99/0x2ac0 [ 2281.918370][T28619] ? cfg80211_event_work+0x40/0x40 [ 2281.923565][T28619] ? minstrel_ht_alloc+0x88a/0x990 [ 2281.928795][T28619] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2281.934978][T28619] ieee80211_register_hw+0x2dd8/0x3b30 [ 2281.940574][T28619] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2281.946249][T28619] ? ieee80211_tasklet_handler+0x20/0x20 [ 2281.951961][T28619] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2281.957950][T28619] ? __debug_object_init+0xec/0x450 [ 2281.963252][T28619] ? __asan_memset+0x22/0x40 [ 2281.967935][T28619] ? __hrtimer_init+0x189/0x270 [ 2281.972895][T28619] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2281.978800][T28619] ? mac80211_hwsim_free+0x220/0x220 [ 2281.984168][T28619] ? rcu_is_watching+0x15/0xb0 [ 2281.989015][T28619] ? kstrndup+0xbd/0x140 [ 2281.993386][T28619] hwsim_new_radio_nl+0xdad/0x1a70 [ 2281.998586][T28619] ? mark_lock+0x94/0x320 [ 2282.003019][T28619] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2282.009228][T28619] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2282.015641][T28619] ? lockdep_hardirqs_on+0x98/0x150 [ 2282.021014][T28619] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2282.027307][T28619] ? genl_family_rcv_msg_doit+0x106/0x310 [ 2282.033137][T28619] ? kasan_check_range+0x89/0x290 [ 2282.038398][T28619] genl_family_rcv_msg_doit+0x21a/0x310 [ 2282.044508][T28619] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2282.050617][T28619] ? bpf_lsm_capable+0x9/0x10 [ 2282.055420][T28619] ? security_capable+0x89/0xb0 [ 2282.060396][T28619] genl_rcv_msg+0x611/0x7a0 [ 2282.065034][T28619] ? genl_bind+0x360/0x360 [ 2282.069545][T28619] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2282.075604][T28619] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2282.082031][T28619] ? ref_tracker_free+0x686/0x830 [ 2282.087179][T28619] netlink_rcv_skb+0x235/0x4c0 [ 2282.092041][T28619] ? genl_bind+0x360/0x360 [ 2282.096555][T28619] ? netlink_ack+0x1160/0x1160 [ 2282.101454][T28619] ? __lock_acquire+0x7d80/0x7d80 [ 2282.106611][T28619] ? down_read+0x1ac/0x2e0 [ 2282.111131][T28619] genl_rcv+0x28/0x40 [ 2282.115191][T28619] netlink_unicast+0x7b1/0x930 [ 2282.120173][T28619] netlink_sendmsg+0x8d0/0xbf0 [ 2282.125069][T28619] ? netlink_getsockopt+0x590/0x590 [ 2282.130368][T28619] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2282.136103][T28619] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2282.141464][T28619] ? security_socket_sendmsg+0x80/0xa0 [ 2282.147014][T28619] ? netlink_getsockopt+0x590/0x590 [ 2282.152308][T28619] ____sys_sendmsg+0x61b/0x980 [ 2282.157209][T28619] ? __asan_memset+0x22/0x40 [ 2282.161919][T28619] ? __sys_sendmsg_sock+0x30/0x30 [ 2282.167040][T28619] ? __import_iovec+0x5f2/0x850 [ 2282.172039][T28619] ? import_iovec+0x73/0xa0 [ 2282.176653][T28619] ___sys_sendmsg+0x2a6/0x360 [ 2282.181436][T28619] ? __sys_sendmsg+0x2b0/0x2b0 [ 2282.186377][T28619] ? ktime_get+0x7f/0x280 [ 2282.190902][T28619] __se_sys_sendmsg+0x1d0/0x2c0 [ 2282.195845][T28619] ? perf_trace_preemptirq_template+0x269/0x330 [ 2282.202186][T28619] ? __x64_sys_sendmsg+0x80/0x80 [ 2282.207307][T28619] ? lockdep_hardirqs_on+0x98/0x150 [ 2282.212604][T28619] do_syscall_64+0x55/0xb0 [ 2282.217110][T28619] ? clear_bhb_loop+0x40/0x90 [ 2282.221874][T28619] ? clear_bhb_loop+0x40/0x90 [ 2282.226642][T28619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2282.232704][T28619] RIP: 0033:0x7f596159e159 [ 2282.237201][T28619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2282.257342][T28619] RSP: 002b:00007f596240a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2282.265883][T28619] RAX: ffffffffffffffda RBX: 00007f5961825fa0 RCX: 00007f596159e159 [ 2282.274031][T28619] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2282.282090][T28619] RBP: 00007f596163506b R08: 0000000000000000 R09: 0000000000000000 [ 2282.290135][T28619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2282.298199][T28619] R13: 00007f5961826038 R14: 00007f5961825fa0 R15: 00007ffc3a8495c8 [ 2282.306318][T28619] [ 2282.454550][T27392] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2282.665261][T28627] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7152'. [ 2282.699105][T27392] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2282.999787][T28607] chnl_net:caif_netlink_parms(): no params data found [ 2283.166518][T27392] tipc: Left network mode [ 2283.284696][T13243] Bluetooth: hci1: command tx timeout [ 2283.381006][T28607] bridge0: port 1(bridge_slave_0) entered blocking state [ 2283.404070][T28607] bridge0: port 1(bridge_slave_0) entered disabled state [ 2283.419492][T28607] bridge_slave_0: entered allmulticast mode [ 2283.427569][T28607] bridge_slave_0: entered promiscuous mode [ 2283.503369][T28607] bridge0: port 2(bridge_slave_1) entered blocking state [ 2283.510743][T28607] bridge0: port 2(bridge_slave_1) entered disabled state [ 2283.540117][T28607] bridge_slave_1: entered allmulticast mode [ 2283.553080][T28607] bridge_slave_1: entered promiscuous mode [ 2283.666624][T28607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2283.694783][T28607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2283.702302][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.710406][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.929324][T28607] team0: Port device team_slave_0 added [ 2283.970941][T28607] team0: Port device team_slave_1 added [ 2284.023837][T28607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2284.041505][T28607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2284.075486][T28607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2284.113243][T28607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2284.122180][T28607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2284.148662][T28607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2284.303099][T28607] hsr_slave_0: entered promiscuous mode [ 2284.314304][T28607] hsr_slave_1: entered promiscuous mode [ 2284.322890][T28607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2284.330504][T28607] Cannot create hsr debugfs directory [ 2284.981094][T27392] hsr0: left allmulticast mode [ 2285.001836][T27392] hsr_slave_0: left allmulticast mode [ 2285.008382][T27392] hsr_slave_1: left allmulticast mode [ 2285.036807][T27392] hsr0: left promiscuous mode [ 2285.041921][T27392] nr0: port 1(hsr0) entered disabled state [ 2285.062077][T27392] hsr_slave_0: left promiscuous mode [ 2285.075264][T27392] hsr_slave_1: left promiscuous mode [ 2285.093703][T27392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2285.101883][T27392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2285.122548][T27392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2285.130030][T27392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2285.146545][T27392] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 2285.153736][T27392] batman_adv: batadv0: Removing interface: virt_wifi0 [ 2285.192735][T27392] veth1_macvtap: left promiscuous mode [ 2285.198371][T27392] veth0_macvtap: left promiscuous mode [ 2285.212089][T27392] veth1_vlan: left promiscuous mode [ 2285.217494][T27392] veth0_vlan: left promiscuous mode [ 2285.351999][T13243] Bluetooth: hci1: command tx timeout [ 2286.103466][T27392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2286.156266][T27392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2286.457594][T27392] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2286.491703][T27392] bond0 (unregistering): Released all slaves [ 2286.998863][T28607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2287.018088][T28607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2287.040021][T28607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2287.058659][T28607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2287.217231][T28607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2287.244659][T28607] 8021q: adding VLAN 0 to HW filter on device team0 [ 2287.267717][T27390] bridge0: port 1(bridge_slave_0) entered blocking state [ 2287.274990][T27390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2287.313773][T27390] bridge0: port 2(bridge_slave_1) entered blocking state [ 2287.320974][T27390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2287.432696][T13243] Bluetooth: hci1: command tx timeout [ 2287.649440][T28607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2287.774450][T28607] veth0_vlan: entered promiscuous mode [ 2287.801286][T28607] veth1_vlan: entered promiscuous mode [ 2287.845746][T28607] veth0_macvtap: entered promiscuous mode [ 2287.858215][T28607] veth1_macvtap: entered promiscuous mode [ 2287.895897][T28607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2287.907961][T28607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.917961][T28607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2287.928643][T28607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.946136][T28607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2287.959976][T28607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2287.976969][T28607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2287.990086][T28607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2288.009141][T28607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2288.019537][T28607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2288.035183][T28607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2288.045579][T28607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2288.063232][T28607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2288.081149][T28607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2288.109773][T28607] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2288.127903][T28607] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2288.137821][T28607] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2288.147159][T28607] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2288.272532][T22956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2288.280428][T22956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2288.320542][T27392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2288.341577][T27392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2288.783978][T28722] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7140'. [ 2289.523891][T13243] Bluetooth: hci1: command tx timeout [ 2289.536775][T28729] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7158'. [ 2289.609717][T28744] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7159'. [ 2289.704094][T28729] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2289.742831][T28729] CPU: 1 PID: 28729 Comm: syz.3.7158 Not tainted syzkaller #0 [ 2289.750401][T28729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2289.760514][T28729] Call Trace: [ 2289.763841][T28729] [ 2289.766801][T28729] dump_stack_lvl+0x18c/0x250 [ 2289.771512][T28729] ? show_regs_print_info+0x20/0x20 [ 2289.776733][T28729] ? load_image+0x420/0x420 [ 2289.781351][T28729] sysfs_warn_dup+0x8e/0xa0 [ 2289.785880][T28729] sysfs_do_create_link_sd+0xc0/0x110 [ 2289.791272][T28729] device_add_class_symlinks+0x1cf/0x240 [ 2289.796930][T28729] device_add+0x4f9/0xc40 [ 2289.801280][T28729] wiphy_register+0x1d99/0x2ac0 [ 2289.806261][T28729] ? cfg80211_event_work+0x40/0x40 [ 2289.811403][T28729] ? minstrel_ht_alloc+0x88a/0x990 [ 2289.816555][T28729] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2289.822642][T28729] ieee80211_register_hw+0x2dd8/0x3b30 [ 2289.828154][T28729] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2289.833817][T28729] ? ieee80211_tasklet_handler+0x20/0x20 [ 2289.839821][T28729] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2289.845741][T28729] ? __debug_object_init+0xec/0x450 [ 2289.850972][T28729] ? __asan_memset+0x22/0x40 [ 2289.855594][T28729] ? __hrtimer_init+0x189/0x270 [ 2289.860553][T28729] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2289.866314][T28729] ? mac80211_hwsim_free+0x220/0x220 [ 2289.871622][T28729] ? kstrndup+0xbd/0x140 [ 2289.875903][T28729] hwsim_new_radio_nl+0xdad/0x1a70 [ 2289.881041][T28729] ? __nla_validate+0x50/0x50 [ 2289.885763][T28729] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2289.892519][T28729] ? __nla_parse+0x24/0x50 [ 2289.896966][T28729] ? __nla_parse+0x40/0x50 [ 2289.901415][T28729] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2289.907863][T28729] genl_family_rcv_msg_doit+0x21a/0x310 [ 2289.913441][T28729] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2289.919359][T28729] ? bpf_lsm_capable+0x9/0x10 [ 2289.924052][T28729] ? security_capable+0x89/0xb0 [ 2289.928929][T28729] genl_rcv_msg+0x611/0x7a0 [ 2289.933461][T28729] ? genl_bind+0x360/0x360 [ 2289.937902][T28729] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2289.944247][T28729] ? lockdep_hardirqs_on+0x98/0x150 [ 2289.949488][T28729] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2289.955689][T28729] netlink_rcv_skb+0x235/0x4c0 [ 2289.960483][T28729] ? genl_bind+0x360/0x360 [ 2289.964929][T28729] ? netlink_ack+0x1160/0x1160 [ 2289.969724][T28729] ? __lock_acquire+0x7d80/0x7d80 [ 2289.974774][T28729] ? down_read+0x1ac/0x2e0 [ 2289.979212][T28729] genl_rcv+0x28/0x40 [ 2289.983212][T28729] netlink_unicast+0x7b1/0x930 [ 2289.988005][T28729] netlink_sendmsg+0x8d0/0xbf0 [ 2289.992821][T28729] ? netlink_getsockopt+0x590/0x590 [ 2289.998102][T28729] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2290.003771][T28729] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2290.009169][T28729] ? security_socket_sendmsg+0x80/0xa0 [ 2290.014643][T28729] ? netlink_getsockopt+0x590/0x590 [ 2290.019965][T28729] ____sys_sendmsg+0x61b/0x980 [ 2290.024757][T28729] ? __asan_memset+0x22/0x40 [ 2290.029369][T28729] ? __sys_sendmsg_sock+0x30/0x30 [ 2290.034414][T28729] ? __import_iovec+0x5f2/0x850 [ 2290.039317][T28729] ? import_iovec+0x73/0xa0 [ 2290.043853][T28729] ___sys_sendmsg+0x2a6/0x360 [ 2290.048731][T28729] ? __sys_sendmsg+0x2b0/0x2b0 [ 2290.053579][T28729] __se_sys_sendmsg+0x1d0/0x2c0 [ 2290.058476][T28729] ? __x64_sys_sendmsg+0x80/0x80 [ 2290.063561][T28729] do_syscall_64+0x55/0xb0 [ 2290.067995][T28729] ? clear_bhb_loop+0x40/0x90 [ 2290.072691][T28729] ? clear_bhb_loop+0x40/0x90 [ 2290.077394][T28729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2290.083311][T28729] RIP: 0033:0x7febb2d9e159 [ 2290.087863][T28729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2290.107569][T28729] RSP: 002b:00007febb3ccc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2290.116002][T28729] RAX: ffffffffffffffda RBX: 00007febb3025fa0 RCX: 00007febb2d9e159 [ 2290.123988][T28729] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2290.131976][T28729] RBP: 00007febb2e3506b R08: 0000000000000000 R09: 0000000000000000 [ 2290.140129][T28729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2290.148112][T28729] R13: 00007febb3026038 R14: 00007febb3025fa0 R15: 00007ffe3aa3fd58 [ 2290.156114][T28729] [ 2290.530083][T28759] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7161'. [ 2290.637774][T28755] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7172'. [ 2290.809962][T28755] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2290.851089][T28755] CPU: 1 PID: 28755 Comm: syz.1.7172 Not tainted syzkaller #0 [ 2290.858640][T28755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2290.868842][T28755] Call Trace: [ 2290.872171][T28755] [ 2290.875150][T28755] dump_stack_lvl+0x18c/0x250 [ 2290.879981][T28755] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2290.886196][T28755] ? show_regs_print_info+0x20/0x20 [ 2290.891444][T28755] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2290.897683][T28755] sysfs_warn_dup+0x8e/0xa0 [ 2290.902262][T28755] sysfs_do_create_link_sd+0xc0/0x110 [ 2290.907709][T28755] device_add_class_symlinks+0x1cf/0x240 [ 2290.913426][T28755] device_add+0x4f9/0xc40 [ 2290.917826][T28755] wiphy_register+0x1d99/0x2ac0 [ 2290.922763][T28755] ? cfg80211_event_work+0x40/0x40 [ 2290.927944][T28755] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2290.934150][T28755] ? ieee80211_register_hw+0x2a24/0x3b30 [ 2290.939822][T28755] ieee80211_register_hw+0x2dd8/0x3b30 [ 2290.945317][T28755] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2290.950913][T28755] ? ieee80211_tasklet_handler+0x20/0x20 [ 2290.956583][T28755] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2290.962511][T28755] ? __debug_object_init+0xec/0x450 [ 2290.967736][T28755] ? __asan_memset+0x22/0x40 [ 2290.972352][T28755] ? __hrtimer_init+0x189/0x270 [ 2290.977240][T28755] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2290.983090][T28755] ? mac80211_hwsim_free+0x220/0x220 [ 2290.988396][T28755] ? rcu_is_watching+0x15/0xb0 [ 2290.993182][T28755] ? kstrndup+0xbd/0x140 [ 2290.997461][T28755] hwsim_new_radio_nl+0xdad/0x1a70 [ 2291.002598][T28755] ? __nla_validate+0x50/0x50 [ 2291.007297][T28755] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2291.013396][T28755] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2291.019783][T28755] ? lockdep_hardirqs_on+0x98/0x150 [ 2291.025013][T28755] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2291.031200][T28755] ? __nla_parse+0x40/0x50 [ 2291.035643][T28755] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2291.042009][T28755] genl_family_rcv_msg_doit+0x21a/0x310 [ 2291.047581][T28755] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2291.053499][T28755] ? bpf_lsm_capable+0x9/0x10 [ 2291.058188][T28755] ? security_capable+0x89/0xb0 [ 2291.063067][T28755] genl_rcv_msg+0x611/0x7a0 [ 2291.067598][T28755] ? genl_bind+0x360/0x360 [ 2291.072120][T28755] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2291.078480][T28755] netlink_rcv_skb+0x235/0x4c0 [ 2291.083266][T28755] ? genl_bind+0x360/0x360 [ 2291.087704][T28755] ? netlink_ack+0x1160/0x1160 [ 2291.092500][T28755] ? __lock_acquire+0x7d80/0x7d80 [ 2291.097551][T28755] ? down_read+0x1ac/0x2e0 [ 2291.101985][T28755] genl_rcv+0x28/0x40 [ 2291.105989][T28755] netlink_unicast+0x7b1/0x930 [ 2291.110779][T28755] netlink_sendmsg+0x8d0/0xbf0 [ 2291.115557][T28755] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2291.121741][T28755] ? netlink_getsockopt+0x590/0x590 [ 2291.126980][T28755] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2291.132285][T28755] ? security_socket_sendmsg+0x80/0xa0 [ 2291.137760][T28755] ? netlink_getsockopt+0x590/0x590 [ 2291.142978][T28755] ____sys_sendmsg+0x61b/0x980 [ 2291.147766][T28755] ? __asan_memset+0x22/0x40 [ 2291.152383][T28755] ? __sys_sendmsg_sock+0x30/0x30 [ 2291.157424][T28755] ? __import_iovec+0x5f2/0x850 [ 2291.162309][T28755] ? import_iovec+0x73/0xa0 [ 2291.166839][T28755] ___sys_sendmsg+0x2a6/0x360 [ 2291.171558][T28755] ? __sys_sendmsg+0x2b0/0x2b0 [ 2291.176391][T28755] __se_sys_sendmsg+0x1d0/0x2c0 [ 2291.181266][T28755] ? __x64_sys_sendmsg+0x80/0x80 [ 2291.186239][T28755] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2291.192155][T28755] do_syscall_64+0x55/0xb0 [ 2291.196592][T28755] ? clear_bhb_loop+0x40/0x90 [ 2291.201289][T28755] ? clear_bhb_loop+0x40/0x90 [ 2291.205985][T28755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2291.211896][T28755] RIP: 0033:0x7f4d9239e159 [ 2291.216340][T28755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2291.236046][T28755] RSP: 002b:00007f4d905f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2291.244566][T28755] RAX: ffffffffffffffda RBX: 00007f4d92625fa0 RCX: 00007f4d9239e159 [ 2291.252554][T28755] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2291.260536][T28755] RBP: 00007f4d9243506b R08: 0000000000000000 R09: 0000000000000000 [ 2291.268519][T28755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2291.276506][T28755] R13: 00007f4d92626038 R14: 00007f4d92625fa0 R15: 00007ffffb0a5a98 [ 2291.284512][T28755] [ 2293.796182][T28764] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7166'. [ 2295.060786][T28781] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.7170'. [ 2295.112599][T28781] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.7170'. [ 2295.879711][T28806] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.7177'. [ 2296.012550][T28806] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.7177'. [ 2296.387446][T28812] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7179'. [ 2296.565185][T28814] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7180'. [ 2296.649335][T28814] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2296.668149][T28814] CPU: 1 PID: 28814 Comm: syz.2.7180 Not tainted syzkaller #0 [ 2296.675718][T28814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2296.685837][T28814] Call Trace: [ 2296.689167][T28814] [ 2296.692150][T28814] dump_stack_lvl+0x18c/0x250 [ 2296.696902][T28814] ? show_regs_print_info+0x20/0x20 [ 2296.702154][T28814] ? load_image+0x420/0x420 [ 2296.706731][T28814] sysfs_warn_dup+0x8e/0xa0 [ 2296.711279][T28814] sysfs_do_create_link_sd+0xc0/0x110 [ 2296.716731][T28814] device_add_class_symlinks+0x1cf/0x240 [ 2296.722451][T28814] device_add+0x4f9/0xc40 [ 2296.726890][T28814] wiphy_register+0x1d99/0x2ac0 [ 2296.731959][T28814] ? cfg80211_event_work+0x40/0x40 [ 2296.737169][T28814] ? minstrel_ht_alloc+0x88a/0x990 [ 2296.742404][T28814] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2296.748573][T28814] ieee80211_register_hw+0x2dd8/0x3b30 [ 2296.754189][T28814] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2296.759958][T28814] ? ieee80211_tasklet_handler+0x20/0x20 [ 2296.765962][T28814] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 2296.772122][T28814] ? __debug_object_init+0xec/0x450 [ 2296.777614][T28814] ? __asan_memset+0x22/0x40 [ 2296.782319][T28814] ? __hrtimer_init+0x189/0x270 [ 2296.787725][T28814] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2296.793633][T28814] ? mac80211_hwsim_free+0x220/0x220 [ 2296.799061][T28814] ? rcu_is_watching+0x15/0xb0 [ 2296.803941][T28814] ? kstrndup+0xbd/0x140 [ 2296.808325][T28814] hwsim_new_radio_nl+0xdad/0x1a70 [ 2296.813799][T28814] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2296.819630][T28814] ? mark_lock+0x94/0x320 [ 2296.824203][T28814] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2296.830667][T28814] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2296.836916][T28814] ? lockdep_hardirqs_on+0x98/0x150 [ 2296.842281][T28814] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2296.848660][T28814] genl_family_rcv_msg_doit+0x21a/0x310 [ 2296.854311][T28814] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2296.860327][T28814] ? bpf_lsm_capable+0x9/0x10 [ 2296.865099][T28814] ? security_capable+0x89/0xb0 [ 2296.870160][T28814] genl_rcv_msg+0x611/0x7a0 [ 2296.874799][T28814] ? genl_bind+0x360/0x360 [ 2296.879310][T28814] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2296.885737][T28814] ? perf_trace_lock+0xfc/0x3b0 [ 2296.890704][T28814] netlink_rcv_skb+0x235/0x4c0 [ 2296.895544][T28814] ? genl_bind+0x360/0x360 [ 2296.900044][T28814] ? netlink_ack+0x1160/0x1160 [ 2296.904933][T28814] ? __lock_acquire+0x7d80/0x7d80 [ 2296.910069][T28814] ? down_read+0x1ac/0x2e0 [ 2296.914564][T28814] genl_rcv+0x28/0x40 [ 2296.918617][T28814] netlink_unicast+0x7b1/0x930 [ 2296.923504][T28814] netlink_sendmsg+0x8d0/0xbf0 [ 2296.928386][T28814] ? netlink_getsockopt+0x590/0x590 [ 2296.933673][T28814] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2296.939299][T28814] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2296.944742][T28814] ? security_socket_sendmsg+0x80/0xa0 [ 2296.950263][T28814] ? netlink_getsockopt+0x590/0x590 [ 2296.955541][T28814] ____sys_sendmsg+0x61b/0x980 [ 2296.960417][T28814] ? __asan_memset+0x22/0x40 [ 2296.965123][T28814] ? __sys_sendmsg_sock+0x30/0x30 [ 2296.970319][T28814] ? __import_iovec+0x5f2/0x850 [ 2296.975292][T28814] ? import_iovec+0x73/0xa0 [ 2296.979893][T28814] ___sys_sendmsg+0x2a6/0x360 [ 2296.984675][T28814] ? __sys_sendmsg+0x2b0/0x2b0 [ 2296.989726][T28814] __se_sys_sendmsg+0x1d0/0x2c0 [ 2296.994736][T28814] ? perf_trace_preemptirq_template+0x269/0x330 [ 2297.001063][T28814] ? __x64_sys_sendmsg+0x80/0x80 [ 2297.006144][T28814] ? lockdep_hardirqs_on+0x98/0x150 [ 2297.011438][T28814] do_syscall_64+0x55/0xb0 [ 2297.015948][T28814] ? clear_bhb_loop+0x40/0x90 [ 2297.020706][T28814] ? clear_bhb_loop+0x40/0x90 [ 2297.025466][T28814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2297.031437][T28814] RIP: 0033:0x7f596159e159 [ 2297.035943][T28814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2297.055610][T28814] RSP: 002b:00007f596240a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2297.064098][T28814] RAX: ffffffffffffffda RBX: 00007f5961825fa0 RCX: 00007f596159e159 [ 2297.072178][T28814] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2297.080208][T28814] RBP: 00007f596163506b R08: 0000000000000000 R09: 0000000000000000 [ 2297.088241][T28814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2297.096274][T28814] R13: 00007f5961826038 R14: 00007f5961825fa0 R15: 00007ffc3a8495c8 [ 2297.104466][T28814] [ 2297.158895][T28823] FAULT_INJECTION: forcing a failure. [ 2297.158895][T28823] name failslab, interval 1, probability 0, space 0, times 0 [ 2297.259539][T28823] CPU: 1 PID: 28823 Comm: syz.0.7183 Not tainted syzkaller #0 [ 2297.267113][T28823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2297.277233][T28823] Call Trace: [ 2297.280572][T28823] [ 2297.283566][T28823] dump_stack_lvl+0x18c/0x250 [ 2297.288324][T28823] ? show_regs_print_info+0x20/0x20 [ 2297.293553][T28823] ? load_image+0x420/0x420 [ 2297.298090][T28823] ? __lock_acquire+0x7d80/0x7d80 [ 2297.303152][T28823] should_fail_ex+0x394/0x4c0 [ 2297.307880][T28823] should_failslab+0x9/0x20 [ 2297.312438][T28823] slab_pre_alloc_hook+0x59/0x300 [ 2297.317546][T28823] ? bpf_test_init+0x9f/0x140 [ 2297.322288][T28823] ? bpf_test_init+0x9f/0x140 [ 2297.327041][T28823] __kmem_cache_alloc_node+0x53/0x250 [ 2297.332514][T28823] ? bpf_test_init+0x9f/0x140 [ 2297.337342][T28823] __kmalloc+0xa7/0x240 [ 2297.341583][T28823] bpf_test_init+0x9f/0x140 [ 2297.346156][T28823] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 2297.351597][T28823] ? __lock_acquire+0x7d80/0x7d80 [ 2297.356708][T28823] ? dev_put+0x80/0x80 [ 2297.360854][T28823] ? dev_put+0x80/0x80 [ 2297.364964][T28823] bpf_prog_test_run+0x31f/0x390 [ 2297.369945][T28823] __sys_bpf+0x49d/0x890 [ 2297.374239][T28823] ? bpf_link_show_fdinfo+0x560/0x560 [ 2297.379685][T28823] ? lock_chain_count+0x20/0x20 [ 2297.384595][T28823] __x64_sys_bpf+0x7c/0x90 [ 2297.389049][T28823] do_syscall_64+0x55/0xb0 [ 2297.393507][T28823] ? clear_bhb_loop+0x40/0x90 [ 2297.398285][T28823] ? clear_bhb_loop+0x40/0x90 [ 2297.403005][T28823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2297.408931][T28823] RIP: 0033:0x7fbfc059e159 [ 2297.413390][T28823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2297.433082][T28823] RSP: 002b:00007fbfc14a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2297.441555][T28823] RAX: ffffffffffffffda RBX: 00007fbfc0826090 RCX: 00007fbfc059e159 [ 2297.449579][T28823] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2297.457580][T28823] RBP: 00007fbfc14a0090 R08: 0000000000000000 R09: 0000000000000000 [ 2297.465581][T28823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2297.473579][T28823] R13: 00007fbfc0826128 R14: 00007fbfc0826090 R15: 00007fffa1626788 [ 2297.481622][T28823] [ 2297.709469][T28825] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.7184'. [ 2297.744370][T28825] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.7184'. [ 2297.782550][T28825] tipc: Started in network mode [ 2297.814348][T28825] tipc: Node identity b, cluster identity 73 [ 2297.837946][T28825] tipc: Node number set to 11 [ 2298.017409][T28830] netlink: 'syz.3.7186': attribute type 10 has an invalid length. [ 2298.663489][T28830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2298.687402][T28830] team0: Port device bond0 added [ 2298.963891][T28853] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.7190'. [ 2298.996662][T28853] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.7190'. [ 2299.041910][T28855] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.7198'. [ 2299.065775][T28855] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.7198'. [ 2299.387476][T28859] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7191'. [ 2300.044771][T28866] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7195'. [ 2300.299125][T28866] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2300.322289][T28866] CPU: 0 PID: 28866 Comm: syz.2.7195 Not tainted syzkaller #0 [ 2300.329850][T28866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2300.339962][T28866] Call Trace: [ 2300.343286][T28866] [ 2300.346266][T28866] dump_stack_lvl+0x18c/0x250 [ 2300.351019][T28866] ? show_regs_print_info+0x20/0x20 [ 2300.356294][T28866] ? load_image+0x420/0x420 [ 2300.360858][T28866] sysfs_warn_dup+0x8e/0xa0 [ 2300.365393][T28866] sysfs_do_create_link_sd+0xc0/0x110 [ 2300.370814][T28866] device_add_class_symlinks+0x1cf/0x240 [ 2300.376566][T28866] device_add+0x4f9/0xc40 [ 2300.380926][T28866] wiphy_register+0x1d99/0x2ac0 [ 2300.385860][T28866] ? cfg80211_event_work+0x40/0x40 [ 2300.391023][T28866] ? minstrel_ht_alloc+0x88a/0x990 [ 2300.396202][T28866] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2300.402329][T28866] ieee80211_register_hw+0x2dd8/0x3b30 [ 2300.407865][T28866] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2300.413478][T28866] ? ieee80211_tasklet_handler+0x20/0x20 [ 2300.419176][T28866] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2300.425161][T28866] ? __debug_object_init+0xec/0x450 [ 2300.430415][T28866] ? __asan_memset+0x22/0x40 [ 2300.435076][T28866] ? __hrtimer_init+0x189/0x270 [ 2300.439955][T28866] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2300.445812][T28866] ? mac80211_hwsim_free+0x220/0x220 [ 2300.451110][T28866] ? rcu_is_watching+0x15/0xb0 [ 2300.455893][T28866] ? kstrndup+0xbd/0x140 [ 2300.460167][T28866] hwsim_new_radio_nl+0xdad/0x1a70 [ 2300.465311][T28866] ? mark_lock+0x94/0x320 [ 2300.469667][T28866] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2300.476025][T28866] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2300.482202][T28866] ? lockdep_hardirqs_on+0x98/0x150 [ 2300.487417][T28866] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2300.493635][T28866] genl_family_rcv_msg_doit+0x21a/0x310 [ 2300.499264][T28866] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2300.505210][T28866] ? bpf_lsm_capable+0x9/0x10 [ 2300.509912][T28866] ? security_capable+0x89/0xb0 [ 2300.514787][T28866] genl_rcv_msg+0x611/0x7a0 [ 2300.519339][T28866] ? genl_bind+0x360/0x360 [ 2300.523772][T28866] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2300.530152][T28866] netlink_rcv_skb+0x235/0x4c0 [ 2300.534931][T28866] ? genl_bind+0x360/0x360 [ 2300.539363][T28866] ? netlink_ack+0x1160/0x1160 [ 2300.544158][T28866] ? down_read+0x61/0x2e0 [ 2300.548514][T28866] ? down_read+0x1ac/0x2e0 [ 2300.552946][T28866] genl_rcv+0x28/0x40 [ 2300.556955][T28866] netlink_unicast+0x7b1/0x930 [ 2300.561749][T28866] netlink_sendmsg+0x8d0/0xbf0 [ 2300.566536][T28866] ? netlink_getsockopt+0x590/0x590 [ 2300.571756][T28866] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2300.577328][T28866] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2300.582731][T28866] ? security_socket_sendmsg+0x80/0xa0 [ 2300.588204][T28866] ? netlink_getsockopt+0x590/0x590 [ 2300.593438][T28866] ____sys_sendmsg+0x61b/0x980 [ 2300.598226][T28866] ? __asan_memset+0x22/0x40 [ 2300.602837][T28866] ? __sys_sendmsg_sock+0x30/0x30 [ 2300.607875][T28866] ? __import_iovec+0x5f2/0x850 [ 2300.612787][T28866] ? import_iovec+0x73/0xa0 [ 2300.617317][T28866] ___sys_sendmsg+0x2a6/0x360 [ 2300.622016][T28866] ? __sys_sendmsg+0x2b0/0x2b0 [ 2300.626818][T28866] ? ktime_get+0x7f/0x280 [ 2300.631190][T28866] __se_sys_sendmsg+0x1d0/0x2c0 [ 2300.636080][T28866] ? perf_trace_preemptirq_template+0x269/0x330 [ 2300.642454][T28866] ? __x64_sys_sendmsg+0x80/0x80 [ 2300.647441][T28866] ? lockdep_hardirqs_on+0x98/0x150 [ 2300.652665][T28866] do_syscall_64+0x55/0xb0 [ 2300.657114][T28866] ? clear_bhb_loop+0x40/0x90 [ 2300.661831][T28866] ? clear_bhb_loop+0x40/0x90 [ 2300.666530][T28866] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2300.672440][T28866] RIP: 0033:0x7f596159e159 [ 2300.676879][T28866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2300.696596][T28866] RSP: 002b:00007f596240a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2300.705117][T28866] RAX: ffffffffffffffda RBX: 00007f5961825fa0 RCX: 00007f596159e159 [ 2300.713102][T28866] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2300.721081][T28866] RBP: 00007f596163506b R08: 0000000000000000 R09: 0000000000000000 [ 2300.729063][T28866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2300.737133][T28866] R13: 00007f5961826038 R14: 00007f5961825fa0 R15: 00007ffc3a8495c8 [ 2300.745139][T28866] [ 2300.850015][T28880] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7199'. [ 2300.920210][T28885] FAULT_INJECTION: forcing a failure. [ 2300.920210][T28885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2300.938424][T28885] CPU: 1 PID: 28885 Comm: syz.1.7200 Not tainted syzkaller #0 [ 2300.945958][T28885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2300.956062][T28885] Call Trace: [ 2300.959407][T28885] [ 2300.962367][T28885] dump_stack_lvl+0x18c/0x250 [ 2300.967096][T28885] ? show_regs_print_info+0x20/0x20 [ 2300.972339][T28885] ? load_image+0x420/0x420 [ 2300.976889][T28885] ? __might_fault+0xaa/0x120 [ 2300.981706][T28885] ? __lock_acquire+0x7d80/0x7d80 [ 2300.986793][T28885] should_fail_ex+0x394/0x4c0 [ 2300.991527][T28885] _copy_from_user+0x2f/0xe0 [ 2300.996166][T28885] ___sys_sendmsg+0x1c7/0x360 [ 2301.000894][T28885] ? __sys_sendmsg+0x2b0/0x2b0 [ 2301.005679][T28885] ? perf_trace_preemptirq_template+0xac/0x330 [ 2301.011959][T28885] ? irqentry_enter+0x37/0x50 [ 2301.016687][T28885] __se_sys_sendmsg+0x1d0/0x2c0 [ 2301.021571][T28885] ? __x64_sys_sendmsg+0x80/0x80 [ 2301.026613][T28885] ? lockdep_hardirqs_on+0x98/0x150 [ 2301.031832][T28885] do_syscall_64+0x55/0xb0 [ 2301.036266][T28885] ? clear_bhb_loop+0x40/0x90 [ 2301.040962][T28885] ? clear_bhb_loop+0x40/0x90 [ 2301.045662][T28885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2301.051579][T28885] RIP: 0033:0x7f4d9239e159 [ 2301.056010][T28885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2301.075716][T28885] RSP: 002b:00007f4d905b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2301.084148][T28885] RAX: ffffffffffffffda RBX: 00007f4d92626180 RCX: 00007f4d9239e159 [ 2301.092133][T28885] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2301.100206][T28885] RBP: 00007f4d905b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2301.108292][T28885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2301.116293][T28885] R13: 00007f4d92626218 R14: 00007f4d92626180 R15: 00007ffffb0a5a98 [ 2301.124291][T28885] [ 2301.576276][T28892] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7204'. [ 2301.640196][T28894] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.7203'. [ 2301.671843][T28894] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.7203'. [ 2302.325508][T28905] syzkaller0: entered promiscuous mode [ 2302.331327][T28905] syzkaller0: entered allmulticast mode [ 2305.184619][T28914] netlink: 'syz.2.7210': attribute type 10 has an invalid length. [ 2305.298402][T28918] netlink: 'syz.1.7211': attribute type 10 has an invalid length. [ 2305.310335][T28918] __nla_validate_parse: 3 callbacks suppressed [ 2305.310353][T28918] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7211'. [ 2305.613903][T28930] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.7216'. [ 2305.679358][T28928] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7218'. [ 2305.697316][T28930] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.7216'. [ 2306.399650][T28946] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.7223'. [ 2306.439272][T28946] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 2306.942230][T28954] syzkaller0: entered promiscuous mode [ 2306.947989][T28954] syzkaller0: entered allmulticast mode [ 2306.975347][T28956] netlink: 'syz.0.7227': attribute type 10 has an invalid length. [ 2306.995065][T28958] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7228'. [ 2307.070738][T28956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2307.087349][T28956] team0: Port device bond0 added [ 2307.440852][T28971] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.7230'. [ 2309.723923][T28971] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.7230'. [ 2310.335838][T28987] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7238'. [ 2310.488736][T28993] syzkaller0: entered promiscuous mode [ 2310.538308][T28993] syzkaller0: entered allmulticast mode [ 2310.581123][T27389] syzkaller0: tun_net_xmit 48 [ 2310.687183][T28998] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.7241'. [ 2310.702391][T28998] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.7241'. [ 2310.805257][T28993] syzkaller0: create flow: hash 321506730 index 1 [ 2310.867121][T29000] syzkaller0: entered promiscuous mode [ 2310.879791][T29000] syzkaller0: entered allmulticast mode [ 2311.602712][T20900] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2311.623190][T20900] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2311.635301][T20900] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2311.664642][T20900] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2311.693603][T20900] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2311.701015][T20900] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2313.604590][T28992] syzkaller0: delete flow: hash 321506730 index 1 [ 2313.756417][T13243] Bluetooth: hci2: command tx timeout [ 2315.837751][T13243] Bluetooth: hci2: command tx timeout [ 2316.006145][T29022] FAULT_INJECTION: forcing a failure. [ 2316.006145][T29022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2316.019396][T29022] CPU: 1 PID: 29022 Comm: syz.3.7246 Not tainted syzkaller #0 [ 2316.026905][T29022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2316.037098][T29022] Call Trace: [ 2316.040440][T29022] [ 2316.043416][T29022] dump_stack_lvl+0x18c/0x250 [ 2316.048159][T29022] ? show_regs_print_info+0x20/0x20 [ 2316.053411][T29022] ? load_image+0x420/0x420 [ 2316.058226][T29022] ? __lock_acquire+0x7d80/0x7d80 [ 2316.063309][T29022] should_fail_ex+0x394/0x4c0 [ 2316.068048][T29022] _copy_from_user+0x2f/0xe0 [ 2316.072700][T29022] __copy_msghdr+0x388/0x560 [ 2316.077379][T29022] ___sys_sendmsg+0x214/0x360 [ 2316.082112][T29022] ? get_pid_task+0x20/0x1e0 [ 2316.086735][T29022] ? __sys_sendmsg+0x2b0/0x2b0 [ 2316.091566][T29022] ? __lock_acquire+0x7d80/0x7d80 [ 2316.096631][T29022] __se_sys_sendmsg+0x1d0/0x2c0 [ 2316.101502][T29022] ? __x64_sys_sendmsg+0x80/0x80 [ 2316.106471][T29022] ? lockdep_hardirqs_on+0x98/0x150 [ 2316.111687][T29022] do_syscall_64+0x55/0xb0 [ 2316.116218][T29022] ? clear_bhb_loop+0x40/0x90 [ 2316.120957][T29022] ? clear_bhb_loop+0x40/0x90 [ 2316.125690][T29022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2316.131610][T29022] RIP: 0033:0x7febb2d9e159 [ 2316.136048][T29022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2316.155780][T29022] RSP: 002b:00007febb3ccc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2316.164472][T29022] RAX: ffffffffffffffda RBX: 00007febb3025fa0 RCX: 00007febb2d9e159 [ 2316.172486][T29022] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2316.180488][T29022] RBP: 00007febb3ccc090 R08: 0000000000000000 R09: 0000000000000000 [ 2316.188498][T29022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2316.196493][T29022] R13: 00007febb3026038 R14: 00007febb3025fa0 R15: 00007ffe3aa3fd58 [ 2316.204513][T29022] [ 2316.299045][T29026] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.7247'. [ 2316.500288][T22955] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2316.548923][T29029] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7248'. [ 2316.609002][T29030] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.7250'. [ 2316.647880][T29030] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.7250'. [ 2316.827632][T22955] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2316.867499][T29012] chnl_net:caif_netlink_parms(): no params data found [ 2316.966582][T22955] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2317.086954][T29040] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7253'. [ 2317.166319][T22955] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2317.921656][T13243] Bluetooth: hci2: command tx timeout [ 2319.477196][T29040] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2319.485530][T29040] CPU: 1 PID: 29040 Comm: syz.2.7253 Not tainted syzkaller #0 [ 2319.493030][T29040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2319.503106][T29040] Call Trace: [ 2319.506403][T29040] [ 2319.509358][T29040] dump_stack_lvl+0x18c/0x250 [ 2319.514073][T29040] ? show_regs_print_info+0x20/0x20 [ 2319.519329][T29040] ? load_image+0x420/0x420 [ 2319.523865][T29040] sysfs_warn_dup+0x8e/0xa0 [ 2319.528476][T29040] sysfs_do_create_link_sd+0xc0/0x110 [ 2319.533957][T29040] device_add_class_symlinks+0x1cf/0x240 [ 2319.539612][T29040] device_add+0x4f9/0xc40 [ 2319.543965][T29040] wiphy_register+0x1d99/0x2ac0 [ 2319.548857][T29040] ? cfg80211_event_work+0x40/0x40 [ 2319.553989][T29040] ? minstrel_ht_alloc+0x88a/0x990 [ 2319.559150][T29040] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2319.565240][T29040] ieee80211_register_hw+0x2dd8/0x3b30 [ 2319.570734][T29040] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2319.576401][T29040] ? ieee80211_tasklet_handler+0x20/0x20 [ 2319.582058][T29040] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2319.587974][T29040] ? __debug_object_init+0xec/0x450 [ 2319.593233][T29040] ? __asan_memset+0x22/0x40 [ 2319.597848][T29040] ? __hrtimer_init+0x189/0x270 [ 2319.602720][T29040] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2319.608467][T29040] ? lock_chain_count+0x20/0x20 [ 2319.613352][T29040] ? mac80211_hwsim_free+0x220/0x220 [ 2319.618650][T29040] ? kstrndup+0xaf/0x140 [ 2319.622916][T29040] ? kstrndup+0xbd/0x140 [ 2319.627190][T29040] hwsim_new_radio_nl+0xdad/0x1a70 [ 2319.632334][T29040] ? __nla_validate+0x50/0x50 [ 2319.637043][T29040] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2319.643401][T29040] ? __nla_parse+0x40/0x50 [ 2319.647847][T29040] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2319.654205][T29040] genl_family_rcv_msg_doit+0x21a/0x310 [ 2319.659777][T29040] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2319.665698][T29040] ? bpf_lsm_capable+0x9/0x10 [ 2319.670388][T29040] ? security_capable+0x89/0xb0 [ 2319.675266][T29040] genl_rcv_msg+0x611/0x7a0 [ 2319.679791][T29040] ? genl_bind+0x360/0x360 [ 2319.684224][T29040] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2319.690591][T29040] netlink_rcv_skb+0x235/0x4c0 [ 2319.695374][T29040] ? genl_bind+0x360/0x360 [ 2319.700177][T29040] ? netlink_ack+0x1160/0x1160 [ 2319.704988][T29040] ? down_read+0x1ac/0x2e0 [ 2319.709524][T29040] genl_rcv+0x28/0x40 [ 2319.713542][T29040] netlink_unicast+0x7b1/0x930 [ 2319.718363][T29040] netlink_sendmsg+0x8d0/0xbf0 [ 2319.723153][T29040] ? lockdep_hardirqs_on+0x98/0x150 [ 2319.728366][T29040] ? netlink_getsockopt+0x590/0x590 [ 2319.733602][T29040] ? netlink_getsockopt+0x590/0x590 [ 2319.738821][T29040] ? netlink_getsockopt+0x590/0x590 [ 2319.744039][T29040] ____sys_sendmsg+0x61b/0x980 [ 2319.748829][T29040] ? __asan_memset+0x22/0x40 [ 2319.753450][T29040] ? __sys_sendmsg_sock+0x30/0x30 [ 2319.758498][T29040] ? __import_iovec+0x5f2/0x850 [ 2319.763381][T29040] ? import_iovec+0x73/0xa0 [ 2319.767907][T29040] ___sys_sendmsg+0x2a6/0x360 [ 2319.772609][T29040] ? __sys_sendmsg+0x2b0/0x2b0 [ 2319.777438][T29040] __se_sys_sendmsg+0x1d0/0x2c0 [ 2319.782422][T29040] ? __x64_sys_sendmsg+0x80/0x80 [ 2319.787401][T29040] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2319.793321][T29040] do_syscall_64+0x55/0xb0 [ 2319.797754][T29040] ? clear_bhb_loop+0x40/0x90 [ 2319.802456][T29040] ? clear_bhb_loop+0x40/0x90 [ 2319.807154][T29040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2319.813068][T29040] RIP: 0033:0x7f596159e159 [ 2319.817504][T29040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2319.837213][T29040] RSP: 002b:00007f596240a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2319.845661][T29040] RAX: ffffffffffffffda RBX: 00007f5961825fa0 RCX: 00007f596159e159 [ 2319.853649][T29040] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2319.861649][T29040] RBP: 00007f596163506b R08: 0000000000000000 R09: 0000000000000000 [ 2319.869717][T29040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2319.877719][T29040] R13: 00007f5961826038 R14: 00007f5961825fa0 R15: 00007ffc3a8495c8 [ 2319.885745][T29040] [ 2319.991684][T13243] Bluetooth: hci2: command tx timeout [ 2320.019514][T29012] bridge0: port 1(bridge_slave_0) entered blocking state [ 2320.026834][T29012] bridge0: port 1(bridge_slave_0) entered disabled state [ 2320.034380][T29012] bridge_slave_0: entered allmulticast mode [ 2320.041849][T29012] bridge_slave_0: entered promiscuous mode [ 2320.051950][T29012] bridge0: port 2(bridge_slave_1) entered blocking state [ 2320.059821][T29012] bridge0: port 2(bridge_slave_1) entered disabled state [ 2320.067162][T29012] bridge_slave_1: entered allmulticast mode [ 2320.075329][T29012] bridge_slave_1: entered promiscuous mode [ 2320.163021][T29012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2320.186754][T29012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2320.348878][T29012] team0: Port device team_slave_0 added [ 2320.393518][T29012] team0: Port device team_slave_1 added [ 2320.498729][T22955] tipc: Left network mode [ 2320.624622][T29062] syzkaller0: entered promiscuous mode [ 2320.630144][T29062] syzkaller0: entered allmulticast mode [ 2320.638928][T27394] syzkaller0: tun_net_xmit 48 [ 2320.687414][T22955] bridge0: port 3(ip6gretap0) entered disabled state [ 2320.737229][T22955] ip6gretap0 (unregistering): left allmulticast mode [ 2320.744161][T22955] ip6gretap0 (unregistering): left promiscuous mode [ 2320.751073][T22955] bridge0: port 3(ip6gretap0) entered disabled state [ 2320.771241][T29012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2320.779468][T29012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2320.807399][T29012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2320.823000][T29071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7258'. [ 2320.862910][T29012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2320.870003][T29012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2320.898087][T29012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2320.916619][T29071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7258'. [ 2321.359254][T29081] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7259'. [ 2323.539227][T29072] batadv0: entered promiscuous mode [ 2323.572035][T29070] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7258'. [ 2323.864939][T29012] hsr_slave_0: entered promiscuous mode [ 2323.888009][T29099] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.7260'. [ 2323.892491][T29012] hsr_slave_1: entered promiscuous mode [ 2323.926139][T29012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2323.939643][T29012] Cannot create hsr debugfs directory [ 2324.095302][T29099] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.7260'. [ 2324.812531][T29110] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7264'. [ 2324.998359][T29110] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2325.101303][T29128] netlink: 'syz.2.7266': attribute type 29 has an invalid length. [ 2325.185188][T29128] netlink: 'syz.2.7266': attribute type 29 has an invalid length. [ 2325.216702][T29129] netlink: 'syz.2.7266': attribute type 29 has an invalid length. [ 2325.385061][T29131] netlink: 'syz.2.7266': attribute type 29 has an invalid length. [ 2325.827325][T29131] netlink: 'syz.2.7266': attribute type 29 has an invalid length. [ 2325.867501][T29138] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7269'. [ 2326.084173][T29139] syzkaller0: entered promiscuous mode [ 2326.089754][T29139] syzkaller0: entered allmulticast mode [ 2326.308642][T22955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2326.341654][T22955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2326.366469][T22955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2326.375584][T22955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2326.400832][T22955] bridge_slave_1: left allmulticast mode [ 2326.420476][T22955] bridge_slave_1: left promiscuous mode [ 2326.440323][T22955] bridge0: port 2(bridge_slave_1) entered disabled state [ 2326.473508][T22955] bridge_slave_0: left allmulticast mode [ 2326.501220][T22955] bridge_slave_0: left promiscuous mode [ 2326.512771][T22955] bridge0: port 1(bridge_slave_0) entered disabled state [ 2326.578715][T22955] veth1_macvtap: left promiscuous mode [ 2326.591652][T22955] veth0_macvtap: left promiscuous mode [ 2326.601141][T22955] veth1_vlan: left promiscuous mode [ 2326.618569][T22955] veth0_vlan: left promiscuous mode [ 2326.978306][T29166] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.7273'. [ 2327.743958][T22955] team0 (unregistering): Port device virt_wifi0 removed [ 2328.009892][T22955] team0 (unregistering): Port device team_slave_1 removed [ 2328.067028][T22955] team0 (unregistering): Port device team_slave_0 removed [ 2328.118942][T22955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2328.178141][T22955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2328.491838][T22955] team0 (unregistering): Port device batadv0 removed [ 2328.572564][T22955] team0 (unregistering): Port device bond0 removed [ 2328.607620][T22955] bond0 (unregistering): Released all slaves [ 2328.718350][T27389] syzkaller0: tun_net_xmit 48 [ 2330.921724][T29166] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.7273'. [ 2331.427669][T29012] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2331.467566][T29012] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2331.487736][T29012] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2331.500758][T29012] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2331.662479][T29012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2331.730332][T29012] 8021q: adding VLAN 0 to HW filter on device team0 [ 2331.792633][T22956] bridge0: port 1(bridge_slave_0) entered blocking state [ 2331.800011][T22956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2331.824359][T29179] netlink: 'syz.0.7283': attribute type 29 has an invalid length. [ 2331.859765][T29179] netlink: 'syz.0.7283': attribute type 29 has an invalid length. [ 2331.896841][T22956] bridge0: port 2(bridge_slave_1) entered blocking state [ 2331.904146][T22956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2331.918505][T29183] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7276'. [ 2331.944041][T29185] netlink: 'syz.0.7283': attribute type 29 has an invalid length. [ 2331.996504][T29188] netlink: 'syz.0.7283': attribute type 29 has an invalid length. [ 2332.099536][T29183] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2332.114171][T29183] CPU: 1 PID: 29183 Comm: syz.3.7276 Not tainted syzkaller #0 [ 2332.121718][T29183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2332.131827][T29183] Call Trace: [ 2332.135161][T29183] [ 2332.138133][T29183] dump_stack_lvl+0x18c/0x250 [ 2332.142870][T29183] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2332.149101][T29183] ? show_regs_print_info+0x20/0x20 [ 2332.154360][T29183] ? load_image+0x420/0x420 [ 2332.158968][T29183] sysfs_warn_dup+0x8e/0xa0 [ 2332.163517][T29183] sysfs_do_create_link_sd+0xc0/0x110 [ 2332.168952][T29183] device_add_class_symlinks+0x1cf/0x240 [ 2332.174645][T29183] device_add+0x4f9/0xc40 [ 2332.179032][T29183] wiphy_register+0x1d99/0x2ac0 [ 2332.183971][T29183] ? cfg80211_event_work+0x40/0x40 [ 2332.189139][T29183] ? minstrel_ht_alloc+0x88a/0x990 [ 2332.194322][T29183] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2332.200452][T29183] ieee80211_register_hw+0x2dd8/0x3b30 [ 2332.205988][T29183] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2332.211630][T29183] ? ieee80211_tasklet_handler+0x20/0x20 [ 2332.217321][T29183] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2332.223370][T29183] ? __debug_object_init+0xec/0x450 [ 2332.228645][T29183] ? __asan_memset+0x22/0x40 [ 2332.233303][T29183] ? __hrtimer_init+0x189/0x270 [ 2332.238213][T29183] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2332.244104][T29183] ? mac80211_hwsim_free+0x220/0x220 [ 2332.249445][T29183] ? rcu_is_watching+0x15/0xb0 [ 2332.254270][T29183] ? kstrndup+0xbd/0x140 [ 2332.258593][T29183] hwsim_new_radio_nl+0xdad/0x1a70 [ 2332.263813][T29183] ? __nla_validate+0x50/0x50 [ 2332.268582][T29183] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2332.275005][T29183] ? __nla_parse+0x40/0x50 [ 2332.279585][T29183] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2332.285991][T29183] genl_family_rcv_msg_doit+0x21a/0x310 [ 2332.291684][T29183] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2332.297645][T29183] ? bpf_lsm_capable+0x9/0x10 [ 2332.302374][T29183] ? security_capable+0x89/0xb0 [ 2332.307294][T29183] genl_rcv_msg+0x611/0x7a0 [ 2332.311869][T29183] ? genl_bind+0x360/0x360 [ 2332.316350][T29183] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2332.322773][T29183] ? kasan_check_range+0x1ba/0x290 [ 2332.327951][T29183] netlink_rcv_skb+0x235/0x4c0 [ 2332.332772][T29183] ? genl_bind+0x360/0x360 [ 2332.337242][T29183] ? netlink_ack+0x1160/0x1160 [ 2332.342523][T29183] ? down_read+0x1ac/0x2e0 [ 2332.346987][T29183] genl_rcv+0x28/0x40 [ 2332.351001][T29183] netlink_unicast+0x7b1/0x930 [ 2332.355804][T29183] netlink_sendmsg+0x8d0/0xbf0 [ 2332.360596][T29183] ? netlink_getsockopt+0x590/0x590 [ 2332.365822][T29183] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2332.371428][T29183] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2332.376736][T29183] ? security_socket_sendmsg+0x80/0xa0 [ 2332.382233][T29183] ? netlink_getsockopt+0x590/0x590 [ 2332.387451][T29183] ____sys_sendmsg+0x61b/0x980 [ 2332.392243][T29183] ? __asan_memset+0x22/0x40 [ 2332.396853][T29183] ? __sys_sendmsg_sock+0x30/0x30 [ 2332.401988][T29183] ? __import_iovec+0x5f2/0x850 [ 2332.406867][T29183] ? import_iovec+0x73/0xa0 [ 2332.411410][T29183] ___sys_sendmsg+0x2a6/0x360 [ 2332.416138][T29183] ? __sys_sendmsg+0x2b0/0x2b0 [ 2332.420969][T29183] __se_sys_sendmsg+0x1d0/0x2c0 [ 2332.425843][T29183] ? __x64_sys_sendmsg+0x80/0x80 [ 2332.430838][T29183] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2332.436784][T29183] do_syscall_64+0x55/0xb0 [ 2332.441248][T29183] ? clear_bhb_loop+0x40/0x90 [ 2332.445946][T29183] ? clear_bhb_loop+0x40/0x90 [ 2332.450676][T29183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2332.456619][T29183] RIP: 0033:0x7febb2d9e159 [ 2332.461070][T29183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2332.480697][T29183] RSP: 002b:00007febb3ccc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2332.489130][T29183] RAX: ffffffffffffffda RBX: 00007febb3025fa0 RCX: 00007febb2d9e159 [ 2332.497140][T29183] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2332.505125][T29183] RBP: 00007febb2e3506b R08: 0000000000000000 R09: 0000000000000000 [ 2332.513111][T29183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2332.521133][T29183] R13: 00007febb3026038 R14: 00007febb3025fa0 R15: 00007ffe3aa3fd58 [ 2332.529137][T29183] [ 2332.608698][T29179] netlink: 'syz.0.7283': attribute type 29 has an invalid length. [ 2332.708003][T29012] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2332.719429][T29012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2332.917049][T29199] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7278'. [ 2333.684739][T29210] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7280'. [ 2333.858430][T29210] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2333.884049][T29210] CPU: 0 PID: 29210 Comm: syz.0.7280 Not tainted syzkaller #0 [ 2333.891736][T29210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2333.901966][T29210] Call Trace: [ 2333.905327][T29210] [ 2333.908344][T29210] dump_stack_lvl+0x18c/0x250 [ 2333.913182][T29210] ? show_regs_print_info+0x20/0x20 [ 2333.918511][T29210] ? load_image+0x420/0x420 [ 2333.923168][T29210] sysfs_warn_dup+0x8e/0xa0 [ 2333.927763][T29210] sysfs_do_create_link_sd+0xc0/0x110 [ 2333.933235][T29210] device_add_class_symlinks+0x1cf/0x240 [ 2333.938995][T29210] device_add+0x4f9/0xc40 [ 2333.943401][T29210] wiphy_register+0x1d99/0x2ac0 [ 2333.948372][T29210] ? cfg80211_event_work+0x40/0x40 [ 2333.953613][T29210] ? minstrel_ht_alloc+0x88a/0x990 [ 2333.958831][T29210] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2333.965046][T29210] ieee80211_register_hw+0x2dd8/0x3b30 [ 2333.970587][T29210] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2333.976206][T29210] ? ieee80211_tasklet_handler+0x20/0x20 [ 2333.981927][T29210] ? __asan_memset+0x22/0x40 [ 2333.986570][T29210] ? __hrtimer_init+0x189/0x270 [ 2333.991498][T29210] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2333.997350][T29210] ? mac80211_hwsim_free+0x220/0x220 [ 2334.002677][T29210] ? rcu_is_watching+0x15/0xb0 [ 2334.007494][T29210] ? kstrndup+0xbd/0x140 [ 2334.011821][T29210] hwsim_new_radio_nl+0xdad/0x1a70 [ 2334.017002][T29210] ? __nla_validate+0x50/0x50 [ 2334.021766][T29210] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2334.028180][T29210] ? __nla_parse+0x40/0x50 [ 2334.032742][T29210] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2334.039141][T29210] genl_family_rcv_msg_doit+0x21a/0x310 [ 2334.044754][T29210] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2334.050716][T29210] ? bpf_lsm_capable+0x9/0x10 [ 2334.055426][T29210] ? security_capable+0x89/0xb0 [ 2334.060343][T29210] genl_rcv_msg+0x611/0x7a0 [ 2334.064918][T29210] ? genl_bind+0x360/0x360 [ 2334.069402][T29210] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2334.075855][T29210] netlink_rcv_skb+0x235/0x4c0 [ 2334.080673][T29210] ? genl_bind+0x360/0x360 [ 2334.085141][T29210] ? netlink_ack+0x1160/0x1160 [ 2334.090099][T29210] ? __lock_acquire+0x7d80/0x7d80 [ 2334.095197][T29210] ? down_read+0x1ac/0x2e0 [ 2334.099750][T29210] genl_rcv+0x28/0x40 [ 2334.103861][T29210] netlink_unicast+0x7b1/0x930 [ 2334.108797][T29210] netlink_sendmsg+0x8d0/0xbf0 [ 2334.113624][T29210] ? lockdep_hardirqs_on+0x98/0x150 [ 2334.118867][T29210] ? netlink_getsockopt+0x590/0x590 [ 2334.124489][T29210] ? netlink_getsockopt+0x590/0x590 [ 2334.129832][T29210] ? netlink_getsockopt+0x590/0x590 [ 2334.135080][T29210] ____sys_sendmsg+0x61b/0x980 [ 2334.139934][T29210] ? lockdep_hardirqs_on+0x98/0x150 [ 2334.145184][T29210] ? __sys_sendmsg_sock+0x30/0x30 [ 2334.150274][T29210] ? ___sys_sendmsg+0x28b/0x360 [ 2334.155276][T29210] ___sys_sendmsg+0x2a6/0x360 [ 2334.160028][T29210] ? __sys_sendmsg+0x2b0/0x2b0 [ 2334.164999][T29210] __se_sys_sendmsg+0x1d0/0x2c0 [ 2334.169905][T29210] ? __x64_sys_sendmsg+0x80/0x80 [ 2334.174945][T29210] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2334.180889][T29210] do_syscall_64+0x55/0xb0 [ 2334.185354][T29210] ? clear_bhb_loop+0x40/0x90 [ 2334.190076][T29210] ? clear_bhb_loop+0x40/0x90 [ 2334.194804][T29210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2334.200749][T29210] RIP: 0033:0x7fbfc059e159 [ 2334.205209][T29210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2334.224852][T29210] RSP: 002b:00007fbfc14c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2334.233318][T29210] RAX: ffffffffffffffda RBX: 00007fbfc0825fa0 RCX: 00007fbfc059e159 [ 2334.241329][T29210] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2334.249367][T29210] RBP: 00007fbfc063506b R08: 0000000000000000 R09: 0000000000000000 [ 2334.257392][T29210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2334.265402][T29210] R13: 00007fbfc0826038 R14: 00007fbfc0825fa0 R15: 00007fffa1626788 [ 2334.273643][T29210] [ 2334.395718][T29224] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.7282'. [ 2334.475223][T29224] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.7282'. [ 2334.525770][T29012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2334.691077][T29012] veth0_vlan: entered promiscuous mode [ 2334.708084][T29012] veth1_vlan: entered promiscuous mode [ 2334.804991][T29012] veth0_macvtap: entered promiscuous mode [ 2334.958475][T29012] veth1_macvtap: entered promiscuous mode [ 2335.312599][T29012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2335.414515][T29242] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7285'. [ 2335.434728][T29012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2335.471430][T29012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2335.489794][T29012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2335.500169][T29012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2335.516154][T29012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2335.532938][T29012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2335.561094][T29012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2335.591434][T29012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2335.608012][T29012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2335.619308][T29012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2335.630482][T29012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2335.644805][T29012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2335.660315][T29012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2335.753824][T29012] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2335.787069][T29012] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2335.815298][T29012] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2335.830583][T29012] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2336.057774][T29248] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7289'. [ 2336.083312][ T6654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2336.111555][ T6654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2336.418048][T29257] bridge0: port 3(ip6gretap0) entered blocking state [ 2336.485831][T29257] bridge0: port 3(ip6gretap0) entered disabled state [ 2336.594551][T29257] ip6gretap0: entered allmulticast mode [ 2336.913258][T29257] ip6gretap0: entered promiscuous mode [ 2336.934059][T29257] bridge0: port 3(ip6gretap0) entered blocking state [ 2336.943339][T29257] bridge0: port 3(ip6gretap0) entered forwarding state [ 2336.977907][T27392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2336.986901][T27392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2337.146994][T29268] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7292'. [ 2337.335736][T29280] netlink: 'syz.1.7242': attribute type 10 has an invalid length. [ 2337.590297][T29280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2337.642773][T29280] team0: Port device bond0 added [ 2337.666883][T29268] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2337.691802][T29268] CPU: 1 PID: 29268 Comm: syz.3.7292 Not tainted syzkaller #0 [ 2337.699353][T29268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2337.709469][T29268] Call Trace: [ 2337.712801][T29268] [ 2337.715785][T29268] dump_stack_lvl+0x18c/0x250 [ 2337.720521][T29268] ? show_regs_print_info+0x20/0x20 [ 2337.725785][T29268] ? load_image+0x420/0x420 [ 2337.730363][T29268] sysfs_warn_dup+0x8e/0xa0 [ 2337.734925][T29268] sysfs_do_create_link_sd+0xc0/0x110 [ 2337.740353][T29268] device_add_class_symlinks+0x1cf/0x240 [ 2337.746043][T29268] device_add+0x4f9/0xc40 [ 2337.750427][T29268] wiphy_register+0x1d99/0x2ac0 [ 2337.755368][T29268] ? cfg80211_event_work+0x40/0x40 [ 2337.760773][T29268] ? minstrel_ht_alloc+0x88a/0x990 [ 2337.765973][T29268] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2337.772119][T29268] ieee80211_register_hw+0x2dd8/0x3b30 [ 2337.777668][T29268] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2337.783335][T29268] ? ieee80211_tasklet_handler+0x20/0x20 [ 2337.789024][T29268] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2337.794965][T29268] ? __debug_object_init+0xec/0x450 [ 2337.800199][T29268] ? __asan_memset+0x22/0x40 [ 2337.804818][T29268] ? __hrtimer_init+0x189/0x270 [ 2337.809712][T29268] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2337.815509][T29268] ? mac80211_hwsim_free+0x220/0x220 [ 2337.820826][T29268] ? rcu_is_watching+0x15/0xb0 [ 2337.825617][T29268] ? kstrndup+0xbd/0x140 [ 2337.829925][T29268] hwsim_new_radio_nl+0xdad/0x1a70 [ 2337.835063][T29268] ? __nla_validate+0x50/0x50 [ 2337.839776][T29268] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2337.846171][T29268] ? __nla_parse+0x40/0x50 [ 2337.850613][T29268] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2337.856973][T29268] genl_family_rcv_msg_doit+0x21a/0x310 [ 2337.862572][T29268] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2337.868646][T29268] ? bpf_lsm_capable+0x9/0x10 [ 2337.873354][T29268] ? security_capable+0x89/0xb0 [ 2337.878241][T29268] genl_rcv_msg+0x611/0x7a0 [ 2337.882958][T29268] ? genl_bind+0x360/0x360 [ 2337.887393][T29268] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2337.893745][T29268] ? lockdep_hardirqs_on+0x98/0x150 [ 2337.899058][T29268] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2337.905244][T29268] netlink_rcv_skb+0x235/0x4c0 [ 2337.910123][T29268] ? genl_bind+0x360/0x360 [ 2337.914558][T29268] ? netlink_ack+0x1160/0x1160 [ 2337.919529][T29268] ? __lock_acquire+0x7d80/0x7d80 [ 2337.924581][T29268] ? down_read+0x1ac/0x2e0 [ 2337.929039][T29268] genl_rcv+0x28/0x40 [ 2337.933076][T29268] netlink_unicast+0x7b1/0x930 [ 2337.937873][T29268] netlink_sendmsg+0x8d0/0xbf0 [ 2337.942671][T29268] ? netlink_getsockopt+0x590/0x590 [ 2337.947886][T29268] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2337.953452][T29268] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2337.959022][T29268] ? security_socket_sendmsg+0x80/0xa0 [ 2337.964492][T29268] ? netlink_getsockopt+0x590/0x590 [ 2337.969800][T29268] ____sys_sendmsg+0x61b/0x980 [ 2337.974588][T29268] ? __asan_memset+0x22/0x40 [ 2337.979198][T29268] ? __sys_sendmsg_sock+0x30/0x30 [ 2337.984241][T29268] ? __import_iovec+0x5f2/0x850 [ 2337.989125][T29268] ? import_iovec+0x73/0xa0 [ 2337.993655][T29268] ___sys_sendmsg+0x2a6/0x360 [ 2337.998362][T29268] ? __sys_sendmsg+0x2b0/0x2b0 [ 2338.003167][T29268] ? ktime_get+0x7f/0x280 [ 2338.007540][T29268] __se_sys_sendmsg+0x1d0/0x2c0 [ 2338.012409][T29268] ? perf_trace_preemptirq_template+0x269/0x330 [ 2338.018672][T29268] ? __x64_sys_sendmsg+0x80/0x80 [ 2338.023819][T29268] ? lockdep_hardirqs_on+0x98/0x150 [ 2338.029124][T29268] do_syscall_64+0x55/0xb0 [ 2338.033559][T29268] ? clear_bhb_loop+0x40/0x90 [ 2338.038344][T29268] ? clear_bhb_loop+0x40/0x90 [ 2338.043132][T29268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2338.049304][T29268] RIP: 0033:0x7febb2d9e159 [ 2338.053737][T29268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2338.073366][T29268] RSP: 002b:00007febb3ccc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2338.081917][T29268] RAX: ffffffffffffffda RBX: 00007febb3025fa0 RCX: 00007febb2d9e159 [ 2338.089906][T29268] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2338.097887][T29268] RBP: 00007febb2e3506b R08: 0000000000000000 R09: 0000000000000000 [ 2338.105889][T29268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2338.113873][T29268] R13: 00007febb3026038 R14: 00007febb3025fa0 R15: 00007ffe3aa3fd58 [ 2338.121899][T29268] [ 2338.728262][T20900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2338.740054][T20900] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2338.751824][T20900] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2338.766271][T20900] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2338.776592][T20900] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2338.789209][T20900] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2339.268151][ T6654] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2339.491858][T29314] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7299'. [ 2339.498504][T29316] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7298'. [ 2339.525132][ T6654] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.364902][ T6654] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.393480][T29318] bridge0: port 3(ip6gretap0) entered blocking state [ 2340.409948][T29318] bridge0: port 3(ip6gretap0) entered disabled state [ 2340.431010][T29318] ip6gretap0: entered allmulticast mode [ 2340.648160][T29318] ip6gretap0: entered promiscuous mode [ 2340.662790][T29318] bridge0: port 3(ip6gretap0) entered blocking state [ 2340.669726][T29318] bridge0: port 3(ip6gretap0) entered forwarding state [ 2340.768159][ T6654] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.889800][T13243] Bluetooth: hci3: command tx timeout [ 2340.985977][T29330] netlink: 'syz.3.7302': attribute type 29 has an invalid length. [ 2340.989919][T29326] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7303'. [ 2341.031262][ T6654] tipc: Left network mode [ 2341.073310][T29297] chnl_net:caif_netlink_parms(): no params data found [ 2341.126999][T29330] netlink: 'syz.3.7302': attribute type 29 has an invalid length. [ 2341.145359][T29334] netlink: 'syz.3.7302': attribute type 29 has an invalid length. [ 2341.163387][ T6654] bridge0: port 3(ip6gretap0) entered disabled state [ 2341.264029][ T6654] ip6gretap0 (unregistering): left allmulticast mode [ 2341.270824][ T6654] ip6gretap0 (unregistering): left promiscuous mode [ 2341.284526][ T6654] bridge0: port 3(ip6gretap0) entered disabled state [ 2341.333978][T29336] netlink: 'syz.3.7302': attribute type 29 has an invalid length. [ 2341.483402][T29326] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2341.690156][T29336] netlink: 'syz.3.7302': attribute type 29 has an invalid length. [ 2342.140737][T29364] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.7306'. [ 2342.238318][T29364] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.7306'. [ 2342.257823][T29297] bridge0: port 1(bridge_slave_0) entered blocking state [ 2342.267287][T29297] bridge0: port 1(bridge_slave_0) entered disabled state [ 2342.285728][T29297] bridge_slave_0: entered allmulticast mode [ 2342.302727][T29297] bridge_slave_0: entered promiscuous mode [ 2342.951477][T13243] Bluetooth: hci3: command tx timeout [ 2343.182779][T29297] bridge0: port 2(bridge_slave_1) entered blocking state [ 2343.190084][T29297] bridge0: port 2(bridge_slave_1) entered disabled state [ 2343.208683][T29297] bridge_slave_1: entered allmulticast mode [ 2343.220465][T29297] bridge_slave_1: entered promiscuous mode [ 2343.526819][T29297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2343.674805][T29297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2343.996859][T29297] team0: Port device team_slave_0 added [ 2344.086928][T29297] team0: Port device team_slave_1 added [ 2344.319512][T29297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2344.336610][T29297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2344.386745][T29297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2344.426580][T29297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2344.455051][T29297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2344.515932][T29297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2344.643914][T13243] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 2344.784857][T29297] hsr_slave_0: entered promiscuous mode [ 2344.824776][T29297] hsr_slave_1: entered promiscuous mode [ 2344.855825][T29297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2344.875259][T29297] Cannot create hsr debugfs directory [ 2345.031470][T13243] Bluetooth: hci3: command tx timeout [ 2345.115563][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.122114][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.293740][ T6654] hsr0: left allmulticast mode [ 2345.306469][ T6654] hsr_slave_0: left allmulticast mode [ 2345.315713][ T6654] hsr_slave_1: left allmulticast mode [ 2345.321965][ T6654] hsr0: left promiscuous mode [ 2345.326924][ T6654] nr0: port 1(hsr0) entered disabled state [ 2345.340267][ T6654] hsr_slave_0: left promiscuous mode [ 2345.346167][ T6654] hsr_slave_1: left promiscuous mode [ 2345.353318][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2345.360775][ T6654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2345.369036][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2345.376547][ T6654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2345.387315][ T6654] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 2345.395111][ T6654] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 2345.403267][ T6654] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 2345.410341][ T6654] batman_adv: batadv0: Removing interface: virt_wifi0 [ 2345.417996][ T6654] bridge_slave_1: left allmulticast mode [ 2345.423846][ T6654] bridge_slave_1: left promiscuous mode [ 2345.429512][ T6654] bridge0: port 2(bridge_slave_1) entered disabled state [ 2345.439204][ T6654] bridge_slave_0: left allmulticast mode [ 2345.445013][ T6654] bridge_slave_0: left promiscuous mode [ 2345.450697][ T6654] bridge0: port 1(bridge_slave_0) entered disabled state [ 2345.470831][ T6654] veth1_macvtap: left promiscuous mode [ 2345.476522][ T6654] veth0_macvtap: left promiscuous mode [ 2345.482253][ T6654] veth1_vlan: left promiscuous mode [ 2345.488501][ T6654] veth0_vlan: left promiscuous mode [ 2346.238708][ T6654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2346.293558][ T6654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2346.660071][ T6654] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2346.695317][ T6654] bond0 (unregistering): Released all slaves [ 2347.126597][T13243] Bluetooth: hci3: command tx timeout [ 2347.730085][T29297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2347.777761][T29297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2347.810647][T29297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2347.859050][T29297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2348.802633][T29297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2348.979246][T29297] 8021q: adding VLAN 0 to HW filter on device team0 [ 2349.067646][T27392] bridge0: port 1(bridge_slave_0) entered blocking state [ 2349.074912][T27392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2349.195700][ T6654] bridge0: port 2(bridge_slave_1) entered blocking state [ 2349.202976][ T6654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2349.427362][T29297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2350.156262][T29297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2351.194778][T29297] veth0_vlan: entered promiscuous mode [ 2351.338426][T29297] veth1_vlan: entered promiscuous mode [ 2351.445609][T29297] veth0_macvtap: entered promiscuous mode [ 2351.465390][T29297] veth1_macvtap: entered promiscuous mode [ 2351.514101][T29297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2351.549901][T29297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2351.571899][T29297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2351.582519][T29297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2351.611417][T29297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2351.631644][T29297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2351.652465][T29297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2351.691880][T29297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2351.714591][T29297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2351.745554][T29297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2351.777280][T29297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2351.820927][T29297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2351.841620][T29297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2351.853835][T29297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2351.866674][T29297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2351.876430][T29297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2351.885369][T29297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2351.894575][T29297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2352.117800][T27389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2352.152154][T27389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2352.266681][T27392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2352.285386][T27392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2353.132137][T13243] Bluetooth: hci2: unexpected event 0x3d length: 15 > 14 [ 2354.241051][T13243] Bluetooth: hci0: unexpected event 0x3d length: 15 > 14 [ 2355.256949][T29613] syzkaller0: entered promiscuous mode [ 2355.273220][T29613] syzkaller0: entered allmulticast mode [ 2357.810137][T13243] Bluetooth: hci1: unexpected event 0x3d length: 15 > 14 [ 2358.104595][T29636] can: request_module (can-proto-0) failed. [ 2358.515906][T13243] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 2360.085722][T29672] mac80211_hwsim hwsim702 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2360.560969][T13243] Bluetooth: hci1: command 0x0406 tx timeout [ 2361.194128][T20900] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 2362.311839][ T6654] wlan1: Trigger new scan to find an IBSS to join [ 2362.958858][T29710] wg2: entered promiscuous mode [ 2362.991495][T29710] wg2: entered allmulticast mode [ 2365.351911][ T6654] wlan1: Trigger new scan to find an IBSS to join [ 2367.608902][T13243] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 2368.314634][T22955] wlan1: Creating new IBSS network, BSSID 26:1a:34:0f:28:c7 [ 2369.569395][T29764] tun0: tun_chr_ioctl cmd 1074025672 [ 2369.575009][T29764] tun0: ignored: set checksum enabled [ 2369.671624][T20900] Bluetooth: hci1: command 0x0406 tx timeout [ 2374.188504][T29899] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2374.236856][T29899] syzkaller0: linktype set to 6 [ 2374.398583][T29894] syzkaller0: tun_chr_ioctl cmd 35108 [ 2375.221671][T13243] Bluetooth: hci2: unexpected subevent 0x06 length: 150 > 10 [ 2377.271730][T13243] Bluetooth: hci2: command tx timeout [ 2377.391185][T13243] Bluetooth: hci3: Malformed LE Event: 0x0d [ 2378.824875][T29986] ------------[ cut here ]------------ [ 2378.830743][T29986] backtracing misuse [ 2378.844268][T29982] syzkaller0: entered promiscuous mode [ 2378.880276][T29986] WARNING: CPU: 1 PID: 29986 at kernel/bpf/verifier.c:4381 __mark_chain_precision+0x59c2/0x60f0 [ 2378.891563][T29986] Modules linked in: [ 2378.895832][T29986] CPU: 1 PID: 29986 Comm: syz.3.7506 Not tainted syzkaller #0 [ 2378.901665][T29982] syzkaller0: entered allmulticast mode [ 2378.903562][T29986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2378.920452][T29986] RIP: 0010:__mark_chain_precision+0x59c2/0x60f0 [ 2378.927072][T29986] Code: 8c 07 ff ff ff 4c 89 ff e8 bb fb 47 00 e9 fa fe ff ff e8 51 6f ef ff c6 05 1a 96 de 0c 01 48 c7 c7 c0 a6 d0 8a e8 3e 33 b9 ff <0f> 0b b8 f2 ff ff ff e9 25 f4 ff ff e8 2d 6f ef ff e9 19 f4 ff ff [ 2378.951478][T29986] RSP: 0018:ffffc9000d6ded00 EFLAGS: 00010246 [ 2378.957944][T29986] RAX: 48b9dc864b556b00 RBX: 0000000000000006 RCX: 0000000000080000 [ 2378.966173][T29986] RDX: ffffc90010532000 RSI: 0000000000005889 RDI: 000000000000588a [ 2378.974599][T29986] RBP: ffffc9000d6deef0 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 2378.982855][T29986] R10: dffffc0000000000 R11: ffffed10171e518b R12: 0000000000000001 [ 2378.991014][T29986] R13: dffffc0000000000 R14: ffff888021cd2350 R15: 0000000000000001 [ 2378.999344][T29986] FS: 00007febb3cab6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2379.008768][T29986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2379.015758][T29986] CR2: 00007febb2deb840 CR3: 000000005953a000 CR4: 00000000003506e0 [ 2379.024636][T29986] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 2379.037353][T29986] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2379.049785][T29986] Call Trace: [ 2379.053460][T29986] [ 2379.056753][T29986] ? mark_chain_precision+0x20/0x20 [ 2379.062432][T29986] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 2379.068420][T29986] ? print_verifier_state+0x2e70/0x2e70 [ 2379.074387][T29986] ? mark_chain_precision+0x20/0x20 [ 2379.080017][T29986] ? update_loop_inline_state+0x1c2/0x530 [ 2379.086221][T29986] check_helper_call+0x42d3/0x6340 [ 2379.091804][T29986] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 2379.097913][T29986] ? check_kfunc_call+0x4ca0/0x4ca0 [ 2379.103644][T29986] do_check+0x87fb/0xd0a0 [ 2379.108410][T29986] ? __stack_depot_save+0x1f/0x660 [ 2379.114376][T29986] ? __sys_bpf+0x5ba/0x890 [ 2379.119077][T29986] ? __x64_sys_bpf+0x7c/0x90 [ 2379.124304][T29986] ? init_func_state+0x2d10/0x2d10 [ 2379.129523][T29986] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 2379.135373][T29986] ? print_verifier_state+0x2e70/0x2e70 [ 2379.141411][T29986] ? btf_check_subprog_arg_match+0x216/0x2a0 [ 2379.152862][T29986] do_check_common+0xacc/0x1410 [ 2379.158016][T29986] bpf_check+0x65df/0xec40 [ 2379.162982][T29986] ? __lock_acquire+0x1336/0x7d80 [ 2379.168175][T29986] ? bpf_get_btf_vmlinux+0x20/0x20 [ 2379.173480][T29986] ? __lock_acquire+0x1262/0x7d80 [ 2379.178700][T29986] ? mark_lock+0x94/0x320 [ 2379.183288][T29986] ? __lock_acquire+0x1336/0x7d80 [ 2379.188598][T29986] ? verify_lock_unused+0x140/0x140 [ 2379.194191][T29986] ? verify_lock_unused+0x140/0x140 [ 2379.199704][T29986] ? verify_lock_unused+0x140/0x140 [ 2379.205206][T29986] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 2379.211223][T29986] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2379.217408][T29986] ? __lock_acquire+0x7d80/0x7d80 [ 2379.222754][T29986] ? lock_chain_count+0x20/0x20 [ 2379.228025][T29986] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 2379.234446][T29986] ? lockdep_hardirqs_on+0x98/0x150 [ 2379.239862][T29986] ? ktime_get_with_offset+0x103/0x330 [ 2379.249215][T29986] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 2379.255872][T29986] ? ktime_get_real_ts64+0x440/0x440 [ 2379.261623][T29986] ? strncpy_from_user+0x13d/0x2f0 [ 2379.267039][T29986] ? bpf_obj_name_cpy+0x194/0x1e0 [ 2379.277321][T29986] bpf_prog_load+0x10fa/0x1610 [ 2379.282500][T29986] ? map_freeze+0x420/0x420 [ 2379.287416][T29986] ? __might_fault+0xaa/0x120 [ 2379.292425][T29986] ? __might_fault+0xc6/0x120 [ 2379.297342][T29986] ? __might_fault+0xaa/0x120 [ 2379.302474][T29986] ? bpf_lsm_bpf+0x9/0x10 [ 2379.307101][T29986] ? security_bpf+0x7e/0xa0 [ 2379.311898][T29986] __sys_bpf+0x5ba/0x890 [ 2379.316384][T29986] ? bpf_link_show_fdinfo+0x560/0x560 [ 2379.322135][T29986] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2379.328671][T29986] __x64_sys_bpf+0x7c/0x90 [ 2379.333515][T29986] do_syscall_64+0x55/0xb0 [ 2379.338145][T29986] ? clear_bhb_loop+0x40/0x90 [ 2379.343204][T29986] ? clear_bhb_loop+0x40/0x90 [ 2379.352294][T29986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2379.358522][T29986] RIP: 0033:0x7febb2d9e159 [ 2379.363296][T29986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2379.383385][T29986] RSP: 002b:00007febb3cab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2379.392165][T29986] RAX: ffffffffffffffda RBX: 00007febb3026090 RCX: 00007febb2d9e159 [ 2379.400351][T29986] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 2379.408606][T29986] RBP: 00007febb2e3506b R08: 0000000000000000 R09: 0000000000000000 [ 2379.416982][T29986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2379.425331][T29986] R13: 00007febb3026128 R14: 00007febb3026090 R15: 00007ffe3aa3fd58 [ 2379.433708][T29986] [ 2379.436958][T29986] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2379.444261][T29986] CPU: 1 PID: 29986 Comm: syz.3.7506 Not tainted syzkaller #0 [ 2379.451839][T29986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2379.461927][T29986] Call Trace: [ 2379.465235][T29986] [ 2379.468234][T29986] dump_stack_lvl+0x18c/0x250 [ 2379.472937][T29986] ? show_regs_print_info+0x20/0x20 [ 2379.478152][T29986] ? load_image+0x420/0x420 [ 2379.482686][T29986] panic+0x2ca/0x720 [ 2379.486600][T29986] ? bpf_jit_dump+0xd0/0xd0 [ 2379.491116][T29986] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2379.497322][T29986] ? __warn+0x16f/0x470 [ 2379.501516][T29986] __warn+0x2e0/0x470 [ 2379.505511][T29986] ? __mark_chain_precision+0x59c2/0x60f0 [ 2379.511254][T29986] ? __mark_chain_precision+0x59c2/0x60f0 [ 2379.516998][T29986] report_bug+0x2be/0x4f0 [ 2379.521419][T29986] ? __mark_chain_precision+0x59c2/0x60f0 [ 2379.527167][T29986] ? __mark_chain_precision+0x59c2/0x60f0 [ 2379.532903][T29986] ? __mark_chain_precision+0x59c4/0x60f0 [ 2379.538645][T29986] handle_bug+0xcf/0x120 [ 2379.542904][T29986] exc_invalid_op+0x1a/0x50 [ 2379.547422][T29986] asm_exc_invalid_op+0x1a/0x20 [ 2379.552288][T29986] RIP: 0010:__mark_chain_precision+0x59c2/0x60f0 [ 2379.559236][T29986] Code: 8c 07 ff ff ff 4c 89 ff e8 bb fb 47 00 e9 fa fe ff ff e8 51 6f ef ff c6 05 1a 96 de 0c 01 48 c7 c7 c0 a6 d0 8a e8 3e 33 b9 ff <0f> 0b b8 f2 ff ff ff e9 25 f4 ff ff e8 2d 6f ef ff e9 19 f4 ff ff [ 2379.578852][T29986] RSP: 0018:ffffc9000d6ded00 EFLAGS: 00010246 [ 2379.585019][T29986] RAX: 48b9dc864b556b00 RBX: 0000000000000006 RCX: 0000000000080000 [ 2379.593178][T29986] RDX: ffffc90010532000 RSI: 0000000000005889 RDI: 000000000000588a [ 2379.601242][T29986] RBP: ffffc9000d6deef0 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 2379.609233][T29986] R10: dffffc0000000000 R11: ffffed10171e518b R12: 0000000000000001 [ 2379.617238][T29986] R13: dffffc0000000000 R14: ffff888021cd2350 R15: 0000000000000001 [ 2379.625287][T29986] ? mark_chain_precision+0x20/0x20 [ 2379.630521][T29986] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 2379.636220][T29986] ? print_verifier_state+0x2e70/0x2e70 [ 2379.641783][T29986] ? mark_chain_precision+0x20/0x20 [ 2379.647017][T29986] ? update_loop_inline_state+0x1c2/0x530 [ 2379.652778][T29986] check_helper_call+0x42d3/0x6340 [ 2379.657950][T29986] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 2379.663547][T29986] ? check_kfunc_call+0x4ca0/0x4ca0 [ 2379.668784][T29986] do_check+0x87fb/0xd0a0 [ 2379.673141][T29986] ? __stack_depot_save+0x1f/0x660 [ 2379.678279][T29986] ? __sys_bpf+0x5ba/0x890 [ 2379.682707][T29986] ? __x64_sys_bpf+0x7c/0x90 [ 2379.687364][T29986] ? init_func_state+0x2d10/0x2d10 [ 2379.692519][T29986] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 2379.698094][T29986] ? print_verifier_state+0x2e70/0x2e70 [ 2379.703668][T29986] ? btf_check_subprog_arg_match+0x216/0x2a0 [ 2379.709668][T29986] do_check_common+0xacc/0x1410 [ 2379.714541][T29986] bpf_check+0x65df/0xec40 [ 2379.718992][T29986] ? __lock_acquire+0x1336/0x7d80 [ 2379.724034][T29986] ? bpf_get_btf_vmlinux+0x20/0x20 [ 2379.729159][T29986] ? __lock_acquire+0x1262/0x7d80 [ 2379.734201][T29986] ? mark_lock+0x94/0x320 [ 2379.738719][T29986] ? __lock_acquire+0x1336/0x7d80 [ 2379.743777][T29986] ? verify_lock_unused+0x140/0x140 [ 2379.748996][T29986] ? verify_lock_unused+0x140/0x140 [ 2379.754207][T29986] ? verify_lock_unused+0x140/0x140 [ 2379.759437][T29986] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 2379.765303][T29986] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2379.771305][T29986] ? __lock_acquire+0x7d80/0x7d80 [ 2379.776349][T29986] ? lock_chain_count+0x20/0x20 [ 2379.781322][T29986] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 2379.787587][T29986] ? lockdep_hardirqs_on+0x98/0x150 [ 2379.792798][T29986] ? ktime_get_with_offset+0x103/0x330 [ 2379.798281][T29986] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 2379.804567][T29986] ? ktime_get_real_ts64+0x440/0x440 [ 2379.809875][T29986] ? strncpy_from_user+0x13d/0x2f0 [ 2379.815015][T29986] ? bpf_obj_name_cpy+0x194/0x1e0 [ 2379.820066][T29986] bpf_prog_load+0x10fa/0x1610 [ 2379.824857][T29986] ? map_freeze+0x420/0x420 [ 2379.829406][T29986] ? __might_fault+0xaa/0x120 [ 2379.834111][T29986] ? __might_fault+0xc6/0x120 [ 2379.838800][T29986] ? __might_fault+0xaa/0x120 [ 2379.843600][T29986] ? bpf_lsm_bpf+0x9/0x10 [ 2379.848000][T29986] ? security_bpf+0x7e/0xa0 [ 2379.852626][T29986] __sys_bpf+0x5ba/0x890 [ 2379.857065][T29986] ? bpf_link_show_fdinfo+0x560/0x560 [ 2379.862468][T29986] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2379.868654][T29986] __x64_sys_bpf+0x7c/0x90 [ 2379.873090][T29986] do_syscall_64+0x55/0xb0 [ 2379.877544][T29986] ? clear_bhb_loop+0x40/0x90 [ 2379.882237][T29986] ? clear_bhb_loop+0x40/0x90 [ 2379.887018][T29986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2379.892934][T29986] RIP: 0033:0x7febb2d9e159 [ 2379.897365][T29986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2379.916984][T29986] RSP: 002b:00007febb3cab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2379.925502][T29986] RAX: ffffffffffffffda RBX: 00007febb3026090 RCX: 00007febb2d9e159 [ 2379.933573][T29986] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 2379.941640][T29986] RBP: 00007febb2e3506b R08: 0000000000000000 R09: 0000000000000000 [ 2379.949796][T29986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2379.957879][T29986] R13: 00007febb3026128 R14: 00007febb3026090 R15: 00007ffe3aa3fd58 [ 2379.965876][T29986] [ 2379.969209][T29986] Kernel Offset: disabled [ 2379.973646][T29986] Rebooting in 86400 seconds..